1. ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Safety Certification of Software-intensive Systems with Reusable Components Sept 25-27, 2013 Riga nSafeCer WP500 Ramp-up Automotive and Construction Equipment Demonstrators Riga, nSafeCer-Workshop, Day3, 27-09-2013, 13:30h – 14:50h Helmut Martin, ViF, WP500 leader Roland Mader, AVL, WP520 leader Jonny Vinter, SP, WP540 leader Ulf Olsson, VCE, WP550 leader

2. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 2 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators HEV Powertrain Use Case AUTOSAR BSW Use Case Construction Equipment Evaluation Open Discussion Agenda

3. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 3 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators Introduction of AT & CE Demonstrators HEV Powertrain Use Case AUTOSAR BSW Use Case Construction Equipment Evaluation Open Discussion Agenda

4. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 4 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Overview of use cases: o HEV Powertrain Use Case (AVL/ViF) o BSW Module Use Case (SP) o Construction Equipment Evaluation (VCE) Introduction of CE together with AT o Best practices concerning similarities with automotive systems o Distributed development requires aligned processes o Cover CE domain specifics Use cases provides different aspects of the safety life cycle Introduction of AT & CE Demonstrators (1/4)

5. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 5 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Each demonstrator covers different use case scenarios of SafeCer’s methods and tools Introduction of AT & CE Demonstrators (2/4)

6. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 6 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators (3/4) Evaluation plan over SafeCer project Intermediate evaluation of achievements Presenting and discussing demonstrator results Synchronisation points with other WPs o methods, tools, other demonstrators

7. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 7 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators (4/4) Evaluation of Use Case Results Coverage of requirements and maturity of demonstrator use cases o Each demonstrator covers specific number of SafeCer requirements o Evaluation of requirements at intermediate milestones and project end Number of … o Publications at scientific and industrial conferences o Contributions to scientific or industrial workshops o Completed diploma or master thesis DM3 DM4 DM5

8. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 8 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators HEV Powertrain Use Case HEV Powertrain Use Case AUTOSAR BSW Use Case Construction Equipment Evaluation Open Discussion Agenda

9. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 9 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Powertrain Electrification New sensors and actuators Additional control units Increasing complexity EMS…Engine Management System CCU…Clutch Control Unit HCU…Hybrid Control Unit TCU…Transmission Control Unit MCU…Motor Control Unit BMS…Battery Management System HEV Powertrain Use Case - Technical aspects

10. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 10 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Advanced features o Fuel economy or drivability Faults and failures o Hazards o Cause harm Safety-relevant: ISO 26262 o Safety arguing o Tool qualification o Safety analyses o Model-based safety engineering EMS…Engine Management System CCU…Clutch Control Unit HCU…Hybrid Control Unit TCU…Transmission Control Unit MCU…Motor Control Unit BMS…Battery Management System HEV Powertrain Use Case - Background

11. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 11 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Specification o Conception and Specification of Use Case PMTC – Review o D501.1  D521.1 o Relase planned nSCM18 (09/2013) Methods o Safety Modeling – First experiences in SysML modeling o Safety Analysis – Concept Phase work in progress Tool Integration in CTF&CAR o MDS: Meta X integrated in CTF&CAR o CEA List: Diversity integrated in CTF&CAR ARTIMon Evaluation of demonstrator o First preliminary evaluation planned for nSC M19 (10/2013) HEV Powertrain Use Case - Status IN REVIEW WORKING IN REVIEW WORKING FINISHED WORKING

12. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 12 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga HEV Powertrain Use Case - Tool: MetaX IN REVIEW WORKING FINISHED MDS MetaX mapping tool o Supports traceability  Between heterogeneous fragments of information  Over different tools  Semantics relationships o Change impact analysis  Refined precision (fragments)  Identify impacted elements  Guarantee consistency between coupled structured hierarchical elements

13. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 13 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga HEV Powertrain Use Case - Tool: MetaX IN REVIEW WORKING FINISHED MDS MetaX mapping tool o Supports traceability  Between heterogeneous fragments of information  Over different tools  Semantics relationships o Change impact analysis  Refined precision (fragments)  Identify impacted elements  Guarantee consistency between coupled structured hierarchical elements

14. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 14 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga HEV Powertrain Use Case - Tool: MetaX Mapping of design elements Declaration and formalization of the existing relationships between fragments of artifacts involved in the development (requirements, specifications, models, source code, etc.). Forward and backward traceability Static safety analysis, e.g. coverage and consistency checks, by exploiting the traceability links declared between artifacts. Change impact analysis Assessment of the impacts implied by a given modification of an artifact at any level of the flow. Interfacing to requirements management tools Support of the Requirement Interchange Format (ReqIF) standard in order to interface with widespread requirements management tools

15. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 15 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga HEV Powertrain Use Case - Tool: ARTImon IN REVIEW WORKING FINISHED Analyses a flow of dated observations in order to detect hazards expressed in formal entry language A flow may be obtained from: o instrumentation of a physical object o simulation of a model o execution of a code Useful for: o design process of complex systems, o models validation, o systems testing. Used in embedded component for control or diagnostic. Operates in continuous time or in logical time mode No limitation about the length of flow (memory is bounded & predictable)

16. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 16 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga HEV Powertrain Use Case - Tool: Safety Ext. IN REVIEW WORKING FINISHED AVL Safety Extensions as Addin for Enterprise Architect 9.3 Specific language enhancement of SysML1.1 – AVL Meta Model Meta Model and Addin Features support: o Item Definition o Hazard Analysis & Risk Assessment o Functional Safety Concept o Technical Safety Concept Interface to Requirement Management System

17. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 17 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga MetaX (MDS) o First Functional Prototype is available o Integration in CTF & CAR under investigation ARTiMon (CEA) o CTF: ARTiMon plugged to any simulator or running device;  producing a trace and check real time oriented properties o CAR: ARTiMon is a C library with a simple API (refresh variable values 6 time)  No input format is stricly imposed  wrapper/driver/parser has to be developed for each format/environment Safety Extension (AVL) o Integration in CTF and CAR as a future perspective o At first integration at conceptual level aspired o Restrictions of Enterprise Architect need to be considered o Potential of integration still under evaluation HEV Powertrain Use Case - CTF & CAR usage Which tools are used? First experience by tool support

18. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 18 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga MDS MetaX: o Provide traceability information to the CAR ? (TBC) o Interface with CTF ? (TBC) AVL Safety Extension: o Integration in CTF and CAR as a future perspective (TBC) ViF - Integration of other supporting tools to CTF and CAR? o E.g. Enterprise Architect or APIS IQ FMEA HEV Powertrain Use Case - Open issues Discuss of open issues demonstrator work or any possible improvements in each demonstrator or in the project wide cooperation

19. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 19 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators HEV Powertrain Use Case AUTOSAR BSW Use Case AUTOSAR BSW Use Case Construction Equipment Evaluation Open Discussion Agenda

20. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 20 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga There are four task identified in the use case One task is completely allocated to Akhela The other three are incremental in nature, i.e. the tools, methods and results are reused in the next task. Therefore we can concentrate on “Validity of safety certification when moving BSW to different contexts” (first task) to ascertain status. Background of AUTOSAR BSW module Use Case

21. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 21 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga “Validity of safety certification when moving BSW to different contexts” contains o Tool used and developed is SaftyADD  Eclipse plugin attaches currently empty safety contract container to source code. o Method used is Safety Contracts from component model  Currently main focus, investigating the appearance, rules and content of the safety contract container o BSW module to be analyzed is AUTOSAR diagnostics  Source code candidate identified Status of AUTOSAR BSW module Use Case

22. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 22 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Schematic view of SafetyADD Status of SafetyADD tool AUTOSAR BSW module Use Case Focus now is on formulation of the rule set governing the automatic compliance check of assume and guarantee to be implemented in the tool SafetyADD

23. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 23 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga SafetyADD Status of SafetyADD tool AUTOSAR BSW module Use Case When the development and testing of a SWC is done, it is time to export the software component for possible reuse at a later time. (stored in CAR) This is a view of the general properties of the SWC that can be edited

24. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 24 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Status of tool AUTOSAR BSW module Use Case (Akhela) Akhela uses Parasoft C++ Test that supports some default standard coding rules (i.e. MISRA C or C++) And also map AUTOSAR BSW requirements mapped onto ISO26262, with custom made rules for checking

25. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 25 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga CTF interaction minimal, launchable from platform only. CAR will hopefully enable storage and traceability of the certification artifacts and their dependencies. o The SafetyADD tool relates each software component to a component certificate via a contract; these contracts are in in the form of rules implemented in XML format not yet integrated in CAR. CTF & CAR useage in AUTOSAR BSW module Use Case

26. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 26 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga How and when will Safety Contracts be integrated in CAR A wider cooperation/discussion of practical usage of Safety Contracts Open issues of AUTOSAR BSW module Use Case

27. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 27 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators HEV Powertrain Use Case AUTOSAR BSW Use Case Construction Equipment Evaluation Construction Equipment Evaluation Open Discussion Agenda

28. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 28 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga The Volvo CE Use case consists of four incremental parts Product development according to ISO 26262 process following o Concept Phase o Product development at System level o Product development at Hardware level o Product development at Software level Development of a Component model concept including Safety Contracts and Safety Element out of Context Development of a Product line concept on top of the Component model Status of Volvo CE Use Case - Background

29. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 29 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga The Volvo CE Use case consists of four incremental parts Product development according to ISO 26262 process following o Concept Phase o Product development at System level o Product development at Hardware level o Product development at Software level Development of a Component model concept including Safety Contracts and Safety Element out of Context Development of a Product line concept on top of the Component model Status of Volvo CE Use Case – Current Status Ending Q3 2013 Background task (Q3) Starting Ended Q2 2013

30. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 30 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Tools o MoMuT o WEFACT CTF & CAR useage in Volvo CE Use Case

31. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 31 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Process model o Activity patterns Open issues of Volvo CE Use Case

32. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 32 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Component model o Different levels and languages  SYSML  UML  Simulink o Safety Contracts Open issues of Volvo CE Use Case SYSML/UML UML UML/Simulink

33. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 33 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Tools o MoMuT o WEFACT Open issues of Volvo CE Use Case

34. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 34 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Feature model, Component model and Patterns Open issues of Volvo CE Use Case

35. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 35 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Introduction of AT & CE Demonstrators HEV Powertrain Use Case AUTOSAR BSW Use Case Construction Equipment Evaluation Open Discussion Open Discussion Agenda

36. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 36 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga Any improvements of cooperation across WPs? o Technology and Process providers WP100? o Tool-providers WP200? o Other demonstrator use case WP300/400/500/600?  Application of SafeCer methods and tools  Share experience by using CTF&CAR  Evaluation of results Open discussion for AT & CE demonstration

37. AVL List, Roland Mader Virtual Vehicle, Helmut Martin Page 37 ARTEMIS-2010-1 JU Grant Agreement number 269265 ARTEMIS-2011-1 JU Grant Agreement number 295373 Sept 25-27, 2013 Riga