Towards Component-Based Design of Safety-Critical Cyber-Physical Applications
Towards Component-Based Design of Safety-Critical Cyber-Physical Applications
复制标题
迈向安全关键型网络物理应用的基于组件的设计
DOI：
10.1109/dsd.2014.87
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
W. Hardt
中科院分区：
文献类型：
--
作者：
Alejandro Masrur;M. Kit;T. Bures;W. Hardt
网络物理系统通常涉及大量的移动自主设备，这些设备彼此之间及其环境之间密切交互。来自嵌入式领域的标准设计和开发技术不能准确地对这种系统的动态进行建模，因此，对新的编程模型和抽象的需求越来越大。基于组件的设计方法是管理大规模动态系统复杂性的一种很有前途的解决方案。然而，现有的此类方法要么没有准确地对组件之间的瞬时交互进行建模--这是网络物理系统的典型特征--要么没有为实时行为提供保证，而实时行为在许多安全关键应用中是必不可少的。为了解决这一问题，本文提出了一种基于DEECo(可靠的紧急组件集成)的构件化设计方法。DEECo框架允许通过一组交互组件对大规模动态系统进行建模。与文献中的其他基于组件的设计方法不同，DEECo提供了描述组件之间短暂交互的机制。我们对DEECo设计流程引入了必要的扩展，并将其与实时分析技术集成在一起，从而允许在组件描述级别上对时序行为进行推理。最后，我们通过一个由智能十字路口系统组成的案例研究来说明我们的方法的简单性和有效性。
Cyber-physical systems typically involve a large number of mobile autonomous devices that closely interact with each other and their environment. Standard design and development techniques from the embedded domain fail to accurately model the dynamics of such systems and, hence, there is an increasing need for new programming models and abstractions. Component-based design approaches are a promising solution to manage the complexity of large-scale dynamic systems. However, existing such approaches either do not accurately model transitory interactions between components -- which are typical of cyber-physical systems -- or do not provide guarantees for real-time behavior which is essential in many safety-critical applications. To overcome this problem, in this paper, we present a component-based design technique based on DEECo (Dependable Emergent Ensembles of Components). The DEECo framework allows modeling large-scale dynamic systems by a set of interacting components. In contrast to other component-based design approaches from the literature, DEECo provides mechanisms to describe transitory interactions between components. We introduce necessary extensions to the DEECo design flow and integrate it with real-time analysis techniques that allow reasoning about timing behavior at the component-description level. Finally, we illustrate the simplicity and usefulness of our approach on a case study consisting of an intelligent crossroad system.