CN102866952B - Automobile software source code simulation test method based on UPPAAL model - Google Patents

Abstract

The invention belongs to the field of software engineering and designs an automobile software source code simulation test system aiming to solve the problems existing in a source code test related to a controllable physical working process in an automobile software system, according to features of a UPPAAL model. The input of the system is a triple queue composed of a data variable set, an event variable set and a clock constrained set, and the output of the system is the data variable set. In order to achieve automaticity and real-time property of the source code simulation test system, the UPPAAL model is converted into a C++code. All input data are processed by a software source code and the UPPAAL model after code conversion, and if output results are consistent, a source code can be judged to be correct, otherwise, mistakes are judged to exist. By the aid of an automobile software source code simulation test method based on the UPPAAL model, the source code related to the controllable physical working process in an automobile software can be tested, and accordingly safety of the system is guaranteed, software development cost can be lowered, software development speed is accelerated, and quality of softwares is improved.

Description

A kind of automobile software source code emulation test method based on UPPAAL model

Technical field

The present invention relates to a kind of field of software engineering, relate in particular to a kind of automobile software source code emulation test method based on UPPAAL model.

Background technology

Along with improving constantly of vehicle intellectualized degree, more control function and be tending towards realizing with software, cause the scale of automobile software and complexity constantly to increase.Manfred Broy is at document [M.Broy, I.H.Kruger, A.Pretschner, C.Salzmann.Engineering Automotive Software.Proceedings of the IEEE, 95 (2): 356-373,2007.] middle prediction, " on the high-grade car of future generation going on the market in the coming five years; the total amount of software will reach 1GB, software will become the main contributions person that automobile is worth, and proportion and the cost of software development simultaneously also will improve constantly ".Along with improving constantly of software proportion on automobile, automobile software development is faced with increasing challenge, these are challenged mainly from following several aspects: (1) automotive system is a kind of embedded Real-time System, there is strict time-constrain, the controlled Physics Work process of this time-constrain and software systems is closely related, and the security of automotive system mainly relies on the correctness of the controlled Physics Work process of software systems; (2) automotive system is a kind of complexity and huge embedded computer system comprises ten hundreds of, relevant to demand function entry; (3) automotive system is a kind of Distributed Computer System, comprises a large amount of for the signal such as the inter-module such as ECU, driver interactive information; (4) complicacy of electronic product and automobile electronic system function increases day by day.In the face of these challenges, need new method, model and instrument to guarantee the safety and reliability of automotive system.

For the so a kind of Safety-Critical System of automotive system, the controlled Physics Work process of the necessary profound understanding system of deviser, when the controlled Physics Work process of system is correct, just can guarantee that system is in a safe condition.Anders P.Ravn, Hans Rischel and Kirsten Mark Hansen are at document [A.P.Ravn, H.Rischel, K.M.Hansen.Specifying and Verifying Requirements of Real-Time Systems.IEEE Transactions on Software Engineering, 19 (1): 41-55, 1993.] in, point out " necessary controlled this characteristic of Physics Work process of profound understanding system of slip-stick artist of design embedded computer system, in the time that this system is safety-critical system, this clairvoyance is by clear and definite and form design basis and just seem particularly important ", this problem has caused the extensive understanding of academia.Some real-time system analysis tools based on model were there are in the last few years, as SaveCCM (SaveComp Component Model) [M. j.Carlson, J. h.Hansson, M.Nolin, T.Nolte, and P.Pettersson.The SaveCCM Language Reference Manual.MRTC report ISSN 1404-3041 ISRN MDHMRTC-207/2007-1-SE, real-Time Research Centre, university, January, 2007.], KRONOS[C.Daws, A.Olivero, S.Tripakis and S.Yovine.The tool Kronos.R.Alur, T.A.Henzinger and E.D.Sontag (Eds.) Hybrid Systems III, LNCS, Springer, vol.1066, 1996, pp.208-219, doi:10.1007/BFb0020947.], TIMES[T.Amnell, E.Fersman, L.Mokrushin, P.Pettersson, W.Yi.Times – a tool for modelling and implementation of embedded systems.K.G.Larsen and P.Niebert (Eds.) FORMATS 2003, LNCS, Springer, vol.2791, Sep.2003, pp.60 – 72, and UPPAAL[G.Behrmann doi:10.1007/978-3-540-40903-8_6.], A.David, K.G.Larsen.A Tutorial on UPPAAL.M.Bernardo and F.Corradini (Eds.) SFM-RT 2004, LNCS, Springer, vol.3185, Sep.2004, pp.200 – 236, doi:10.1007/978-3-540-30080-9_7.] [R.Alur, D.L.Dill.A Theory of Timed Automata.Theoretical Computer Science, 126 (2): 183-235, 1994.] [G.Behrmann, J.Bengtsson, A.David, K.G.Larsen, P.Pettersson, and W.Yi.Uppaal implementation secrets.W.Damm and E. – R.Olderog (Eds.) FTRTFT 2002, LNCS, Springer, vol.2469, Sep.2002, pp.3-22, doi:10.1007/3-540-45739-9_1.], these instruments can be for analyzing and verification system.At present they enough maturation can be applied in the commercial development of real-time system, Software for Design personnel can utilize the analysis result of these instruments to write software source code, but but cannot guarantee the correctness of the source code relevant to the controlled Physics Work process of system.

At present, source code test relevant to the controlled Physics Work process of system in automobile software is carried out mostly together with software test, adopts the method for manual test.Software for Design personnel, according to the function of technical documentation analytic system, carry out code and write, software design.Then tester carries out conventional software test, often need to utilize various testing tools to write a large amount of test codes and come the course of work of testing software according to technical documentation.Last test personnel download software on the hardware device having designed, according to the function of technical documentation manual test equipment.This method of testing will increase the cost of software development, the speed of reduction software development also cannot ensure the quality of software development simultaneously.If can utilize the behavior model of demand analysis stage to carry out the source code that emulation testing is relevant to the controlled Physics Work process of system, certainly will good effect will be obtained.

Summary of the invention

Object of the present invention is exactly in order to address the above problem, a kind of automobile software source code emulation test method based on UPPAAL model is provided, it can guarantee the correctness of source code relevant to controlled Physics Work process in automobile software, have guarantee automotive system security, reduce software development cost, accelerate software development speed and improve the advantages such as software quality.

To achieve these goals, the present invention adopts following technical scheme:

Automobile software source code emulation testing performing step based on UPPAAL model is as follows:

(1) specification according to demand, build UPPAAL model, data variable and pipeline (channels) variable of the overall situation statement part definition in the UPPAAL model building are exactly input variable and the output variable in test macro, utilize the UPPAAL model building to carry out emulation and functional requirement checking;

(2) according to the definition of UPPAAL model or by UPPAAL emulator, determine input queue and the output variable of test macro;

(3) be C++ code by UPPAAL model conversation;

(4) according to the input variable of test macro and output variable, determine corresponding input variable and output variable in software source code, between the input variable in software source code and test macro and output variable, set up mapping relations;

(5) input queue of test macro is set, UPPAAL model and software source code after operation code transforms, and record their Output rusults, whether the Output rusults that finally judges them is consistent, if the consistent just explanation source code relevant to the controlled Physics Work process of system is correct, otherwise just has mistake.

The performing step of described step (3) is:

(3-1) utilize MSXML (Microsoft XML Core Services) technology, from the XML file of UPPAAL model, get UPPAAL model information by DOM interface.DOM is the proposed standard of World Wide Web Consortium, is the application programming interfaces that represent to form such as XML, html format document and access, operation the various elements of document.DOM is using an XML document as a kind of tree structure and state into a document object, realizes the management to data in XML file by the method and the attribute that use the document object.

(3-2) the Part I CUppaalLocation of the C++ code of generation UPPAAL model, tri-C++ classes of CUppaalTransition and CUppaalTemplate, they are used for respectively describing the data structure of position (locations) element, conversion (transition) element and template (templates) element, this part code is fixed, only need to produce once, they are written as to C++ class storehouse.

(3-3) expression formula (bodyguard's condition (guard) expression formula, assign operation expression formula and invariant (invariants)) in the variable declarations part in UPPAAL system compiles device (comprising overall situation statement, the statement of template and the parameter of template) and the description of Timed Automata figure is carried out to C++ coded representation.Define one group of transformation rule that variable, parameter and expression formula in UPPAAL model is converted into C++ code:

R1: be the overall situation statement in C++ code by the overall situation statement Partial Conversion in UPPAAL model;

R2: be the member variable of template class object in C++ code by the cycling of elements in the part statement in UPPAAL template;

R3: the member variable that the parameter in UPPAAL template is converted into template class object in C++ code;

R4: the clock variable in UPPAAL is converted to a kind of integer variable in C++ code, and this class integer variable is relevant to the thread for timing;

R5: the integer variable of the bounded in UPPAAL is converted into a kind of integer variable in C++ code, and this class integer variable has a statement to its restriction span;

R6: the synchronisation conduit in UPPAAL is converted into a kind of string variable, and this class string variable represents their specific uses as synchronisation conduit;

R7: the invariant in UPPAAL, bodyguard's conditional expression and assign operation expression formula are converted into the overall situation function in C++ code.

(3-4) generating the Part II C++ class CUppaalModel of the C++ code of UPPAAL model, for describing the information of position, conversion and template of UPPAAL model, is below the form of CUppaalModel class definition:

Beneficial effect of the present invention:

The present invention is taking source code relevant to controlled Physics Work process in automobile software as research object, and how research can utilize the UPPAAL model of demand analysis stage to carry out the source code of emulation testing software.Use the present invention can guarantee the correctness of source code relevant to controlled Physics Work process in automobile software, thereby guarantee the security of automotive system, can reduce cost, the quickening software development speed of software development and improve software quality.The present invention is in conjunction with the actual demand in China's automobile software development, solve the critical problem in automobile software development and test, its achievement in research will be applied in automobile electronics development process, make every effort to improve the quality of Vehicle Electronic Control software, produce important economic results in society.

Brief description of the drawings

The principle of work of the automobile software source code emulation test system of Fig. 1 based on UPPAAL model;

The Timed Automata of Fig. 2 LAMPCTRL and DRIVER.

Embodiment

Below in conjunction with accompanying drawing and example, the invention will be further described.

The principle of work of the automobile software source code emulation test system based on UPPAAL model as shown in Figure 1.Statement of requirements document can be UPPAAL model by formalization representation, and UPPAAL model can be used in checking demand and produces software source code.In order to realize automatism and the real-time of source code emulation test system, need to be C++ code by UPPAAL model conversation.The input of source code emulation test system is the queue of a tlv triple (d, e, t), and wherein d is the set of data variable, and e is the set of event variable, and t is the set of time constraints.An input tuple (d, e, t) is illustrated in data and is input as in the situation that d, time constraints are t, sends this event request information of e.Receive after input (d, e, t) when the UPPAAL model after software source code and code conversion, will produce respectively the Output rusults of a data variables collection.UPPAAL model after software source code and code conversion is handled all input data (tlv triple (d, e, t) queue) after, if their Output rusults unanimously just can judge that source code is correct, otherwise just there is mistake.

Described UPPAAL combines proposition by Uppsala university of Sweden and Aalborg university of Denmark in nineteen ninety-five, it is a kind of real time system modelling building based on Timed Automata theory, emulation and verification tool, UPPAAL modeling language has carried out some expansions to traditional Timed Automata, some extra characteristics are introduced, expression formula in UPPAAL can be used the integer variable (or integer array) of clock variable and bounded, this expansion has improved the ability to express of Timed Automata greatly, can express more complicated bodyguard's conditional expression, assign operation expression formula and invariant.UPPAAL model comprises the long-pending of a non-deterministic parallel procedure (process), each process is described to the Timed Automata being made up of limited control structure, real number value clock and variable, between process by pipeline and (or) shared variable carries out communication, pipeline is defined as shape as chan c, is c! with label Limit can be c with label? limit synchronous, pipeline is for ensure that two conversions between different automats carry out simultaneously.UPPAAL mainly verifies time constraints and accessibility by fast search mechanism, and its major advantage is high efficiency and convenience.

Described Timed Automata is proposed by R.Alur and D.Dill, it is a kind of finite state machine of expanding clock variable, use dense time model, the real number value that clock variable uses is limited, all clock synchronous change, and in application, often several Timed Automatas are formed to networks of timed automatas by clock set and operation.Before the definition that provides Timed Automata, first provide following definition: establish the set that C is clock variable, B (C) is simple condition or union, wherein x, y ∈ C, clock assessment (clock valuation) refers to the function from clock set to nonnegative real number if it is the set of all clock assessments.For x ∈ C, u ₀(x)=0.U ∈ I (l) represents that u meets I (l).The grammer of a Timed Automata can be defined as hexa-atomic group of (L, a l ₀, C, A, E, I), wherein L is the set of finite position, l ₀∈ L is the set of initial position (initial location), and A is the set of operation (actions), dual operation (co-actions) and built-in function (τ-action), be the set that connects the limit (edges) of two positions, can be accompanied with the reset operation of operation, bodyguard's condition and clock on limit, I:L → B (C) adds invariant in position.

Timed Automata (L, a l ₀, C, A, E, I) semanteme be defined as a kind of converting system < S with label, s ₀, → >, wherein the set of state, s ₀=(l ₀, u ₀) be original state, the state transformational relation being expressed as follows:

If $\&ForAll;d^{\&prime;}:0\&le;d^{\&prime;}\&le;d\&DoubleRightArrow;u+d^{\&prime;}\&Element;I\left(l\right),$ ? $-(l,u)\stackrel{d}{\&RightArrow;}(l,u+d);$

If exist e=(l, a, g, r, l ') ∈ E, s.t.u ∈ g, and u ' ∈ I (l),

Wherein for u+d refers to the value of each clock x in C set is mapped as to u (x)+d, represent clock assessment, this clock assessment is mapped to 0 by each clock in r set, with u C consistent on r.

UPPAAL instrument is made up of three parts:

(1) system compiles device: formed by the tree-like pane for obtaining different templates and statement, drawing painting canvas (text) editing machine, for creating and editor UPPAAL model.Overall situation statement, template, process assignment and system definition four parts that in tree-like pane, can get UPPAAL model are described.A UPPAAL model system can be defined as a kind of parallel networks of timed automatas, and in UPPAAL, Timed Automata is named as process, and each process is exactly the example of a parameterized template.

(2) emulator: comprise manual mode, random pattern and three kinds of working methods of tracing mode.Under manual mode user manually operational system, carry out the conversion of specific state.Under random pattern, user can allow system free-running operation.Under trace model, whether user can observe specific state by path trace and can reach.

(3) validator: for performances such as the accessibility performance (reachability properties) of verification system, security (safety properties) and active (liveness properties).

For method of the present invention is described better, to utilize BCM (Body Control Module, car body control module) a simple functions illustrate, this function can be described as: if ignition switch forwards to after the position ON opening, headlight can be lighted and extinguish; If under normal state, in firing key is transferred to 10 minutes, headlamp switch forwards ON to from OFF within 2 seconds, returns OFF at BCM, the function of getting home of following of light is activated, and headlight time delay lighted for 30 seconds, then extinguished.Utilize UPPAAL instrument to describe this function, the model of structure may be defined as:

Overall situation statement:

const?bool?OUT＝false,IN＝true,OFF＝false,ON＝true；

const?int?NORMAL＝0,SECURITY＝1,QUIT_SECURITY＝2,ALARM＝3；

chan?SwitchOn,SwitchOff；

int[0,1]KeyStatus,IgnitionStatus；

int[0,3]AlarmStatus；

int[0,1]ExtLEnable；

clock?t1,t2,t3；

The part statement of template ExtLampCtrl:

int[0,1]IsHomeLight；

The part statement of template DRIVER:

Process assignment:

LAMPCTRL＝ExtLampCtrl()；

System definition:

system?LAMPCTRL,DRIVER；

Table 1 is explained the variable in described UPPAAL model, Fig. 2 is described LAMPCTRL and the Timed Automata of DRIVER, comprise three position element: SHUTTED at the Timed Automata of LAMPCTRL, ILLUMINING and ILLUMINED, initial position is SHUTTED.In the Timed Automata of DRIVER, comprise two position element SHUTTED and ILLUMINED, initial position is SHUTTED.Table 2 is the output of the input of test macro and the Timed Automata of LAMPCTRL, and wherein the data output variable of the Timed Automata of LAMPCTRL is exactly the output variable of source code emulation test system.Be C++ code by UPPAAL model conversation, and setting up after mapping relations between input variable in software source code and test macro and output variable, just can emulation testing source code.

The explanation of variable in table 1 UPPAAL model

The output of the input of table 2 test macro and the Timed Automata of LAMPCTRL

By reference to the accompanying drawings the specific embodiment of the present invention is described although above-mentioned; but not limiting the scope of the invention; one of ordinary skill in the art should be understood that; on the basis of technical scheme of the present invention, those skilled in the art do not need to pay various amendments that creative work can make or distortion still in protection scope of the present invention.

Claims (1)

1. the automobile software source code emulation test method based on UPPAAL model, is characterized in that, performing step is as follows:

(1) specification according to demand, build UPPAAL model, data variable and the pipeline variable of the overall situation statement part definition in the UPPAAL model building are exactly input variable and the output variable in test macro, utilize the UPPAAL model building to carry out emulation and functional requirement checking;

(2) according to the definition of UPPAAL model or by UPPAAL emulator, determine input variable and the output variable of test macro;

(3) be C++ code by UPPAAL model conversation; The concrete steps of described step (3) are:

(3-1) utilize MSXML technology, from the XML file of UPPAAL model, get UPPAAL model information by DOM interface; DOM is the proposed standard of World Wide Web Consortium, is the application programming interfaces that represent to form such as XML, html format document and access, operation the various elements of document; DOM is using an XML document as a kind of tree structure and state into a document object, realizes the management to data in XML file by the method and the attribute that use the document object;

(3-2) the Part I CUppaalLocation of the C++ code of generation UPPAAL model, tri-C++ classes of CUppaalTransition and CUppaalTemplate, they are used for respectively describing the data structure of position element, switch element and template elements, this part code is fixed, only need to produce once, they are written as to C++ class storehouse;

(3-3) expression formula in the variable declarations part in UPPAAL system compiles device and the description of Timed Automata figure is carried out to C++ coded representation; Wherein, variable declarations part comprises overall situation statement, the statement of template and the parameter of template, and the expression formula in the description of Timed Automata figure comprises bodyguard's conditional expression, assign operation expression formula and invariant; Define one group of transformation rule that variable, parameter and expression formula in UPPAAL model is converted into C++ code:

R1: be the overall situation statement in C++ code by the overall situation statement Partial Conversion in UPPAAL model;

R2: be the member variable of template class object in C++ code by the cycling of elements in the part statement in UPPAAL template;

R3: the member variable that the parameter in UPPAAL template is converted into template class object in C++ code;

R4: the clock variable in UPPAAL is converted to a kind of integer variable in C++ code, and this class integer variable is relevant to the thread for timing;

R5: the integer variable of the bounded in UPPAAL is converted into a kind of integer variable in C++ code, and this class integer variable has a statement to its restriction span;

R6: the synchronisation conduit in UPPAAL is converted into a kind of string variable, and this class string variable represents their specific uses as synchronisation conduit;

R7: the invariant in UPPAAL, bodyguard's conditional expression and assign operation expression formula are converted into the overall situation function in C++ code;

(3-4) generate the Part II C++ class CUppaalModel of the C++ code of UPPAAL model, for describing the information of position, conversion and template of UPPAAL model;

(4) according to the input variable of test macro and output variable, determine corresponding input variable and output variable in software source code, between the input variable in software source code and test macro and output variable, set up mapping relations;

(5) input queue of test macro is set, UPPAAL model and software source code after operation code transforms, and record their Output rusults, whether the Output rusults that finally judges them is consistent, if the consistent just explanation source code relevant to the controlled Physics Work process of system is correct, otherwise just has mistake.