16
Foundations of Hybrid and Embedded Software Systems UC Berkeley: Chess Vanderbilt University: ISIS University of Memphis: MSI Program Review May 10 th , 2004 Berkeley, CA Alberto Sangiovanni-Vincentelli University of California Berkeley Experimental Research Chess Review, May 10, 2004 2 Overview Experimental research is an essential component of CHESS Feedback on approach Inspiration for new theory – Impact Wide range Industrial cases Automotive (safety-critical distributed systems) System-on-Chip (high-complexity platforms) Internal experimental test benches Wireless Sensor Networks (security, low power) UAVs (complex control, sensor integration) New domains: Soft walls Biological Systems

Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

1

Foundations of Hybrid and Embedded Software Systems

UC Berkeley: ChessVanderbilt University: ISISUniversity of Memphis: MSI

Program ReviewMay 10th, 2004Berkeley, CA

Alberto Sangiovanni-VincentelliUniversity of California Berkeley

Experimental Research

Chess Review, May 10, 2004 2

Overview

• Experimental research is an essential component of CHESS– Feedback on approach– Inspiration for new theory– Impact

• Wide range– Industrial cases

• Automotive (safety-critical distributed systems)• System-on-Chip (high-complexity platforms)

– Internal experimental test benches• Wireless Sensor Networks (security, low power)• UAVs (complex control, sensor integration)

– New domains:• Soft walls• Biological Systems

Page 2: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

2

Chess Review, May 10, 2004 3

Disaggregation:Electronic Systems Design Chain

Design Science

Manufacturing

Implementation

System Design

Platforms

IP

InterfacesFabrics

Chess Review, May 10, 2004 4

Wiring Harness S-Class 1998

Powertrain - Suspension - Displays - Comfort - Diagnosis - BrakingActive & Passive Safety - Telematic - Anti-Theft Systems - ...

Page 3: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

3

Chess Review, May 10, 2004 5

Motivation: Complexity - From 1986 to 1998

• 1986:– Single systems– Wiring Harness:

• weight 37 kg, length 2.4 km, 1200 wires, 2400 wrap connections

– < 6 ECUs

• 1998:– Networked systems– Wiring Harness:

• weight 39 kg, length 2.2 km, 1900 wires, 3800 wrap connections

– 60 ECUs– 113 electric motors

88 90 92 94 96 98 00 02 04

45

40

35

30

25

20

15

10

5

0

Net

wor

ked

ECU

´s

S-Class E-Class

C-ClassE-Class

S-Class C-Class E-Class

8er 7er

7er 5er 3er

7er

A6

W10

B6

D3

Year

CAN - Networking, e.g. Mercedes-Benz, BMW, Audi:

Legend:-- BMW-- Mercedes-Benz-- Audi

Chess Review, May 10, 2004 6

SubSub--SystemSystemRequirements Requirements (e.g. ABS)(e.g. ABS)

SubSub--SystemSystemImplementationImplementation

OEM

Tier1 Supplier

Integrationof new

functions

IntegrationIntegrationof new of new

functions functions

Design Chain Segmentation: Integration effort

Log (effort)Log (effort)

Log (years)Log (years)

~n 3~n 3

~n 2~n 2

~n~n

signalssignals

Interactions trans/recInteractions trans/rec

IntegrationIntegration

More than 50% of the More than 50% of the development effort is in development effort is in validationvalidation

Page 4: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

4

Chess Review, May 10, 2004 7

Complexity, Quality, Time-to-Market: TODAY

MEMORY 256 KB 128 KB 184 KB 8 MB

LINES OF CODE 50.000 30.000 45.000 300.000

CHANGING RATE 3 YEARS 2 YEARS 1 YEAR < 1 YEAR

DEV. EFFORT 40 MAN-YEAR 12 MAN-YEAR 30 MAN-YEAR 200 MAN-YEAR

VALIDATION TIME 5 MONTHS 1 MONTH 2 MONTHS 2 MONTHS

TIME TO MARKET 24 MONTHS 18 MONTHS 12 MONTHS < 12 MONTHS

PWT UNIT BODY GATEWAY TELEMATICUNIT

INSTRUMENTCLUSTER

PRODUCTIVITY 6 LINES/DAY 10 LINES/DAY 6 LINES/DAY 10 LINES/DAY*

RESIDUAL DEFECTRATE @ END OF DEV 3000 PPM 2500 PPM 2000PPM 1000 PPM

* C++ CODE FABIO ROMEO, Magneti-MarelliDesign Automation Conference, Las Vegas, June 20th, 2001

Chess Review, May 10, 2004 8

Design Flow

Physical Prototyping

Requirement SpecificationRequirement Specification

MappingMapping

Synthesis Export

Synthesis Export

Algorithm Design

Algorithm Design

Performance Simulation

Performance Simulation

Algorithms

Architectural IPs

Algorithm Specifications

Behavioral Modeling

Architecture IP AuthoringArchitecture IP Authoring

Distributed Architecture

Analysis

Distributed Architecture

Analysis

Algorithm Analysis

Algorithm Analysis

ECU Scheduling Analysis

ECU Scheduling Analysis

SW platform SW tasks CommunicationProtocol

Configuration

Behavior IPs

System Model

Architectural Modeling

Architectural Modeling

Compile/Link/Load

Compile/Link/Load

Algorithm PerformanceAlgorithm

PerformanceLoadLoad

Virtual Prototyping

Environment-Test Bench Modeling

Environment-Test Bench Modeling

Page 5: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

5

Chess Review, May 10, 2004 9

GM Steer-By-Wire System Architecture Exploration

• 36 architectures explored within different dimensions– Time-triggered and event-

triggered software architectures

– Sensor/actuator interconnections

– Network architectures– Computing architectures

• Quantitative and qualitative evaluation of architectures in terms of performance, reusability, composability, dependability and modifiability derived.

0

500

1000

1500

2000

2500

3000

3500

sbwOuta

1s1m

0

sbwOuta

1s3m

0

sbwOuta

2s1m

0

sbwOuta

2s3m

0

sbwOuta

3s1m

0

sbwOuta

3s3m

0

sbwOuta

4s1m

0

sbwOuta

4s3m

0

sbwOuta

5s1m

0

sbwOuta

5s3m

0

sbwOuta

6s1m

0

sbwOuta

6s3m

0

sbwOuta

7s1m

0

sbwOuta

7s3m

0

sbwOuta

8s1m

0

sbwOuta

8s3m

0

sbwOuta

9s1m

0

sbwOuta

9s3m

0

Safe

Per

iod

Series1

Chess Review, May 10, 2004 10

Single Cylinder Hybrid Model

Page 6: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

6

Chess Review, May 10, 2004 11

Giotto Applications (TAH):Drive-by-Wire Throttle

• BMW Throttle Control• OSEKWorks RTOS• PID Controller• Motorola MPC555 40Mhz

Methodology:from a Matlab/Simulink Modelof the Controller:a) Timing Code (Giotto):generated via S/G Translator.(University of Salzburg)b) Functionality Code (C):via Real-Time workshop.

Chess Review, May 10, 2004 12

Outline

• Industrial cases– Automotive (safety-critical distributed

systems)– System-on-Chip (high-complexity platforms)

(ASV, K. Keutzer)• Internal experimental test benches

– Wireless Sensor Networks (security, low power)

– UAVs (complex control, sensor integration)• New domains:

– Soft walls– Biological Systems

Page 7: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

7

13

Typical Application: Intel PXA800FTypical Application: Intel PXA800FIndustry’s First Industry’s First Complete GSM/GPRS Complete GSM/GPRS Class solutionClass solution•• Intel® XScale ™ CoreIntel® XScale ™ Core

•• Intel® Micro Signal Intel® Micro Signal ArchitectureArchitecture

•• Intel® OnIntel® On--Chip Flash Chip Flash MemoryMemory

•• GSM/GPRS GSM/GPRS Communications Stack, Communications Stack, RTOS and applications code RTOS and applications code for a singlefor a single--chip mobile chip mobile solutionsolution

14

Typical Problem: Next Generation Typical Problem: Next Generation PXA800FPXA800F

Design Improved Design Improved IP Block IP Block Interconnection Interconnection Module for Module for Increased Increased PerformancePerformance

Employ Metropolis QUANTITIES for POWER ESTIMATION of the new design

Page 8: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

8

15

Typical Application: The Intel MXP5800Typical Application: The Intel MXP5800

•• Complete Complete Solution for high Solution for high performance performance Digital Imaging Digital Imaging ApplicationsApplications–– Multifunction Multifunction

Printers Printers –– High End High End

scannersscanners

Chess Review, May 10, 2004 16

Outline

• Industrial cases– Automotive (safety-critical distributed

systems)– System-on-Chip (high-complexity platforms)

• Internal experimental test benches– Wireless Sensor Networks (security, low

power) – UAVs (complex control, sensor integration)

• New domains:– Soft walls– Biological Systems

Page 9: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

9

Chess Review, May 10, 2004 17

Networks of Embedded Systems (SS)

• Pursuit Evasion Game Demo with 100 sensor motes performed in July 2003

• 10^4 mote scaling issues being discussed for oil pipeline surveillance and protection. For conceptual issues see Franceschetti and Bollobas talks to follow

• Drop experiment planned with 40 motes at China Lake in February 2003

• Infrastructure Protection using secure networks of embedded systems is a new direction.

Chess Review, May 10, 2004 18

VisualSense: Modeling and Simulation of Wireless Sensor Nets Based on Ptolemy II

VisualSense extends the Ptolemy II discrete-event domain with communication between actors representing sensor nodes being mediated by a channel, which is another actor.

The example at the left shows a grid of nodes that relay messages from an initiator (center) via a custom channel that models a low (but non-zero) probability of long range links being viable.

Page 10: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

10

Chess Review, May 10, 2004 19

Picoradio Sensor Networks (BWRC, J. Rabaey and ASV)

• Control Environmental parameters (temperature, humidity…)

• Minimize Power consumption• Cheap (<0.5$) and small ( < 1 cm3)• Large numbers of nodes

between 0.05 and 1 nodes/m2

• Limited operation range of network maximum 50-100m

• Low data rates per node 1-10 bits/sec average

• Low mobility (at least 90% of the nodes stationary)

sensoractuator

controller

• Key challenges– Satisfy tight performance and cost constraints

(especially power consumption)– Identify Layers of Abstraction (Protocol Stack)– Develop distributed algorithms (e.g. locationing,

routing) for ubiquitous computing applications– Design Embedded System Platform to implement

Protocol Stack efficiently

Source: BWRC

Chess Review, May 10, 2004 20

Wireless Sensor Networks: Applications

The present

The future

But also ...

Page 11: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

11

Chess Review, May 10, 2004 21

Wireless Sensor Networks

• Use of commercially available platforms – Test validity of algorithms– Verify Networking properties– Implement Network Platform abstraction

• Nodes are getting cheaper and cheaper!– More companies are interested in joint projects

(Johnson Controls, Pirelli, ST, Levoni Prosciutto, COMAU,…)

– Volumes expected to be even higher– Building temperature and humidity control are

the main drivers

Chess Review, May 10, 2004 22

Acoustic Localization Experiments (K.Frampton, Vanderbilt)

Sensor platform:• UCB MICA2:

– 8MHz microcontroller, 4KB RAM, 433MHz radio, TinyOS

• ISIS Acoustic Sensorboard:– 3 acoustic channels, programmable up to

1MHz ADC, Xilinx Spartan FPGA, I2C interface

• Applications– Active acoustic sensor self localization

• 10 m range, 20 cm average accuracy– Acoustic event localization

• TDOA, AOA or TOA based methods• 1 m 3D accuracy, 2 sec latency

– Acoustic signal recorder• Raw signal or zero crossing encoded• 5 Kb short term buffer, 512Kb long term buffer

• Middleware services developed– Time synchronization

• 20 µsec per hop accuracy, 1 msg per node per min– Message routing framework

• Directed flooding, interchangeable flooding policy• Broadcast, convergecast, fat spanning treecast

– Time-slot negotiation (graph coloring)• TDMA for acoustic measurements

– Remote command• Reconfiguration, health monitoring

• Field experiments– ~50-100 nodes, ~4000 m2, 8-hop diameter, cluttered

environment• Collaborators

– Akos Ledeczi and Miklos Maroti, ISIS

Goal: To test the composition, synthesis and verification techniques on real-worldnetworked embedded system applications using a highly resource constrained platform

Acoustic Source

Page 12: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

12

Chess Review, May 10, 2004 23

Outline

• Industrial cases– Automotive (safety-critical distributed

systems)– System-on-Chip (high-complexity platforms)

• Internal experimental test benches– Wireless Sensor Networks (security, low

power)– UAVs (complex control, sensor integration)

• New domains:– Soft walls– Biological Systems

Chess Review, May 10, 2004 24

The Legacy of Success in UAV Research at BErkeley AeRobotics• Pursuit-evasion games 2000- to date• Architecture for multi-level rotorcraft UAVs 1996- to date• Landing autonomously using vision on pitching decks 2001- to date• Multi-target tracking 2001- to date• Formation flying and formation change 2002, 2003• Conflict resolution with model predictive control/ stochastic hybrid

systems, 2003• Airspace Management and personal aviation, 2004?

Page 13: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

13

Chess Review, May 10, 2004 25

Platform Based Design for UAVs

• Device Platform– Isolates details of

sensor/actuators from embedded control programs

– Communicates with each sensor/actuator according to its own data format, context, and timing requirements

– Presents an API to embedded control programs for accessing sensors/actuators

• Language Platform– Provides an environment in

which synchronous control programs can be scheduled and run

– Assumes the use of generic data formats for sensors/actuators made possible by the Device Platform

Sensors: INS, GPSActuators: Servo InterfaceVehicles: Yamaha R-50/R-

Max

Synchronous Embedded

Programming(Giotto)

Control Applications (Matlab)

Application SpaceArchitectural

Space

Virtual Avionics Platform

Device Platform

Language Platform

Chess Review, May 10, 2004 26

Giotto Applications:Unmanned Helicopter Control Systems

RMAX UC Berkeley Helicopter (BEAR):• RTOS: VxWorks• Control: Model Predictive• Navigation: GPS & INS & Vision based• Hardware-in-the-Loop Simulation

Swiss Federal Institute of TechnologyZürich Helicopter (OLGA):

• RTOS: Customized HelyOS• Control: LQR based• Navigation: GPS & INS (EKF)• Processor: StrongARM 200Mhz

Page 14: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

14

Chess Review, May 10, 2004 27

Experimental Test Bed (G. Biswas, Vanderbilt): Fuel Transfer System

• Always have adequate flow to engines

• Avoid imbalances that affect center of gravity of system

• Two primary subsystems, left and right symmetric– Engine feed system– Transfer system

• Engine Feed System– Feed tanks with level control

valves, Boost pump, interconnect valve, pipes

• Transfer System– Fuselage and Wing Tanks,

Redundant pump system, Transfer manifold, pipes

PP

PP

PP

P PLV

LV

IV IV

BP

BP

FM

FM

P Transfer PumpLV Level Control ValveIV Interconnect ValveBP Boost PumpFM Flow Meter

Fuel Quantity Sensor

Left Transfer Tank

Right Transfer Tank

Left Wing Tank

Right Wing Tank

Left FeedTank

Right FeedTank

Left Engine

Right Engine

Typical Fuel System Configuration

FEED

INTER-CONNECT

TRANSFER

Number of sensors: pressure transducers, flow meters, temperature gauges

Chess Review, May 10, 2004 28

Outline

• Industrial cases– Automotive (safety-critical distributed

systems)– System-on-Chip (high-complexity platforms)

• Internal experimental test benches– Wireless Sensor Networks (security, low

power)– UAVs (complex control, sensor integration)

• New domains:– Soft walls– Biological Systems

Page 15: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

15

Chess Review, May 10, 2004 29

Challenges of Systems (SS)(post genomic biology)

• Hybrid Systems Models for Intracellular functioning: stochastic hybrid systems (see talk by Abate)

• Hybrid Systems tools for ensembles of cells: group behavior of complex networked systems

• Biologically complex networks are an exemplar of how networked embedded systems could evolve, self-organize and reprogram themselves (network programming?) See talk by Franceschetti

Chess Review, May 10, 2004 30

Concluding Remarks

• Applications are critical to drive research and to test quality of results

• Safety-critical Real Time and secure system emphasis

• Industrial and Experimental Test Benches• Rigorous methodology for hybrid

distributed systems

Page 16: Experimental Research - Chess...B6 D3 Year CAN - Networking, e.g. Mercedes-Benz, BMW, Audi: Legend:-- BMW-- Mercedes-Benz-- Audi Chess Review, May 10, 2004 6 Sub-System Requirements

16

Chess Review, May 10, 2004 31

Embedded Software: Today

Chess Review, May 10, 2004 32

Embedded Software: Future?