Safety-Critical App Hosting on Uncontrolled Devices With Test Harness Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Safety critical applications (SCAs) installed on uncontrolled data processing devices (UDPDs) lack assurance of proper operation due to the dynamic and unverified environment, which can be compromised by user-driven hardware and software changes, leading to potential malfunctions.
Innovation Solution
Implementing a test harness with various checks (installation, functional, host integrity, coexistence, interoperability, power management, and environment checks) to ensure the SCA operates properly on UDPDs, controlling its operation accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a safety critical application is installed on an uncontrolled data processing device that permits user hardware and software changes, then the device provides flexibility and adaptability, but the proper operation of the application cannot be assured
Solution Approach 1:
The patent applies preliminary action by executing a test harness that performs multiple checks (installation check, functional check, host integrity check, coexistence check, interoperability check, power management check, environment check) before allowing the safety critical application to operate. This preliminary verification ensures the application will function properly in the uncontrolled environment without requiring continuous monitoring or control during operation.
Solution Approach 2:
The test harness provides feedback by detecting environmental changes and determining whether the application should be prevented from operating freely. The system continuously monitors the operational environment and uses this feedback to control application operation, ensuring safety critical features maintain proper functionality despite user-driven changes to the device.
2Reliability
If the entire safety critical system undergoes verification and validation processes, then the system operates properly under controlled conditions, but the system cannot accommodate new hardware and software changes
Solution Approach 1:
The patent segments the verification process into two parts: (1) initial verification and validation of the safety critical application and test harness under controlled conditions, and (2) ongoing environmental checks performed by the test harness when the application operates on uncontrolled devices. This segmentation allows the system to maintain reliability through initial validation while enabling adaptability through continuous environmental monitoring and control.
3Adaptability or versatility
If user-driven hardware and software changes are permitted on the device, then the device becomes more versatile and adaptable, but the operation of the safety critical application may be detrimentally affected
Solution Approach 1:
The test harness implements feedback by detecting environmental changes resulting from user-driven modifications and using this information to determine whether the safety critical application should be prevented from operating freely. The system monitors the operational environment and adjusts application operation based on detected changes, ensuring reliability is maintained while allowing user customization.
Solution Approach 2:
The test harness performs preliminary anti-action by executing checks that detect potentially harmful environmental changes before they can affect application operation. The system proactively identifies changes that may detrimentally affect the application and prevents such changes from compromising safety critical functionality.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods and articles of manufacture for hosting a safety critical application on an uncontrolled data processing device are provided. Various combinations of installation, functional, host integrity, coexistence, interoperability, power management, and environment checks are performed at various times to determine if the safety critical application operates properly on the device. The operation of the SCA on the UDPD may be controlled accordingly.