Now showing 1 - 7 of 7
  • Publication
    Open Dependability Exchange Metamodel: A Format to Exchange Safety Information
    Safety-relevant systems are becoming ever more complex, and they typically contain components from different manufacturers which have been integrated along the supply chain. Safety assurance is highly challenging in this context, with model-based approaches being a potential remedy. To unlock the potential of such approaches, a data format is needed to represent the safety information in multi-tier supply chains in a tool-independent way. This paper presents the Open Dependability Exchange (ODE) (https://github.com/Digital-Dependability-Identities/ODE) metamodel developed in the H2020 DEIS Project, which captures the essence and relation between the safety-related artifacts created during the entire development lifecycle. The different parts of the ODE provide coverage for architectural modeling, hazard and risk analysis, failure logic modeling (such as FME(D)A, FTA, and Markov Chains), and safety requirements. It enables the exchange of safety information between the different phases of the safety engineering lifecycle and the exchange across organizations in multi-tier supply chains. Moreover, the ODE enables the creation, integration, and validation of safety information using different vendors' tools regardless of the specific tool's methodology.
  • Publication
    Plug-and-Produce... Safely!
    ( 2022) ;
    Huck, Tom P.
    ;
    ;
    Ledermann, Christoph
    ;
    ;
    Schlosser, Patrick
    ;
    Schmidt, Andreas
    ;
    ;
    To enable resilient, innovative, and sustainable industrialization, adopting the Industry 4.0 (I4.0) paradigm is essential, as it enables distributed, reconfigurable production environments. Fast reconfiguration, and hence flexibility, is further achieved by employing human-robot-collaborations - but this poses challenges with respect to human worker safety that currently assumes only static systems. While industrial practice is moving towards service-oriented approaches for the nominal function (producing goods), the safety assurance process is not yet ready for this new world that demands continuous, collaborative, on-demand assurance [21]. In this paper, we present an end-to-end model-based safety assurance lifecycle (using Conditional Safety Certificates [30]) to bring the assurance process closer to the demands of I4.0 and overcome this paradigm mismatch. We give details on the different steps of our approach and provide a worked example for an industrial human-robot-collaboration use case.
  • Publication
    SafeDrones: Real-Time Reliability Evaluation of UAVs Using Executable Digital Dependable Identities
    ( 2022)
    Aslansefat, Koorosh
    ;
    Nikolaou, Panagiota
    ;
    Walker, Martin
    ;
    ; ; ;
    Kolios, Panayiotis
    ;
    Michael, Maria K.
    ;
    Theocharides, Theocharis
    ;
    Ellinas, Georgios
    ;
    ;
    Papadopoulos, Yiannis
    The use of Unmanned Arial Vehicles (UAVs) offers many advantages across a variety of applications. However, safety assurance is a key barrier to widespread usage, especially given the unpredictable operational and environmental factors experienced by UAVs, which are hard to capture solely at design-time. This paper proposes a new reliability modeling approach called SafeDrones to help address this issue by enabling runtime reliability and risk assessment of UAVs. It is a prototype instantiation of the Executable Digital Dependable Identity (EDDI) concept, which aims to create a model-based solution for real-time, data-driven dependability assurance for multi-robot systems. By providing real-time reliability estimates, SafeDrones allows UAVs to update their missions accordingly in an adaptive manner.
  • Publication
    Engineering of Runtime Safety Monitors for Cyber-Physical Systems with Digital Dependability Identities
    ( 2020) ; ;
    Sorokos, Ioannis
    ;
    Papadopoulos, Yiannis
    ;
    Kelly, Tim
    ;
    Wei, Ran
    ;
    Armengaud, Eric
    ;
    Kaypmaz, Cem
    Cyber-Physical Systems (CPS) harbor the enormous potential for societal improvement in terms of safety, comfort and economic efficiency. However, these benefits will only be unlocked if the safety of these systems can be assured with a sufficient level of confidence. Traditional safety engineering and assurance approaches alone cannot address the CPS-inherent uncertainties and unknowns induced by openness and adaptivity. Runtime safety assurance approaches such as Conditional Safety Certificates (ConSerts) represent novel means to cope with CPS assurance challenges by introducing modular and formalized safety arguments with variant support, thereby shifting the final safety certification step to runtime. However, the systematic engineering of ConSerts at design-time is a complex task which, up to now, has not been sufficiently addressed. Without systematic safety assurance at both design-time and runtime, CPS will hardly be assurable with acceptable confidence given the uncertainties and unknowns. In this paper, we present an engineering method for synthesizing ConSerts based on Digital Dependability Identities (DDI). The approach is demonstrated for a cooperative vehicle platooning function (CACC) from an industrial case study.
  • Publication
    Predictive Runtime Simulation for Building Trust in Cooperative Autonomous Systems
    Future autonomous systems will also be cooperative systems. They will interact with each other, with traffic infrastructure, with cloud services and with other systems. In such an open ecosystem trust is of fundamental importance, because cooperation between systems is key for many innovation applications and services. Without an adequate notion of trust, as well as means to maintain and use it, the full potential of autonomous systems thus cannot be unlocked. In this paper, we discuss what constitutes trust in autonomous cooperative systems and sketch out a corresponding multifaceted notion of trust. We then go on to discuss a predictive runtime simulation approach as a building block for trust and elaborate on means to secure this approach.
  • Publication
    Automated Evidence Analysis of Safety Arguments Using Digital Dependability Identities
    ( 2019) ;
    Zeller, Marc
    ;
    Creating a sound argumentation of why a system is sufficiently safe is a major part of the assurance process. Today, compiling a safety case and maintaining its validity after changes are time-consuming manual work performed by safety experts based on their experience and knowledge. This work is further complicated when supplier components need to be integrated where important details might not be known. By using the concept provided by Digital Dependability Identities (DDI), we present an approach to automatically check evidence validity for safety requirements through leveraging from formal traceability between safety argument and evidence models being both parts of the DDI. This approach reduces the effort for creating and maintaining the system-level safety argument by (a) performing automated evidence analysis for safety requirements, (b) supporting a model-based multi-tier safety engineering process and (c) eliminating the human error source by relying on DDI scripts to encode safety engineering activities. We illustrate our approach using a case study from the railway domain, which focuses on the safety assurance of a train control system (ETCS).
  • Publication
    Towards (Semi-)Automated Synthesis of Runtime Safety Models
    Future automotive systems will exhibit ever-higher grades of automation up to the point of autonomy. The full potential in automation can only be unlocked when combining it with the capability of cooperation, leading to the vision of comprehensively networked cooperative autonomous systems (CAS). To enable a safe CAS cooperation at runtime, we introduced the ConSert approach in previous work, which allows fully automated safety interface compatibility checks in the field based on runtime safety models. However, a systematic engineering approach for synthesizing these runtime safety models based on design time architecture and safety models does not exist to date. As all safety-engineering activities require the functional description of a system as input, we describe in this paper, how a top-down service-based design approach can look like for CAS, preparing an effective safety analysis and formulation of black-box behavioral deviation bounds in shape of safety guarantees and demands. Thereby, we point out challenges, which especially occur due to the complexity introduced by the distributed development of CAS. These challenges are exemplified for the traffic light assistant system, an example CAS from the automotive domain.