Time-triggered communication

Time-Triggered Communication

Volumn , Issue , 2011, Pages 1-523

  Obermaisser, Roman ^a  

^a UNIVERSITY OF SIEGEN   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85059411659     PISSN: None     EISSN: None     Source Type: Book    
DOI: None     Document Type: Book

References (359)

1. A. Ademaj. Slightly-off-specification failures in the time-triggered architecture. In Proc. of the 7th IEEE International High-Level Design Validation and TestWorkshop, page 7, Washington, DC, USA, IEEE Computer Society, 2002.
2. A. Ademaj, H. Sivencrona, G. Bauer, and J. Torin. Evaluation of fault handling of the time-triggered architecture with bus and star topology. In Proc. of the International Conference on Dependable Systems and Networks (DSN), pages 123-132, 22-25 2003.
3. T. Amnell, G. Behrmann, J. Bengtsson, P.R. D’Argenio, A. David, A. Fehnker, T. Hune, B. Jeannet, K.G. Larsen, M.O. Möller, P. Pettersson, C. Weise, and W. Yi. UPPAAL-Now, Next, and Future. In F. Cassez, C. Jard, B. Rozoy, and M. Ryan, editors, Modelling and Verification of Parallel Processes, number 2067 in Lecture Notes in Computer Science Tutorial, pages 100-125. Springer-Verlag, 2001.
4. E. Anceaume and I. Puaut. A taxonomy of clock synchronization algorithms. Research Report 1103, Institut National de Recherche en Informatique et Systemes Aĺeatoires (IRISA), Rennes, France, July 1997.
5. E. Anceaume and I. Puaut. Performance evaluation of clock synchronization algorithms. Research Report 3526, Institut National de Recherche en Informatique et Systemes Aĺeatoires (IRISA), Rennes, France, October 1998.
6. C. Scheidler, P. Puschner, S. Boutin, E. Fuchs, G. Gruensteidl, and Y. Papadopoulos. Systems engineering of time-triggered architectures-the Setta Approach. In Proceedings of the 16th IFAC Workshop on Distributed Computer Control Systems, 2000.
7. ARINC. ARINC Specification 629: Multi-Transmitter Data Bus-Part 1: Technical Description. Aeronautical Radio, Inc., Annapolis, MD, USA, November 1991.
8. ARINC. Backplane Data Bus. ARINC Specification 659. Aeronautical Radio, Inc., 2551 Riva Road, Annapolis, MD 21401, December 1993.
9. ARINC. Multi-transmitter data bus: Part 1 technical description. arinc specification 629p1-5. Technical report, Aeronautical Radio Inc., Annapolis, MD, USA, March 31st 1999.
10. ARINC. Arinc specification 429. digital information transfer system (DITS) parts 1,2,3. Standard ARINC 429, Aeronautical Radio Inc., 2001.
11. ARTEMIS. The ARTEMIS strategic research agenda. http://www.artemisia-association.org/sra, 2006. [Online; accessed 25-August-2010].
12. K. Arvind. Probabilistic clock synchronization in distributed systems. IEEE Transactions on Parallel and Distributed Systems, 5(5): 474-487, May 1994.
13. Association for Standardisation of Automation and Measuring Systems (ASAM). ASAM MCD-2 NET, Data Model for ECU Network Systems (Field-Bus Data Exchange Format), Version 3.1.0, 2009.
14. Atmel Corporation. AVR 308: Software LIN Slave, May 2002. Application note available at http:==www.atmel.com.
15. Audi AG, BMW AG, DaimlerChrysler AG, Motorola Inc. Volcano Communication Technologies AB, Volkswagen AG, and Volvo Car Corporation. LIN specification and LIN press announcement. SAEWorld Congress Detroit, http:==www.lin-subbus.org, 1999.
16. Audi AG, BMW AG, DaimlerChrysler AG, Motorola Inc. Volcano Communication Technologies AB, Volkswagen AG, and Volvo Car Corporation. LIN specification v2.0, 2003.
17. N.C. Audsley, I.J. Bate, and A. Grigg. The role of timing analysis in the certification of IMA systems. IEEE Certification of Ground/Air Systems Seminar (Ref. No. 1998/255), Dept. of Comput. Sci., York Univ., London, UK, February 1998.
18. Autosar. AUTOSAR-Technical Overview V3.0, 2006.
19. Autosar. General Requirements on Basic Software Modules, Release 3.1, Document Version 2.2.2, 2008.
20. Autosar. List of Basic Software Modules, Release 3.1, Document Version 1.3.0, 2009.
21. A. Avizienis, J.C. Laprie, and B. Randell. Fundamental concepts of dependability. Research Report 01-145, LAAS-CNRS, Toulouse, France, April 2001.
22. O. Babaoglue and R. Drummond. (Almost) no cost clock synchronization. In Proceedings of the 7th International Symposium on Fault-Tolerant Computing, pages 42-47, Pittsburgh, PA, USA, IEEE Computer Society Press, July 1987.
23. A. Bahrami. Complex integrated avionic systems and system safety. In Online Proceedings of the The Europe-US International Aviation Safety Conference, 2005.
24. M.B. Barron and W.F. Powers. The role of electronic controls for future automotive mechatronic systems. IEEE/ASME Transactions on Mechatronics, 1(1): 80-88, March 1996.
25. G. Bauer and H. Kopetz. Transparent redundancy in the time-triggered architecture. In Proc. of the Int. Conference on Dependable Systems and Networks (DSN 2000), New York, pages 5-13, June 2000.
26. G. Bauer, H. Kopetz, and W. Steiner. The central guardian approach to enforce fault isolation in a time-triggered system. In Proc. of the 6th Int. Symposium on Autonomous Decentralized Systems (ISADS 2003), pages 37-44, Pisa, Italy, April 2003.
27. G. Bauer and M. Paulitsch. An investigation of membership and clique avoidance in TTP/C. In Proc. of the 19th IEEE Symposium on Reliable Distributed Systems, pages 118-124, 2000.
28. G. Behrmann, A. David, K.G. Larsen, O. Müller, P. Pettersson, and W. Yi. UPPAAL-present and future. In Proc. of 40th IEEE Conference on Decision and Control. IEEE Computer Society Press, 2001.
29. B. Beizer. Software Testing Techniques (2nd ed.). Van Nostrand Reinhold Co., New York, NY, USA, 1990.
30. R. Benesch. TCP für die Time-Triggered Architecture. Master’s thesis, Technische UniversitätWien, Institut für Technische Informatik, Treitlstr. 3/3/182-1, 1040 Vienna, Austria, June 2004. ARTEMIS.
31. C. Bergenhem and J. Karlsson. A process group membership service for active safety systems using tt/et communication scheduling. In Dependable Computing, 2007. PRDC 2007. 13th Pacific Rim International Symposium on, pages 282-289, December 2007.
32. M. Bertoluzzo. Experimental activities on ttcan protocol. In Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications, 2005. IDAACS 2005. IEEE, pages 22-27, 5-7 2005.
33. P. Binns. A robust high-performance time partitioning algorithm. The Digital Engine Operating System Approach. In Digital Avionics Systems Conference. AIAA/IEEE, IEEE, 2001.
34. P. Bishop. A methodology for safety case development. Technical report, Adelard, London, UK, 1998.
35. P. Bjorn-Jorgensen and J. Madsen. Critical path driven cosynthesis for heterogeneous target architectures. In Proceedings of the 5th International Workshop on Hardware/Software Co-Design, pages 15-19. IEEE Computer Society, 1997.
36. G. Bloor, G. Karsai, R. Reuter, S. Gulati, and S. Hutchings. The integration of anomaly, prognostics, and diagnostics reasoners to optimize overall vehicle health management goals. In Proc. of the IEEE Aerospace Conference, page 469, vol.2, 1999.
37. B.W. Boehm, R. Madachy, and B. Steece. Software Cost Estimation with Cocomo II with Cdrom. Prentice Hall PTR Upper Saddle River, NJ, USA, 2000.
38. M. Borovicka. Design of a gateway for the interconnection of real-time communication hierarchies. Master’s thesis, Technische Universität Wien, Institut für Technische Informatik, Treitlstr. 3/3/182-1, 1040 Vienna, Austria, 2003.
39. BOSCH. CAN specification-version 2.0. available at http://www.bosch.de.
40. J.D. Boskovic and R.K. Mehra. Multi-mode switching in flight control. In Proc. of the 19th Digital Avionics Systems Conferences (DASC), pages 6F2/1-6F2/8, vol.2, 2000.
41. D. Bosnacki and D. Dams. Discrete-time promela and spin. In Formal Techniques in Real-Time and Fault-Tolerant Systems, volume 1486 of Lecture Notes in Computer Science. Springer Berlin / Heidelberg, 1998.
42. D. Bosnacki and D. Dams. Integrating real time into spin: A prototype implementation. In FORTE XI / PSTV XVIII '98: Proceedings of the FIP TC6 WG6.1 Joint International Conference on Formal Description Techniques for Distributed Systems and Communication Protocols (FORTE XI) and Protocol Specification, Testing and Verification (PSTV XVIII), pages 423-438, Deventer, The Netherlands, Kluwer, B.V., 1998.
43. A. Bouajjani and A. Merceron. Parametric verification of a group membership algorithm. In Proc. of the Symposium on Formal Techniques in Real-Time and Fault Tolerant System (FTRTFT), LNCS Vol. 2469, pages pp. 83-105, Oldenburg, Germany, Springer-Verlag, September 2002.
44. I. Broster, A. Burns, and G. Rodriguez-Navas. Comparing real-time communication under electromagnetic interference. 2004.
45. T. Bultan and T. Yavuz-Kahveci. Action language verifier. In Proc. of the 16th Annual International Conference on Automated Software Engineering (ASE 2001), pages 382-386, 26-29 2001.
46. E.K. Burke and G. Kendall. Search Methodologies: Introductory Tutorials in Optimization and Decision Support Techniques. Springer Verlag, 2005.
47. D. Butler, T. Schmidt, and T. Waclawczyk. LIN protocol implementation using picmicro mcus. available at www.microchip.com, 2000. Microchip AN729.
48. R.W. Butler, J.L. Caldwell, and B.L.Di Vito. Design strategy for a formally verified reliable computing platform. In Proc. of the 6th Annual Conference on Computer Assurance (COMPASS) Systems, pages 125-133, Gaithersburg, MD, USA, NASA Langley Res. Center, June 1991.
49. G.C. Buttazzo. Hard Real-Time Computing Systems: Predictable Scheduling Algorithms and Applications. Springer-Verlag New York Inc, 2005.
50. I. Cardei, R. Jha, M. Cardei, and A. Pavan. Hierarchical architecture for realtime adaptive resource management. In Proc. of the IFIP/ACM International Conference on Distributed Systems Platforms (Middleware '00), pages 415-434, Secaucus, NJ, USA, Springer-Verlag New York, Inc., 2000.
51. T. Carpenter, K. Driscoll, K. Hoyme, and J. Carciofini. ARINC 659 scheduling: problem definition. Real-Time Systems Symposium, 1994., Proceedings, pages 165-169, December 1994.
52. W.C. Carter. A time for reflection. In Proc. of the 8th IEEE Int. Symposium on Fault Tolerant Computing (FTCS-8), page 41, Santa Monica, June 1982.
53. CAST, Inc., IP Provider. LIN bus controller core, 2010. Available at www.cast-inc.com/ip-cores/interfaces/lin/index.html.
54. CENELEC. EUROPEAN STANDARD 50128: Railway applications-Communications, signalling and processing systems-Software for railway control and protection systems, March 2001.
55. CENELEC. EUROPEAN STANDARD 50159-1: Railway applications-Communication, signalling and processing systems; Part 1: Safety-related Communication in closed transmission systems, March 2001.
56. CENELEC. EUROPEAN STANDARD 50159-2: Railway applications-Communication, signalling and processing systems; Part 2: Safety-related Communication in open transmission systems, March 2001.
57. CENELEC. EUROPEAN STANDARD 50128: Railway applications-Communications, signalling and processing systems-Safety related electronic systems for signalling, February 2003.
58. P. Cholasta. LIN 2.0 mirror unit slave based on the MC68HC908EY16 MCU and the LIN 2.0 communication protocol. Application Note AN2885, Rev. 0, 11/2004, Freescale Semiconductor, 2004.
59. G. Ciardo and C. Lindemann. Comments on “analysis of self-stabilizing clock synchronization by means of stochastic Petri nets.” IEEE Transactions on Computers, 43(12): 1453-1456, 1994.
60. V. Claesson, H. Lönn, and N. Suri. An efficient TDMA start-up and restart synchronization approach for distributed embedded systems. IEEE Transactions on Parallel and Distributed Systems, 15(7), July 2004.
61. D.D. Cofer and M. Rangarajan. Event-triggered environments for verification of real-time systems. In Simulation Conference, 2003. Proceedings of the 2003 Winter, pages 915-922, vol.1, 7-10 2003.
62. E.G. Coffman and R.L. Graham. Optimal scheduling for two-processor systems. Acta Informatica, 1(3): 200-213, 1972.
63. M. Conrad, P. Munier, and F. Rauch. Qualifying software tools according to ISO 26262. In Tagungsband Dagstuhl-Workshop MBEES: Modellbasierte Entwicklung eingebetteter Systeme VI, 2010.
64. FlexRay Consortium. FlexRay protocol specification ver. 2.1, 2005.
65. C. Constantinescu. Trends and challenges in VLSI circuit reliability. IEEE micro, 23(4): 14-19, 2003.
66. G. Coulouris, J. Dollimore, and T. Kindberg. Distributed Systems: Concepts and Design. Int. Computer Science Series, Addison-Wesley, second edition, 1994.
67. F. Cristian. Probabilistic clock synchronization. Distributed Computing, 3: 146-158, 1989.
68. F. Cristian. Reaching agreement on processor-group membership in synchronous distributed systems. Distributed Computing, 4: 175-187, 1991.
69. F. Cristian. Understanding fault-tolerant distributed systems. Communications of the ACM, 34(2): 56-78, 1991.
70. F. Cristian, H. Aghili, and R. Strong. Clock synchronization in the presence of omission and performance failures, and processor joins. In Proc. of 16th Int. Symp. on Fault-Tolerant Computing Systems, July 1996.
71. F. Cristian and C. Fetzer. Fault-tolerant external clock synchronization. In Proceedings of the 15th International Conference on Distributed Computing Systems, pages 70-77, Los Alamitos, CA, USA, IEEE, May 30-June 2 1995.
72. P.H. Dana. Global Positioning System (GPS) time dissemination for real-time applications. Real-Time Systems, 12(1): 9-40, January 1997.
73. C.T. Davies. Computing Systems Reliability, Data Processing Integrity, pages 288-354. Cambridge University Press, 1979.
74. L. de Moura, S. Owre, H. Rue, J. Rushby, N. Shankar, M. Sorea, and A. Tiwari. SAL 2. In Computer Aided Verification, volume 3114 of Lecture Notes in Computer Science, pages 251-254. Springer Berlin / Heidelberg, 2004.
75. J.A. Debardelaben, V.K. Madisetti, and A.J. Gadient. Incorporating cost modeling in embedded-system design. IEEE Design & Test of Computers, 14(3): 24-35, 1997.
76. S. Dolev. Possible and impossible self-stabilizing digital clock synchronization in general graphs. Real-Time Systems, 12(1): 95-107, January 1997.
77. S. Dolev and J.L. Welch. Self-stabilizing clock synchronization with Byzantine faults. In Proceedings of the 14th ACM Symposium on Principles of Distributed Computing, page 256. ACM Press, 1995.
78. K. Driscoll, B. Hall, M. Paulitsch, P. Zumsteg, and H. Sivencrona. The real Byzantine generals. In Proc. 23rd Digital Avionics Systems Conf., volume 6.D.4, pages 61-11, October 2004.
79. K. Driscoll and K. Hoyme. The airplane information management system: An integrated real-time flight-deck control system. Real-Time Systems Symposium, pages 267-270, December 1992.
80. K. Driscoll, G.M. Papadoupoulos, S. Nelson, G.L. Hartmann, and G. Ramohalli. Multi-processor flight control system. Technical Report AFWAL-TR-84-3076, Honeywell Systems and Research Center, September 1984.
81. K.R. Driscoll. Apparatus and method for fault detection on redundant signal lines via encryption. Patent U.S. 5307409, Honeywell, April 26th 1994.
82. K.R. Driscoll. Apparatus and method for transmitting information between dual redundant components utilizing four signal paths. Patent U.S. 5386424, Honeywell, January 31st 1995.
83. B. Dutertre and M. Sorea. Modeling and Verification of a Fault-Tolerant Realtime Startup Protocol using Calendar Automata. In Proc. of the Joint Conference Formal Modelling and Analysis of Timed Systems (FORMATS), Formal Techniques in Real-Time and Fault-Tolerant Systems (FTRTFT), Lecture Notes in Computer Science. Springer-Verlag, September 2004.
84. C. Ebert and C. Jones. Embedded software: Facts, figures, and future. Computer, 42(4): 42-52, 2009.
85. S.A. Edwards. Languages for Digital Embedded Systems. Springer Netherlands, 2000.
86. P. Eles, A. Doboli, P. Pop, and Z. Peng. Scheduling with bus access optimization for distributed embedded systems. IEEE Transactions on Very Large Scale Integration(VLSI) Systems, 8(5): 472-491, 2000.
87. W. Elmenreich. Time-triggered smart transducer networks. IEEE Transactions on Industrial Informatics, 2(3): 192-199, 2006.
88. W. Elmenreich and M. Delvai. Time-triggered communication with UARTs. In Proceedings of the 4th IEEE International Workshop on Factory Communication Systems, pages 97-104, 2002.
89. W. Elmenreich, W. Haidinger, P. Peti, and L. Schneider. New node integration for master-slave field-bus networks. In Proceedings of the 20th IASTED International Conference on Applied Informatics (AI 2002), pages 173-178, February 2002.
90. W. Elmenreich and S. V. Krywult. A comparison of field-bus protocols: LIN 1.3, LIN 2.0, and TTP/A. In Proceedings of the 10th IEEE International Conference on Emerging Technologies and Factory Automation, pages 747-753, 2005.
91. C. Elmore. Electronic controls. OEM Off-Highway, November 2008.
92. C. Engel, E. Jenn, P.H. Schmitt, R. Coutinho, and T. Schoofs. Enhanced dispatchability of aircrafts using multi-static configurations. In Proc. of the Embedded Real Time Software and Systems, Toulouse, France, May 2010.
93. J. Erjavec and R. Scharff. Automotive Technology: A Systems Approach. Delmar Cengage Learning, 5th edition, 2009.
94. J.A. Estefan. Survey of model-based systems engineering (MBSE) methodologies. Incose MBSE Focus Group, 25, 2007.
95. FAA. Aviation databus assurance. Advisory Circular 20-156, Federal Aviation Administration, August 4th 2006.
96. Federal Aviation Administration (FAA). Airworthiness directives; dassault model Falcon 2000ex and 900ex series airplanes. Airworthiness Directive Federal Register: (Volume 70, Number 39, Page 9853-9856), FAA, Docket No. FAA-2005-20425; Directorate Identifier 2005-NM-014-AD; Amendment 39-13987; AD 2005-04-15, March 1st 2005.
97. Federal Aviation Administration (FAA). Advisory Circular AC 20-115B, 1993.
98. C. Ferdinand and R. Heckmann. aiT: Worst-case execution time prediction by static program analysis. Building the Information Society, pages 377-383, 2004.
99. M. Fernström and D. Ungerdahl. TTCAN Reference Application-An investigation on time-triggered network performance. Master’s thesis, Chalmers University of Technology, 2006.
100. C. Fetzer and F. Cristian. Lower bounds for function based clock synchronization. In Proc. of 14th Int. Symp. on Principles of Distributed Computing, August 1985.
101. C. Fetzer and F. Cristian. An optimal internal clock synchronization algorithm. In Proceedings of the 10th Conference on Computer Assurance, pages 187-196, Gaithersburg, MD, USA, IEEE, June 1995.
102. C. Fetzer and F. Cristian. Integrating external and internal clock synchronization. Real-Time Systems, 12: 123-171, March 1997.
103. M. Fletcher. Progression of an open architecture: from Orion to Altair and ISS. Companion to report (Presentation) S65-5000-20-0, Honeywell, May 2009. FaultTolerant Spaceborne Computing Employing New Technologies 2009 Conference.
104. FlexRay Consortium. FlexRay communications system-preliminary central bus guardian specification version 2.0.9. Technical report, BMW AG., DaimlerChrysler AG., Robert Bosch GmbH, and General Motors/Opel AG, 2002.
105. FlexRay Consortium. BMW AG, DaimlerChrysler AG, General Motors Corporation, Freescale GmbH, Philips GmbH, Robert Bosch GmbH, and Volkswagen AG. FlexRay Communications System Protocol Specification Version 2.1, May 2005.
106. FlexRay Consortium. BMW AG, DaimlerChrysler AG, General Motors Corporation, Freescale GmbH, Philips GmbH, Robert Bosch GmbH, and Volkswagen AG. Node-Local Bus Guardian Specification Version 2.0.9, December 2005.
107. A. Galleni and D. Powell. Consensus and membership in synchronous and asynchronous distributed systems. Technical report, 1995.
108. GAMA. ASCB: Avionics Standard Communications Bus Version C. General Aviation Manufacturers Association (GAMA), Washington, DC, April 15 1996.
109. M.-C. Gaudel, V. Issarny, C. Jones, H. Kopetz, E. Marsden, N. Moffat, M. Paulitsch, D. Powell, B. Randell, A. Romanovsky, R. Stroud, and F. Taiani. Final version of the DSoS conceptual model. DSoS Project (IST-1999-11585) Deliverable CSDA1, December 2002. Available as Research Report 54/2002 at http:==www.vmars.tuwien.ac.at.
110. M. Ghetie, H. Noura, and M. Saif. Fault diagnosis using balance equations methods and the algorithmic redundancy approach. In Proc. of the 37th IEEE Conference on Decision and Control, pages 586-591, vol.1, 1998.
111. M. Ghiassi and K. I. S. Woldman. Dual programming approach to software testing. Software Quality Journal, 3(1): 45-59, 1994.
112. Robert Bosch GmbH. E-Ray FlexRay IP-module users manual revision 1.2.7, 2009.
113. S. Godavarty, S. Broyles, and M. Parten. Interfacing to the on-board diagnostic system. In Proc. of the 52nd IEEE Vehicular Technology Conference, pages 2000-2004, vol.4, 2000.
114. S. Goldwasser, S. Micali, and R.L. Rivest. A digital signature scheme secure against adaptive chosen-message attacks. SIAM Journal of Computing, pages 281-308, April 1988.
115. R. Gusella and S. Zatti. An election algorithm for a distributed clock synchronization program. In Proc. of 6th Int. Conf. on Distributed Computing Systems, pages 364-373, 1986.
116. R. Gusella and S. Zatti. The accuracy of the clock synchronization achieved by tempo in Berkeley UNIX 4.3BSD. IEEE Trans. on Software Engineering, 15(7): 847-853, July 1989.
117. J. C. Palencia Gutíerrez and M. Gonźalez Harbour. Schedulability analysis for tasks with static and dynamic offsets. In Proceedings of the 19th IEEE Real Time Systems Symposium, pages 26-37, December 1998.
118. J. C. Palencia Gutíerrez and M. Gonźalez Harbour. Exploiting precedence relations in the schedulability analysis of distributed real-time systems. In Proceedings of the 20th IEEE Real-Time Systems Symposium, page 328. IEEE Computer Society, 1999.
119. B. Heppner and H. Brauner. Assessment of whole vehicle behaviour by means of simulation. Technical report, Daimler AG, 2008.
120. W. Haidinger and R. Huber. Generation and analysis of the codes for TTP/A fireworks bytes. Research Report 5/2000, Technische Universität Wien, Institut für Technische Informatik, Vienna, Austria, 2000.
121. B. Hall and K. Driscoll. A new aerospace network family. Presentation to INCOSE, Honeywell, October 2009.
122. B. Hall, K.R. Driscoll, M. Paulitsch, and S. Dajani-Brown. Ringing out fault tolerance. A new ring network for superior low-cost dependability. Dependable Systems and Networks, International Conference on, 0: 298-307, 2005.
123. B. Hall, M. Paulitsch, and K.R. Driscoll. FlexRay BRAIN fusion: A FlexRaybased braided ring availability integrity network. SAE World Congress, Paper No 2007-01-1492, 2007.
124. J.Y. Halpern, B. Simons, R. Strong, and D. Dolev. Fault-tolerant clock synchronization. In Proceedings of the 3rd ACM Symposium on Principles of Distributed Computing, pages 89-102, 1984.
125. F. Hartwich. TTCAN IP Module-User’s Manual. Bosch, 1.6 edition, 11 2002.
126. F. Hartwich, B. Müller, T. Führer, and R. Hugel. Timing in the TTCAN Network. Technical report, Robert Bosch GmbH, 2003.
127. C. Haubelt, J. Teich, K. Richter, and R. Ernst. System design for flexibility. In Proceedings of the Conference on Design, Automation and Test in Europe, pages 854-861. IEEE Computer Society, 2002.
128. K. Hayhurst, C. Dorsey, J. Knight, N. Leveson, and G. McCormick. Streamlining software aspects of certification: Report on the SSAC survey. Technical report, NASA Technical Memorandum 1999-209519, August 1999.
129. Health and Safety Executive (HSA). Reducing Risks, Protecting People-HSEs Decision-Making Process, 2001.
130. M. Hecht, D. Tang, and H. Hecht. Quantitative reliability and availability assessment for critical systems including software. In Proc. of the 12th Annual Conference on Computer Assurance, Gaithersburg, MD, USA, June 1997.
131. G. Heiner and T. Thurner. Time-triggered architecture for safety-related distributed real-time systems in transportation systems. In Proc. of the Twenty-Eighth Annual Int. Symposium on Fault-Tolerant Computing, pages 402-407, June 1998.
132. R. Hexel. FITS: a fault injection architecture for time-triggered systems. In Proc. of the 26th Australasian Computer Science Conference (ACSC '03), pages 333-338, Darlinghurst, Australia, Australian Computer Society, Inc., 2003.
133. D. Höchtl and U. Schmid. Long-term evaluation of GPS timing receiver failures. In Proceedings of the 29th Precise Time and Time Interval Systems and Applications Meeting, Long Beach, USA, December 1997.
134. G.J. Holzmann. The model checker Spin. Software Engineering, IEEE Transactions on, 23(5): 279-295, May 1997.
135. Honeywell. http:==www.honeywell.com. accessed August 2010.
136. K. Hoyme and K. Driscoll. SAFEbus. IEEE Aerospace and Electronic Systems Magazine, pages 34-39, March 1993.
137. I. Hwang, S. Kim, Y. Kim, and C.E. Seah. A survey of fault detection, isolation, and reconfiguration methods. IEEE Transactions on Control Systems Technology, 18(3): 636-653, May 2010.
138. IEC: Int. Electrotechnical Commission. IEC 61508-7: Functional Safety of Electrical/Electronic/Programmable Electronic Safety-Related Systems-Part 7: Overview of Techniques and Measures, 1999.
139. IEEE. Standard IEEE 802.4-Information Processing Systems- Local Area Networks-Part 4: Token-Passing Bus Access Method and Physical Layer Specifications, 1990.
140. IEEE. IEEE standard 802.3-carrier sense multiple access with collision detect (CSMA/CD) access method and physical layer. Technical report, IEEE, 2000.
141. IEEE. Draft Standard for a Precision Clock Synchronization Protocol for Networked Measurement and Control Systems (V0.19.13). IEEE Press, New York, NY, USA, May 2002. IEEE Standard No. P1588; Product No. DS5905-TBR.
142. IEEE. IEEE Standard for a Precision Clock Synchronization Protocol for Networked Measurement and Control Systems. IEEE Press, New York, NY, USA, IEEE Standard No. 1588, March 2008.
143. Aeronautical Radio Inc. Avionics Application Software Standard Interface Part 1-Required Services, ARINC specification 653P1-2 edition, December 2005.
144. Aeronautical Radio Inc. Avionics Application Software Standard Interface Part 3-Conformity Test Specification, ARINC specification 653P-3 edition, October 2006.
145. Aeronautical Radio Inc. Avionics Application Software Standard Interface Part 2-Extended Services, ARINC specification 653P2-1 edition, 12 2009.
146. National Instruments. FlexRay automotive communication bus overview. Technical report, August 2009.
147. International Electrotechnical Commission (IEC). IEC 61508: International Standard Functional Safety of Electrical / Electronic / Programmable Electronic Safety-Related Systems, 1998.
148. International Standardization Organisation (ISO). Road Vehicles-Controller Area Network (CAN)-Part 4: Time-Triggered Communication, ISO 11898-4, 1993.
149. International Standardization Organisation (ISO). Road Vehicles-Interchange of Digital Information-Controller Area Network (CAN) for High-Speed Communication, ISO 11898, 1993.
150. International Standardization Organisation (ISO). Road Vehicles-Controller Area Network (CAN)-Part 1: Data Link Layer and Physical Signalling, ISO 11898-1, 1993.
151. International Standardization Organisation (ISO). Road Vehicles-Controller Area Network (CAN)-Part 2: High-Speed Medium Access Unit, ISO 11898-2, 1993.
152. International Standardization Organisation (ISO). ISO/IEC 15765-3: 2004-Road Vehicles-Diagnostics on Controller Area Networks (CAN)-Part 3: Implementation of Unified Diagnostic Services (UDS on CAN), 2004.
153. International Standardization Organisation (ISO). ISO/DIS 26262: International Standard Road Vehicles-Functional Safety, 2009.
154. C. Jeffrey, N. Dumas, Z. Xu, F. Mailly, F. Azas, P. Nouet, R.J.T. Bunyan, D.O. King, H. Mathias, J.P. Gilles, and A.M.D. Richardson. Sensor testing through bias superposition. Sensors and Actuators A: Physical, 136(1): 441-455, 2007. 25th Anniversary of Sensors and Actuators A: Physical.
155. S.C. Johnson and R.W. Butler. Design for validation. IEEE Aerospace and Electronic Systems Magazine, 7(1): 38-43, January 1992.
156. H. Kantz and N. König. Tas control platform: A vital computer platform for railway applications. Alcatel Telecommunications Review, 2nd Quarter 2004.
157. H. Kantz and C. Koza. The ELEKTRA railway signalling system: Field experience with an actively replicated system with diversity. In Proc. of the 25th International Symposium on Fault-Tolerant Computing (FTCS), pages 453-458, 27-30 1995.
158. R. Kapeller. Design and implementation of a TTP/A master and gateway controller on a 32-bit microcontroller. Master’s thesis, Technische Universität Wien, Institut für Technische Informatik, Vienna, Austria, 2001.
159. J. Karlsson, J. Arlat, and G. Leber. Application of three physical fault injection techniques to the experimental assessment of the MARS architecture. In Proc. of the 5th Annual IEEE International Working Conference on Dependable Computing for Critical Applications, pages 150-161. IEEE Computer Society Press, 1995.
160. J. Karlsson, P. Folkesson, J. Arlat, Y. Crouzet, and G. Leber. Integration and comparison of three physical fault injection techniques. In B. Randell, J. Laprie, H. Kopetz, and B. Littlewood, editors, Predictably Dependable Computing Systems, pages 309-327. Springer Verlag, Heidelberg edition, 1995.
161. S. Katz, P. Lincoln, and J. M. Rushby. Low-overhead time-triggered group membership. In WDAG, pages 155-169, 1997.
162. B. Keinhuis, K. Vissers Deprettere, and P. van der Wolf. An Approach for Quantitative Analysis of Application-Specific Dataflow Architectures. In Proceedings of the 8th IEEE International Conference on Application-Specific Systems, Architectures and Processors, pages 338-350, 1997.
163. K. Keutzer, S. Malik, A.R. Newton, J.M. Rabaey, and A. Sangiovanni-Vincentelli. System-level design: Orthogonalization of concerns and platformbased design. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 19(12): 1523, 2000.
164. M.S. Khan. Political and economic dimensions of Global Navigation Satellite System (GNSS). In IEEE Proceedings of the Aerospace Conference, volume 3, pages 3/1271-3/1276. IEEE, 2001.
165. H. Kopetz. Event triggered versus time triggered. In Proc. International Workshop on Operating Systems of the 90s and Beyond, volume 563 of Lecture Notes in Computer Science, pages 87-101. Springer Verlag, 1992.
166. H. Kopetz. Sparse time versus dense time in distributed real-time systems. In Proc. of 12th Int. Conference on Distributed Computing Systems, Japan, June 1992.
167. H. Kopetz. TTP/A-A time-triggered protocol for body electronics using standard uarts. In International Congress and Exposition, Detroit, MI, USA, The Engineering Society for Advancing Mobility Land Sea Air and Space, SAE International, February-March 1995.
168. H. Kopetz. Why time-triggered architectures will succeed in large hard realtime systems. In Proc. of the 5th IEEE Computer Society Workshop on Future Trends of Distributed Computing Systems, Cheju Island, Korea, August 1995.
169. H. Kopetz. Real-Time Systems, Design Principles for Distributed Embedded Applications. Kluwer Academic Publishers, Boston, 1997.
170. H. Kopetz. Elementary versus composite interfaces in distributed real-time systems. In Proc. of the Int. Symposium on Autonomous Decentralized Systems, Tokyo, Japan, March 1999.
171. H. Kopetz. TTP/C Protocol-Version 1.0. TTTech Computertechnik AG, Vienna, Austria, July 2002. Available at http://www.ttpforum.org.
172. H. Kopetz. Fault containment and error detection in the time-triggered architecture. In Proc. of the Sixth Int. Symposium on Autonomous Decentralized Systems, April 2003.
173. H. Kopetz. Time-triggered real-time computing. Annual Reviews in Control, 27(1): 3-13, 2003.
174. H. Kopetz. The fault-hypothesis of the time-triggered architecture. In Proc. of the 18th Edition of the IFIP World Computer Congress, August 2004.
175. H. Kopetz. From a federated to an integrated architecture for dependable realtime embedded systems. In Proceedings of the Eighth Annual High Performance Embedded Computing (HPEC) Workshop, 2004.
176. H. Kopetz. On the fault hypothesis for a safety-critical real-time system. In Keynote Speech at the Automotive Software Workshop San Diego (ASWSD 2004), San Diego, CA, USA, January 10-12, 2004.
177. H. Kopetz and G. Bauer. The time-triggered architecture. IEEE Special Issue on Modeling and Design of Embedded Software, January 2003.
178. H. Kopetz, G. Bauer, and S. Poledna. Tolerating arbitrary node failures in the time-triggered architecture. In Proc. of the SAE 2001 World Congress, Detroit, MI, USA, March 2001.
179. H. Kopetz et al. The Time-Triggered Ethernet (TTE) design. In Proc. of 8th IEEE Int. Symposium on Object-Oriented Real-Time Distributed Computing (ISORC), May 2005.
180. H. Kopetz and G. Grunsteidl. TTP-A protocol for fault-tolerant real-time systems. Computer, 27(1): 14-23, 1994.
181. H. Kopetz, M. Holzmann, and W. Elmenreich. A universal smart transducer interface: TTP/A. International Journal of Computer System Science & Engineering, 16(2): 71-77, March 2001.
182. H. Kopetz and R. Nossal. Temporal firewalls in large distributed realtime systems. In Proc. of IEEE Workshop on Future Trends in Distributed Computing, Tunis, Tunisia, IEEE Press, 1997.
183. H. Kopetz andW. Ochsenreiter. Clock synchronization in distributed real-time systems. IEEE Transactions on Computers, 36(8): 933-940, 1987.
184. H. Kopetz and J. Reisinger. The non-blocking write protocol NBW: A solution to a real-time synchronisation problem. In Proc. of the 14th Real-Time Systems Symposium, 1993.
185. J.M. Krause, M.J. Englehart, and D.A Shaner. Achievable performance of fault tolerant avionics clocks. In AIAA Computing in Aerospace Conference, 8th, Technical Papers. Vol. 2 (A92-17576 05-61), pages p. 608-622, Baltimore, MD, American Institute of Aeronautics and Astronautics, Oct. 21-24 1991.
186. A. Krüger. Interface Design for Time-Triggered Real-Time System Architectures. PhD thesis, Technische Universität Wien, Institut für Technische Informatik, Treitlstr. 3/3/182-1, 1040 Vienna, Austria, 1997.
187. J.H. Lala and R.E. Harper. Architectural principles for safety-critical real-time applications. Proc. of the IEEE, 82: 25-40, January 1994.
188. L. Lamport and P. M. Melliar-Smith. Synchronizing clocks in the presence of faults. Journal of the ACM, 32(1): 52-78, January 1985.
189. L. Lamport and P.M. Melliar-Smith. Byzantine clock synchronization. In Proceedings of the 3rd ACM Symposium on Principles of Distributed Computing, pages 68-74, 1984.
190. L. Lamport, R. Shostak, and M. Pease. The Byzantine generals problem. ACM Transactions on Programming Languages and Systems (TOPLAS), 4(3): 382-401, 1982.
191. L. Lavagno and C. Passerone. Embedded Systems Handbook, chapter 3, pages 3-1-3-22. CRC Press, 2006.
192. M. Lebedev. GLONASS as instrument for precise UTC transfer. In Proceedings of the 12th European Frequency and Time Forum, Warsaw, Poland, March 1998.
193. E.A. Lee. Cyber physical systems: Design challenges. In Proc. of the 11th IEEE International Symposium on Object Oriented Real-Time Distributed Computing (ISORC), pages 363-369, 2008.
194. P.A. Lee and T. Anderson. Fault Tolerance Principles and Practice, volume 3 of Dependable Computing and Fault-Tolerant Systems. Springer Verlag, 1990.
195. G. Leen and D. Heffernan. Modeling and verification of a time-triggered networking protocol. In Networking, International Conference on Systems and International Conference on Mobile Communications and Learning Technologies, 2006. ICN/ICONS/MCL 2006, pages 178-178, 23-29 2006.
196. J. P. Lehoczky. Fixed priority scheduling of periodic task sets with arbitrary deadlines. In Proceedings of 11th IEEE Real-Time Symposium, pages 201-209, 1990.
197. W. Lewandowski, J. Azoubib, and W.J. Klepczynski. GPS: Primary tool for time transfer. Proceedings of the IEEE, 87(1): 163-172, January 1999.
198. C. Li and S. Dey. Software-based self-testing methodology for processor cores. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 20(3): 369-380, March 2001.
199. R. Lichtenecker. Terrestrial time signal dissemination. Real-Time Systems, 12(1): 41-61, January 1997.
200. LIN Consortium. LIN specification package revision 2.1, 2006.
201. B. Liskov. Practical use of synchronized clocks in distributed systems. In Proceedings of 10th ACM Symposium on the Principles of Distributed Computing, pages 1-9. ACM Press, 1991.
202. C.L. Liu and J.W. Layland. Scheduling algorithms for multiprogramming in a hard real-time environment. Journal of the ACM, 20(1): 46-61, 1973.
203. C.D. Locke. Software architecture for hard real-time applications: cyclic executives vs. fixed priority executives. Real-Time Systems, 4(1): 37-53, 1992.
204. H. Lönn. Initial synchronization of TDMA communication in distributed realtime systems. In 19th IEEE Int. Conf. on Distributed Computing Systems, pages 370-379, Gothenburg, Sweden, 1999.
205. H. Lönn and J. Axelsson. A comparison of fixed-priority and static cyclic scheduling for distributed automotive control applications. In Proceedings of the 11th Euromicro Conference on Real-time Systems, pages 142-149. IEEE Computer Society Press, June 1999.
206. H. Lönn and P. Pettersson. Formal verification of a TDMA protocol start-up mechanism. In Pacific Rim International Symposium on Fault-Tolerant Systems (PRFTS '97), pages 235-242, Taipei, Taiwan, IEEE, December 1997.
207. T. Losert. Extending CORBA for Hard Real-Time Systems. PhD thesis, Vienna University of Technology, Institute of Computer Engineering, 2005.
208. M. Lu, D. Zhang, and T. Murata. Analysis of self-stabilizing clock synchronization by means of stochastic Petri nets. IEEE Transactions on Computers, 39(5): 597-604, 1990.
209. J. Lundelius and N. Lynch. A new fault-tolerant algorithm for clock synchronization. In ACM Symp. on Principles of Distributed Computing, pages 75-88, 1984.
210. J. Lundelius and N. Lynch. An upper and lower bound for clock synchronization. Information and Control, 62: 190-204, 1984.
211. J. Luo, K.R. Pattipati, L. Qiao, and S. Chigusa. Agent-based real-time fault diagnosis. In Aerospace Conference, 2005 IEEE, pages 3632-3640, 5-12 2005.
212. S.R. Mahaney and F.B. Schneider. Inexact agreement: accuracy, precision, and graceful degradation. In Proceedings of the 4th ACM Symposium on Principles of Distributed Computing, pages 237-249. ACM Press, 1985.
213. S.M. Mahmud and A. Arora. Performance Analysis of Fault Tolerant TTCAN System. 2005.
214. R. Maier, G. Bauer, G. Stoger, and S. Poledna. Time-triggered architecture: a consistent computing platform. IEEE Micro, 22(4): 36-45, July/August 2002.
215. S. Martello and P. Toth. Knapsack Problems: Algorithms and Computer Implementations. Wiley, New York, 1990.
216. G. Martin, F. Schirrmeister, and C.D.S. Inc. A design chain for embedded systems. Computer, 35(3): 100-103, 2002.
217. K. Marzullo and S. Owicki. Maintaining the time in a distributed system. In Proceedings of the 2nd ACM Symposium on Principles of Distributed Computing, pages 295-305, 1983.
218. K.A. Marzullo. Maintaining the Time in a Distributed System: An Example of a Loosely Coupled Distributed Service. PhD thesis, Department of Electrical Engineering, Stanford University, Stanford, CA, USA, February 1984.
219. M. McCabe, C. Baggerman, and D. Verma. Avionics architecture interface considerations between constellation vehicles. In Proc. of the 28th Digital Avionics Systems Conference (DASC), pages 1.E.2-1-1.E.2-10. IEEE/AIAA, October 2009.
220. M.D. Mesarovic and Y. Takahara. Abstract Systems Theory, chapter 3. Springer-Verlag, 1989.
221. B. Meyer. Object-Oriented Software Construction. Prentice Hall, 1997.
222. D. Michaud. Maintenance Avionique-ATA 100 34 Test Automatique Bus Avionique Langage C. Institut de Maintenance Aronautique, Universit Bordeaux I, 2006.
223. V. Mikolasek, A. Ademaj, and S. Racek. Segmentation of Standard Ethernet Messages in the Time-Triggered Ethernet. Technical Report 22/2008, Technische Universität Wien, Institut für Technische Informatik, Treitlstr. 1-3/182-1, 1040 Vienna, Austria, 2008.
224. D.L. Mills. Internet time synchronization: the network time protocol. IEEE Transactions on Communications, 39(10): 1482-1493, October 1991.
225. P.S. Miner. Verification of fault-tolerant clock synchronization systems. Technical Report NASA Technical Paper 3349, NASA Langley Research Center, November 1993.
226. R. Mores, G. Hay, R. Belschner, J. Berwanger, C. Ebner, S. Fluhrer, E. Fuchs, B. Hedenetz, W. Kuffner, A. Krüger, P. Lohrmann, D. Millinger, M. Peller, J. Ruh, A. Schedl, and M. Sprachmann. FlexRay-the communication system for advanced automotive control systems. In Society of Automotive Engineers World Congress, Detroit, MI, USA, SAE International. Document No 2001-01-0676, March 2001.
227. M. Morgan. The Avionics Handbook, chapter Boeing B-777. CRC Press, Boca Raton, FL, USA, 2001.
228. J. Morris, G. Lee, K. Parker, G.A. Bundell, and P.L. Chiou. Software component certification. Computer, 34(9): 30-36, September 2001.
229. MOST Cooperation, Karlsruhe, Germany. MOST Specification Version 2.2, November 2002.
230. Motor Industry Software Reliability Research Association (MISRA). Development Guidelines for Vehicle Based Software, 1994.
231. B. Müller, T. Führer, F. Hartwich, R. Hugel, and H. Weiler. Fault tolerant TTCAN networks. Technical report, Robert Bosch GmbH, 2002.
232. C.J. Murray. Time-triggered protocol gains aerospace mileage. EE Times, September 2002.
233. NXP Semiconductor. Fault-tolerant CAN/LIN fail-safe system basis chip. product data sheet, 2010. Available at www.nxp.com/documents/data_sheet/UJA1061.pdf.
234. R. Obermaisser. CAN Emulation in a Time-Triggered Environment. In Proc. of the 2002 IEEE Int. Symposium on Industrial Electronics (ISIE), volume 1, pages 270-275, 2002.
235. R. Obermaisser. Message reordering for the reuse of CAN-based legacy applications in a time-triggered architecture. In Proc. of the 12th IEEE Real-Time and Embedded Technology and Applications Symposium, pages 301-310, April 2006.
236. R. Obermaisser and A. Kanitsar. Application of TTP/A for the Otto Bock Axon bus. Technical Report 27/2000, Technische Universität Wien, Institut für Technische Informatik, Vienna, Austria, July 2000.
237. R. Obermaisser and P. Peti. A fault hypothesis for integrated architectures. In Proc. of the 4th Int. Workshop on Intelligent Solutions in Embedded Systems, June 2006.
238. Object Management Group. The Common Object Request Broker: Architecture and Specification, July 2002.
239. Object Management Group (OMG). Smart Transducers Interface V1.0, January 2003. Specification available at http:==doc.omg.org/formal/2003-01-01 as document ptc/2002-10-02.
240. A. Olson and K. Shin. Fault-tolerant clock synchronization in large multicomputer systems. IEEE Trans. on Parallel and Distributed Systems, 5(9): 912-923, 1994.
241. OMG. Smart Transducers Interface V1.0. Available Specification document number formal/2003-01-01, Object Management Group, Needham, MA, U.S.A., January 2003. available at http://doc.omg.org/formal/2003-01-01.
242. OSEK/VDX. OIL: OSEK Implementation Language, Version 2.5, 2004.
243. S. Owre, J. Rushby, N. Shankar, and F. von Henke. Formal verification for fault-tolerant architectures: Prolegomena to the design of PVS. IEEE Transactions on Software Engineering, 21(2): 107-125, February 1995.
244. J. C. Palencia, J. J. Gutíerrez Garcia, and M. Gonźalez Harbour. On the schedulability analysis for distributed hard real-time systems. In Proceedings of the Euromicro Conference on Real Time Systems, pages 136-143, 1997.
245. J.C. Palencia and M.G. Harbour. Schedulability analysis for tasks with static and dynamic offsets. In Proceedings of the 19th IEEE Real-Time Systems Symposium, pages 26-37. IEEE Computer Society, 1998.
246. M. Papatriantafilou and P. Tsigas. Self-stabilizing wait-free clock synchronization. In Proceedings of the 4th Scandinavian Workshop on Algorithm Theory, volume 824 of Lecture Notes in Computer Science, pages 267-277. Springer-Verlag Berlin Heidelberg, Germany, July 1994.
247. R.J. Patton. Fault detection and diagnosis in aerospace systems using analytical redundancy. In IEEE Colloquium on Condition Monitoring and Fault Tolerance, pages 1/1-120, 6 1990.
248. M. Paulitsch and B. Hall. Insights into the sensitivity of the BRAIN (braided ring availability integrity network)-on platform robustness in extended operation. Dependable Systems and Networks, International Conference on, 0: 154-163, 2007.
249. M. Paulitsch and B. Hall. Starting and resolving a partitioned BRAIN. Object-Oriented Real-Time Distributed Computing, IEEE International Symposium on, 0: 415-421, 2008.
250. M. Paulitsch, J. Morris, B. Hall, K.R. Driscoll, E. Latronico, and P. Koopman. Coverage and the use of cyclic redundancy codes in ultra-dependable systems. Dependable Systems and Networks, International Conference on, 0: 346-355, 2005.
251. P. Pedreiras and L. Almeida. Combining event-triggered and time-triggered traffic in FTT-CAN: Analysis of the asynchronous messaging system. In Proc. of 3rd IEEE Int.Workshop on Factory Communication Systems, September 2000.
252. P. Peti, R. Obermaisser, and H. Kopetz. Out-of-norm assertions. In Proc. of the 11th IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS’05), pages 280-291, San Francisco, CA, USA, March 2005.
253. P. Peti, R. Obermaisser, and H. Paulitsch. Investigating connector faults in the time-triggered architecture. In Proc. of the IEEE Conference on Emerging Technologies and Factory Automation (ETFA’06), pages 887-896, 20-22 2006.
254. P. Peti and L. Schneider. Implementation of the TTP/A slave protocol on the Atmel ATmega103 MCU. Technical Report 28/2000, Technische Universität Wien, Institut für Technische Informatik, Vienna, Austria, August 2000.
255. H. Pfeifer. Formal verification of the TTP group membership algorithm. In Proc. of Formal Methods for Distributed System Development (FORTE XIII / PSTV XX 2000), pages 3-18. Kluwer Academic Publishers, 2000.
256. H. Pfeifer, D. Schwier, and F.W. von Henke. Formal verification for timetriggered clock synchronization. In Proc. of the 7th IFIP InternationalWorking Conference on Dependable Computing for Critical Applications (DCCA-7), pages 207-226, November 1999.
257. M. Pfluegl and D. Blough. A new and improved algorithm for fault-tolerant clock synchronization. Journal of Parallel and Distributed Computing, 27: 1-14, 1995.
258. S. Poledna. Replica determinism in distributed real-time systems: A brief survey. Real-Time Systems, 6: 289-316, 1994.
259. S. Poledna. Fault Tolerant Real-Time Systems: The Problem of Replica Determinism. Kluwer Academic Publishers, Boston, 1996.
260. P. Pop, P. Eles, and Z. Peng. Scheduling with optimized communication for time-triggered embedded systems. In Proceedings of the Seventh International Workshop on Hardware/Software Codesign, pages 178-182. ACM, 1999.
261. P. Pop, P. Eles, and Z. Peng. Analysis and Synthesis of Distributed Real-Time Embedded Systems. Kluwer Academic Pub, 2004.
262. P. Pop, P. Eles, and Z. Peng. Schedulability-driven communication synthesis for time triggered embedded systems. Real-Time Systems, 26(3): 297-325, 2004.
263. P. Pop, P. Eles, and Z. Peng. Schedulability-driven frame packing for multicluster distributed embedded systems. ACM Transactions on Embedded Computing Systems (TECS), 4(1): 140, 2005.
264. P. Pop, V. Izosimov, P. Eles, and Z. Peng. Design optimization of timeand cost-constrained fault-tolerant embedded systems with checkpointing and replication. IEEE Trans. on Very Large Scale Integrated (VLSI) Systems Volume, 17(3): 389-402, 2009.
265. T. Pop, P. Eles, and Z. Peng. Schedulability analysis for distributed heterogeneous time/event triggered real-time systems. In 15th Euromicro Conference on Real-Time Systems, 2003. Proceedings, pages 257-266, 2003.
266. T. Pop, P. Pop, P. Eles, and Z. Peng. Optimization of hierarchically scheduled heterogeneous embedded systems. In Proceedings of 11th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, pages 67-71, 2005.
267. T. Pop, P. Pop, P. Eles, Z. Peng, and A. Andrei. Timing analysis of the FlexRay communication protocol. Real-Time Systems, 39(1): 205-235, 2008.
268. D. Powell. Failure mode assumptions and assumption coverage. In Proc. of the 22nd IEEE Annual Int. Symposium on Fault-Tolerant Computing (FTCS-22), pages 386-395, Boston, USA, July 1992.
269. Radio Technical Commission for Aeronautics, Inc. (RTCA). DO-178B: Software Considerations in Airborne Systems and Equipment Certification, 1992.
270. Radio Technical Commission for Aeronautics, Inc. (RTCA). DO-297: Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations, 2005.
271. D. Ragan, P. Sandborn, and P. Stoaks. A detailed cost model for concurrent use with hardware/software co-design. In Proceedings of the 39th annual Design Automation Conference, pages 269-274. ACM, 2002.
272. P. Ramanathan, K.G. Shin, and R.W. Butler. Fault-tolerant clock synchronization in distributed systems. IEEE Computer, 23(10): 33-42, October 1990.
273. J.C. Ramirez and A.S. Piqueras. Learning Bayesian networks for systems diagnosis. In Proc. of the Electronics, Robotics and Automotive Mechanics Conference, volume 2, pages 125-130, September 2006.
274. Mathias Rausch. FlexRay Grundlagen, Funktionsweise, Anwendung. HANSER, 2008.
275. C. R. Reeves. Modern Heuristic Techniques for Combinatorial Problems. Blackwell Scientific Publications, 1993.
276. FAST Report. Study of worldwide trends and r&d programmes in embedded systems. Technical report, 2005.
277. RTCA. Software considerations in airborne systems and equipment certification. Standard DO-178B, RTCA, Inc., 1828 L Street, NW, Suite 805, Washington, DC 20036-5133, USA, December 1, 1992.
278. RTCA. Design assurance guidance for airborne electronic hardware. Standard DO-254, RTCA, Inc., 1828 L Street, NW, Suite 805, Washington, DC 20036-5133, USA, April 19, 2004.
279. RTCA. Environmental conditions and test procedures for airborne equipment. Standard DO-160E, RTCA, Inc., 1828 L Street, NW, Suite 805, Washington, DC 20036-5133, USA, December 9, 2004.
280. B. Rumpler and W. Elmenreich. Considerations on the complexity of embedded real-time system design tasks. In Proceedings of the IEEE International Conference on Computational Cybernetics 2006 (ICCC’06), pages 55-60, 2006.
281. J. Rushby. Partitioning for avionics architectures: Requirements, mechanisms, and assurance. NASA Contractor Report CR-1999-209347, NASA Langley Research Center, June 1999.
282. J. Rushby. Systematic formal verification for fault-tolerant time-triggered algorithms. IEEE Transactions on Software Engineering, 25(5): 651-660, September 1999.
283. J. Rushby. Formal verification of transmission window timing for the timetriggered architecture. Technical report, Computer Science Laboratory, SRI International, Menlo Park, CA 94025 USA, March 2001.
284. J. Rushby. Modular certification. Technical report, Computer Science Laboratory SRI International, 333 Ravenswood Avenue, Menlo Park, CA 94025, USA, September 2001.
285. J. Rushby. An overview of formal verification for the time-triggered architecture. In Proc. of the Symposium on Formal Techniques in Real-Time and Fault Tolerant System (FTRTFT), LNCS Vol. 2469, pages 83-105, Springer-Verlag, Oldenburg, Germany, September 2002.
286. J. Rushby and F. von Henke. Formal verification of the interactive convergence clock synchronization algorithm. Technical Report CSL-89-3R, Computer Science Laboratory, SRI International, CA, Menlo Park, USA, February 1989.
287. SAE. ARP 5107 (aerospace recommended practice). guidelines for timelimited- dispatch analysis for electronic engine control systems. Technical Report Rev. B, Society of Automotive Engineers, November 2006.
288. I. Saha and S. Roy. A finite state analysis of time-triggered CAN (ttcan) protocol using Spin. In Computing: Theory and Applications, 2007. ICCTA '07. International Conference on, pages 77-81, 5-7 2007.
289. I. Saha, S. Roy, and K. Chakraborty. Modeling and verification of TTCAN startup protocol using synchronous calendar. In Software Engineering and Formal Methods, 2007. SEFM 2007. Fifth IEEE International Conference on, pages 69-79, 10-14 2007.
290. J.H. Saltzer, D.P. Reed, and D.D. Clark. End-to-end arguments in system design. ACM Transactions on Computer Systems (TOCS), 2, 1984.
291. A. Sangiovanni-Vincentelli. Electronic-system design in the automobile industry. IEEE Micro, 23(3): 8-18, 2003.
292. A. Schedl. Design and Simulation of Clock Synchronization in Distributed Systems. Doctoral thesis, Institut für Technische Informatik, Technische Universit ät Wien, Treitlstr. 1-3/3/182-1, Vienna, Austria, April 1996.
293. F. Scheler and W. Schröder-Preikschat. Time-triggered vs. event-triggered: A matter of configuration? In Proc. of the Workshop on Model-Based Testing, Nürnberg, Germany, 2006.
294. U. Schmid. Orthogonal accuracy clock synchronization. Chicago Journal of Technical Computer Science, 2000(3): 3-77, August 2000.
295. U. Schmid and K. Schossmaier. Interval-based clock synchronization. Real-Time Systems, 12: 173-228, March 1997.
296. F.B. Schneider. A paradigm for reliable clock synchronization. Technical Report TR86-735, Computer Science Department, Cornell University, February 1986.
297. F.B. Schneider. Understanding protocols for Byzantine clock synchronization. Research Report 87-859, Department of Computer Science, Cornell University, Ithaca, NY, USA, August 1987.
298. W. Schwabl. Der Einfluss zufälliger und systematischer Fehler auf die Uhrensynchronisation in verteilten Echtzeitsystemen. Doctoral thesis, Institut für Technische Informatik, Technische Universität Wien, Treitlstr. 1-3/3/182-1, Vienna, Austria, October 1988.
299. K.G. Shin and R. Ramanathan. Clock synchronization of large multiprocessor systems in the presence of malicious faults. IEEE Transactions on Computers, 36(1): 2-12, 1987.
300. O. Sinnen. Task Scheduling for Parallel Systems. Wiley-Blackwell, 2007.
301. H. Sivencrona, P. Johannessen, M. Persson, and J. Torin. Heavy-ion fault injections in the time-triggered communication protocol. In Dependable Computing, Lecture Notes in Computer Science, volume 2847/2003, pages 69-80. Springer Berlin/Heidelberg, 2003.
302. Society of Automotive Engineers (SAE). ARP 4754: (Aerospace Recommended Practice)-Certification Considerations for Highly Integrated or Complex Aircraft Systems, 1996.
303. Society of Automotive Engineers (SAE). ARP 4761: (Aerospace Recommended Practice)-Guidelines and Methods for Conducting the Safety Assessment Process on Civil Airborne Systems and Equipment, 1996.
304. T.K. Srikanth and S. Toueg. Optimal clock synchronization. Journal of the ACM, 34(3): 626-645, 1987.
305. W. Steiner. Startup and Recovery of Fault-Tolerant Time-Triggered Communication. PhD thesis, Technische Universität Wien, Institut für Technische Informatik, Treitlstr. 3/3/182-1, 1040 Vienna, Austria, 2004.
306. W. Steiner. TTEthernet Executable Formal Specification. Research report, 2009. Available at http://www.ttagroup.org/.
307. W. Steiner. An Evaluation of SMT-based Schedule Synthesis For Time-Triggered Multi-Hop Networks. In RTSS’10: Proceedings of the 31st IEEE Real-Time Systems Symposium. IEEE, 2010.
308. W. Steiner. Synthesis of Static Communication Schedules for Mixed-Criticality Systems. In AMICS 2011: Proceedings of the 1st International Workshop on Architectures and Applications for Mixed-Criticality Systems. IEEE, 2011.
309. W. Steiner, G. Bauer, B. Hall, M. Paulitsch, and S. Varadarajan. TTEthernet dataflow concept. In NCA, pages 319-322, 2009.
310. W. Steiner and B. Dutertre. SMT-Based formal verification of a TTEthernet synchronization function. In FMICS, pages 148-163, 2010.
311. W. Steiner and W. Elmenreich. Automatic recovery of the TTP/A sensor/actuator network. InW. Elmenreich, editor, Proceedings of the First Workshop on Intelligent Solutions in Embedded Systems, pages 25-37, 2003.
312. W. Steiner and H. Kopetz. The startup problem in fault-tolerant time-triggered communication. International Conference on Dependable Systems and Networks (DSN 2006), June 2006.
313. W. Steiner and M. Paulitsch. The transition from asynchronous to synchronous system operation: An approach for distributed fault-tolerant systems. In Proc. of the International Conference on Distributed Computing Systems, pages 329-336, 2002.
314. W. Steiner, M. Paulitsch, and H. Kopetz. The TTA’s approach to resilience after transient upsets. Real-Time Syst., 32(3): 213-233, 2006.
315. K. Steinhammer. Design of an FPGA-Based Time-Triggered Ethernet System. PhD thesis, Technische Universität Wien, Institut für Technische Informatik, Treitlstr. 3/3/182-1, 1040 Vienna, Austria, 2006.
316. K. Steinhammer, P. Grillinger, A. Ademaj, and H. Kopetz. A Time-Triggered Ethernet (TTE) switch. In Proc. of Design, Automation and Test in Europe, Munich. Germany, March 2006.
317. J. Stelzer. LIN bus emerging standard for body control apps. EE Times Asia, September 2004.
318. S. Subbiah and S. Nagaraj. Issues with object orientation in verifying safetycritical systems. In Object-Oriented Real-Time Distributed Computing, 2003. Sixth IEEE International Symposium on, pages 99-104, 14-16 2003.
319. Sunplus Technology Co., Ltd. LIN bus master note application using UART module. available at mcu.sunplus.com, 2006. V1.3.
320. J. Swingler, J.W. McBride, and C. Maul. Degradation of road tested automotive connectors. IEEE Transactions on Components and Packaging Technologies, 23(1): 157-164, March 2000.
321. Systems Integration Requirements Task Group, Society of Automotive Engineers. ARP 4754: Certification Considerations in for Highly-Integrated or Complex Aircraft Systems, April 1996.
322. Systems Integration Requirements Task Group, Society of Automotive Engineers. ARP 4761 (Aerospace Recommended Practice)-Guidelines and Methods for Conducting the Safety Assessment Process on Civil Airborne Systems and Equipment, December 1996.
323. B. Tabbara, A. Tabbara, and A. Sangiovanni-Vincentelli. Function/Architecture Optimization and Co-Design of Embedded Systems. Springer Netherlands, 2000.
324. C. Tanzer. TTPos-the time-triggered and fault-tolerant RTOS. In Real-Time Magazine 99-4, 1999.
325. Time-Triggered Technology TTTech Computertechnik AG, Schönbrunner Strasse 7, A-1040 Vienna, Austria. TTP-Load: The Download Tool for the Time-Triggered Protocol-Version 6.1.6, 2004.
326. Time-Triggered Technology TTTech Computertechnik AG, Schönbrunner Strasse 7, A-1040 Vienna, Austria. TTP Bootloader: User Manual, November 2005.
327. K. Tindell and H. Hansson. Babbling idiots, the dual-priority protocol, and smart can controllers. In Proceedings of the 1st Int. CAN Conference, 1994.
328. K. W. Tindell. Adding time-offsets to schedulability analysis. Technical Report YCS 221, Department of Computer Science, University of York, January 1994.
329. K. W. Tindell, A. Burns, and A. J. Wellings. Allocating hard real-time tasks: an np-hard problem made easy. Real-Time Systems, 4(2): 145-165, 1992.
330. K.W. Tindell and J. Clark. Holistic schedulability analysis for distributed realtime systems. Euromicro Journal on Microprocessing and Microprogramming (Special Issue on Parallel Embedded Real-Time Systems), 40: 117-134, 1994.
331. F. Tisato and F. DePaoli. On the duality between event-driven and time-drivern models. In Proc. of the 13th IFAC DCCS, Toulouse, France, 1995.
332. Aviation Today. Parker selects TTTech for fly-by-wire system. Press release, July 2010.
333. G. Torrisi, J. Notaro, G. Burlak, and M. Mirowski. Evolution and trends in automotive electrical distribution systems. In Proc. of the IEEE Conference on Vehicle Power and Propulsion, page 7, 7-9 2005.
334. W. Townsley, A. Valencia, A. Rubens, G. Pall, G. Zorn, and B. Palter. Layer two tunneling protocol “L2TP.” RFC 2661, Internet Engineering Task Force, August 1999.
335. C. Trödhandl. Architectural requirements for TTP/A nodes. Master’s thesis, Technische UniversitätWien, Institut für Technische Informatik, Vienna, Austria, 2002.
336. C.H. Tsai and C.W. Wu. Processor-programmable memory bist for busconnected embedded memories. In Proceedings of the Asia and South Pacific Design Automation Conference, pages 325-330, 2001.
337. TTChip. TTP/C Controller C2: Controller Schedule (MEDL) Structure-Document Protocol Version 2.1. Schönbrunner Strasse 7, A-1040 Vienna, Austria, September 2002.
338. TTChip Entwicklungsges.m.b.H. TTP/C Controller C2 Controller-Host Interface Description Document, Protocol Version 2.1, November 2002.
339. TTTech Computertechnik AG, Schönbrunner Strasse 7, A-1040 Vienna, Austria. TTPPlan The Cluster Design Tool for the Time-Triggered Protocol TTP/C, April 2002.
340. TTTech Computertechnik AG. Time-Triggered Protocol TTP/C, High-Level Specification Document, Document Number D-032-S-10-028, Protocol Version 1.1, 2003.
341. TTTech Computertechnik AG. TTX-AUTOSAR FlexRay Stack User Manual, Document Number D-110-G-70-006, Document Edition 4.3.1, 2009.
342. TTTech Computertechnik AG. Interface Control Document HS-COM Layer, Document Number D-115-G-10-005, Version 0.1.1, 2010.
343. TTTech Computertechnik AG. TTP-Build User Manual, Document Number D-001-G-01-002, Manual Edition 8.1.4, 2010.
344. TTTech Computertechnik AG. TTP-Plan User Manual, Document Number D-001-G-01-003, Manual Edition 8.1.2, 2010.
345. Honeywell Tuscon. Design, implementation, and verification of fault-tolerant modular aerospace controls, Honeywell ncc-1-377. http://shemesh.larc.nasa.gov/fm/talks/Honeywell-TTTech.ppt, accessed August 2010, April 2003. Aviation Safety Program Single Aircraft Accident Prevention. Coop. Agreement NCC-1-377.
346. Vector Informatik GmbH. Product catalog ECU software, page 80-81: CAN embedded LIN communication. available at www.vector.com, 2010.
347. P. Veríssimo, L. Rodrigues, and A. Casimiro. CesiumSpray: A precise and accurate global time service for large-scale systems. Real-Time Systems, 12(3): 243-294, May 1997.
348. D.D. Davidson and V.Y. Chiu. Fail-operational global time reference in a redundant synchronous data bus system. Patent Application US 2005/0102586 A1, Honeywell, May 12, 2005.
349. C.J. Walter, M.M. Hugue, and N. Suri. Advances in Ultra-Dependable Distributed Systems. IEEE Computer Society, 10662 Los Vaqueros Circle, Los Alamitos, CA 90720, January 1995.
350. H.F. Wedde and W. Freund. Harmonious internal clock synchronization. In 12th Euromicro Conference on Real-Time Systems, pages 175-182, Informatik III, Dortmund University, Dortmund, Germany, June 2000. IEEE Press.
351. N. Weininger and D.D. Cofer. Modeling the ASCB-D synchronization algorithm with SPIN: A case study. In Proceedings of the 7th International SPIN Workshop on SPIN Model Checking and Software Verification, pages 93-112, Springer-Verlag, London, UK, 2000.
352. J. Welch and L. Lynch. A new fault-tolerant algorithm for clock synchronization. Information and Computation (formerly Information and Control), 77(1): 1-36, 1988.
353. J.Widder. Booting clock synchronization in partially synchronous systems. In DISC, pages 121-135, 2003.
354. A.T. Winfree. The Geometry of Biological Time. Springer Verlag, New York, 2001.
355. B. Witwer. Developing the 777 airplane information management system (AIMS): a view from program start to one year of service. Aerospace and Electronic Systems, IEEE Transactions on, 33(2): 637-641, April 1997.
356. www.softing.com. CAN, CANOpen, DeviceNet. Website, August 2010.
357. J. Zhang. Improved on-line process fault diagnosis using stacked neural networks. In Proc. of the International Conference on Control Applications, pages 689-694, vol.2, 2002.
358. W. Zheng, J. Chong, C. Pinello, S. Kanajan, and A. Sangiovanni-Vincentelli. Extensible and scalable time triggered scheduling. In Fifth International Conference on Application of Concurrency to System Design, 2005. ACSD 2005, pages 132-141, 2005.
359. W. Steiner and G. Bauer. TTEthernet: Time-triggered services for Ethernet networks, 28th Digital Avionics Systems Conference, IEEE, 2009.