arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2001.11875cs.SEcs.LO
收藏

观测卫星星上自主功能验证的形式化方法

Formal Approach for the Verification of Onboard Autonomous Functions in Observation Satellites

Vincent Mussot, Silvano Dal Zilio, Loic Correnson, Serge Rainjonneau, Yves Bardout, Grégoire Scano

摘要:

我们提出了一种新的方法来模拟地球观测卫星的功能行为。我们利用这种方法来开发一种安全关键软件,即“远程命令验证器”,它负责检查机载指令序列是否可以安全执行。这项新服务是为了给卫星增加更多的自主权。为此,我们提出了一个新的领域特定的建模语言和集成到嵌入式软件所需的工具链。该框架基于确定性有限状态机的组成,具有安全条件、超时和转换,这些状态机接受持续时间作为参数。它能够从卫星的高级规格生成同步程序设计语言Lustre代码。这给出了一种形式化的方法来推导基于事件的算法,模拟遥控指令序列的执行,并由此得到可证明正确的机载验证器。

英文摘要:

We propose a new approach for modelling the functional behaviour of an Earth observation satellite. We leverage this approach in order to develop a safety critical software, a "telecommand verifier", that is in charge of checking onboard whether a sequence of instructions is safe for execution. This new service is needed in order to add more autonomy to satellites. To do so, we propose a new Domain Specific Modelling Language and the toolchain required for integration into an embedded software. This framework is based on the composition of deterministic finite state machines with safety conditions , timeouts, and transitions that accept durations as a parameter. It is able to generate code in the synchronous programming language Lustre from a high-level specification of the satellite. This gives a formal way to derive an event-based algorithm simulating the execution of telecommand sequence and, thereupon, a provably correct onboard verifier.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑