面向安全关键系统的时间触发软件

Time-triggered software for safety-critical systems

为了保证任务的执行免受事件驱动行为的影响,安全关键控制系统软件设计时应当避免使用任何时间不确定的结构。时间触发软件是时间触发架构重要的组成部分,具有较高的可靠性和确定性,易于开发和综合。重点研究了时间触发软件的体系架构、时间触发操作系统的调度策略和任务管理策略。同时容错通信层的实现使得副本的数目、表决和重新综合对于应用软件完全保持透明。总之,时间触发操作系统和容错通信层可以使应用软件和安全关键控制算法的开发更加简单和快捷,也更易于测试和验证。

In order to protect execution of the tasks from the effects of event-driven behavior, any time-uncertain structure should not be adopted in safety-critical control software design. Time-triggered software is an important part of time triggered architecture with high reliability and certainty which is easy to develop and integrate. Time triggered software architecture, scheduling policy and task management policy of time triggered operation system were mainly studied. Fault-tolerant communication layer made number of copies, voting and reintegration keeping entirely transparent to the application software. Owing to time triggered operating system and fault-tolerant communication layer, the development of application software and safety-critical control algorithm becomes easy and rapid and it is easy to test and verify too.