Integrated Modular Avionics Research Articles

Research on the Reliability Analysis of the Integrated Modular Avionics System Based on the AADL Error Model

In recent years, the integrated modular avionics (IMA) concept has been introduced to replace the traditional federated avionics. Different avionics functions are hosted in a shared IMA platform, and IMA adopts partition technologies to provide a logical isolation among different functions. The IMA architecture can provide more sophisticated and powerful avionics functionality; meanwhile, the failure propagation patterns in IMA are more complex. The feature of resource sharing introduces some unintended interconnections among different functions, which makes the failure propagation modes more complex. Therefore, this paper proposes an architecture analysis and design language- (AADL-) based method to establish the reliability model of IMA platform. The single software and hardware error behavior in IMA system is modeled. The corresponding AADL error model of failure propagation among components, between software and hardware, is given. Finally, the display function of IMA platform is taken as an example to illustrate the effectiveness of the proposed method.

Formal Verification Method for Configuration of Integrated Modular Avionics System Using MARTE

The configuration information of Integrated Modular Avionics (IMA) system includes almost all details of whole system architecture, which is used to configure the hardware interfaces, operating system, and interactions among applications to make an IMA system work correctly and reliably. It is very important to ensure the correctness and integrity of the configuration in the IMA system design phase. In this paper, we focus on modelling and verification of configuration information of IMA/ARINC653 system based on MARTE (Modelling and Analysis for Real-time and Embedded Systems). Firstly, we define semantic mapping from key concepts of configuration (such as modules, partitions, memory, process, and communications) to components of MARTE element and propose a method for model transformation between XML-formatted configuration information and MARTE models. Then we present a formal verification framework for ARINC653 system configuration based on theorem proof techniques, including construction of corresponding REAL theorems according to the semantics of those key components of configuration information and formal verification of theorems for the properties of IMA, such as time constraints, spatial isolation, and health monitoring. After that, a special issue of schedulability analysis of ARINC653 system is studied. We design a hierarchical scheduling strategy with consideration of characters of the ARINC653 system, and a scheduling analyzer MAST-2 is used to implement hierarchical schedule analysis. Lastly, we design a prototype tool, called Configuration Checker for ARINC653 (CC653), and two case studies show that the methods proposed in this paper are feasible and efficient.

A Novel Model-Based Dynamic Analysis Method for State Correlation With IMA Fault Recovery

Integrated modular avionics (IMA) systems present many advantages. However, the resource sharing mechanism also brings a series of system problems, including the frequency of fault propagation and the difficulties of system design verification. The traditional analysis approaches for system designers have limits to analyze dynamic faults which are caused by unreasonable designs. These dynamic faults come up with component fault states, component state correlation, and system dynamic behaviors. In this paper, a new model-based dynamic analysis method for state correlation with IMA fault recovery is proposed, which helps to check system states and verify system designs by means of analyzing the dynamic behaviors of systems in a new view of systems’ correlated states. A colored generalized stochastic Petri net (CGSPN) provides advantages to system modeling and simulation, but there are some difficulties for modeling component state correlations and system dynamic behaviors in detail on the IMA system. We make an improvement on CGSPN for modeling IMA by adding an element and changing fairing rules. In addition, multiconstraint specified to solve the configuration satisfying problem for IMA is built into the model. Afterward, according to results of model simulation, system dynamic faults are analyzed and system designs are checked, which will help to guide the system designers to adjust system architecture at the early stage of system development. Finally, a case study is given for demonstrating how to apply this new method.

An Enhanced Deep Extreme Learning Machine for Integrated Modular Avionics Health State Estimation

Integrated modular avionics (IMA) is one of the most advanced systems whose performance deeply impact on the security of civil aircraft. In order to enhance the safety and reliability of aircraft, the health state of the IMA must be estimated accurately. Since IMA is a real-time system, the estimation algorithm should have fast learning speed to satisfy the real-time requirement. In this paper, an enhanced deep extreme learning machine is developed to estimate the health states of IMA. First, the enhanced deep extreme learning machine is built in a novel fashion by using a dropout technique and extreme learning machine autoencoder. Second, multiple-enhanced deep extreme learning machines with different activation functions are employed to estimate the health states, simultaneously. Finally, a synthesis strategy is designed to combine all the results of different enhanced deep extreme learning machines. In such a manner, the robust and accurate estimation results can be obtained. In order to collect the data under different health states, a performance degradation model of IMA is built by the intermittent faults. The proposed method is applied to health state estimation, and the results confirm that the proposed method can present a superior estimation to the conventional methods.

Integration of Data Distribution Service and distributed partitioned systems

Abstract Avionics systems are complex and time-critical systems that are progressively adopting more flexible (though equally robust) architectural designs. Although a number of current avionics systems follow federated architectures, the Integrated Modular Avionics (IMA) paradign is becoming the dominant style in the more modern developments. The reason is that the IMA concept promotes modular designs where applications with different levels of criticality can execute in an isolated manner in the same hardware. This approach complies with the requirements of cost, safety, and weight of the avionics systems. FACE standard (Future Airborne Capability Environment) defines the architectural baseline for easing integration in avionics systems, including the communication functions across distributed components. As specified in FACE, middleware will be integrated into avionics systems to ease development of portable components that can interoperate effectively. This paper describes the usage of publish-subscribe middleware (precisely, DDS – Data Distribution Service for real-time systems) into a fully distributed partitioned system. We describe, from a practical point of view, the integration of the middleware communication overhead into the hierarchical scheduling (as compliant with ARINC 653) to allow the usage of middleware in the partitions. We explain the design of a realiable communication setting, exemplified on a distributed monitoring application in a partitioned environment. The obtained implementation results show that, given the stable communication overhead of the middleware, it can be integrated in the time windows of partitions.

Dynamic Reliability Evaluation for Integrated Modular Avionics System Based on Continuous Time Bayesian Network with Triangular Fuzzy Numbers

In order to achieve dynamic reliability evaluation for integrated modular avionics electronic system scientifically and reasonably, this paper presents a comprehensive study on the dynamic reliability analysis method for integrated modular avionics system by utilizing the dynamic fault tree approach based on continuous time Bayesian Network(BN) with triangular fuzzy numbers, which is specific to the uncertainty such as fuzziness and stochastic existing in the evaluation process and dependency on experts' experience. Considering that a large number of redundant structures are adopted in the integrated modular avionics system, the modeling and analysis method based on continuous time BN is used for modeling the dynamic fault tree and assessment. On the other hand, triangular fuzzy numbers are used to characterize the basic failure rate parameters due to the lack of samples of large complex system and the difficulty in accurately estimating its failure parameters. The results show that the proposed method is more flexible and adaptive than conventional fault tree analysis for fault diagnosis and dynamic safety estimation of safety-critical avionics system.

Linux OS integrated modular avionics application development framework with apex API of ARINC653 specification

The framework is made to provide tools to develop the integrated modular avionics (IMA) applications, which could be launched on the target platform LynxOs-178 without modifying their source code. The framework usage helps students to form skills for developing modern modules of the avionics. In addition, students obtain deeper knowledge for the development of competencies in the field of technical creativity by using of the framework. The article describes the architecture and implementation of the Linux OS framework for ARINC653 compliant OS application development. The proposed approach reduces ARINC-653 application development costs and gives a unified tool to implement OS vendor independent code that meets specification. To achieve import substitution free and open-source Linux OS is used as an environment for developing IMA applications. The proposed framework is applicable for using as the tool to develop IMA applications and as the tool for development of the following competencies: the ability to master techniques of using software to solve practical problems, the ability to develop components of hardware and software systems and databases, using modern tools and programming techniques, the ability to match hardware and software tools in the information and automated systems, the readiness to apply the fundamentals of informatics and programming to designing, constructing and testing of software products, the readiness to apply basic methods and tools of software development, knowledge of various technologies of software development.

Сертифицируемая бортовая операционная система реального времени JetOS для российских проектов воздушных судов

JetOS is a prospective onboard real-time operating system (RTOS). Nowadays GosNIIAS develops JetOS in the scope of the research and development project. One of the most important tasks during JetOS development is to create the DO-178C certification kit, which will allow JetOS to be used for development and modification of avionics for civil aircraft. Today there is no operating system certified in accordance with DO-178C in Russia, therefore the JetOS creation is the matter of current importance. Using DO-178C requires the developer to have very strict development processes. The arrangement of processes that satisfy the DO-178C requirements is a very responsible and demanding task because of high expectations in the fields of safety and security. JetOS is being developed primarily for onboard equipment based on the integrated modular avionics (IMA). One of the key features of IMA is the ability to execute several functional applications on one target onboard module. The obvious consequence of this feature is a necessity to have a time and resource partitioning of applications. In avionics field application partition along with a host of other features is defined in ARINC 653 international standard, so its support is the significant requirement for JetOS. ARINC 653 defines application programming interface (API) and modes of operation for onboard functional software. JetOS supports the up-to-date version of ARINC 653 (2015) with supplementary services. JetOS also supports the safety-critical graphical library - OpenGL SC; the special implementation of the OpenGL SC library is being developed along with JetOS itself. OpenGL SC services are used to draw two-dimensional and three-dimensional pictures by onboard functional software. JetOS is a certifiable modular cyber-safe real-time operating system, which is designed in order to support several hardware architectures and to be easily adopted for different hardware boards. The scope of the JetOS project also includes creation of the tools necessary for functional software development, especially aircraft systems.

A model-based process for the modelling and the analysis of avionic architectures

To design and analyse integrated modular avionics (IMA) architectures, this paper presents a model-based process with separation of concerns going from the business view to the scheduling analysis view. A pivot meta-model dedicated to schedulability analysis has been extended to support recent and new systems architectures as well as new analysis methods. This pivot meta-model represents the front-end of a design framework filling the gap between the system architect and the schedulability analysis expert. This is presented in this paper by showing how the design framework is used to handle IMA architecture, and how simple plugins were developed and connected to the framework. The plugins propose hierarchical schedulability analysis, as well as end-to-end response-time analysis for network architecture. This research is illustrated by discussing a case study.

Отладчик для операционной системы реального времени: проблемы мультиплатформенности

In this paper, we present our work in developing a debugger for multiplatform real-time operating system Jet OS designed for civil airborne avionics. This system is being developed in the Institute for System Programming of the Russian Academy of Sciences, and it is designed to work within Integrated Modular Avionics (IMA) architecture and implement ARINC-653 API specification. Jet OS supports work on different architectures such as PowerPC, MIPS, x86 and ARM. Debugger for a real-time OS is an important tool in software development process, but debugger for RTOS is more than typical debugger used by desktop developers and we must take into account all specific features of such debugger. Moreover, we must support debugging on many platforms. However, debugger's code has to be developed for each platform and we faced the problem of porting our debugger to different architecture without developing it from scratch. In addition, the debugger must support work within emulators, because it can expand developers’ capabilities and increase their efficiency. In this paper, we present the architecture of the debugger for JetOS real-time operating system, which provides capabilities for porting our debugger to a new platform in little to no time, and discuss the challenges imposed by multiplatform support in the OS.

Use of Real-time Operating Systems in the Integrated Modular Avionics

The foreign real-time operating systems were widely used for the last years in Russia-developed aircraft as well as in the Russian Integrated Modular Avionics (IMA) research projects. But presently the question of their substitution with Russian analogues has arisen. This article provides the requirements of the operating system should satisfy in order to be used in the civil aviation, the analysis of existing foreign and domestic RTOS and some aspects of the operating system development process.

A model-based process for the modelling and the analysis of avionic architectures

To design and analyse integrated modular avionics (IMA) architectures, this paper presents a model-based process with separation of concerns going from the business view to the scheduling analysis view. A pivot meta-model dedicated to schedulability analysis has been extended to support recent and new systems architectures as well as new analysis methods. This pivot meta-model represents the front-end of a design framework filling the gap between the system architect and the schedulability analysis expert. This is presented in this paper by showing how the design framework is used to handle IMA architecture, and how simple plugins were developed and connected to the framework. The plugins propose hierarchical schedulability analysis, as well as end-to-end response-time analysis for network architecture. This research is illustrated by discussing a case study.

Design of Embedded Architecture for Integrated Diagnostics in Avionics Domain

The resent paper introduces a multi-level decision-making approach for design of optimal embedded integrated diagnostic architecture that combines maintenance decisions at the k-levels of system architecture and integration with health and usage monitoring systems (HUMS) mechanisms for achieving efficient system for level maintenance and lowering life-cycle cost of Integrated Modular Avionics (IMA). HUMS can be implemented in software or directly on an integrated circuit. The effectiveness of such an approach is investigated through the optimization of embedded HUMS architecture for known reliability and economic dependence during life cycle of IMA.

A Software-Based Monitoring Framework for Time-Space Partitioned Avionics Systems

Recently, avionics systems have evolved into a time and space partitioning (TSP)-based integrated modular avionics (IMA) structure for integration into a single system from a variety of existing independently configured federated systems. The TSP-based IMA architecture is suitable for solving size, weight, and power problems in avionics systems. Partitioning real-time operating systems (RTOSs) to support TSP-based IMA have been researched, and the international aviation industry has established the ARINC 653 standard for a partitioning RTOS. The ARINC 653 standard has defined the health monitoring (HM) function for debugging. However, the HM of the ARINC 653 standard does not support monitoring and debugging functions, such as snapshot, cycle, and, redundancy monitor, which makes the system development hard. To this end, the purpose of this paper is to introduce a monitoring framework that supports high reliability and stability for RTOS and application software based on TSP structure used in avionics systems. The proposed monitoring framework is designed for Qplus-AIR, an RTOS based on the TSP structure that conforms to the ARINC 653 for aircraft systems. It is also applicable to other RTOSs based on TSP structure that does not conform to ARINC 653. It supports monitoring functions, such as snapshot, trigger, and cycle as well as various debugging functions. It also supports debugging and monitoring operations under the redundancy of avionics systems, and minimizes the intrusive effect, which is a disadvantage of the software-based debugging approach. These functionalities enable avionics system developers to monitor and measure the performance of TSP structure-based RTOS and application software in flight control system for unmanned aerial vehicles. Our evaluation results show that the proposed monitoring framework is suitable for monitoring and debugging of RTOS and application software based on TSP structure.

Scheduling Independent Partitions in Integrated Modular Avionics Systems.

Recently the integrated modular avionics (IMA) architecture has been widely adopted by the avionics industry due to its strong partition mechanism. Although the IMA architecture can achieve effective cost reduction and reliability enhancement in the development of avionics systems, it results in a complex allocation and scheduling problem. All partitions in an IMA system should be integrated together according to a proper schedule such that their deadlines will be met even under the worst case situations. In order to help provide a proper scheduling table for all partitions in IMA systems, we study the schedulability of independent partitions on a multiprocessor platform in this paper. We firstly present an exact formulation to calculate the maximum scaling factor and determine whether all partitions are schedulable on a limited number of processors. Then with a Game Theory analogy, we design an approximation algorithm to solve the scheduling problem of partitions, by allowing each partition to optimize its own schedule according to the allocations of the others. Finally, simulation experiments are conducted to show the efficiency and reliability of the approach proposed in terms of time consumption and acceptance ratio.

Time-Triggered Ethernet Metamodel: Design and Application

The combination of the SAE Time Triggered Ethernet (TTEthernet) standard with the Integrated Modular Avionics (IMA) architectures supports the design, deployment and integration of mixed-critical avionic applications. In order to cope with the complexity of these tasks, we advocate for a model-driven engineering methodology. The key element of such methodology is the modeling language, which enables producing relevant models of the system. In this paper, we present a metamodel, which captures the main features and concepts defined in the SAE TTEthernet standard. We discuss how a combination of the TTEthernet metamodel with an IMA metamodel can be used to extend the AADL modeling language to model avionic applications deployed a TTEthernet-networked IMA platform. Finally, we present a case study to illustrate our approach.

A hazard analysis via an improved timed colored petri net with time–space coupling safety constraint

Petri nets are graphical and mathematical tools that are applicable to many systems for modeling, simulation, and analysis. With the emergence of the concept of partitioning in time and space domains proposed in avionics application standard software interface (ARINC 653), it has become difficult to analyze time–space coupling hazards resulting from resource partitioning using classical or advanced Petri nets. In this paper, we propose a time–space coupling safety constraint and an improved timed colored Petri net with imposed time–space coupling safety constraints (TCCP-NET) to fill this requirement gap. Time–space coupling hazard analysis is conducted in three steps: specification modeling, simulation execution, and results analysis. A TCCP-NET is employed to model and analyze integrated modular avionics (IMA), a real-time, safety-critical system. The analysis results are used to verify whether there exist time–space coupling hazards at runtime. The method we propose demonstrates superior modeling of safety-critical real-time systems as it can specify resource allocations in both time and space domains. TCCP-NETs can effectively detect underlying time–space coupling hazards.

Affordable and Reliable Avionics Architecture Design for Advanced Regional Turboprop Aircraft

Integrated avionics architectures offer advantages such as higher flexibility, reliability, simplicity, future upgradeability and weight saving over previous federated designs. Successful implementations of integrated modular avionics (IMA) are onboard Boeing B777, B787, Airbus A380 and A350. These applications often result in development and maintenance cost not suitable for regional and general aviation aircraft. One popular approach to overcome this problem is by using integrated flight deck (IFD) supplied by avionics manufacturers such as Garmin or Honeywell. These manufacturers often optimize IFDs for applications in developed countries. For example, with the development and widespread use of satellite-based global positioning system (GPS) in the US, Canada and Europe, some terrestrial navigation equipment (e.g. ADF and DME) are no longer included in the standard IFD packages offered for commercial aviation. However, many areas in the rest of the world still use and rely largely on the availability of the ADF, DME, etc. Aircraft flying in these areas need to comply with the local requirements for terrestrial navigation systems already deployed. In this paper a study on the implementation of additional avionics equipment on Garmin G1000 for advanced regional turboprop aircraft is presented. G1000 is an integrated avionics system that integrates many electronic components including navigation, communication, course, attitude, display, etc. It has been widely used in all kinds of civil aviation aircraft. In order to conform to local and modern requirements, ADF receiver, DME transceiver, traffic alerting system and weather radar need to be integrated. Preliminary reliability analysis using fault tree method is performed for the designs to ascertain their safety as set out in the requirements for advanced regional turboprop aircraft.

Explanation-based learning with analogy for impasse resolution

This paper proposes an algorithm for the inclusion of analogy into Explanation-Based Learning (EBL). Analogy can be used when an impasse is reached to extend the deductive closure of EBL’s domain theory. This enables the generation of control laws, via EBL, for hardware which is not catered for in the domain theory. This advantage addresses a problem which represents a dearth in the current literature. Integrated Modular Avionics (IMA) literature has thus far been concerned with the architectural considerations. This paper seeks to address the impact of hardware changes on the controllers within an IMA architecture. An algorithm is proposed and applied to control an aviation platform with an incomplete domain theory. Control rules are generated when no deductive explanations are possible, which still reflect the intent of the domain theory.

Approach for integrated modular avionics reconfiguration modelling and reliability analysis based on AADL

To optimise the configuration and reconfiguration strategies in integrated modular avionics (IMA), modelling and evaluating the reliability of the reconfigurable IMA system have drawn great attention from system engineers and designers. Currently most researches regard each configuration as a single system state, but the detailed system architecture under each configuration or the events that trigger the reconfiguration behaviour are not involved. In this study, a modelling method is proposed for these complex processes of the IMA reconfiguration. It employs architecture analysis and design language (AADL) along with its Error Model Annex, ARINC653 Annex, and mode transition mechanisms to model the correlated component error state transitions, system configuration architectures, and reconfiguration behaviours. Based on the proposed AADL modelling approach, these model information is extracted purposefully to establish computable models. Then a reliability analysis approach is proposed which is able to result in various reliability attributions, such as component reliability, configuration reliability under the software architecture, single task reliability, and multi-tasking reliability. These evaluation processes take into account both of the fault isolation reconfiguration and task mode reconfiguration for the first time. Finally, the case study is involved, which demonstrates the feasibility of the analysis approach for IMA based on an AADL model.