Architecture and Mechanisms of the Multi-Change Control Layer (MCCL)

本项目致力于开发一个灵活的分布式中间件，它可以自动管理和保证在不断变化的硬件平台和环境中执行的多个同时变化的应用程序的安全性、可靠性和可用性要求。尽管这些应用程序在功能上是独立的，但它们可能共享和访问公共平台组件。由于这种资源争用，这可能导致冲突或矛盾的目标。应用规范和需求以及平台属性以契约的形式进行描述和形式化。基于这些契约，中间件必须评估当前和未来可能的系统状态，并找到新的系统配置，以保证所有的需求，因此，中间件的任务是解决这些冲突，优化系统的整体性能，并保证正确的执行。为此，已经开发了一个模型和一个执行域，负责建模，分析和运行时监控。这些域包含由B项目开发的方法。由此产生的中间件已经与现有的运行时环境相结合，并作为C项目的基础。这是项目第一阶段的重点，在项目第二阶段，该中间件将包括越来越开放的网络和硬件平台，涉及多个网络（子）系统的协作。在这个分布式系统中的组件的开放性和可变性，因此需要一个容错和防篡改的中间件功能的协调。本项目定义了这种中间件的相应体系结构和协调策略。主要任务是确定和评价各种职能的要求，并寻求解决办法，使已建立的协调机制能够满足这些要求。这不仅包括对新系统配置的协议，而且还包括系统状态评估以及分布式自适应应用程序的运行时监控。该项目开发了适当的方法和机制，以确保（分布式）系统及其应用程序的所有功能和非功能要求得到满足。

This project addresses the development of a flexible distributed middleware that can autono-mously manage and assure the safety, security and availability requirements of multiple con-currently changing applications which execute on a changing hardware platform and in a changing environment. Although these applications can be functionally independent, they po-tentially share and access common platform components. Because of this resource contention, this can result in conflicting or contradictory goals. The applications specification and require-ments as well as the platform properties are described and formalized in the form of contracts. Based on the contracts, the middleware must evaluate current as well as possible future sys-tem states and find new system configurations in order to guarantee all requirements.It is therefore the task of the middleware to solve these conflicts, to optimize the overall per-formance of the system and to guarantee a correct execution. For this purpose, a model and an execution domain have been developed that are responsible for the modeling, analysis and run-time monitoring. These domains contain the methods developed by the B projects. The resulting middleware has been combined with an existing run-time environment and serves as a foundation for the C projects. This was the focus of the first project phase.In the second project phase, this middleware shall include increasingly open networks and hardware platforms, which involves the cooperation of multiple networked (sub-)systems. The openness and changeability of the components in this distributed system hence necessitates a fault-tolerant and tamper-resistant coordination of the middleware functions. This project de-fines the corresponding architecture and coordination strategies for such a middleware. The major task is the identification and evaluation of requirements for the diverse functions and the search for solutions how the developed coordination mechanisms can meet these. This not only includes the agreement on a new system configuration but, in particular, also the system state evaluation as well as run-time monitoring of distributed, adaptive applications. This pro-ject develops appropriate methods and mechanisms additionally ensuring that all functional and non-functional requirements of the (distributed) system and its applications are met.