22 min read

Challenges Building Safe Multicore Systems

By Tim Loveless | Principal Solutions Architect on Jun 15, 2020 8:12:09 AM

_______________

At the time of writing, no multicore safety critical software systems exist. That is, no system that utilizes a multi-core processor to execute multiple applications in parallel has been certified for flight by the Federal Aviation Administration (FAA) in the US or by the European Union Aviation Safety Agency (EASA). As such, safety critical avionics systems are missing out on the advances in compute performance, power consumption, and miniaturization enjoyed by laptop, smartphone, and internet users worldwide.

Topics: Multicore Safety TC-16/51 CAST-32A Certification MCP embedded systems hardware development hardware interference software certifications DO-178
3 min read

Best Real-Time Operating System (RTOS) Vendors (2020)

By James Deutch | Principal Field Applications Engineer on May 8, 2020 2:16:17 PM

 _______________

Lynx Software Technologies has built and supported real-time operating systems (RTOSes) since 1988. We have witnessed hardware and embedded software technologies evolve and have supported our customers through the design, development, integration, certification, deployment, and support of software systems across mission-critical applications in avionics, industrial, automotive, medical, and other markets. We talk with many different companies across these markets every year. Over time, we have learned that— depending on the type of system being built—our technologies and products may not always provide the best fit. And that’s OK.

We want you to choose Lynx products because they make the most sense for your project and understanding your options is critical to that process.

It is not uncommon for companies to ask us, "If we were to not use your products, who would you recommend?" Therefore,  with our customers in mind—and with a sincere respect to the companies listed below—here is a list of who we regard as our most solid competitors in the safety-critical embedded systems space, in alphabetical order.

Topics: Safety Certification rtos embedded systems real-time Technical Blog
19 min read

What Is A Separation Kernel?

By Tim Loveless | Principal Solutions Architect on Mar 22, 2020 12:02:33 PM

_______________

Having built both separation kernels and real-time operating systems—and supported customers using both across a wide range of industries—we are familiar with the pros and cons of each software technology, as well as their security, safety, reliability, and adaptability impact on complex system designs. Yet despite providing strong security and safety benefits and being the foundation of some of the world’s largest mission-critical systems, separation kernels remain largely unknown and poorly understood. In this article, we hope to:

  1. Bring some clarity to the topic of separation kernels vs. real-time operating systems (RTOSes) and embedded hypervisors
  2. Discuss the benefits and drawbacks of using a separation kernel as the software foundation of your embedded systems design
  3. Introduce LynxSecure®, our own separation kernel
Topics: Safety Certification MCP Least Privilege Systems Architecture Security Trusted Codebase architecture linux rtos embedded systems hardware vulnerabilities development real-time LynxSecure separation kernel hypervisors virtualization
3 min read

Field Notes: Safety-Critical Systems Symposium 2020

By Tim Loveless | Principal Solutions Architect on Feb 24, 2020 12:34:50 PM

_______________

Topics: Multi-core Avionics Demo Cache-partitioning Lynx MOSA.ic™ Events FAA Safety TC-16/51 CAST-32A Certification MCP Systems Architecture Cache Allocation Technology embedded systems hardware development Technical Blog Standards
4 min read

TC-16/51: Adding Bottom Up Interference Analysis for MCPs

By Mark Brown | Systems Architect on Jan 28, 2020 2:20:00 PM

_______________

I hadn't heard of "bottom up" avionics certification before I read FAA's TC-16/51.  But now, looking back at it, I think the authors from Thales Avionics, including Xavier Jean, PhD, proposed a big change in perspective.  In their own words, here's their proposal to add "bottom up" analysis to aircraft safety certifications on Multi-Core Processors (MCP):

Topics: Multi-core Avionics FAA Safety TC-16/51 CAST-32A Certification MCP Systems Architecture rtos embedded systems partitioning hardware development real-time Technical Blog
5 min read

Lynx & ENSCO Demonstrate Avionics Solutions at DSEI JAPAN 2019

By Dan Westerberg | Senior Systems Engineer on Nov 18, 2019 2:29:00 PM

_______________

The most formidable challenges of modern avionics development programs are often centered around the safety certification process and the corresponding requirements and costs. Equally as challenging to any large development program are the design and implementation phases where the software application comes to life as it is realized on the target system environment. These phases can be compromised by:

Topics: Multi-core Avionics Demo Lynx MOSA.ic™ FAA Safety Certification MCP Systems Architecture embedded systems development real-time
7 min read

Overarching Properties: An Alternative to DO-178

By Tim Loveless | Principal Solutions Architect on Nov 16, 2019 10:20:00 AM

_______________

Overarching Properties—an alternative design assurance approach to DO-178C—marks the biggest change in airborne software safety certification since DO-178B was unveiled in 1992. Intended to be more efficient and flexible than DO-178C, the approach was introduced as DO-178C and the Overarching Properties Initiative during FAA Chief Scientist George Romanski’s keynote address at the High Integrity Software Conference in Bristol, United Kingdom (UK).

Topics: Avionics FAA Safety Certification
6 min read

Realizing modern Automotive Software Environments

By Chris Barlow | Technical Product Manager on Oct 9, 2019 2:17:00 PM

_______________

The complexity of today’s automobiles is increasing with every new model on the market.  A modern car can contain hundreds of electronic control units and with connectivity and autonomy becoming commonplace, this is increasing dramatically as we enter the 2020s.  Many of these systems up until a few years ago have safely run on microcontrollers on an unsecured vehicle network, and this has been fine; the networks were ‘air-gapped’ from the rest of the world, and the risk of a malicious attacker causing any kind of danger to a car’s occupants by directly plugging in a new device was as likely as someone cutting the brake lines.  The automotive industry on the whole were happy with this risk.

Topics: Multi-core Demo Lynx MOSA.ic™ Safety Certification MCP Systems Architecture rtos embedded systems partitioning development real-time Technical Blog Automotive
12 min read

What is the Cost of a Board Support Package?

By Tim Loveless | Principal Solutions Architect on Oct 1, 2019 10:35:00 AM

_______________

Topics: Multicore Certification MCP embedded systems TCO hardware development BSPs board support costs
4 min read

What is a Reusable Software Component?

By Whitfield Thomas | Content Manager on Mar 11, 2019 10:45:00 AM

_______________

A DO-178B/C Reusable Software Component (RSC) is a software collection that is recognized as meeting the requirements of RTCA/DO-178B/C and that may be used on more than one project without having to regenerate certification artifacts.

The FAA grants RSC acceptance as part of a normal certification process, provided that the applicant complies with the guidance policy defined in FAA Advisory Circular AC 20-148. The acceptance allows future users of the DO-178B/C RSC to deploy the software without the added cost and risk of re-certification. This applies to components such as operating systems and networking protocols, that can then be reused (in unadulterated form) across hardware platforms. 

Why is a Reusable Software Component Important?

All software developers reuse what they create. But compliance with DO-178B/C makes reuse difficult because it often requires expensive re-certification efforts. Until now, there was no standard approach to reuse of safety-critical software.

Is It Just a Set of Artifacts?

The LynxOS-178® RSC is more than just a set of DO-178B/C artifacts. In fact the RSC follows the guidance of AC 20-148 by addressing the most difficult and critical areas of certification: integration with multiple applications at various levels of DO-178B/C criticality. The documentation set includes a detailed partitioning and interface analysis that focuses on time, space and resource partitioning as well as timing margin analysis so developers can allocate budgets to use of operating system services. The set of RSC guidance documentation includes requirements, design data, test suites and coverage analysis to meet DO-178B/C requirements.

LynxOS-178 RSC for DO-178B/C Certification

The LynxOS-178 RTOS is the first and only time and space-partitioned, FAA-accepted RSC. LynxOS-178 offers the interoperability benefits of POSIX® along with support for the ARINC 653 APplication EXecutive (APEX). The LynxOS-178 RSC is designed to be hardware-agnostic, so no changes are required to move the RSC onto other hardware platforms. The LynxOS-178 RSC acceptance applies to a family of PowerPC® processors, including the PPC 75x, 74xx. 4xx, 603 and IBM 970.

Economic Benefits of the RSC for Embedded Projects

The economic value of an RSC lies in its ability to do three things:

  1. Reduce engineering labor
  2. Reduce program risk
  3. Reduce cost

When an RSC is properly verified using the foresight of future use, then it is possible to perform verification to most DO-178B/C objectives and not have to revisit these activities if the RSC is not modified in future projects. The LynxOS-178 RSC provides integrators with guidance on how to integrate the RSC into applications and retain certification credit for the RSC.

More importantly, the LynxOS-178 RSC artifacts provide “educational value” to the integrator that reduces engineering labor. This educational value is provided in the form of written guidance and tests that help the integrator assimilate their applications on top of the LynxOS-178 RSC in a timely manner.

This educational value of the LynxOS-178 RSC artifacts provides integrators with a savings of 3-6 months of engineering labor over conventional DO-178B/C artifacts. This learning economy can be consistently applied in future projects. The LynxOS-178 RSC also reduces program risk by focusing certification audits where they should be focused: on the DO-178B/C objectives that remain to be satisfied and the integration of the component into an application.

With a standard set of DO-178B/C artifacts, a certification auditor can examine any part of the artifacts, even those areas that have been examined by someone else. On many occasions, developers who envision low risk with submission of standard DO-178B/C artifacts have found themselves the subject of auditors’ qualitative interpretations that result in added explanations, action items and even additional verification work resulting in a prolonged project schedule.  An auditor’s job is to scrutinize results closely and aggressively find weaknesses in the verification process. Very often it’s impossible to get through an audit the first time, even if the software has been approved before.

The RSC concept avoids this dilemma by focusing the engineering and auditing effort on software integration, not previously verified operating system functions such as message queues.

Lynx Software Technologies’ LynxOS-178 RSC acceptance can provide integrators with a savings of 6-9 months of schedule risk over conventional DO-178B/C artifacts.  This risk economy can be consistently applied in future projects. Lastly, the value of the LynxOS-178 RSC is to reduce overall cost to our customers. Lynx Software Technologies’ LynxOS-178 real-time operating system comprises approximately 60,000 lines of code.

The effort to verify a time- and space-partitioned operating system of this size is tens of person-years of effort.  The concept is simple; an accepted RSC that meets DO-178B/C objectives saves the integrator the cost of verification of an operating system.

Leverage the RSC for Your Embedded Project

Lynx has over 30 years’ experience in helping customers across avionics, automotive, and industrial markets to realize the benefits of software reuse for their complex safety- and security-critical embedded software systems. To learn more about how to leverage a Reusable Software Component (RSC) for your next project, please direct your inquiries to inside@lynx.com or fill out the form linked to the button below, and a representative will reach out to you within 1-2 business days.

GET STARTED

Topics: Avionics Multicore FAA Safety Certification MCP Trusted Codebase architecture rtos embedded systems TCO TTM partitioning development real-time POSIX® costs rsc reusable software