Safety and Availability

在这个项目中解决的目标是，如何安全性和可用性属性可以确保在一个系统中，经历多个组件的变化，可能同时，在其整个生命周期。安全关键系统的设计受到安全标准的管制，目前不允许在没有重新认证的情况下对系统进行调整。如果自适应在设计时是不可预测的，因为它们可能是上下文驱动的、用户驱动的或组件故障的结果，则当前的安全标准需要预留空间和足够的隔离。在CCC中所述的系统的上下文中，这种静态设计时过度供应是不可接受的。在这个项目中，我们计划开发一个新的设计过程沿着的方法，允许分区的安全性和可用性属性的保证到一个基于实验室和现场的部分部署后执行。第一个项目阶段的调查清楚地表明，自动化故障分析的基本步骤是实现这一目标的关键。作为基础，开发了一个模型和相应的依赖性分析。它们捕获并帮助确定复杂多层中的各种影响，采用专门的分析方法进行量化。虽然基本方法是在项目第一阶段开发的，但第二阶段应侧重于具体分析，检测数据完整性的线程，确定时序干扰，并量化可靠性和可用性。应根据汽车电子和航空电子的安全标准要求对结果进行评估。一个重要的目标是验证安全标准所要求的各种影响下的足够独立性。然后，应采用这种方法来验证在其他CCC项目中开展的MCC合作。最后，应采用依赖性分析来支持简单的合成机制，以提高集成中的功能安全性。一个更大的工作包解决了使用可重构硬件组件的可用性的增加。研究结果应用于为使用CCC体系结构和方法的系统建立情况感知的可用性管理。这里开发的机制集成到总体MCC中间件，它执行的组合和合成的基础上的合同描述的应用程序和原语。

The objective addressed in this project is, how safety and availability properties can be ensured in a system which undergoes changes of multiple components, potentially concurrently, throughout its lifetime. The design of safety critical systems is regulated by safety standards, which currently do not allow adaption of the systems without recertification. If adaptaions are unpredictable at design-time, as they may be context-driven, user-driven or the result of component failure, current safety standards require overprovisioning and sufficient isolation. In the context of systems as addressed in CCC, such static design-time overprovisioning is not acceptable. In this project we plan to develop a novel design process along with methods, that allow to partition the assurance of safety and availability properties into a lab-based and an in-field part to be executed after deployment. The investigations in the first project phase made clear that automating essential steps of failure analysis is key to reach this goal. A model and a corresponding dependency analysis were developed as a basis. They capture and help to determining the variety of influences in complex multilayer employing specialized analysis methods for quantification. While the fundamental approach was developed in project phase 1, the second phase shall be focused on concrete analysis detecting threads for data integrity, determining timing interference and quantifying reliability and availability. The results shall be evaluated given the requirements of safety standards in automotive electronics and avionics. An important goal is the validation of sufficient independence under various effects as required in safety standards. This approach shall, then, be used to validate the MCC cooperation as developed in other CCC projects. Finally, dependency analysis shall be employed to support simple synthesis mechanisms improving functional safety in integration. A larger work package addresses the increasing of availability using reconfigurable hardware components. The results shall be used to establish a situation-aware availability management for systems using the CCC architecture and methods. The mechanisms developed here are integrated into the overarching MCC Middleware, which performs the composition and synthesis based on a contract-description of the applications and primitives.