Issue 39 Unmanned Systems Technology August/September 2021 Maritime Robotics Mariner l Simulation tools focus l MRS MR-10 and MR-20 l UAVs insight l HFE International GenPod l Exotec Skypod l Autopilots focus l Aquaai Mazu

8 Platform one System developers are increasingly adopting multicore hardware and software for unmanned avionics designs (writes Nick Flaherty). A multicore avionics computer, the CMC PU-3000 from CMC Electronics, is the first to meet a key safety standard for the CAST-32A multicore safety specification using a real-time operating system (RTOS). The PU-3000 can provide evidence of meeting all the CAST-32A safety requirements for multicore processors by using the Integrity-178 tuMP multicore RTOS from Green HIlls. At the same time, Collins Aerospace is to use the MOSAic.os multicore RTOS and a model-based development tool for its multicore Perigon avionics computer. The multicore approach allows developers to host combinations of several levels of applications simultaneously in one box. They range from primary flight display, navigation display, flight management systems and flight director systems to mission critical- applications. Integrity-178 tuMP is a multicore RTOS with support for running a multi-threaded application across multiple processor cores in symmetric multi-processing or bound multi-processing configurations, as well as supporting the more basic asymmetric multi-processing. It also includes multicore interference mitigation for all shared resources, enabling a system integrator to meet CAST-32A requirements. Multicore interference happens when more than one processor core attempts simultaneous access of a shared resource, such as system memory, I/O or the on-chip interconnect. A bandwidth allocation and monitoring functionality in Integrity-178 tuMP ensures that critical applications get their allocated access to shared resources in order to meet their required deadlines, significantly lowering integration and certification risk. Together, the flexible multi-processing architecture and the multicore interference mitigation enable a system integrator to maximise multicore processor performance while meeting safety and security requirements. The Perigon vehicle management computer (VMC) from Collins Aerospace will use up to three dissimilar multicore processors and high-speed comms to provide 20 times more power than current flight control computers. This will allow a certified system to add complex software applications, such as autonomy, flight control, cybersecurity, vehicle management and predictive health maintenance by using MOSAic.os for an avionics software framework from Lynx Software Technologies. Like the Green Hills system, it will be certifiable to DO-178C DAL A. “This gives developers the ability to integrate software components with precise control over how they are deployed on multicore processors,” said Will Keegan, CTO of Lynx. “For Collins Aerospace, the ability to deploy safety- critical control algorithms as independent ‘bare metal’ applications enables developers and evaluators to measure the interference between software components and ensure that critical applications will meet their timing deadlines.” The development of the VMC will use AdaCore’s model-based QGen code generator for Simulink’s Stateflow models and a new qualification package. QGen is the first qualifiable code generator for a safe subset of the Simulink Stateflow modelling languages, and automatically generates C or Ada source code directly from the model while precisely preserving its functionality. This avoids the need for manual verification of the resulting source code. The QGen generator is being qualified by AdaCore and its partner Verocel to DO- 178C Tool Qualification Level 1, which allows developers to use the generated code without any manual review, streamlining the critical-system development and verification process. QGen also has an interactive model-level debugger, displaying the model together with the generated source code to bridge the control engineering and software engineering. Avionics August/September 2021 | Unmanned Systems Technology Multicore-spec system CMC Electronics’ PU-3000 avionics computer is the first to meet a key multicore safety standard