Abstract

Abstract Architectures depict design principles: paradigms that can be understood by all, allow thinking on a higher plane and avoiding low-level mistakes. They provide means for ensuring correctness by construction by enforcing global properties characterizing the coordination between components. An architecture can be considered as an operator A that, applied to a set of components B , builds a composite component A ( B ) meeting a characteristic property Φ . Architecture composability is a basic and common problem faced by system designers. In this paper, we propose a formal and general framework for architecture composability based on an associative, commutative and idempotent architecture composition operator ⊕ . The main result is that if two architectures A 1 and A 2 enforce respectively safety properties Φ 1 and Φ 2 , the architecture A 1 ⊕ A 2 enforces the property Φ 1 ∧ Φ 2 , that is both properties are preserved by architecture composition. We also establish preservation of liveness properties by architecture composition. The presented results are illustrated by a running example and a case study.

Highlights

  • Architectures depict design principles: paradigms that can be understood by all, allow thinking on a higher plane and avoiding low-level mistakes

  • We propose a formal and general framework for architecture composability based on an associative, commutative and idempotent architecture composition operator ⊕

  • We propose a general formal framework for architecture composability based on a composition operator ‘⊕’ which is associative, commutative and idempotent

Read more

Summary

Introduction

Architectures depict design principles: paradigms that can be understood by all, allow thinking on a higher plane and avoiding low-level mistakes. A fault-tolerant architecture combines a set of features building into the environment protections against trustworthiness violations These include (1) triple modular redundancy mechanisms ensuring continuous operation in case of single component failure; (2) hardware checks to be sure that programs use data only in their defined regions of memory, so that there is no possibility of interference; (3) default to least privilege (least sharing) to enforce file protection. The development of a formal framework dealing with architecture composability implies a rigorous definition of the concept of architecture as well as of the underlying concepts of components and their interaction The paper proposes such a framework based on results showing how architectures can be used for achieving correctness by construction in a rigorous component-based design flow [Sif12].

Components and architectures
Composition of architectures
Hierarchical composition of architectures
PBi and P2
Partial application of architectures
Property preservation
Safety properties
Liveness properties
Deadlock-freedom
Non-interference condition for ensuring liveness
Algorithm to check non-interference in finite-state systems
Case study: control of an elevator cabin
Related work
Conclusion
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call