For the highest requirements in the development, verification and approval of safety-critical applications and systems
Safety- and mission-critical software development
CADFEM/Ansys products and services help you meet safety-related approval requirements for embedded systems with up to 85% less certification effort. Automated certification steps are closely coordinated with standards.
General introduction to embedded system development
Safety- or mission-critical software applications (embedded software) are subject to strict certification and approval requirements. Systematic errors must be demonstrably excluded, which increases the process, development and verification effort.
- Testing and verification processes being carried out consistently at model level
- Reliable error identification right in the prototyping and design phase
- Initial avoidance of many error classes through the formal approach and automatic code generation (using a DO-330 TQL-1 tool)
- Less static code analysis and fewer code reviews and module tests
- Highly automatable integration tests
- Short and direct design cycles
- Consistent approach from the requirements to the documented application
- Incorporation into continuous integration strategies
- Comprehensive support and documentation (approvals strategy, tool qualification, design, testing)
- Faster development and greatly simplified verification and validation activities,
resulting in efficient workflows - Identical, demonstrably unambiguous and complete models, requirements, codes and documentation
- Proven strategies, certification kits and planning documents (development plan, test plan, etc.)
Complete solutions for the highest requirements
Ansys and CADFEM provide complete solutions for the graphical creation, verification and automatic generation of safety-critical system and software applications with high requirements with respect to functional safety, robustness and reliability. The relevant requirements are defined in standards issued by various safety authorities:
• DO-178C to Level A – (Aerospace & Defense)
• IEC 61508 to SIL 3 – (Industrial/Generic Functional Safety)
• EN 50128 to SIL 3/4 – (Rail Transportation)
• IEC 60880 compliance – (Nuclear Energy)
• ISO 26262 to ASIL D – (Automotive)
Specification and design models help to define and structure requirements, drafts, analyses, and verification and validation activities in the development cycle. The various standards indicate ways to ensure individual development and verification steps and provide evidence of the achievement of safety objectives.
Tool qualification is needed if processes required by standards are to be eliminated, reduced or automated without having to verify the results. If, for example, an application is coded in C during the coding phase, certain properties of the code have to be proven:
- Correct functionality with reference to requirements
- Completeness
- Consistency
- No dangerous constructs (e.g. pointer or memory operations)
- No dead code
This creates a significant amount of verification work:
- Low-level module tests
- Static code analysis
- Independent code reviews with appropriate checklists
- Test coverage measurement on the code
Certain activities that would otherwise be necessary can be omitted, moved to model level and therefore greatly simplified with a qualifiable code generator that demonstrably ensures certain properties of the generated code.
Ansys SCADE sets standards in automatic code generation. All safety-critical components are reliably harmonized. This practically eliminates the coding phase and the code can be directly integrated into the target platform.
The consistency of the modeling (safety analysis, architecture, software design and HMI) in combination with a qualifiable/certified code generator means that many of the verifications needed can be achieved already on the model.
With verification established early on in the process, subsequent changes and corrections can be kept to a minimum:
- Static analysis of consistency and completeness
- Dynamic simulation, also in interaction with physical environmental models
- Model-based analysis of test coverage
- Model-based test process
- Static analysis of stack consumption and WCET (safe upper limit for execution time on the target platform)
Ansys SCADE has been developed in accordance with industry-specific standards and processes and has played a key role in shaping these. The combination of longstanding approvals experience, proven tools and a strict internal development process guarantee successful certification.
Related Training
Added value through Ansys SCADE products
Here you will find our products for the creation, verification and automatic generation of safety-critical system and software applications
Customer Examples
More related information
More simulation applications
Our simulation solutions cover a wide spectrum of physics.
For the most important domains of physics, there are also specific applications that go much further in-depth.
CADFEM covers practically all of them. With software and technical expertise.
