What is Fail-safe?
The design concept of making a system go into a safe state when a failure or abnormality occurs. Examples include railway signals that fall to red or stop when they fail, and normally closed valves that close when power or air pressure is lost.
Japanese name: フェールセーフ
Fail-safe appears in 3 practice questions across 1 topic, including System Architecture and Reliability.
Field: System Architecture and Reliability
The safe side is decided for each system
In fail-safe design, which state is safe on failure is considered and decided for each system. For a hazardous gas supply valve, closing is the safe side; for an elevator, stopping with the brakes applied is. Some systems, however, become dangerous by stopping, and for them the concepts of fail-soft, which keeps operating even with reduced function, or fault tolerance, which keeps the function despite failures, are needed instead of stopping.
FAQ
How are fail-safe and fail-soft used differently?
Fail-safe is considered when stopping keeps things safe, and fail-soft when stopping would cause problems. Things that are safe once stopped, like gases in manufacturing equipment, are made fail-safe, while things whose stopping has a large impact, like business systems used by many people, are made fail-soft and kept running even with reduced performance. Both may be combined in one system.
Does fail-safe also apply to information systems?
Yes. For example, a design that denies access, rather than letting users through, when the authentication server cannot be reached is fail-safe from a security standpoint. Because this lowers availability, which way to fall is decided according to the purpose of the system.