Safety and Availability

本项目的目标是，如何在一个系统中确保安全和可用性属性，该系统在整个生命周期中可能同时经历多个组件的更改。安全关键系统的设计受安全标准的规范，目前不允许在没有重新认证的情况下对系统进行改装。如果自适应在设计时不可预测，因为它们可能是上下文驱动的、用户驱动的或组件故障的结果，则当前的安全标准需要过度配置和足够的隔离。在CCC中所述的系统环境中，这种静态设计时过度配置是不可接受的。在这个项目中，我们计划开发一种新的设计流程和方法，允许将安全和可用性属性的保证划分为基于实验室的部分和部署后执行的现场部分。第一个项目阶段的调查清楚地表明，自动化故障分析的基本步骤是实现这一目标的关键。在此基础上建立了模型，并进行了相应的相关性分析。它们捕捉并帮助确定复杂多层中的各种影响，使用专门的分析方法进行量化。虽然基本方法是在项目第一阶段制定的，但第二阶段应侧重于具体分析，检测线程的数据完整性，确定定时干扰，并量化可靠性和可用性。考虑到汽车电子和航空电子设备的安全标准要求，应对结果进行评估。一个重要的目标是根据安全标准的要求，在各种影响下验证足够的独立性。然后，应使用该方法来验证在其他CCC项目中开发的MCC合作。最后，应使用依赖分析来支持简单的综合机制，以提高集成中的功能安全性。更大的工作包解决了使用可重新配置的硬件组件提高可用性的问题。结果应用于为使用CCC架构和方法的系统建立情景感知可用性管理。这里开发的机制被集成到总体的MCC中间件中，该中间件基于应用程序和原语的契约描述执行组合和综合。

The objective addressed in this project is, how safety and availability properties can be ensured in a system which undergoes changes of multiple components, potentially concurrently, throughout its lifetime. The design of safety critical systems is regulated by safety standards, which currently do not allow adaption of the systems without recertification. If adaptaions are unpredictable at design-time, as they may be context-driven, user-driven or the result of component failure, current safety standards require overprovisioning and sufficient isolation. In the context of systems as addressed in CCC, such static design-time overprovisioning is not acceptable. In this project we plan to develop a novel design process along with methods, that allow to partition the assurance of safety and availability properties into a lab-based and an in-field part to be executed after deployment. The investigations in the first project phase made clear that automating essential steps of failure analysis is key to reach this goal. A model and a corresponding dependency analysis were developed as a basis. They capture and help to determining the variety of influences in complex multilayer employing specialized analysis methods for quantification. While the fundamental approach was developed in project phase 1, the second phase shall be focused on concrete analysis detecting threads for data integrity, determining timing interference and quantifying reliability and availability. The results shall be evaluated given the requirements of safety standards in automotive electronics and avionics. An important goal is the validation of sufficient independence under various effects as required in safety standards. This approach shall, then, be used to validate the MCC cooperation as developed in other CCC projects. Finally, dependency analysis shall be employed to support simple synthesis mechanisms improving functional safety in integration. A larger work package addresses the increasing of availability using reconfigurable hardware components. The results shall be used to establish a situation-aware availability management for systems using the CCC architecture and methods. The mechanisms developed here are integrated into the overarching MCC Middleware, which performs the composition and synthesis based on a contract-description of the applications and primitives.