CAJ | 학술논문

在遵循ISO26262三层安全架构下，汽车控制器位于第二层的扭矩监控功能软件开发中，对参与计算的输入／输出变量提出更高的安全要求。底层接口是基于安全内存开发的定点接口，上层基于Simulink开发的浮点数扭矩监控模型生成的C代码，在二者进行软件集成时会发生冲突。通过几种解决方案的对比，优选出一种通过修改TLC脚本控制TRW代码生成的解决方案，从而实现了对Simulink建模开发工程师无任何额外工作的负担，满足ISO26262对安全功能的要求，同时成功解决底层软件与控制策略层开发的矛盾，在项目中获得了良好的应用效果。
재준순ISO26262삼층안전가구하，기차공제기위우제이층적뉴구감공공능연건개발중，대삼여계산적수입／수출변량제출경고적안전요구。저층접구시기우안전내존개발적정점접구，상층기우Simulink개발적부점수뉴구감공모형생성적C대마，재이자진행연건집성시회발생충돌。통과궤충해결방안적대비，우선출일충통과수개TLC각본공제TRW대마생성적해결방안，종이실현료대Simulink건모개발공정사무임하액외공작적부담，만족ISO26262대안전공능적요구，동시성공해결저층연건여공제책략층개발적모순，재항목중획득료량호적응용효과。
There are more rigorous safety requirements on input and output variables when developing automotive controller torque moni- tor function to meet the second level requirement of the 3 level safety structure defined in ISO 26262. Low level software only supports fixed-point variable input, and C code generated by torque monitor algorithm model developed via Simulink only supports the floating- point variable. There is a conflict when compiling the two parts to generate the executable file. One method that rewrites the TLC scripts to control the generated code by Simulink RTW tools is selected after comparing several solutions. A big progress that the solu-tion has not any extra work to Simulink modeling engineer, meets ISO 26262 safety function requirements, at the same time successfully solves the conflict of low level software and algorithm models.