High-security software scheduling method based on functional module

Abstract

The invention discloses a high-security software scheduling method based on a functional module, and relates to the field of civil aircraft airborne software, and the method comprises the following steps: constructing a three-level scheduling model comprising a sequence, a sequence and scheduling, and realizing fine management of the functional module through a sequence-sequence-scheduling hierarchical structure; a phase-based deterministic scheduling algorithm is adopted to ensure that a functional module is strictly executed in a specified period and phase; and designing high-security characteristics, including static resource verification and fault tolerance, modular execution atomization and determinacy of an execution process. The airborne software scheduling method has the advantages that efficient and flexible task scheduling, static configuration verification and fault tolerance and modular atomization execution are realized by constructing a three-level scheduling model, adopting a phase-based deterministic scheduling algorithm and designing a high-safety characteristic, and the safety, reliability and maintainability of airborne software scheduling are remarkably improved.

Description

Technical Field

[0001] The present invention relates to the field of civil aircraft onboard software, and in particular to a high-security software scheduling method based on functional modules. Background Art

[0002] The onboard software architecture of civil aircraft has evolved from the first to the third generation. The current mainstream third-generation onboard software architecture adopts a "partitioned operating system + middleware + partitioned application" model, supporting the operation of multiple onboard applications on a single device. This achieves integrated software functionality and is widely used in modern large civil aircraft such as the Airbus A350 and Boeing 787. In terms of software scheduling technology, simple scheduling algorithms were initially used, executing tasks sequentially according to a pre-set order. This algorithm was unable to dynamically adjust the execution order based on task priority or real-time requirements. Subsequently, priority-based scheduling algorithms emerged, assigning a priority to each task. When scheduling tasks, the system prioritizes high-priority tasks. To meet the strict real-time requirements of onboard software, real-time scheduling algorithms have been widely used. Common ones include the Earliest Deadline First (EDF) algorithm and the Rate Monotonic Scheduling (RMS) algorithm. However, there are many defects in the existing technology, including poor task scheduling capabilities, cumbersome architecture adjustment processes, long adjustment cycles, slow responses, potential risks in code modifications, and inflexible resource allocation; resource design and configuration are difficult, the complexity brought about by the increase in functions makes the difficulty of system design and configuration increase exponentially, and there is a lack of effective automation tools; software system reconfigurability is difficult to achieve, the application and partition binding problem leads to too high binding between software and partitions, and the limitations of the reconstruction model make it difficult to adapt to the diverse reconfiguration requirements of future complex airborne systems; real-time accuracy assurance faces challenges, the increase in task complexity leads to scheduling delays, and there is a lack of standardized interfaces for tool chain integration; security and reliability need to be improved, and the security and reliability of the system need to be further enhanced. Summary of the Invention

[0003] In order to solve the above technical problems, a high-security software scheduling method based on functional modules is provided. This technical solution solves the problems raised in the above background technology in airborne software scheduling, such as low task scheduling capability, difficulty in resource design and configuration, poor reconfigurability of the software system, insufficient real-time and accuracy guarantees, and the need to improve safety and reliability.

[0004] In order to achieve the above objects, the technical solution adopted by the present invention is: A high-security software scheduling method based on functional modules, comprising: Build a three-level scheduling model including order, sequence, and scheduling, and achieve refined management of functional modules through the order-sequence-scheduling hierarchical structure; Adopting a phase-based deterministic scheduling algorithm to ensure that functional modules are strictly executed in the specified cycle and phase; Design high security features, including static resource verification and fault tolerance, modular execution atomicity, and determinism of the execution process.

[0005] Preferably, the slot module in the three-level scheduling model is a basic scheduling unit of the functional module, and each airborne software functional module is abstracted as a slot, and each slot includes a model, a scheduling cycle and a scheduling phase.

[0006] Preferably, the sequence module in the three-level scheduling model is a sequence arrangement within a single cycle, representing a set of sequence slots within a scheduling cycle. After each sequence has loaded the phase and cycle modules, the sequence module groups these sequences into a set and saves them.

[0007] Preferably, the scheduling module in the three-level scheduling model is a global scheduling management across cycles, which obtains the scheduling cycle and scheduling phase of each sequence by reading the configuration file, stores them in each sequence object, and generates a set; The generated sequence set is converted into a sequence set to form a cross-cycle deterministic schedule.

[0008] Preferably, the phase-based deterministic scheduling algorithm includes a phase alignment mechanism, and the phase of each sequence must satisfy 0≤Phase <Cycles。

[0009] Preferably, the phase-based deterministic scheduling algorithm includes generating a cross-cycle scheduling table, which calculates the maximum period MajorPeriod in the scheduling algorithm and the basic time unit by reading a configuration file, and generates a scheduling table containing MajorCycles sequences.

[0010] Preferably, the high-security feature design includes static resource verification and fault tolerance, specifically cycle legitimacy verification and phase boundary checking, forcing the cycle to be an integer multiple of the minimum cycle and checking whether the phase exceeds the legal range.

[0011] Preferably, the high-security design includes modular execution atomicity and determinism of the execution process, specifically, there is no interruption during the execution of each application, and the order and dependencies of task execution are determined during system compilation.

[0012] Preferably, the function module parameters are statically configured through a CSV file, and a period divisibility check and a phase boundary check are introduced to intercept illegal parameters during the initialization phase.

[0013] Compared with the prior art, the present invention has the following beneficial effects: The present invention proposes a highly secure software scheduling method based on functional modules. By decomposing the traditional flat task scheduling into a three-level model of sequence - series - scheduling, hierarchical management from single-module parameter calculation to global cycle arrangement is achieved. The sequence module abstracts each airborne software functional module into a sequence, including basic scheduling information such as model, scheduling period, and scheduling phase. The series module sorts and arranges all eligible sequences according to their phases and periods at the beginning of each scheduling cycle, forming an ordered set of sequences. The scheduling module generates a cross-cycle deterministic scheduling table by reading the configuration file to obtain the scheduling period and scheduling phase of each sequence. That is, when adding a new functional module, only the corresponding configuration file needs to be modified, without adjusting the core logic of the scheduling algorithm. At the same time, through hierarchical isolation, it is convenient to locate scheduling anomalies. For example, if there is a phase conflict in a certain series, it can be directly traced back to the sequence parameters. In addition, the architecture designer has a highly flexible scheduling control right. Only by making detailed adjustments to the scheduling table, without repeatedly communicating and coordinating with software engineers to modify the code, can the system scheduling order be adjusted quickly and accurately; The present invention proposes a highly secure software scheduling method based on functional modules. By utilizing the mathematical relationship between phases and periods, a static scheduling table is generated to solve the uncertainty problem of existing real-time scheduling algorithms in complex cycle scenarios. The phase alignment mechanism ensures that the phase of each sequence satisfies the condition of 0 ≤ Phase < Cycles. The cross-cycle scheduling table generation calculates the maximum period MajorPeriod in the scheduling algorithm by reading the configuration file and generates a scheduling table containing MajorCycles series. Thereby, it can ensure that functional modules are strictly executed at the specified period and phase, meeting the stringent requirements of airborne software for deterministic scheduling. And through the generation method of the static scheduling table, dynamic adjustment during operation is avoided, improving the determinacy and security of the system. At the same time, it can effectively handle complex cycle combinations, ensuring that the system can maintain scheduling determinacy and consistency even when the cycles are different. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 is a schematic flow diagram of the present invention; Figure 2 is a schematic flow diagram of the sequence - series - scheduling three-level model diagram of the present invention; Figure 3 is a schematic flow diagram of the sequence model diagram of the present invention; Figure 4 is a schematic flow diagram of the series model diagram of the present invention; Figure 5 is a schematic flow diagram of the scheduling model diagram of the present invention; Figure 6 is a schematic flow diagram of the dynamic event response process of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0015] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments in the following description are only examples, and those skilled in the art can think of other obvious variants.

[0016] Referring to Figure 1 As shown, a high-security software scheduling method based on functional modules includes: Construct a three-level scheduling model including order, sequence, and scheduling, and achieve refined management of functional modules through the hierarchical structure of order-sequence-scheduling; Adopt a deterministic scheduling algorithm based on phase to ensure that functional modules are strictly executed at the specified cycle and phase; Design high-security features, including static resource verification and fault tolerance, modular execution atomization, and determinacy of the execution process.

[0017] A three-level scheduling model is constructed, including three levels: order, sequence, and scheduling. The order module is the basic scheduling unit of functional modules, abstracting each airborne software functional module as an order, and each order includes basic scheduling information such as model, scheduling cycle, and scheduling phase. The sequence module is responsible for the order arrangement within a single cycle, representing the set of order slots within a scheduling cycle. After each order is loaded with modules such as phase and cycle, the sequence module combines and saves these orders into a set. The scheduling module is the global scheduling management across cycles. By reading the configuration file, it obtains the scheduling cycle and scheduling phase of each order, stores them in each order object, generates a set, and at the same time generates a sequence set from the generated order set to form a deterministic scheduling table across cycles.

[0018] During its implementation, a deterministic scheduling algorithm based on phase ensures that functional modules are strictly executed at the specified cycle and phase. The algorithm includes a phase alignment mechanism to ensure that the phase of each order satisfies the condition of 0 ≤ Phase < Cycles. In addition, the algorithm also includes the generation of a cross-cycle scheduling table. By reading the configuration file, it calculates the maximum cycle MajorPeriod in the scheduling algorithm and generates a scheduling table containing MajorCycles sequences. In the scheduling execution process, the sequence is updated once every MinorPeriod, and the functional module corresponding to the current phase index is executed. The system has stored the orders in the sequence in phase order during compilation to ensure the determinacy of the scheduling order.

[0019] Thus, through the hierarchical functional module scheduling model, hierarchical management is achieved from single module parameter calculation to global cycle orchestration, improving the scalability and maintainability of the system. Secondly, the phase-based deterministic scheduling algorithm uses the mathematical relationship between phase and period to generate a static scheduling table, which solves the uncertainty problem of existing real-time scheduling algorithms in complex cycle scenarios and meets the stringent requirements of airborne software for deterministic scheduling. Finally, the highly secure static configuration and verification mechanism statically configures functional module parameters through CSV files, introduces cycle divisibility checking and phase boundary checking, intercepts illegal parameters during the initialization phase, prevents runtime failures, and improves the security and reliability of the system.

[0020] The slot module in the three-level scheduling model is the basic scheduling unit of the functional module. Each onboard software functional module is abstracted as a slot, and each slot includes a model, a scheduling cycle, and a scheduling phase.

[0021] The construction of the pre-order module first requires abstracting and defining each functional module of the onboard software, mapping each functional module to a pre-order. Subsequently, a corresponding scheduling period and scheduling phase are configured for each pre-order. These parameters are typically statically configured through a configuration file, ensuring that the specific scheduling information for each pre-order is determined during system initialization. This allows the scheduling order and timing of each functional module to be determined at compile time, avoiding dynamic adjustments at runtime and improving system determinism and security. Throughout its lifecycle, by abstracting each functional module as a pre-order, refined management of functional modules is achieved. Scheduling information for each pre-order can be independently configured and managed, enhancing system flexibility and maintainability. Furthermore, by statically configuring the scheduling period and scheduling phase, the execution order and timing of each functional module can be determined at compile time, avoiding dynamic adjustments at runtime and reducing system scheduling uncertainty and potential safety hazards. Furthermore, the pre-order module design facilitates functional expansion and adjustment. Adding new functional modules requires only adding the corresponding pre-order information to the configuration file, without modifying the system's core scheduling logic, thereby improving system scalability and development efficiency.

[0022] The sequence module in the three-level scheduling model is a sequence arrangement within a single cycle, representing a set of sequence slots within a scheduling cycle. After each sequence has loaded the phase and cycle modules, the sequence module groups these sequences into a set and saves them.

[0023] The scheduling cycle and phase information for each sequence is read from the configuration file. Based on this information, the sequence module will then sort and arrange all eligible sequences according to their phase and cycle at the beginning of each scheduling cycle to form an ordered sequence set. This set represents all functional modules that need to be executed within that scheduling cycle and their execution order. This allows the sequence module to work in conjunction with the scheduling module to ensure that the functional modules within each scheduling cycle can be executed in the predetermined order and time point. At the beginning of each scheduling cycle, the sequence module will select the sequences to be executed from the saved sequence set based on the current phase and time point, and pass them to the scheduling module for execution. This design ensures that each functional module is strictly executed within the specified cycle and phase, avoiding scheduling conflicts and uncertainty in the execution order.

[0024] During its operation, by arranging the sequences into an ordered set, the sequence module can accurately control the execution order and timing of the functional modules within each scheduling cycle, thereby improving the scheduling accuracy and reliability of the system. Secondly, by combining the sequence module with the configuration file, it realizes the combination of static configuration and dynamic scheduling, allowing the system to determine the execution order and time point of each functional module at compile time, avoiding dynamic adjustments at runtime, and reducing the uncertainty and potential safety hazards of system scheduling. In addition, the design of the sequence module also makes it easier to expand and adjust the system's functions. New functional modules only need to add the corresponding sequence information in the configuration file without modifying the core scheduling logic of the system, thereby improving the scalability and development efficiency of the system.

[0025] The scheduling module in the three-level scheduling model is a global scheduling management across cycles. It obtains the scheduling cycle and scheduling phase of each sequence by reading the configuration file, stores them in each sequence object, and generates a set. The generated sequence set is converted into a sequence set to form a cross-cycle deterministic schedule.

[0026] In the three-level scheduling model, the scheduling module, as the global scheduling management component across cycles, is responsible for reading the scheduling period and phase for each rank from the configuration file and storing them in each rank object. At runtime, the scheduling module first parses the configuration file to obtain the scheduling parameters for all functional modules in the system, including the scheduling period and phase for each rank. These parameters are determined at system compile time, ensuring determinism and predictability in the scheduling process. The scheduling module then stores these parameters in each rank object, forming an ordered set of ranks.

[0027] Next, the scheduling module further organizes the generated sequence set into a sequence collection to form a deterministic scheduling table across cycles. This scheduling table is the scheduling blueprint of the system during the entire operation cycle, ensuring that each functional module is strictly executed at the specified cycle and phase. The scheduling module reads the parameters in the configuration file, calculates the maximum cycle MajorPeriod in the scheduling algorithm, and generates a scheduling table containing multiple sequences. This scheduling table is used to guide the execution order and time points of the functional modules during the system operation, ensuring the efficient and stable operation of the system.

[0028] During its overall operation period, by reading the scheduling parameters from the configuration file and generating the scheduling table, the scheduling module realizes the combination of static configuration and dynamic scheduling, ensuring the efficient and stable operation of the system. Secondly, by generating a deterministic scheduling table across cycles, the scheduling module ensures that each functional module is strictly executed at the specified cycle and phase, improving the scheduling accuracy and reliability of the system. In addition, the design of the scheduling module also enables the system to be more easily extended and adjusted in functions. For a newly added functional module, only the corresponding sequence information needs to be added to the configuration file, without modifying the core scheduling logic of the system, thus improving the scalability and development efficiency of the system.

[0029] The phase-based deterministic scheduling algorithm includes a phase alignment mechanism, and the phase of each sequence needs to satisfy 0 ≤ Phase < Cycles.

[0030] During the system configuration phase, a phase parameter is set for each functional module (i.e., sequence), and this parameter must be within the range of 0 to Cycles - 1. Cycles represents the total number of phases within a scheduling cycle, which is usually determined by the scheduling cycle of the system and the execution time of the functional module. That is, it is possible to determine the execution time point of each functional module at compile time, which forms the key design element of the phase alignment mechanism, ensuring that the phase of each sequence satisfies the condition of 0 ≤ Phase < Cycles, thus avoiding dynamic adjustment during operation, reducing the uncertainty of system scheduling and potential safety hazards, and improving the determinacy and safety of the system. If it is found that the phase value of a certain sequence exceeds the range, the system will intercept and report an error during the initialization phase, thus preventing the occurrence of runtime failures. This makes the static verification mechanism effectively improve the safety and reliability of the system. During its operation, the phase alignment mechanism also ensures that the phase value of each sequence is within the specified range, avoiding scheduling conflicts and uncertainty of execution order caused by incorrect phase values.

[0031] The phase-based deterministic scheduling algorithm includes cross-cycle scheduling table generation. By reading the configuration file, the maximum cycle MajorPeriod in the scheduling algorithm is calculated, and a scheduling table containing MajorCycles sequences is generated.

[0032] Define the scheduling period and phase parameters for each functional module in the configuration file. During the initialization phase, these parameters will be read, and the largest scheduling period among all sequence positions, i.e., MajorPeriod, will be calculated through an algorithm. Meanwhile, the system will also determine the basic time unit, which is usually the least common multiple of the scheduling periods. The system will allocate each sequence position to the corresponding location in the scheduling table according to its period and phase parameters, ensuring that each sequence position is strictly executed at the specified period and phase. This way of generating the static scheduling table avoids dynamic adjustment during runtime, improving the determinism and security of the system. Thus, through static configuration and pre-generated scheduling tables, the system can determine the execution order and time points of each functional module during compilation, avoiding dynamic adjustment during runtime and reducing the uncertainty of system scheduling and potential security risks. Secondly, it can also effectively handle complex period combinations, ensuring that the system can maintain scheduling determinism and consistency even when the periods are different. In addition, the way of generating the static scheduling table also improves the maintainability and scalability of the system. When adding a new functional module, only the corresponding parameters need to be added to the configuration file, without modifying the core scheduling logic of the system, thus simplifying the system development and maintenance process.

[0033] The high-security feature design includes static resource verification and fault tolerance, specifically cycle legality verification and phase boundary check, which enforce that the cycle is an integer multiple of the minimum cycle and verify whether the phase exceeds the legal range.

[0034] In the high-security feature design, the static resource verification and fault tolerance mechanism is an important part of ensuring the stability and security of the system. Among them, the purpose of cycle legality verification is to ensure that the scheduling period of each functional module is an integer multiple of the minimum cycle of the system, thus avoiding task conflicts and scheduling chaos caused by improper cycle settings. By strictly verifying the cycle parameters of each sequence position during the system initialization phase, the system can timely detect and intercept configurations that do not meet the requirements, thus preventing runtime errors from occurring.

[0035] The phase boundary check verifies the phase parameters of each sequence position to ensure that their values are within the legal range, i.e., 0 ≤ Phase < Cycles. This prevents scheduling out-of-bounds problems caused by incorrect phase settings, avoiding possible memory access errors and system crashes. By verifying the phase parameters during the configuration file reading and scheduling table generation processes, configuration errors can also be detected and corrected at an early stage, thus improving the reliability and security of the system.

[0036] Static resource verification, in conjunction with the fault-tolerance mechanism, enables parameter verification during system initialization, identifying and correcting configuration errors early on, thus avoiding scheduling issues and system crashes caused by parameter errors during runtime. Furthermore, this improves system security and reliability, ensuring that each functional module executes strictly within the predetermined cycle and phase, avoiding task conflicts and scheduling disruptions. Furthermore, the static verification mechanism simplifies system maintenance and debugging, allowing developers to quickly locate and fix issues using configuration files, improving development and maintenance efficiency.

[0037] The high-security design includes modular execution atomicity and deterministic execution process. Specifically, there is no interruption during the execution of each application, and the order and dependencies of task execution are determined during system compilation.

[0038] The execution order and dependencies of each functional module are defined using static configuration files (such as CSV files). These configuration files are read and parsed during system compilation to generate a fixed schedule. The schedule details the execution order of each functional module within each scheduling cycle and phase, ensuring that each module's execution is not interrupted by other modules or external events. This allows the execution order and dependencies of all tasks to be determined at compile time, avoiding dynamic adjustments and potential scheduling conflicts at runtime.

[0039] During its implementation, the configuration file undergoes rigorous validation during initialization, including period divisibility checks and phase boundary checks, to ensure the validity and consistency of all configuration parameters. A static schedule is then generated based on the configuration file, and each functional module is executed strictly according to this schedule at runtime. Because the execution order and dependencies of all tasks are determined at compile time, the system does not require dynamic scheduling decisions during execution, thus avoiding the uncertainty and potential risks associated with such decisions.

[0040] This allows task execution to be determined statically at compile time, avoiding the uncertainty and potential risks associated with dynamic scheduling at runtime and improving system reliability and security. Furthermore, since each application is not interrupted during execution, the integrity and consistency of task execution is guaranteed, preventing inconsistent execution states or data errors caused by interruptions. Furthermore, this simplifies system development and maintenance. Developers can quickly define and adjust task execution order through static configuration files without having to modify complex scheduling algorithms and logic, thereby improving development efficiency and system maintainability.

[0041] Function module parameters are statically configured through CSV files, and period divisibility check and phase boundary check are introduced to intercept illegal parameters during the initialization phase.

[0042] A configuration file (CSV format) defines the scheduling parameters for each functional module, including key information such as the scheduling period and scheduling phase. This allows the system to determine the scheduling behavior of all functional modules at compile time rather than runtime, thus avoiding security risks associated with dynamic configuration at runtime, such as memory tampering or parameter anomalies. During runtime, the system first reads the CSV configuration file, parses the functional module parameters, and performs rigorous validation. Period divisibility checks ensure that the scheduling period of each functional module is an integer multiple of the minimum period, avoiding task conflicts or scheduling confusion caused by improper period settings. Phase boundary checks ensure that the scheduling phase of each functional module is within the legal range, preventing memory access errors or other anomalies caused by incorrect phase settings. By performing these checks during the initialization phase, illegal parameters are promptly detected and blocked, ensuring that the scheduling parameters of all functional modules meet expectations, thereby improving system stability and security.

[0043] Therefore, through the design of static configuration and strict verification, static configuration avoids the uncertainty and potential risks brought by dynamic adjustment at runtime, so that the system scheduling behavior is determined at compile time, improving the predictability and reliability of the system. The period divisibility check and phase boundary check can intercept illegal parameters during the initialization phase, preventing system failures or safety hazards caused by configuration errors, and enhancing the security and stability of the system.

[0044] In summary, the advantages of the present invention are: by constructing a three-level scheduling model, adopting a phase-based deterministic scheduling algorithm and designing high-security features, efficient and flexible task scheduling, static configuration verification and fault tolerance, and modular atomic execution are achieved, which significantly improves the security, reliability and maintainability of onboard software scheduling.

[0045] The above shows and describes the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions merely illustrate the principles of the present invention. Various changes and modifications may be made to the present invention without departing from the spirit and scope of the present invention. Such changes and modifications are intended to fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the appended claims and their equivalents.

Claims

1. A high-security software scheduling method based on functional modules, characterized in that: include: Build a three-level scheduling model including order, sequence, and scheduling, and achieve refined management of functional modules through the order-sequence-scheduling hierarchical structure; Adopting a phase-based deterministic scheduling algorithm to ensure that functional modules are strictly executed in the specified cycle and phase; Design high security features, including static resource verification and fault tolerance, modular execution atomicity, and determinism of the execution process.

2. A high-security software scheduling method based on functional modules according to claim 1, characterized in that: The sequence slot module in the three-level scheduling model is the basic scheduling unit of the functional module, and each airborne software functional module is abstracted into a sequence. Each sequence includes a model, a scheduling cycle and a scheduling phase.

3. A high-security software scheduling method based on functional modules according to claim 2, characterized in that: The sequence module in the three-level scheduling model is a sequence arrangement within a single cycle, representing a set of sequence slots within a scheduling cycle. After each sequence has loaded the phase and cycle modules, the sequence module groups these sequences into a set and saves them.

4. A high-security software scheduling method based on functional modules according to claim 3, characterized in that: The scheduling module in the three-level scheduling model is a global scheduling management across cycles. It obtains the scheduling cycle and scheduling phase of each sequence by reading the configuration file, stores them in each sequence object, and generates a set. The generated sequence set is converted into a sequence set to form a cross-cycle deterministic schedule.

5. The high-security software scheduling method based on functional modules according to claim 4, characterized in that: The phase-based deterministic scheduling algorithm includes a phase alignment mechanism, and the phase of each sequence must satisfy 0≤Phase <Cycles。 6. A high-security software scheduling method based on functional modules according to claim 5, characterized in that: The phase-based deterministic scheduling algorithm includes generating a cross-cycle scheduling table. By reading a configuration file, the maximum period MajorPeriod in the scheduling algorithm is calculated, and a scheduling table containing MajorCycles sequences is generated.

7. A high-security software scheduling method based on functional modules according to claim 6, characterized in that: The high-security design includes static resource verification and fault tolerance, specifically cycle legitimacy verification and phase boundary checking, forcing the cycle to be an integer multiple of the minimum cycle and checking whether the phase exceeds the legal range.

8. The high-security software scheduling method based on functional modules according to claim 7, characterized in that: The high-security design includes modular execution atomicity and deterministic execution process. Specifically, there is no interruption during the execution of each application, and the order and dependencies of task execution are determined during system compilation.

9. The high-security software scheduling method based on functional modules according to claim 8, characterized in that: Function module parameters are statically configured through CSV files, and period divisibility check and phase boundary check are introduced to intercept illegal parameters during the initialization phase.

Images