07241 Abstracts Collection -- Tools for the Model-based Development of Certifiable, Dependable Systems

From June 10th to June 15th 2007, the Dagstuhl Seminar 07241 ``Tools for the Model-based Development of Certifiable, Dependable Systems\u27\u27 was held in the International Conference and Research Center (IBFI), Schloss Dagstuhl. During the seminar, several participants presented their current research, and ongoing work and open problems were discussed. Abstracts of the presentations given during the seminar as well as abstracts of seminar results and ideas are put together in this paper. The first section describes the seminar topics and goals in general. Links to extended abstracts or full papers are provided, if available

07241 Summary -- Tools for the Model-based Development of Certifiable, Dependable Systems

This paper summarizes the objectives and structure of a seminar with the same title, held from June 10th to June 15th, 2007 at Schloss Dagstuhl, Germany

Empirical simulation validation, comparing proving ground and simulation data of an SAE level 4 system

The goal of this activity was to evaluate the degree of realism in a detailed simulation for an automated vehicle, and to develop and apply a method for evaluating the validity of the simulation results

Teleoperierte Triebfahrzeugführung als Rückfallebene der Hochautomation / Teleoperation as a fallback solution for highly automated rail traffic

Der Eisenbahnbetrieb der Zukunft soll hochautomatisiert und digital sein, darin herrscht unter Betreibern und Fachleuten weitestgehend Einigkeit. Was diese Begrifflichkeiten in der Praxis tatsächlich implizieren, muss je nach Anwendungsfalls systematisch betrachtet werden. Am Beispiel einer Zugfahrt in einem Szenario ohne Lokomotivführer im Führerstand (Grade of Automation (GoA) 3–4 [1]) lassen sich eine Vielzahl an Fragestellungen identifizieren, die zu berücksichtigen sind, bevor diese Vorstellung im Regelbetrieb auch in nicht geschlossenen Bahnsystemen Realität werden kann. Im Folgenden werden relevante Handlungsfelder für Forschung und Praxis dargestellt. Operators and experts in the rail domain agree that the railway operations of the future should be highly automated and digitalised. What these terms actually imply in practice must be systematically considered depending on the application. Without doubt, a large number of issues need to be considered before this idea can become reality in regular operations in non-closed railway systems. Using the example of a train journey in a scenario without a train driver in the driver’s cab (Grade of Automation (GoA) 3–4 ), a closer analysis has identified the key factors which have to be regarded. Based on this analysis, relevant fields of action for research and practice have been identified and presented in this article

Assuring Standard Conformance of Partial Interfaces

A current standardization effort for track-side equipment in German railways faces the difficulty of having to proceed incrementally. This means that only some of the interfaces of complex entities like interlocking controllers are specified while others remain under the control of the diverse manu-facturers. As these other interfaces are necessary for testing the specified ones for standard conformance, a specific ap-proach has to be devised to be able to achieve this goal. This paper presents the problem in its practical setting and the way it is intended to be solved

Entwicklung von Referenzmodellen von LST-Komponenten am Beispiel der Streckenzentrale

Die Verwendung von Modellen ermöglicht es, bereits in frühen Phasen des Entwurfs, das Verhalten eines Systems sehr genau zu beschreiben. Solche Modelle können als Referenz sowohl für spätere Entwurfsschritte als auch der finalen Implementierung dienen. Im vorliegenden Artikel wird über die Modellierung von Anteilen der ETCS-Streckenzentrale bzw. ihrer Schnittstelle zum Stellwerk berichtet. Aus dem entstandenen Modell kann automatisch ein Code generiert werden, der unter anderem für die Einbindung in eine Bahnsimulation geeignet ist. Die Modellierungsmethode und die Erfahrungen bei der Modellerstellung werden vorgestellt

Verification and Validation in the Project openETCS

The project openETCS (2012-2015) was concerned with developing a reference implementation of software for the European Vital Computer - the onboard unit of the European Train Control System (ETCS). As a maxim, it should as best as possible emply the principles of open proof: That is, formats of desgn artefacts should be open, tools be freely available, and verification and validation exact and reproducible. So that everything could be checked and even improved by thrid parties. The talk delineates the development - the process, methods and artifacts. With more detail, it shows the different V&V activities which have been performed. As a conclusion, it summarizes what has been achieved and what has been left missing, and what could be improved drawing on the experiences from the project

Formalization of scenarios for testing automated driving functions

The contribution discusses the needs of formal specifications of driving scenarios for assessing the risk incurred by introducing automated driving functions. It proposes a set of building blocks which may be used in defining scenarios. And it discusses operators by which these building blocks can be combined into descriptions of traffic evolutions as necessary for a partially automatized estimation of the risk