n. "It's been common practice when developing programs [for embedded systems] not to waste space on luxuri
es like the century," says David Brook, an applications engineer for Motorola in the U.K.
Many systems will function without a problem, but how do you know which are afflicted? "For any system, even if the microcontroller hardware handles the date adequately or not at all, and the microcontroller's program handles the date adequately, there may still be a risk if systems are synchronized by a Supervisory Control and Data Acquisition (SCADA) program," says Clive Watts, product marketing manager at Arcom Control Systems (Cambridge, U.K.).
There is no way of guessing whether an embedded system will be OK, based on manufacturer, type, size, or age. If a system has no known date reliance and is not connected to anything else, it may be OK; but if it is a critical component, the only way to be sure is to check the code.
Only a few companies have acknowledged that there
are problems
with their embedded systems. Shell Exploration in the U.K., for example, is cu
rrently replacing or upgrading systems in all critical areas. Says Stuart Officer, asset integrity manager with Shell Exploration, "It's like looking for a needle in a haystack. We won't leave anything to chance. If a vendor has gone out of business, we will replace the system."
The electronics industry has been quiet, and several chip suppliers believe it is not their problem. However, some vendors such as Mitsubishi Electronics are starting to address the issue in the trade press. Motorola's Brook is well aware of the problem but says "it is caused by custom-made software running on the chips."
One reason why the problem has kept such a low profile may be that many companies are often not aware where in their enterprise they use embedded systems. In addition, users recognize embedded systems only when they fail.
If the microprocessor cannot cope with the problem
, the only option
is to replace
it completely. This may be realistic for an
air-conditioning unit but is less so for an oil refinery. As a
consequence, you may need to examine complete process units.
If the control program cannot handle the problem
and you can locate
the vendor, there is a good chance that you can upgrade the program.
If you cannot find the vendor or program source, replacement is
required.
If the problem comes from a third party
, for instance a SCADA system
running a production line, you must check the complete control system.
Make sure the systems you don't want to replace are not critical
to
your business and don't forget to test changes and upgrades.
The Enemy Within
