TRP 2011 -2013A. Tobias

European Space AgencyDirectorate of Technical and Quality Management

CDTI Workshop

October 2010

• This concerns technology domains (TD):• TD2: Space Systems Software• TD8: System Design and Verification

• The proposed activities are included in various service domains (SD)• SD4: Space transportation & re-entry technologies• SD7: Generic technologies

• In the latter case they are listed under:• The relevant technology domain, TD2, TD8• Cross sectorial actions:

• Spacecraft avionics• End-to-end system design process• Deep sub-micron

1. Introduction

The challenges, complexity in systems and SW

• Requirements on research missions increasingly more demanding to make impact on science, farther from Earth, formation, more difficult environment, autonomy, payload planning, operational constraints

• Exploration

• Requirements on service oriented missions also more demanding, better service, performance, availability, security, more affordable better

• User communities not just one federation, architecture optimisation for multiple user needs, security

Proba-3

The challenges, complexity in systems and SW

• A mission not anymore necessarily equivalent one satellite + launch + FOS + PDS, instead large system of systems of heterogeneous assets, sometimes “unusual: for space projects

• A project not anymore always = one sequence ABCDE-F, but series of assets, “reuse”, approach to “missionisation”

• Launchers, re-supply vehicles >> HW – SW Dependability launchers• Technology evolution, DSM, FPGA, enabling NG processors, blurring borders HW SW blurred >> need

for development environments, emulators, techniques and tools, e.g. schedulability

08 12 15 20

ATV-2 ATV-3 ATV-4 ATV-5

10

ARV-1 ARV-2

The challenges: complexity in technology

Very thin GaAs MJ cell AOCS Sensors on chip

Motion control chip

Power distribution

Thermal

Actuators

System-on-Chip

Packaging

High gain antenna Low gain antennaGaN based comms system

The challenges, complexity in systems and SW

• Software is intimately related to system

• Larger system functionality, new complex functions, e.g. for autonomy, for security; distributed functionality, etc shows in software

• Relation System – SW is strong and can only become stronger

• System – software co-engineering

• Functions are migrate from HW to SW and the relation HW – SW becomes blurred

• HW – SW co-design

• Explosion in development and verification effort

• SW needed by others, at system (and lower levels), for early verification activities – “SW squeeze”

• Need for “faster, later and softer” SW

• more industrial practices

In Europe, Exosat 8 K memory 100s KLOCToday, GB memory, MLOC

Recurrent issue in reviews in all projects

Managing complexity, standardisation architectures and interfaces

Onboard Communications H/W(e.g. MIL-STD-1553B, SpaceWire, CAN RS422)

System Services Application BB

MTL services

PUS library/TMTC

OBCPinterpreter Plan/

AutonomyFramework

Mission TL/ Mode mgmt

Central FDIR

AOCS

P/L Manager

Thermal

Power

Execution framework

OBC Hardware

CAN RS422

TM/TC

Sensors(Star Trackers, Sun sensors, Gyros,

Earth sensors, magnetometers)

Actuators(Reaction wheels, magneto torquers,

thrusters, etc)

OBT Mgmt

SSMM Mgmt

EquipmentMgmtContext

Mgmt

MIL-1553 SpW

CPU/NGmP

EEPROM BootPROM

OBTimer

SGM

HWwatchdog

BSPHDSW

Middleware services

Software bus

RTOS

SecurityUnit

Solid StateMass

Memory

File Mgt Compress

Encrypt

Payloads &Instruments

SSMM

RTU/Intelligent IO

Payload Control Computer

SOIS Layers

Legacy devices

SOIS

Application Suppport Layer

SubnetworkLayer

Standardized devices

Standardized devices

SOIS Layers

ADCs /DACs

SOIS Layers

Sensorand

actuators

RAM

DSP

Digital Sensorbus

Payload Data Processing

DSP

Libraries:Math, Security,

P/L

Standard avionics, HW, SW, architecture and interfaces being established and building blocks developed for reuse

Managung complexity: improving processes Systems – SW - HW

SW/HW ModelAnalysisModels

System Model

RE, Analysis,

Design,

Verification

Integration , Validation

SW/HWDevelopment

0/A C

Mapping

B PhasesD

System Model

Activities

Models /Languages

Sys/SWCo-eng

PNs, Simulink

AADL, Simulink, SDL, SCADE, UML/MARTE, HRT-UML/RCM, SoC

languages

AADL, Simulink, SDL, SCADE, UML/MARTE, HRT-UML/RCM, SoC

languagesCo-eng Model

SysML, SoS, AFs

Model-Based,

Avionics, requirements roadmap 2010

0

2000

4000

6000

8000

10000

12000

14000

2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016

AIM P: Technology Demonstrators / P ilo tApplications AIM O: Avionics Test M eans

AIM N: Hardware Software Co-Design

AIM M : System Software Co-engineering

AIM L: M odel Based Systems Engineering

AIM K: Security

AIM J: Adaptive and Reconfigurable HW andsystemsAIM I:Distributed Command & Contro l

AIM H: FDIR

AIM G: Autonomous Functions

AIM G: Autonomous Functions

AIM F: M iniaturisation

AIM E: COTS Embedded Systems

AIM D: Integrated M odular Avionics

AIM C: Interface Standardisation andCommunication Protoco lsAIM B: Building Blocks

AIM A: Reference architectures

Onboard SW, requirements roadmap 2010

Reference architectures in a domain of reuseT702-309SW IMA-SP System design toolkit

T702-306SW Avionics Architecture Modelling Language

System software co-engineeringT702-301SW FDIR Development and V&V Process

T702-307SW Catalogue of system and software propertiesT402-301SW Hardware-Software Dependability for Launchers

Developments of reusable elements T402-302SW Missionisation process for multi-vehicle missions

T702-310SW Security building blocks for flight software applications

Model driven development T702-305SW Model Based Software Development Lifecycle

Hardware software co-design T702-303SW System-Hardware-Software co-engineering

T702-302SW Development Environment for Future Leon Multi-coreT702-304SW Emulators of future NGMP multicore processors

T702-308SW Schedulability analysis techniques and tools

Formal verification of properties

Organisation of the knowledge of requirements (ontologies), generic specifications

System / avionics Avionics / μ−electronics

2011 2012 2013 2014 2015 Risk, schedule reduction

Roadmap and activities in TRP

SD4:

• SD4

– T402-301SW Hardware-Software Dependability for Launchers, 300 k€

– T402-302SW Missionisation process for multi-vehicle missions, 300 k€

• SD7

– T702-305SW Model Based Software Development Lifecycle, 400 k€

– T708-301SW Automated testing using ECSS-E-70-32 Test and Operations procedure language, 500 k€

SD7: Avionics

• T701-303ED The use of electronic data sheets and device virtualisation for onboard devices 200 k€

• T701-304ED Deploying Plug and Play Avionics 250 k€• T701-307ED Network management and FDIR for SpaceWire networks 250 k€• T701-308ED SOIS compliant File and packet store protocol implementation 250 k€• T701-312ED Packet Utilisation Standard (PUS) library using SOIS services 300 k€• T701-314ED Standardization of Digital Interfaces for Sensors (Temperature, Pressure, Position,

Velocity, Acceleration) 200 k€• T701-315ED FDIR Validation Test-Bed 350 k€• T705-304EC AOCS SpW test bench 800 k€• T705-305EC RS-422 protocol standard for AOCS equipments 200 k€• T709-301GI SM&C Services implementation for a PUS/SOIS based spacecraft 250 k€• T709-306GI File based Operations 500 k€• T710-301GF Autonomous S/C manoeuvres 300 k€

SD7: Avionics

• T702-301SW FDIR Development and V&V Process 400 k€

• T702-303SW System-Hardware-Software co-engineering 200 k€

• T702-306SW Avionics Architecture Modelling Language 200 k€

• T702-307SW Catalogue of system and software properties 250 k€

• T702-309SW IMA-SP System design toolkit 400 k€

• T702-310SW Security building blocks for flight software applications 200 k€

SD7: 7.30 Deep submicron

• T701-301ED High density European Rad-Hard SRAM-based FPGA: Abound Logic-based first validated prototypes 2000 k€

• T701-302ED Next Generation General Purpose Microprocessor (NGMP) Engineering Models 1000 k€

• T701-313ED Deep Sub Micron 65nm rad hard library (Phase 2) 1500 k€

• T702-302SW Development Environment for Future Leon Multi-core. 300 k€

• T702-304SW Emulators of future NGMP multicore processors 300 k€

• T702-308SW Schedulability analysis techniques and tools for cached and multicore processors 250 k€

E2E

SD7: E2E

Mission Need

Phase A

Phase B

Phase C

Phase D

Phase EFeasibility Study

Conceptual Design

System / PreliminaryDesign

Detailed Design

Manufacturing

Assembly

Integration

Verification

Deployment

Validation

Top-DownDesign

Bottom-UpProduction, V&V

(Development &Qualification)

Early

V&V

Early

V&V

Model-based Validation & Verification

Design feedback and improvement

OperationsAIVAnomaliesAnalysesSimulations

–T708-301SW Automated testing using ECSS-E-70-32 Test and Operations procedure language, 500 k€

T708-307SW System Verification throughout the life-cycle

T708-310SY Integration of early system modelling into the concurrent design process

T708-305SW Formal approach to Space System Data Modelling

System modelEng data base

T708-306SW System Functional Simulations in the Concurrent Design Process

SD7:E2E

• T708-302QQ System Level Integrated Failure Analysis 150 k€

• T708-304GD Improvement of functional validation by analysis of operational problems 150 k€

• T708-308GI Standardised M&C interfaces for ground equipment 250 k€

• T708-311EE Interoperability for Space Environment Analysis Tools 200 k€

• T708-312MS Efficient Multi-Disciplinary product data exchange for Space System design and development 150 k€

• T708-316 IR Analysis of S/C qualification sequence & environmental testing 500 k€

SD7:E2E

• T708-305SW Formal approach to Space System Data Modelling 350 k€

• T708-306SW System Functional Simulations in the Concurrent Design Process 250 k€

• T708-307SW System Verification throughout the life-cycle 300 k€

• T708-310SY Integration of early system modelling into the concurrent design process 250 k€

Space - ground

S/C design phase EM/FM Unit Manuf. PFM S/C integration System Validation Operations

OBSW +ACNS

SVF System simulator

Preliminary Mission Control Center Mission Control Center

Unit tests

OBSW tests

Unit&S/Ctests

OBSW testsSystem

validation test

Operationprocedures validation

Operationprocedures validation

Harmonization of core ground SWEGSE and FOSIntegration development, AIV and operations

E2E design, development, AIV, OPS

Ground interfaces & standards

Ground System Software Technology Harmonisation interfaces:MCS-FDS, MCS-MPS, MPS-FDS, SIM-EGSE

ECSS Standards: M+C data(E70-31), Procedures(E70-32), Packet Utilisation E70-41Engineering DB (E10-23)Simulation Model Portability (E-TM-40-07)Modelling and Simulation for System Engineering (E-TM-10-21)

CCSDS standards: TM/TC, SLE, M+C, XTCE

Building Blocks: Common ground kernel for M+C, database, Automation tools, Models, SVF

Flight Dynamics System

Orbit Det. & Control

AOCS Monitoring

Command Generation

Test & Validation

Mission Planning

OBC /Processor Module

Basic Software

OBC Hardware

N/W Init & Config

CPU RM UART

SpWTimeCodeRegister

EDAC Watchdog

SOIS

TimerSFGM

SSMM

Devices(Transducers,

Payloads & Instruments)

TM/TC

IO Drivers

SecurityPlug-in

Applications

e.g. AOCS e.g. Battery management

e.g. Thermal control

Spacecraft manager

FDIR

RTOS

EGSE / Mission Control System

TelecommandSystem

Telemetry System

Data Archive

Test/Ops Automation M & C

Network Interface System

TrackingTM/TC

SCOEs SimulatorsDatabaseGround Support

SDE/SVF

SPACE-GROUND

INTERFACES

Space-Ground interfaces & standardsCCSDS TM/TC/

Ranging/

Frequency

ECSS Packet Utilisation

Space interfaces & standardsSAVOIR (Space Avionics Open Interface Architecture)

SOIS (Spacecraft Onboard Interface Services)

Bus h/w and protocols

ECSS E40, Q80 for S/W

Building Blocks H/W, Operating System

Ground Segment + EGSE Space Segment

Onboard Communications S/W(e.g. MIL-STD-1553B, SpaceWire, RS232/422, Pulsed, etc.)

Data Handling / SW(PUS compliant)

Towards common core ground SW