An MBSE Approach for Development of Resilient Automated Automotive Systems

Autor: Joseph G. D'Ambrosio, S. Ramesh, Arun Adiththan, Azad M. Madni, Edwin Ordoukhanian, Prakash Peranandam, Padma Sundaram
Rok vydání: 2019
Předmět:
Information Systems and Management
Computer Networks and Communications
Computer science
media_common.quotation_subject
MBSE
Advanced driver assistance systems
02 engineering and technology
lcsh:TA168
lcsh:Technology (General)
0502 economics and business
advanced driver assistance systems
0202 electrical engineering
electronic engineering
information engineering

Function (engineering)
Design methods
Resilience (network)
media_common
05 social sciences
safety of the intended functionality
Partially observable Markov decision process
automated driving systems
utility function
Variety (cybernetics)
lcsh:Systems engineering
Control and Systems Engineering
Modeling and Simulation
Systems engineering
lcsh:T1-995
020201 artificial intelligence & image processing
Markov decision process
Scenario testing
050203 business & management
Software
test scenario
Zdroj: Systems, Vol 7, Iss 1, p 1 (2019)
ISSN: 2079-8954
DOI: 10.3390/systems7010001
Popis: Advanced driver assistance and automated driving systems must operate in complex environments and make safety-critical decisions. Resilient behavior of these systems in their targeted operation design domain is essential. In this paper, we describe developments in our Model-Based Systems Engineering (MBSE) approach to develop resilient safety-critical automated systems. An MBSE approach provides the ability to provide guarantees about system behavior and potentially reduces dependence on in-vehicle testing through the use of rigorous models and extensive simulation. We are applying MBSE methods to two key aspects of developing resilient systems: (1) ensuring resilient behavior through the use of Resilience Contracts for system decision making; and (2) applying simulation-based testing methods to verify the system handles all known scenarios and to validate the system against potential unknown scenarios. Resilience Contracts make use of contract-based design methods and Partially Observable Markov Decision Processes (POMDP), which allow the system to model potential uncertainty in the sensed environment and thus make more resilient decisions. The simulation-based testing methodology provides a structured approach to evaluate the operation of the target system in a wide variety of operating conditions and thus confirm that the expected resilient behavior has indeed been achieved. This paper provides details on the development of a utility function to support Resilience Contracts and outlines the specific test methods used to evaluate known and unknown operating scenarios.
Databáze: OpenAIRE