Series, Parallel and k-out-of-n Systems
A system is only as reliable as its parts and the way they're wired together. In a chain every part must work, so reliabilities multiply; with backups only one has to work, so the failure chances multiply instead; and a system that needs of its parts working is a binomial sum.
What the symbols mean
- Part reliability
The probability part 1 works for the whole mission.
- System failure rate
For exponential parts in series, the failure rates add.
What the symbols mean
- Part unreliability
The probability part 1 fails; the system fails only if every part does.
What the symbols mean
- Parts needed
The system works when at least k of its n parts work.
- Ways to choose
The number of ways to pick which j parts are the working ones.
What the symbols mean
- Active pair
Both units run all the time; the system lasts until the second failure.
- Cold standby pair
The spare waits unpowered and doesn't age until it's switched in.
Explanation
System reliability is simply the chance that a whole system works, figured out from the chances that its parts work. There are only two basic arrangements. In series (a chain), everything has to work, so you multiply the parts' reliabilities: . In parallel (a bank of backups), the system fails only if every part fails, so you multiply the failure chances: . Everything else, including -out-of- voting, is built from those two ideas plus the binomial you already know.
A chain and a bank. A server rack's power runs utility feed → transfer switch → UPS → rack. If any block fails, the rack goes dark. A second UPS that can carry the load alone changes the arithmetic completely. A reliability block diagram draws this logic: blocks in a chain must all work (series), blocks side by side back each other up (parallel). It describes function, not wiring: two valves piped one after the other are a parallel pair if their job is to stop flow, since either one closing does it.
Series: all must work. With independent failures, is a product. The system is weaker than its weakest part, and long chains are brutal: 100 parts at 0.99 each give . With exponential parts, : failure rates add, which is why electronic parts are rated in failures per billion hours and summed over a board.
Parallel: one is enough. The system fails only if every unit fails, so . Two 0.90 units give ; three give 0.999. Each added unit multiplies the failure probability by the same factor: big gains at first, then diminishing returns against cost, weight and space.
Reduce, then multiply. For a series-parallel network, replace each parallel group by one equivalent block, then multiply along the chain. Networks that don't reduce, like a bridge, yield to conditioning: split on one component working or failed, and combine the two cases with the law of total probability.
k-out-of-n: count the ways. A 2-out-of-3 voting set of sensors, 6 of 8 drives in a storage array, 3 of 4 engines: with independent identical parts, the number working is binomial, so
For 2-out-of-3, , which beats a single unit only when . The same binomial sums count defective units in a batch.
Over time, plug in . For two active exponential units, , and the area under it (Reliability and Hazard Functions) is . The second unit adds only half a life, because while both run the first failure comes twice as fast (rate ). A cold standby spare that doesn't age while it waits gives , if the switch always works. Redundancy shines on short missions: at an active pair fails with probability , against for one unit.
Redundancy trade-offs:
- Redundancy at the component level beats redundancy at the system level: two pumps in parallel followed by two valves in parallel beats two complete pump-and-valve trains, if the cross-connections are reliable.
- Common-cause failures (one power supply, one software bug, one flood) hit every copy at once and break the independence the formulas assume. They usually set the real limit.
- Voting systems give up some reliability in exchange for catching wrong outputs, not just dead ones.
- Redundancy plus repair is far stronger than redundancy alone: fix the failed unit before its partner fails. That's the next lesson.
A common mistake. With two backup units, it's tempting to add their reliabilities. Two 0.9 units would then give 1.8, which can't be a probability. For parallel units, multiply the failure chances instead: . Watch also for using the series formula on redundant parts, and remember that all these formulas assume the parts fail independently; a shared power supply or a common flood breaks that.
See it
Worked examples
A server rack's power path is a utility feed () in series with a transfer switch (), then two UPS units in parallel ( each; either can carry the load). Find the path's reliability for the year.
- 1
Reduce the parallel pair first: .
Three temperature sensors vote: the controller uses the majority reading, so it works if at least 2 of the 3 sensors work. Each works with probability . Find the system reliability.
- 1
Exactly 2 work: .
Practice
Type your answer and check it. Solve them all to complete the lesson.
A circuit board has components in series (any failure kills the board), each with reliability for the first year. Find the board's first-year reliability. Give 4 decimal places.
A machine has identical parts in series and must be reliable over its mission. What is the largest failure probability each part can have, in parts per million? Give 3 significant figures.
Identical pumps, each reliable over a mission, are installed in parallel, and any one can do the job. How many pumps are needed for the system to be at least reliable?
A cooling loop needs a pump () and a control valve (). Design A runs two complete pump-and-valve trains in parallel. Design B puts two pumps in parallel followed by two valves in parallel, cross-connected so any working pump can feed any working valve. What is design B's failure probability, in percent? Give 3 significant figures.
A storage array of drives keeps its data as long as at most drives fail. Each drive survives the year with probability , independently, and failed drives aren't replaced during the year. What is the probability of data loss, in parts per million? Give 3 significant figures.
A motor controller has three critical parts in series with constant failure rates of , and failures per million hours. Find the controller's reliability over hours of operation. Give 4 decimal places.
Two identical units, each with an exponential life of mean h, run in active parallel: the system works while at least one does. Find the system MTTF in hours.
Five components, each reliable, form a bridge. Component 1 feeds component 3 and component 2 feeds component 4, giving two paths from input to output, and component 5 links the junction between 1 and 3 to the junction between 2 and 4. Find the system reliability. Give 4 decimal places.
The hardest one here. Get it, and you've got this lesson.
A flight controller can be built as one unit or as three identical units voting 2-out-of-3. Each unit has an exponential life with per hour. Beyond what mission length is the voting system less reliable than a single unit? Give hours to 3 significant figures.
Where it's used
Reliability block diagrams are standard in aerospace, power grids, rail signaling and data centers. Airliners fly with redundant hydraulic systems and voting flight computers, hospitals and server farms use N+1 or 2N power designs, and storage systems keep several copies of every file so that k of n survive. Engineers run these calculations to find single points of failure and to decide where one more redundant part buys the most reliability per dollar.