论文部分内容阅读
为了解决在综合模块化航空电子系统(IMA)系统架构和分区软件设计面临的分区软件失效模式和应对措施问题,深入分析分区软件与IMA平台之间交互过程,明确了分区软件特有的失效模式。分区软件除了一般软件共有的失效模式以外,其所特有的交互过程引入了新的失效模式,包括预期的交互功能未能执行、执行过程错误、执行过程超时和特定错误等。根据ARINC 653软件架构中定义的健康监控功能,提出了通过增加健康管理功能等应对措施来处理分区软件的失效,并通过实例分析说明了该措施可以有效降低分区软件失效带来的安全风险,从而提高分区软件和功能应用的可靠性。这些失效模式分析结果和应对措施也适用于其他高安全性要求环境下分区系统设计。
In order to solve the problem of partition software failure modes and countermeasures faced in the integrated modular avionics (IMA) system architecture and partitioning software design, the interaction process between partitioning software and IMA platform is analyzed in detail, and the failure modes of partitioning software are clarified. Partitioning software in addition to the common software failure mode, its unique interactive process introduces a new failure mode, including the expected interaction failed to perform, the implementation of process errors, the implementation of the process of overtime and specific errors. According to the health monitoring function defined in the ARINC 653 software architecture, this paper proposes to deal with the failure of the partitioning software through measures such as increasing the health management function. The case analysis shows that this measure can effectively reduce the security risks caused by the failure of partitioning software. Improve partition software and functional application reliability. These failure mode analysis results and countermeasures also apply to the design of zoning systems for other high-security requirements.