{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T08:58:24Z","timestamp":1767085104677,"version":"3.37.3"},"reference-count":62,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2020,4,30]],"date-time":"2020-04-30T00:00:00Z","timestamp":1588204800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,4,30]],"date-time":"2020-04-30T00:00:00Z","timestamp":1588204800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100011914","name":"M\u00e4lardalen University","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100011914","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Softw Syst Model"],"published-print":{"date-parts":[[2020,9]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Software in modern vehicles consists of multi-criticality functions, where a function can be safety-critical with stringent real-time requirements, less critical from the vehicle operation perspective, but still with real-time requirements, or not critical at all. Next-generation autonomous vehicles will require higher computational power to run multi-criticality functions and such a power can only be provided by parallel computing platforms such as multi-core architectures. However, current model-based software development solutions and related modelling languages have not been designed to effectively deal with challenges specific of multi-core, such as core-interdependency and controlled allocation of software to hardware. In this paper, we report on the evolution of the Rubus Component Model for the modelling, analysis, and development of vehicular software systems with multi-criticality for deployment on multi-core platforms. Our goal is to provide a lightweight and technology-preserving transition from model-based software development for single-core to multi-core. This is achieved by evolving the Rubus Component Model to capture explicit concepts for multi-core and parallel hardware and for expressing variable criticality of software functions. The paper illustrates these contributions through an industrial application in the vehicular domain.\n<\/jats:p>","DOI":"10.1007\/s10270-020-00795-5","type":"journal-article","created":{"date-parts":[[2020,4,30]],"date-time":"2020-04-30T04:06:08Z","timestamp":1588219568000},"page":"1283-1302","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["Modelling multi-criticality vehicular software systems: evolution of an industrial component model"],"prefix":"10.1007","volume":"19","author":[{"given":"Alessio","family":"Bucaioni","sequence":"first","affiliation":[]},{"given":"Saad","family":"Mubeen","sequence":"additional","affiliation":[]},{"given":"Federico","family":"Ciccozzi","sequence":"additional","affiliation":[]},{"given":"Antonio","family":"Cicchetti","sequence":"additional","affiliation":[]},{"given":"Mikael","family":"Sj\u00f6din","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2020,4,30]]},"reference":[{"key":"795_CR1","doi-asserted-by":"crossref","unstructured":"Charette, R.N.: This car runs on code. IEEE Spectrum 46, (2009)","DOI":"10.1109\/MSPEC.2009.5340234"},{"key":"795_CR2","doi-asserted-by":"crossref","unstructured":"Ciccozzi, F., Seceleanu, T., Corcoran, D., Scholle, D.: UML-based development of embedded real-time software on multi-core in practice: lessons learned and future perspectives. IEEE Access 4, (2016)","DOI":"10.1109\/ACCESS.2016.2604018"},{"key":"795_CR3","unstructured":"Rubus ICE-Integrated Development Environment, http:\/\/www.arcticus-systems.com, Accessed: September (2019)"},{"key":"795_CR4","unstructured":"Thorngren, P.: Keynote talk: experiences from east-adl use. In: EAST-ADL Open Workshop, Gothenberg (2013)"},{"key":"795_CR5","unstructured":"ISO 26262-1:2011: Road Vehicles in Functional Safety, http:\/\/www.iso.org, Accessed: September (2019)"},{"key":"795_CR6","doi-asserted-by":"crossref","unstructured":"Pop, P., Scholle, D., Hansson, H., Widforss, G., Rosqvist, M.: The SafeCOP ECSEL Project: safe cooperating cyber-physical systems using wireless communication. In: Euromicro Conference on Digital System Design (DSD). IEEE (2016)","DOI":"10.1109\/DSD.2016.25"},{"key":"795_CR7","doi-asserted-by":"crossref","unstructured":"H\u00e4nninen, K., M\u00e4ki-Turja, J., Sj\u00f6din, M., Lindberg, M., Lundb\u00e4ck, J., Lundb\u00e4ck, K.: The rubus component model for resource constrained real-time systems. In: 3rd IEEE International Symposium on Industrial Embedded Systems (2008)","DOI":"10.1109\/SIES.2008.4577697"},{"key":"795_CR8","unstructured":"The AUTOSAR Consortium, AUTOSAR Techincal Overview, Version 4.3., http:\/\/autosar.org, Accessed: September (2019)"},{"key":"795_CR9","unstructured":"S\u00e9verine, S., Vulgarakis, A., Bures, T., Carlson, J., Crnkovic, I.: A component model for control-intensive distributed embedded systems. In: 11th International Symposium on Component Based Software Engineering (CBSE). Springer, Berlin (2008)"},{"key":"795_CR10","unstructured":"Xu,\u00a0K., Sierszecki, K., Angelov, C.: COMDES-II: a component-based framework for generative development of distributed real-time control systems. In: 13th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications (RTCSA) (2007)"},{"key":"795_CR11","doi-asserted-by":"crossref","unstructured":"Feiler, P.H., Gluch, D.P., Hudak, J.J.: The architecture analysis and design language (AADL): an introduction. Technical report (2006)","DOI":"10.21236\/ADA455842"},{"key":"795_CR12","doi-asserted-by":"crossref","unstructured":"Mubeen, S., M\u00e4ki-Turja, J., Sj\u00f6din, M.: Communications-oriented development of component- based vehicular distributed real-time embedded systems. J. Syst. Archit. 60, (2014)","DOI":"10.1016\/j.sysarc.2013.10.008"},{"key":"795_CR13","unstructured":"Mubeen, S., Nolte, T., Sj\u00f6din, M., Lundb\u00e4ck, J., Lundb\u00e4ck, K.: Supporting timing analysis of vehicular embedded systems through the refinement of timing constraints. Softw. Syst. Model. (2019)"},{"key":"795_CR14","unstructured":"Feiertag, N., Richter, K., Nordlander, J., Jonsson, J.: A Compositional framework for end-to-end path delay calculation of automotive systems under different path semantics. In: Proceedings of the IEEE Real-Time System Symposium, Workshop on Compositional Theory and Technology for Real-Time Embedded Systems (2009)"},{"key":"795_CR15","doi-asserted-by":"crossref","unstructured":"Bucaioni, A., Cicchetti, A., Ciccozzi, F., Mubeen, S., Sj\u00f6din, M.: A metamodel for the rubus component model: extensions for timing and model transformation from EAST-ADL. J. IEEE Access 5, (2016)","DOI":"10.1109\/ACCESS.2016.2641218"},{"key":"795_CR16","doi-asserted-by":"crossref","unstructured":"Bucaioni, A., Cicchetti, A., Ciccozzi, F., Mubeen, S., Sj\u00f6din, M.: Technology-preserving transition from single-core to multi-core in modelling vehicular systems. In: Springer, editor, 13th European Conference on Modelling Foundations and Applications (2017)","DOI":"10.1007\/978-3-319-61482-3_17"},{"key":"795_CR17","doi-asserted-by":"crossref","unstructured":"Dijkstra, E.W.: On the role of scientific thought. In: Selected Writings on Computing: A Personal Perspective, p. 60\u201366. Springer, Berlin (1982)","DOI":"10.1007\/978-1-4612-5695-3_12"},{"key":"795_CR18","volume-title":"Building Reliable Component-Based Software Systems","author":"I Crnkovic","year":"2002","unstructured":"Crnkovic, I., Larsson, M.: Building Reliable Component-Based Software Systems. Artech House Inc, Norwood (2002)"},{"key":"795_CR19","doi-asserted-by":"crossref","unstructured":"Mubeen, S., Lawson, H., Lundb\u00e4ck, J., G\u00e4lnander, M., Lundb\u00e4ck, K.: Provisioning of predictable embedded software in the vehicle industry: the rubus approach. In: IEEE\/ACM 4th International Workshop on Software Engineering Research and Industrial Practice (SER IP) (2017)","DOI":"10.1109\/SER-IP.2017..1"},{"issue":"1","key":"795_CR20","doi-asserted-by":"publisher","first-page":"453","DOI":"10.2298\/CSIS120614011M","volume":"10","author":"S Mubeen","year":"2013","unstructured":"Mubeen, S., M\u00e4ki-Turja, J., Sj\u00f6din, M.: Support for end-to-end response-time and delay analysis in the industrial tool suite: Issues, experiences and a case study. Comput. Sci. Inf. Syst. 10(1), 453\u2013482 (2013)","journal-title":"Comput. Sci. Inf. Syst."},{"key":"795_CR21","unstructured":"Fernandez, G., Abella, J., Qui\u00f1ones, E., Rochange, C., Vardanega, T., Cazorla, F.J.: Contention in multicore hardware shared resources: understanding of the state of the art. In: 14th International Workshop on Worst-Case Execution Time Analysis, vol.\u00a039 (2014)"},{"key":"795_CR22","unstructured":"ARINC Specification 653P1-2, Avionics Application Software Standard Interface Part 1 Required Services, http:\/\/www.arinc.com, Accessed: September (2019)"},{"key":"795_CR23","doi-asserted-by":"crossref","unstructured":"VanderLeest, S.H.: Arinc 653 hypervisor. In: 29th Digital Avionics Systems Conference. IEEE (2010)","DOI":"10.1109\/DASC.2010.5655298"},{"key":"795_CR24","doi-asserted-by":"crossref","unstructured":"Gaska, T., Werner, B., Flagg, D.: Applying virtualization to avionics systems the integration challenges. In: 29th Digital Avionics Systems Conference (2010)","DOI":"10.1109\/DASC.2010.5655297"},{"key":"795_CR25","doi-asserted-by":"crossref","unstructured":"Kelter, T., Falk, H., Marwedel, P., Chattopadhyay, S., Roychoudhury, A.: Static analysis of multi-core TDMA resource arbitration delays. Real-Time Syst. 50, (2014)","DOI":"10.1007\/s11241-013-9189-x"},{"key":"795_CR26","doi-asserted-by":"crossref","unstructured":"Dasari, D., Nelis, V., Akesson, B.: A framework for memory contention analysis in multi-core platforms. Real-Time Systems 52, (2016)","DOI":"10.1007\/s11241-015-9229-9"},{"key":"795_CR27","doi-asserted-by":"crossref","unstructured":"Cicchetti, A., Ciccozzi, F., Mazzini, S., Puri, S., Panunzio, M., Zovi, A., Vardanega, T.: Chess: a model-driven engineering tool environment for aiding the development of complex industrial systems. In: Proceedings of the 27th IEEE\/ACM International Conference on Automated Software Engineering. ACM (2012)","DOI":"10.1145\/2351676.2351748"},{"key":"795_CR28","doi-asserted-by":"crossref","unstructured":"Barner, S., Diewald, A., Migge, J., Syed, A., Fohler, G., Faug\u00e8re, M., P\u00e9rez, D.G.: Dreams toolchain: model-driven engineering of mixed-criticality systems. In: 2017 ACM\/IEEE 20th International Conference on Model Driven Engineering Languages and Systems (MODELS) (2017)","DOI":"10.1109\/MODELS.2017.28"},{"key":"795_CR29","doi-asserted-by":"crossref","unstructured":"Trujillo, S., Crespo, A., Alonso, A., P\u00e9rez, J.: MultiPARTES: Multi-core partitioning and virtualization for easing the certification of mixed-criticality systems. Microprocess. Microsyst. 38, (2014)","DOI":"10.1016\/j.micpro.2014.09.004"},{"key":"795_CR30","doi-asserted-by":"crossref","unstructured":"Durisic, D., Staron, M., Tichy, M., Hansson, J.: Evolution of long-term industrial meta-models: an automotive case study of autosar. In: 40th EUROMICRO Conference on Software Engineering and Advanced Applications (2014)","DOI":"10.1109\/SEAA.2014.21"},{"key":"795_CR31","unstructured":"TIMMO Methodology, Version 2, Deliverable 7 (2009)"},{"key":"795_CR32","unstructured":"SymTA\/S for Migration from Single-core to Multi-core ECU-Software on Infineon Microcontrollers. Electron. Eng. J. (2010)"},{"key":"795_CR33","unstructured":"TADL: Timing Augmented Description Language, Version 2, Deliverable 6, October (2009). The TIMMO Consortium"},{"key":"795_CR34","unstructured":"The UML Profile for MARTE: Modeling and Analysis of Real-Time and Embedded Systems, https:\/\/www.omg.org\/omgmarte\/Documents\/Specifications\/08-06-09.pdf, Accessed: September (2019)"},{"key":"795_CR35","unstructured":"Timing Augmented Description Language (TADL2) syntax, semantics, metamodel Ver. 2, Deliverable 11 (2012)"},{"key":"795_CR36","unstructured":"TIMMO-2-USE. https:\/\/itea3.org\/project\/timmo-2-use.html"},{"issue":"3","key":"795_CR37","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1109\/35.663330","volume":"36","author":"J Pavon","year":"1998","unstructured":"Pavon, J., Tomas, J., Bardout, Y., Hauw, L.-H.: Corba for network and service management in the tina framework. IEEE Commun. Mag. 36(3), 72\u201379 (1998)","journal-title":"IEEE Commun. Mag."},{"key":"795_CR38","unstructured":"Bucaioni, M., Mubeen, S., Lundb\u00e4ck, J., G\u00e5lnander, M., Lundb\u00e4ck, K.-L., Nolte, T.: Modeling and timing analysis of vehicle functions distributed over switched ethernet. In: IECON 2017-43rd Annual Conference of the IEEE Industrial Electronics Society, pp. 8419\u20138424. IEEE (2017)"},{"key":"795_CR39","doi-asserted-by":"crossref","unstructured":"Farzaneh, M.H., Shafaei, S., Knoll, A.: Formally verifiable modeling of in-vehicle time-sensitive networks (TSN) based on logic programming. In: 2016 IEEE Vehicular Networking Conference (VNC), pp. 1\u20134. IEEE (2016)","DOI":"10.1109\/VNC.2016.7835941"},{"key":"795_CR40","doi-asserted-by":"crossref","unstructured":"Vestal, S.: Preemptive scheduling of multi-criticality systems with varying degrees of execution time assurance. In: 28th IEEE International Real-Time Systems Symposium. IEEE (2007)","DOI":"10.1109\/RTSS.2007.47"},{"key":"795_CR41","unstructured":"DO-178C Software considerations in airborne systems and equipment certification, https:\/\/www.rtca.org\/content\/publications, Accessed: September (2019)"},{"key":"795_CR42","doi-asserted-by":"crossref","unstructured":"Agirre, I., Azkarate-askasua, M., Larrucea, A., P\u00e9rez, J., Vardanega, F.J. T., Cazorla, F.J.:. Automotive safety concept definition for mixed-criticality integration on a cots multicore. In: Computer Safety, Reliability, and Security (2016)","DOI":"10.1007\/978-3-319-45480-1_22"},{"key":"795_CR43","doi-asserted-by":"crossref","unstructured":"Esper, A., N\u00e9lis, G., Nelissen, V., Tovar, E.: How realistic is the mixed-criticality real-time system model? In: Proceedings of the 23rd International Conference on Real Time and Networks Systems. ACM (2015)","DOI":"10.1145\/2834848.2834869"},{"key":"795_CR44","unstructured":"Burns, A., Davis, R.: Mixed Criticality Systems: A Review, eighth edition. Technical report (2013)"},{"issue":"6","key":"795_CR45","first-page":"82:1","volume":"50","author":"A Burns","year":"2017","unstructured":"Burns, A., Davis Robert, I.: A survey of research into mixed criticality systems. ACM Comput. Surv. 50(6), 82:1\u201382:37 (2017)","journal-title":"ACM Comput. Surv."},{"key":"795_CR46","doi-asserted-by":"crossref","unstructured":"Crespo, A., Ripoll, I., Masmano, M.: Partitioned embedded architecture based on hypervisor: The xtratum approach. In: Proceedings of the 2010 European Dependable Computing Conference, EDCC \u201910. IEEE Computer Society (2010)","DOI":"10.1109\/EDCC.2010.18"},{"key":"795_CR47","doi-asserted-by":"crossref","unstructured":"Voss, S., Sch\u00e4tz, B.: Deployment and scheduling synthesis for mixed-critical shared-memory applications. In: 20th IEEE International Conference and Workshops on Engineering of Computer Based Systems (ECBS) (2013)","DOI":"10.1109\/ECBS.2013.23"},{"key":"795_CR48","doi-asserted-by":"crossref","unstructured":"Sch\u00e4tz, B., Voss, S., Zverlov, S.: Automating design-space exploration: optimal deployment of automotive sw-components in an iso26262 context. In: 2015 52nd ACM\/EDAC\/IEEE Design Automation Conference (DAC) (2015)","DOI":"10.1145\/2744769.2747912"},{"key":"795_CR49","doi-asserted-by":"publisher","first-page":"6424","DOI":"10.1109\/ACCESS.2018.2789400","volume":"6","author":"A Bucaioni","year":"2018","unstructured":"Bucaioni, A., Addazi, L., Cicchetti, A., Ciccozzi, F., Eramo, R., Mubeen, S., Sj\u00f6din, M.: Moves: a model-driven methodology for vehicular embedded systems. J. IEEE Access 6, 6424\u20136445 (2018)","journal-title":"J. IEEE Access"},{"key":"795_CR50","unstructured":"EAST-ADL Domain Model Specification, Deliverable D4.1.1., http:\/\/www.atesst.org\/home\/liblocal\/docs\/ATESST2_D4.1.1_EAST-ADL2-Specification_2010-06-02.pdf, Accessed: September (2019)"},{"key":"795_CR51","unstructured":"Bucaioni, A., Cicchetti, A., Ciccozzi, F., Eramo, R., Mubeen, S., Sj\u00f6din, M.: Anticipating implementation-level timing analysis for driving design-level decisions in EAST-ADL. In: International Workshop on Modelling in Automotive Software Engineering (2015)"},{"key":"795_CR52","unstructured":"Bucaioni, A., Cicchetti, A., Ciccozzi, F., Eramo, R., Mubeen, S., Sj\u00f6din, M.: Exploring timing model extractions at EAST-ADL design-level using model transformations. In: 12th International Conference on Information Technology: New Generations"},{"key":"795_CR53","unstructured":"Andrianarison, E., Piques, J.D.: Sysml for embedded automotive systems: a practical approach. In: Conference on Embedded Real Time Software and Systems. IEEE (2010)"},{"key":"795_CR54","unstructured":"Koong, C., Yang, C., Chu, W.: Model-driven multi-core embedded software design. Multicore Hardware-software Design and Verification Techniques (2011)"},{"key":"795_CR55","doi-asserted-by":"crossref","unstructured":"Nicolas, A., Posadas, H., Pe\u00f1il, P., Villar, E.: Automatic deployment of component-based embedded systems from UML\/MARTE models using MCAPI. In: Conference on Design of Circuits and Integrated Circuits (DCIS) (2014)","DOI":"10.1109\/DCIS.2014.7035575"},{"issue":"4","key":"795_CR56","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1145\/2043662.2043663","volume":"10","author":"A Gamati\u00e9","year":"2011","unstructured":"Gamati\u00e9, A., Le Beux, S., Piel, \u00c9., Ben, Atitallah R., Etien, A., Marquet, P., Dekeyser, J.: A model-driven design framework for massively parallel embedded systems. ACM Trans. Embed. Comput. Syst. 10(4), 39 (2011)","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"795_CR57","doi-asserted-by":"crossref","unstructured":"Herrera, F., Posadas, H., Pe\u00f1il, P., Villar, E., Ferrero, F., Valencia, R., Palermo, G.: The COMPLEX methodology for UML\/MARTE Modeling and design space exploration of embedded systems. J. Syst. Archit. 60, (2014)","DOI":"10.1016\/j.sysarc.2013.10.003"},{"key":"795_CR58","doi-asserted-by":"crossref","unstructured":"Mubeen, S., Nolte, T., Lundb\u00e4ck, J., G\u00e5lnander, M., Lundb\u00e4ck, K.: Refining timing requirements in extended models of legacy vehicular embedded systems using early end-to-end timing analysis. In: 13th International Conference on Information Technology: New Generations (2016)","DOI":"10.1007\/978-3-319-32467-8_44"},{"key":"795_CR59","unstructured":"ISO 11898-1. Road Vehicles Interchange of Digital Information Controller Area Network (CAN) for high-speed communication"},{"key":"795_CR60","unstructured":"Why Brake-By-Wire Is Coming To Your Car, https:\/\/www.popularmechanics.com\/cars\/car-technology\/a22126727\/brake-by-wire\/, Accessed: September (2019)"},{"key":"795_CR61","doi-asserted-by":"crossref","unstructured":"Becker, M., Dasari, D., N\u00e9lis, V., Behnam, M., Lu\u00eds\u00a0Miguel, P., Nolte, T.: Investigation on AUTOSAR-compliant solutions for many-core architectures. In: 18th Euromicro Conference on Digital System Design (2015)","DOI":"10.1109\/DSD.2015.63"},{"key":"795_CR62","doi-asserted-by":"crossref","unstructured":"Bucaioni, A., Cicchetti, A., Ciccozzi, F., Mubeen, S., Sj\u00f6din, M., Pierantonio, A.: Handling uncertainty in automatically generated implementation models in the automotive domain. In: 42nd Euromicro Conference series on Software Engineering and Advanced Applications (2016)","DOI":"10.1109\/SEAA.2016.32"}],"container-title":["Software and Systems Modeling"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10270-020-00795-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10270-020-00795-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10270-020-00795-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,30]],"date-time":"2021-04-30T00:31:56Z","timestamp":1619742716000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10270-020-00795-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,30]]},"references-count":62,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2020,9]]}},"alternative-id":["795"],"URL":"https:\/\/doi.org\/10.1007\/s10270-020-00795-5","relation":{},"ISSN":["1619-1366","1619-1374"],"issn-type":[{"type":"print","value":"1619-1366"},{"type":"electronic","value":"1619-1374"}],"subject":[],"published":{"date-parts":[[2020,4,30]]},"assertion":[{"value":"31 January 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"31 March 2020","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 April 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}