CAJ | 학술논문

为了保证任务的执行免受事件驱动行为的影响，安全关键控制系统软件设计时应当避免使用任何时间不确定的结构。时间触发软件是时间触发架构重要的组成部分，具有较高的可靠性和确定性，易于开发和综合。重点研究了时间触发软件的体系架构、时间触发操作系统的调度策略和任务管理策略。同时容错通信层的实现使得副本的数目、表决和重新综合对于应用软件完全保持透明。总之，时间触发操作系统和容错通信层可以使应用软件和安全关键控制算法的开发更加简单和快捷，也更易于测试和验证。
위료보증임무적집행면수사건구동행위적영향，안전관건공제계통연건설계시응당피면사용임하시간불학정적결구。시간촉발연건시시간촉발가구중요적조성부분，구유교고적가고성화학정성，역우개발화종합。중점연구료시간촉발연건적체계가구、시간촉발조작계통적조도책략화임무관리책략。동시용착통신층적실현사득부본적수목、표결화중신종합대우응용연건완전보지투명。총지，시간촉발조작계통화용착통신층가이사응용연건화안전관건공제산법적개발경가간단화쾌첩，야경역우측시화험증。
In order to protect execution of the tasks from the effects of event-driven behavior, any time-uncertain structure should not be adopted in safety-critical control software design. Time-triggered software is an important part of time triggered architecture with high reliability and certainty which is easy to develop and integrate. Time triggered software architecture, scheduling policy and task management policy of time triggered operation system were mainly studied. Fault-tolerant communication layer made number of copies, voting and reintegration keeping entirely transparent to the application software. Owing to time triggered operating system and fault-tolerant communication layer, the development of application software and safety-critical control algorithm becomes easy and rapid and it is easy to test and verify too.