10th ESA Workshop on Avionics, Data, Control and Software Systems

18 Oct 2016, 07:25 → 20 Oct 2016, 18:00 Europe/Amsterdam

Newton Conference Center (European Space Research and Technology Centre (ESTEC))

ALAIN BENOIT (ESA-ESTEC), Jørgen Ilstad (ESA/ESTEC), Kjeld Hjortnaes (ESA/ESTEC - Software Systems Division), Philippe Armbruster (ESA/Data Systems Division)

The 10th ADCSS workshop covers topics related to avionics for space applications, in the form of a set of round tables. The workshop acts as a forum for the presentation of position papers followed by discussion and interaction between ESA and Industry and between participants. Each theme part of ADCSS workshops will be first introduced and then expanded by presentations on related developments from technical and programmatic points of view. A round table discussion may follow, concluded by a synthesis outlining further actions and roadmaps for potential inclusion into ESA’s technology R&D plans.

Attendance to the workshop is free of charge. Registration is required via this website not later than October 12th, 2016.

All material presented at the workshop must, before submission, be cleared of any restrictions preventing it from being published on the ADCSS website.

 

 

 

Programme brochure_final.pdf

Slides ADCSS_2016_-_Proceedings_updated12Nov.zip

Tuesday, 18 October

08:30 → 10:00 Registration/coffee

Speaker: Ms Bertilla Sinka (ESA/ESTEC- Data Systems Division)

10:00 → 10:20 Welcome to ADCSS 2016

Speaker: Mr Kjeld Hjortnaes (ESA/ESTEC -Head of Software Systems Division)

Slides 0_-_Welcome.pdf

10:20 → 10:30 Logistics

Speaker: Mr Jørgen Ilstad (ESA/ESTEC-Data Systems Division)

Slides ADCSS_Logistics_issue1.pdf

10:30 → 13:00 Session 1 - SAVOIR STATUS and ONGOING ACTIVITIES

Convener: Mr Jean-Loup TERRAILLON (ESA/ESTEC- Software Systems Division)

10:30 SAVOIR Status/ Reference Architecture

The presentation will introduce the Space Avionics Open Interface (SAVOIR) initiative, the process, the perimeter, the main outputs, the reviews, the way that Savoir documents are used in ESA projects, and the status on the workplan, as an introduction to the following working group specific presentations.

Speaker: Mr Jean-Loup TERRAILLON (ESA/ESTEC- Software Systems Division)

Slides 01-SAVOIR_ADCSS_2016_v0_terraillon.pdf

10:50 SAVOIR-UNION and SAVOIR-MASAIS

The SAVOIR-MASAIS Working Group aims at defining the functional, performance, operational and interface requirements of the Avionics System Reference Architecture Data Storage function and the definition of standard services and interfaces to manage data on-board. The SAVOIR-UNION Working Group aims at defining the functional, performance and interface requirements of the Avionics System Reference Architecture functional links. The status of these two Working Groups supported by TRP activities will be presented.

Speaker: Mr Christophe HONVAULT (ESA/ESTEC- Head of Software Systems Engineering Section)

Slides 02a-SAVOIR-MASAIS_presentation_at_ADCSS_2016.pdf 02b-SAVOIR-UNION_presentation_at_ADCSS_2016.pdf

11:20 Generic OIRD

The presentation will recall the need for a generic OIRD as a way to reduce the variability of our avionics systems with regards to operability. It will present the first draft document, the results of the initial review, and will introduce the way that the document will be modified in order to take into account the results of the review, as well as the plan for applicability.

Speaker: Mr Andrea Accomazzo (ESA/ESOC- Head of Solar and Planetary Missions Division)

Slides 03-SAVOIR_Generic_OIRD_-_ADCSS_2016.pdf

11:40 SAVOIR Handbook

The SAVOIR architecture is now quite established, with a couple of documents that have passed public review and were released during spring 2016. The documentation this far includes descriptions and specifications but there is also a need to have documentation that more describes how to use the functions and features of SAVOIR in real projects. A SAVOIR Data Handling handbook, dealing with functions described in the SAVOIR Functional Reference Architecture document, is now prepared in a first issue. The presentation will describe the contents of the handbook and give a few examples on how to solve problems and open points quite frequently appearing in projects.

Speaker: Mr Torbjörn Hult (RUAG Space)

Slides 04-SAVOIR_handbook_ADCSS2016.pdf

12:00 FDIR Handbook

The need for consolidation of FDIR terminology and methodology was clearly identified at the FDIR special session that was held at ADCSS in 2015. As a follow-up activity, ESA has taken the initiative to create a FDIR handbook, as a first step towards this consolidation, from an explicit multi-disciplinary perspective. This talk will address the scope and foreseen content of the handbook and its relation to past and present R&D activities and experiences gained from ESA projects. We present the work plan and the approach to gain maturity and momentum of the handbook, in the context of SAVOIR and ECSS.

Speaker: Mr Marcel Verhoef (ESA/ESTEC- Software Systems Division)

Slides adcss_fdirhb_18102016.pdf

12:20 Electronic Data Sheets

The CCSDS is developing a standard set of communication services to support the onboard applications which are in turn supported by communication protocols. The idea of “plug and play” avionics units is a major goal while enabling use of standard building blocks and reuse. A major step in this direction is through the definition of Electronic Data Sheets (EDS). The presentation will address the current status of the international standardisation, the activities in ESA and a view of future steps.

Speaker: Ms Maria Hernek (ESA/ESTEC- Head of Flight Software Systems Section)

Slides 06-ADCSS_EDS_presentation(3).pdf

12:40 Generic RTU specification

The SAVOIR initiative has the final mission to achieve standardization and harmonization of Space products in Europe. The goal is pursued by means of technical notes, product specifications and handbooks. In term of product specifications after the Generic OBC Specification ( SAVOIR-GS-001) and Flight Computer Initialisation Sequence Generic Specification (SAVOIR-GS-002) , issued as final version in 2016 after a public review, the Savoir Advisory Group is currently involved in the finalization of a SAVOIR RTU Functional and Operability Requirements. The Remote Terminal Unit (RTU) is an Avionics building blocks that provides functions such as collection of housekeeping data, commanding of pulse commands, interfacing to sensors & actuators, and in general to devices which do not have a direct link to the OBC via the spacecraft command & control bus. The presentation will give an overview of the current status of the specification.

Speaker: Mr Giorgio Magistrati (ESA/ESTEC-Head of On-Board Computers&Data Handling Section)

Slides 07-SAVOIR-RTU_presentation_at_ADCSS_2016_18102016.pdf

13:00 → 14:00 Lunch Break

14:00 → 15:40 Session 2: Results of the ESA Technology Harmonisation Meetings

Convener: Mr Jean-Loup TERRAILLON (ESA/ESTEC-Software Systems Division)

14:00 The ESA Technology Harmonisation Process

Speaker: Mr Edmund Williams (ESA/ESTEC- Head of Technology Planning Section)

Slides HarmoOverview-ADCSS_2016_rev14Oct.pdf

14:20 Avionics roadmap

Out of the subsequent Harmonisation roadmap, the main areas of research will be presented, with highlights on the activities that have received the highest priorities, in order to show the trends in avionics R&D at system level. The following sectorial presentations will address the domain of the specific disciplines of avionics.

Speaker: Mr Jean-Loup TERRAILLON (ESA/ESTEC- Software Systems Division)

Slides Avionics_Roadmap_ADCSS_2016.pdf

14:40 Data handling roadmap

In 2016, a new cycle of technology harmonisation activities took place for several avionics technology areas. ESA, in collaboration with the Technology Harmonisation Advisory Group (THAG), has established a new R&D roadmap for Data Systems and On-Board Computers (DSOBC) technologies covering the 2016-2023 timeframe. Data Systems and On-board Computers encompass a vast range of functional blocks that include Telecommand and Telemetry Modules, On-Board computers, Data Storage and Mass memories, Remote Terminal Units, Communication protocols, Busses and Wireless Technologies for P/F. These elements are common to all projects and are subject to a demanding set of evolving requirements from Science, Exploration, Earth Observation and Telecom missions. In this presentation an overview of the new harmonised roadmap for DSOBC architecture, building blocks , interfaces and technologies will be presented. Key elements as reference designs and microcontroller for space will be highlighted.

Speaker: Mr Giorgio Magistrati (ESA/ESTEC- Head of On-Board Computers & Data Handling)

Slides 2016_1C_DSOBC-RM4.3_GM18102016b.pdf

15:00 Payload data handling roadmap

In 2016, a new cycle of technology harmonisation activities took place for several avionics technology areas. ESA, in collaboration with the Technology Harmonisation Advisory Group (THAG), has established a new R&D roadmap for On-board Payload Data Processing (OBPDP) technologies covering the 2016-2023 timeframe. In this roadmap, activities for the domains of Digital Signal Processors, High Speed Networks, Payload Mass Memories, I/O and DAQ modules, Data Compression, Reconfigurable P/L Processors, Payload Support Software, and Wireless Technologies for P/L have been defined together with associated scope, priority, approximate funding level and other aspects. In this presentation, an overview of the new harmonised roadmap for OBPDP technologies will be presented. Key development lines and associated activity sequences will be pointed out. Critical technologies for European competitiveness and non-dependence will be highlighted, and challenges for the roadmap implementation will be explained.

Speaker: Dr Roland Trautner (ESA/ESTEC- Data Systems Division)

Slides 04_2016_OBPDP-RM_RT_-_ADCSS_V1.1_18-10-2016.pdf

15:20 Microelectronics roadmap

Speaker: Mr Agustin Fernandez-Leon (ESA/ESTEC-Head of the Microelectronics Section)

Slides ADCSS2016_Microelectronics_Roadmaps_final3.pdf

15:40 → 16:30 Session 3 - Exhibitors Flash Presentations

Short introductory talks by the exhibitors.

Convener: Mr Jørgen Ilstad (ESA/ESTEC- Data Systems Division)

15:40 Exhibitor 1 - TTTech

Deterministic Ethernet as basis for distributed IMA and mixed-criticality systems.

Slides 1-2016-10-18-TTTech_ESA-ADCSS-2016.pdf

15:45 Exhibitor 2 - Cobham Gaisler

Slides 2-ADCSS-2016-CobhamGaisler.pdf

15:50 Exhibitor 3 - Ramon-Chips

Slides 3-Ramon_Chips_ADCSS_2016-10-18.pdf

15:55 Exhibitor 4 - Microchip Atmel

Slides 4-Atmel_Microchip-overview.pdf

16:00 Exhibitor 5 - SpaceIC

Slides 20161018_SPACE_IC_presentation_ADCSS_2016.pdf

16:05 Exhibitor 6 - Embedded-Brains

Slides 2016ADCSS_FlashPresentation_embedded-brains.pdf

16:10 Exhibitor 7 - Skylabs

Slides 7-2016-10-18_SkyLabs_-_ADCSS_Workshop_ESA-ESTEC.pdf

16:15 Exhibitor 8 - ARM

Slides 8-ESA_workshop_ARM.pdf

16:30 → 17:00 Coffee Break

17:00 → 18:40 Session 4 - Model Based Avionics

Convener: Mr Jean-Loup TERRAILLON (ESA/ESTEC-Software Systems Division)

17:00 Introduction

Speaker: Mr Jean-Loup TERRAILLON (ESA/ESTEC- Software Systems Division)

17:05 Model based Avionics roadmap and case studies

Functional avionics for a Satellite means architecture and technologies targeting definition, design, implementation and validation in Computers & SW intensive equipment of functions and algorithms which are coming from various system levels (complete system, sub-systems, platform, equipment, boards), from very different functional chains (Command & Control, Flight management, GNC, Image processing, payload and instruments data processing…), with a large variety of criticality and safety levels. On avionics architecture and computing domain, initial requirements and design engineering of new products with computers, on-board software, system functions and applications algorithms (GNC, Autonomy, Mission planning, payload data processing), sensors and actuators, payloads are key for mastering cost, schedule, quality and risks of the avionics development. The main objectives of this project are first to improve the early maturity of the On-Board Functional Avionic requirements and design, in particular through an improvement of the interfaces between Operations, FDIR and System to Software, to make available to the Avionics architects a set of methods and tools which are adapted to the different operational situations they are facing, to better address and manage the system complexity, like the dependencies inside the architectures and in between, and for the interface definitions and finally to provide and assess process(es), methodology (ies) and tooling to design a spacecraft avionics architecture using MBSE controlling and reducing the project risks and costs, including flexibility of the avionics architecture to cover different similar mission profiles. It will also propose recommendation for links to the others MBSE initiative for full spacecraft system, other sub-systems and ground systems. The presentation will introduce main expectations out of a successful MBSE implementation in this domain, experience feedbacks of first use cases, main trends for the next step.

Speaker: Mr Alain Rossignol (Airbus Defence and Space)

Slides ADCSS_Model_Based_Avionics_ADS_rossignol.pdf

17:35 Rationale, recent projects and future options for Model Based Developments

The presentation motivates the application of model based approaches in the development process of avionics. The fundamental ideas and rationales are given, benefits are derived and common counter arguments are discussed. The presentation covers a wide range of model based approaches and developments as employed at OHB. The focus is on the development of avionic systems. A non-comprehensive list of activities that apply model based development approaches at OHB is presented. The selection covers the full range from theoretical mathematical analysis models to advanced integrated development environments utilized for (software) implementation. A set of such examples is taken from ongoing (commercial) projects. The successful application of the selected activities is proven in practice. A second set of examples represents research projects and show potential ways forward in utilizing and advancing model based approaches.

Speaker: Mr Andreas Wortmann (OHB)

Slides 2016_10_18_ADCSS_OHB_ModelBasedApproaches_wortmann.pdf

18:05 Application of MBSE to avionics and software development: achievements and future goals

Model-Based System Engineering applied to Avionics has recently became a reality in Thales Alenia Space, in addition to the already mature model-based engineering practices adopted on OBSW side. This was made possible thanks to the deployment of a mature and efficient tooling based on Melody Advance, the Thales toolset recently released as Open-source software under the name “Capella”. For the past 3 years, TAS engineers have been using the capabilities of this suitable tool together with appropriate methodologies to smoothly move from a document-centric process to a model-centric process, relying on documentation and code generation, and model-to-model transformations. To foster the deployment of this approach on actual programs, several R&D activities are on-going to extend the Model Based approach to all disciplines, from Product Line Engineering, to V&V activities, including FDIR, and also relationship with the Satellite Data Base and test & simulation bench development.

Speaker: Mr Marco Panunzio (Thales Alenia)

Slides ADCSS_2016_Model-based_Avionics_and_SW_TAS_panunzio.pdf

19:00 → 22:00 Coktail and Walking dinner

Wednesday, 19 October

08:00 → 09:00 Registration

Convener: Ms Bertilla Sinka (ESA/ESTEC- Data Systems Division)

09:00 → 10:20 Session 1 - Avionics in the context of mega constellations satellites

Convener: Mr Jørgen Ilstad (ESA/ESTEC- Data Systems Division)

09:00 Welcome and Introduction

New missions and advanced development paradigms lead to compress schedules while minimising costs. When applied to Avionics and on-board data handling in particular, these objectives can be attained with more compact units integrating more functions. This introductory presentation will outline challenges we are confronted to and establish a list of contributions the day's sessions are expected to provide.

Speaker: Mr Philippe Armbruster (ESA/ESTEC- Head of Data Systems Division)

Slides ADCSS_2016_-_Welcome_address_Day_2.pdf

09:20 Acquired experience on the development of 3 major constellations and challenges for future mega constellations

In the past 10 years, Thales Alenia Space has developed the three major commercial constellations: GLOBALSTAR2, O3b and IRIDIUM NEXT representing 125 spacecraft on LEO and MEO orbits. Each development has required Avionics enhancement in order to meet the objectives of recurrent cost, radiation environment, in-flight autonomy, or high rate production. Further enhancements of the avionics are being studied to face the new challenges required by the changing Telecom constellation market. In the first part of the presentation we will review the design and process upgrades applied onto the avionics for these three constellations. In particular we will address the design optimisation, the use of COTS components, the higher integration of the electronics, the validation optimisation and the Satellite autonomy improvement. The second part of the presentation will deal with the upcoming challenges raised by the mega constellations market. The increased cost saving objectives and need for enhanced on-board autonomy leads to develop new avionics solutions within reduced duration.

Speakers: Antoine PROVOST-GRELLIER (Thales Alenia Space - France), Mr Philippe Charbonnel (Thales Alenia France)

Slides 2016_10_10_ADCSS_2016_presentation_acquired_experience_on_constellations_TASF.pdf 2016_10_17_ADCSS_2016_introduction_MEGAconstellation_context.pdf

09:50 Space Systems stakes and strategy for avionics in the context of mega constellation

In the last few years, interest in constellations of satellites has significantly increased, especially in the context of the so-called New Space economy. Indeed, many commercial ventures or entrepreneurs now consider constellations as an efficient and affordable way to provide large access to pictures of Earth, world-wide access to the Internet, and many other services relying on data broadcast, collection or fusion. This new evolution in space industry mainly results from two game-changers: a more affordable access to space, proposed by companies such as SpaceX for instance, and most importantly availability of powerful, and yet cheap, COTS components, designed to be robust enough to radiations through mitigation techniques. However, manufacturing, validating, launching and then operating satellites in large quantity is still a challenging endeavour. This paper will focus on the avionics subsystem that has been directly impacted by emergence of powerful COTS components. In particular, it will discuss several topics such as use of COTS from mainstream to space industry or Fault Detection, Identification and Recovery and Operations strategies.

Speakers: Mr Erwan Kervandal, Mr Olivier NOTEBAERT (Airbus Defence and Space)

Slides ADCSS_Avionics_Constellation_AirbusDefenceAndSpace.pdf

10:20 → 10:50 Coffee and Exhibition

10:50 → 12:20 Session 2 - Compact Onboard Computer Architectures

Convener: Mr Giorgio Magistrati (ESA/ESTEC- Head of On-Board Computers & Data Handling Section)

10:50 Smart-OBC: integrating functions in the Platform Computer

In the continuous trend to miniaturize electronic equipment for space applications, Thales Alenia Space has managed the evolution of the On Board Computer integrating more functions and features as soon as relevant key technologies become available. These developments permitted to improve competitiveness, mass, volume and power consumption budgets at system level. Further enhancements of the OBC are currently on going, in a trend similar to the one observed in the consumer electronics leading to the Smartphone, where many functions and sensors, formerly spread over many gadgets, have been integrated in a single compact product. In the first part of the presentation the author recall a brief history of platform computer evolution in the last 20 years, showing the convergence from many units (Computers and Remote Terminals) to a single one. The second part shows current developments at TASI, focused to integrate GNSS Receiver, Gyroscope and Mass Memory storage functions in the Platform computer. A synthesis of Pros and Cons are presented, as experienced during the course of the development. The last section part of the presentation deal with new perspectives offered by introduction of COTS, Multicore Processor, Ultra Large Reprogrammable FPGA and deep sub-micron silicon technology. The challenges related to this opportunities are briefly analysed from the equipment manufacturer point of view.

Speaker: Mr Gianluca Aranci (Thales Alenia Italy)

Slides presentation-smartOBC-_ADCSS_2016_-160921_Aranci.pdf

11:20 The COMPASS OBC, paving the way for a centralised avionics architecture

In the frame of its continuous innovation process, Airbus Defence and Space, - Space Equipment Division is working on a next generation of on board computer (OBC) to drastically drop down the avionics HW acquisition cost. This product, named COMPASS, is more than an OBC, it is a centralized avionics. COMPASS (Centralized Open & Modular Processing Avionics & Space Sensors) relies on a centralized high performance processing core, associated to a specific SW architecture allowing the overall avionics processing to be performed in this single chip. Compact design, light, with minimized power consumption, COMPASS is not jeopardizing the reliability and rely on adapted assurance quality management to bring to the market the most efficient centralized avionics unit.

Speaker: Mr Jean-Luc Poupat (Airbus Defence and Space)

Slides 1-ADCSS-2016-COMPASS_Avionics.pdf

11:50 Compact SAVOIR OBC

RUAG Space has more than 30 years of experience in developing high-reliable launcher and satellite on-board command and data-handling electronics. Through this experience the following key items exists: • a design database with existing & qualified SW and FPGA IP-modules • an internal certified and customer audited design process for high-reliable electronics • a high quality and high efficiency electronics production facility already today capable of producing large series industrial electronics. The RUAG Space approach to mega constellation satellite electronics is to: • reuse the existing design data-base, design processes and production facility • use a mix of high-rel components and up-screened commercial components This enables us to offer: • reliable data handling products with low risk • significantly lower prices and higher performance than the corresponding traditional high-reliable Products RUAG Space offers a very compact and reliable SAVOIR compliant On-board Computer (OBC) with integrated GNSS receiver and security functions for mega constellations as a complement to our traditional OBC based on high-rel components. The mega constellation OBC is designed for 5-7 years lifetime in LEO. Parts procurement, manufacturing and production test strategy is optimised for batches of unit allowing the price per unit to be kept at a fraction of the traditional OBC. Due to the use of state-of-the-art commercial technology the mega constellation OBC provides processing performance in excess of 10 times that of the traditional OBC still providing the same functionality although the number of interfaces is optimised to fit the needs of a small satellite. RUAG Space is developing the OBC for mega constellations product, partially funded by ARTES for specific areas.

Speaker: Mr Torbjörn Hult (RUAG Space)

Slides ADCSS2016_Compact_SAVOIR_OBC_presentation_hult.pdf

12:20 → 13:00 Round Table - Higher integration - Cost saving at the expense of reliability?

Convener: Mr Giorgio Magistrati (ESA/ESTEC- Head of On-Board Computers & Data Handling Section)

12:20 Round Table - Higher integration, cost saving at the expense of reliability?

The scope of the second day of ADCSS is focused on the challenges and opportunities of having higher integration of functions in to the on-board computer as opposed the more traditional distributed architecture. OBC equipment suppliers will give their views on challenges and opportunities with current state of the art building blocks and future needs. The following topics will addressed in the round table: - How will moving to a more centralised and integrated avionics architecture affect testing, and is it contributing to costs saving? As an example; integrating functions into to the OBC effectively moves testing of unit functionality, e.g. provided be Start Trackers or Internal Measurement Unit supplier, from system level testing to become the responsibility of the OBC supplier. Further is higher integration a trend that should be followed even on single shot missions, taking profit of new H/W and S/W computer features (high CPU performance & large memory capacity, TSP), with the benefit of reduced mass? - Will the high integration of powerful processing and memory components make our future designs decentralized again? - Shall we use new processing capabilities to design fault tolerant systems using COTS components even for critical time systems (Platform/AOCS) or is it still too early? - It is considered mandatory to calculate the reliability of the avionics unit, however at present there is insufficient reliability data on use of COTS components and technologies (e.g. use of ceramic vs. plastic packaging) to be able to estimate unit reliability. How do we best ensure that the introduction of COTS parts do not adversely affect the unit reliability?

Slides ESA_round_table.pdf

13:00 → 14:00 Lunch Break

14:00 → 18:00 Session 3 - Mixed Critical systems issues in relation to spacecraft avionics

Conveners: Mr Jorge Trescastro Lopez (ESA/ESTEC- Software Systems Division), Mr Marcel Verhoef (ESA/ESTEC- Software Systems Division)

14:00 Introduction

Speaker: Mr Marcel Verhoef (ESA/ESTEC- Software Systems Division)

Slides 0-Session_3_-_Mixed_Criticalilty.pdf

14:20 Mixed-Criticality Systems (MCS): Introduction and State of Practice

Across all real-time domains companies aim at increasing their competitive edge by offering additional functionalities and services on every new product release. With the aim of reducing costs, functionalities with different criticalities are executed sharing various hardware components. However, without appropriate preconditions, integrating mixed-criticality functionalities onto the same platform can significantly increase certification costs. This overall situation is compounded with the on-going transition towards multicore and many core systems. In this talk I will introduce and review different existing interpretations of mixed-criticality, which has been indistinctly applied to timing, safety and security, among others. I will also discuss some concepts in existing standards in each application domain that help developing in a cost-reasonable manner mixed-criticality systems. This includes freedom from interference between software components in automotive domains and software Time and Space partitioning in Integrated Modular Avionics. I will also discuss how the use of multicore processors as the baseline computing platform in these real-time domains challenges certified mixed criticality execution. Finally I will cover some of the current proposals to reduce certification cost in mixed-criticality multicores.

Speaker: Dr Francisco J. Cazorla (Barcelona Supercomputing Center and IIIA-CSIC)

Slides 1-MCS-fcazorla.pdf

15:00 Mixed criticality and partition systems

After R&D studies on Integrated Modular Avionics (IMA) architecture and process, after definition and development of Time & Space Partitioning solutions with Hypervisors & Separation Kernels, the first space operational use cases are starting, with the need to maximize the integration of different functions & sensors software inside the same computer. Depending on the mission and the industrial organization, the different application software running in the different partitions could come from different companies or teams with different levels of maturity. As for aeronautical first IMA generation, in order to simplify the first partitioning deployments, only a unique criticality approach is applied on all software components and partitions in the same computer. In future projects we are targeting to enlarge the solution with mixed criticality application software in the different partitions, taking also benefits from multicore processors solutions and also to consider, in some specific use cases, a set of data security needs and requirements. The presentation will introduce the current status on recent R&D and first deployment, and will address stakes for the next step with mixed criticality systems.

Speakers: Mr Alain Rossignol (Airbus Defence and Space), Mr Luc Planche (Astrium)

Slides 2-ADCSS_Mixed_Criticality_ADS.pdf

15:30 Iridium Next STR S/W: a first step towards mixed criticality in OBSW

The migration of spacecraft functions from hardware to software together with a higher centralization is one of the current ways to reduce the cost of spacecraft avionics. This requires to manage mixed criticality software in the main platform computer. The integration of a star tracker software (MHSTR SW) in Iridium Next platform software was a major step in this direction for TAS-F. This presentation will first describe this integration, in particular the MHSTR SW constraints (risks, timing, metrics..), the management of the interfaces between the MHSTR SW and the OBSW and the integration and V&V strategy. Then the modifications implemented on TAS internal RTOS (OSTRALES) to offer a first level of time and space partitioning will be detailed. Finally the failure management and associated FDIR strategy for the partitioned MHSTR SW will be presented. After this industrial return of experience, the discussion will address further challenges and perspectives in the field of “mixed criticality” software.

Speaker: Mr Guillaume Veran (Thales Alenia Space - France)

Slides 3-TASF_MIXED-SW_IRN-MHSTRSW-ADCSS_2016.pdf

16:00 TSP architectures for OBSW in CNES

The lessons learnt from the CNES projects are that the institutes involved in the payload developments have to systematically develop general “non-scientific” features, such as boot, platform interface, FDIR, I/O, timing, mass memory interface, etc. CNES have therefore initiated some years ago generic developments in order to offer off-the-shelf building blocks that could be easily reused with a low level of adaptation effort, aiming therefore at decreasing the cost of the mission, and increasing the reliability of the payload developments. The institutes can consequently concentrate their efforts on real science, high degree of expertise, especially on the science mission on-board software application part rather than “housekeeping” features. The presentation will describe the technical choices that have been made in order to provide a high level of genericity enabling a clear and effective decoupling between “housekeeping” and science, thanks to Time & Space Partitioning. It will provide status of development of the various building blocks, including visibility on current real but also future use cases and how TSP could efficiently help to solve budget constraints and to optimize the avionics architecture.

Speaker: Mr Julien Galizzi (CNES)

Slides 5-TSP_architectures_for_OBSW_in_CNES.pdf

16:30 Coffee break and live coverage of Exomars landing

17:15 (On the way to) Success Stories From Non-Space Domains

The development of mixed-criticality systems that integrate applications of different criticality (e.g., safety) in a single embedded system can provide multiple benefits such as product cost-size-weight reduction, reliability increase and scalability. However, the integration of applications of different levels of criticality in a single embedded system leads to several challenges with respect to current safety certification standards. During the last 6 years, within several European research projects, IK4-IKERLAN has leaded the definition of several research level ‘safety concepts’ for different safety standards (e.g., IEC-61508 industrial, EN-5012X railway, ISO-26262 automotive) assessed by external certification authorities. Each ‘safety concept’ describes, for a given safety application, the safety techniques and strategies that enable the usage of multicore devices with or without hypervisors (e.g. XtratuM). The analysis, definition and external assessment of such strategies and techniques, has paved the way towards current industrial projects: (1) we have integrated multicore and hypervisor technology into a wind-turbine control system; (2) we are developing an IEC-61508 mixed-criticality protection system based on a COTS multicore device and (3) we are collaborating on exporting and extending the lessons learnt from the integrated architectures to other sectors such as railway domain. This talk will dig deeper into the aforementioned technical topics and explain IK4-IKERLAN roadmap to a successful research and industrial developments story.

Speakers: Dr Francisco J. Cazorla (IIIA-CSIC and BSC), Mr Jon Perez (IK4-IKERLAN)

Slides 4-ESA_ADCSS_(On_the_way_to)_Success_Stories_From_Non-Space_Domains.pdf

18:00 → 18:40 Round Table - Mixed Criticality Systems, are we ready for tomorrow's platforms?

Conveners: Mr Jorge Lopez Trescastro (ESA/ESTEC-Software Systems Division), Dr Marcel Verhoef (ESA/ESTEC-Software Systems Division)

18:00 Round Table - MCS, are we ready for tomorrow's platforms?

The integration of software components with different criticality levels onto a common execution platform has been a priority topic on many European funded research projects, including the space community, in order to manage system complexity and reduce development cost. The research challenges that need to be addressed expand through a wide range of categories: Multicore SOCs, System modelling, Scheduling, Timing analysis, etc. Many publications have been produced since this topic was introduced and many questions have been raised: How to approach the trade-off between separation (for safety) and sharing (for efficient resource usage)? Which assumptions can be made during the static verification of the system? Do we have the state-of-the art methodology for providing sufficient determinism in hardware and software? Are statistical techniques compatible with our safety requirements? How can we deal with failure management and how to return to full functionality after a functional degradation? Do we have the answers to these questions? What can we learn from experiences gained in other application domains? Are we ready for tomorrow's platforms?

Slides Mixed_criticality_round_table_draft.pdf

Thursday, 20 October

09:00 → 12:15 Session 1 - Avionics Systems for Exploration Missions

Convener: Dr Guillermo Hernando Ortega (ESA/ESTEC-Head Guidance, Navigation and Control Section)

09:00 Welcome and introduction

Speaker: Mr Ortega Hernando Guillermo (ESA/ESTEC-Head of Guidance, Navigation and Control Section)

Slides 0-Intro_-_Avionics_Systems_Technology_for_New_Exploration_Scenarios-3.pdf

09:15 Avionics Systems for the Exploration of Asteroids and small moons

The Vision Based Navigation will be one of the key technologies in future ESA missions. The maturation of the technology is the essential issue required for acquiring confidence in this innovative and crucial navigation system. The discussion that GMV intend to present will be focused on the need of HW/SW co-design carried out to develop mature prototype bread-boarding and focused to reach the requirements of the GNC technology. The fundamental step is to identify the real needs of the GNC in term of performance and frequency of operations taking into account Vision Based techniques available, the second step is to bring the initially developed and validated through simulation software to representative hardware where the Vision Based Navigation has to fulfil Real-Time performance maintaining the accuracy demonstrated in simulation. In this discussion GMV will bring as example the actual developments in AIM, PILOT, and CAM-PHOR-VNAV, emphasizing the different architectures and the requirements driving the selection of the architectures validation steps foreseen. Furthermore the problematics of using HW in the loop will be discussed.

Speaker: Dr Marco Mammarella (GMV)

Slides 01_GMV-Avionics_Systems_for_the_Exploration_v3_(2).pdf

09:45 Exploring the planets and avionics systems: challenges and opportunities

Exploration of planets is part of the space exploration of celestial structures of the outer space. Once a planet has been identified by astronomers and scientists as a target environment to be deeply analyzed, the technology needed to reach the objective are studied and developed by the industries. Complex space systems have to be designed to perform cruise, approach, landing and surface exploration, taking also into account stringent autonomy requirements. As a consequence the configuration of these systems is composed by modules with different functions connected each other in a composite spacecraft. Carrier or Orbiter module, Descent module and Rover module are the elements of the Exomars mission; Orbiter vehicle, Earth Return Vehicle, Earth Return Capsule plus Lander Platform and Lunar/Mars Ascent Vehicle are the modules designed in the Lunar Polar sample return and for Mars sample and return missions. As a consequence the avionic system design has to consider this modular structure distributing properly the avionic functions (processing, communication, data handling, power distribution and autonomy) among the designed building blocks according to the mission needs. Key requirements for the exploration have to be considered in the avionic design: low power consumption, minimum mass, high computational capability, and reliable communication systems able to perform also Direct to Earth communication for command uplink and fast communication with orbiters for high data rate telemetry downlink. Requirements inspire new technologies like Vision Based Navigation tailored to the different mission phases that provides high level of autonomy and specific sensors (radar, altimeters, LIDAR) integrated in compact avionic architectures. These technologies should possibly be based on COTS platforms able to provide high computational performance and significant cost reduction. These new avionic platforms could be extended to mission scenario like Active Debris Removal or Rendezvous and Docking or Earth Observation providing opportunity for cost reduction and standardization of some key components.

Speaker: Mr Antonio Tramutola (Thales Alenia Space)

Slides 02_ADCSS_2016_Presentation_TAS-I_(2).pdf

10:15 Avionics Systems Technology for New Exploration Scenarios

Robotics and human space exploration space missions have brought astonishing accomplishments till date (e.g. 12 humans actually walking on the lunar surface). The ESA roadmaps of technology for the exploration of the Solar System have been designed to set the goal of fostering robotics exploration with the final aim to support human exploration. Within those technology roadmaps, spacecraft avionics techniques and technologies play a special and remarkable role. This talk provides a wide overview of the current technology programs and upcoming activities in the area of avionics, including mission for asteroids (AIM), Phobos (PHOOTPRINT), Mars (sample return and human), Moon (South Pole landing), Jupiter (JUICE), etc. The talk highlights the needs of new performing, agile and low cost avionics systems, as well as the corresponding quick and fast verification, and validation techniques

Speakers: Mr Bals J. (DLR), Mr Delpech Michel (CNES), Dr Guillermo Hernando Ortega (ESA/ESTEC-Head of Guidance, Navigation and Control Section)

Slides 03_Main_-_Avionics_Systems_Technology_for_New_Exploration_Scenarios-2.pdf

10:45 Coffee break

11:15 Low cost avionics systems for fast track missions to the planets

Future exploration missions will require the development of new and advanced GNC-related technologies relying on the use of significantly more powerful avionics components than currently available. We put forward the argument that significant advances in low-cost/high-performance processing components, the widespread availability of specialized and open-source software/hardware resources, and the commoditization of vehicles which can easily serve as test platforms (e.g. multicopters, CubeSats), are poised to expedite the GNC development cycle through incremental, frequent, low-cost, high-return-on-investment experimentation - extending from initial algorithm formulation through ground/laboratory testing, flight testing, and finally in-space demonstration. Furthermore, through our own experience in the scope of several past and ongoing ESA projects, we also believe that a criterious use of these technologies, together with a phased transition to the space qualification of selected avionics components in a process duly supervised by experts at ESA, will ultimately enable the validation of radically new exploration capabilities through the execution of low-cost, fast track, GNC technology demonstration missions to the planets.

Speaker: Mr Tiago Hormigo (Spinworks)

Slides 04_ADCSS_-_Avionics_for_Low-Cost_Exploration_(Oct2016).pdf

11:45 Autonomy and FDIR of avionics systems for exploration

Exploration missions are in all cases expeditionary by nature, but are as well expeditionary in terms of technology. They require specific solutions both in platform and payload that will be a novelty in the frame of space technology. As well the context and environment of these missions will make them unique and may involve a specific approach to many avionic functions as per FDIR. In the recent years avionics for space community is progressing towards several areas of interest as: increased processing capabilities, harmonization, building blocks based designs or modelling techniques. In terms of FDIR function within a spacecraft all of these need to be considered as enablers to increase FDIR performance and capabilities. FDIR concepts and solutions to be provided in the frame of the exploration missions will need to have into account all these enablers when being proposed and developed. This presentation is intended on the one hand to provide an overview of these exploration missions’ key points regarding FDIR strategy. On the other hand the presentation will provide an insight on the current status and trends of FDIR approaches and into the way forward in terms of FDIR solutions.

Speaker: Ms Cristina Tato (SENER)

Slides 05_ADCSS_2016_FDIR_Exploration_missions_(2).pdf

12:15 → 13:00 Round table with introduction from ESA about Avionics Systems for Exploration Missions

Convener: Mr Ortega Hernando Guillermo (ESA/ESTEC-Head Guidance, Navigation and Control Section)

12:15 Round table - Avionics Systems for Exploration Missions

13:00 → 14:00 Lunch

14:00 → 16:00 Session 2 - Automated Code Generation for AOCS

Conveners: Ms Bénédicte GIROUART (ESA/ESTEC- Control Systems Division), Ms Maria Hernek (ESA/ESTEC)

14:00 Introduction

Speaker: Ms Bénédicte Girouart (ESA/ESTEC-Head of AOCS and Pointing Systems Section)

Slides 0_ADCSS_Day3_PM_v3.pdf

14:05 Industrial and optimized auto-coding process for AOCS SW development in CD phase

Airbus Defence and Space continuously improves its functional avionics development process, willing to reduce its cost base, the development duration and improve the confidence in the design. In this continuous transformation, model-based design (MBD) approach has been the backbone of AOCS & GNC analyses and simulations for 20 years. Indeed, based on Matlab/Simulink modelling tools, AOCS & GNC teams design algorithms as well as equipment, dynamics and environment, allowing straightforward frequency analysis & time simulation, based on trans-nationally shared tools and processes. Since the last 5 years, a step further has been reached, establishing this MBD approach over a multi-domain process (AOCS, On-Board SW & simulator teams), defining a complete process, from early design to S/C implementation and validation. Two demonstrators have been carried out with CNES and DLR to validate it, from April 2012 to March 2013 (CSO and Sentinel-2). Then, this process has been presented and agreed by ESA, ESOC, CNES and DLR. This development process has been declared as the baseline for future projects in 2014 by the project entities (Earth obs. & sci., telecom). Hence, all the most recent projects are now deploying it: NGSAR, MetOp-SG, Merlin, Juice, Quantum and Eurostar eNeo. In this operational context, and in addition to the technical prowess to generate automatically the code, the main following challenges shall be mastered: compliance to ECSS (E-40 and Q-80), code quality, CPU and memory budget, V&V (Model coverage analysis, Quality rule checking, Requirement tracing, Automatic documentation generation), in-flight operations and software maintenance.

Speaker: Mr J. Bourdon (Airbus Defence and Space (F))

Slides 1_2016-10-20_ADCSS_2016_JB_AIRBUS.pdf

14:30 Model Based AOCS Design and Automatic Flight Code Generation: Experience and Future Development

OHB Sweden has almost 20 years’ experience from using Model Based Design and Automatic Code Generation for AOCS flight application software. This presentation will give an overview of how these techniques have been used within different projects and what the experience has been. One of the main advantages of using Model Based Design and Automatic Code Generation is that the techniques allow for an integrated development of the AOCS functionality and the associated application software. The software development process resulting from this experience will be briefly presented. Finally, challenges and opportunities for future further integration of the AOCS and software development will be discussed.

Speaker: Mr P. Bodin (OHB Sweden)

Slides 2_ADCSS_Per_Bodin_Final_1.pdf

14:55 From 1995(MINISAT) to 2016(EUCLID): Auto-coding evolution for different types of AOCS

Auto-coding tools emerged in the 90´s, as complement from several model-based design tools. SENER was one of the first companies to apply this type of tools for the implementation of auto-coded on-board SW for the MINISAT ACS. After that, the design and auto-coding tools have been continuously evolving, with tools enhancements allowing more controlled application of the auto-coding SW on AOCSs of different types, and this is becoming more widely used also for highly demanding missions. SENER will present some highlights of the auto-coding processes applied along the years and missions, with emphasis on the most relevant aspects for improvement and formalisation of the processes, and its application to EUCLID AOCS as one of the most recent target science missions from ESA, where SENER applies the technique. Also some expectations for the future will be mentioned. The review will touch relevant aspects like the share and organisation of the auto-coded SW in front of the manual SW and its integration, the overall SW specifications and SW testing particularities, etc. Also the options in the modelling and auto-coding, with specific constraints will be commented. In general the evolving nature of the auto-coding tools and accessories, is also determining an evolving auto-coding process, tools and rules, with a wide range of valid and selectable configurations. Such evolving process and particularities may deserve an evolution of the ECSS to a general framework focussed on guaranteeing the models characteristics and the properties of the associated auto-coded SW.

Speaker: Mr S. Llorente (SENER (Sp.))

Slides 3_ADCSS_SENER_autocoding_for_AOCS_2016_10_16.pdf

15:20 Integration of automatic code generation in a AOCS development process: feedback and perspectives

The AOCS engineers widely use model-based simulation tools for the definition and pre-validation of the algorithms to be implemented in the SW code. Introduction of Automated Code Generation tools have added new constraints and modified the development process and the roles between the AOCS engineers and the SW engineers. The classical V-cycle does not answer all items of this new approach. Model-based design has been introduced to provide a new methodology for the design and validation of an embedded software. This presentation will present the return of experience of Thales Alenia Space France (TAS-F) on this topic (Spirale, Sentinel-3, Göktürk) with a dedicated focus on the new roles, constraints and responsibility between AOCS team and SW team. The discussion will end with the perspectives of TAS-F on integrating a complete model-based design and validation process.

Speakers: Mr G. Veran (Thales Alenia Space (F)), Mr P. Dandre (Thales Alenia Space (F))

Slides 4_TASF_Code_generation_AOCS-ADCSS_2016.pdf

15:45 Break

16:00 → 16:30 Round Table - Automated code generation for AOCS: return of experience, benefits and challenges

Conveners: Ms Bénédicte Girouart (Head of AOCS and Pointing Systems Section), Ms Maria Hernek (ESA/ESTEC)

16:00 Round Table - Automated code generation for AOCS: return of experience, benefits and challenges

Following the presentations by several AOCS (and System) Prime industries on their experiences of Model Based Design and Automated Code Generation techniques for AOCS and AOCS SW production, the round table will allow exchanges, between the Presenters and the audience, on the following topics: - Impact of the use of the Automated Code Generation techniques on the AOCS development process and cycle, in particular AOCS validation, AOCS SW production and testing - Modelling rules for ACG: do’s and don’t and expected evolutions - (Non-)Compliance with AOCS/coding standards - New borders between specification and code: who does what? - Modularity/versatility wrt mission specificities and industrial layout: re-use of models for code generation and interface with ‘manual’ code.

16:30 → 16:50 ADCSS 2016 closing remarks