Document Open Access Logo

Controlling Concurrent Change - A Multiview Approach Toward Updatable Vehicle Automation Systems

Authors Mischa Möstl , Marcus Nolte, Johannes Schlatow , Rolf Ernst



PDF
Thumbnail PDF

File

OASIcs.ASD.2019.4.pdf
  • Filesize: 2.18 MB
  • 15 pages

Document Identifiers

Author Details

Mischa Möstl
  • Technische Universität Braunschweig, Institute of Computer and Network Engineering , Hans-Sommer-Str. 66, 38106 Braunschweig, Germany
Marcus Nolte
  • Technische Universität Braunschweig, Institute of Computer and Network Engineering , Hans-Sommer-Str. 66, 38106 Braunschweig, Germany
Johannes Schlatow
  • Technische Universität Braunschweig, Institute of Computer and Network Engineering , Hans-Sommer-Str. 66, 38106 Braunschweig, Germany
Rolf Ernst
  • Technische Universität Braunschweig, Institute of Computer and Network Engineering , Hans-Sommer-Str. 66, 38106 Braunschweig, Germany

Acknowledgements

The authors thank the other members of the CCC research group for many fruitful discussions and their support.

Cite AsGet BibTex

Mischa Möstl, Marcus Nolte, Johannes Schlatow, and Rolf Ernst. Controlling Concurrent Change - A Multiview Approach Toward Updatable Vehicle Automation Systems. In Workshop on Autonomous Systems Design (ASD 2019). Open Access Series in Informatics (OASIcs), Volume 68, pp. 4:1-4:15, Schloss Dagstuhl - Leibniz-Zentrum für Informatik (2019)
https://doi.org/10.4230/OASIcs.ASD.2019.4

Abstract

The development of SAE Level 3+ vehicles [{SAE}, 2014] poses new challenges not only for the functional development, but also for design and development processes. Such systems consist of a growing number of interconnected functional, as well as hardware and software components, making safety design increasingly difficult. In order to cope with emergent behavior at the vehicle level, thorough systems engineering becomes a key requirement, which enables traceability between different design viewpoints. Ensuring traceability is a key factor towards an efficient validation and verification of such systems. Formal models can in turn assist in keeping track of how the different viewpoints relate to each other and how the interplay of components affects the overall system behavior. Based on experience from the project Controlling Concurrent Change, this paper presents an approach towards model-based integration and verification of a cause effect chain for a component-based vehicle automation system. It reasons on a cross-layer model of the resulting system, which covers necessary aspects of a design in individual architectural views, e.g. safety and timing. In the synthesis stage of integration, our approach is capable of inserting enforcement mechanisms into the design to ensure adherence to the model. We present a use case description for an environment perception system, starting with a functional architecture, which is the basis for componentization of the cause effect chain. By tying the vehicle architecture to the cross-layer integration model, we are able to map the reasoning done during verification to vehicle behavior.

Subject Classification

ACM Subject Classification
  • Hardware → Safety critical systems
Keywords
  • safety
  • behavior
  • functional
  • architecture
  • multi-view
  • automated driving

Metrics

  • Access Statistics
  • Total Accesses (updated on a weekly basis)
    0
    PDF Downloads

References

  1. Genode OS Framework release notes 16.11, 17.08, 18.02 and 18.08. URL: https://genode.org/documentation/release-notes/index.
  2. MAST: Modeling and Analysis Suite for Real-Time Applications. URL: http://mast.unican.es/.
  3. A. Avizienis, J. C. Laprie, B. Randell, and C. Landwehr. Basic concepts and taxonomy of dependable and secure computing. IEEE Transactions on Dependable and Secure Computing, 1(1):11-33, 2004. Google Scholar
  4. G. Bagschik, M. Nolte, S. Ernst, and M. Maurer. A System’s Perspective Towards an Architecture Framework for Safe Automated Vehicles. In 2018 IEEE International Conference on Intelligent Transportation Systems (ITSC), pages 2438-2445, 2018. Google Scholar
  5. Peter Johannes Bergmiller. Towards functional safety in drive-by-wire vehicles. Springer, 2015. Google Scholar
  6. A. Elfes. Using occupancy grids for mobile robot perception and navigation. Computer, 22(6):46-57, 1989. URL: http://dx.doi.org/10.1109/2.30720.
  7. Norman Feske. Genode OS Framework Foundations 18.05, May 2018. URL: http://genode.org/documentation/genode-foundations-18-05.pdf.
  8. Patrik Feth, Rasmus Adler, Takeshi Fukuda, Tasuku Ishigooka, Satoshi Otsuka, Daniel Schneider, Denis Uecker, and Kentaro Yoshimura. Multi-aspect Safety Engineering for Highly Automated Driving: Looking Beyond Functional Safety and Established Standards and Methodologies. In Barbara Gallina, Amund Skavhaug, and Friedemann Bitsch, editors, Computer Safety, Reliability, and Security. SAFECOMP 2018. Lecture Notes in Computer Science, volume 11093, pages 59-72. Springer International Publishing, 2018. Google Scholar
  9. Kai Huang, Gang Chen, C. Buckl, and A. Knoll. Conforming the runtime inputs for hard real-time embedded systems. In 2012 49th ACM/EDAC/IEEE Design Automation Conference (DAC), pages 430-436, June 2012. Google Scholar
  10. Intern. Organization for Standardization - ISO. ISO 26262 - Road vehicles - Functional safety, 2 edition, April 2011. Google Scholar
  11. Intern. Organization for Standardization - ISO. ISO/IEC 42010 - Systems and software engineering - Architecture description, 2011. Google Scholar
  12. International Standard Office. ISO/PRF PAS 21448: Road vehicles : Safety of the intended functionality. ISO, 2018. Google Scholar
  13. Helmut Martin, Kurt Tschabuschnig, Olof Bridal, and Daniel Watzenig. Functional Safety of Automated Driving Systems: Does ISO 26262 Meet the Challenges? In Computer Safety, Reliability, and Security. SAFECOMP 2017. Lecture Notes in Computer Science, pages 387-416. Springer, Cham, 2017. Google Scholar
  14. Richard Matthaei, Gerrit Bagschik, Jens Rieken, and Markus Maurer. Stationary Urban Environment Modeling Using Multi-Layer-Grids. In 17th International Conference on Information Fusion, 2014. Google Scholar
  15. Mischa Möstl and Rolf Ernst. Cross-Layer Dependency Analysis with Timing Dependence Graphs. In Proceedings of the 55th Design Automation Conference (DAC), 2018. Google Scholar
  16. Mischa Möstl, Johannes Schlatow, and Rolf Ernst. Synthesis of Monitors for Networked Systems With Heterogeneous Safety Requirements. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 37(11):2824-2834, November 2018. URL: http://dx.doi.org/10.1109/TCAD.2018.2862458.
  17. M. Neukirchner, T. Michaels, P. Axer, S. Quinton, and R. Ernst. Monitoring Arbitrary Activation Patterns in Real-Time Systems. In Real-Time Systems Symposium (RTSS), 2012 IEEE 33rd, pages 293-302, 2012. URL: http://dx.doi.org/10.1109/RTSS.2012.80.
  18. Moritz Neukirchner, Philip Axer, Tobias Michaels, and Rolf Ernst. Monitoring of Workload Arrival Functions for Mixed-Criticality Systems. In 2013 IEEE 34th Real-Time Systems Symposium, pages 88-96. IEEE, 2013. URL: http://dx.doi.org/10.1109/RTSS.2013.17.
  19. M. Nolte, M. Rose, T. Stolte, and M. Maurer. Model predictive control based trajectory generation for autonomous vehicles — an architectural approach. In 2017 IEEE Intelligent Vehicles Symposium (IV), pages 798-805, 2017. Google Scholar
  20. Marcus Nolte, Gerrit Bagschik, Inga Jatzkowski, Torben Stolte, Andreas Reschka, and Markus Maurer. Towards a Skill- And Ability-Based Development Process for Self-Aware Automated Road Vehicles. In 2017 IEEE 20th International Conference on Intelligent Transportation Systems (ITSC), Yokohama, Japan, 2017. Google Scholar
  21. Andreas Reschka, Gerrit Bagschik, Simon Ulbrich, Marcus Nolte, and Markus Maurer. Ability and Skill Graphs for System Modeling, Online Monitoring, and Decision Support for Vehicle Guidance Systems. In 2015 IEEE Intelligent Vehicles Symposium (IV), pages 933-939, Seoul, South Korea, 2015. Google Scholar
  22. Kai Richter. Compositional Scheduling Analysis Using Standard Event Models. Institut für Datentechnik, 2005. URL: http://www.digibib.tu-bs.de/?docid=00001765.
  23. J. Rieken, R. Matthaei, and M. Maurer. Toward Perception-Driven Urban Environment Modeling for Automated Road Vehicles. In 2015 IEEE 18th International Conference on Intelligent Transportation Systems, pages 731-738, 2015. Google Scholar
  24. SAE. J3016: Taxonomy and Definitions for Terms Related to On-Road Motor Vehicle Automated Driving Systems. Vehicle Electrification Subscription, 2014. Google Scholar
  25. Johannes Schlatow and Rolf Ernst. Response-Time Analysis for Task Chains in Communicating Threads. In Real-Time Embedded Technology &Applications Symposium (RTAS), Vienna, Austria, April 2016. Google Scholar
  26. Johannes Schlatow and Rolf Ernst. Response-Time Analysis for Task Chains with Complex Precedence and Blocking Relations. International Conference on Embedded Software (EMSOFT), ACM Transactions on Embedded Computing Systems ESWEEK Special Issue, 16(5s):172:1-172:19, September 2017. Google Scholar
  27. Johannes Schlatow, Mischa M"ostl, and Rolf Ernst. An extensible autonomous reconfiguration framework for complex component-based embedded systems. In 12th International Conference on Autonomic Computing (ICAC), pages 239-242, Grenoble, France, July 2015. Google Scholar
  28. Johannes Schlatow, Marcus Nolte, Mischa Möstl, Inga Jatzkowski, Rolf Ernst, and Markus Maurer. Towards model-based integration of component-based automotive software systems. In Annual Conference of the IEEE Industrial Electronics Society (IECON17), Beijing, China, October 2017. URL: http://dx.doi.org/10.24355/dbbs.084-201803221525.
  29. Simon Schliecker, Jonas Rox, Matthias Ivers, and Rolf Ernst. Providing accurate event models for the analysis of heterogeneous multiprocessor systems. In Proceedings of the 6th IEEE/ACM/IFIP international conference on Hardware/Software codesign and system synthesis, CODES+ISSS '08, pages 185-190, New York, NY, USA, 2008. ACM. Google Scholar
  30. T. Solte, Tianyu Liao, Matthias Nee, Marcus Nolte, and Markus Maurer. Investigating Cross-Domain Redundancies in the Context of Vehicle Automation - A Trajectory Tracking Perspective. In IEEE International Conference on Intelligent Transportation Systems (ITSC), pages 2398-2405, 2018. Google Scholar
  31. Daniel Thiele, Philip Axer, and Rolf Ernst. Improving Formal Timing Analysis of Switched Ethernet by Exploiting FIFO Scheduling. In 52nd Annual Design Automation Conference, DAC '15, pages 41:1-41:6, New York, NY, USA, 2015. ACM. Google Scholar
  32. Waymo. Waymo Safety Report: On the Road to Fully Self-Driving, 2017. Google Scholar
  33. J. M. Wille, F. Saust, and M. Maurer. Stadtpilot: Driving autonomously on Braunschweig’s inner ring road. In 2010 IEEE Intelligent Vehicles Symposium, pages 506-511, June 2010. Google Scholar
Questions / Remarks / Feedback
X

Feedback for Dagstuhl Publishing


Thanks for your feedback!

Feedback submitted

Could not send message

Please try again later or send an E-mail