You are on page 1of 23

Integrated Modular Avionics Simulation and Modelling

Steve Ellis, AIRBUS

VIVACE Forum 1, Warwick, U.K.

Sept. 20-21, 2005

IMA Simulation and Modelling


Task: Integrated Modular Avionics (IMA)
WP
System Simulation

Task
VIRTUAL AIRCRAFT

Use Case
Effective & Efficient development process for simulation

Scenario
Fuel system simulation

Shared Simulation assets in the extended enterprise Use of Simulation for the earliest IV&V of systems
Integration of the simulation in the whole dev. cycle of systems

HYDRAULIC SYSTEM

Improve hydraulic system model fidelity

Improve (detailed) hydraulic model fidelity Improve flight cases fidelity

ELECTRICAL SYSTEM

Improve electrical system design

Multi-level modelling Right sized multi-domain simulations Enhanced failure modes implementation

Presented at M21 Forum Not presented at M21 Forum

IMA FLAPS

Define IMA simulation needs Improve High lift Verification & Certif.

ADCN Network Simulation Substitution of "Bang Test" for A380 Substitution of IMO-Tests for A380 Derivates

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 2

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


Task: Integrated Modular Avionics (IMA) Task Objective: To define an improved Integrated Modular Avionics (IMA) process using early validation based on existing components simulation models Subtasks: - IMA Management - IMA Process and Simulation - Network Simulation Methods - Network Simulation Models Development - Evaluation and Analysis Participants: Airbus France, Airbus UK, Airbus Germany Thales Avionics, ONERA
IMA Simulation and Modelling 2004 VIVACE Consortium Members. All rights reserved Page: 3 FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


Subtask: IMA Process and Simulation

Subtask Objective
To identify areas of improvement in the IMA Validation and Verification (V&V) process by applying Modelling and Simulation in order to determine system feasibility and improve system maturity

Strategy
Identify a set of IMA Process and Simulation activities - Avionics Full Duplex Switched Ethernet (AFDX) Network Optimisation - Integrated Modular Avionics (IMA) Module Configuration - Integrated Modular Avionics (IMA) Application Environment For each IMA Process and Simulation activity - Analyse current IMA Process(es) - Identify Use Cases (scenarios) - Define modelling and simulation approaches - Determine expected results Propose Activity and Use Cases to be implemented in following subtask

Final Document Delivery: October 2005


IMA Simulation and Modelling 2004 VIVACE Consortium Members. All rights reserved Page: 4 FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Environment: AFDX Network Architecture
FCSC1 SFCC1 COM MON COM MON FCGC1 COM MON FCGC3 COM MON COM FCGC2 MON COM FCSC2 MON COM TBC MON SFCC2 MON

FCSC3 COM

SW
IOM

SW
IOM

ADIRU1

FM1 ADIRU3

SW SW13
FM3

FM2

ADIRU2

EEC1 EHM1 EEC2 EHM2 FW1 FCDC1 AESU1 ACR2 opt ACR1

EEC3

L1
ATC1

L2 L3

C1 C2 R3

R2

R1
ATC2

EHM3 EEC4 EHM4

SW
IOM
SCI ELM CBM SB24 ACMF FDIF HSM AIC? HSM AIC? ELM CBM SB24

SW
IOM
SCI Fuel COM ECB ext lights ctrl MON

FW2 FCDC2 AESU2

Fuel LG,TP&BS COM MON COM MON

LG,TP&BS COM MON

SW
CIDS

SW
IPCU PESC

CIDS

IRDC
PWCU VSC

IPCU

IRDC

SW
SPDB doors ctrl, oxygen ctrl

SW
SPDB

implementation TBD
Air conditioning Ventil &press Air conditioning Ventil &press

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 5

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Environment: IMA Module Architecture
System Partitions
Module Monitoring Resource BITE
Simple Network Mgmt Protocol Mgmt Information Base Instrumentation Services and Data Loading

Application A1

Application Ai

Partition P11

Partition P1m

Partition Pi1

Partition Pin

API Extensions
Configuration Tables

Application Programming Interface (API)

Operating System
(partition/process scheduling, I/O communication, timer handling etc)

Module Hardware and Physical I/O Drivers

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 6

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


AFDX Network: Process analysis and Use Case Identification

Analysis of the current process


Analysis of AFDX Dataflow Definition Analysis of current Network Configuration

Proposed Use Cases (UCn) for process improvement


UC1: Virtual Link (VL) Network Definition Optimisation for IMA Architecture (ATA 42) UC2: Virtual Link (VL) Network Definition Optimisation for System Functions (ATA XX) UC3: Network fault simulation UC4: Network Built-in Test Equipment (BITE) Function simulation

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 7

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


AFDX Network: UC 1/2/3 Objectives, Means and Expected Results Objectives
Validate network physical/functional architecture Define application communications and validate the system performance Consolidate the network logical architecture (VL definition) Guarantee network performances and determinism Drive and support network management studies

NCD ICDs
Toplogy VLs
VLs messages

MMI
Pre-processing NCD/ICD

Means
Represent model in an appropriate language Use of Hyperformix Workbench as Simulation Platform

Generic Network Simulation


(Workbench)

MMI
Post-processing

Expected Results
Optimised VL definitions for the network Optimised message allocation on the VL network definitions Analysis of network failure scenarios
IMA Simulation and Modelling 2004 VIVACE Consortium Members. All rights reserved Page: 8

Synthesis Analysis

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


AFDX Network: UC 1/2/3 Network Optimisation & Fault Simulation
UML diagram SDL diagram ...

Application data base

Network data base

C code WorkBench diagram

Components behaviour to WorkBench translator

Interface Control Document (ICD)

Network Configuration Document (NCD)


K, ork t O tw s no Ne tic If es eris t g an rac ch ha c

Components behaviour description

xCD to WorkBench translator

WorkBench Simulation context

Components Interconnection description

Simulation parameters

Simulation results

lts su re es at u al Ev

Results visualisation

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 9

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


AFDX Network: UC 4 Objectives, Means and Expected Results Objectives
Validate Network BITE Function (NBF)

Means
User validates a set of correlation algorithms and the Network BITE configuration End System messages simulation, AFDX Network Fault simulation Correlation algorithm, Configuration Table of the NBF User takes into account the redundancy of the AFDX network, and defines both A and B networks Proposed methods to capture the BITE protocol behaviour are Statecharts, Message Sequence Charts (MSCs) Simulation to be provided by commercial tools (identities are TBD)

Expected Results
Optimised BITE message definitions

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 10

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Module: Process analysis and Use Case Identification

Analysis of the current process


Analysis of IMA Module Configuration Process Analysis of IMA Module Integration of Application Software

Proposed Use Cases (UCn) for process improvement


UC1: Improved Configuration Maturity by early System Simulation UC2: Optimisation of Resource Usage by distributed System Simulation

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 11

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Module: UC1 Objectives, Means and Expected Results
Objectives
Decrease complexity of configuration and configuration process Reduce the time required to integrate new configurations Improve efficiency of configuration changes Provide early maturity and validation of configuration

Means
Representative Simulation Platform for the systems Functionalities outside of the CPIOMs are simulated with regards to I/O and performance (supported by System Designers) Several levels of conformity to real system software are possible (flexible)

Expected Results
Optimised Module Configuration, especially with regards to I/O Possibility to gain configuration maturity faster Reduction of development time by minimizing the number of cycles Possibility of checking configuration changes at Airbus within short time

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 12

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Module: UC1 Improved Configuration Maturity
Simulation Environment Hardware CPU Memory, I/O Devices Operating System (OS) Time/Memory Mgmt. I/O Drivers Configuration Data Simulation SW Model A/C Envt Simulation Kernel Ext. Function Simulation Test Procedures Monitoring Section OS Interface IMA protocol models AFDX A429 CAN D/A

LRU Simulation Kernels LRU x LRU y RDC z

Interfaces

Focus on Simulation Software Model for the external A/C environment

CPIOM Real Application OS Config Dummy Partition Table


Test Application

Application Area

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 13

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Module: UC2 Objectives, Means and Expected Results
Objectives
Support multiple functions sharing the computing resource Resource distribution to be controlled by the module configuration table Early evaluation to optimise the overall resource usage

Means
Simulation platform for the applications outside of the module Concurrent operation of several CPIOM applications Simulation for analysis of: Applications real-time operation I/O Assignment, I/O Usage, I/O driver latency Platform supports use of real CPIOM applications or CPIOM application models

Expected Results
Optimised distribution of applications to the available modules Optimised sharing of module resources between the systems/applications Minimisation of the necessary resources
IMA Simulation and Modelling 2004 VIVACE Consortium Members. All rights reserved Page: 14 FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Module: UC2 Optimisation of Resource Usage
Simulation Environment

Focus on distributed System Simulation


not fully functional simulation, concentrating on computing resource,

Hardware CPU Memory, I/O Devices Operating System (OS) Time/Memory Mgmt. I/O Drivers Configuration Data

Simulation SW Model A/C Envt Simulation Kernel Ext. Function Simulation Test Procedures Monitoring Section OS Interface IMA protocol models AFDX A429 CAN D/A

LRU Simulation Kernels LRU x LRU y RDC z


Interfaces

Interfaces

only the CPIOM CPIOM A applications are OS simulated, Config Table P11 P21 P31 P41

CPIOM B OS Config Table P42 P51 P52 P53

APP 1
IMA Simulation and Modelling

APP 2

APP 3
Page: 15

APP 4

APP 5
FORUM 1 20 & 21September 2005

2004 VIVACE Consortium Members. All rights reserved

....

IMA Simulation and Modelling


IMA Application: Process analysis and Use Case Identification

Analysis of the current process


Analysis of IMA Application Software Environment Analysis of IMA Application Software Life Cycle Process

Proposed Use Cases (UCn) for process improvement


UC1: Analysis of design capture of application functionality UC2: Analysis of partition-external I/O communication strategies UC3: Module configuration of application partitions UC4: Analysis of impact of Error Handling and BITE on application software

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 16

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Application: UC1->4 - Objectives, Means and Expected Results Objectives
Facilitate recognition of the feasibility of functional and temporal requirements Determine the software design impact of requirements and their evolution Support construction of improved software design structures and interfaces Validate the software designs real-time behaviour in an IMA environment

Means
Specify application functionality/design in Unified Modelling Language (UML) Augment applications UML model with spatial/temporal characteristics Script-based static analysis of UML model to determine spatial features Script-based dynamic analysis of UML model, according to simulated temporal flow and scripted events, to determine dynamic behaviour e.g. schedulability Proposed usage of Aonix Ameos as UML Modelling/Simulation platform

Expected Results
Identification of application resources (memory/time) for required functionality Determination of improved runtime profile for application throughput/response Identification of worst case processing paths for normal/abnormal operation Early detection of runtime behaviour anomalies (e.g. priority inversion)
2004 VIVACE Consortium Members. All rights reserved Page: 17 FORUM 1 20 & 21September 2005

IMA Simulation and Modelling

IMA Simulation and Modelling


IMA Application: Generic IMA Software Life Cycle
Software Requirements Process (SRP) [scope: Application system] Application System Integration and Verification Process (ASIVP)

Verification

Software Design Process (SDP) [scope: IMA Application]

Application Integration and Verification Process (APIVP)

Source Code Abstraction Process (SCAP) [scope: IMA Process]

Process Generation and Verification Process (PRGVP)

Source Code Generation Process (SCGP) [scope: Source Code]

Source Code Verification Process (SCVP)

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 18

FORUM 1 20 & 21September 2005

Int eg rat ion

n/I sig De tat en lem mp

on ati lid Va

Software Detailed Design Process (SDDP) [scope: IMA Partition]

Partition Integration and Verification Process (PAIVP)

ion

IMA Simulation and Modelling


IMA Application: Software Validation and Verification Processes
Process Review (prev)

Requirement Change Proposals (RCPs) on HRs

Life Cycle Process Input data

NEW
Reqt resolution requested (assumed HR raised by Des/Impl process)

Problem Reports (PRs)

Software Validation Results (SVLR) Model analysis results (via script execution) HR/LR analysis and traceability results (manual) HRs

Life Cycle Process (Des/Impl)

Test failures

Software Verification Results (SVRR) Scrutiny Reports - SRs (manual) Test Results (via s/w execution)

Software standards for current process (SRS, SDS or SCS)

Proc Rvw (Des/Imp)

Software Validation Process (SVLP)

Life Cycle Process Output data LRs and assumed HRs Proc Rvw (Des/Imp)

Software verification Process (SVRP)

Proc Rvw (Des/Imp)

Integration Phase

Proc Rvw (Integ)

Model selection/annotation strategy and script determination

HR/LR coverage and review criteria

Review/Analysis criteria (e.g. selection of standards rules specific to s/w level)

Test strategy (test scenarios and test environment)

Software Validation Cases & Procedures (SVLCP) Proc Rvw (Des/Imp) Reqt resolution requested (RCPs from next Des/Impl process)

Software Verification Cases & Procedures (SVRCP) Proc Rvw (Des/Imp)

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 19

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Application: Software Development Models and Properties
S/W Life Cycle Process IMA Scope Functional Diagrams (used in UML model) Design Diagrams (used in UML model) Design Diagram Components Model properties analysed (from Design Diagrams)

Software Requirements System Process (SRP)

Diagram Types: UC = UseCase, CL/OB = Class/Object, SS = Subsystem, SQ = Sequence, CB = Collaboration, AC = Activity, SC = StateChart Presence: M = mandatory, P = probable, I = improbable Application M: UC Applications, OS, M: SS P: SQ, CB, SC I: AC P: CL/OB (for i/fs), SQ I: CB, AC, SC M: SS, CL/OB (active) P: SQ, CB I: SC, AC M: SS, CL/OB (active) P: SQ, CB, SC I: AC M: CL/OB (passive) P: SC, AC I: SQ, CB Not applicable
Not applicable Process-local data structures/variables, API service i/fs external devices, interapplication i/fs

Side changeover latency, inter-application data traffic

Software Application M: UC Design P: SQ, CB, SC Process (SDP)

I: AC
Software Detailed Design Process (SDDP) Source Code Abstraction Process (SCAP) Source Code Generation Process (SCGP) Partition

Partitions and partition Partition configurability, slices, OS, config tables, inter-partition (appl and inter-partition i/fs system partitions) data traffic e.g. BITE. Processes, OS/API patterns, config tables, inter-process i/fs, algorithmic objects Process schedulability, partition slice WCET, priority inversion, race conditions, deadlocks etc. Error handling/BITE overheads Process-local WCET

M: UC P: SQ, CB, SC I: AC

Process

M: UC P: SC, AC I: SQ, CB Not applicable

Source Code

Not applicable

NB. Functional diagrams may also be analysed (e.g.) to determine requirements consistency, requirements traceability etc.
IMA Simulation and Modelling 2004 VIVACE Consortium Members. All rights reserved Page: 20 FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


IMA Application: Model Analysis/Simulation Environment

Run script

UML Editor

Script Manager (SM)


Create script Create script library

Create UML model

UML Diagrams

Query Reporting Language (QRL) Scripts Object Mgmt System (OMS) i/f (in OMS QL)

Script Library e.g. data structures

UML Repository Persistent Data Model (PDM)

Query and Reporting Processor (QRP)

Script Results (printed)

Script Results (File storage)

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 21

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


Subtask Status: IMA Process and Simulation First draft document delivered in December 2004 including:
Analysis of current IMA process (AFDX Network and IMA Modules) Proposal of general simulation Use Cases Airbus France and Thales Avionics: Use Cases for the AFDX Network Optimisation Airbus Germany: Use Cases for the IMA Module Configuration Airbus UK: Use Cases for the IMA Application Environment ONERA: General modelling and simulation approach

Final document in preparation for October 2005 including


Description of detailed simulation Use Cases Modelling and simulation approaches for Use Cases Description of expected process improvements Description of expected gain

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 22

FORUM 1 20 & 21September 2005

IMA Simulation and Modelling


Subtask: IMA Process and Simulation

Thank you for your Attention !

Questions ?

IMA Simulation and Modelling

2004 VIVACE Consortium Members. All rights reserved

Page: 23

FORUM 1 20 & 21September 2005

You might also like