Safety CERTIFIED OPEN SOURCE SOFTWARE

Safety Certification with Turbo

In many domains, safety certification is necessary, for example in aerospace, medical technology, and automotive engineering. This process is very time-consuming, since all possible system states and reactions must be mapped and all possible errors must be handled in a controlled manner. Certification often costs much more effort than the actual programming — and it is therefore rarely updated. Open source software in contrast, however, stands for rapid development and fast bug fixing.

embedded brains, with the support of ESA (European Space Agency), has developed a maximally automated qualification process. Based on a complex concatenation of definitions, requirements and individual tests, which communicate by means of a formalized “language”, the qualification can be performed largely automatically. This does not replace formal definitions and test procedures, but it simplifies delta qualifications enormously. This means that adaptations and additions to the source code can be carried out very quickly — and thus cost-effectively.

Verifications Performed

  • Static Code Checker Results from Coverity, CLANG, and CppCheck
  • Product and process metrics
  • Evaluation of test and validation activities
  • Problem and non-conformance reports
  • 100% Code & Branch Coverage
OUR QUALIFICATION DATA PACKAGES

The Path to Certification

Was ist ein Qualification Data Package (QDP)?

Die europäische Raumfahrtagentur ESA, ebenso wie andere Zertifizierer, verlangen, dass die Software-Entwicklung konform zu den ECSS Standards ECSS-E-ST-40C und ECSS-Q-ST-80C Rev.1 ist. Hier wird RTEMS als eine „reusable software component“ betrachtet. Das Qualification Data Package (QDP) besteht aus einem Dokumetensatz, der belegt, dass RTEMS nach den Vorgaben der ECSS entwickelt und auf der Zielhardware verifiziert wurde. Die Anforderungen variieren je nach Sicherheitskategorie (A-D, wobei dann teilweise eine unabhängige Zweitprüfung nötig ist). Der ECSS Standard ist vergleichbar mit anderen Sicherheits-Standards, wie z.B. IEC 61508, ISO 26262, DO-178, DO-330, DO-333 und dem Galileo Software Standard (GSWS).

Über die formalen Anforderungen hinaus ist die Erfüllung des ECSS-Standards sehr nützlich für die Optimierung der Betriebs- und Funktionssicherheit. Neben den Funktionstests erhalten Sie auch detaillierte Leistungsmessungen, mit denen die Laufzeiteigenschaften Ihrer Anwendung abgeschätzt und optimiert werden können.

Was beinhaltet ein QDP?

QDPs sind komplette Software Development Kits (SDK) für die spezifische Hardware. Die Dokumente umfassen u.a.:

  • Software Requirements Specification (SRS),
  • Interface Control Document (ICD),
  • Software Verification Report (SVR),
  • Software Product Assurance Milestone Report (SPAMR),
  • Software Validation Specification (SVS) und
  • Software Validation Report (SVR).

Die Validierungs-Tests werden auf der Ziel-Hardware ausgeführt. Im QDP enthalten ist der Quellcode mit allen Komponenten (einschl. des Cross- Compilers) zur Entwicklung von RTEMS Applikationssoftware auf der Zielhardware. Weitere Werkzeuge werden im Binärformat mitgeliefert. Darüber hinaus werden die RTEMS-Dokumentation und Beispielprogramme mitgeliefert.

Unsere RTEMS Qualifikations-Angebote

  • Qualification Data Packages (QDPs) für verschiedene Architekturen, SoCs, Module und On-Board Computer (OBC), wie z.B.
    • Xilinx Zynq
    • SAMRH71 und
    • RISC-V
  • Erweiterung des QDPs, wie z.B.
    • POSIX API
    • OpenMP
    • lwIP
    • Treiber (z.B. CAN, SpaceWire, MIL-STD-1553)
    • NASA cFS
  • Event recording und Scheduling-Werkzeuge (z.B. Eclipse Trace Compass)
  • Unterstützung bei der Qualifizierung Ihrer Applikations-Software
    • Spezifikation
    • Validatierung
    • Test-Durchführung
    • Vorbereitung der ECSS Dokumente
  • Independent Software Verification und Validation (ISVV), erforderlich für ECSS Cat. B and Cat. A Qualifizierung.

Weitere Vorteile unserer QDPs

  • Kundenspezifische Angepassung der QDPs an Ihre spezifischen Gegebenheiten
  • Abstimmung des Quellcodes mit der RTEMS community und dem RTEMS Community git repo
  • RTEMS code bug tracking
  • Gnu Toolchain bug tracking
  • Langzeitverfügbarkeit und -wartung
  • Schnelle Entwicklungs- und Qualifizierungsprozesse

What is a Qualification Data Package (QDP)?

The European Space Agency ESA, as well as other certifiers, require that software development is compliant with the ECSS standards ECSS-E-ST-40C and ECSS-Q-ST-80C Rev.1. Here, RTEMS is considered a “reusable software component.” The Qualification Data Package (QDP) consists of a set of documents proving that RTEMS has been developed according to ECSS requirements and verified on the target hardware. The requirements vary depending on the safety category (A-D, in which case independent secondary verification is sometimes required). The ECSS standard is comparable to other safety standards, such as IEC 61508, ISO 26262, DO-178, DO-330, DO-333 and the Galileo Software Standard (GSWS).

Beyond the formal requirements, compliance with the ECSS standard is very useful for optimizing operational and functional safety. In addition to the functional tests, you also receive detailed performance measurements that can be used to estimate and optimize the runtime characteristics of your application.

What Does a QDP Include?

QDPs are complete software development kits (SDK) for the specific hardware. The documents include:

  • Software Requirements Specification (SRS)
  • Interface Control Document (ICD)
  • Software Verification Report (SVR)
  • Software Product Assurance Milestone Report (SPAMR)
  • Software Validation Specification (SVS)
  • Software Validation Report (SVR)

The validation tests are executed on the target hardware. Included in the QDP is the source code with all components (including the cross-compiler) for developing RTEMS application software on the target hardware. Additional tools are included in binary format. In addition, RTEMS documentation and sample programs are included.

Our RTEMS Qualification Offers

  • Qualification Data Packages for various architectures, SoCs, modules, and On-Board Computers (OBC), e.g.
    • Xilinx Zynq
    • SAMRH71
    • RISC-V
  • Extension of the QDP, such as
    • POSIX API
    • OpenMP
    • lwIP
    • Drivers (e.g. CAN, SpaceWire, MIL-STD-1553)
    • NASA cFS
  • Event recording and scheduling tools (e.g. Eclipse Trace Compass)
  • Support for the qualification of your application software
    • Specification
    • Validation
    • Test execution
    • Preparation of ECSS documents
  • Independent Software Verification and Validation (ISVV), required for ECSS Cat. B and Cat. A qualification.

Further Advantages of our QDPs

  • Customization of the QDPs to your specific circumstances.
  • Coordination of the source code with the RTEMS community and the RTEMS community git repo
  • RTEMS code bug tracking
  • Gnu toolchain bug tracking
  • Long-term availability and maintenance
  • Fast development and qualification processes