Integrating runtime verification into an automated UAS traffic management system
Integrating runtime verification into an automated UAS traffic management system
复制标题
DOI：
10.1007/s11334-021-00407-5
复制
发表时间：
2020-09
影响因子：
1.2
通讯作者：
Matthew Cauwels;Abigail Hammer;B. Hertz;Phillip H. Jones;Kristin Yvonne Rozier
中科院分区：
文献类型：
--
作者：
Matthew Cauwels;Abigail Hammer;B. Hertz;Phillip H. Jones;Kristin Yvonne Rozier
无人机系统（UAS）正在迅速融入国家空域。安全地做到这一点是一个紧迫的问题，因为仅美国就有超过150万台注册的小型（55磅以下）UAS，FAA计划进一步快速扩张。这推动了对智能自动化UAS交通管理（UTM）系统的需求。与有人驾驶飞机相比，UTM必须集成运行时检查以确保系统安全，至少要弥补机上人员的不足，以采用人类航空文化中根深蒂固的常识性安全检查。我们概述了一个候选的自动化，智能UTM系统，并提出了多个集成点运行时验证，以确保UTM的每个部分坚持在操作过程中的安全要求。我们编写，验证，并提出跨多个子系统的UTM框架的正式需求的模式。我们将规范，使用集合聚合作为一种方式，提高他们的抽象从单个传感器到传感器集，这使我们能够监控系统要求的违规行为与较小的规格。在将我们的需求编码为R2U2 RV发动机中的飞行认证运行时间观测器之后，我们在多个真实测试飞行中进行了仿真，并补充了仿真数据，以涵盖飞行中未发生的其他情况。吸取的经验教训伴随着对RV纳入UTM框架的功效和性能的分析。
Unmanned Aerial Systems (UAS) are quickly integrating into the National Air Space. Doing so safely is a pressing concern, as the US alone has over 1.5 million registered small (under 55 pounds) UAS and the FAA projects further rapid expansion. This drives the need for an intelligent, automated system for UAS Traffic Management (UTM). Even more than for manned aircraft, UTM must integrate runtime checks to ensure system safety, at the very least to make up for the lack of humans on-board to employ the common-sense safety checks ingrained into the culture of human aviation. We overview a candidate automated, intelligent UTM system and propose multiple integration points for runtime verification to ensure that each part of the UTM adheres to safety requirements during operation. We write, validate, and present patterns for formal requirements across multiple subsystems of this UTM framework. We incorporate specifications that use set aggregation as a way of raising their abstraction from single sensors to sets of sensors, which allow us to monitor for system requirement violations with smaller specifications. After encoding our requirements as flight-certifiable runtime observers in the R2U2 RV engine, we execute them in simulation across multiple real-life test flights supplemented with simulated data to cover additional cases that did not occur in flight. Lessons learned accompany an analysis of the efficacy and performance of RV integration into the UTM framework.