Avionics Middleware October 15 2010 Bipasa Chattopadhyay Outline

Avionics Middleware October 15, 2010 Bipasa Chattopadhyay

Outline n What is Middleware? ¨ General applications. n Structure and functionality of Middleware. ¨ ACE ¨ CORBA / RT-CORBA ¨ TAO n Real-Time CORBA Scheduling Service. n Validation of safety critical Middleware for Avionics. n Alternative Middleware Architecture for UAVs.

What is Middleware? n n Software that provides a link between separate software applications. ¨ If a new software application replaces an existing one then it should be able to communicate with the rest of the system. ¨ If application software is less dependent on underlying OS and hardware then OS and hardware can be upgraded without affecting the application software. Gained popularity in the 1980 s - link newer software applications to older legacy systems.

n Middleware sits in the middle of the software application layer and OS. n Distinction between OS and Middleware functionality is, to some extent, arbitrary. ¨ n TCP/IP stack for telecommunications was originally a Middleware functionality but nowadays it is included in the OS. Supports distributed architectures ¨ Middleware allows interaction between distributed software applications (client-server) running on one or more machines.

General applications n Information Technology ¨ Middleware is integral to modern information technology based on XML, Web services, and service -oriented architecture. ¨ Facilitates message passing between different systems or components in standard formats. n E-commerce ¨ Rapid and secure transactions over many different types of computer environments.

n Wireless sensor networks (WSN) ¨ WSN developers can integrate OS and hardware with the wide variety of applications. n Data Mining ¨ Businesses use Middleware applications to link information from departmental databases housed in multiple geographic locations and extract necessary information.

n Middleware has become popular in many industries because of its ability to– ¨ Link resources across dissimilar networks and computing platforms. ¨ Decouple software applications from the underlying OS and hardware. n Examples of COTS Middleware – CORBA, J 2 EE, . NET ect.

n Analogous to Middleware, Embedded Middleware is a software layer that sits "in the middle" of embedded application and the Real Time Operating System (RTOS). n Example of Embedded Middleware – Real-Time CORBA.

Outline n What is Middleware? ¨ General applications. n Structure and functionality of Middleware. ¨ ACE ¨ CORBA / RT-CORBA ¨ TAO n Real-Time CORBA Scheduling Service. n Validation of safety critical Middleware for Avionics. n Alternative Middleware Architecture for UAVs.

Structure and functionality of Middleware

Host Infrastructure Middleware q. Encapsulates and enhances native OS communication and concurrency mechanism to create portable and reusable components. q. The components help to abstract away incompatibilities of individual OS. q Eliminates dependencies on low-level OS programming API, such as Sockets or Posix thread. Example - Adaptive Communication Environment (ACE), Real-time Java Virtual Machines based on Real-time specification for Java.

ACE n ACE has been used in a wide range of commercial and military systems, including missile control and avionics mission computing. n ACE runs on a wide range of OS platforms including Win 32, most versions of UNIX, Vx. Works, Lynx. OS.

Distribution Middleware q. Defines higher-level distributed programming models that extend the native OS programming capabilities encapsulated by host infrastructure middleware. q. Enables developers to program distributed applications like stand-alone applications. q. Supports Object Oriented distributed programming. Example – Common Object Request Broker Architecture (CORBA)

CORBA n CORBA is a standard developed by the Object Management Group (OMG). n The CORBA specification defines an architecture of interfaces and services that must be provided by the Object Request Broker (ORB). ¨ Not much implementation details.

n The ORB provides the mechanism required for distributed objects to communicate with one another independent of location (remote or local), hardware platforms, communication protocol and interconnects, OS and programming languages. n The CORBA Interface Definition Language (IDL) allows the development of language and location independent interfaces for distributed objects.

RT-CORBA n n End-To-End System Predictability Priority banding Resource Management Thread pools ¨ n n RT CORBA mutex Soft Real time CORBA Hard Real time CORBA ¨ The ORB must respect priorities, bound thread priority inversions, bound latencies of operation invocations

n Fixed Priority Scheduling ¨ Real-time CORBA priority specifies how to relate native OS priority throughout the system in a consistent manner ORBexpress, ACE-TAO ORB

Common Middleware Services q Services that define high level programming components that allow application developers to concentrate on programming application logic without the need to write code for lower level Middleware features. q. Abstraction to an abstraction. . Example- CORBA Component Model (CCM), CORBA Event Service

Domain-Specific Middleware Services q. Domain-Specific Middleware services are tailored to the requirements of particular system domains, such as avionics mission computing, radar processing, weapons targeting etc. q. Domain-specific services are the least developed of the Middleware layers.

• Boeing’s Bold Stroke uses – • • • Power. PC processor VME communication protocol Vx. Works OS. ACE infrastructure middleware Real-time CORBA distribution middleware CORBA Event Service common middleware services.

Outline n What is Middleware? ¨ General applications. n Structure and functionality of Middleware. ¨ ACE ¨ CORBA / RT-CORBA ¨ TAO n Real-Time CORBA Scheduling Service. n Validation of safety critical Middleware for Avionics. n Alternative Middleware Architecture for UAVs.

RT-CORBA Scheduling Services n Conventionally static scheduling has been used to meet Real-Time requirements in CORBA Middleware. n We look at a specific example of scheduling CORBA operations for Real-Time applications using static / dynamic / hybrid scheduling. n ACE-TAO ORB incorporates a strategized scheduling service framework. ¨ Allows the developer to choose between RMS, EDF, MLF and MUF as the preferred scheduling strategy.

Purely dynamic scheduling (EDF, MLF) compared to RMS. n Advantages – ¨ Overcomes the utilization limitation of RMS. ¨ Handle harmonic and non-harmonic periods comparably. n Disadvantages – ¨ Higher overhead to evaluate at run-time. ¨ No control over which operation misses its deadline in case of overload. ¨ EDF has an additional disadvantage because you can not tell whether a job will miss its deadline until it misses it.

Maximum Urgency First Supports determinism of static scheduling and flexibility of dynamic scheduling. n TAO supports a variant of MUF. n ¨ MUF allows control over which job will miss its deadline.

Comparison of EDF, MLF and MUF

Design of TAO’s Strategized Scheduling Service

Overview of TAO ensure that application timing requirements are specified and enforced ensures that Real-Time requirements are met demultiplexes incoming requests to servants delivers client requests to the object adapter and returns responses to clients Real time ORB uses multi threaded, pre-emptive, priority based connection and concurrency architecture.

Goals n Maximize total utilization. ¨ If a critical task does not use WCET then non-critical task can be dispatched. n Preserving scheduling guarantees for critical operations. ¨ In case of overload only non-critical tasks miss their deadline. n Adaptive scheduling. ¨ Allow applications to select which operations are critical.

TAO Terminology n n RT_Operation – Scheduled CORBA operation. RT_Info – A struct that contains ¨ Criticality – high criticality tasks cause greater damage to the performance of the system if they don’t finish before deadline. ¨ Worst-case execution time. ¨ Period. ¨ Importance – used as a “tie-breaker” for operations with identical priority. ¨ Dependencies – obtained from control flow.

Operation, Scheduling and Dispatching terminology

n A scheduling strategy takes the information provided by an operation’s RT_Info structutre. n Assigns an urgency to the operation based on its static priority, dynamic subpriority, and static subpriority values.

n Maps urgency into dispatching priority and dispatching subpriority values for the operation. n Provides dispatching queue configuration information so that each operation can be dispatched according to its assigned dispatching priority and dispatching subpriority.

Strategized Scheduling Framework

Input / Output interface n TAO’s scheduling services depends upon the application. ¨ Drawback - if we change one characteristic of the operation then we have to manually modify the rest in order to be consistent. n Input interface allows application to specify the entire set of possible characteristics. n Mappings between the input and output interfaces are entirely encapsulated.

Input / Output interface n Each scheduling strategy specifies 2 distinct levels in its mapping from input interface to output interface 1) Assign urgency components i. e. static priority, dynamic subpriority and static subpriority. ¨ 2) Assign dispatching priorities and subpriorities in the output interface based on above. ¨ n TAO allows the scheduling strategy and the underlying dispatching model to vary independently.

Avionics Applications n ACE+TAO are being used by Northrop Grumman and Boeing on Wedgetail.

Outline n What is Middleware? ¨ General applications. n Structure and functionality of Middleware. ¨ ACE ¨ CORBA / RT-CORBA ¨ TAO n Real-Time CORBA Scheduling Service. n Validation of safety critical Middleware for Avionics. n Alternative Middleware Architecture for UAVs.

Middleware in Avionics n Middleware helps to minimize the code that has to be verified when the underlying system microprocessor and network are changed. ¨ Shift to commodity hardware instead of proprietary hardware. ¨ Without re-validating the system software.

n Current OMG Real-time CORBA specifications do not meet DO-178 B guidelines. n Memory footprint of CORBA is not small enough for avionics.

Challenges for Avionics Middleware n System Partitioning – currently no commercial ORB supports time and space partitioning. n DO-255 requires that the Avionics Computing Resource (ACR) has the necessary hardware and software mechanism to ensure that time, space and I/O allocations are static. ¨ Safety critical applications are provided the necessary computing resources.

n ACR software performs access mediation between partitions – complete, tamper-proof and assured. n CORBA needs to have space partitions for security. ¨ Some n ORB functionality may need to shift to OS. ORB could provide a consistent communication mechanism between partitions.

n Fault tolerance (F-T) – Simplest method – multiple instances of objects running in the system and some fault detection mechanism says which one to use. n Second method – Factory Object that replicates the object on another computing resource in the system. n Third method – have ORB support for Object Fragmentation in which parts of an object’s functionality can be replicated in the system.

n Areas to improve Cobra F-T ¨ F-T components need to be well specified for interoperability. ¨ Using knowledge of time dependant data changes to predict correctness. ¨ Using above knowledge produced at definite intervals for liveness checks. ¨ No Real-Time provision in the current F-T specification (OMG R-T SIG plans to work on it)

n Quality of service ¨ Predictable latency, jitter and end-to-end data throughput. ¨ Predictable RTOS, Communication protocols, ORB. n Reflective Middleware ¨ Describes a system that can reason about and act upon itself. ¨ Systems react dynamically; the dynamic behavior should be predictable.

n Avionics Domain Services ¨ The topmost layer of middleware. ¨ Aircraft Abstraction layer – system designers can design the system from a high level model based viewpoint. n High Assurance ¨ CORBA is finding its way into less critical parts of commercial avionics. ¨ ACE and TAO is being used by Boeing in the mission computer of a military weapons platform.

Outline n What is Middleware? ¨ General applications. n Structure and functionality of Middleware. ¨ ACE ¨ CORBA / RT-CORBA ¨ TAO n Real-time CORBA Scheduling Service. n Validation of safety critical Middleware for Avionics. n Alternative Middleware Architecture for UAVs.

Middleware for UAVs n Alternative Middleware Architecture for UAVs. n Based on Service Oriented Architecture (SOA). n Small number of useful functionalities are more important than the large implementation of CORBA. ¨ Due to the complexity and completeness of Middleware platforms efficiency may be compromised.

n Middleware takes the form of a service container. ¨ n Uses Data Distribution System (DDS) to communicate information over the network. ¨ n Services do not need information about the other participating services, including their existence or location. Publish/subscribe model for sending and receiving data among nodes. DDS model has been shown to be very efficient for distributing time-critical information.

Middleware Architecture based on SOA Service container can communicate with services installed in the same container or in other service containers present in the same local network. The high level protocols are designed to maximize the performance of services using the multicast capabilities of the underlying network.

Conclusion n COBRA / R-T CORBA Middleware based on Service Oriented Architecture (SOA). n Ad-hoc Middleware (Ovm) – Real time and dependable. n ¨ n Open implementation of Middleware for Java applications developed under the A 3 M project. Focused on space applications. Middleware for large number of wireless sensors – has delay tolerance but power management constraints.

References n Adaptive and Reflective Middleware for Distributed Real-Time and Embedded Systems, D. C. Schmidt. n The Design And Performance Of A Real Time CORBA Scheduling Service, C. D. Gill et al. n Towards Safety Critical Middleware for Avionics Applications, D. A. Haverkamp et al. n A Middleware Architecture For UAVs, J. Lopez et al. n http: //www. ois. com/Products/what-is-real-time-corba. html n http: //www. cs. wustl. edu/~schmidt/TAO. html

Thank you !