Responsible Objects: Towards Self-healing Internet ofThings Applications

Rafael Angarita

LAMSADEUniversite Paris-Dauphine

rafael.angarita@lamsade.dauphine.fr

3rd International Workshop onSelf-aware Internet of Things 2015

Rafael Angarita Self-healing IoT July 2015 1 / 21

Overview

1 Introduction

2 The Concept of Responsible Objects

3 Summary and Future Work

Rafael Angarita Self-healing IoT July 2015 2 / 21

Section 1

Introduction

Rafael Angarita Self-healing IoT July 2015 3 / 21

Introduction

The Complexity Crisis:

2001,2003: the Vision of AutonomicComputing of IBM [Kephart andChess, 2003].

2008: “Disruptive CivilTechnologies - Six TechnologiesWith Potential Impacts on USInterests Out to 2025”.

2011: the Internet of ThingsStrategic Research Roadmap[Vermesan et al., 2011].

Figure : SOA Middleware (from [Atzoriet al. 2010])

Rafael Angarita Self-healing IoT July 2015 4 / 21

Introduction

The Complexity Crisis:

2001,2003: the Vision of AutonomicComputing of IBM [Kephart andChess, 2003].

2008: “Disruptive CivilTechnologies - Six TechnologiesWith Potential Impacts on USInterests Out to 2025”.

2011: the Internet of ThingsStrategic Research Roadmap[Vermesan et al., 2011].

Figure : SOA Middleware (from [Atzoriet al. 2010])

Rafael Angarita Self-healing IoT July 2015 4 / 21

Introduction

The Complexity Crisis:

2001,2003: the Vision of AutonomicComputing of IBM [Kephart andChess, 2003].

2008: “Disruptive CivilTechnologies - Six TechnologiesWith Potential Impacts on USInterests Out to 2025”.

2011: the Internet of ThingsStrategic Research Roadmap[Vermesan et al., 2011].

Figure : SOA Middleware (from [Atzoriet al. 2010])

Rafael Angarita Self-healing IoT July 2015 4 / 21

Introduction

The Complexity Crisis:

2001,2003: the Vision of AutonomicComputing of IBM [Kephart andChess, 2003].

2008: “Disruptive CivilTechnologies - Six TechnologiesWith Potential Impacts on USInterests Out to 2025”.

2011: the Internet of ThingsStrategic Research Roadmap[Vermesan et al., 2011].

Figure : SOA Middleware (from [Atzoriet al. 2010])

Rafael Angarita Self-healing IoT July 2015 4 / 21

Application Example

Rafael Angarita Self-healing IoT July 2015 5 / 21

Research question and challenges

Research question

How can we ensure the correct, efficient, fault tolerant execution of criticalIoT applications a with minimal human intervention?

afor example, e-health or industry 4.0 applications

Challenges:

The dynamic nature of IoT application environments.

Autonomic object design to support self-healing decisions.

Rafael Angarita Self-healing IoT July 2015 6 / 21

Research question and challenges

Research question

How can we ensure the correct, efficient, fault tolerant execution of criticalIoT applications a with minimal human intervention?

afor example, e-health or industry 4.0 applications

Challenges:

The dynamic nature of IoT application environments.

Autonomic object design to support self-healing decisions.

Rafael Angarita Self-healing IoT July 2015 6 / 21

Solution

We propose the concept of responsible objects to support self-healing IoTapplications, which is an evolution of ideas taken from the research oftransactional and self-healing services.

Rafael Angarita Self-healing IoT July 2015 7 / 21

Section 2

The Concept of Responsible Objects

Rafael Angarita Self-healing IoT July 2015 8 / 21

The Concept of Responsible Objects

In our context, the duty of an object is to serve in critical applicationswhile facing unreliable and changing environments. We say that a smartobject/thing is responsible if:

It is transactional (deep-seated notion of acceptable behavior);

it has self-healing capabilities (more sophisticated behavior);

we can talk with it through its API.

Rafael Angarita Self-healing IoT July 2015 9 / 21

The Concept of Responsible Objects

In our context, the duty of an object is to serve in critical applicationswhile facing unreliable and changing environments. We say that a smartobject/thing is responsible if:

It is transactional (deep-seated notion of acceptable behavior);

it has self-healing capabilities (more sophisticated behavior);

we can talk with it through its API.

Rafael Angarita Self-healing IoT July 2015 9 / 21

The Concept of Responsible Objects

In our context, the duty of an object is to serve in critical applicationswhile facing unreliable and changing environments. We say that a smartobject/thing is responsible if:

It is transactional (deep-seated notion of acceptable behavior);

it has self-healing capabilities (more sophisticated behavior);

we can talk with it through its API.

Rafael Angarita Self-healing IoT July 2015 9 / 21

The Concept of Responsible Objects

In our context, the duty of an object is to serve in critical applicationswhile facing unreliable and changing environments. We say that a smartobject/thing is responsible if:

It is transactional (deep-seated notion of acceptable behavior);

it has self-healing capabilities (more sophisticated behavior);

we can talk with it through its API.

Rafael Angarita Self-healing IoT July 2015 9 / 21

Transactional Model

Transactional properties [El Haddad et al., 2010].

pivot (p): an operation is pivot, if once it successfully completes, itseffects remain forever and cannot be undone; if it fails, it has noeffect at all;

compensable (c): an operation is compensable, if it exists anotheroperation which can undo its execution;

retriable (r): an operation is retriable, if it guarantees a successfultermination after a finite number of invocations.

The retriable property can be combined with properties p and c definingpivot retriable (pr) and compensable retriable (cr) operations.

Rafael Angarita Self-healing IoT July 2015 10 / 21

Transactional Model

Transactional properties [El Haddad et al., 2010].

pivot (p): an operation is pivot, if once it successfully completes, itseffects remain forever and cannot be undone; if it fails, it has noeffect at all;

compensable (c): an operation is compensable, if it exists anotheroperation which can undo its execution;

retriable (r): an operation is retriable, if it guarantees a successfultermination after a finite number of invocations.

The retriable property can be combined with properties p and c definingpivot retriable (pr) and compensable retriable (cr) operations.

Rafael Angarita Self-healing IoT July 2015 10 / 21

Transactional Model

Transactional properties [El Haddad et al., 2010].

pivot (p): an operation is pivot, if once it successfully completes, itseffects remain forever and cannot be undone; if it fails, it has noeffect at all;

compensable (c): an operation is compensable, if it exists anotheroperation which can undo its execution;

retriable (r): an operation is retriable, if it guarantees a successfultermination after a finite number of invocations.

The retriable property can be combined with properties p and c definingpivot retriable (pr) and compensable retriable (cr) operations.

Rafael Angarita Self-healing IoT July 2015 10 / 21

Transactional Model

Transactional properties [El Haddad et al., 2010].

pivot (p): an operation is pivot, if once it successfully completes, itseffects remain forever and cannot be undone; if it fails, it has noeffect at all;

compensable (c): an operation is compensable, if it exists anotheroperation which can undo its execution;

retriable (r): an operation is retriable, if it guarantees a successfultermination after a finite number of invocations.

The retriable property can be combined with properties p and c definingpivot retriable (pr) and compensable retriable (cr) operations.

Rafael Angarita Self-healing IoT July 2015 10 / 21

Transactional ModelRecovery mechanisms based on transactional properties:

Figure : Recovery Mechanisms

Rafael Angarita Self-healing IoT July 2015 11 / 21

Self-healing states

We propose to use the following self-healing model as a framework:

Figure : Self-healing States (from [Ghosh et al., 2007])

Rafael Angarita Self-healing IoT July 2015 12 / 21

Self-healing Staged Loop

Figure : Self-healing loop: detection, diagnosis, and recovery.

Rafael Angarita Self-healing IoT July 2015 13 / 21

Self- and Context-knowledgeOnly possible by being self- and context-aware:

Rafael Angarita Self-healing IoT July 2015 14 / 21

General ArchitectureThis leads us to an agent-like architecture;

Figure : Virtual Object General Architecture

Rafael Angarita Self-healing IoT July 2015 15 / 21

Self-healing State Transition Rules 1

Now, we can just Tell the following health related rules to objects:

∃QoSi ∈ QoS |◦QoSi > ◦≈QoSi

DegradedQoS

∃QoSi ∈ QoS |◦QoSi > θQoSi

TimeoutQoS

TimeoutQoSRstate1 :BROKEN

¬TimeoutQoS

γstate = XRstate2 :DEGRADED

DegradedQoSRstate3 :DEGRADED

γstate = CRstate4 :NORMAL

γstate = D

¬DegradedQoSRstate5 :NORMAL

...but who Tells those rules to each individual object?

1Rules to take actions were left out of this presentationRafael Angarita Self-healing IoT July 2015 16 / 21

Application Supervisor

Figure : Critical Application ModelRafael Angarita Self-healing IoT July 2015 17 / 21

Section 3

Summary and Future Work

Rafael Angarita Self-healing IoT July 2015 18 / 21

Summary

We presented our motivation for building self-healing IoT applications.

Our interest lies specially in the context of critical systems.

We introduced the concept of responsible objects and its architecture.This concepts combine transactional and self-healing properties, andan interface to talk with the world.

Rafael Angarita Self-healing IoT July 2015 19 / 21

Summary

We presented our motivation for building self-healing IoT applications.

Our interest lies specially in the context of critical systems.

We introduced the concept of responsible objects and its architecture.This concepts combine transactional and self-healing properties, andan interface to talk with the world.

Rafael Angarita Self-healing IoT July 2015 19 / 21

Summary

We presented our motivation for building self-healing IoT applications.

Our interest lies specially in the context of critical systems.

We introduced the concept of responsible objects and its architecture.This concepts combine transactional and self-healing properties, andan interface to talk with the world.

Rafael Angarita Self-healing IoT July 2015 19 / 21

Future Work

First of all, perform experimental evaluation, though it may bedifficult.

Refine and extend presented ideas.

Consider other types of problem-diagnosis components such asBayesian networks.

Take advantage of generated data to implement other self-*capabilities; for example, self-configuration.

Given a high-level global objective, automatically derive individuallocal goals and rules.

Rafael Angarita Self-healing IoT July 2015 20 / 21

Future Work

First of all, perform experimental evaluation, though it may bedifficult.

Refine and extend presented ideas.

Consider other types of problem-diagnosis components such asBayesian networks.

Take advantage of generated data to implement other self-*capabilities; for example, self-configuration.

Given a high-level global objective, automatically derive individuallocal goals and rules.

Rafael Angarita Self-healing IoT July 2015 20 / 21

Future Work

First of all, perform experimental evaluation, though it may bedifficult.

Refine and extend presented ideas.

Consider other types of problem-diagnosis components such asBayesian networks.

Take advantage of generated data to implement other self-*capabilities; for example, self-configuration.

Given a high-level global objective, automatically derive individuallocal goals and rules.

Rafael Angarita Self-healing IoT July 2015 20 / 21

Future Work

First of all, perform experimental evaluation, though it may bedifficult.

Refine and extend presented ideas.

Consider other types of problem-diagnosis components such asBayesian networks.

Take advantage of generated data to implement other self-*capabilities; for example, self-configuration.

Given a high-level global objective, automatically derive individuallocal goals and rules.

Rafael Angarita Self-healing IoT July 2015 20 / 21

Future Work

First of all, perform experimental evaluation, though it may bedifficult.

Refine and extend presented ideas.

Consider other types of problem-diagnosis components such asBayesian networks.

Take advantage of generated data to implement other self-*capabilities; for example, self-configuration.

Given a high-level global objective, automatically derive individuallocal goals and rules.

Rafael Angarita Self-healing IoT July 2015 20 / 21

The End

Rafael Angarita Self-healing IoT July 2015 21 / 21

References I

J. Kephart and D. Chess,

The vision of autonomic computing.

Internet of Things: Global Technological and Societal Trends, Computer, vol. 36,no. 1, pp. 41–50, Jan 2003.

O. Vermesan, P. Friess, P. Guillemin, S. Gusmeroli, H. Sundmaeker, A. Bassi, I. S.Jubert, M. Mazura, M. Harrison, M. Eisenhauer et al.,

Internet of things strategic research roadmap.

Internet of Things: Global Technological and Societal Trends, vol. 1, pp. 9–52,2011.

Atzori, Luigi, Antonio Iera, and Giacomo Morabito.

The internet of things: A survey.

Computer networks 54.15 (2010): 2787-2805.

El Haddad, Joyce and Manouvrier, Maude and Rukoz, Marta.

TQoS: Transactional and QoS-aware selection algorithm for automatic Webservice composition

IEEE Trans. on Services Computing, v3, N1 2010.

Rafael Angarita Self-healing IoT July 2015 22 / 21

References II

Cardinale, Yudith and Rukoz, Marta.

Fault Tolerant Execution of Transactional Composite Web Services: AnApproach

In In Proceedings UBICOMM, pages 1–6, Lisbon, 2011.

Ghosh, Debanjan and Sharman, Raj and Rao, H. Raghav and Upadhyaya,Shambhu.

Self-healing systems - survey and synthesis.

Decis. Support Syst. 42, 4 (January 2007), 2164-2185.

Rafael Angarita Self-healing IoT July 2015 23 / 21

Turtle/N3 Rules

@ p r e f i x i n t :<h t t p : / /www. w3 . org /2001/XMLSchema#i n t e g e r >.@ p r e f i x : <h t t p : / / j e n a . h p l . hp . com/ p r e f i x #>.@ p r e f i x sh : <h t t p : / /www. lamsade . dauph ine . f r /˜ a n g a r i t a / s e l f h e a l i n g #>.[ (? d i n t : h asVa lue ? a ) g r e a t e r T h a n (? a , 1 8 ) −>( sh : s t a t e sh : i s A sh : normal ) ][ (? d i n t : h asVa lue ? a ) l e s s T h a n (? a , 1 8 ) −>( sh : s t a t e sh : i s A sh : broken ) ][ ( sh : s t a t e sh : i s A sh : broken ) −>( sh : a c t i o n sh : i s A sh : compensate ) ][ ( sh : s t a t e sh : i s A sh : normal ) −>( sh : a c t i o n sh : i s A sh : c o n t i n u e ) ]

Rafael Angarita Self-healing IoT July 2015 24 / 21

SPARQL Query

PREFIX sh : <h t t p : / /www. lamsade . dauph ine . f r /˜ a n g a r i t a / s e l f h e a l i n g #>”SELECT ? a c t i o n WHERE { sh : a c t i o n sh : i s A ? a c t i o n }

Rafael Angarita Self-healing IoT July 2015 25 / 21

Self-healing State Action Rules from Broken State

γsh−state = BROKEN¬γtp = r

COMPENSATE

γsh−state = BROKEN¬γcompensable

REPLICATE

γsh−state = BROKEN

γ(◦)progress ≥ θprogress

γ+time > 0

RETRY

γsh−state = BROKEN

γ(◦)progress ≥ θprogress

¬γ+time > 0

REPLICATE

γsh−state = BROKEN

γ(◦)progress < θprogressCOMPENSATE

Rafael Angarita Self-healing IoT July 2015 26 / 21

Self-healing State Action Rules from Normal State

γsh−state = NORMAL

γavailability < θ(γ)availabilityREPLICATE

γsh−state = NORMAL

¬γ+time > 0

REPLICATE

γsh−state = NORMAL

γ+time > 0

γavailability ≥ θ(γ)availabilityCONTINUE

Rafael Angarita Self-healing IoT July 2015 27 / 21

Self-healing State Action Rules from Degraded State

γsh−state = DEGRADED

γstate = F¬γtp = r

COMPENSATE

γsh−state = DEGRADED

γavailability < θ(γ)availabilityREPLICATE

γsh−state = DEGRADED

¬γ+time > 0

REPLICATE

γsh−state = DEGRADED

¬γstate = X

γ+time > 0

γavailability ≥ θ(γ)availabilityCONTINUE

γsh−state = DEGRADED

γstate = X

γ+time > 0

γavailability ≥ θ(γ)availabilityRETRY

Rafael Angarita Self-healing IoT July 2015 28 / 21