Project: EDONA. Environnements de Développement Ouverts aux Normes de l Automobile. Open Development Platform to Automotive Standards

Transcription

1 Project: EDONA Environnements de Développement Ouverts aux Normes de l Automobile Open Development Platform to Standards May 2010

2 Summary Project overview page 4 WP 1 : TM modeling page 6 Improving Requirement Engineering in an Model Driven development. WP 2 : Critical systems development page 8 How EDONA improve design, generation and test of a PharOS application. WP 3 : Matlab/Simulink functional algorithm tests tool page 10 Define and put in place a tool for Matlab/Simulink models validation. WP 4 : HMI software design workbench page 12 Ease HMI development using new data exchange format capabilities, models transformation and validation from various design. WP 5 : Interoperation and integration platform page 14 Gather all transverse functions for creating a technical infrastructure for product management and tooling development and integration. -Page 2-

3 Partners Industry users REGIENOV François Ougier Technocentre RENAULT Direction de l Electronique Avancée 1, avenue du Golf Guyancourt Cedex Tel: francois.ougier@renault.com PSA Aldric Loyer / Jean Friry PSA Peugeot Citroën Route de Gisy Vélizy-Villacoublay Cedex Tel: / aldric.loyer@mpsa.com Continental Bernard Sanchez Continental S.A.S. S&T_A Software Platforms 1, avenue Paul Ourliac BP F Toulouse Cedex 1 Tel: bernard.sanchez@continentalcorporation.com DELPHI Arnaud Tournadre Body & Security France Electronique Habitacle et Sécurité 64, Av de la Plaine de France Tremblay en France Tel: arnaud.tournadre@delphi.com Johnson- Controls Gilles Ricour Johnson Controls Electronics 10 Av de l Entreprise B.P Osny F-95xxx Cergy-Pontoise Cedex Tel : gilles.ricour@jci.com Visteon Hervé Dufau Visteon Software Technologies Engineering Services 1800, Route des Crêtes - BP Sophia Antipolis Cedex Tel: hdufau@visteon.com THALES THALES Research & Technology Route Départementale Palaiseau Cedex Tel : Services or suppliers Esterel Technologies Esterel Technologies Parc Euclide - 8, rue Blaise Pascal ELANCOURT Cedex Tel: Sherpa Engineering Jean Brunet Sherpa Engineering 269/287, rue de la Garenne Nanterre Tel : j.brunet@sherpa-eng.com GEENSYS Serge Laverdure 16, rue du Dôme Boulogne-Billancourt Tel : serge.laverdure@geensys.com GEENSOFT 88 ter avenue du Général Leclerc Boulogne Billancourt France Start up companies (Services or suppliers) Intempora Gilles Michel Intempora S.A. 2, place Jules Gévelot Issy les Moulineaux Tel : gilles.michel@intempora.com Knowledge Inside Samuel Boutin Knowledge Inside 215, rue Jean-Jacques Rousseau Issy les Moulineaux Tel: sbo@k-inside.com OBEO Etienne Juliot Obeo 2, rue Robert Schuman Rezé Tel : etienne.juliot@obeo.fr Academics ARMINES Sébastien Boisgérault Centre de Robotique Ecole des Mines de Paris Paris Tel : sebastien.boisgerault@mines-paristech.fr CEA LIST François Terrier LISE - CEA List CEN Saclay GIF SUR YVETTE Tel : francois.terrier@cea.fr INRIA LINA 2, rue de la Houssinière, BP Nantes Cedex 03 Polytechnique Leo Liberti LIX Ecole Polytechnique Palaiseau Cedex Tel: liberti@lix.polytechnique.fr Supelec Frédéric Boulanger Supelec - Plateau de Moulon 3, rue Joliot-Curie Gif sur Yvette Tel : frederic.boulanger@supelec.fr -Page 3-

4 EDONA project overview Context : At the origins of EDONA was a strategic decision of the Automobile & Transportation group (a.k.a. Num@tec) of the System@tic Paris Région French R&D cluster to federate the projects they labelled. This goal would be achieved by specifying and building a number of platforms that would host all their and concept developments. EDONA was to be the first one, covering automotive electronic systems design. This goal matched the expectations of some car manufacturers and suppliers who in some situations began to perceive the detrimental effects (in terms of schedule and cost as well as specification and implementation quality) of using disconnected along the V cycle. This became really significant when the consortium gained momentum. uses interface descriptions in XML, diagrammatic representations, and an UML meta-model. Those elements make it very difficult to do anything without, and immediately raise the issue of connecting them to the requirement documents and to the various system engineering, modelling and testing that were more or less being experimented and deployed around Lead by Renault and gathering at the national level the totality of the main and large industry actors of the field of automotive embedded software, EDONA is a project of the "System@tic Paris-Région" cluster. EDONA aims at facilitating the assembly of seamless tool chains for the development of automotive embedded systems. Modular, interoperable and adaptable to the various needs of the actors and trades of the car industry, it integrates from the start the requirement of compliance to automotive standards, with a particular focus on. Project structure: WP 0 - «Management» - Promotion, dissemination and perpetuation strategy Tooled up process Requirement modeling for Critical system development Functional testing of Matlab/Simulink algorithms HMI software design workbench Industrial applications WP 1 WP 2 WP 3 WP 4 WP 5 - «Interoperation and integration platform» - Requirements definition - Interoperability and interchange architecture for automotive development processes and -Page 4-

5 Global phase schedule From and to WP 0 task 1: feeding and implementing the reference process Phase 1 Identification of the tool Specification of the tool Specification of interchange needs among the internal tool Phase 2 Development of the tool v1.0 Integration on the framework v1.0 Preliminary demonstrators From WP 5 : Template & constraints formalisation of exchanged data To WP 5 : Models of exchanged data for integration / aligment / implementation From WP 5 : Framework v1.0 To WP 5 : Complementary needs Evolution requests Phase 3 Tuning tool v2.0 Integration on the framework v2.0 Final demonstrators From WP 5 : Framework v2.0 Final Delivrables -Page 5-

6 WP1 : Requirements traceability and modeling WP1 Objectives : Ensure full requirements traceability through the software development life cycle. Propose modeling of Systems with different abstraction views and with integrated from functional analysis with EAST-ADL2 to TM implementation. Integrate non functional properties (Real-time). Verify in the system models the functional and non functional properties. Prepare an industrial deployment. 1 Requirement Engineering Requirement Specifications EAST- ADL2 use 4 EAST-ADL2 modelling Requirement allocation to solution Requirement analysis 5 use 2 use EAST-ADL2 model MyReq Schedulability Analysis 3 Requirement allocation to V&V means Transform use ARGateway model V&V Product 6 use modelling External Partner EDONA Component Mapping Gateways Specific Users & generic Generic for toolmakers Basic for toolmakers Not Eclipse based Reqtify DOORS MyReq ATL GEF Eclipse Based OPTIMUM EAST to PsiC EAST-ADL2 EMF ARGateway ARTOP UML2 Components developed in the Eclipse plug-ins : - EAST-ADL2 : Graphical modeling tool. - ARGateway : transformation from EAST-ADL2 to - EAST to PsiC : transformation from EAST-ADL2 to PsiC language for safety critical systems (see WP2) - ARTOP : metamodel implementation - MyReq : Eclipse Plug-in allowing the edition and modification of traceability links in the Eclipse environment (CDT, JDT, ). - OPTIMUM : Schedulability analysis framework for automotive EAST-ADL2 or MARTE models. Current Status EAST-ADL2 ARGateway V2.1 released on 22/04/2010 Optimum V1.2 released on 22/04/2010 ARTOP - V1.2.4 delivered on the 23/04/2010 MyReq - Use same derived model of TRAMWAY (TOPCASED) Version 1.0 delivered on 31/08/09. All these are available and integrated into the EDONA framework. Stakes Improve SW productivity (5%) thanks to the following improvements : Improve Development timing cycles Improve Complexity handling by modeling solutions through different abstraction layers which are independent from the final HW platform. Improve SW Quality by early detection of errors to reduce the impact on development Enhance impact analysis results thanks to fine-grained requirement traceability Minimize handling by providing several interoperable associated to different skills in the same framework. Methodology - Contact : arnaud.albinet@continental-corporation.com MyReq - Contact : loic.queran@geensoft.com EAST-ADL2 & ARGateway Contact : yann.tanguy@cea.fr ATL (OBEO et AtlanMod) Contact : gonzague.reydet@obeo.fr Artop ( )- Contact : artop@geensys.com WP1 responsible : bernard.sanchez@continental-corporation.com

7 WP1: Demonstrators in Requirements traceability and modeling PSA - Conti Demonstrator : The Edona platform is simplifying and optimizing the exchange Customers/Suppliers Scenario: The Oem is modeling, from its set of requirements, a function. Part of this function is developed by a Tier one who received requirements and environment models. The modeling with EAST-ADL2 is done in parallel. A new change request which impacts some requirements is sent to the Tier one. After an impact analysis thanks to MyReq/Reqtify, the changes are integrated into the models easily. Then with ARGAteway, the SW Components coming from the Oem and the Tier one are created and integrated in the ECU. WP1 Demonstrator : The Edona new technology platform is providing interoperable for requirement engineering, system modeling (EAST-ADL2), modeling and timing analysis. Scenario : Using a complex function Cruise Control, the demonstration will show the development of model solutions with, integrating requirement engineering, timing analysis and impact analysis with an efficient EDONA platform tooling. Chan ge reque st EAST-ADL2 models EDONA PSA- Conti Demonstrator : External Lightning Reports Toolbox MyReq ARGateway External Lightning ST* SFD** Spec Analysis Model design Implementation Integration Multi-platform customers PSA requirements and EAST-ADL2 models EAST-ADL2 models Spec Analysis Model design Implementation Integration Analysis * Spécification Technique ** Spécification Fonctionnelle Détaillée Change request Impact Analysis Doors : Trace requests and generate requirement specifications Automatic requirement import and synchronization in EDONA platform 2 1 Reqtify MyReq Allocation of requirement on model solution and test cases 3 Analyze & report 5 EDONA WP1 Demonstrator : Cruise Control Scenario 1 to 12 EAST-ADL2 Architecture modeling in EAST-ADL2 4 ARGateway Generate Autosar artifacts with requirement coverage 1 0 Integrate timing properties into models Optimum Verify timing properties and scheduling 6 7 V&V Timing Scheduling Variability 8 1 Generate 3 artifacts with requirement coverage editor modeling C editor : code editing and integration GenDoc Generate architecture documentati on with requirement coverage 9 EDONA Plug-ins External plug-ins

8 WP 2 : Critical systems development Main objectives System Models V&V Product - Tool to analyze and quantify accuracy of software numerical operations. - Simulink tool box to design PharOS application. PharOS - Code generator : PsiC code generated with a specific target PharOS. - PharOS execution tool with environment and time simulated. Connexion with environment model. - Validation methodology (timing, scheduling, sizing, algorithms, functional requirements) with MIL, SIL and HIL methods. Components integration: External Partner EDONA EDONA WP5 Gateways Not Eclipse based Eclipse Based Specific Execution tree generation and numeric tests generation. Possible management of full or partial PharOS execution algorithm tool part with for time intermediate & or full management. env. simulated Users & generic Simulink tool box for PharOS Simulink pharos PharOS : Real time OS (+ tool chain) for critical systems : - Multi tasking Time Triggered (event triggered supported). - Determinist behavior (nominal and degraded modes). - System guaranteed correct by construction. - Fault segregation. - Secured resources sharing on standard hardware. Generic for toolmakers Basic for toolmakers Simulink tool box for PharOS : Design and auto-coding of PharOS application PharOS execution tool with time & env. simulated : representative simulation on host machine Stakes PharOS design with Simulink and autocoding: Get advantages of Model Based Design with a well-known interface (graphical block, browser ). Improve complexity handling with dedicated modeling solutions : focused on what to do? and not how to do it? Abstract PharOS language syntax. Minimize human errors by generating automatically PsiC. PharOS simulation : Abstract hardware (real time and environment are no more constraints). Produce representative execution with nominal and/or degraded scenarios (fault injection). Connect simulation with environment model for Software In the Loop tests. Improve SW Quality by early detection of errors to reduce the impact on development. Global SW productivity and quality are improved Components Methodology & IBEC model (Delphi) - Contact: arnaud.tournadre@delphi.com PharOS simulink tool box (Sherpa Engineering) - Contact: i.dal@sherpa-eng.com PharOS simulation tool (CEA LIST) - Contact: christophe.aussagues@cea.fr -Page 8-

9 WP2 : demonstration of PharOS tool suite Demonstration: Content : - EDONA to design, generate and test a PharOS application - Body controller embedding a PharOS software managing the most critical (ASIL B) functionalities of this ECU: - Light management - Wiper management - Engine start (cranking) Focus : - Tools - Engineering workflow and methodology with these Overview : P h a r O S Light Wiper Interface Driver layer Cranking P h a r O S Light Wiper Interface Driver layer Cranking Legend: Code auto-generated by EDONA tool Code not auto generated by EDONA tool Microcontroller Global software structure Microcontroller Software structure with tool support Steps : 1- Design on Simulink with PharOS tool box 2- Generate code PsiC 3- Assemble code parts to build the final one 4- Simulate on host machine 5- Run on real body controller System Models V&V Product Step 5 P h a r O S Light Wiper Interface Driver layer Cranking Microcontroller Step 4 Step 1 Step Page 9-

10 WP 3 : Matlab/Simulink functional algorithm tests tool Typical use scenario: From developed Simulink/Stateflow models, provide: - Coverage criteria definition for test cases generation (structural, MC/DC, data overflow, others,.). - Simulink models analysis with STB/AGATHA tool. - Test cases generation. - Display and test cases realization at model level. System Models V&V Product External Partner EDONA Components integration: Gateways Not Eclipse based STB/Agath a Eclipse Based Specific Execution tree generation and numeric tests generation. Possible management of full or partial algorithm part for intermediate or full management. The following are used : - Safety Test Builder : Automatic Matlab/Simulink test cases generation tool. - Agatha : From formal methods, automatic test cases generation based on symbolic automata execution, and execution tree generation. Total or partial model management. Users & generic Generic for toolmakers GeneAuto Agatha - Geneauto : C Code generation from Simulink models, for structural analysis. Basic for toolmakers Stakes Software quality improvement. Design error overcost reduction by earlier problem detection. Development time reduction. Components AGATHA Contact: jean-pierre.gallois@cea.fr Internet link : www-list.cea.fr Safety Test Builder Contact : Thierry.gueguen@geensoft.com Internet link : -Page 10-

11 Demonstration : The demonstration is split into 4 parts : - Overview of test cases generation with STB/AGATHA - Test cases generated execution through STB/AGATHA environment - Test cases execution at model level, in the Johnson Controls standard environment - Test cases execution at PC simulation level (after C-Code generation and Autosar BSW integration) Overview of the used -Page 11-

12 WP 4 : Interoperable tool chain for HMI design Main objectives: EDONA HMI format capabilities, both for innovative prototypes and widespread in-car HMI features HMI design models transformation and validation from various design. Conversion into the EDONA HMI format, based on SVG standard. HMI generation: EDONA HMI format import and code generation on an embedded platform HMI Simulation and Prototyping using strong differentiation between logics and graphics System Models Requirement Analysis WP4 Specification s Architechtura l Design Detailed Design V&V Product Operation and Maintenance Validation WP4 Integration Unit Tests WP4 Implementatio n Gateways Specific Users & generic Generic for toolmakers Basic for toolmakers Not Eclipse based HMI Validator SCADE - Display - Suite HMI Prototyping Altia Rapid + EB Guide Altia/Edona gateway Autosar RunTime Engine Rapid+/Edona gateway EBGuide/Edona Flash/Edona gateways RT Maps External Partner Eclipse Based HMI I18n HMI Automatic Documentation EDONA Components integration: Model Transformation: - Flash / Edona HMI - Edona HMI / Scade Display - Altia / Edona HMI - Rapid + / Edona HMI Simulation and Prototyping : - Armines HMI prototyping - Esterel SCADE (SCADE Suite, SCADE Display) embedded platform - RT Maps, Intempora EDONA HMI model validation Code generation (C/Java) Stakes: Interoperability between various HMI design (Altia, Rapid+, Flash, SCADE DISPLAY) Safe HMI design models based on SVG graphics standard and data-flow programs Reduced development times via modelbased design Capabilities of the EDONA HMI format Deployment on multiple target platforms (C/OpenGL, Genivi Moblin, JVM, etc ) Seamless integration of functional mockups in the -compliant system they belong to -Page 12- Components: HMI Simulation and Prototyping: Armines Contact sebastien.boisgerault@minesparistech.fr Infotainment flash HMI, Radio/CD Display, Altia & Rapid+ gateways: Visteon Contact jtemmos@visteon.com ESTEREL SCADE gateway: Esterel Technologies Contact patrick.lautard@estereltechnologies.com RTE Generation, Autosar Simulation (ASIM), Autosar & Eclipse Integration: Geensoft Contact loic.queran@geensoft.com

13 Visteon Multi Visteon Functional Display Multi Functional Display Altia MFD Radio Altia Graphics Visteon Logics Visteon Scade Display Esterel Certified Applications Generated Code From Scade Display Esterel Generated code From Scade Suite Esterel Environnements de Développements Ouverts aux Normes de l Automobile WP4 Demonstrator 1: HMI for intelligent transportation systems: the LOVe use case WP4 Demonstrator 2: From flash design to embedded code on a Moblin/Genivi platform Graphics Flash Animation Build with Adobe Flash CS4 Professional Logics Visteon Exported Graphics Flash SWF Visteon Gateway Partial import of code Gateways Edona HMI Format Validator SCADE Display Esterel SCADE Suite Esterel Generated Code Generated Code Graphics Esterel For Genivi/Moblin Platform With OpenGL > 1.5 Logics Generated Code SCADE Suite Esterel HMI design has been made using: - Adobe Flash Creative Suite 4 Professional - Internal guidelines for logics/graphics separation then, once converted into EDONA HMI format, the design is loaded into Scade Display and code is generated for a Visteon Hardware Platform running Linux Moblin/Genivi. -Page 13-

14 WP 5: Interoperation platform and integration repository Main objectives Make available a technical platform with all basic functionalities needed to make for electronic embedded systems development Using the Open source Eclipse background Insuring main basic functionalities needed to manage virtual objects and associated Using and extending the Standard Covering the whole development process System Models V&V Product Requirement Conception Building Testing specific functionalities Basic functionalities Component integration overview : Third party Partners EDONA EDONA WP5 Not Eclipse based Eclipse based Gateways Simulink tool box for PharOS Simulink to Fluctuat to SCADE STB/Agatha HMI to Edona MyReq to Reqtify MyReq to EAST EAST to PsiC EAST to MAST ARGateway Specific SCADE PharOS - Display - Suite RTMaps Simulink PharOS execution tool with time & env. simulated Simulink Model Environment Altia Rapid + EB Guide /SysML EAST for Syst. Env. HMI tool RT Maps- Plug MDT Autosar Metamodel extensions (ARTIME) AutosarBuilder Users & generic Doors Reqtify MAST GenAuto Autosar Rt Engine MyReq Agatha Artop-AAL Generic for toolmakers Basic for toolmakers Acceleo ATL GenDocs Model transformation OCL GMF UML2 GEF EMF - Compare EMF EMF - Transaction - Validation - Query Sphinx -Page 14-

15 SCADE - Display - Suite Workpackage Deliverables GenDocs for Syst. Env. Acceleo Environnements de Développements Ouverts aux Normes de l Automobile >2011 to SCADE ARGateway Optimum PharOS Rtmaps -Eclipse Wrapper -HMI designer STB Agatha HMI protoyping /validator Off-the-shelf CEA EDONA Target Platform PharOS Consortium PharOS Commercial Esterel Scade Obeo designer Intempora STB Agatha Open for Syst. Env. MIT Licence Acceleo Artop-ECL backbone MyReq to EAST MyReq to Reqtify MDT / SysML EMF Compare ATL - Atlas Transfo. language MDT Sphinx EMF Compare ATL GPL Autosar license MyReq Autosar Metamodel extensions (ARTIME) ARTIME Artop-AAL -Page 15-

16 May Page 16-