Cyber-physical systems design: transition from functional to architectural models

Normally, the design process of Cyber-Physical Systems (CPSs) starts with the creation of functional models that are used for simulation purposes. However, most of the time such models are not directly reused for the design of the architecture of the target CPS. As a consequence, more efforts than strictly necessary are spent during the CPS architecture design phase. This paper presents an approach called Assisted Transformation of Models (AST), which aims at transforming functional (simulation) models designed in the Simulink environment into architectural models represented in the Architecture Analysis and Design Language. Using AST, designers can perform a smooth transition between these two design phases, with an additional advantage of assuring the coupling between functional and architectural models. The use and benefits of AST are exemplified in the paper in a study devoted to for the design of a typical CPS: an Unmanned Aerial Vehicle.CAPE

The effect of femoral component rotation on the five-year outcome of cemented mobile bearing total knee arthroplasty.

PURPOSE: Performing total knee replacement, accurate alignment and neutral rotation of the femoral component are widely believed to be crucial for the ultimate success. Contrary to absolute bone referenced alignment, using a ligament balancing technique does not automatically rotate the femoral component parallel to the transepicondylar axis. In this context we established the hypothesis that rotational alignment of the femoral component parallel to the transepicondylar axis (0° ± 3°) results in better outcome than alignment outside of this range. METHODS: We analysed 204 primary cemented mobile bearing total knee replacements five years postoperatively. Femoral component rotation was measured on axial radiographs using the condylar twist angle (CTA). Knee society score, range of motion as well as subjective rating documented outcome. RESULTS: In 96 knees the femoral component rotation was within the range 0 ± 3° (neutral rotation group), and in 108 knees the five-year postoperative rotational alignment of the femoral component was outside of this range (outlier group). Postoperative CTA showed a mean of 2.8° (±3.4°) internal rotation (IR) with a range between 6° external rotation (ER) and 15° IR (CI 95). No difference with regard to subjective and objective outcome could be detected. CONCLUSION: The present work shows that there is a large given natural variability in optimal rotational orientation, in this study between 6° ER and 15° IR, with numerous co-factors determining correct positioning of the femoral component. Further studies substantiating pre- and postoperative determinants are required to complete the understanding of resulting biomechanics in primary TKA

A comparative study of two formal semantics of the SIGNAL language

International audienceSIGNAL is a part of the synchronous languages family, which are broadly used in the design of safety-critical real-time systems such as avionics, space systems, and nuclear power plants. There exist several semantics for SIGNAL, such as denotational semantics based on traces (called trace semantics), denotational semantics based on tags (called tagged model semantics), operational semantics presented by structural style through an inductive definition of the set of possible transitions, operational semantics defined by synchronous transition systems (STS), etc. However, there is little research about the equivalence between these semantics.In this work, we would like to prove the equivalence between the trace semantics and the tagged model semantics, to get a determined and precise semantics of the SIGNAL language. These two semantics have several different definitions respectively, we select appropriate ones and mechanize them in the Coq platform, the Coq expressions of the abstract syntax of SIGNAL and the two semantics domains, i.e., the trace model and the tagged model, are also given. The distance between these two semantics discourages a direct proof of equivalence. Instead, we transformthem to an intermediate model, which mixes the features of both the trace semantics and the tagged model semantics. Finally, we get a determined and precise semantics of SIGNAL

Time in SCCharts

Synchronous languages, such as the recently proposed SCCharts language, have been designed for the rigorous specification of real-time systems. Their sound semantics, which builds on an abstraction from physical execution time, make these languages appealing, in particular for safety-critical systems. However, they traditionally lack built-in support for physical time. This makes it rather cumbersome to express things like time-outs or periodic executions within the language. We here propose several mechanisms to reconcile the synchronous paradigm with physical time. Specifically, we propose extensions to the SCCharts language to express clocks and execution periods within the model. We draw on several sources, in particular timed automata, the Clock Constraint Specification Language, and the recently proposed concept of dynamic ticks. We illustrate how these extensions can be mapped to the SCChart language core, with minimal requirements on the run-time system, and we argue that the same concepts could be applied to other synchronous languages such as Esterel, Lustre or SCADE

Towards a verified compiler prototype for the synchronous language SIGNAL

International audienceSIGNAL belongs to the synchronous languages family which are widely used in the design of safety-critical real-time systems such as avionics, space systems, and nuclear power plants. This paper reports a compiler prototype for SIGNAL. Compared with the existing SIGNAL compiler, we propose a new intermediate representation (named S-CGA, a variant of clocked guarded actions), to integrate more synchronous programs into our compiler prototype in the future. The front-end of the compiler, i.e., the translation from SIGNAL to S-CGA, is presented. As well, the proof of semantics preservation is mechanized in the theorem prover Coq. Moreover, we present the back-end of the compiler, including sequential code generation and multithreaded code generation with time-predictable properties. With the rising importance of multi-core processors in safety-critical embedded systems or cyber-physical systems (CPS), there is a growing need for model-driven generation of multithreaded code and thus mapping on multi-core. We propose a time-predictable multi-core architecture model in architecture analysis and design language (AADL), and map the multi-threaded code to this model