A New Functional Fault Model for System-Level Descriptions