Search Results

Balancing between dependability and cost-effectiveness is essential to promote X-by-Wire systems in the next decade. To achieve this goal, we have so far proposed a network centric architecture based on a concept of autonomous decentralized systems, where if one node fails, the remaining normal nodes autonomously execute a backup control to maintain the system's functionality, as well as a membership middleware indispensable to this architecture to ensure the consistency of the node status information among all nodes. In this work, we implemented membership middleware on a hardware and software platform equivalent to one assumed to be used in actual X-by-Wire systems. This paper describes the implementation details and performance evaluation result, and shows that membership middleware and a real-time critical application can coexist within one microcontroller.

To detect difficult-to-find defects in automotive control systems, we have proposed a modeling method with a program slicing technique. In this method, a verifier adjusts the boundaries of source code to be extracted on a variable dependence graph, in a kind of data flow. We have developed software tools for this method and achieved a 35% decrease in total verification time on model checking. This paper provides some consideration on effective cases of the method from verification practices. There are two types of malfunction causes: one is the timing of processes (race conditions), and the other is complex logics. Each type requires different elements in external environment models. Furthermore, we propose regression verification based on the modeling method above, to further reduce verification time on model checking. The paper outlines tool extensions needed to realize regression verification.

Highly automated driving systems have a responsibility to keep a vehicle safe even in abnormal conditions such as random or systematic failures. However, creating redundancy in a system to respond to failures increases the cost of the system, and simple redundancy cannot detect systematic failures because some systematic failures occur in each system at the same time. Systematic failures in automated driving systems cannot be verified sufficiently during the development phase due to numerous patterns of parameters input from outside the system. A safety concept based on a “safety sustainer” for highly automated driving systems is proposed. The safety sustainer is designed for keeping a vehicle in a safe state for several seconds if a failure occurs in the system and notifying the driver that the system is in failure mode and requesting the driver to take over control of the vehicle.