CN105843995A - Model-driven based IMA system time resource configuration verification method - Google Patents

Abstract

The invention discloses a model-driven based IMA system time resource configuration verification method, and belongs to the field of safety analysis of avionics systems. The method specifically comprises following steps: analyzing an IMA system resource configuration flow; performing modeling on IMA system time behavior related concepts (including a communication virtual link, an AFDX terminal, a resource device module, partition and processes) based on modeling and analysis of real-time and embedded systems (MARTE) so as to obtain a corresponding MARTE module; designing an IMA system modeling method based on a model-driven framework; analyzing IMA system partition scheduling model features and converting the MARTE module obtained by the system time behavior concepts into an MAST-2 text module for description and adding a custom scheduling strategy. By designing the system partition schedulability verification framework, and analyzing the MAST-2 text module through an MAST schedulability analyzing tool, a correctness verification method is designed based on a system schedulability judgment.

Description

A kind of IMA system time resource distribution verification method based on model-driven

Technical field

The invention discloses a kind of IMA system time resource distribution verification method based on model-driven, relate to belonging to boat The safety analysis technical field of empty electronic system.

Background technology

Along with the development trend that aviation field system is day by day complicated, comprehensively modularized avionics system (Integrated Modular Avionics, IMA) it is widely used to airborne avionics system.IMA possesses multiple real-time application simultaneously at meter Calculating the feature run on platform with time/space multicompartment form, the function of system, performance, reliability, maintainability have the biggest Lifting, and developing, safeguard, also can be effectively controlled in the expense upgraded.Resource-sharing is that IMA system is the most special Levy, how in IMA systems development process, wherein subsystems is carried out effective resource distribution and ensures resource distribution Safety will seem most important, also become a significant challenge of avionics system engineering field in recent years.Meanwhile, Set up system safety analysis method based on model and combining form method carries out checking and is increasingly becoming embedded-type security Demand in critical system development process and significant challenge.

The configuration of IMA system resource is a vital part in whole development process, how to guarantee allocated resource Meeting system requirements is the essential condition that system can the most correctly be run.Due to the resource-sharing characteristic of IMA system, IMA system System structure is to be coupled together by AFDX by multiple hardware cells, therefore considers that the resource distribution checking of network layer is complete to system The lifting of standby property has the biggest necessity.The present invention verifies angle from time resource, it is considered to when distributing the IPM resource that each AFDX connects, Operated in the multiple application assigned CPU time on IPM according to demand, owing to IMA system partitioning has by stages scheduling With in subregion scheduling two-level scheduler characteristic, thereby, it is ensured that the scheduling time of all subregions meet application requirement and subregion Interior all tasks meet the main research that scheduling time constraint is the present invention.

Model-driven engineering (Model Driven Engineering, MDE) is a kind of to model (modeling) and mould The software development methodology that (Model Transformation) is main path changed by type, is to occur in system engineering in recent years With the main stream approach in field of software engineering, its basic thought is with system model design, model conversion and analysis/be verified as work The important core of journey, improves the ability to complex engineering system development and maintenance and efficiency.System development based on model and shape The requirement [7-9] of formula method the most formally proposes in avionic software airworthiness standard DO-178C of latest edition.MARTE (Modeling and Analysis of Real-Time and Embedded Systems, real time embedded system modeling with Analyze) support required function modeling in complex embedded system design and the time-constrain being widely present, resource distribution Deng modeling and the analysis of nonfunctional space, it is complicated real-time embedded to be that the class that current industrial quarters has been applied is specifically designed for The specification of system design and analysis, application MARTE real-time characteristic system time behavior is modeled description will assist in right Checking in terms of system time resource requirement.

Summary of the invention

The technical problem to be solved is: for the defect of prior art, it is provided that a kind of based on model-driven IMA system time resource distribution verification method, the method combines divides IMA system resource configuration flow and system resource framework Analysis, during based on MARTE modeling language to the communication virtual link of system, AFDX terminal, resource apparatus module, subregion, process etc. Between concept be modeled, and by obtained MARTE model conversion be MAST-2 text model describe, be finally based on MAST adjustable Degree analytical tool is analyzed being verified result, and the method devises time resource configuration based on system schedulability checking Correctness verification method.

The present invention solves above-mentioned technical problem by the following technical solutions:

A kind of IMA system time resource distribution verification method based on model-driven, concrete steps include:

Step 1, for IMA system resource configuration needs, in conjunction with IMA grid the resource structure, sets up IMA system time Behavior element；

Step 2, based on the analysis to Embedded System Modeling Yu norm of analysis MARTE, to IMA system time behavior element It is modeled obtaining the MARTE model of correspondence；

Step 3, is that MAST-2 text model is described, in conjunction with self-defined scheduling strategy by described MARTE model conversion Design system schedulability validation framework；

Step 4, is analyzed based on schedulable analytical tool MAST MAST-2 text model and emulates, be verified knot System schedulability is judged by fruit.

As present invention further optimization scheme, described IMA system time behavior related notion element includes communication void Intend link, AFDX terminal, resource apparatus module, subregion, process.

Specifically include as present invention further optimization scheme, such as described step 2:

It is analyzed obtaining each attribute of an element feature and function to the time behavior element of system；

Analyze the component property of MARTE model element, above-mentioned time behavior element is utilized corresponding MARTE assembly table Show, obtain the MARTE model of all time behavior elements.

As present invention further optimization scheme, in step 3, in the element of described MAST-2 text model,

Processing_Resource is used for describing the disposal ability of a nextport hardware component NextPort, including perform one section of code or Forward one group of message etc.；

Scheduler model element manages the application being assigned on processor by using suitable scheduling strategy or appoints Business；

Schedulable_Resource model element describes a schedulable entity；

Operation model element describes calculating task or the executive capability scope of message transmission, including tasks carrying Time range and transmission message size scope；

End_To_End_Flow model element describes the activity phase under sequence of events trigger condition performed in system Contact between Hu, including external event External_Events, internal event Internal_Events and event handling Device Event_Handlers tri-kinds describes type to be come.

Time behavior concept in IMA system and the corresponding relation such as following table of MARTE assembly:

Prior art is compared, and the present invention is directed to IMA System Resources Sharing feature, it is achieved the modeling analysis of IMA system with test Card, has the characteristics that and advantage:

(1) present invention is based on executing model drive structure thought, it is provided that a kind of IMA system time behavior related notion arrives The modeling method of MARTE model, can be further analyzed obtaining model, have higher motility and abstractness.

(2) MARTE model conversion is that MAST-2 text model is described by the present invention, analyzes turning of model element Change relation, related tool can be used directly to carry out schedulability checking based on MAST-2 text model and analyze.

(3) present invention proposes a kind of IMA system time resource distribution verification method based on system adjustable sex determination, pair time Between require that the strict reliability of high real-time avionics system and the lifting of safety have very great help.

Accompanying drawing explanation

Fig. 1 is IMA time resource configuration verification method flow diagram based on model-driven；

Fig. 2 is IMA system resource configuration flow analysis；

Fig. 3 is communication virtual link MARTE model；

The MARTE model of Fig. 4 AFDX terminal；

The MARTE model of Fig. 5 resource apparatus module；

Fig. 6 subregion MARTE model；

Fig. 7 process MARTE model；

Fig. 8 is IMA system partitioning scheduling model feature；

Fig. 9 is IMA system adjustable validation framework；

Figure 10 is the resource structures framework of airborne water processing subsystem；

Figure 11 is airborne water processing subsystem correspondence MARTE model；

Figure 12 is airborne water processing subsystem system schedulability result of determination.

Detailed description of the invention

Embodiments of the present invention are described below in detail, and the example of described embodiment is shown in the drawings, the most ad initio Represent same or similar element to same or similar label eventually or there is the element of same or like function.Below by ginseng The embodiment examining accompanying drawing description is exemplary, is only used for explaining the present invention, and is not construed as limiting the claims.

It is desirable to provide the verification method of a kind of IMA system time resource distribution being applicable to avionics system, it is provided that The time behaviors such as the communication virtual link in IMA system, AFDX terminal, resource apparatus module, subregion, process are carried out MARTE Modeling, and be that MAST-2 model is described by gained MARTE model conversion, then call MAST instrument and emulate and analyze It is verified result.

Below in conjunction with the accompanying drawings technical scheme is described in further detail:

As it is shown in figure 1, the present invention IMA system time resource distribution verification method based on model-driven can wrap Include and implement step in detail below:

Step 1, with reference to the Fig. 2 analysis to IMA system resource configuration needs, in conjunction with to IMA grid the resource structure Describe, set up IMA system time behavior related notion element.

IMA grid the resource structure is mainly made up of IPM, RDC, AFDX switch and AFDX terminal etc..IMA resource Configuration process is: 1) configuration prepares: needs to arrange some before IMA resource distribution works and applies leading in whole engineering configures With parameter, attribute and constraint etc., such as system available resources territory, power bus etc..2) HFRQ and RDRQ is obtained: according to needs The analysis of the aircraft-level function being integrated on IMA platform, obtains the demands such as concrete calculating resource, I/O resource, the communication resource, Include security requirement simultaneously, further according to the resource required by HFRQ, obtain required system resource requirements (such as IPM, RDC, AFDX Etc. resource), requirement definition can be formed specified format configuration file (such as XML), convenient parsing configuration file in following work Reacquisition demand.3) IMA Resource Calculation: calculate IMA system configuration resource requirement quantity according to HFRQ and RDRQ.4) generate IMA network architecture diagram: according to HFRQ and RDRQ and the primary Calculation of resource, forms SNA figure, and according to demand System resource assembly is attached by bus.5) resource distribution: according to HFRQ and RDRQ, carry out the distribution of system resource, Including calculating resource, I/O resource, the distribution of the communication resource.6) configuration file is formed: resource distribution forms configuration file after completing, And analysis further to configuration file and checking.

Step 2, based on the analysis to Embedded System Modeling Yu norm of analysis MARTE, is correlated with to IMA system time behavior Concept (including communicate virtual link, AFDX terminal, resource apparatus module, subregion, process etc.) is modeled obtaining correspondence MARTE model, with reference to the MARTE model that Fig. 3-7 is related notion, devises a kind of IMA system modelling based on model-driven Method.Concrete modeling method is as described below:

Communication virtual link (Virtual Link) is to be set up by between the terminal node communicated in AFDX network The logical links come, has bandwidth resources isolation features, is generally made up of one or more sublinks.The bandwidth resources of virtual link Main setting by parameters such as data frame length, bandwidth distribution gap, data-transmission modes is guaranteed.In MARTE CommunicationMedia (CM) assembly can represent the data transmission between source terminal and purpose terminal, therefore uses CM assembly In elementSize attribute can represent the data frame length in virtual link, with the capacity attribute in CM assembly and ElementSize attribute represents the bandwidth distribution gap parameter in virtual link, with the transmMode attribute in CM assembly Represent data-transmission mode, mainly have three kinds of transmission modes to be respectively as follows: simplex, half-duplex and full-duplex. ginseng Virtual link MARTE model is given according to Fig. 3.

AFDX terminal system offer equipment is to the communication access mouth of AFDX network, under being responsible for from subregion or equipment Send out communication task and carry out data transmit-receive.Terminal system is arranged according to the Frame size in communication requirement and communication link Relevant systematic parameter, the parameter such as including terminal maximum data frame length and minimum Inter-packet gap.In MARTE CommunicationEndPoint (CEP) assembly represents the interface that communication element is transmitted by CM, and only comprises one ElementSize attribute in attribute packetSize, and CM assembly matches.Therefore represent with the CEP assembly in MARTE AFDX terminal, represents, with the packetSize attribute in CEP assembly, the Frame size parameter that terminal and communication link match. AFDX terminal MARTE model is given with reference to Fig. 4.

Resource apparatus module in IMA system includes core processing module IPM, and remote data concentrator RDC, AFDX exchange Machine and controller etc., each inside modules has oneself independent processing unit to perform corresponding function.Wherein IPM is for staying Staying the application in subregion and provide calculating resource, AFDX switch provides the communication resource, is used for providing message forwarding capability, RDC It is responsible for collecting data and being packaged data processing as avionics system input-output equipment.HwProcessor in MARTE Assembly can be used to the execution environment indicated when system is run, including the dispatching distribution of CPU, Memory Allocation, communication connection etc., because of IPM modular concept in IMA can be modeled by this with the hwProcessor assembly of MARTE, and module name can be used Description component property defines, in the mainScheduler attribute comprised with hwProcessor SchedPolicy arranges the scheduling strategy of by stages.HwProcessor assembly in MARTE and HwDevice assembly simultaneously The resource module concepts such as AFDX switch, RDC can be represented.Resource module MARTE model is given with reference to Fig. 5.

Subregion (Partition) in IMA system IPM is a key concept in IMA system, it require in the time and Isolation spatially, it is ensured that each software runs in the subregion of oneself, and the operation of different subregion task is not mutually by shadow Ring.In the IPM resource distribution stage, cycle and operation time that subregion is scheduled configure the most as desired, and different subregion Address space is also distributed by memory management.SwSchedulingResource (SR) in MARTE and The distribution feelings of resource when ProcessingResource (PR) assembly constructs a logical resource jointly to indicate that system is run Condition (task scheduling, partitioned resources etc.), each logical resource may be used to indicate that the situation such as schedule information and Memory Allocation.Therefore Useful SR and PR assembly represents the zoning concept in IMA system.SR assembly indicates the task schedule information in subregion, in SR Schedulers attribute indicates subregion scheduling strategy relevant information, and PR assembly specifies the task-set in subregion simultaneously.With reference to Fig. 6 Provide subregion MARTE model.

Process (Process) in subregion is system executive agent, contains execution code, performs data and stack area The resources such as territory.Multiple processes operate in certain subregion, and subregion is by indicating the scheduling strategy of process, and preemptive policy, internal memory divides Joining situation, the information such as maximum response time controls the execution of process, thus realizes corresponding application function.MARTE can be used In SR assembly represent the idea of course in subregion, because SR assembly is held by time cycle or external event in MARTE Line journey, is the most basic scheduling execution units of system.Corresponding task-set institute can be represented by the respective attributes of SR assembly The time-constrain comprised, including task the execution cycle, whether can seize, deadline, priority etc..With reference to Fig. 7 be given into Journey MARTE model.

Step 3, for IMA system partitioning scheduling model and the analysis of MAST-2 model element, by general for system time behavior Reading gained MARTE model conversion is that MAST-2 text model is described and adds self-defined scheduling strategy, devises a germline System schedulability validation framework.

The IMA system call aspect of model be given with reference to Fig. 8, system call is divided into by stages to dispatch and scheduling in subregion:

1) by stages scheduling: the first order is scheduling to by stages scheduling, the by stages scheduling in IMA system is in IPM resource Determining during configuration, each subregion is periodically assigned to timeslice, and timeslice size duration represents.By stages is dispatched Characteristic be: subregion is the elementary cell of scheduling, does not has priority between subregion, and by stages scheduling repeated to adjust according to certain cycle Degree, is determined, all subregions are at least assigned to a subregion window dispatching cycle by the timeslice size of IPM resource distribution.Subregion Between scheduling need to ensure the timeslice size of all subregions and cycle and main time frame demand to be met, and window dispatch is not Can overlap.

2) scheduling in subregion: the second level is scheduling to scheduling in subregion, in subregion, scheduling refers to the process in certain subregion Or dispatch between task.In subregion, scheduling carries out time distribution according to corresponding task scheduling strategy to task process collection.Task Scheduling strategy be can the scheduling strategy of preemptive type, generally: EDF (off period is preferential the earliest), LLF (free time is preferential), RMS (rate-monotonic), DMS (dullness scheduling deadline) etc..It is cannot be concrete for each task in the IPM resource distribution stage The timeslice being assigned to, so cannot directly judge whether the timeslice that each task obtains meets demand.Need exist for User Defined scheduling strategy, carries out the judgement of schedulability followed by MAST instrument.

Analysis for MAST-2 model element being presented herein below by MARTE model conversion is that MAST-2 text model is retouched State:

Processing_Resource model element is used for describing the disposal ability of a nextport hardware component NextPort, including performing one Section code or one group of message of forwarding etc..The subtype of Processing_Resource has Regular_Processor and AFDX_ Link etc., Regular_Processor describe processor module and perform the ability of application program, and AFDX_Link describes processor Or between switch, use the link of AFDX protocol transmission message.So IPM module can be used in MARTE model Regular_Processor type in Processing_Resource represents, AFDX switch network can use AFDX_ Link represents, table 1 show in particular the MARTE model conversion of an IPM module and AFDX switch network module and is Processing_Resource model element usually represents:

Table 1Processing_Resource model element describes

Scheduler model element manages the application being assigned on processor by using suitable scheduling strategy or appoints Business, scheduling strategy comprises fixed priority Fixed_Priority_Policy, the earliest Deadline First EDF etc.. Scheduler has hierarchy, comprises Primary_Scheduler and Secondary_Scheduler type.Primary_ Scheduler mainly provides all of disposal ability of processor to relevant dispatch service entity, and Secondary_Scheduler is then Corresponding concrete disposal ability is provided for the process in dispatch service entity.Therefore the partition information in MARTE model and Dispatch situation can be represented by the Primary_Scheduler in Scheduler, and progress information and dispatch situation can be by Secondary_Scheduler in Scheduler represents.Table 2 specifically gives by stages scheduling and the interior scheduling of subregion of correspondence Scheduler text model:

Table 2Scheduler model element describes

Schedulable_Resource model element describes a schedulable entity, such as an execution in processor Communication task in task or network.The subtype of Schedulable_Resource has Thread and Communication_ Channel, Thread describe a thread or the execution of task in Regular_Processor model, Communication_Channel describes the transmission of message in network.Therefore in the MARTE model of IMA system, each process Task can be described by Thread type, and table 3 is certain Schedulable_ calculating task task1 in IMA system Resource model element describes:

Table 3Scheduling_Resource model element describes

Operation model element describes certain calculating task or the disposal ability model performing to need of message transmission Enclose, including task execution time scope and transmission message size scope.The subtype of Operation includes Code_Operation And Message_Operation, it is respectively described calculating task and the process of message transmission.Table 4 calculates for performing certain in IMA system The MAST_2 model of the disposal ability that task task1 and message transmit nettask1 describes:

Table 4Operation model element describes

End_To_End_Flow model element describes the activity phase under sequence of events trigger condition performed in system Contact between Hu, (comprises the time including external event External_Events, internal event Internal_Events Demand) and event handler Event_Handlers three types describe.Can be by IMA by stages scheduling End_To_ End_Flow model element describes, and entry events belongs to external event (External_Events), and its type is Periodic, Represent that major time slice is period allocated；End Event belongs to internal event (Internal_Events), its hard overall deadline (Hard global deadline) can represent the major time slice turnaround time that subregion is dispatched, and the timeslice of each subregion is arranged on Between entry events and End Event, and have respectively a Hard global deadline represent to come subregion can time Sheet, corresponding MAST_2 model describes as shown in table 5:

Table 5End_To_End_Flow model element describes

Step 4, is analyzed based on schedulable analytical tool MAST MAST-2 text model and emulates, be verified knot System schedulability is judged by fruit.

After the MAST-2 model obtaining IMA system describes, can be analyzed by MAST instrument and emulation is tested Card result, provides an IMA system adjustable validation framework with reference to Fig. 9.

Modeling and the time resource of IMA system is introduced below as an example with the airborne water processing subsystem in IMA Configuration verification method.The resource structures framework of airborne water processing subsystem it is shown with reference to Figure 10.

Table 6 describes airborne water processing subsystem application partition (Papp) and system partitioning (Psys) at total time framework (10ms) dispatch situation of task-set in by stages under and subregion, scheduling strategy is respectively EDF and DMS, the timeslice of distribution Size is respectively 6 and 4, includes the task-set parameters such as task, cycle, execution time and deadline in each subregion.

Table 6 airborne water processing system subregion schedule information (unit of time: ms)

According to step 2 description for MARTE model system converting to IMA, WAW system and temporal information thereof can be converted to MARTE correspondence assembly describes, and this MARTE model is with reference to shown in Figure 11.

In the MARTE model that airborne water processing subsystem system is corresponding, with HwProcessor assembly and HwDevice assembly 2 AFDX switches in expression system, 2 RDC remote data collector and 2 controllers, wherein comprise some attributes Parameter；HwProcessor assembly and MutualExclusionResource assembly represent IPM processor module, comprise one under it Individual system partitioning and an application partition, respectively with the swSchedulingResource in MARTE and The combination of ProcessingResource assembly and association attributes represents, each subregion assumes there are two running of tasks, uses SwSchedulingResource assembly represents its scheduling attributes；Last each task correspondence has time constraint information, uses MARTE In TimeConstraint assembly represent, the temporal information such as including Runtime sheet, deadline.

After obtaining the MARTE model of airborne water processing subsystem, the method described according to step 3 and the example be given are set up The MAST-2 model text that airborne water processing subsystem is corresponding, by the relevant MARTE element in airborne water processing subsystem It is converted into model element corresponding for MAST-2 usually to describe, and adds the self-defined scheduling strategies such as constraint correlation time.Finally by Schedulable analytical tool in MAST tool set is analyzed MAST-2 text model and is obtained schedulability result of determination, exists including task Emulate the scheduling Gantt chart in duration and result of determination with reference to shown in Figure 12.This result represents system adjustable degree, system time Resource distribution has been verified.

Above in conjunction with accompanying drawing, embodiments of the present invention are explained in detail, but the present invention is not limited to above-mentioned enforcement Mode, in the ken that those of ordinary skill in the art are possessed, it is also possible on the premise of without departing from present inventive concept Make a variety of changes.The above, be only presently preferred embodiments of the present invention, and the present invention not makees any pro forma limit System, although the present invention is disclosed above with preferred embodiment, but is not limited to the present invention, any skill being familiar with this specialty Art personnel, in the range of without departing from technical solution of the present invention, when the technology contents of available the disclosure above make a little change or It is modified to the Equivalent embodiments of equivalent variations, as long as being that the technology according to the present invention is real without departing from technical solution of the present invention content Matter, within the spirit and principles in the present invention, any simple amendment, equivalent and the improvement that above example is made Deng, within all still falling within the protection domain of technical solution of the present invention.

Claims (5)

1. an IMA system time resource distribution verification method based on model-driven, it is characterised in that concrete steps include:

Step 1, for IMA system resource configuration needs, in conjunction with IMA grid the resource structure, sets up IMA system time behavior Element；

Step 2, based on the analysis to Embedded System Modeling Yu norm of analysis MARTE, is carried out IMA system time behavior element Modeling obtains the MARTE model of correspondence；

Step 3, is that MAST-2 text model is described by described MARTE model conversion, designs in conjunction with self-defined scheduling strategy System schedulability validation framework；

Step 4, is analyzed based on schedulable analytical tool MAST MAST-2 text model and emulates, be verified result pair System schedulability judges.

A kind of IMA system time resource distribution verification method based on model-driven, its feature exists In: described IMA system time behavior related notion element includes communication virtual link, AFDX terminal, resource apparatus module, divides District, process.

A kind of IMA system time resource distribution verification method based on model-driven, it is special Levy and be, as described step 2 specifically includes:

It is analyzed obtaining each attribute of an element feature and function to the time behavior element of system；

Analyze the component property of MARTE model element, utilize corresponding MARTE assembly to represent above-mentioned time behavior element, MARTE model to all time behavior elements.

A kind of IMA system time resource distribution verification method based on model-driven, it is special Levy and be: in step 3, in the element of described MAST-2 text model,

Processing_Resource is used for describing the disposal ability of a nextport hardware component NextPort, including performing one section of code or forwarding One group of message etc.；

Scheduler model element manages, by using suitable scheduling strategy, the application or task being assigned on processor；

Schedulable_Resource model element describes a schedulable entity；

Operation model element describes calculating task or the executive capability scope of message transmission, including task execution time Scope and transmission message size scope；

End_To_End_Flow model element describe the activity performed in system under sequence of events trigger condition mutually it Between contact, including external event External_Events, internal event Internal_Events and event handler Event_Handlers tri-kinds describes type to be come.

A kind of IMA system time resource distribution verification method based on model-driven, it is special Levying and be, time behavior concept and the corresponding relation of MARTE assembly in IMA system include:

" telecommunication media assembly CommunicationMedia " in MARTE assembly, " elementSize ", " capacity+ ElementSize ", " communication terminal assembly CommunicationEndPoint ", " packetSize ", " hardware processing resources group Part ", " hwProcessor+MutualExclusionResource ", " hwProcessor+HwDevice ", " processor module HwProcessor ", " mainScheduler ", " scheduling resource assembly swSchedulingResourc and process resource component ProcessingResource ", " schedulers ", " isPreemptable ", " scheduling resource assembly swSchedulingResource”、“type”、“timeSliceElements”、“deadlineElements”、 “periodElements”、“priorityElements”；

Respectively " communication virtual link ", " Frame size ", " the bandwidth distribution gap " in corresponding IMA system, " AFDX terminal ", " Frame size ", " resource apparatus module ", " IPM ", " AFDX switch, RDC, controller ", " module ", " tune of by stages Degree strategy ", " subregion ", " scheduling strategy in subregion ", " whether the process task in subregion can be seized ", " process ", " process class Type ", " process perform time ", " process deadline ", " process cycle ", " process priority ".