Ratemonotonic scheduling
In computer science, ratemonotonic scheduling (RMS)^{[1]} is a priority assignment algorithm used in realtime operating systems (RTOS) with a staticpriority scheduling class.^{[2]} The static priorities are assigned according to the cycle duration of the job, so a shorter cycle duration results in a higher job priority.
These operating systems are generally preemptive and have deterministic guarantees with regard to response times. Rate monotonic analysis is used in conjunction with those systems to provide scheduling guarantees for a particular application.
Introduction[edit]
A simple version of ratemonotonic analysis assumes that threads have the following properties:
 No resource sharing (processes do not share resources, e.g. a hardware resource, a queue, or any kind of semaphore blocking or nonblocking (busywaits))
 Deterministic deadlines are exactly equal to periods
 Static priorities (the task with the highest static priority that is runnable immediately preempts all other tasks)
 Static priorities assigned according to the rate monotonic conventions (tasks with shorter periods/deadlines are given higher priorities)
 Context switch times and other thread operations are free and have no impact on the model
It is a mathematical model that contains a calculated simulation of periods in a closed system, where roundrobin and timesharing schedulers fail to meet the scheduling needs otherwise. Rate monotonic scheduling looks at a run modeling of all threads in the system and determines how much time is needed to meet the guarantees for the set of threads in question.
Optimality[edit]
The ratemonotonic priority assignment is optimal under the given assumptions, meaning that if any staticpriority scheduling algorithm can meet all the deadlines, then the ratemonotonic algorithm can too. The deadlinemonotonic scheduling algorithm is also optimal with equal periods and deadlines, in fact in this case the algorithms are identical; in addition, deadline monotonic scheduling is optimal when deadlines are less than periods.^{[3]} For the task model in which deadlines can be greater than periods, Audsley's algorithm endowed with an exact schedulability test for this model finds an optimal priority assignment.^{[4]}
Upper bounds on utilization[edit]
Least upper bound[edit]
Liu & Layland (1973) proved that for a set of n periodic tasks with unique periods, a feasible schedule that will always meet deadlines exists if the CPU utilization is below a specific bound (depending on the number of tasks). The schedulability test for RMS is:
where U is the utilization factor, C_{i} is the computation time for process i, T_{i} is the release period (with deadline one period later) for process i, and n is the number of processes to be scheduled. For example, U ≤ 0.8284 for two processes. When the number of processes tends towards infinity, this expression will tend towards:
Therefore, a rough estimate when is that RMS can meet all of the deadlines if total CPU utilization, U, is less than 70%. The other 30% of the CPU can be dedicated to lowerpriority, nonrealtime tasks. For smaller values of n or in cases where U is close to this estimate, the calculated utilization bound should be used.
In practice, for the process, should represent the worstcase (i.e. longest) computation time and should represent the worstcase deadline (i.e. shortest period) in which all processing must occur.
Upper bound for harmonic task sets[edit]
Liu and Layland noted that this bound may be relaxed to the maximum possible value of 1.0, if for tasks , where and , is an integer multiple of , which is to say that all tasks have a period that is not just a multiple of the shortest period, , but instead that any task's period is a multiple of all shorter periods. This is known as an harmonic task set. An example of this would be: . It is acknowledged by Liu and Layland that it is not always feasible to have a harmonic task set and that in practice other mitigation measures, such as buffering for tasks with softtime deadlines or using a dynamic priority assignment approach may be used instead to allow for a higher bound.
Generalization to harmonic chains[edit]
Kuo and Mok^{[5]} showed that for a task set made up of K harmonic task subsets (known as harmonic chains), the least upper bound test becomes:
In the instance where no task period is an integer multiple of another, the task set can be thought of as being composed of n harmonic task subsets of size 1 and therefore , which makes this generalization equivalent to Liu and Layland's least upper bound. When , the upper bound becomes 1.0, representing full utilization.
Stochastic bounds[edit]
It has been shown that a randomly generated periodic task system will usually meet all deadlines when the utilization is 88% or less,^{[6]} however this fact depends on knowing the exact task statistics (periods, deadlines) which cannot be guaranteed for all task sets, and in some cases the authors found that the utilization reached the least upper bound presented by Liu and Layland.
Hyperbolic bound[edit]
The hyperbolic bound^{[7]} is a tighter sufficient condition for schedulability than the one presented by Liu and Layland:
 ,
where U_{i} is the CPU utilization for each task. It is the tightest upper bound that can be found using only the individual task utilization factors.
Resource sharing[edit]
In many practical applications, resources are shared and the unmodified RMS will be subject to priority inversion and deadlock hazards. In practice, this is solved by disabling preemption or by priority inheritance. Alternative methods are to use lockfree algorithms or avoid the sharing of a mutex/semaphore across threads with different priorities. This is so that resource conflicts cannot result in the first place.
Disabling of preemption[edit]
 The
OS_ENTER_CRITICAL()
andOS_EXIT_CRITICAL()
primitives that lock CPU interrupts in a realtime kernel, e.g. MicroC/OSII  The
splx()
family of primitives which nest the locking of device interrupts (FreeBSD 5.x/6.x),
Priority inheritance[edit]
 The basic priority inheritance protocol^{[8]} promotes the priority of the task that holds the resource to the priority of the task that requests that resource at the time the request is made. Upon release of the resource, the original priority level before the promotion is restored. This method does not prevent deadlocks and suffers from chained blocking. That is, if a high priority task accesses multiple shared resources in sequence, it may have to wait (block) on a lower priority task for each of the resources.^{[9]} The realtime patch Archived 20201013 at the Wayback Machine to the Linux kernel includes an implementation of this formula.^{[10]}
 The priority ceiling protocol^{[11]} enhances the basic priority inheritance protocol by assigning a ceiling priority to each semaphore, which is the priority of the highest job that will ever access that semaphore. A job cannot preempt a lower priority critical section if its priority is lower than the ceiling priority for that section. This method prevents deadlocks and bounds the blocking time to at most the length of one lower priority critical section. This method can be suboptimal, in that it can cause unnecessary blocking. The priority ceiling protocol is available in the VxWorks realtime kernel. It is also known as Highest Locker's Priority Protocol (HLP).^{[12]}
Priority inheritance algorithms can be characterized by two parameters. First, is the inheritance lazy (only when essential) or immediate (boost priority before there is a conflict). Second is the inheritance optimistic (boost a minimum amount) or pessimistic (boost by more than the minimum amount):
pessimistic  optimistic  

immediate  OS_ENTER_CRITICAL() / OS_EXIT_CRITICAL()

splx() , highest locker

lazy  priority ceiling protocol, basic priority inheritance protocol 
In practice there is no mathematical difference (in terms of the LiuLayland system utilization bound) between the lazy and immediate algorithms, and the immediate algorithms are more efficient to implement, and so they are the ones used by most practical systems.^{[citation needed]}
An example of usage of basic priority inheritance is related to the "Mars Pathfinder reset bug" ^{[13]}^{[14]} which was fixed on Mars by changing the creation flags for the semaphore so as to enable the priority inheritance.
Interrupt Service Routines[edit]
All interrupt service routines (ISRs), whether they have a hard realtime deadline or not should be included in RMS analysis to determine schedulability in cases where ISRs have priorities above all schedulercontrolled tasks. An ISR may already be appropriately prioritized under RMS rules if its processing period is shorter than that of the shortest, nonISR process. However, an ISR with a period/deadline longer than any nonISR process period with a critical deadline results in a violation of RMS and prevents the use of the calculated bounds for determining schedulability of a task set.
Mitigating misprioritized ISRs[edit]
One method for mitigating a misprioritized ISR is to adjust the analysis by reducing the ISR's period to be equal to that of the shortest period, if possible. Imposing this shorter period results in prioritization that conforms to RMS, but also results in a higher utilization factor for the ISR and therefore for the total utilization factor, which may still be below the allowable bound and therefore schedulability can be proven. As an example, consider a hardware ISR that has a computation time, of 500 microseconds and a period, , of 4 milliseconds. If the shortest schedulercontrolled task has a period, of 1 millisecond, then the ISR would have a higher priority, but a lower rate, which violates RMS. For the purposes of proving schedulability, set and recalculate the utilization factor for the ISR (which also raises the total utilization factor). In this case, will change from to . This utilization factor would be used when adding up the total utilization factor for the task set and comparing to the upper bound to prove schedulability. It should be emphasized that adjusting the period of the ISR is for analysis only and that the true period of the ISR remains unchanged.
Another method for mitigating a misprioritized ISR is to use the ISR to only set a new semaphore/mutex while moving the timeintensive processing to a new process that has been appropriately prioritized using RMS and will block on the new semaphore/mutex. When determining schedulability, a margin of CPU utilization due to ISR activity should be subtracted from the least upper bound. ISRs with negligible utilization may be ignored.
Examples[edit]
Example 1[edit]
Process  Execution time  Period 

P1  1  8 
P2  2  5 
P3  2  10 
Under RMS, P2 has the highest rate (i.e. the shortest period) and so would have the highest priority, followed by P1 and finally P3.
Least Upper Bound[edit]
The utilization will be: .
The sufficient condition for processes, under which we can conclude that the system is schedulable is:
Because , and because being below the Least Upper Bound is a sufficient condition, the system is guaranteed to be schedulable.
Example 2[edit]
Process  Execution time  Period 

P1  3  16 
P2  2  5 
P3  2  10 
Under RMS, P2 has the highest rate (i.e. the shortest period) and so would have the highest priority, followed by P3 and finally P1.
Least Upper Bound[edit]
Using the Liu and Layland bound, as in Example 1, the sufficient condition for processes, under which we can conclude that the task set is schedulable, remains:
The total utilization will be: .
Since the system is determined to not be guaranteed to be schedulable by the Liu and Layland bound.
Hyperbolic Bound[edit]
Using the tighter Hyperbolic bound as follows:
it is found that the task set is schedulable.
Example 3[edit]
Process  Execution time  Period 

P1  7  32 
P2  2  5 
P3  2  10 
Under RMS, P2 has the highest rate (i.e. the shortest period) and so would have the highest priority, followed by P3 and finally P1.
Least Upper Bound[edit]
Using the Liu and Layland bound, as in Example 1, the sufficient condition for processes, under which we can conclude that the task set is schedulable, remains:
The total utilization will be: .
Since the system is determined to not be guaranteed to be schedulable by the Liu and Layland bound.
Hyperbolic Bound[edit]
Using the tighter Hyperbolic bound as follows:
Since the system is determined to not be guaranteed to be schedulable by the Hyperbolic bound.
Harmonic Task Set Analysis[edit]
Because , tasks 2 and 3 can be considered a harmonic task subset. Task 1 forms its own harmonic task subset. Therefore, the number of harmonic task subsets, K, is 2.
Using the total utilization factor calculated above (0.81875), since the system is determined to be schedulable.
See also[edit]
 Deadlinemonotonic scheduling
 Deos, a time and space partitioned realtime operating system containing a working Rate Monotonic Scheduler.
 Dynamic priority scheduling
 Earliest deadline first scheduling
 RTEMS, an open source realtime operating system containing a working Rate Monotonic Scheduler.
 Scheduling (computing)
References[edit]
 ^ Liu, C. L.; Layland, J. (1973), "Scheduling algorithms for multiprogramming in a hard realtime environment", Journal of the ACM, 20 (1): 46–61, CiteSeerX 10.1.1.36.8216, doi:10.1145/321738.321743, S2CID 207669821.
 ^ Bovet, Daniel P.; Cesati, Marco, Understanding the Linux Kernel, http://oreilly.com/catalog/linuxkernel/chapter/ch10.html#85347 Archived 20140921 at the Wayback Machine.
 ^ Leung, J. Y.; Whitehead, J. (1982), "On the complexity of fixedpriority scheduling of periodic, realtime tasks", Performance Evaluation, 2 (4): 237–250, doi:10.1016/01665316(82)900244.
 ^ Alan Burns and Andy Wellings (2009), RealTime Systems and Programming Languages (4th ed.), AddisonWesley, pp. 391, 397, ISBN 9780321417459
 ^ T.W. Kuo; A.K. Mok (1991). "Load adjustment in adaptive realtime systems". [1991] Proceedings Twelfth RealTime Systems Symposium. pp. 160–170. doi:10.1109/REAL.1991.160369. ISBN 0818624507. S2CID 31127772.
 ^ Lehoczky, J.; Sha, L.; Ding, Y. (1989), "The rate monotonic scheduling algorithm: exact characterization and average case behavior", IEEE RealTime Systems Symposium, pp. 166–171, doi:10.1109/REAL.1989.63567, ISBN 9780818620041, S2CID 206524469.
 ^ Enrico Bini; Giorgio C. Buttazzo; Giuseppe M. Buttazzo (2003), "Rate Monotonic Analysis: the Hyperbolic Bound", IEEE Transactions on Computers, 52 (7): 933–942, doi:10.1109/TC.2003.1214341, hdl:11382/200358
 ^ Lampson, B. W.; Redell, D. D. (1980), "Experience with processes and monitors in Mesa", Communications of the ACM, 23 (2): 105–117, CiteSeerX 10.1.1.46.7240, doi:10.1145/358818.358824, S2CID 1594544.
 ^ Buttazzo, Giorgio (2011), Hard RealTime Computing Systems: Predictable Scheduling Algorithms and Applications (Third ed.), New York, NY: Springer, p. 225
 ^ "RealTime Linux Wiki". kernel.org. 20080326. Retrieved 20140314.
 ^ Sha, L.; Rajkumar, R.; Lehoczky, J. P. (1990), "Priority inheritance protocols: an approach to realtime synchronization", IEEE Transactions on Computers, 39 (9): 1175–1185, doi:10.1109/12.57058.
 ^ Buttazzo, Giorgio (2011), Hard RealTime Computing Systems: Predictable Scheduling Algorithms and Applications (Third ed.), New York, NY: Springer, p. 212
 ^ "Mike Jones at Microsoft Research".
 ^ "Mars Pathfinder Reset Bug  Anthology of Interest". Archived from the original on 20111005. Retrieved 20080909.
Further reading[edit]
 Buttazzo, Giorgio (2011), Hard RealTime Computing Systems: Predictable Scheduling Algorithms and Applications, New York, NY: Springer.
 Alan Burns and Andy Wellings (2009), RealTime Systems and Programming Languages (4th ed.), AddisonWesley, ISBN 9780321417459
 Liu, Jane W.S. (2000), Realtime systems, Upper Saddle River, NJ: Prentice Hall, Chapter 6.
 Joseph, M.; Pandya, P. (1986), "Finding response times in realtime systems", BCS Computer Journal, 29 (5): 390–395, doi:10.1093/comjnl/29.5.390.
 Sha, Lui; Goodenough, John B. (April 1990), "RealTime Scheduling Theory and Ada", IEEE Computer, 23 (4): 53–62, doi:10.1109/2.55469, S2CID 12647942
External links[edit]
 Mars Pathfinder Bug from Research @ Microsoft
 What really happened on Mars Rover Pathfinder by Mike Jones from The Risks Digest, Vol. 19, Issue 49
 [1] The actual reason for the Mars Pathfinder Bug, by those who actually dealt with it, rather than someone whose company and therefore stock value depended upon the description of the problem, or someone who heard someone talking about the problem.