Transferring Real-Time Systems Research into Industrial Practice: Four Impact Case Studies

Authors Robert I. Davis, Iain Bate, Guillem Bernat, Ian Broster, Alan Burns, Antoine Colin, Stuart Hutchesson, Nigel Tracey

Thumbnail PDF


  • Filesize: 403 kB
  • 24 pages

Document Identifiers

Author Details

Robert I. Davis
  • University of York, York, UK
Iain Bate
  • University of York, York, UK
Guillem Bernat
  • Rapita Systems Ltd., York, UK
Ian Broster
  • Rapita Systems Ltd., York, UK
Alan Burns
  • University of York, York, UK
Antoine Colin
  • Rapita Systems Ltd., York, UK
Stuart Hutchesson
  • Rolls-Royce PLC., Derby, UK
Nigel Tracey
  • ETAS Ltd. York, UK

Cite AsGet BibTex

Robert I. Davis, Iain Bate, Guillem Bernat, Ian Broster, Alan Burns, Antoine Colin, Stuart Hutchesson, and Nigel Tracey. Transferring Real-Time Systems Research into Industrial Practice: Four Impact Case Studies. In 30th Euromicro Conference on Real-Time Systems (ECRTS 2018). Leibniz International Proceedings in Informatics (LIPIcs), Volume 106, pp. 7:1-7:24, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2018)


This paper describes four impact case studies where real-time systems research has been successfully transferred into industrial practice. In three cases, the technology created was translated into a viable commercial product via a start-up company. This technology transfer led to the creation and sustaining of a large number of high technology jobs over a 20 year period. The final case study involved the direct transfer of research results into an engineering company. Taken together, all four case studies have led to significant advances in automotive electronics and avionics, providing substantial returns on investment for the companies using the technology.

Subject Classification

ACM Subject Classification
  • Computer systems organization → Real-time systems
  • real-time systems
  • industrial impact
  • automotive
  • avionics


  • Access Statistics
  • Total Accesses (updated on a weekly basis)
    PDF Downloads


  1. Neil C. Audsley, Iain J. Bate, and Alan Burns. Putting fixed priority scheduling into engineering practice for safety critical applications. In Real-Time Technology and Applications Symposium (RTAS), pages 2-10, 1996. Google Scholar
  2. Neil C. Audsley, Alan Burns, Mike M. Richardson, Ken Tindell, and Andy J. Wellings. Applying new scheduling theory to static priority pre-emptive scheduling. Software Engineering Journal, 8(5):284-292, 1993. Google Scholar
  3. Neil C. Audsley, Alan Burns, and Andy J. Wellings. Deadline monotonic scheduling: Theory and application. Control Engineering Practice, 1(1):71-78, 1993. Google Scholar
  4. Neil C. Audsley, Ken Tindell, and Alan Burns. The end of the line for static cyclic scheduling? In 5th Euromicro Workshop on Real-Time Systems, pages 36-41, 1993. Google Scholar
  5. AUTOSAR. Specification of operating system v3.1.1. Technical report, AUTOSAR, 2009. URL:
  6. AUTOSAR. Premium partners., 2018. Accessed: 2018-02-27.
  7. Theodore P. Baker. Stack-based scheduling of realtime processes. Real-Time Systems, 3(1):67-99, 1991. Google Scholar
  8. John Barnes. High Integrity Ada: The SPARK Approach. Addison-Wesley, 1997. Google Scholar
  9. Iain J. Bate. Scheduling and Timing Analysis for Safety-Critical Systems. PhD thesis, Department of Computer Science, University of York, 1998. Google Scholar
  10. Iain J. Bate and Alan Burns. Flexible scheduling for engine controllers - uk patent application number 9710522.5 and us patent number 6,151,538, 1997. Google Scholar
  11. Iain J. Bate and Alan Burns. Timing analysis of fixed priority real-time systems with offsets. In 9th Euromicro Workshop on Real-Time Systems, pages 153-160, 1997. Google Scholar
  12. Iain J. Bate and Alan Burns. An approach to task attribute assignment for uniprocessor systems. In 11th Euromicro Conference on Real-Time Systems, pages 46-53, 1999. Google Scholar
  13. Iain J. Bate and Alan Burns. An integrated approach to scheduling in safety-critical embedded control systems. Real-Time Systems Journal, 25(1):5-37, 2003. Google Scholar
  14. Iain J. Bate, Alan Burns, John A. McDermid, and Andrew J. Vickers. Towards a fixed priority scheduler for an aircraft application. In 8th Euromicro Workshop on Real-Time Systems, pages 34-39, 1996. Google Scholar
  15. I.J. Bate, A. Burns, T.O. Jackson, T.P. Kelly, W. Lam, P. Tongue, J.A. McDermid, A.L. Powell, J.E. Smith, A. J. Vickers, A. J. Wellings, and B.R. Whittle. Technology transfer: An integrated 'culture-friendly' approach. In Briefing Document Technology Transfer Workshop, 1996. Google Scholar
  16. Guillem Bernat, Alan Burns, and Martin Newby. Probabilistic timing analysis: An approach using copulas. J. Embedded Computing, 1(2):179-194, 2005. Google Scholar
  17. Guillem Bernat, Antoine Colin, and Stefan M. Petters. pWCET, a Tool for Probabilistic WCET Analysis of Real-Time Systems. In 3rd International Workshop on Worst-Case Execution Time Analysis, pages 21-38, 2003. Google Scholar
  18. Guillem Bernat, Antoine Colin, and Steffan M. Petters. Wcet analysis of probabilistic hard real-time systems. In 23rd IEEE Real-Time Systems Symposium, pages 279-288, 2002. Google Scholar
  19. Guillem Bernat, Robert I. Davis, Nicholas Merriam, John Tuffen, A. Gardner, Michael Bennett, and D. Armstrong. Identifying opportunities for worst-case execution time reduction in an avionics system. Ada User Journal, 28(3):189-194, 9 2007. Google Scholar
  20. Pam Binns. A robust high-performance time partitioning algorithm: the digital engine operating system (DEOS) approach. In 20th Digital Avionics Systems Conference (DASC), volume 1, pages 1B6/1-1B6/12 vol.1, Oct 2001. URL:
  21. Bosch. Can specification version 2.0. Technical report, Robert Bosch GmbH, Postfach 30 02 40, D-70442 Stuttgart, 1991. Google Scholar
  22. Alan Burns and Robert I. Davis. A survey of research into mixed criticality systems. ACM Computer Surveys, 50(6):1-37, 2017. Google Scholar
  23. Alan Burns, N. Hayes, and M.F. Richardson. Generating feasible cyclic schedules. Control Engineering Practice, 3(2):151-162, 1995. Google Scholar
  24. Alan Burns and Andy J. Wellings. Engineering a hard real-time system: From theory to practice. Softw., Pract. Exper., 25(7):705-726, 1995. URL:
  25. Lennart Casparsson, Antal Rajnak, Ken Tindell, and Peter Malmberg. Volcano - a revolution in on-board communications. Technical report, Volvo, 1998. Google Scholar
  26. Certification Authorities Software Team CAST. Addressing cache in airborne systems and equipment - cast-20, June 2003. Google Scholar
  27. Antoine Colin and Guillem Bernat. Scope-tree: A program representation for symbolic worst-case execution time analysis. In 14th Euromicro Conference on Real-Time Systems (ECRTS), 2002. Google Scholar
  28. Antoine Colin and Stefan M. Petters. Experimental evaluation of code properties for WCET analysis. In 24th IEEE Real-Time Systems Symposium (RTSS), pages 190-199, 2003. Google Scholar
  29. Robert Davis, Nick Merriam, and Nigel Tracey. How embedded applications using an RTOS can stay within on-chip memory limits. In Work in Progress and Industrial Experience Sessions, 12th EuroMicro Conference on Real-Time Systems., 2000. Google Scholar
  30. Robert I. Davis. Impact case study: Guaranteeing the real-time performance of in-vehicle networks. Technical report, University of York, 2015. URL:
  31. Robert I. Davis, Guillem Bernat, Ian Broster, and Antoine Colin. Impact case study: How long does your real-time software take to run? Technical report, University of York, 2015. URL:
  32. Robert I. Davis and Alan Burns. Robust priority assignment for messages on controller area network (CAN). Real-Time Systems, 41(2):152-180, 2009. Google Scholar
  33. Robert I. Davis, Alan Burns, Reinder J. Bril, and Johan J. Lukkien. Controller area network (CAN) schedulability analysis: Refuted, revisited and revised. Real-Time Systems, 35(3):239-272, 2007. Google Scholar
  34. Robert I. Davis, Alan Burns, Victor Pollex, and Frank Slomka. On priority assignment for controller area network when some message identifiers are fixed. In 23rd International Conference on Real Time Networks and Systems, RTNS, pages 279-288, 2015. Google Scholar
  35. Robert I. Davis, Steffen Kollmann, Victor Pollex, and Frank Slomka. Controller area network (CAN) schedulability analysis with FIFO queues. In 23rd Euromicro Conference on Real-Time Systems (ECRTS), pages 45-56, 2011. Google Scholar
  36. Robert I. Davis, Steffen Kollmann, Victor Pollex, and Frank Slomka. Schedulability analysis for controller area network (CAN) with FIFO queues priority queues and gateways. Real-Time Systems, 49(1):73-116, 2013. Google Scholar
  37. Robert I. Davis and Nicolas Navet. Controller area network (CAN) schedulability analysis for messages with arbitrary deadlines in FIFO and work-conserving queues. In 9th IEEE International Workshop on Factory Communication Systems, (WFCS), pages 33-42, 2012. Google Scholar
  38. Robert I. Davis and Nigel Tracey. Impact case study: The world’s smallest automotive real-time operating system. Technical report, University of York, 2015. URL:
  39. Paul Emberson and Iain J. Bate. Minimising task migrations and priority changes in mode transitions. In 13th IEEE Real-Time And Embedded Technology and Applications Symposium, pages 158-167, 2007. Google Scholar
  40. Paul Emberson and Iain J. Bate. Stressing search with scenarios for flexible solutions to real-time task allocation problems. IEEE Transactions on Software Engineering, 36(5):704-718, 2010. Google Scholar
  41. ETAS. RTA-OS RH850/WR Port Guide., 2017. Accessed: 2018-02-27.
  42. ETAS. RTA software products., 2018. Accessed: 2018-02-27.
  43. Mentor Graphics. Volcano in-vehicle embedded software. Accessed: 2018-02-27.
  44. Mentor Graphics. Volcano Network Architect (vna). Accessed: 2018-02-27.
  45. Mentor Graphics. Mentor graphics strengthens its automotive solutions portfolio with the acquisition of volcano communications technologies., 2005. Accessed: 2018-02-27.
  46. Mentor Graphics. Shanghai automotive industries adopts mentor graphics volcano automotive network design tools., 2006. Accessed: 2018-02-27.
  47. Mentor Graphics. Volcano target package datasheet., 2006. Accessed: 2018-02-27.
  48. Mentor Graphics. Volcano target package datasheet., 2010. Accessed: 2018-02-27.
  49. Mentor Graphics. Volcano network architect from mentor graphics verifies and improves network bandwidth usage at mazda., 2012. Accessed: 2018-02-27.
  50. Paul Graydon and Iain J. Bate. Realistic safety cases for the timing of systems. The Computer Journal, 57(5):759-774, 2014. Google Scholar
  51. S. Hutchesson and N. Hayes. Technology transfer and certification issues in safety critical real-time systems. In Digest of the IEE Colloquium on Real-Time Systems, page 98/306, 1998. Google Scholar
  52. ISO. ISO 17356-3:2005 preview road vehicles - open interface for embedded automotive applications - part 3: Osek/vdx operating system (os). Technical report, ISO, 2005. URL:
  53. Tim Kelly, Iain J. Bate, John McDermid, and Alan Burns. Building a preliminary safety case: An example from aerospace. In Australian Workshop on Industrial Experience with Safety Critical Systems and Software, 1997. Google Scholar
  54. Dawood Ashraf Khan, Robert I. Davis, and Nicolas Navet. Schedulability analysis of CAN with non-abortable transmission requests. In 16th IEEE Conference on Emerging Technologies & Factory Automation, (ETFA), pages 1-8, 2011. Google Scholar
  55. Motorola. MSCAN block guide. Technical report, Motorola, , Document No. S12MSCANV2/D., 2004. URL:
  56. Antal Rajnak. Volcano technology: Enabling correctness by design. In The Industrial Communication Technology Handbook, chapter 32. CRC Press, 2009. Google Scholar
  57. RTCA-EUROCAE. Software Considerations in Airborne Systems and Equipment Certification DO-178B/ED-12B. RTCA, Inc, December 1992. Google Scholar
  58. Rapita Systems. Capturing worst case timing and stack usage data for do-178b level a embraer flight control systems. Accessed: 2018-02-27.
  59. Rapita Systems. Verifying the timing correctness of infineon’s safetcore safety drivers. Accessed: 2018-02-27.
  60. Rapita Systems. Rapitime worst-case execution time optimization on the bae systems hawk mission computer., 2006. Accessed: 2018-02-27.
  61. Rapita Systems. Flight control system execution timing analyzed cheaper, faster with rapitime., 2009. Accessed: 2018-02-27.
  62. Rapita Systems. Proving and Improving Worst-Case Execution Times on the Alenia Aermacchi M-346., 2010. Accessed: 2018-02-27.
  63. Rapita Systems. Qualification of RapiCover for MC/DC coverage of DO-178B level-A software. , 2010. Accessed: 2018-03-26.
  64. Rapita Systems. Danlaw acquires rapita systems., 2016. Accessed: 2018-02-27.
  65. Ken Tindell and Alan Burns. Guaranteeing message latencies on controller area network (CAN). In 1st international CAN conference, pages 1-11, 1994. Google Scholar
  66. Ken Tindell, Alan Burns, and Andy J. Wellings. An extendible approach for analyzing fixed priority hard real-time tasks. Real-Time Systems, 6(2):133-151, 1994. Google Scholar
  67. Ken Tindell, Alan Burns, and Andy J. Wellings. Analysis of hard real-time communications. Real-Time Systems, 9(2):147-171, 1995. Google Scholar
  68. Ken Tindell, Alan Burns, and Andy J. Wellings. Calculating controller area network (CAN) message response times. Control Engineering Practice, 3(8):1163-1169, 1995. Google Scholar
  69. Ken Tindell, H. Hanssmon, and Andy J. Wellings. Analysing real-time communications: Controller area network (CAN). In 15th IEEE Real-Time Systems Symposium, pages 259-263, 1994. Google Scholar
  70. Volvo. Volvo annual reports., 2018. Accessed: 2018-02-27.
  71. Reinhard Wilhelm, Jakob Engblom, Andreas Ermedahl, Niklas Holsti, Stephan Thesing, David Whalley, Guillem Bernat, Christian Ferdinand, Reinhold Heckmann, Tulika Mitra, Frank Mueller, Isabelle Puaut, Peter Puschner, Jan Staschulat, and Per Stenström. The worst-case execution-time problem; overview of methods and survey of tools. ACM Trans. Embed. Comput. Syst., 7(3):36:1-36:53, 2008. URL:
  72. Yaba. Rapita systems flies high., 2005. Accessed: 2018-02-27.
  73. Patrick Meumeu Yomsi, Dominique Bertrand, Nicolas Navet, and Robert I. Davis. Controller area network (CAN): response time analysis with offsets. In 9th IEEE International Workshop on Factory Communication Systems, (WFCS), pages 43-52, 2012. Google Scholar
Questions / Remarks / Feedback

Feedback for Dagstuhl Publishing

Thanks for your feedback!

Feedback submitted

Could not send message

Please try again later or send an E-mail