Communication handling in integrated modular avionics

• US 20020144010A1
• Filed: 03/29/2001
• Published: 10/03/2002
• Est. Priority Date: 05/09/2000
• Status: Abandoned Application

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Younis, Mohamed, Aboutabl, Mohamed Said
• Application Number:
  US09/821,601
• Publication Number:
  US 20020144010A1
• Time in Patent Office: Days
• US Class Current: 719/314
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues

Abstract

Techniques for inter-application communication and handling of I/O devices in an Integrated Modular Avionics (IMA) system enable the integration of multiple applications while maintaining strong spatial and temporal partitioning between application software modules or partitioned applications. The integration of application modules is simplified by abstracting the desired application interactions in a manner similar to device access. Such abstraction facilitates the integration of previously developed applications as well as new applications. The invention requires the least support from the operating system and minimizes the dependency of the integrated environment on application characteristics.

Claims

1. A method for non-corrupt inter-partition application communication between a plurality of partitioned applications operating with the same CPU in an Integrated Modular Avionics (IMA) system, said method comprising the steps of:

executing a system executive module with highest priority and full control of the CPU;

partitioning a plurality of applications to create partitioned applications which each use protected memory space and which operate in a lower priority mode to access the CPU at timed intervals;

allocating outgoing messages generated from each of the plurality of partitioned applications into circular outgoing message queues in shared memory locations allocated for each of the plurality of partitioned applications by the system executive wherein each of the plurality of partitioned application stores the outgoing messages it generates within its allocated shared memory locations;

registering a circular outgoing message queue in a central channel registry table maintained by the system executive application wherein the central channel registry table states an outgoing message address space location in the shared memory locations and lists which of the plurality of partitioned applications are authorized to read each outgoing message;

verifying in a library routine within each of the plurality of partitioned applications that the outgoing messages are properly addressed to the plurality of partitioned applications, and are complete messages, and are not corrupted or addressed to partitioned applications which no longer exist; and

enabling direct reading of the outgoing messages stored within the circular outgoing message queues in the shared memory locations wherein only authorized partitioned applications of the plurality of partitioned applications are permitted to read in read only access from the shared memory.

2. The method of claim 1 for the comprising repeating the above steps for each of the plurality of partitioned applications when run time is allocated by the system executive for each the plurality of partitioned applications.

3. The method of claim 1 further comprising creating a messages read index of the outgoing messages which have been read for each of the plurality of partitioned applications;

and

reading the messages read index by the plurality of partitioned applications and determining which messages have been read and which messages can be deleted from the circular outgoing message queues.

4. The method of claim 3 further comprising the steps of:

detecting an overflow of the outgoing circular message queue;

deleting the outgoing messages which have been read to mitigate the overflow of the circular message queue.

5. The method of claim 1 wherein additional new messages are inserted into the outgoing circular message queue.

6. The method of claim 1 wherein the step of registering a circular outgoing message queue includes the step of abstracting the outgoing message queue to a communication primitive format to appear to be a device driver command message when read by the plurality of partitioned applications.

7. The method of claim 6 wherein after the step of abstracting at least one of the outgoing messages is performed, the abstracted outgoing message is read through a communication channel for a device driver in a legacy application to enable the legacy application which can only be accessed through device driver ports to read outgoing messages addressed to the legacy application.

8. The method of claim 1 wherein the circular message queue is arranged as a stream buffer wherein the outgoing messages are in stream format and are thus readable by more than one of the plurality of partitioned applications.

9. The method of claim 1 wherein the system executive maintains a health status history of each of the plurality of partitioned applications which is only writeable by the system executive but which is readable by every application partition.

10. The method of claim 1 wherein devices are included in at least one of the plurality of partitioned applications and said method further comprising the step of controlling the devices using commands in the outgoing messages through a device daemon.

11. The method of claim 1 wherein, during the step of verifying, a dual status field is created and attached to each outgoing message to ensure that each outgoing message is completely stored in the circular outgoing message queues.

12. The method of claim 8 wherein the stream buffer includes additional check codes for verifying data.

14. The system of claim 13 wherein the circular message queues are in a stream buffer format.

15. The system of claim 13 wherein the messages are abstracted to device driver command or data format.

16. The system of claim 15 wherein the messages which are abstracted are read by legacy applications.

18. The method of claim 17 wherein the circular message queues are in a stream buffer format.

19. The method of claim 17 further comprising the step of abstracting the messages to a device driver command or data format.

13. An aircraft avionics system comprising:

a system executive module which controls a CPU board connected to a data bus;

plurality of partitioned avionic applications partitioned by the system executive to run in a protected memory space allocated for the CPU board according to a time schedule and to create outgoing messages; and

a plurality of circular message queues located in a partitioned shared memory space allocated to the CPU board wherein the circular message queues are only writeable to by an associated one of a plurality of partitioned compliant avionic applications, wherein the circular message queues are directly readable by an associated receiver partitioned avionic application.

17. A method for an aircraft avionics system having a system executive application which controls a CPU board connected to a data bus and which partitions a plurality of partitioned avionic applications, said method comprising the steps of:

executing the plurality of partitioned avionic applications in a protected memory space according to a time schedule to create outgoing messages;

queuing the outgoing messages into a plurality of circular message queues located in a partitioned shared memory space wherein the circular message queues are only writeable to by a sender application from the plurality of partitioned compliant avionic applications; and

reading the outgoing messages in the circular message queues wherein the circular message queues are directly readable by an associated receiver partitioned avionic application.