Faster, Later, Softer:
COrDeT – an on-board software
reference architecture
Andreas Jung and Jean-Loup Terraillon
European Space Agency
ESTEC, Software Systems Division
2010 Workshop on Spacecraft Flight Software (FSW-10)
8 Dec 2010, Pasadena
ESA UNCLASSIFIED – Releasable to the Public
Spacecraft on-board software landscape –
Observations and concerns
Software size of the central computer's ESA missions is increasing…
–
–
Science satellites
–
Exosat (launch 1983), RCA1802 – 8K memory, ASM
–
SOHO (launch 1995), 2xMDC281 – 2x64KB , Ada83
–
Rosetta (launch 2004), 2xMA3-1750 – 2x1MB, 170KLoc, Ada83
Launcher
–
–
–
Ariane5, 68020, ~200KLoc, Ada
Earth Observation
–
Cryosat-2 (launch 2009), ERC32 – 4MB, ~50KLoc Ada95
–
GOCE (launch 2009), ERC32 – 4MB, ~100KLoc, Ada95
–
Aeolus, ERC32 – 4MB, ~160KLoc
ATV (launched 2008), ERC32--8MB, 1MLoc (650KLoc code), Ada95
…and their complexity is increasing
(see also NASA Study on Flight Software Complexity, 2009).
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 2
ESA UNCLASSIFIED – Releasable to the Public
Spacecraft on-board software landscape –
Observations and concerns
The schedule for the software development is getting tighter:
schedule for SW development
SW-SRR
SW
requirements
definition
SWRR / SW-PDR
SW V0 for
AIT
SW release
time
Nevertheless:
Spacecraft platforms have similar functionalities. There are families
of spacecrafts (for science, earth observation, …).
The platform software is even more similar… but currently, there
are few opportunities to spend effort on advanced functions.
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 3
ESA UNCLASSIFIED – Releasable to the Public
Software Engineering needs:
Faster, Later, Softer
FASTER (increase productivity)
–
Shorter software development time
–
Reduce Verification and Validation effort
–
Reduce recurring developments (don’t redevelop recurring software: about 50% of platform SW)
–
Increase cost-efficiency (more requirements same cost)
–
Quality of the product (at least same quality)
LATER (increase reactivity)
–
Mitigate the impact of late requirement definition or change
–
Optimize flight maintenance
–
Simplification and harmonization of FDIR
SOFTER (increase flexibility)
–
Support for various system integration strategies (customer-supplier)
–
Industrial policy support
–
Role of software suppliers (multi-vendor policy)
–
Dissemination activities (concept usable by system engineers)
–
Future needs
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 4
ESA UNCLASSIFIED – Releasable to the Public
Why a reference architecture replies
to these needs ?
FASTER?  automation of life cycle, model driven engineering
yes, but not enough…
We need also pre-development of software for faster configuration, later
configuration, softer developments (6 years, 6 months, 6 days…), e.g.
missionisation of launchers
yes, but…
Predevelopment of what?  Of building blocks
Are they Lego?  No, they are flexible (parameterization)
Compose Building Blocks?  Therefore need interface standardization
Where are the interfaces?  Therefore a reference architecture
Reduce validation?  Composability and compositionability,
Separation of concerns, correct by construction, component model
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 5
ESA UNCLASSIFIED – Releasable to the Public
SAVOIR – the umbrella of avionics
reference architecture related activities
SAVOIR
Space Avionics Open Interface Architecture
SAVOIR
Advisory group:
- Space Agencies
(ESA and national)
- Prime industry
- Supplier industry
SW:
SAVOIR-FAIRE
working group
SW R&D activities
Other SW / HW
groups and
activities
…
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 6
ESA UNCLASSIFIED – Releasable to the Public
Spacecraft on-board software landscape –
ESA R&D studies and activities
ESA R&D studies and activities on software reference architectures:
–
COrDeT-1/2 – Component Oriented Development Techniques
–
DOMENG – Domain Engineering
–
SAVOIR-FAIRE - SW reference architecture working group
–
Complementary studies presented
in the two following ESA presentations: –
Time and space partitioning
On-board control procedures
Results:
–
Result from COrDeT activity: Spacecraft platforms and software have
similar functionalities, even across the different families (science,
earth observation, …).
–
Therefore: Opportunities to spend more effort on (advanced) functions
rather than “re-inventing the wheel” for the common elements  REUSE
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 7
ESA UNCLASSIFIED – Releasable to the Public
How to arrive at and What is a
reference architecture?
Reference
architecture
Ground
Functional chains
&
Variability factors
=
mapping of
Functional chain
Component
A
Standardized
devices
TM/TC
Security
Unit
Intelligent
devices
Solid State
Mass
Memory
File/
Compress/
Encrypt
Sensor
and
actuators
OBC
SOIS
Layers
RTU/
Intelligent IO
SOIS
Layers
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
SOIS
Layers
Space
Linux
Container B
Execution platform
Payload
Computer
Physical architecture
Building blocks & Interfaces
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 8
ESA UNCLASSIFIED – Releasable to the Public
Component
B
Payloads &
Instruments
ADCs / DACs
Digital
Sensorbus
Connector AB
Container A
Legacy
devices
SSMM
Software
Architectural
concepts
Components,
Containers, Connectors
Sensors
Actuators
Payload
OBSW
on
to
Software architectural concept
Component Based Software Engineering
“Decorated
interface”
Component
model
Computational
model
Components,
Containers, Connectors
Component
A
Container A
Connector AB
Component
B
Properties
Verification
Container B
Execution platform
services for container,
services for connector,
services for component
Physical architecture
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 9
ESA UNCLASSIFIED – Releasable to the Public
The SAVOIR avionics reference
architecture (HW + SW)
Application BB (mission dependent)
To be confirmed
if ABB:
ABB supported by
abstract
components :
Central FDIR
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
SSMM Mgmt
Thermal
System mode
mgmt
Power
OBT Mgmt
P/L Manager
Software bus
Execution platform
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
TM/TC
Security
Unit
SSMM
Solid State
Mass
Memory
File/
Compress/
Encrypt
SOIS
Layers
Libraries:
mathematical,
etc.
Connector
services
Component
services
Context
Mgmt
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
On-board
time
=SOIS TAS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
OBC Hardware
Container
services
RTOS
Standardized
devices
Legacy
devices
Intelligent
devices
BSP
Sensor
and
actuators
CPU/
NGmP
OBTimer
CAN
MIL-1553
RAM
DSP
SGM
RS422
SpW
EEPROM
Boot
PROM
HW
watchdog
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
RTU/
Intelligent IO
SOIS
Layers
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 10
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
The SAVOIR avionics reference
architecture (HW + SW)
Application BB (mission dependent)
To be confirmed
if ABB:
Plan/ Autonomy
AOCS
Framework
Plan/ Autonomy
Framework
ABB supportedABB
bysupported by Satellite
SatelliteConf
Conf
abstract
and Eqpt Mgmt
abstract
and Eqpt
Mgmt
components :
components :
Central FDIR
Central FDIR
AOCS
Application BB (mission dependent)
To be confirmed
if ABB:
Thermal
Thermal
System mode
mgmt
Power
System mode
mgmt
SSMM Mgmt
OBT Mgmt
SSMM Mgmt
OBT Mgmt
Software bus
Power
P/L Manager
P/L Manager
Execution platform
Abstract component
services
PUS specific
PUS and
MTL
services
OBCP
interpreter
Execution platform
PUS specific
TM/TC
Security
Unit
PUS and
MTL
services
Solid
State
SSMM
Mass
Memory
File/
Compress/
Encrypt
SOIS
Layers
Libraries:
mathematical,
etc.
PUS
monitoring
Abstract component
Avionics
services Equipment
virtual
devices
=SOIS DVS
OBCP
interpreter
Libraries:
mathematical,
etc.
Connector
Component
services
Context
Mgmt
On-board
time
=SOIS TAS
Component
services
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
Context
Mgmt
PUS
Avionics
CAN
MIL-1553
Equipment
virtual
RS422
SpW
devices
=SOIS DVS
RTOS
Connector
services
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
OBCmonitoring
Hardware
Container
services
Software busservices
On-board
CPU/
time
NGmP
=SOIS TAS
BSP
Communication
services addressing
physical distribution
across
nodes
OBTimer
= SOIS MTS
RAM
DSP
SGM
EEPROM
Boot
PROM
HW
watchdog
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
Standardized
devices
Legacy
devices
Container
services
Intelligent
devices
Sensor
and
actuators
RTOS
RTU/
Intelligent IO
SOIS
Layers
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
BSP
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 11
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
The Function Chain
Ground
Functional chain
Sensors
Actuators
Payload
OBSW
Standardized
devices
TM/TC
Security
Unit
Legacy
devices
SSMM
Intelligent
devices
Solid State
Mass
Memory
File/
Compress/
Encrypt
Sensor
and
actuators
OBC
SOIS
Layers
RTU/
Intelligent IO
SOIS
Layers
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 12
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
Mapping Functional Chain onto
SW architectural concept
Ground
Functional chain
Ground
AOCS
Sensors
Actuators
Payload
Startracker
Components,
Containers, Connectors
Component
A
Connector AB
Container A
Component
B
Container B
Standardized
devices
Legacy
devices
Execution platform
TM/TC
Security
Unit
SSMM
Intelligent
devices
Solid State
Mass
Memory
File/
Compress/
Encrypt
Sensor
and
actuators
OBC
SOIS
Layers
RTU/
Intelligent IO
SOIS
Layers
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 13
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
The SAVOIR (Software) reference
architecture
Application BB (mission dependent)
To be confirmed
if ABB:
ABB supported by
abstract
components :
Central FDIR
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
SSMM Mgmt
Thermal
System mode
mgmt
Power
OBT Mgmt
P/L Manager
Software bus
Execution platform
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
TM/TC
Security
Unit
SSMM
Solid State
Mass
Memory
File/
Compress/
Encrypt
SOIS
Layers
Libraries:
mathematical,
etc.
Connector
services
Component
services
Context
Mgmt
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
On-board
time
=SOIS TAS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
OBC Hardware
Container
services
RTOS
Standardized
devices
Legacy
devices
Intelligent
devices
BSP
Sensor
and
actuators
CPU/
NGmP
OBTimer
CAN
MIL-1553
RAM
DSP
SGM
RS422
SpW
EEPROM
Boot
PROM
HW
watchdog
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
RTU/
Intelligent IO
SOIS
Layers
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 14
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
Mapping of functional chain on to the
SW architecture
Ground
AOCS
Startracker
Intelligent
devices
Payloads &
Instruments
Application BB (mission dependent)
To be confirmed
if ABB:
ABB supported by
abstract
components :
Central FDIR
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
SSMM Mgmt
Thermal
System mode
mgmt
Power
OBT Mgmt
P/L Manager
Software bus
Execution platform
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
TM/TC
Security
Unit
SSMM
Solid State
Mass
Memory
File/
Compress/
Encrypt
SOIS
Layers
Libraries:
mathematical,
etc.
Connector
services
Component
services
Context
Mgmt
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
On-board
time
=SOIS TAS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
OBC Hardware
Container
services
RTOS
Standardized
devices
Legacy
devices
BSP
Sensor
and
actuators
CPU/
NGmP
OBTimer
CAN
MIL-1553
RAM
DSP
SGM
RS422
SpW
EEPROM
Boot
PROM
HW
watchdog
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
RTU/
Intelligent IO
SOIS
Layers
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 15
ESA UNCLASSIFIED – Releasable to the Public
Space
Linux
Payload
Computer
How is a Block reusable?
1. Architecturally reusable
 ensured by interface standards and component model
(composability, compositionality)
2. Functional reusable
 Domain engineering
 Variability factors
(characterize the
domain of reuse)
Play
Mission
System operational concept
Avionics
Monitoring & Control I/F
Network
Processor module
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 16
ESA UNCLASSIFIED – Releasable to the Public
Plug
Mapping variability factors
Legend:
Mission
Application BB (mission dependent)
To be confirmed
if ABB:
ABB supported by
abstract
components :
Central FDIR
System operational concept
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
SSMM Mgmt
Avionics
Thermal
System mode
mgmt
Power
OBT Mgmt
P/L Manager
Monitoring & Control I/F
Network
Software bus
Processor module
Execution platform
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
TM/TC
Security
Unit
SSMM
Solid State
Mass
Memory
File/
Compress/
Encrypt
SOIS
Layers
Libraries:
mathematical,
etc.
Connector
services
Component
services
Context
Mgmt
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
On-board
time
=SOIS TAS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
OBC Hardware
Container
services
RTOS
Standardized
devices
Legacy
devices
Intelligent
devices
BSP
Sensor
and
actuators
CPU/
NGmP
OBTimer
CAN
MIL-1553
RAM
DSP
SGM
RS422
SpW
EEPROM
Boot
PROM
HW
watchdog
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
RTU/
Intelligent IO
SOIS
Layers
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 17
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
Mapping variability factors
Legend:
Mission
Application BB (mission dependent)
To be confirmed
if ABB:
ABB supported by
abstract
components :
Central FDIR
System operational concept
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
SSMM Mgmt
Avionics
Thermal
System mode
mgmt
Power
OBT Mgmt
P/L Manager
Monitoring & Control I/F
Network
Software bus
Processor module
Execution framework
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
TM/TC
Security
Unit
SSMM
Solid State
Mass
Memory
File/
Compress/
Encrypt
SOIS
Layers
Libraries:
mathematical,
etc.
Connector
services
Component
services
Context
Mgmt
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
On-board
time
=SOIS TAS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
OBC Hardware
Container
services
RTOS
Standardized
devices
Legacy
devices
Intelligent
devices
BSP
Sensor
and
actuators
CPU/
NGmP
OBTimer
CAN
RS422
RAM
DSP
SGM
MIL-1553
SpW
EEPROM
Boot
PROM
HW
watchdog
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
RTU/
Intelligent IO
SOIS
Layers
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 18
ESA UNCLASSIFIED – Releasable to the Public
Payloads &
Instruments
Payload
Computer
From Blocks to Building blocks
Based on the SAVOIR definition, a building block:
1. Has a clear, open, well-defined, specified, documented function and interfaces
2. Is worth developing, i.e. utilization is envisaged at least for the bulk of the ESA
missions
3. Meets defined performance, operation and other requirements
4. Is self-contained so as to be compatible with utilization at higher integration
levels, e.g. board, equipment, subsystem
5. Composability and Compositionality of its properties shall be guaranteed
6. Has a TRL and quality level which can be assessed
7. Is applicable in an envelope of well defined physical and software environment
8. Results from a process that can be repeated with guarantees
9. Is designed for reuse by different users, in different projects (it may be
configurable depending on the variability factors)
10. Can be made available off-the-shelf, under defined conditions
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 19
ESA UNCLASSIFIED – Releasable to the Public
Complementary activities:
1st: Time and space partitioning
Execution platform
Integration of TSP in the software
reference architecture
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
Libraries:
mathematical,
etc.
Application BB (mission dependent)
To be confirmed
if ABB:
ABB supported by
abstract
components :
Central FDIR
Application BB (mission dependent)
To be confirmed
if ABB:
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
SSMM Mgmt
Thermal
System mode
mgmt
Power
OBT Mgmt
P/L Manager
ABB supported by
abstract
components :
Central FDIR
SSMM Mgmt
Software bus
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
Libraries:
mathematical,
etc.
TM/TC
Security
Unit
Power
OBT Mgmt
P/L Manager
ABB supported by
abstract
components :
Central FDIR
Software bus
Execution platform
PUS specific
Thermal
System mode
mgmt
Context
Mgmt
On-board
time
=SOIS TAS
Connector
services
Container
services
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
PUS specific
PUS and
MTL
services
PUS
monitoring
RTOS
TSP services, e.g. interpart com,
health monitoring
and RTOS virtualization
OBCP
interpreter
Avionics
Equipment
virtual
devices
=SOIS DVS
Libraries:
mathematical,
etc.
Component
services
Context
Mgmt
On-board
time
=SOIS TAS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
SSMM Mgmt
Power
OBT Mgmt
P/L Manager
Connector
services
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
Container
services
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
interpreter
PUS
monitoring
RTOS
Avionics
Equipment
virtual
devices
=SOIS DVS
TSP services, e.g. interpart com,
health monitoring
and RTOS virtualization
Libraries:
mathematical,
etc.
Component
services
Context
Mgmt
On-board
time
=SOIS TAS
Connector
services
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
Container
services
File/
Compress/
Encrypt
SOIS
Layers
Standardized
devices
Legacy
devices
TSP services, e.g. interpart com,
health monitoring
and RTOS virtualization
Intelligent
devices
Sensor
and
actuators
CPU/
NGmP
OBTimer
CAN
MIL-1553
RAM
DSP
SGM
RS422
SpW
EEPROM
Boot
PROM
HW
watchdog
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
RTU/
Intelligent IO
SOIS
Layers
Payloads &
Instruments
Space
Linux
ADCs / DACs
Digital
Sensorbus
SOIS
Layers
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 20
ESA UNCLASSIFIED – Releasable to the Public
TSP services, e.g. interpart com,
health monitoring
and RTOS virtualization
RTOS
TSP kernel
OBC Hardware
RTOS
Thermal
System mode
mgmt
SSMM
Solid State
Mass
Memory
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
Execution platform
Abstract component
services
On-board
time
=SOIS TAS
Software bus
Execution platform
Component
services
Context
Mgmt
Container
services
Application BB (mission dependent)
To be confirmed
if ABB:
AOCS
Plan/ Autonomy
Framework
Satellite Conf
and Eqpt Mgmt
Connector
services
Component
services
Payload
Computer
Complementary activities:
2nd: On-board control procedures
On-board control procedures (OBCP)
interpreter is part is of the execution
platform.
Execution platform
PUS specific
PUS and
MTL
services
Abstract component
services
OBCP
OBCP
interpreter
interpreter
PUS
monitoring
Avionics
Equipment
virtual
devices
=SOIS DVS
Libraries:
mathematical,
etc.
Component
services
Context
Mgmt
On-board
time
=SOIS TAS
Connector
services
Communication
services addressing
physical distribution
across nodes
= SOIS MTS
SOIS Subnetwork layer (1553, CAN, SpW)
(including HDSW)
Container
services
RTOS
TSP services, e.g. interpart com,
health monitoring
and RTOS virtualization
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 21
ESA UNCLASSIFIED – Releasable to the Public
Open points for the
software reference architecture
– Hierarchical components
de
leg
ati
on
Component
Component A.1
A.1
– Architectural decisions:
–
Fault Detection Isolation Recovery
–
Monitoring, On Board Control Procedure
interpreter: common mechanisms
in several components
Component
Component A.2
A.2
Component A
– A new validation process also reusable; validate functional
and non functional separately; reuse tests suites
– Methods and tools:
–
UML? HRT-UML? CHESS? Marte? TopCased/Opees? Spacify?
LightWeightCCM? AADL? Metamodel editor generator?
Domain Specific Language? Profile or metamodel? …
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 22
ESA UNCLASSIFIED – Releasable to the Public
su
sub
tion
mp
Summary
Reference
architecture
=
mapping of
Functional chains
&
Variability factors
Ground
Functional chain
Software
Architectural
concepts
Components,
Containers, Connectors
Sensors
Actuators
Payload
OBSW
on
to
Component
A
Standardized
devices
TM/TC
Security
Unit
SSMM
Intelligent
devices
Solid State
Mass
Memory
File/
Compress/
Encrypt
Container A
Legacy
devices
Sensor
and
actuators
OBC
SOIS
Layers
RTU/
Intelligent IO
SOIS
Layers
SOIS
Layers
Space
Linux
Execution platform
Payload
Computer
Onboard Communications H/W
(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)
Physical architecture
COrDeT – OBSW reference architecture:
– Software architectural concept
 Component based software engineering
– Functional chains & variability factors
 (building) block & interfaces
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 23
ESA UNCLASSIFIED – Releasable to the Public
Component
B
Container B
Payloads &
Instruments
ADCs / DACs
Digital
Sensorbus
Connector AB
THANK YOU
Andreas Jung and Jean-Loup Terraillon
European Space Agency
[email protected]
[email protected]
COrDeT - OBSW ref arch | Andreas JUNG and Jean-Loup TERRAILLON | 2010 Workshop on FSW | 8.Dec 2010 | TEC-SW | Slide 24
ESA UNCLASSIFIED – Releasable to the Public