| 1. |
- Armengaud, E., et al.
(författare)
-
Model-based toolchain for the efficient development of safety-relevant automotive embedded systems
- 2011
-
Ingår i: SAE technical paper series. - 400 Commonwealth Drive, Warrendale, PA, United States : SAE International. - 0148-7191.
-
Tidskriftsartikel (refereegranskat)abstract
- Advanced functionalities unthinkable a few decades ago are now being introduced into automotive vehicles through embedded systems for reasons like emission control, vehicle connectivity, safety and cooperative behaviors. As the development often involves stakeholders from different engineering disciplines and organizations, the complexity due to shared requirements, interdependencies of data, functions, and resources, as well as tight constraints in regards to timing, safety, and resource efficiency makes the system integration, quality control and assurance, reuse and change management increasingly more difficult. This calls for a more rigorous approach to the development of automotive embedded systems and components. This paper describes the CESAR reference technology platform (RTP) that supports the formalization of various engineering concerns in the development of safety-relevant embedded systems and thereby a model-based integration of various tools and methods to form seamless environments or toolchains for the development of such systems.
|
|
| 2. |
- Chen, De Jiu, et al.
(författare)
-
Design of a knowledge-base strategy for capability-aware treatment of uncertainties of automated driving systems
- 2018
-
Ingår i: Lect. Notes Comput. Sci.. - Cham : Springer International Publishing. - 9783319992280 - 9783319992297 ; , s. 446-457
-
Konferensbidrag (refereegranskat)abstract
- Automated Driving Systems (ADS) represent a key technological advancement in the area of Cyber-physical systems (CPS) and Embedded Control Systems (ECS) with the aim of promoting traffic safety and environmental sustainability. The operation of ADS however exhibits several uncertainties that if improperly treated in development and operation would lead to safety and performance related problems. This paper presents the design of a knowledge-base (KB) strategy for a systematic treatment of such uncertainties and their system-wide implications on design-space and state-space. In the context of this approach, we use the term Knowledge-Base (KB) to refer to the model that stipulates the fundamental facts of a CPS in regard to the overall system operational states, action sequences, as well as the related costs or constraint factors. The model constitutes a formal basis for describing, communicating and inferring particular operational truths as well as the belief and knowledge representing the awareness or comprehension of such truths. For the reasoning of ADS behaviors and safety risks, each system operational state is explicitly formulated as a conjunction of environmental state and some collective states showing the ADS capabilities for perception, control and actuations. Uncertainty Models (UM) are associated as attributes to such state definitions for describing and quantifying the corresponding belief or knowledge status due to the presences of evidences about system performance and deficiencies, etc. On a broader perspective, the approach is part of our research on bridging the gaps among intelligent functions, system capability and dependability for mission-&safety-critical CPS, through a combination of development- and run-time measures. © Springer Nature Switzerland AG 2018.
|
|
| 3. |
- Chen, Yizhi, 1995-, et al.
(författare)
-
Online Image Sensor Fault Detection for Autonomous Vehicles
- 2022
-
Ingår i: Proceedings. - : Institute of Electrical and Electronics Engineers Inc.. ; , s. 120-127
-
Konferensbidrag (refereegranskat)abstract
- Automated driving vehicles have shown glorious potential in the near future market due to the high safety and convenience for drivers and passengers. Image sensors' reliability attract many researchers' interests as many image sensors are used in autonomous vehicles. We propose an online image sensor fault detection method based on comparing the historical variances of normal pixels and defective pixels to detect faults. For fault pixels without uncertainty, with a detecting window of more than 30 frames, we get 100% accuracy and 100% recall on realistic continuous traffic pictures from the KITTI data set. We also explore the influence of fault pixel values' uncertainty from 0% to 25% and study different fixed thresholds and a dynamic threshold for judgments. Strict threshold, which is 0.1, has a high accuracy (99.16%) but has a low recall (34.46%) for 15% uncertainty. Loose threshold, which is 0.3, has a relatively high recall (83.78%) but mistakes too many normal pixels with 18.17% accuracy for 15% uncertainty. Our dynamic threshold balances the accuracy and recall. It gets 100% accuracy and 58.69% recall for 5% uncertainty and 78.38% accuracy and 55.39% recall for 15% uncertainty. Based on the detected damage pixel rate, we develop a health score for evaluating the image sensor system intuitively. It can also be helpful for making decision about replacing cameras.
|
|
| 4. |
- Johansson, R., et al.
(författare)
-
A strategy for assessing safe use of sensors in autonomous road vehicles
- 2017
-
Ingår i: 36th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2017. - Cham : Springer. - 9783319662657 ; , s. 149-161
-
Konferensbidrag (refereegranskat)abstract
- When arguing safety for an autonomous road vehicle it is considered very hard to show that the sensing capability is sufficient for all possible scenarios that might occur. Already for today’s manually driven road vehicles equipped with advanced driver assistance systems (ADAS), it is far from trivial how to argue that the sensor systems are sufficiently capable of enabling a safe behavior. In this paper, we argue that the transition from ADAS to automated driving systems (ADS) enables new solution patterns for the safety argumentation dependent on the sensor systems. A key factor is that the ADS itself can compensate for a lower sensor capability, by for example lowering the speed or increasing the distances. The proposed design strategy allocates safety requirements on the sensors to determine their own capability. This capability is then to be balanced by the tactical decisions of the ADS equipped road vehicle.
|
|
| 5. |
- Lu, Zhonghai, et al.
(författare)
-
Wearable pressure sensing for lower limb amputees
- 2022
-
Ingår i: BioCAS 2022 - IEEE Biomedical Circuits and Systems Conference. - : Institute of Electrical and Electronics Engineers Inc.. - 9781665469173 ; , s. 105-109, s. 105-109
-
Konferensbidrag (refereegranskat)abstract
- Pressure sensing in prosthetic sockets is valuable as it provides quantified data to assist prosthetists in designing comfortable sockets for amputees. We present a wearable pressure sensing system for lower limb amputees. The full system consists of three essential elements from sensing scheme (wearable sensors, sensor calibration and deployment), electronic measurement system (embedded hardware and software), to time-series database and visualization. The full system has been successfully applied in clinical trials to effectively collect pressure data in real-time.
|
|
| 6. |
- Zhang, Xinhai, et al.
(författare)
-
Architecture exploration for distributed embedded systems : A gap analysis in automotive domain
- 2017
-
Ingår i: 2017 12th IEEE International Symposium on Industrial Embedded Systems, SIES 2017 - Proceedings. - : Institute of Electrical and Electronics Engineers (IEEE). - 9781538631669
-
Konferensbidrag (refereegranskat)abstract
- A large body of work can be found in literature on Design Space Exploration (DSE) methods for distributed embedded system architecting (DESA). However, almost none of these methods is successfully adopted in automotive industry. To clarify the reasons, this paper 1) analyzes the current state of the art (SOTA) on DSE methods for DESA through a systematic literature study, focusing on the assumed architecting process and concerns; 2) investigates the state of practice (SOP) on DESA in the automotive industry through a literature study and interviews with experienced system architects from five different automotive manufacturers; and 3) analyzes the gap between SOTA and SOP, and thereby discusses potential improvements of DSE methods.
|
|
| 7. |
- Anthony, Richard, et al.
(författare)
-
A Future Dynamically Reconfigurable Automotive Software System
- 2008
-
Ingår i: Proceedings of the Elektronik im Kraftfahrzeug.
-
Konferensbidrag (refereegranskat)abstract
- Embedded software systems in vehicles are of rapidly increasing commercial importance for the automotive industry. Current systems employ a static run-time environment; due to the difficulty and cost involved in the development of dynamic systems in a high-integrity embedded control context. A dynamic system, referring to the system configuration, would greatly increase the flexibility of the offered functionality and enable customised software configuration for individual vehicles, adding customer value through plug-and-play capability, and increased quality due to its inherent ability to adjust to changes in hardware and software. We envisage an automotive system containing a variety of components, from a multitude of organizations, not necessarily known at development time. The system dynamically adapts its configuration to suit the run-time system constraints.This paper presents our vision for future automotive control systems that will be regarded in an EU research project, referred to as DySCAS (Dynamically Self-Configuring Automotive Systems). We propose a self-configuring vehicular control system architecture, with capabilities that include automatic discovery and inclusion of new devices, self-optimisation to best-use the processing, storage and communication resources available, self-diagnostics and ultimately self-healing. Such an architecture has benefits extending to reduced development and maintenance costs, improved passenger safety and comfort, and flexible owner customisation.Specifically, this paper addresses the following issues: The state of the art of embedded software systems in vehicles, emphasising the current limitations arising from fixed run-time configurations; and the benefits and challenges of dynamic configuration, giving rise to opportunities for self-healing, self-optimisation, and the automatic inclusion of users’ Consumer Electronic (CE) devices. Our proposal for a dynamically reconfigurable automotive software system platform is outlined and a typical use-case is presented as an example to exemplify the benefits of the envisioned dynamic capabilities.
|
|
| 8. |
- Anthony, Richard, et al.
(författare)
-
A Middleware Approach to Dynamically Configurable Automotive Embedded Systems
- 2008
-
Ingår i: ISVCS 2008. - : EUDL - European Union Digital Library. - 9789639799271
-
Konferensbidrag (refereegranskat)abstract
- This paper presents an advanced dynamically configurable middleware for automotive embedded systems. The layered architecture of the middleware, and the way in which core and optional services provide transparency and flexible platform independent support for portability, is described. The design of the middleware is positioned with respect to the way it overcomes the specific technical, environmental, performance and safety challenges of the automotive domain. The use of policies to achieve flexible run-time configuration is explained with reference to the core policy technology which has been extended and adapted specifically for this project. The component model is described, focussing on how the configuration logic is distributed throughout the middleware and application components, by inserting ‘decision points’ wherever deferred logic or run-time context-sensitive configuration is required. Included in this discussion are the way in which context information is automatically provided to policies to inform context-aware behaviour; the dynamic wrapper mechanism which isolates policies, provides transparency to software developers and silently handles run-time errors arising during dynamic configuration operations.
|
|
| 9. |
- Anthony, Richard, et al.
(författare)
-
Autonomic Middleware for Automotive Embedded Systems
- 2009
-
Ingår i: Autonomic Communication. - Boston, MA : Springer US. - 9780387097527 ; , s. 169-210
-
Bokkapitel (refereegranskat)abstract
- This chapter describes DySCAS: an advanced autonomic platform-independent middleware framework for automotive embedded systems. The concepts and architecture are motivated and described in detail, focusing on the need for, and achievement of, high flexibility and automatic run-time reconfiguration. The design of the middleware is positioned with respect to the way it overcomes the specific technical, environmental, and performance challenges of the automotive domain. Self-management is achieved in terms of automatic configuration for context-aware behavior, resource-use efficiency, and self-healing to handle run-time detected faults. The self-management is governed by the use of policies distributed throughout the middleware components. The simulation techniques that have been used for extensive validation are described and some key results presented. A reference implementation is presented, illustrating the way in which the various concepts and mechanisms can be realized and orchestrated.
|
|
| 10. |
- Anthony, Richard, et al.
(författare)
-
Context-Aware Adaptation in DySCAS
- 2009
-
Ingår i: Electronic Communications of the EASST. - Berlin : European Association of Software Science and Technology (EASST). - 1863-2122. ; 19
-
Tidskriftsartikel (refereegranskat)abstract
- DySCAS is a dynamically self-configuring middleware for automotivecontrol systems. The addition of autonomic, context-aware dynamic configurationto automotive control systems brings a potential for a wide range of benefits in termsof robustness, flexibility, upgrading etc. However, the automotive systems representa particularly challenging domain for the deployment of autonomics concepts, havinga combination of real-time performance constraints, severe resource limitations,safety-critical aspects and cost pressures. For these reasons current systems are staticallyconfigured. This paper describes the dynamic run-time configuration aspectsof DySCAS and focuses on the extent to which context-aware adaptation has beenachieved in DySCAS, and the ways in which the various design and implementationchallenges are met.
|
|
