CN111813522A - A Virtual ARINC 653 Simulation and Verification Platform - Google Patents

Abstract

The invention discloses a virtual ARINC653 simulation verification platform, and relates to the field of airborne embedded simulation software. The method is used for solving the problems of high requirement on resource configuration and poor universality of the existing ARINC653 standard-based real-time operating system due to the fact that a source code is not public. The platform comprises partition management, a partition configuration module and a partition management module, wherein the partition management is used for creating a plurality of partitions according to XML configuration files and performing partition configuration on the plurality of partitions; scheduling the plurality of partitions according to a time window rotation mode, and scheduling a plurality of processes included in the partitions according to a priority preemption mode; the communication management is used for completing the communication between the partitions based on the sampling ports and the queue ports according to the shared memory mechanism and the partition configuration; communication between processes in the partitions is completed based on the blackboard and the cache; and the health monitoring management is used for receiving the error codes sent by the partitions and calling the processing functions corresponding to the error codes according to the error codes to perform error processing.

Description

A Virtual ARINC 653 Simulation and Verification Platform

technical field

The invention relates to the field of airborne embedded simulation software, and more particularly to a virtual ARINC 653 simulation verification platform.

Background technique

In recent years, the aviation environment in the era of information intelligence has become more and more complex, and the avionics system has gradually developed in the direction of intelligence, modularization and integration. The addition of complex software and hardware resources places higher requirements on the processing power and weight control of avionics systems. The traditional joint architecture lacks security, portability, and scalability, and no longer meets the development requirements of the current highly integrated avionics system. Therefore, the ARINC653 standard based on the Integrated Modular Avionic Architecture (IMA) is more and more widely adopted in the avionics field. The ARINC 653 standard is a specification for avionics application programming interfaces based on the IMA architecture, describing the runtime environment of an embedded real-time operating system. It adopts a partition mechanism, and each partition is loaded into a standard hardware platform according to the configuration requirements, which solves the problems of the original architecture's inextensibility and redundancy, and realizes the security and portability of the system on the basis of ensuring the portability of the system. and extensible design.

Foreign commercial operating systems based on the ARINC 653 standard include VxWorks653 of Wind River, LynxOS-178 of LynuxWorks, etc., which are embedded real-time operating systems based on IMA architecture, using partition isolation mechanism, and each partition is divided into different processing systems. On the server unit, it enjoys independent resources and runs the configured partition operating system, which reflects the independence of the partition and ensures that the failure of one partition will not spread to other partitions; the domestic partition operating system Tianmai 2 airborne operating system, The DO-178B specification was introduced to develop and verify the system, and ultimately ensure that the Tianmai 2 airborne operating system meets the application requirements of an integrated and modular system, and has achieved effective application in the field of integrated electronics.

The existing real-time operating system based on the ARINC 653 standard has the problems of high resource allocation requirements and poor generality because the source code is not open.

SUMMARY OF THE INVENTION

The embodiment of the present invention provides a virtual ARINC 653 simulation verification platform, which is used to solve the problems that the existing real-time operating system based on the ARINC653 standard has high resource allocation requirements and poor versatility because the source code is not open.

The embodiment of the present invention provides a virtual ARINC 653 simulation verification platform, including:

Partition management, used to create multiple partitions according to the XML configuration file, and perform partition configuration on the multiple partitions; schedule the multiple partitions according to the time window rotation mode, and schedule the partitions according to the priority preemption method. scheduling of multiple processes;

Communication management is used to complete the communication between the partition and the partition based on the sampling port and the queue port according to the shared memory mechanism and the partition configuration; complete the communication between the processes in the partition based on the blackboard and the cache ;

The health monitoring management is used for receiving the error code sent by the partition, and calling a processing function corresponding to the error code to perform error processing according to the error code.

Preferably, the partition includes a source port, a destination port, a queue and a shared memory; wherein, the source port adopts a sampling queue mode or a sampling mode; the destination port adopts a sampling queue mode or a sampling mode;

The partition management is used to establish the mapping relationship between the source, the destination and the channel according to the XML configuration file.

Preferably, the partition management is further used to set a main time frame, the main time frame includes a plurality of the time windows, and the operation period and scheduling period of each of the partitions are determined according to the main time frame. the partition occupies one or more of the time windows within the main time frame;

When it is determined that the time window for running the first partition ends, the process in the first partition is stopped, CPU resources are allocated to the second partition, and the process in the second partition is run; wherein, the lower part of the first partition One operating partition is the second partition.

Preferably, the partition management is also used for:

Establishing a hash map of each of the partition IDs and partition states, when receiving a process scheduling instruction, if the state of the second partition is NORMAL, schedule the processes included in the second partition;

When a plurality of the processes with the same priority are included in one of the partitions, the processes are scheduled according to a first-in, first-out algorithm; or

When a plurality of the processes included in one of the partitions have different priorities, allocate a time slice and the CPU resource to the process with the highest priority; wherein, the time window includes a plurality of the time slices .

Preferably, the communication management is used to:

The queue port is used to store the received messages to be sent in the message queue in a first-in-first-out manner. When the process sends a message from the message queue, when it is determined that the message queue is not empty, send the message. the first message to be sent included in the message queue, and delete the first message to be sent from the message queue; or

The sampling port is used to store the to-be-sent message in the shared memory by overwriting the received message to be sent in the previous to-be-sent message. When the process sends a message from the sampling port, when it is determined that the shared memory is not empty When the message is sent, the destination port of the message to be sent is determined, and the message to be sent is sent according to the destination port.

Preferably, the communication management is also used for:

When the process sends a message from the queue port, a delay trigger is set. When it is determined that the queue port is empty, the state of the process is converted to a waiting state. After a trigger cycle, the process starts from the queue port receives the to-be-sent message; or

When the process sends a message from the sampling port, a delay trigger is set. When it is determined that the shared memory is empty, the state of the process is converted to a waiting state. After one trigger cycle, the process starts from The sampling port receives the to-be-sent message.

Preferably, the communication management is used to:

When the process reads a message from the blackboard, if the blackboard is not empty, read the existing message from the blackboard;

When writing a message to the blackboard, if the blackboard is not empty, the received message will be overwritten with the existing message on the blackboard; or if the blackboard is empty, the received message will be written into the blackboard. blackboard;

When the process reads a message from the buffer queue, if the buffer queue is not empty, read the first message of the buffer queue, and delete the first message from the buffer queue;

When the process writes a message to the buffer queue, if the buffer queue is full, the process state is converted to a waiting state; or if the buffer queue is not full, the message is added to the buffer queue tail of the team.

Preferably, the communication management is also used for:

When the process reads a message from the blackboard, a delay trigger is set. If the blackboard is empty, the state of the process is converted to a waiting state. After a trigger cycle, the process starts from the The blackboard reads the message;

When the process reads a message from the buffer queue, a delay trigger is set. If the buffer queue is empty, the process reads a message from the buffer queue after one trigger cycle.

The embodiment of the present invention provides a virtual ARINC 653 simulation verification platform, including: partition management, used for creating multiple partitions according to an XML configuration file, and performing partition configuration on the multiple partitions; The partition is scheduled, and multiple processes included in the partition are scheduled according to the priority preemption mode; communication management is used to complete the partition and all the processes based on the sampling port and the queue port according to the shared memory mechanism and the partition configuration. The communication between the partitions; the communication between the processes in the partition is completed based on the blackboard and the cache; the health monitoring management is used to receive the error code sent by the partition, and call the error code according to the error code. The corresponding handler function performs error handling. The partition management included in the platform is set by the affinity of the Windows system, and the CPU resources are flexibly configured according to the real-time requirements of tasks, ensuring the priority execution of real-time tasks, and realizing real-time performance; communication management is established by shielding the specific implementation of the bottom layer for the communication layer. Interface virtual mapping realizes communication virtualization and portability; health monitoring management ensures the stable transmission of fault information through the data distribution service based on the publish/subscribe model, and enhances the fault handling capability of the virtual simulation platform.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts.

1 is a schematic structural diagram of a virtual ARINC 653 simulation verification platform provided by an embodiment of the present invention;

2 is a schematic diagram of a two-level scheduling model included in partition management provided by an embodiment of the present invention;

3 is a schematic diagram of a partition scheduler scheduling model provided by an embodiment of the present invention;

4 is a schematic diagram of an inter-partition communication model provided by an embodiment of the present invention;

FIG. 5 is a schematic diagram of a health monitoring model provided by an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Introduction to related concepts

1. Partition: Partition is the core concept proposed by ARINC 653, which ensures the space-time isolation of the system. One or more processes can exist in a partition at the same time and share the system resources of the partition.

2. Partition scheduling: Partition scheduling is to allocate CPU resources according to a preset cycle time sequence. Each partition is activated and operated according to the window assigned to him. There is no priority between partitions, and each partition in each cycle has at least run it once.

3. Process: A process is an adjustable unit within a partition. There are one or more processes in a partition. Each process belongs to only one partition. All processes in the same partition share the system resources of the partition, and multiple processes can be executed.

4. Process scheduling, each process has a current priority, and the process scheduling algorithm is a preemptible strategy based on priority.

5. Inter-partition communication refers to the communication between two or more partitions running on the same module or different modules. The communication between partitions is carried out through messages, including the following methods:

In the sampling mode, the message of the sampling port can be sent or overwritten by a new message;

In the queue mode, messages will be queued in the message queue, that is, the messages in the message queue are not allowed to be overwritten, the messages in the message queue will not be lost, and the messages will be sent in the order of first-in, first-out.

6. Intra-partition communication refers to the communication within the partition, including the following methods:

Buffering is used to transfer data between processes within a partition, allowing multiple messages with different data to be stored, so overwriting is not allowed;

The blackboard is used to transfer data between processes within a partition. Messages are not allowed to be queued, and messages on the blackboard can be cleared or overwritten by new messages.

FIG. 1 exemplarily shows a schematic structural diagram of a virtual ARINC 653 simulation verification platform provided by an embodiment of the present invention. As shown in FIG. 1 , the simulation verification platform mainly includes partition management, communication management and health monitoring management.

The partition management is designed to solve the problems of untimely scheduling and poor stability of multi-task scheduling in the existing partition scheduling methods. By analyzing the ARINC 653 two-level scheduling strategy, combined with the Windows affinity setting, a partition model is established. Based on the analysis of the existing problems of partition scheduling, the partition scheduling and process scheduling in the Windows environment are simulated and completed.

FIG. 2 is a schematic diagram of a two-level scheduling model included in partition management provided by an embodiment of the present invention. As shown in FIG. 2 , partition management includes a module scheduler and a partition scheduler. The module scheduler is used to schedule partitions, so it can also be Inter-partition scheduling, which uses the time slice round-robin scheduling algorithm to schedule multiple partitions; correspondingly, the partition scheduler is used to schedule multiple processes in each partition, and it schedules the processes within the partition based on the fixed priority scheduling algorithm. Processes with the same priority are scheduled using a first-in, first-out algorithm.

In the embodiment of the present invention, before performing partition scheduling or inter-partition scheduling, firstly, according to an XML file, a virtual module is established, a virtual partition is created, and the initial configuration of the virtual partition is completed. Specifically, virtual modules are created according to the initial information of the relevant modules in the XML configuration file, and virtual modules are bound to different CPUs according to the affinity setting. Further, the required shared memory is allocated for the established virtual module, and a main time frame parameter is set in a virtual module at the same time, and the main time frame parameter determines the operation period and scheduling period of each partition for subsequent partition scheduling. . It should be noted that each partition may occupy one time window within the main time frame, or may occupy multiple time windows.

Then, according to the relevant initial information of the partition in the XML file, the virtual partition is created in the virtual module, and the information of the partition is initialized. Specifically, the creation of ports and channels is performed according to the port initial information and the relevant channel initial information in the XML file, and the initialization of the port information and the channel information is completed; the initial mapping between the ports and the channels is established according to the relevant scheduling initial information in the XML file. relationship, that is, the initialization of the schedule is completed.

When performing inter-partition scheduling, a main time frame is divided into multiple time windows according to the main time frame parameters, each time window runs a corresponding partition, and each partition preempts CPU resources based on time slice rotation to perform partition scheduling. Specifically, the inter-partition scheduling adopts the time window rotation method. The main time frame is a periodic fixed-length time, in which each partition occupies one or more time windows, and the partitions are executed within the time window. When a time window At the end, the ARINC 653 simulation verification platform will perform partition switching.

Partition switching is to stop the current running partition and start the next running partition. When the current running partition time ends, set the stop flag in the partition and set the intra-partition scheduler event. After the intra-partition scheduler obtains the event, it detects the stop flag. Stop the currently running process; then set the activity identifier in the next running partition, the scheduler in the partition detects the activity identifier, wakes up the process that should be running in the partition and occupies the processor to run, and completes the next running partition. Activate; then calculate and update the next scheduling time according to the duration of the partition, and then complete the switching between partitions. In the embodiment of the present invention, since the partition of ARINC653 is simulated by the process of the general-purpose operating system, and the process of ARINC 653 is simulated by the thread of the general-purpose operating system, the switching of the partition actually corresponds to the stop of one general-purpose operating system process and the other The launch of a generic operating system process.

It should be noted that, in this embodiment of the present invention, the inter-partition scheduler performs a detection every 1 ms. If the current system time is greater than the next scheduling time, it means that the current running partition duration has passed, and partition switching should be performed.

Specifically, if the inter-partition scheduling determines that the current time window is over, the module scheduler notifies the partition scheduler to suspend the current running partition, recover the resources occupied by the current partition, and move the partition into the corresponding pending queue, and then The scheduling notifies the partition scheduler to restore the next partition in the scheduling table and allocate corresponding resources to it, thereby completing the partition scheduling. For example, when it is determined that the time window for the first partition to run ends, the partition scheduler is notified to stop running the processes in the first partition, and then allocates CPU resources to the second partition, and starts to run the processes in the second partition, here It should be noted that the next partition of the first partition is the second partition, that is, the second partition starts to run after the first partition finishes running.

During partition scheduling, according to the different states of different processes running in the partition, the partition needs to maintain the waiting queue, ready queue, sleep queue and pending queue, so as to complete the management of the processes in the partition.

Specifically, during partition switching, the partition scheduler suspends the running process of this partition or restores the process with the highest priority in this partition based on the instructions scheduled between partitions, so as to complete the suspension or wake-up of the partition. When performing process scheduling, the partition scheduler not only needs to judge whether the current partition allows process scheduling based on the instructions of inter-partition scheduling.

Specifically, the partition scheduler determines whether the current partition can perform process scheduling by maintaining the system partition state table. The partition scheduler first establishes a hash map between the partition ID and the partition state. After receiving the process scheduling instruction, it queries the corresponding partition ID corresponding to the current partition. When the partition state is NORMAL, the partition scheduler starts to schedule the process; if the partition state is not NORMAL, the partition scheduler needs to return an error value, indicating that the current partition does not support process scheduling.

FIG. 3 is a schematic diagram of a partition scheduler scheduling model provided by an embodiment of the present invention. As shown in FIG. 3 , when the partition scheduler performs process scheduling, the following situations are included:

1) The partition scheduler finds the current process with the highest priority by traversing the ready queue, and allocates time slices and processor resources for the process with the highest priority;

2) When the partition scheduler confirms that there is a higher priority process in the ready queue, the partition scheduler needs to stop the currently running process, change the state of the running process to the suspended state and join the corresponding queue, and then give the Higher priority processes allocate time slices and processor resources to complete the scheduling of processes within the partition;

3) When the partition scheduler traverses the ready queue and determines that there are multiple processes with the same priority in the ready queue, the partition scheduler executes multiple processes with the same priority in the ready queue according to the first-in, first-out algorithm. Scheduling, that is, according to the sorting method of the existing processes in the ready queue, allocating time slices and processor resources to the first process.

In the embodiment of the present invention, the communication management is designed to solve the problems of unstable communication and relatively large delay in communication in the existing partition communication method. By using the shared memory mechanism, each partition between partitions is implemented based on sampling and queue mode. based on the blackboard and buffer mode to realize the communication of each process between the partitions, and meet the requirements of stable and low-latency communication. The inter-partition communication and intra-partition communication cooperate with each other to ensure the communication integrity of the entire virtual ARINC 653 system.

Before inter-partition communication or intra-partition communication, communication needs to be performed according to the mapping relationship between source ports, destination ports and channels. Among them, the partition includes active ports, destination ports, queues, and shared memory.

Specifically, the size of the shared memory that needs to be created is obtained by parsing the XML file, and then the queue and port are created. In practical applications, the queue is also called the queue data structure, and the queue data structure is used to store the queue name information and the address offset where it is located. , the port includes a queue port and a sampling port, and the port is used to store the port name and port direction. It should be noted that a partition can include multiple source ports and destination ports, where the source port adopts the queue mode or sampling mode. , correspondingly, the destination port adopts queue mode or sampling mode. In practical applications, the queue mode communicates through the queue port, and the sampling mode communicates through the sampling port.

When the establishment of the channel is completed, the communication between the partitions can be performed. In this embodiment of the present invention, ports are divided into sampling ports and queue ports. Among them, the method of queue port management messages is to store messages in the queue in the form of first-in, first-out, so that messages will not be lost and ensure message integrity; the method of sampling port management messages is that the arrival of new messages will overwrite old messages, so that the purpose of The latest news is always read by the port to ensure the timeliness of the news.

Based on the above sampling ports and queue ports, inter-partition communication also includes two situations: sending messages from the sampling port and sending messages from the queue port. FIG. 4 is a schematic diagram of an inter-partition communication model provided by an embodiment of the present invention, which is described below with reference to FIG. 4 . Both cases:

1) Before a process sends a message from the sampling port, it needs to apply for a shared memory to store the message to be sent. Specifically, when a to-be-sent message arrives, the received to-be-sent message is used to overwrite the to-be-sent message stored in the shared memory, that is, only one to-be-sent message is stored in the shared memory, and the to-be-sent message is the latest to-be-sent message .

When a process reads a message from the sampling port, that is, when the process needs to read a message to be sent from the sampling port, a delay trigger will be set at the same time. If it is confirmed that there is a message to be sent in the shared memory, that is, when the shared memory is not empty, Then read the message to be sent from the sampling port, that is, the process reads the source port of the message to be sent, and then reads the message to be sent according to the source port; if it is confirmed that there is no message to be sent in the shared memory, that is, the shared memory When the memory is empty, the process will be suspended, and the process will be added to the blocking queue. After a trigger cycle, the delay trigger will activate the suspended process, and the process will restart from the sampling port. Read the message to be sent.

2) Before a process sends a message from the queue port, it needs to apply for a shared memory, which is used to store the message to be sent. Specifically, when a message to be sent arrives, the message to be sent is added to the tail of the message queue, that is, a message queue composed of a plurality of messages to be sent is stored in the shared memory.

Since the queue port stores the received messages to be sent in the message queue according to the first-in-first-out method, when the process reads the to-be-sent messages from the queue port, a delay trigger will be set. If it is confirmed that there are messages to be sent in the message queue message, that is, when the message queue is not empty, the first message to be sent in the message queue will be sent, and then the first message to be sent will be deleted from the message queue; if it is confirmed that there is no waiting message in the message queue When sending a message, that is, when the message queue is empty, the process will be suspended and added to the blocking queue. After a trigger cycle has elapsed, the delay trigger will activate the suspended process , the process re-reads the message to be sent from the queue port.

It should be noted that the above-mentioned first message to be sent is the message to be sent that is ranked first in the message queue.

Before introducing intra-partition communication, it is necessary to introduce the blackboard and buffering. In the embodiment of the present invention, the blackboard is created during the running of the program and does not need to be configured in advance. Multiple blackboards are managed using linked lists; blackboards do not have message queues, so when new messages arrive, they overwrite old messages on the blackboard. The buffer is created during the running of the program and does not need to be configured in advance. The buffer is managed by a linked list.

1) When the process reads a message from the blackboard, it will set a delay trigger at the same time. If there is a message on the blackboard, it will directly read the message existing on the blackboard; if there is no message on the blackboard, it will be set. The process is suspended, and the process is added to the process blocking queue of the blackboard. After a trigger period, the delay trigger will activate the suspended process, and the process will read the message from the blackboard again.

2) When the process writes a message to the blackboard, if there is a message on the blackboard, the latest message will directly overwrite the original message on the blackboard; if there is no message on the blackboard, the latest message will be directly written into the blackboard.

3) When the process reads a message from the buffer, a delay trigger will be set at the same time. If the buffer queue is not empty, the first message in the buffer queue will be read, and then the first message will be deleted from the buffer queue. It should be noted that the first message in the buffer queue is the first message in the buffer queue; if the buffer queue is empty, the process will be suspended, and the process will be added to the corresponding process blocking queue of the buffer, When a trigger cycle has elapsed, the delay trigger will activate the suspended process, which re-reads the message from the buffer queue.

4) When a process writes a message to the buffer, if the buffer queue is full, the process will be suspended, the process state will be converted to a waiting state, and the process will be added to the blocking queue of the corresponding process; If the queue is not full, the message is added to the end of the buffer queue.

Health monitoring management realizes resource sharing between user partitions and health monitoring partitions by using the underlying network communication based on data distribution services. The health monitoring management adopts the publish/subscribe model, transmits data based on topics, repackages the underlying communication interface, shields the physical layer implementation, and combines the APEX interface in the partition to take the user partition as the topic publisher and the health monitoring partition as the topic subscriber , which automatically transmits data through middleware to achieve functional scalability and low coupling.

The health monitoring management is set to the suspended state; when the user program obtains error codes such as timeout or stack exception, the corresponding error information in the XML configuration file is obtained through the hash mapping function; the corresponding port is obtained through the queue port name, based on the data distribution service The error transfer function sends the corresponding error information to the health monitoring partition, and the health monitoring partition is responsible for displaying the error information and saving the error information to the local; The error handling function enters the running state, thereby implementing user-defined error handling procedures.

It should be noted that, in the embodiment of the present invention, in order to better assist the health monitoring management to perform real-time monitoring of the partition and obtain error information, the following two measures are adopted in the embodiment of the present invention:

1) Using high-precision clock synchronization technology to reduce the delay between partitions and improve synchronization accuracy. Through the analysis of the high-precision clock protocol, the clock synchronization software is designed from the real-time acquisition of the timestamp and the design of the precise clock. By using the high-precision timer inside the operating system as the clock source, by setting the offset timestamp and delay time Offset correction and delay correction are performed on the clock source by stamping, so as to complete the design of a high-precision clock synchronization system.

2), using the stack real-time monitoring program to provide stack-based fault handling. The initialization stack size of the user partition is obtained by parsing the XML configuration file. When the user program is running, the stack space size applied by the program is compared with the stack size of the initialization partition to complete the static stack monitoring; by real-time recording and maintaining the current user program location The stack top pointer and stack bottom pointer of the space, plus the offset of the user program, realize real-time dynamic stack monitoring. Finally, the real-time stack information of the currently running task is obtained through the real-time stack monitoring program, and it is output to the local file for subsequent error status analysis.

To sum up, an embodiment of the present invention provides a virtual ARINC 653 simulation verification platform, including: partition management, used for creating multiple partitions according to an XML configuration file, and performing partition configuration on the multiple partitions; rotating according to a time window A plurality of the partitions are scheduled in a manner of preemption by priority, and a plurality of processes included in the partitions are scheduled according to the priority preemption method; communication management is used to complete the sampling port and the queue port according to the shared memory mechanism and the partition configuration. The communication between the partition and the partition; the communication between the processes in the partition is completed based on the blackboard and the cache; the health monitoring management is used to receive the error code sent by the partition, and call according to the error code The processing function corresponding to the error code performs error processing. The partition management included in the platform is set by the affinity of the Windows system, and the CPU resources are flexibly configured according to the real-time requirements of tasks, ensuring the priority execution of real-time tasks, and realizing real-time performance; communication management is established by shielding the specific implementation of the bottom layer for the communication layer. Interface virtual mapping realizes communication virtualization and portability; health monitoring management ensures the stable transmission of fault information through the data distribution service based on the publish/subscribe model, and enhances the fault handling capability of the virtual simulation platform.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flows of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

Although preferred embodiments of the present invention have been described, additional changes and modifications to these embodiments may occur to those skilled in the art once the basic inventive concepts are known. Therefore, the appended claims are intended to be construed to include the preferred embodiment and all changes and modifications that fall within the scope of the present invention.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit and scope of the invention. Thus, provided that these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims (10)

1. A virtual ARINC653 simulation verification platform, comprising:

the partition management is used for creating a plurality of partitions according to the XML configuration file and performing partition configuration on the plurality of partitions; scheduling the plurality of partitions according to a time window rotation mode, and scheduling a plurality of processes included in the partitions according to a priority preemption mode;

the communication management is used for completing the communication between the partitions based on the sampling ports and the queue ports according to a shared memory mechanism and the partition configuration; completing communication between the processes in the partitions based on the blackboard and the cache;

and the health monitoring management is used for receiving the error codes sent by the partitions and calling the processing functions corresponding to the error codes according to the error codes to perform error processing.

2. The validation platform of claim 1, wherein the partition comprises a source port, a destination port, a queue, and a shared memory; wherein the source port adopts a sampling queue mode or a sampling mode; the destination port adopts a sampling queue mode or a sampling mode;

and the partition management is used for establishing a mapping relation among a source, a destination and a channel according to the XML configuration file.

3. The validation platform of claim 1, wherein the partition management is further configured to set a master time frame, the master time frame including a plurality of the time windows, a run period and a schedule period for each of the partitions being determined from the master time frame, each of the partitions occupying one or more of the time windows within the master time frame;

when the time window of the first partition operation is determined to be finished, stopping operating the process in the first partition, allocating CPU resources for a second partition, and operating the process in the second partition; wherein the next running partition of the first partition is the second partition.

4. The validation platform of claim 3, wherein the partition management is further to:

establishing Hash mapping of each partition ID and the partition state, and scheduling the process included in the second partition if the state of the second partition is NORMAL when a process scheduling instruction is received;

when a plurality of the processes with the same priority are included in one partition, scheduling the processes according to a first-in first-out algorithm; or

When a plurality of the processes included in one of the partitions have different priorities, allocating a time slice and the CPU resource to the process having the highest priority; wherein the time window comprises a plurality of the time slices.

5. The verification platform of claim 1, wherein the communication management is to:

the queue port is used for storing the received message to be sent in a message queue according to a first-in first-out mode; when the process sends the message to be sent from the queue port, a shared memory is applied first, and the message to be sent is added to the tail of the message queue;

when the process reads the message from the queue port, setting a delay trigger, and when the message is determined to be non-empty, reading a first message to be sent included in the message queue and deleting the first message to be sent from the message queue; or when the message queue is determined to be empty, converting the state of the process into a waiting state, and after a trigger period, reading the message to be sent from the queue port by the process.

6. The verification platform of claim 1, wherein the communication management is to:

the process is used for storing the message to be sent in a shared memory in a mode of covering the received message to be sent with the previous message to be sent, and when the process sends the message to be sent from the sampling port, the process firstly applies for a shared memory and adds the message to be sent into the shared memory;

when the process reads the message from the sampling port, a delay trigger is set, and when the shared memory is determined to be non-empty, the message to be sent of the shared memory is read; or when the shared memory is determined to be not, converting the state of the process into a waiting state, and after a trigger period, reading the message to be sent from the sampling port by the process.

7. The verification platform of claim 1, wherein the communication management is to:

when the process reads the message from the blackboard, if the blackboard is not empty, reading the existing message from the blackboard;

when the message is written into the blackboard, if the blackboard is not empty, the received message covers the existing message on the blackboard; or if the blackboard is empty, writing the received message into the blackboard;

when the process reads the message from the buffer queue, if the buffer queue is not empty, reading a first message of the buffer queue, and deleting the first message from the buffer queue;

when the process writes messages into the buffer queue, if the buffer queue is full, the process state is converted into a waiting state; or if the buffer queue is not full, adding the message to the tail of the buffer queue.

8. The verification platform of claim 7, wherein the communication management is further to:

when the process reads the message from the blackboard, a delay trigger is set, if the blackboard is empty, the state of the process is converted into a waiting state, and after one trigger period, the process reads the message from the blackboard;

and when the process reads the message from the buffer queue, setting a delay trigger, and if the buffer queue is empty, after a trigger period, the process reads the message from the buffer queue.

9. The verification platform of claim 1, wherein the health monitoring management is specifically to:

receiving an error code sent by the partition, displaying the error code and storing the error code;

and activating an error handle which is created by the user partition and set to be in a suspended state, so that the user partition confirms an error processing function according to the error handle and processes error processing in the running state of the error processing function.

10. The validation platform of claim 9, wherein the error code is a timeout or a stack exception error code and hash mapping function obtained from an XML configuration file;

the XML configuration file is created for the user partition, and the error code is included in the XML configuration file.

Images