Safety assurance for automotive over the air updates: unit-level modeling, testing and analysis

汽车公司越来越多地投资于无线（OTA）更新，以有效和高效地更新车辆软件并提高其安全性。OTA更新通过无线方式修改安装在汽车上的软件组件，使汽车的行为能够频繁变化。然而，由于需要考虑部署在车辆上的不同软件配置，OTA更新给安全保障带来了新的问题。这些配置的数量随着时间的推移而增加，因为a)软件必须为多个汽车硬件平台配置，这些平台可能会随着时间的推移而变化；B)随着更新频率的增加，部署版本的范围变得更广、更分散。这个项目的目标是支持软件工程师分析OTA更新的安全性。该项目将开发新技术，支持安全工程师在验证和验证（V&V）活动中创建和管理涉及OTA更新的软件保证案例。具体而言，该项目将(a)开发、管理和增量更新整个软件配置集的保证用例，将其视为一条产品线；(b)开发一套V&V技术和方法，将不同的配置作为一条产品线进行推理，旨在促进功能正确的OTA更新的开发、分析和部署。加拿大将显著受益于该项目的成果。拟议的技术将降低汽车行业生产安全OTA更新的成本，并提高加拿大车辆的安全性。OTA更新正在引入一个新的软件市场。该项目将推动加拿大成为未来汽车软件开发的领导者之一。多伦多大学、麦克马斯特大学、通用汽车公司（GM）和关键系统实验室（CSL）之间的合作将提高加拿大的研究声誉。最后，参与该项目的HQP将接受广泛的培训。他们获得的技能将进一步推动加拿大的研究和创新。

Automotive companies are increasingly investing in over-the-air (OTA) updates to effectively and efficiently update the vehicles' software and increase their safety. OTA updates modify the software components installed in a car wirelessly and enable frequent changes in their behaviors. However, OTA updates are introducing novel problems for safety assurance, due to the different software configurations deployed in vehicles that need to be considered. The number of these configurations increases over time because a) the software has to be configured for multiple vehicle hardware platforms that can potentially change over time; b) as the frequency of updates increases, the range of deployed versions becomes wider and more fragmented. The goal of this project is to support software engineers in analyzing the safety of OTA updates. This project will develop novel techniques that support safety engineers to create and manage software assurance cases that refer to OTA updates, in the Verification and Validation (V&V) activities. Specifically, this project will (a) develop, manage and incrementally update assurance cases of the entire set of software configurations, treated as a product line, and (b) develop a set of V&V techniques and methodologies to reason about different configurations as a single product line, aiming to facilitate the development, analysis, and deployment of functionally correct OTA updates. Canada will significantly benefit from the outcomes of this project. The proposed techniques will reduce the costs for automotive industries in producing safe OTA updates and increase the safety of Canadian vehicles. OTA updates are introducing a new software market. This project will push Canada to become one of the leaders in the software development of future vehicles. The collaboration between the University of Toronto, McMaster University, General Motors (GM), and Critical Systems Labs (CSL) will enhance the research reputation of Canada. Finally, the HQP involved in the project will receive extensive training. The skills they acquire will further push Canadian research and innovation.