ESA UNCLASSIFIED – For Official Use SOIS and Software Reference Architecture F. Torelli DASIA Malta 17/05/2011

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 2 ESA UNCLASSIFIED – For Official Use Outline 1.SOIS architecture and services 2.SOIS architecture and Avionics System Reference Architecture 3.Impacts to the design of flight software 4.Status of SOIS publications and related developments 5.Conclusions

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 3 ESA UNCLASSIFIED – For Official Use SOIS architecture and services

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 4 ESA UNCLASSIFIED – For Official Use CCSDS SOIS Architecture Standard Services ECSS Standard Protocols SOIS provides an abstraction of the functionality of the spacecraft units in a layered fashion.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 5 ESA UNCLASSIFIED – For Official Use Sub-Network Services Sub-network services: –abstract from the physical location (within the spacecraft) of the unit to be accessed –abstract from the datalink protocol required by a specific communication media to access a unit –abstract from time constrains strictly related to the specific communication media used to access a unit –abstract from the addressing scheme required by a specific communication media to identify a unit.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 6 ESA UNCLASSIFIED – For Official Use Command & Data Acquisition Services Command & Data Acquisition services: –abstract from the protocol required to control the device (Device Access Service) –abstract from the type of communication service (i.e. memory access, packet-base) required to access the device (Device Access Service) –abstract from time constrains strictly related to the device specific access protocol (Device Access Service) –decouple device physical access from device data consumption by the applications (Device Data Pooling Service) –add ontology to the raw command and data information related to devices (Device Virtualisation Service) –provide a uniform interface for each class of devices, independent from their actual implementation (Device Virtualisation Service).

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 7 ESA UNCLASSIFIED – For Official Use Other Application Support Services Time Access Service: –abstracts from the mechanisms required to access the on-board reference time and to handle time alarms. Message Transfer Service: –provides a high level and uniform mechanism to communicate between software applications within the spacecraft. File and Packet Store Service: –provides a standardised interface to mass memory file and packet stores –abstracts from the implementation details related to the mass memory file systems.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 8 ESA UNCLASSIFIED – For Official Use Plug and Play Services Plug and Play Services: –provide mechanisms to discovery and configure devices connected to a sub-network –provide mechanisms to handle units redundancy –provide the means to interpret the content of Electronic Data Sheets and to configure the other services accordingly (C&DA).

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 9 ESA UNCLASSIFIED – For Official Use Protocols supporting the Services The services are complemented by protocols implement the functionality specified by SOIS. Sub-Network Protocols: –Mil-Std-1553, ECSS-E-ST-50-13C –CAN, ECSS-E-ST-50-15C draft –Spacewire, ECSS-E-ST (RMAP), ECSS-E-ST-50-XX (SpW-D) Message Transfer Service Protocol: –Asynchronous Message Service, CCSDS B-0 File and Packet Store Service Protocols: –Network File Access, Network Packet Access and Remote Block Storage Protocols need to be standardised AMS TBD

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 10 ESA UNCLASSIFIED – For Official Use SOIS and Avionics System Reference Architecture

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 11 ESA UNCLASSIFIED – For Official Use Avionics System Reference Architecture Onboard Communications H/W (e.g. MIL-STD-1553B, SpaceWire, CAN RS422) OBC Hardware CANMIL-1553 TM/TC RS422 SpW CPU/ NGmP EEPROM Boot PROM OBTimer SGM HW watchdo g Software bus Security Unit Solid State Mass Memory File/ Compress / Encrypt Payloads & Instruments SSMM RTU/ Intelligent IO Payload Compute r SOIS Layers Legacy devices Standardized devices Intelligent devices SOIS Layers ADCs / DACs SOIS Layers Sensor and actuators RAM DSP Digital Sensorbus Space Linux Application BB (mission dependent) Plan/ Autonomy Framework System mode mgmt Central FDIR AOCS P/L Manager Thermal Power OBT Mgmt Satellite Conf and Eqpt Mgmt SSMM Mgmt Execution platform BSP SOIS Subnetwork layer (1553, CAN, SpW) (including HDSW) Container services Connector services PUS specific Component services Abstract component services PUS and MTL services OBCP interpreter Avionics Equipment virtual devices =SOIS DVS PUS monitoring RTOS Context Mgmt On-board time =SOIS TAS Communication services addressing physical distribution across nodes = SOIS MTS Libraries: mathematical, etc.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 12 ESA UNCLASSIFIED – For Official Use SOIS in the Avionics System Reference Architecture 1/2 On-Board Computer (OBC): The full set of SOIS services is intended for implementation in the OBC flight software as part of the Execution Platform building block. Other Equipments: A reduced subset of SOIS service is foreseen for the external units such as RTUs, Solid State Mass Memory, Intelligent Sensors and Actuators, Payloads in accordance with their functionality and supported features.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 13 ESA UNCLASSIFIED – For Official Use SOIS in the Avionics System Reference Architecture 2/2

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 14 ESA UNCLASSIFIED – For Official Use Impacts to the design of flight software

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 15 ESA UNCLASSIFIED – For Official Use Traditional Flight Software In a traditional flight SW system, AOCS and equipment time requirements defining the bus schedule also drive the flight SW architecture and the SW tasks schedule. The system is designed as a “monolithic” entity tailored for the specific mission. t Major Frame (1 sec) Minor Frame 0 (125 msec) Minor Frame 1 (125 msec) AOCS Acquisitions Payload 1 Acquisitions MTL Manager Minor Frame 2 (125 msec) Minor Frame 7 (125 msec) Payload 2 Commanding AOCS Processing TC Manager HK TM Processing Payload 2 Acquisitions Payload 2 Manager OBCP Interpreter HK TM Processing Payload 1 Manager EEPROM Manager MilBus Manager AOCS Commanding Minor Frame 3 (125 msec) MilBus Manager Minor Frame 6 (125 msec) Large Data Transfer … MilBus Manager Mass Memory HK TM Processing Monitoring Mode Manager Science TM Processing Scrubbing MTL Manager Bus and ASW Time Domain Mixed

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 16 ESA UNCLASSIFIED – For Official Use Motivations for an Improvement Such a synchronous schedule works to accomplish relatively simple mission requirements, however: 1.to improve the development process, 2.to accommodate more functions on board, 3.to enable new emerging technologies (e.g. multi-core processors, time and space partitioning, increased autonomy) It is advisable to move towards an avionics architecture based on composable building blocks where functional and timing requirements, if possible, are addressed at component level (separation of concerns).

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 17 ESA UNCLASSIFIED – For Official Use Proposed Way Forward SOIS Services: The introduction of the previously mentioned SOIS standardised services supports this approach allowing to decouple the functional and timing requirements strictly related to the communication protocols from the ones related to the device access protocols and again from the ones related to the applications algorithms. These concepts will be briefly discussed for: -Sub-Network Services -Command & Data Acquisition Services -Message Transfer Service.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 18 ESA UNCLASSIFIED – For Official Use Sub-Network Services Characterisation Sub-Network Service Primitives Bus Protocol Bus Profile AOCS Frequency Sensor Max Latency Command Accuracy Sensor Access Time Equipmen t Physical Address Bus Bandwidth Allocation Equipmen t Physical Address Equip. Physical Address Sensor Access Time Actuators Access Time Command Accuracy Sensor Max Latency AOCS Algorithm Duration Service Time and Functional Characterisation Traffic Scenario for the Nodes Low level communication req. can be captured in the sub-network layer to define the bus profile and to expose to the upper layers of the flight software functional and non-functional attributes of the services primitives.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 19 ESA UNCLASSIFIED – For Official Use Command & Data Acquisition Services Characterisation Sub-Net Service Timing Raw Data Format Common Data Dictionary Device Access Req. Calib. Curves Engineering Data Format Device Required Interface Electronic Data Sheet Device Virtualisation Service Device Access Service Device Enumeration Service Service Time and Functional Characterisation Raw Command/Acquisition Sequence The requirements related to the mechanisms to access the on-board devices can also be isolated within the C&DA services group, mainly in DAS and DVS. The services can be automatically configured and instantiated during the design phase based on the description of the EDS and provide a well characterised and standardised interface.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 20 ESA UNCLASSIFIED – For Official Use Message Transfer Service Characterisation Message Transfer Service Primitives Asynchronous Message Transfer Service Protocol Registration Table APID Definition TM/TC Formats Tasks Deadlines External Nodes Routing PUS Services Service Time and Functional Characterisation Message Traffic with Local and Remote SW Entities Sub-Net Service Timing In the Avionics System Reference Architecture, the Software Bus entity is in charge to support the communication between applications and SW components. Although the Software Bus can be implemented with different mechanisms, it is clear that the SOIS MTS provides the needed infrastructure.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 21 ESA UNCLASSIFIED – For Official Use Flight Software using SOIS Services ASW tasks schedule and I/O schedule are now related each others only due to the AOCS dependencies and the I/O operations are represented in terms of services (SOIS request & indication, time events). Components can be designed independently according to the functional and non-functional attributes of the interfaces. t Major Frame (1 sec) Minor Frame 0 (125 msec) Minor Frame 1 (125 msec) AOCS Acquisitions Payload 1 Acquisitions MTL Manager Minor Frame 2 (125 msec) Minor Frame 7 (125 msec) Payload 2 Commanding AOCS TC Manager Payload 2 Acquisitions Payload 2 Manager OBCP Interpreter Payload 1 Manager EEPROM Manager SOIS Sub- Network AOCS Commanding Minor Frame 3 (125 msec) SOIS Sub- Network Minor Frame 6 (125 msec) Large Data Transfer … SOIS Sub- Network SOIS FPSS HK TM ProcessingMonitoring Mode Manager Science TM Processing Scrubbing SOIS C&DA Bus Time Domain ASW Time Domain

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 22 ESA UNCLASSIFIED – For Official Use Improvements to Flight Software Some of the beneficial effects of the introduction of standard services: –the possibility to develop and analyse the software applications/components based on clear interfaces –the possibility to deploy some of the applications on a different processing core or partition without impacting the design of the avionics system –the possibility to exchange software/hardware components (e.g. sub-network services) with minimal impacts to the overall design.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 23 ESA UNCLASSIFIED – For Official Use Status of SOIS publications and related developments

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 24 ESA UNCLASSIFIED – For Official Use Status of SOIS documentation SOIS Sub-Network Services: –published in 2009 and are currently used to drive new and upgraded ECSS protocols for CAN and Spacewire. SOIS Application Support Services: –Time Access Service published in 2011 –File and Packet Store Service and Message Transfer Service are currently under Agency review and will be published in 2011 –C&DA services are planned for 2011/2012 CCSDS SOIS work is now concentrated on: –the refinement of the communication architecture, particularly in terms of addressing and the provision of software APIs –The use of electronic data sheets to automate the process of interface definition and integration (C&DA and DES)

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 25 ESA UNCLASSIFIED – For Official Use Present and Future Developments Ongoing activities supporting standardisation: –A SOIS prototype is presently being prepared by SciSys (UK) in collaboration with ASTRIUM (F). This will result in an upgraded RASTA system at ESTEC and a published set of IPR free API’s. –A prototype of the CCSDS file transfer protocol (CFDP) mapped to an implementation of the SOIS file and packet store services is being prepared by Spacebel (B). This will also result in an upgraded RASTA system. –Packet Store Services have also implemented by Scisys (UK) in the frame of the MARC project. –An ECSS standard for CAN Bus is under preparation. This is being driven by the Exomars program and will result in an IP core compatible with SOIS sub-network services. –A SOIS/ECSS software component for Mil1553 Bus Controller has been developed by RUAG (S) and its counter part for Remote Terminal Units is being implemented. These software building blocks are produced in compliance with the flight software ECSS standards and validated on the RUAG’s flight hardware platforms (Tiger and Panther boards). –An alternative SOIS/ECSS sub-network services implementation for Mil1553 Bus Controller have been developed by Terma (DK) and integrated in the Avionics System Test Bench at ESA. On 2011 the following additional activities are planned: –A TRP activity exploring the use of Electronic Data Sheets. –A TRP activity demonstrating Plug and Play techniques. –A TRP activity proving an end-to-end test-bed for the evaluation of file based communication and operations.

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 26 ESA UNCLASSIFIED – For Official Use Conclusions

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 27 ESA UNCLASSIFIED – For Official Use Conclusions 1/2 –The key characteristics of the SOIS services architecture have been presented. –It has been shown that some of the essential features of the Execution Platform in the Avionics System Reference Architecture can be specified and implemented using the SOIS services. Execution platform BSP SOIS Sub-Network Container services Connector services PUS specific Component services Abstract component services PUS and MTL services OBCP interpreter SOIS C&DA PUS monitoring RTOS Context Mgmt On-board time =SOIS TAS SOIS MTS Libraries: mathematical, etc. EDS Bus Profile Reg Table

SOIS and SW Ref. Architecture | F. Torelli | DASIA Malta | 17/05/2011 | TEC-SWS | Slide 28 ESA UNCLASSIFIED – For Official Use Conclusions 2/2 –Some services have been discussed in the context of the avionics and flight software design phase, here the flexibility given by these services demonstrates to be very beneficial as it allows to characterise the service interfaces without modifying the primitives. –A number of prototypes and flight software developments are ongoing under ESA contracts and in the near future will allow consolidate further the CCSDS standard specifications.

ESA UNCLASSIFIED – For Official Use SOIS and Software Reference Architecture F. Torelli DASIA Malta 17/05/2011