Automotive Real-time Operating Systems: A Model-Based ...

1 Automotive Real-time Operating Systems: A Model-BasedConfiguration ApproachGeorg MacherInstitute for TechnicalInformaticsGraz University of TechnologyAVL List GmbHGraz, AtasInstitute for TechnicalInformaticsGraz University of TechnologyAVL List GmbHGraz, ArmengaudAVL List GmbHHans-List-Platz 1 Graz, KreinerInstitute for TechnicalInformaticsGraz University of TechnologyGraz, embedded systems have become very complex,are strongly integrated, and the safety-criticality and Real-time constraints of these systems raise new challenges.

2 Dis-tributed system development, short time -to-market inter-vals, and Automotive safety standards (such as ISO 26262[8]) require efficient and consistent product development alongthe entire development lifecycle. The Automotive OSEK/VDX standard provides an architecture for distributed Real-time units in vehicles and a language aiming in specify-ing the configuration of Real-time OSEK Operating aim of this paper is to enhance a model-driven system -engineering framework with the capability of generating OSconfigurations from existing high level control system infor-mation.

3 Furthermore, to enable the possibility to updatestored information from OSEK Implementation Language(OIL) files and support round-trip engineering of real -timeoperating system (RTOS) configurations. This enables theseamless description of Automotive RTOS, from system levelrequirements to software implementation and therefore en-sures consistency and correctness of the configuration. Tothat aim, a bidirectional tool bridge is proposed based onOSEK OIL exchange format and Subject [ Operating Systems]: Organization and Design; [Software Engineering]: Coding Tools and TechniquesGeneral TermsModel-based development, traceability, embedded operatingsystems, OSEK OIL, ISO 26262, 14, November 2014, Lisbon, retained by the INTRODUCTIONThe number of embedded systems in the Automotive do-main has grown significantly in recent years.

4 This trendis also strongly supported by the ongoing replacement oftraditional mechanical systems with modern embedded sys-tems. This enables the deployment of more advanced con-trol strategies, thus providing added values for the customerand more environment friendly vehicles. At the same time ,the higher degree of integration and the safety-criticality ofthe control application raises new challenges. Evidence ofcorrectness of the different applications, both in the timedomain and value domain, possibly running on the samecomputing platform, has to be guaranteed.

5 In parallel, newcomputing architectures with services integrated in hard-ware require new software architectures and safety standards such as ISO 26262 [8] for road vehicleshave been established to provide guidance during the de-velopment of safety-critical systems. These standards relyon risk identification and mitigation strategies. They targetearly hazard identification as well as solid counter measurespecification, implementation and validation along the entireproduct life cycle. One challenge in this context is to pro-vide evidence of consistency, correctness, and completenessof system specifications over different work-products alongthe entire product development process.

6 This is a requiredbasis for the development of dependable systems. More-over, the consolidation of the system specification enablesearly bug finding and thus support reducing the costs forbug fixes and late handle these issues, Model-Based development sup-ports the description of the system under development ina more structured way, enables different views for differ-ent stakeholders, different levels of abstraction, and centralsource of contribution of this paper is to bridge the existing gapbetween model-driven system engineering tools and softwareengineering tools for Automotive Real-time Operating systems(RTOS).

7 More especially, the approach makes use of exist-ing high level control system information in SysML format togenerate the configuration of Automotive Real-time operatingFigure 1: Comparison OIL File Normal View vs. Graphical Representation with Eclipsesystems in a standardized OSEK Implementation Languagefile format (OIL files) [14]. Information from the controlsystem (such as control strategies) can thus be mapped toa configuration at software level ( , required interfaces toother SW components, allocation to a CPU respectively toa task).

8 The goal is to support a consistent and traceable re-finement, as required by ISO 26262 standard, from the earlyconcept phase to individual configurations of the document is organized as follows: Section 2 presentsan introduction to OSEK/VDX and OSEK OIL. Then, Model-Based development and integrated tool chains, as well asthe base tool-chain for this approach are presented in Sec-tion 3. In Section 4 a description of the proposed approachfor the generation of RTOS configuration files according toOIL standard is provided.

9 An application and evaluation ofthe approach is presented in Section 5. Finally, this workis concluded in Section 6 with an overview of the OSEK/VDX RTOS OVERVIEWThe German OSEK consortium (German abbreviation foropen systems and their interfaces for electronics in motorvehicles) was founded in 1993 by several German automotivecompanies. VDX (Vehicle Distributed eXecutive) was theFrench pendant from the French car manufacturers side,which regrouped the OSEK/VDX consortium in is an open standard for specifications for em-bedded Real-time Operating systems (RTOS), designed toprovide a standard software architecture for the various elec-tronic control units (ECUs), and partially standardized inISO 17356 [7].

10 The work of the OSEK/VDX consortium is today contin-ued by the AUTOSAR consortium [1], which is based onOSEK/VDX specifications. To describe the configuration ofan OSEK RTOS the OSEK implementation language files(OIL) is intended to be used. These files can be generatedmanually or via configuration tools. OIL files include allobject containers and information required to configure theRTOS of one specific OSEK Implementation LanguageAs mentioned previously, the OIL files inherit a normal-ized description language for OS configuration and relatedobjects.