Mission modes for safety critical Java

Authors:
Martin Schoeberl
Affiliations:
Institute of Computer Engineering, Vienna University of Technology, Austria
Venue:
SEUS'07 Proceedings of the 5th IFIP WG 10.2 international conference on Software technologies for embedded and ubiquitous systems
Year:
2007

Citing 5
Cited 1

The Real-Time Specification for Java

The Real-Time Specification for Java
Ravenscar-Java: a high integrity profile for real-time Java

JGI '02 Proceedings of the 2002 joint ACM-ISCOPE conference on Java Grande
The Ravenscar Tasking Profile for High Integrity Real-Time Programs

Ada-Europe '98 Proceedings of the 1998 Ada-Europe International Conference on Reliable Software Technologies
A Profile for High-Integrity Real-Time Java Programs

ISORC '01 Proceedings of the Fourth International Symposium on Object-Oriented Real-Time Distributed Computing
A Profile for Safety Critical Java

ISORC '07 Proceedings of the 10th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing

Safety-critical Java level 2: motivations, example applications and issues

Proceedings of the 11th International Workshop on Java Technologies for Real-time and Embedded Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

Java is now considered as a language for the domain of safety critical applications. A restricted version of the Real-Time Specification for Java (RTSJ) is currently under development within the Java Specification Request (JSR) 302. The application model follows the Ravenscar Ada approach with a fixed number of threads during the mission phase. This static approach simplifies certification against safety critical standards such as DO-178B. In this paper we extend this restrictive model by mission modes. Mission modes are intended to cover different modes of a real-time application during runtime without a complete restart. Mission modes are still simpler to analyze with respect to WCET and schedulability than the full dynamic RTSJ model. Furthermore our approach to thread stopping during a mode change provides a clean coordination between the runtime system and the application threads.