Dr Daniela Cancila. Laboratoire des composants logiciels pour la Sécurité et la Sûreté des Systèmes (L3S)

Transcription

1 Dr Daniela Cancila Laboratoire des composants logiciels pour la Sécurité et la Sûreté des Systèmes (L3S) Département Architecture & Conception de Logiciels Embarqués Service de Conception des Systèmes Numériques

2 OVERVIEW Society and the industrial context How is our society and the underlying industrial context evolving? What new industrial needs are emerging? What former ones are still in need of a response? Cyber Physical Systems as a means to disruptive technologies Who is doing what and how? CEA involvement industrial research axes of L3S (Laboratoire des composants logiciels pour la Sécurité et la Sûreté des Systèmes) 2

3 SOCIETY 1. How is our society and the underlying industrial context evolving? 2. What new industrial needs are emerging? 3. What former ones are still in need of a response? 3

4 A LEARNED LESSON 1. How is our society and the underlying industrial context evolving? Population longevity is increasing Technological supports are a means to increase the quality of life More energy production Increase in distributed and connected embedded systems 4

5 QUESTIONS 2 AND 3 1. How is our society and the underlying industrial context evolving? 2. What new industrial needs are emerging? 3. What former ones are still in need of a response? 5

6 EXAMPLE: A LEARNED LESSON We are witnesses of a historical change in society Technology is pervasive Number of distributed and connected embedded systems is increasing 6

7 INDUSTRIAL PROCESS standards analyses design Sw components certification Code requirements Platform 7

8 Cliquez Emergence pour modifier of a le new style paradigm du titre Integrated systems Physical (sensor and actuators) Hardware Software Network Heterogeneous Composability Mixed-criticality & [ALSTOM, Metropolis And Metro Train Solution. ] CEA. All rights reserved DACLE Division January

9 EMERGENCE OF A NEW PARADIGM Integrated systems Physical (sensor and actuators) Hardware Software Network Heterogeneous Composability Mixed-criticality Instrumentation and control functions (category B): automatic control of the Nuclear Power Plant (NPP) primary and secondary circuit conditions SW and HW [IEC Nuclear Power Plants Instrumentation and control important to safety Classification of instrumentation and control functions] 9

10 EMERGENCE OF A NEW PARADIGM Integrated systems Physical (sensor and actuators) Hardware Software Network Heterogeneous Composability which ensures stability of component properties across integration [1. J. Sifakis. Embedded Systems - Challenges and Work Directions, LNCS, 2005 ] Mixed-criticality 10

11 EMERGENCE OF A NEW PARADIGM Control of velocity SIL 2 Event Recorder system Dead-man vigilance functionality SIL4 [Daniela Cancila, Stefano Dalpez, Roberto Passerone, Francois Terrier. AN INDUSTRIAL CASE STUDY USING AN MBE APPROACH: FROM ARCHITECTURE TO SAFETY ANALYSIS, IEEE MOBE-RTES, In conjunction with IEEE ISORC symposium, 2010] [D. Macii et al., A safety instrumented system for rolling stocks: Methodology, design process and safety analysis, Measurement Journal Elsevier 2015] 11

12 CYBER-PHYSICAL SYSTEMS In 2006 Helen Gill at the National Science Foundation in the United States coins term CPS [1] Cyber-physical systems (CPS) enable the physical world to merge with the virtual leading to an Internet of Things, data and services [2] example: intelligent manufacturing line CPS combine computing and networking with physical dynamics [3] [ 1] System design, Modeling and simulation, Cladius Ptolemaeus editor [2] [3] Ed Lee. Disciplined Heterogeneous Modeling Models

13 A LEARNED LESSON We are witnesses of a historical change in society CPS lead to the fourth Industrial revolution 13

14 CPS STATE OF THE ART IN EU 14

15 CPS STATE OF THE ART IN EU Contract-Based Design is a methodology expected to reduce the cost of design and certification Underlying Idea Individual components with safety-related, included timing, properties specified via contracts 15

16 CPS STATE OF ART IN EU: CBD Based on Floyd-Hoare logic (~ ) {P, C, Q} P = Preconditions, C= Command in sequential imperative language, Q =postconditions Meyer (~ ) to object-oriented programing system substitutability Beugnard ~1999 to service oriented architectures Contracts as Interfaces (~2000) [T. Henzinger and L. De Alfaro] FP6 ASSERT and FP6 SPEEDS to model-based design (~ ) Assumptions and Guarantees are just properties (SPEEDS) deployed in an architectural systems design to prove correctness-by-construction approach 16

17 CBD IN THE ASSERT PROJECT guarantee assumption guarantee assumption Code ravenscar is a tailored Ada profile to real-time systems 17

18 CPS STATE OF THE ART IN EU Composition with guarantees for High-integrity Embedded Software Components Assembly Safety Certification of Software-Intensive Systems with Reusable Components Guaranteed Component assembly with Round-Trip Analysis for Energy Efficient High-Integrity Multi-core Systems 18

19 CPS STATE OF THE ART AT BERKELEY Center for Hybrid and Embedded Software Systems 19

20 CPS STATE OF THE ART AT BERKELEY we need to capture what the system is supposed to do the process of mapping a functionality how the system does what it is supposed to do with the elements that will be used to build a platform instance or an architecture This process is the essential step for refinement and provides a mechanism to proceed towards implementation in a structured way [Alberto Sangiovanni-Vincentelli. Quo Vadis, SDL: Reasoning about Trends and Challenges of System-Level Design Proceedings of the IEEE, 95(3): , March 2007.] 20

21 A LEARNED LESSON The USA and EU communities are devoting effort to CPS Industrial and academic research EU founding Private founding What is expected Proving solutions to dynamic, heterogeneous, connected distributed embedded systems Disruptive technologies Technological innovation 21

22 CONTRACT-BASED DESIGN AT L3S Industrial problem Daniela Cancila, Elie Soubiran, Roberto Passerone Feasibility Study in the use of contract-based approaches to deal with safety-related properties. Ada User Journal, December 2014 FSF (Fiabilité et Surêté de Fonctionnement Reliability and Safety) project. Technological Research Institute SystemX. 22

23 CONTRACT-BASED DESIGN AT L3S Industrial transfer to Alstom We adopt the ASAP (Advanced System Architect Program) methodology (Alstom) [1, 2] and the supporting tools Operational (why), functional (what) and constructional (how) views Integrating ASAP with CBD A contract is a pair (assumption, guarantee) [1] the guarantee specifies the functionality provided by a component to the environment; and the assumption sets forth the conditions required from the environment in order for the component to accomplish its guarantee [1] ALSTOM, Alstom ASAP methodology: Advanced System Architect Program. OMG [2] Marco Ferrogalini, Jean Le Bastard, Return of experience on the implementation of the System Engineering approach in Alstom. OMG [3] D. Cancila, R. Passerone, T. Vardanega, and M. Panunzio, Toward Correctness in the Specification and Handling of Non-Functional Attributes of High-Integrity Real-Time Embedded Systems, IEEE Transactions on Industrial Informatics, May

24 CONTRACT-BASED DESIGN AT L3S Preliminary Industrial Feedback Daniela Cancila, Elie Soubiran, Roberto Passerone Feasibility Study in the use of contract-based approaches to deal with safety-related properties. Ada User Journal, December 2014 FSF (Fiabilité et Surêté de Fonctionnement Reliability and Safety) project. Technological Research Institute SystemX. 24

25 CONTRACT-BASED DESIGN AT L3S Industrial problem: Reduce the certification cost SW systems Safety Assurance, Goal, modular pre-certification HW systems Redundancy Device systems Production and test Preserving certification during the evolution of a mixed-criticality system SIL4 HW SIL0 evolution Contract-based design is a means to deal with modular precertification 25

26 CONTRACT-BASED DESIGN AT L3S Industrial Problem: correct interaction between sw and hw System Sw components Functional Embedded Sw components into model calculus Real-Time Micro-Kernel and HW 26

27 THE WAY FORWARD Fact: CPS is becoming a must in our society Main goal: Advocating in CPS to response to the needs of society and industry Thank you! L3S and CEA LIST can become CPS leaders in the EU and in the industrial environment CPS Master Summer School 27