1. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Safety Critical Software Solutions for Mission Critical Systems A Unique Approach to FACE Conformance DDC-I / OAR

2. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering DDC-I, Inc. Leading provider of mission/safety-critical software solutions for 30 years. Headquarters in Phoenix, AZ World-wide presence Primary market: Certifiable avionics software Gary Gilliland Technical Marketing Manager at DDC-I 25+ years experience in embedded design, avionics and RTOS Electrical Engineering degree from University of Texas

3. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering OAR Corporation Software and systems engineering for mission critical software solutions for almost 40 years Headquarters in Huntsville Alabama World-wide customer base Primary market: Critical real-time embedded systems Original developers and constant maintainers of RTEMS Joel Sherrill, Ph.D. Director of Research and Development for OAR Corporation RTEMS Project Lead 30 years experience30 years experience with real-time operating systems including the design, development, and fielding of embedded applications in a variety of commercial, research, and military domains BS Computer Science, University of Tennessee at Chattanooga MS Computer Science, University of Alabama in Huntsville Ph.D. Computer Science, University of Alabama in Huntsville

4. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering DDC-I Core Competencies Certifiable, safety-critical RTOS products Deos (ARINC-653, RMA, or hybrid) First certification in 1998 Integrated Development Environment (IDE) Development, testing & analysis tools DO-178/ED-12 certification expertise First DO-178 DAL-A (Ada) product released in 1992 We perform our own certification work We defend our certification artifacts during all audits We do not reverse engineer certification artifacts

5. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Real-Time Embedded Systems Development Operating Systems Experts Advisors, Consulting Standards Development Software Architectures & Software Engineering DEFENSE SYSTEMS - We support the entire lifecycle of today’s advanced weapon systems. Emphasis in design, development, testing, and oversight of advanced technical solutions for today’s and tomorrow military. COMMERCIAL SYSTEMS - We provide software development and systems engineering services ranging from simple device drivers to complex applications and systems of systems. OAR Core Competencies

6. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Deos Highlights Pedigree – Unmatched record of deployment, support & certification >10,000 aircraft, >10 Million of flight hours, > 40 aircraft types, >100 certs Features Time, space & resource partitioning with ARINC 653 and/or RMA scheduling DAL-A Linker/loader for binary modularity - Enables reuse of software & certification credits, and minimizes change impacts Data Distribution Service (IOI) TCP/IP, File system, ARINC 664/AFDX, ARINC-615 TDL, USB Performance Cache partitioning, low system tick overheads, linier API performance, etc. Slack scheduling & time budget transfer Multicore option Tooling Ethernet & FTP based development – with PC-based processor simulator Compiler independent (i.e., current version) All tooling applicable through V&V (and deployment in some cases) Tooling to determine WCE for apps and target Source/Object code coverage tool provided

7. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Target Hardware Target Software User Mode Device Drivers Deos High-Level Architecture Network Application 2 Partition 5 Partition 4 Platform hardware (RAM, flash, timer, interrupt controller) CPU Application 1 Partition 3 Partition 2 Partition 1 Deos kernel Registry PAL I/O Interrupts Application hardware (I/O devices, Serial buses, etc) I/O Interrupts Ethernet chipset … loosely-coupled, modular application software partitions. Driver library Graphics chipset Graphics User Space Kernel Space Driver library USB CAN Driver library Audio RAM

8. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering RTEMS is an Industrial Grade open source RTOS Twenty five year history of deployment on multiple planets, unique instruments, automotive systems, and highly critical industrial infrastructure High performance with deterministic behavior Low overhead with predictable resource consumption TCP/IP, network services, multiple file systems, USB, dynamic loading, SMP, RMA, pluggable schedulers, shell, and much more Supports over a dozen CPU architectures 8 RTEMS Highlights

9. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering RTEMS High-Level Architecture 9

10. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering FACE Safety Base Conformance requires ARINC 653 and POSIX interfaces Leverage strengths of both RTOSs to provide a complete solution Deos provides the ARINC653 interfaces and 18 years of certification experience RTEMS provides the POSIX interfaces and 27 years of RTOS experience in the space and military domains The combination is a unique solution to the FACE OSS for Safety Base profile FACE Conformance Approach

11. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering POSIX 1003.1b a.k.a. Open Group Single Unix Specification (http://www.opengroup.org)http://www.opengroup.org Within limits of single process environment ANSI C Standard Library RTEID/ORKID based Classic API C++ support via GCC including OpenMP Note that some “standards” imply others POSIX 1003.1b references ANSI C Library EL/IX references POSIX and BSD 11 API Standards Supported by RTEMS

12. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering The Deos653 Runtime library conforms with the API defined by AVIONICS APPLICATION SOFTWARE STANDARD INTERFACE PART 1 - REQUIRED SERVICES ARINC SPECIFICATION 653P1-3. ARINC. November 15, 2010 The runtime provides ARINC 653 Part 2 – Extended Services APIs File system services Sampling Port extension Services Memory Blocks ARINC 653 Conformance

13. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering The RTEMS POSIX Runtime provides most of POSIX APIs within constraint of a single process FACE Safety Base POSIX profile has 246 APIs Current deficiencies per Conformance Test Suite tzname is supported. CTS does not find it. Still to be investigated pthread_condattr_[gs]setclock – Not yet supported pthread_setschedprio - Not yet supported pthread_[sg]etconcurrency- Not yet supported mmap – To be provided as part of DEOS+RTEMS integration shm_open - To be provided as part of DEOS+RTEMS integration posix_devctl – Not yet supported Networking methods – Could be provided by either DDC-I LWIP or RTEMS FreeBSD TCP/IP stack POSIX API’s Supported

14. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Portable Components Segment Operating System Segment Transport Services Segment I/O Services Segment Platform-Specific Services Segment OS IO OS TS FACE Boundary ARINC-653 Runtime Health Monitoring Device Driver KEY FACE Defined Interface POSIX Runtime Certifiable Real-time Operating System TM FACE Architecture

15. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Target System Hardware and CPU PAL Deos Registry with WAT Deos Kernel User Mode Kernel Mode RTEMS/Deos Adapter POSIX User Executable RTEMS POSIX Thread Scheduler & POSIX API Library RTEMS POSIX Partition Deos 653 Partition Shared Memory Deos RMA Process Shared Memory IOI Lib ARINC 653 User Executable ARINC653 Process Scheduler & 653 P1 API Library IOI Lib TCP/IP (LWIP) Deos RMA User Executable Deos API Library System Architecture

16. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering IOI Config Target System Hardware and CPU PAL Deos Registry with WAT Deos Kernel User Mode Kernel Mode IOI Lib IOI Config RTEMS Config POSIX User Executable RTEMS POSIX Thread Scheduler & POSIX API Library RTEMS POSIX Partition Deos 653 Partition Shared Memory Deos RMA Process IOI Config RMA Process Config Shared Memory ARINC 653 Config IOI Lib ARINC 653 User Executable ARINC653 Process Scheduler & 653 P1 API Library IOI Lib TCP/IP (LWIP) Deos RMA User Executable Deos API Library System Architecture

17. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Partition A Partition B Partition A P A1 P B1 P B2 Partition C P D2 P A2 P A1 P A2 Major Frame Scheduling of 653 processes or POSIX threads Scheduling of POSIX threads P A3 T C1 T C2 RTEMS POSIX ARINC 653 ARINC 653 ARINC 653 Partition C Partition D ARINC 653 Processes scheduled ARINC 653 partitions. POSIX threads scheduled by RTEMS in POSIX partitions. Deos kernel schedules partitions TCP /IP P D1 RMA Threads Scheduling of RMA threads ARINC 653 and POSIX Scheduling RTEMS POSIX T C1 T C2 T C3 T C1 T C2 RTEMS POSIX

18. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering FACE Conformance requires ARINC 653 and POSIX interfaces Deos has certified ARINC 653 support RTEMS has robust POSIX support Both have many years of successful fielded applications Combining Deos and RTEMS leverages the strengths of both to provide a FACE Safety Base OSS solution Summary

19. Safety Critical Software Solutions for Mission Critical Systems Software and Systems Engineering Thanks! Contact Information Gary Gilliland ggilliland@ddci.com Joel Sherrill Joel.Sherrill@oarcorp.com www.ddci.com www.oarcorp.com/rtems