{"title":"基于组件的线控制动系统安全关键软件的开发与验证","authors":"M. Gunzert, A. Nägele","doi":"10.1109/PDSE.1999.779745","DOIUrl":null,"url":null,"abstract":"In this paper we describe the development and verification of software for an automotive brake-by-wire system. This is a new brake system without mechanical or hydraulic backup. The system is based on a time-triggered communication architecture. The central control computer in this distributed system, called Brake-by-Wire Manager, is a redundant design in order to tolerate any single failure. The software of this computer is subject to a set of safety related requirements which must be verified. We have developed the software using synchronous software components based on the synchronous ESTEREL. Many safety properties have been verified successfully and the software has been integrated in a prototype brake-by-wire system in a research car.","PeriodicalId":373753,"journal":{"name":"1999 Proceedings International Symposium on Software Engineering for Parallel and Distributed Systems","volume":"9 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"1999-05-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"33","resultStr":"{\"title\":\"Component-based development and verification of safety critical software for a brake-by-wire system with synchronous software components\",\"authors\":\"M. Gunzert, A. Nägele\",\"doi\":\"10.1109/PDSE.1999.779745\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In this paper we describe the development and verification of software for an automotive brake-by-wire system. This is a new brake system without mechanical or hydraulic backup. The system is based on a time-triggered communication architecture. The central control computer in this distributed system, called Brake-by-Wire Manager, is a redundant design in order to tolerate any single failure. The software of this computer is subject to a set of safety related requirements which must be verified. We have developed the software using synchronous software components based on the synchronous ESTEREL. Many safety properties have been verified successfully and the software has been integrated in a prototype brake-by-wire system in a research car.\",\"PeriodicalId\":373753,\"journal\":{\"name\":\"1999 Proceedings International Symposium on Software Engineering for Parallel and Distributed Systems\",\"volume\":\"9 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"1999-05-17\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"33\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"1999 Proceedings International Symposium on Software Engineering for Parallel and Distributed Systems\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/PDSE.1999.779745\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"1999 Proceedings International Symposium on Software Engineering for Parallel and Distributed Systems","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/PDSE.1999.779745","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Component-based development and verification of safety critical software for a brake-by-wire system with synchronous software components
In this paper we describe the development and verification of software for an automotive brake-by-wire system. This is a new brake system without mechanical or hydraulic backup. The system is based on a time-triggered communication architecture. The central control computer in this distributed system, called Brake-by-Wire Manager, is a redundant design in order to tolerate any single failure. The software of this computer is subject to a set of safety related requirements which must be verified. We have developed the software using synchronous software components based on the synchronous ESTEREL. Many safety properties have been verified successfully and the software has been integrated in a prototype brake-by-wire system in a research car.