From Time to Time

Performing Safety Analyses and System Designs conjointly : a viewpoint matter !

2011-12-09T14:51:00.001+01:00

During the last CSDM 2011 conference, I have presented our work made in the IMOFIS project.

IMOFIS was an R&D project with Renault, Alstom Transport, Systerel, UTC, CEA-List and Obeo to develop an environment that assists safety engineers to analyse and verify their systems. This project ended on October 25 2011.

In this project, we have developed a metamodel and a tool, named Alea ToolKit, to capture both parts of the system designs and parts of the safety analyses needed to build a critical systems.

For example, one system studied in this project is the Communication Based Train Control (CBTC). To build such systems, typical process is dual : on one side the system engineering and in other side the safety engineering. The first one leads to build a safe system. The second leads to verify that the system is build in safety. Between this two engineerings, the exchanges are models, documents and mainly requirements. System have to manage requirements (refine, satisfy, derive it). Safety has to tag requirements as safety ones.

Typical system engineering process

One key problematic in such process is to be able to synchronize system and safety world. One subset of needs is :

the adaptability, i.e to provide a tool and methodology usable for several projects and even several domains such as railway and automotive ones.
the interoperability, i.e. to be able to reference system modeling elements to describe the safety analyses,
the consistency, i.e. to provide facilities in order to manage several safety modeling levels (Preliminary Hazard Analysis, Fault Tree, FMEA). We want to help user to manage the consistency among thus abstraction levels,
the traceability, i.e. to be able to compute links among engineerings and to use those links for navigation.

A set of needs explored in IMOFIS

Hence,to fulfill those needs, we have explored the use of a viewpoint based approach with Obeo Designer. The key idea is to capitalize concepts in a generic/general safety metamodel and to provide different views to specialize the use of this generic metamodel for a specific concerns : a specific abstraction level or a specific domain. This metamodel is build on the the Eclipse Modeling Framework in order to achieve the interoperability with other system metamodels (SysML in our case). The views are implemented in a viewpoint based-engine : Obeo Designer. The resulting modeling framework is the Applied metamodeL for safEty Analyses ToolKit.

To illustrate such a tool, let's illustrate on the CBTC example. Firstly, we check the correct viewpoints.

In a viewpoint based-approach, user choose the viewpoint to load.

Then, let's take a look to the system design from the SysML viewpoint.

From SysML, user can navigate to the safety analyses. For example, the F2 function is used in two safety analyses : a cause analysis (Fault tree analysis) and an accident case analysis (Preliminary Hazard Analysis).

In fact, the safety engineer described the accident case from the SysML model : i.e. he references the SysML CTBC Block and the F2 function from the SysML model. Hence, the safety engineer interoperate with the system design in order to build his analysis.

From the Alea ToolKit point of view, this scenario is "just" a graphical view on a global enhanced fault tree. The viewpoint tool manage the consistency between this event sequence view and the cause analysis view represented as a fault tree. The following picture is the projection of the previous scenario from a fault tree point of view.

The viewpoint manage also the traceability links between the views. For example, the traceability companion allow to navigate among the safety views. From a second accident case for the excessive speed hazard, user can navigate to the previous scenario.

Hence, viewpoint based approach allow to provide an integrated modeling framework gathering Safety and System concerns. It improves information search, communication (before many documents were parsed) and coherency among safety/system analyses. This approach is not a new set of methods for safety analyses. It doesn't take into account all the safety activities but PHA, SHA and FMEA modeling at the system level.

Next steps are bridges : a safety viewpoint is not only graphical representations, but this is also a set of filters and information synchronizations for specific concerns. Hence my next work is to enhance those graphical viewpoints in order to connect business tools such as my AltaRica editor. This is another R&D story !

If you want more information, a complete presentation of this work is available here

An AltaRica textual editor in Eclipse

2011-06-27T00:19:00.003+02:00

Since more than one year, I have heard about the AltaRica language provided by the LaBRI. AltaRica is a language designed to model both functional and dysfunctional behaviors of critical systems. AltaRica provides a syntax and a set of model-checkers like ARC that allows to analyze the set of reachable configurations of a concurrent system from an initial state for example. This language has a formal semantic and seems quite easy to learn and to use !

However, I haven't found a free plug and play editor for a beginner (as me) with auto-completion and error detection. I have thus implemented, during my spare time, a textual AltaRica Eclipse-based editor in a first version.

My motivation are :

to learn the langage
to be able to use this langage with the Eclipse Modeling Framework. In fact, if I succeed, the AltaRica model and all other models used during my critical systems developments (SysML, UML, EventB, Requirements, traceability) will be managed by the same common modelling framework. It will thus facilitate the interroperability !
to learn the Eclipse-Based xText technology for which you can describe the AltaRica grammar and generate the Eclipse-integrated textual editor.


An extract from the xText AltaRica grammar

After several hours, I succeed in providing my first AltaRica editor with auto completion and error detection. For sample, I can edit the counter example delivered with ARC and compile this sample.

A simple counter from 0 to 10. The counter can be incremented by
one unit using inc event or by two units using inc2 event.

Syntax error detection


Completion proposals

The ARC compilation results when asking all the path to get count >=3

The ARC console is not yet integrated in Eclipse because I don't know if someone else could be interested either in using or in contributing to this editor. Please, feel free to contact me if you are interesting !

MDE in action for safety analysis modelling

2011-01-13T16:41:00.002+01:00

Since two years, I am working for the IMOFIS R&D project. The last year, we have developed a graphical modeler for safety concerns. This modeler is based on the EN 50126 and ISO 26262 norms.

The key idea of this work is to provide a graphical safety viewpoint for system engineering. The system is design with the SysML language. Safety engineers describe their analysis with the safety viewpoint.

The result is pretty cool ! In the next figure I described that the SysML “F2” operation of the SysML Block “CBTC” (Communication Based Train Control) is referenced by a barrier to prevent a derailment (the accident) in case of an excessive speed (the hazard).

In this work, we use several model-driven technologies to build our software :

The Eclipse Modeling Framework to describe the safety metamodel
The Extended Editing Framework to generate both property views and wizards
The Obeo Designer viewpoint-based studio to create graphical views without any manual code
The GenDoc2 Topcased technology to generate documentations. This technology is based on the Acceleo model-driven code generation.

I will present this work on the Topcased Day conference in february ! In the meantime, you can look for screenshots, videos and publications on the Obeo network !

RT-Simex R&D project presented to the FSE conference

2010-12-15T08:55:00.001+01:00

Last month,

Julien, from the INRIA Aoste team, has presented the RT-Simex project to the FSE conference (http://fse18.cse.wustl.edu/). The slides are available here : http://www.slideshare.net/fthomasfr/fsertsimex.