The shift towards Smart Manufacturing Systems has led to the digital transformation era, leveraging various technologies to drive enhanced productivity and production efficiency. In addition, the digitalization of the manufacturing industry makes extensive use of industrial information systems to support technical and business operations throughout a product’s lifecycle. However, evidence highlights the financial and environmental costs incurred by creating and maintaining digital models, which threaten an organization’s sustainability. Therefore, in this thesis, it is believed that alternative revenue sources emerging from monetizing repurposed knowledge embedded into digital models will serve as enablers to sustainability while promoting industrial innovation through collaborative ecosystems of partners where the focus is on the mutual exchange of value. This thesis emphasizes the process planning task entirely, and it aims to investigate two main areas, the former involving a bibliographic analysis of business models associated with the servitization of the manufacturing industry within value co-creation environments, along with their corresponding technical enablers and requirements, while the latter focusing on identifying the stages in which company knowledge and expertise is embedded into digital models. A series of case studies in collaboration with a major Swedish manufacturing company revealed process planning experts’ workflows, challenges, and opportunities to improve the company’s current services. The analysis and comparison of the two use cases indicated two discrete types of process planning workflows that are assumed to apply in different production systems. Furthermore, an attempt has been made to correlate process planning to business modeling by suggesting several conceptual digital products and services that can enhance the company’s existing offerings’ functionality. The corresponding value propositions of the proposed digital offerings have been formulated. The proposed conceptual digital offerings have been validated together with the involved organization. At this stage, further improvements and validation are needed to justify the feasibility of the proposed business model framework and digital offerings. However, further developments and compliance of industrial information system providers with information standards can potentially enable business innovation through collaboration in the manufacturing industry. / Skiftet mot Smarta tillverkningssystem är en del av den digitala omvandling, där olika teknologier utnyttjas för att öka produktivitet och effektivitet inom produktion. Digitaliseringen av tillverkningsindustrin leder dessutom till en omfattande användning av industriella informationssystem för att stödja tekniska och affärsmässiga operationer genom en produkts hela livscykel. Dock innebär skapande och underhåll av digitala modeller ekonomiska och miljömässiga kostnader, vilket kan hota en organisations hållbarhet. Därför studeras i denna avhandling de möjliga alternativa inkomstkällor som uppstår från att generera intäkter av den kunskap som finns inbäddad i digitala modeller. Tanken är att detta kommer att fungera som en möjliggörare för hållbarhet samtidigt som de främjar industriell innovation genom industriella ekosystem av partners där fokus ligger på ömsesidigt värdeutbyte. Den här avhandlingen betonar helt och hållet uppgiften med processplanering och syftar till att undersöka två huvudområden; det första innefattar en bibliografisk analys av affärsmodeller associerade med tjänstefieringen av tillverkningsindustrin inom miljöer för sam-skapande av värde, tillsammans med motsvarande tekniska möjliggörare och krav, medan det andra fokuserar på att identifiera de skeden där företagskunskap och expertis är inbäddade i digitala modeller. En serie fallstudier i samarbete med ett stort svenskt tillverkningsföretag visade processplaneringsexperts arbetsflöden, utmaningar och möjligheter att förbättra företagets nuvarande tjänster. Analysen och jämförelsen av de två användningsfallen indikerade två distinkta typer av arbetsflöden för processplanering som antas tillämpas i olika produktionssystem. Dessutom har ett försök gjorts att korrelera processplanering med affärsmodellering genom att föreslå flera konceptuella digitala produkter och tjänster som kan förbättra funktionaliteten i företagets befintliga erbjudanden. Värdepropositionerna för de föreslagna digitala erbjudandena har formulerats. Dessa konceptuella digitala erbjudanden har validerats tillsammans med den studerade organisationen. Nu behövs ytterligare förbättring och validering för att motivera genomförbarheten av det föreslagna affärsmodellsramverket och de digitala erbjudandena. Vidare kan informationsstandarder som underlättar informationsutbyte, och efterlevnad av dessa hos leverantörer av industriella informationssystem, potentiellt möjliggöra affärsinnovation genom ökat samarbete inom tillverkningsindustrin.

Dieser Beitrag untersucht Potenziale des Einsatzes von MBE-Ansätzen bei der Validierung von Fahrerassistenzsystemen. Ziel ist die Untersuchung der Machbarkeit des Aufbaus einer Validierungsumgebung zur Automatisierung von Tests im Rahmen der kontinuierlichen Validierung von Fahrerassistenzsystemen. [... aus der Einleitung]

Contexte : Les systèmes à logiciels prépondérants sont de plus en plus interopérables formant des alliances nommées « Systèmes-des-Systèmes » (SdS). Les applications des SdS peuvent aller des systèmes de gestion du trafic jusqu’aux systèmes de gestion de crises. Étant donné que les SdS supportent souvent des domaines critiques, ils doivent être fiables en traitant les disfonctionnements ou les défauts et en évitant les défaillances qui pourraient causer des dégâts et pertes importantes aux utilisateurs.Problème : Ajuster les opérations d’un SdS dépend d’une spécification précise et une attestation rigoureuse de sa consistance opérationnelle. Cependant, en plus des limitations des langages pour capturer conjointement la structure et le comportement des SdS, les prédictions de la consistance opérationnelle des SdS reposent sur leurs systèmes constitutifs qui ne sont pas totalement connus au moment de la conception. Par conséquent, les SdS ont été développés et déployés sans évaluation de leurs opérations, puisque les langages actuels ne supportent pas ce type de précision lors de l’évaluation. Objectif : Cette thèse fournit des solutions théoriques et pratiques basées sur un langage formel de description d’architectures pour supporter une évaluation précoce des opérations du SdS par rapport à la structure et le comportement du SdS à travers les simulations. Contributions : Les contributions essentielles de ce projet comprennent (i) une approche de transformation des modèles pour produire automatiquement des modèles de simulation à partir des descriptions des architectures logicielles du SdS, combinant la description structurelle et comportementale du SdS dans la même solution, (ii) une méthode d’évaluation de l’architecture logicielle du SdS pour la prédiction des opérations du SdS tout en considérant les changements inhérents qui peuvent se produire, (iii) la modélisation de l’environnement et la génération automatique des générateurs de stimulus pour soutenir la simulation des SdS, livrant des données pour nourrir tel simulation, et (iv) une méthode pour la synchronisation automatique entre l’architecture descriptive d’exécution (qui change à l’exécution par suite de l’architecture dynamique) et son architecture prescriptive d’origine basée sur des mécanismes de découverte et de récupération de modèles et une transformation de modèle à l'envers.Évaluation : Nous avons conduit des cas d’études pour évaluer nos approches en utilisant le SdS de surveillance des inondations et le SdS d’espace.Résultats : Notre approche montre une précision importante pour (i) produire des simulations des architectures logicielles des SdS sans failles et complètement opérationnelles, (ii) supporte une évaluation et une prédiction fiable des opérations du SdS à la phase de conception, (iii) génère de manière automatique des générateurs de stimuli pour soutenir et nourrir l’exécution de la simulation et (iv) maintien la synchronisation entre les versions descriptives et prescriptives de l’architecture du SdS.Conclusion : Nous avons conclu que les approches proposées font évoluer l’état de l’art de l’évaluation des architectures logicielles des SdS en offrant des solutions pour prédire l’efficacité des opérations du SdS pour maintenir une opération continue malgré les changements architecturaux, fournissant plus de confidence aux utilisateurs qui reposent dans l’avenir sur les services du SdS. / Context: Software-intensive systems have been increasingly interoperated forming alliances termed as “Systems-of-Systems” (SoS). SoS comprises a collection of systems joined to achieve a set of missions that none of the systems can individually accomplish. Each constituent system keeps its own management, goals, and resources while coordinating within the SoS and adapting to meet SoS goals. Applications of SoS range from traffic control to emergency response and crisis management. As SoS often support critical domains, such systems must be trustworthy by dealing with malfunction or defects and avoiding failures that could cause extensive damage and losses to the users.Problem: Correct SoS operations depend on a precise specification of the SoS structure and a rigorous attestation of its behaviors. However, besides limitations on languages to jointly capture SoS structure and behavior, predictions on the SoS emergent behaviors rely on constituent systems not totally known at design-time. Therefore, SoS have been developed and deployed without evaluating their operation, since current languages do not support such precision in evaluation.Objectives: This PhD project provides solutions founded on a formal architectural description language to support an early evaluation of SoS behaviors regarding its inherent SoS structure and dynamics through simulations.Contribution: The main contributions of this project comprise (i) a model transformation approach for automatically producing simulation models from SoS software architecture descriptions, combining SoS structure and behavior description in a same solution, (ii) a SoS software architecture evaluation method for SoS operation prediction considering the inherent changes that can occur, (iii) environment modeling and automatic generation of stimuli generators to sustain the SoS simulation, delivering data to feed such simulation, and (iv) a method for the automatic synchronization between the runtime descriptive architecture (changed at runtime due to dynamic architecture) and its original prescriptive architecture based on model discovery and recovery mechanisms and a backward model transformation.Evaluation: We conducted case studies to assess our approaches using Flood Monitoring SoS and Space SoS.Results: Our approaches show a high accuracy to (i) produce fault-free and operational simulations for SoS software architectures, (ii) support a reliable evaluation and prediction of SoS operation at design-time, (iii) automatically generate stimuli generators to sustain and feed the simulation execution, and (iv) maintain the synchronization between descriptive and prescriptive versions of the SoS architecture.Conclusions: We concluded that the proposed approaches advance the state of the art in SoS software architecture evaluation by offering solutions to predict the SoS operations effectiveness to maintain a continuous operation despite architectural changes, providing more trust for users that in the future shall rely on SoS services.

Na busca de maior flexibilidade, agilidade, reuso e consequente redução de custos, esforços tem sido direcionados no sentido de desenvolver métodos e ferramentas de engenharia de sistemas baseados em modelos. Apesar dos avanços recentes, as tecnologias disponíveis ainda despertam dúvidas em relação à sua aplicação prática e seus benefícios. Os maiores obstáculos estão contidos na dificuldade da integração entre ferramentas e troca de informações entre artefatos de diferentes disciplinas. Com o objetivo de comparar a Engenharia Centrado em Documentação (ferramentas CAx) com a Engenharia de Sistemas Baseada em Modelos (MBSE), esse trabalho utilizou um domínio industrial real para extrair, analisar e comparar dados quantitativos e qualitativos do projeto de engenharia. Foi desenvolvido um método de engenharia baseada em modelos com o uso da ferramenta Eclipse para a comparação com o método de engenharia vigente. A linguagem ModelicaML foi utilizada para criar os modelos abstratos enquanto que a ferramenta COMOS® da Siemens® foi utilizada para a realização dos artefatos técnicos multidisciplinares do domínio em estudo. O software OpenModelica foi utilizado para simular o comportamento do sistema a partir da transformação do modelo abstrato para código Modelica com o uso de software escrito em Java. Os dados de engenharia e de gerenciamento do projeto do Sistema de Circulação de Água foram disponibilizados pela General Electric Inspection Technologies GmbH e foram utilizados para a comparação entre os dois métodos analisados. Os testes demonstraram que as ferramentas MBSE necessitam de refinamento, principalmente quando conectam os modelos abstratos às plataformas de execução de projetos. Em contrapartida, MBSE se mostrou uma excelente ferramenta na comunicação entre equipes multidisciplinares, pois proporciona uma linguagem de representação de sistemas abstrata e abrangente. A interligação dos modelos abstratos desenvolvidos em ModelicaML com a plataforma de simulação usando linguagem Modelica foi fundamental na análise e melhor compreensão dos fenômenos envolvidos no processo técnico propiciando um importante avanço na antecipação da detecção de erros em projetos de sistemas de automação. / Achieving more flexibility, agility, reuse and consequently cost reduction in scope of Systems Engineering is an industrial need. In that sense, efforts have been driven to develop Model-Based Systems Engineering tools and methods. Despite of recent progress, there are still doubts in terms of the practical use and benefits. The main issues are related to tool integration and exchange of information between multidisciplinary artifacts. This project is intended to compare Document-Based Engineering (CAx tools) and Model-Based Systems Engineering (MBSE) in scope of Industrial Automation using a real domain. Therefore, a MBSE methodology was developed centered on the Eclipse tool. The ModelicaML language was used to perform abstract modeling while COMOS® from Siemens® was used to develop the multidisciplinary artifacts necessary for the domain under investigation. Furthermore, the OpenModelica environment was used to simulate system and component behavior using object codes generated by a Java tool from the abstract models. The engineering and project management data of the Water Circulation System were made available by General Electric Inspection Technologies GmbH, which served as the case study for this comparison. Tests have shown that the tools involved on this investigation still need further development concerning maturity and exchange of information from abstract models down to domain models. On the other hand, MBSE has proven to be an important tool to match different team approaches and concerns helping on communication using conceptual-wide and abstract symbols. Connecting abstract models from ModelicaML to a simulation environment using Modelica language have been proven to be an important approach to better understand systems behavior and provided an analysis environment for early detection of errors and failures.

Na busca de maior flexibilidade, agilidade, reuso e consequente redução de custos, esforços tem sido direcionados no sentido de desenvolver métodos e ferramentas de engenharia de sistemas baseados em modelos. Apesar dos avanços recentes, as tecnologias disponíveis ainda despertam dúvidas em relação à sua aplicação prática e seus benefícios. Os maiores obstáculos estão contidos na dificuldade da integração entre ferramentas e troca de informações entre artefatos de diferentes disciplinas. Com o objetivo de comparar a Engenharia Centrado em Documentação (ferramentas CAx) com a Engenharia de Sistemas Baseada em Modelos (MBSE), esse trabalho utilizou um domínio industrial real para extrair, analisar e comparar dados quantitativos e qualitativos do projeto de engenharia. Foi desenvolvido um método de engenharia baseada em modelos com o uso da ferramenta Eclipse para a comparação com o método de engenharia vigente. A linguagem ModelicaML foi utilizada para criar os modelos abstratos enquanto que a ferramenta COMOS® da Siemens® foi utilizada para a realização dos artefatos técnicos multidisciplinares do domínio em estudo. O software OpenModelica foi utilizado para simular o comportamento do sistema a partir da transformação do modelo abstrato para código Modelica com o uso de software escrito em Java. Os dados de engenharia e de gerenciamento do projeto do Sistema de Circulação de Água foram disponibilizados pela General Electric Inspection Technologies GmbH e foram utilizados para a comparação entre os dois métodos analisados. Os testes demonstraram que as ferramentas MBSE necessitam de refinamento, principalmente quando conectam os modelos abstratos às plataformas de execução de projetos. Em contrapartida, MBSE se mostrou uma excelente ferramenta na comunicação entre equipes multidisciplinares, pois proporciona uma linguagem de representação de sistemas abstrata e abrangente. A interligação dos modelos abstratos desenvolvidos em ModelicaML com a plataforma de simulação usando linguagem Modelica foi fundamental na análise e melhor compreensão dos fenômenos envolvidos no processo técnico propiciando um importante avanço na antecipação da detecção de erros em projetos de sistemas de automação. / Achieving more flexibility, agility, reuse and consequently cost reduction in scope of Systems Engineering is an industrial need. In that sense, efforts have been driven to develop Model-Based Systems Engineering tools and methods. Despite of recent progress, there are still doubts in terms of the practical use and benefits. The main issues are related to tool integration and exchange of information between multidisciplinary artifacts. This project is intended to compare Document-Based Engineering (CAx tools) and Model-Based Systems Engineering (MBSE) in scope of Industrial Automation using a real domain. Therefore, a MBSE methodology was developed centered on the Eclipse tool. The ModelicaML language was used to perform abstract modeling while COMOS® from Siemens® was used to develop the multidisciplinary artifacts necessary for the domain under investigation. Furthermore, the OpenModelica environment was used to simulate system and component behavior using object codes generated by a Java tool from the abstract models. The engineering and project management data of the Water Circulation System were made available by General Electric Inspection Technologies GmbH, which served as the case study for this comparison. Tests have shown that the tools involved on this investigation still need further development concerning maturity and exchange of information from abstract models down to domain models. On the other hand, MBSE has proven to be an important tool to match different team approaches and concerns helping on communication using conceptual-wide and abstract symbols. Connecting abstract models from ModelicaML to a simulation environment using Modelica language have been proven to be an important approach to better understand systems behavior and provided an analysis environment for early detection of errors and failures.

Na busca de maior flexibilidade, agilidade, reuso e consequente redução de custos, esforços tem sido direcionados no sentido de desenvolver métodos e ferramentas de engenharia de sistemas baseados em modelos. Apesar dos avanços recentes, as tecnologias disponíveis ainda despertam dúvidas em relação à sua aplicação prática e seus benefícios. Os maiores obstáculos estão contidos na dificuldade da integração entre ferramentas e troca de informações entre artefatos de diferentes disciplinas. Com o objetivo de comparar a Engenharia Centrado em Documentação (ferramentas CAx) com a Engenharia de Sistemas Baseada em Modelos (MBSE), esse trabalho utilizou um domínio industrial real para extrair, analisar e comparar dados quantitativos e qualitativos do projeto de engenharia. Foi desenvolvido um método de engenharia baseada em modelos com o uso da ferramenta Eclipse para a comparação com o método de engenharia vigente. A linguagem ModelicaML foi utilizada para criar os modelos abstratos enquanto que a ferramenta COMOS® da Siemens® foi utilizada para a realização dos artefatos técnicos multidisciplinares do domínio em estudo. O software OpenModelica foi utilizado para simular o comportamento do sistema a partir da transformação do modelo abstrato para código Modelica com o uso de software escrito em Java. Os dados de engenharia e de gerenciamento do projeto do Sistema de Circulação de Água foram disponibilizados pela General Electric Inspection Technologies GmbH e foram utilizados para a comparação entre os dois métodos analisados. Os testes demonstraram que as ferramentas MBSE necessitam de refinamento, principalmente quando conectam os modelos abstratos às plataformas de execução de projetos. Em contrapartida, MBSE se mostrou uma excelente ferramenta na comunicação entre equipes multidisciplinares, pois proporciona uma linguagem de representação de sistemas abstrata e abrangente. A interligação dos modelos abstratos desenvolvidos em ModelicaML com a plataforma de simulação usando linguagem Modelica foi fundamental na análise e melhor compreensão dos fenômenos envolvidos no processo técnico propiciando um importante avanço na antecipação da detecção de erros em projetos de sistemas de automação. / Achieving more flexibility, agility, reuse and consequently cost reduction in scope of Systems Engineering is an industrial need. In that sense, efforts have been driven to develop Model-Based Systems Engineering tools and methods. Despite of recent progress, there are still doubts in terms of the practical use and benefits. The main issues are related to tool integration and exchange of information between multidisciplinary artifacts. This project is intended to compare Document-Based Engineering (CAx tools) and Model-Based Systems Engineering (MBSE) in scope of Industrial Automation using a real domain. Therefore, a MBSE methodology was developed centered on the Eclipse tool. The ModelicaML language was used to perform abstract modeling while COMOS® from Siemens® was used to develop the multidisciplinary artifacts necessary for the domain under investigation. Furthermore, the OpenModelica environment was used to simulate system and component behavior using object codes generated by a Java tool from the abstract models. The engineering and project management data of the Water Circulation System were made available by General Electric Inspection Technologies GmbH, which served as the case study for this comparison. Tests have shown that the tools involved on this investigation still need further development concerning maturity and exchange of information from abstract models down to domain models. On the other hand, MBSE has proven to be an important tool to match different team approaches and concerns helping on communication using conceptual-wide and abstract symbols. Connecting abstract models from ModelicaML to a simulation environment using Modelica language have been proven to be an important approach to better understand systems behavior and provided an analysis environment for early detection of errors and failures.

Throughout the history of software development, advances have been made that improve the ability of developers to create systems by enabling them to work closer to their application domain. These advances have given programmers higher level abstractions with which to reason about problems. A separation of concerns between logic and implementation allows for reuse of components, portability between implementation platforms, and higher productivity. Parallels can be drawn between the challenges that the field of reconfigurable computing (RC) is facing today and what the field of software engineering has gone through in the past. Most RC work is done in low level hardware description languages (HDLs) at the circuit level. A large productivity gap exists between the ability of RC developers and the potential of the technology. The small number of RC experts is not enough to meet the demands for RC applications. Model-based engineering principles provide a way to reason about RC devices at a higher level, allowing for greater productivity, reuse, and portability. Higher level abstractions allow developers to deal with larger and more complex systems. A modeling environment has been developed to aid users in creating models, storing, reusing and generating hardware implementation code for their system. This environment serves as a starting point to apply model-based techniques to the field of RC to tighten the productivity gap. Future work can build on this model-based framework to take advantage of the unique features of reconfigurable devices, optimize their performance, and further open the field to a wider audience. / Master of Science

Context: Software-intensive systems have been increasingly interoperated forming alliances termed as Systems-of-Systems (SoS). SoS comprises a collection of systems joined to achieve a set of missions that none of the systems can accomplish on its own. Each constituent system keeps its own management, goals, and resources while coordinating within the SoS and adapting to meet SoS goals. Applications of SoS range from traffic control to emergency response and crisis management. As SoS often support critical domains, such systems must be correct by dealing with malfunction or defects and avoiding failures that could cause extensive damage and losses to the users. Problem: Correct SoS operations depend on a precise specification and a rigorous attestation of its operational consistency. However, besides limitations on languages to jointly capture SoS structure and behavior, predictions on the SoS operational consistency rely on constituent systems not totally known at design-time. Therefore, SoS have been developed and deployed without evaluating their operations, since current languages do not support such precision in evaluation. Objectives: This thesis provides solutions founded on a formal architectural description language to support an early evaluation of SoS operation regarding SoS structure and behavior by means of simulations. Contribution: The main contributions of this project comprise (i) a model transformation approach for automatically producing simulation models from SoS software architecture descriptions, combining SoS structure and behavior description in a same solution, (ii) a SoS software architecture evaluation method for SoS operation prediction considering the inherent changes that can occur, (iii) environment modelling and automatic generation of stimuli generators to sustain the SoS simulation, delivering data to feed such simulation, and (iv) a method for the automatic synchronization between the runtime descriptive architecture (changed at runtime due to dynamic architecture) and its original prescriptive architecture based on model discovery and recovery mechanisms and a backward model transformation. Evaluation: We conducted case studies to assess our solutions using Flood Monitoring SoS and Space SoS. Results: Our solutions support a high accuracy to (i) produce fault-free and fully operational simulations for SoS software architectures, (ii) support evaluation and prediction of SoS operation at design-time, (iii) automatically generate stimuli generators to sustain and feed the simulation execution, and (iv) maintain the synchronization between the runtime architecture and the intended version of the SoS architecture. Conclusions: We concluded that the proposed solutions advance the state of the art in SoS software architecture evaluation by offering solutions to predict the SoS operations effectiveness to maintain a continuous operation despite architectural changes, providing more trust for users that futurely shall rely on SoS services. / Contexto: Sistemas intensivos em software tem sido interoperados para formar alianças conhecidas como Sistemas-de-Sistemas (SoS). Domínios de aplicação de SoS variam do controle de tráfego ao gerenciamento de situações de crises e emergência. Devido à criticidade destes domínios, tais sistemas precisam ser confiáveis e robustos, lidando com potenciais defeitos e mal funcionamento, e evitando falhas que poderiam causar ameaças à integridade dos usuários. Problema: O funcionamento correto de um SoS depende da especificação precisa e da garantia rigorosa da consistência de suas operações. Entretanto, além das limitações nas linguagens quanto à especificação de ambos estrutura e comportamento do SoS, prever seu comportamento depende da especificação de constituintes que não são totalmente conhecidos em tempo de projeto e de seu comportamento emergente. Neste sentido, SoS têm sido desenvolvidos e implantados sem a devida avaliação de seus comportamentos, uma vez que as linguagens disponíveis atualmente não dão suporte a uma especificação precisa destes comportamentos. Objetivos: Este projeto de doutorado relata avanços teóricos e práticos fundamentados em uma linguagem de descrição arquitetural formal para permitir a predição e avaliação do comportamento e estrutura dos SoS com base em simulações. Contribuições: As principais contribuições deste projeto envolvem (i) uma transformação de modelos para produzir automaticamente modelos de simulação para descrições de arquitetura de software de SoS, combinando estrutura e comportamento em uma mesma solução, (ii) um método de avaliação de arquitetura de software de SoS para prever o comportamento do SoS considerando sua dinâmica inerente, (iii) modelagem do ambiente e derivação automática de geradores de estímulos entregando dados continuamente e sustentando a execução de simulações de SoS, e (iv) um método para promover a sincronização automática entre modelos descritivos e prescritivos de arquitetura de software de SoS baseados em mecanismos de descoberta e recuperação de modelos, e transformação de modelos reversa. Avaliação: Estudos de caso foram conduzidos para avaliar as soluções nos domínios de Monitoramento de Enchentes e Espacial. Resultados: As abordagens propostas exibem alta acurácia no que tange (i) a produzir simulações operacionais e sem falhas para arquiteturas de software de SoS, (ii) ao suporte á avaliação, ainda em tempo de projeto, do comportamento que emerge da operação do SoS, (iii) à derivação automática de geradores de estímulos para entrega contínua de dados e manutenção da execução das simulações geradas, e (iv) à manutenção do alinhamento entre os modelos descritivos e prescritivos da arquitetura do SoS avaliado. Conclusões: Conclui-se que as abordagens propostas avançam o estado da arte no projeto de arquiteturas de Software de SoS ao permitir prever, em tempo de projeto, como o SoS vai operar em tempo de execução, permitindo estabelecer estratégias para manter a simulação rodando, e sua operação contínua, mesmo com as mudanças arquiteturais inerentes ao seu funcionamento, provendo mais confiabilidade para os usuários futuramente dependerão de seus serviços.

Mit zunehmender Komplexität technischer Softwaresysteme ist die Nachfrage an produktiveren Methoden und Werkzeugen auch im sicherheitskritischen Umfeld gewachsen. Da insbesondere objektorientierte und modellbasierte Ansätze und Methoden ausgezeichnete Eigenschaften zur Entwicklung großer und komplexer Systeme besitzen, ist zu erwarten, dass diese in naher Zukunft selbst bis in sicherheitskritische Bereiche der Softwareentwicklung vordringen. Mit der Unified Modeling Language Real-Time (UML-RT) wird eine Softwareentwicklungsmethode für technische Systeme durch die Object Management Group (OMG) propagiert. Für den praktischen Einsatz im technischen und sicherheitskritischen Umfeld muss diese Methode nicht nur bestimmte technische Eigenschaften, beispielsweise temporale Analysierbarkeit, besitzen, sondern auch in einen bestehenden Qualitätssicherungsprozess integrierbar sein. Ein wichtiger Aspekt der Integration der UML-RT in ein qualitätsorientiertes Prozessmodell, beispielsweise in das V-Modell, ist die Verfügbarkeit von ausgereiften Konzepten und Methoden für einen systematischen Modultest. <br><br> Der Modultest dient als erste Qualititätssicherungsphase nach der Implementierung der Fehlerfindung und dem Qualitätsnachweis für jede separat prüfbare Softwarekomponente eines Systems. Während dieser Phase stellt die Durchführung von systematischen Tests die wichtigste Qualitätssicherungsmaßnahme dar. Während zum jetzigen Zeitpunkt zwar ausgereifte Methoden und Werkzeuge für die modellbasierte Softwareentwicklung zur Verfügung stehen, existieren nur wenig überzeugende Lösungen für eine systematische modellbasierte Modulprüfung. <br><br> Die durchgängige Verwendung ausführbarer Modelle und Codegenerierung stellen wesentliche Konzepte der modellbasierten Softwareentwicklung dar. Sie dienen der konstruktiven Fehlerreduktion durch Automatisierung ansonsten fehlerträchtiger, manueller Vorgänge. Im Rahmen einer modellbasierten Qualitätssicherung sollten diese Konzepte konsequenterweise in die späteren Qualitätssicherungsphasen transportiert werden. Daher ist eine wesentliche Forderung an ein Verfahren zur modellbasierten Modulprüfung ein möglichst hoher Grad an Automatisierung. <br><br> In aktuellen Entwicklungen hat sich für die Generierung von Testfällen auf Basis von Zustandsautomaten die Verwendung von Model Checking als effiziente und an die vielfältigsten Testprobleme anpassbare Methode bewährt. Der Ansatz des Model Checking stammt ursprünglich aus dem Entwurf von Kommunikationsprotokollen und wurde bereits erfolgreich auf verschiedene Probleme der Modellierung technischer Software angewendet. Insbesondere in der Gegenwart ausführbarer, automatenbasierter Modelle erscheint die Verwendung von Model Checking sinnvoll, das die Existenz einer formalen, zustandsbasierten Spezifikation voraussetzt. Ein ausführbares, zustandsbasiertes Modell erfüllt diese Anforderungen in der Regel. Aus diesen Gründen ist die Wahl eines Model Checking Ansatzes für die Generierung von Testfällen im Rahmen eines modellbasierten Modultestverfahrens eine logische Konsequenz.<br><br> Obwohl in der aktuellen Spezifikation der UML-RT keine eindeutigen Aussagen über den zur Verhaltensbeschreibung zu verwendenden Formalismus gemacht werden, ist es wahrscheinlich, dass es sich bei der UML-RT um eine zu Real-Time Object-Oriented Modeling (ROOM) kompatible Methode handelt. Alle in dieser Arbeit präsentierten Methoden und Ergebnisse sind somit auf die kommende UML-RT übertragbar und von sehr aktueller Bedeutung.<br><br> Aus den genannten Gründen verfolgt diese Arbeit das Ziel, die analytische Qualitätssicherung in der modellbasierten Softwareentwicklung mittels einer modellbasierten Methode für den Modultest zu verbessern. Zu diesem Zweck wird eine neuartige Testmethode präsentiert, die auf automatenbasierten Verhaltensmodellen und CTL Model Checking basiert. Die Testfallgenerierung kann weitgehend automatisch erfolgen, um Fehler durch menschlichen Einfluss auszuschließen. Das entwickelte Modultestverfahren ist in die technischen Konzepte Model Driven Architecture und ROOM, beziehungsweise UML-RT, sowie in die organisatorischen Konzepte eines qualitätsorientierten Prozessmodells, beispielsweise das V-Modell, integrierbar. / In consequence to the increasing complexity of technical software-systems the demand on highly productive methods and tools is increasing even in the field of safety-critical systems. In particular, object-oriented and model-based approaches to software-development provide excellent abilities to develop large and highly complex systems. Therefore, it can be expected that in the near future these methods will find application even in the safety-critical area. The Unified Modeling Language Real-Time (UML-RT) is a software-development methods for technical systems, which is propagated by the Object Management Group (OMG). For the practical application of this method in the field of technical and safety-critical systems it has to provide certain technical qualities, e.g. applicability of temporal analyses. Furthermore, it needs to be integrated into the existing quality assurance process. An important aspect of the integration of UML-RT in an quality-oriented process model, e.g. the V-Model, represents the availability of sophisticated concepts and methods for systematic unit-testing. <br><br> Unit-testing is the first quality assurance phase after implementation to reveal faults and to approve the quality of each independently testable software component. During this phase the systematic execution of test-cases is the most important quality assurance task. Despite the fact, that today many sophisticated, commercial methods and tools for model-based software-development are available, no convincing solutions exist for systematic model-based unit-testing. <br><br> The use of executable models and automatic code generation are important concepts of model-based software development, which enable the constructive reduction of faults through automation of error-prone tasks. Consequently, these concepts should be transferred into the testing phases by a model-based quality assurance approach. Therefore, a major requirement of a model-based unit-testing method is a high degree of automation. In the best case, this should result in fully automatic test-case generation. <br><br> Model checking already has been approved an efficient and flexible method for the automated generation of test-cases from specifications in the form of finite state-machines. The model checking approach has been developed for the verification of communication protocols and it was applied successfully to a wide range of problems in the field of technical software modelling. The application of model checking demands a formal, state-based representation of the system. Therefore, the use of model checking for the generation of test-cases is a beneficial approach to improve the quality in a model-based software development with executable, state-based models. <br><br> Although, in its current state the specification of UML-RT provides only little information on the semantics of the formalism that has to be used to specify a component’s behaviour, it can be assumed that it will be compatible to Real-Time Object-Oriented Modeling. Therefore, all presented methods and results in this dissertation are transferable to UML-RT.<br><br> For these reasons, this dissertations aims at the improvement of the analytical quality assurance in a model-based software development process. To achieve this goal, a new model-based approach to automated unit-testing on the basis of state-based behavioural models and CTL Model Checking is presented. The presented method for test-case generation can be automated to avoid faults due to error-prone human activities. Furthermore it can be integrated into the technical concepts of the Model Driven Architecture and ROOM, respectively UML-RT, and into a quality-oriented process model, like the V-Model.

Nos travaux se situent au croisement de trois domaines : la sûreté de fonctionnement, l'analysefonctionnelle et l'ingénierie des modèles. Dans l'objectif d'assister les analyses préliminaires desrisques, nous avons proposé d'exploiter les modèles issus de l'analyse fonctionnelle de l'avion. Cesmodèles décrivent les dépendances entre les fonctions qui doivent être réalisées durant une phasede vol. Pour exploiter ces modèles, nous avons introduit la notion d'efficacité qui mesure ledegré de contribution d'une fonction à la réalisation nominale d'une phase de vol. Cette notionest utile pour les analyses de risques car elle permet de formaliser divers cas dedysfonctionnements des fonctions et pour évaluer le niveau de dégradation d'une phase de vol encas de dysfonctionnement d'une ou plusieurs fonctions. Nous avons proposé d'annoter les modèlesissus de l'analyse fonctionnelle avec des informations relatives à l'efficacité des fonctions et à leursdysfonctionnements possibles. En suivant les principes de la transformation de modèles, nousavons étudié les moyens de produire le plus automatiquement possible des modèles utiles auxanalyses de risques à partir des modèles annotés. Les modèles produits sont décrits avec lelangage AltaRica, ils peuvent être analysés avec les outils associés à ce langage afin d'évaluerl'effet du dysfonctionnement de fonctions de l'avion ou de rechercher les combinaisons dedysfonctionnements les plus critiques. L'approche proposée a été appliquée pour analyser lesrisques associés aux fonctions utiles lors du décollage d'un avion. / Our work links three domains: safety, functional analysis and model based engineering. In orderto assist preliminary risk analysis, we have proposed to exploit models developed for functionalanalysis. These models describe dependencies between functions that have to be performed duringa flight phase. To exploit these models, we have introduced the notion of efficiency thatmeasures the degree of contribution of a function to the nominal realisation of a flight phase.This notion is useful for risk analysis because it enables the formalisation of various cases offunction failures and the evaluation of the level of degradation of a flight phase in case offunction failures. We have proposed to annotate functional analysis models with informationrelated with function efficiency and potential function failures. Following the principles of modeltransformation, we have studied the means to produce as automatically as possible models thatcould be used to support risk analysis starting from annotated models. Produced models aredescribed with the AltaRica language, they can be analysed with the tools associated with thislanguage in order to evaluate the effect of function failures or to search for the most criticalcombinations of failures. The approach was applied in order to analyse the risks associated withthe functions used during an aircraft take-off.