Состояние и перспективы развития интегрированной модульной авионики

Transcription

1 Международная конференция Состояние и перспективы развития интегрированной модульной авионики MASIW: Model Based Toolset for IMA System Design and Integration Alexey Khoroshilov (ISPRAS) Москва, октября 2012 г.

2 What is MASIW Model-based toolset aimed to automate IMA System Group (IMA-SG) activities IMA-SG is responsible for: IMA System Design IMA System Integration IMA System Verification Coordination of Platform Component Suppliers (PCS) and ATA-XX developers IMA System Certification

3 IMA System Mezzanines: CPM ARINC-653 RTOS PCI GPU Mass Storage...

4 IMA System Mezzanines: CPM1 ARINC-653 RTOS PCI GPU Mass Storage CPM2 ARINC-653 RTOS... AFDX switch ARINC-664 (AFDX) Nework

5 IMA System Mezzanines: CPM1 ARINC-653 RTOS PCI Data Concentrator ARINC-825 GPU Mass Storage CPM2 ARINC-653 RTOS... AFDX switch ARINC-664 (AFDX) Nework Remote Data Concentrator

6 IMA System Mezzanines: CPM1 Middleware: ARINC-653 RTOS PCI I/O routing ARINC-615A BITE Instrumentation Data Concentrator ARINC-825 GPU Mass Storage CPM2 ARINC-653 RTOS... AFDX switch ARINC-664 (AFDX) Nework Remote Data Concentrator

7 IMA System Mezzanines: CPM1 ARINC-653 RTOS PCI Data Concentrator ARINC-825 GPU Mass Storage CPM2 ARINC-653 RTOS... AFDX switch ARINC-664 (AFDX) Nework IMA Platform Remote Data Concentrator

8 IMA System Mezzanines: CPM1 ARINC-653 RTOS PCI Data Concentrator ARINC-825 GPU Mass Storage CPM2 ARINC-653 RTOS... AFDX switch ARINC-664 (AFDX) Nework IMA Platform Remote Data Concentrator

9 IMA System ATA-21 SW2 ATA-21 SW1 ATA-31 SW Mezzanines: CPM1 ARINC-653 RTOS PCI Data Concentrator ARINC-825 ATA-22 SW2 ATA-22 SW1 GPU Mass Storage CPM2 ARINC-653 RTOS... AFDX switch ATA-23 SW2 ATA-23 SW1 ARINC-664 (AFDX) Nework IMA Platform Remote Data Concentrator

10 IMA System ATA-21 SW2 ATA-21 SW1 ATA-31 SW ATA-22 SW2 ATA-22 SW1 Mezzanines: CPM1 ARINC-653 RTOS PCI GPU Mass Storage ARINC-825 Sensor-211 ARINC-653 RTOS AFDX switch ARINC-664 (AFDX) Nework IMA Platform Remote Data Concentrator Actuator-211 Sensor-212 CPM2... Data Concentrator ATA-23 SW2 ATA-23 SW1 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

11 IMA System Display ATA-21 SW2 ATA-21 SW1 ATA-31 SW Mezzanines: CPM1 ARINC-653 RTOS PCI ARINC-429 GPU Mass Storage ARINC-825 Sensor-211 ARINC-653 RTOS AFDX switch ARINC-664 (AFDX) Nework IMA Platform Remote Data Concentrator Actuator-211 Sensor-212 ATA-23 SW2 ATA-23 SW1 CPM2... Data Concentrator Non-IMA ATA-41 System ATA-22 SW2 ATA-22 SW1 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

12 IMA System IMA System Display ATA-21 SW2 ATA-21 SW1 ATA-31 SW Mezzanines: CPM1 ARINC-653 RTOS PCI GPU Mass Storage ARINC-825 Sensor-211 ARINC-653 RTOS AFDX switch ARINC-664 (AFDX) Nework IMA Platform Remote Data Concentrator Actuator-211 Sensor-212 ATA-23 SW2 ATA-23 SW1 CPM2... Data Concentrator Non-IMA ATA-41 System ATA-22 SW2 ATA-22 SW1 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

13 IMA-SG Model-based toolset aimed to automate IMA System Group (IMA-SG) activities IMA-SG is responsible for: IMA System Design IMA System Integration IMA System Verification Coordination of Platform Component Suppliers (PCS) and ATA-XX developers IMA System Certification

14 IMA System Design IMA-SG is responsible for: IMA System Design

15 (1) A/C Stream Top level A/C requirements: segregation power limitations spatial limitations etc. IMA design standard: max processor load for initial design max bus load for initial design etc.

16 (2) Platform Components Stream CPM1 ARINC-653 RTOS Mezzanines: GPU Mass Storage... AFDX switch Middleware: I/O routing ARINC-615A BITE Instrumentation Platfrom components characteristics: performance memory I/O bandwidth power consumption etc. Configuration variability Usage domain rules Data Concentrator Remote Data Concentrator

17 (3) ATA-XX Stream ATA-21 ATA-22 ATA-23 ATA-31 ATA-41

18 (3) ATA-XX Stream ATA-21 ATA-22 IMA Platform ATA-23 ATA-31 ATA-41 out of IMA

19 (3) ATA-XX Stream ATA-31 ATA-41 ATA-23 ATA-21 ATA-22 Sensor-211 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

20 (3) ATA-XX Stream ATA-31 ATA-31 SW ATA-41 ATA-21 ATA-23 ATA-23 SW2 ATA-21 SW1 ATA-23 SW1 ATA-21 SW2 ATA-22 ATA-22 SW1 ATA-22 SW2 Sensor-211 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

21 (3) ATA-XX Stream Software partition reqs: period and duration memory needs ATA-31 ATA-31 SW ATA-41 ATA-21 ATA-23 ATA-23 SW2 ATA-21 SW1 ATA-23 SW1 ATA-21 SW2 ATA-22 ATA-22 SW1 ATA-22 SW2 Sensor-211 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

22 (3) ATA-XX Stream Software partition reqs: period and duration memory needs ATA-31 ATA-31 SW ATA-41 ATA-21 ATA-23 ATA-23 SW2 ATA-21 SW1 ATA-23 SW1 ATA-21 SW2 Communication reqs: bandwidth latency Sensor-211 ATA-22 ATA-22 SW1 ATA-22 SW2 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

23 IMA System Design (1) A/C Stream (2) Platform Components Stream IMA System Designer (3) ATA-XX Stream

24 IMA System Design IMA System Display ATA-21 SW2 ATA-21 SW1 ATA-31 SW Mezzanines: ATA-22 SW2 ATA-22 SW1 GPU Mass Storage CPM1 ARINC-653 RTOS ATA-23 SW2 ATA-23 SW1 CPM2 ARINC-653 RTOS... AFDX switch Data Concentrator IMA Platform Remote Data Concentrator Non-IMA ATA-41 System Sensor-211 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

25 IMA System Design Software partition reqs: period and duration ATA-22 SW2 ATA-23 SW2 memory needs ATA-22 SW1 ATA-23 SW1 IMA System Top level A/C requirements: Display ATA-21 SW2 segregation ATA-21 SW1 ATA-31 SW power limitations Mezzanines: spatial limitations GPU etc. CPM1 CPM2 Mass Storage Platfrom components ARINC-653 RTOS ARINC-653 RTOS characteristics: performance... memory IMA design standard: I/O bandwidth max processor load for initial design AFDX power consumption max bus load for initial design switch etc. etc. Data IMA Platform Concentrator Remote Data Usage domain rules Concentrator Communication reqs: bandwidth Non-IMA latency ATA-41 System Sensor-211 Configuration variability Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

26 IMA System Design Software partition reqs: period and duration ATA-22 SW2 ATA-23 SW2 memory needs ATA-22 SW1 ATA-23 SW1 IMA System Top level A/C requirements: Display ATA-21 SW2 segregation ATA-21 SW1 ATA-31 SW power limitations Mezzanines: spatial limitations GPU etc. CPM1 CPM2 Mass Storage Platfrom components ARINC-653 RTOS ARINC-653 RTOS characteristics: performance... memory IMA design standard: I/O bandwidth max processor load for initial design AFDX power consumption max bus load for initial design switch etc. etc. Data IMA Platform Concentrator Configuration variability Remote Data Usage domain rules Concentrator Communication reqs: bandwidth Non-IMA latency ATA-41 System Several design alternatives Sensor-211 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-221 Actuator-231

27 IMA System Design Software partition reqs: period and duration ATA-22 SW2 ATA-23 SW2 memory needs ATA-22 SW1 ATA-23 SW1 IMA System Top level A/C requirements: Display ATA-21 SW2 segregation ATA-21 SW1 ATA-31 SW power limitations Mezzanines: spatial limitations GPU etc. CPM1 CPM2 Mass Storage Platfrom components ARINC-653 RTOS ARINC-653 RTOS characteristics: performance... memory IMA design standard: I/O bandwidth max processor load for initial design AFDX power consumption max bus load for initial design switch etc. etc. Data IMA Platform Concentrator Configuration variability Remote Data Usage domain rules Concentrator Communication reqs: bandwidth Non-IMA latency ATA-41 System Several design alternatives Sensor-211 Actuator-211 Sensor-212 Actuator-212 Sensor-221 Sensor-222 Actuator-231 And input data are not final => Change request processing Actuator-221

28 IMA System Design (1) A/C Stream (2) Platform Components Stream (3) ATA-XX Stream IMA System Designer - Design Documents - Safety Analysis Report - Verification Report

29 Architecture Model MASIW is a model-based toolset based on Architecture Analysis & Design Language Architecture model structural model flows specification software to hardware mapping extensible via properties and annexes constraints specification textual notation international standard: SAE AS5506A

30 MASIW 2012 Main features of MASIW-2012: modeling of IMA architecture from system-level specification down to implementation details of hardware and software components

31 AADL Model

32 AADL Model

33 AADL Model

34 AADL Model

35 AADL Model

36 AADL Model

37 AADL Model

38 MASIW 2012 Main features of MASIW-2012: modeling of IMA architecture from system-level specification down to implementation details of hardware and software components verification of resource allocation consistency, usage domain rules and project-specific constraints

39 REAL Constraints Checker Requirement Enforcement Analysis Language theorem scheduling_major_frame foreach cpu in processor_set do check ((not property_exists (cpu,"arinc653::module_major_frame")) or (float (property (cpu, "ARINC653::Module_Major_Frame")) >= sum (property (cpu, "ARINC653::Partition_Slots")))); end scheduling_major_frame;

40 REAL Constraints Checker

41 MASIW 2012 Main features of MASIW-2012: modeling of IMA architecture from system-level specification down to implementation details of hardware and software components verification of resource allocation consistency, usage domain rules and project-specific constraints static schedule building for periodic ARINC-653 partitions and specialized middleware tasks

42 Schedule Builder Pluggable scheduling algorithms Early Deadline First Rate Monotonic Custom limitations Special processing of middleware partitions and I/O device drivers

43 MASIW 2012 Main features of MASIW-2012: modeling of IMA architecture from system-level specification down to implementation details of hardware and software components verification of resource allocation consistency, usage domain rules and project-specific constraints static schedule building for periodic ARINC-653 partitions and specialized middleware tasks AFDX static analysis and simulation framework

44 AFDX Static Analysis Switch End System VL F1 VL P a r t i t i o n s VL A VL B F2 UDP F3 UDP UDP VL SN? VL SN? A B Characteristics to be evaluated: Latency Time and reasons of delays Distribution of queues length Probability of message loses

45 IMA System Integration IMA-SG is responsible for: IMA System Design IMA System Integration

46 IMA Platform Configuration Data Middleware: I/O routing ARINC-615A BITE Instrumentation MW Cfg CPM Cfg CPM Cfg AFDX Cfg DC Cfg RDC Cfg

47 CPM Configuration ATA-XX Partition responsibility of ATA-XX developer responsibility of IMA-SG R TO S Partition Local Config (PLC) PLC includes - partition-level HM; - memory layout details; - etc. dr R M iv T er O W s S Partition level config Module level config Module Configuration (MC) dr R M iv T er O W s S Partition Global Config (PGC)

48 MASIW 2012 Main features of MASIW-2012: modeling of IMA architecture from system-level specification down to implementation details of hardware and software components verification of resource allocation consistency, usage domain rules and project-specific constraints static schedule building for periodic ARINC-653 partitions and specialized middleware tasks AFDX static analysis and simulation framework generation of configuration tables for VxWorks-653 RTOS and AFDX network elements

49 Configuration Generation

50 MASIW Architecture

51 Future Works Usability improvements Architecture model design documents integration Platform components architecture models library Requirements traceability Safety analysis Certification considerations

52 Thank you! Alexey Khoroshilov