‘The Engineering of Reliable Embedded Systems’ (Ed. 2) by Michael J. Pont

eres2_front_220
Published in November 2016, the Second Edition of ‘The Engineering of Reliable Embedded Systems’ (ERES2), documents an industry-proven approach to the development of software for reliable, real-time embedded systems, based on the use of ‘Time Triggered’ (TT) architectures.

What distinguishes TT approaches is that it is possible to model the expected system behaviour precisely. This means that: [i] during the development process, we can demonstrate that all of the requirements have been met; and [ii] at run time, we can detect problems very quickly.

The end result is that we can have a high level of confidence that a TT system will either: [i] operate precisely as required; or [ii] move into an appropriate state if a problem occurs.

The above characteristics mean that appropriately-implemented TT systems provide a particularly effective means of meeting the requirements of various international safety standards.

Case studies

In order to illustrate how the TT techniques presented in ERES2 can be employed in practical designs, five detailed case studies are included. These studies describe the development of embedded control and monitoring systems for the following products:

  • an industrial alarm sounder unit (IEC 61508, SIL 2);
  • a domestic washing machine (IEC 60730, Class B);
  • a hospital radiotherapy machine (IEC 62304, Class C);
  • a steering-column lock for a passenger car (ISO 26262, ASIL D);
  • an aircraft jet engine (DO-178C, Level A).

Further information about ERES2 is provided on this page.

[This page was last updated: 2017-03-06] empty_space


empty_space

Publication details

empty_space
Pont, M.J. (2016) “The Engineering of Reliable Embedded Systems: Developing software for ‘SIL 0’ to ‘SIL 3’ designs using Time-Triggered architectures”, (Second Edition) SafeTTy Systems. ISBN: 978-0-9930355-3-1.

First printing: November 2016 (‘Edition 2.0’)
Second printing (with corrections): December 2016 (‘Edition 2.1’)
empty_space


empty_space

Who should read this book?

empty_space

‘ERES2’ will be of particular value to people who need to develop software for industrial, automotive, medical or aerospace systems, or safety-related household goods.

The techniques presented in the book are intended to help developers achieve compliance with international standards such as IEC 61508, ISO 26262, ISO 13849, IEC 62304, DO-178C and IEC 60730.

The ‘ERES2’ sample chapters may help you to decide if use of TT techniques is likely to provide benefits to your team or organisation. In addition, you can also download a complete copy of ‘ERES1‘.

Since the publication of ‘ERES2’ on 25 November 2016, we have dispatched many copies, to locations including: Argentina, Austria, Botswana, Canada, China, Egypt, France, Germany, India, Isle of Man, Italy, Malaysia, New Zealand, Norway, Singapore, South Korea, Sweden, UK and USA.

empty_space
standards_table_appx_615

empty_space

empty_space


empty_space

Microcontroller targets

empty_space

Most of the code examples in ERES2 target microcontrollers (MCUs) from STMicroelectronics (STM32F0, STM32F4), NXP / Freescale (LPC17xx), Infineon (XMC4000), and Texas Instruments (TMS570).

For safety-related projects, we would aim to employ a processor with a ‘Safety Manual’ where this is possible. Such a manual is available for the majority of the processors that are employed in the book.

Where safety is not a direct concern, the techniques presented in ERES2 can be applied with virtually any MCU.

empty_space


empty_space

Download sample chapters

empty_space

We have released the following sample material (including a detailed case study):

    Full table of contents
    Preface
    CHAPTER 1: Introduction
    CHAPTER 2: A simple TTC scheduler
    CHAPTER 21: Introduction to the case studies
    CHAPTER 22: Industrial alarm system

This material is available as a single PDF file.

[Latest update to the sample chapters: 2016-11-30]

empty_space


empty_space

Download code examples (TTRDs)

empty_space

‘ERES2’ is accompanied by a growing suite of public ‘Time-Triggered Reference Designs’ (TTRDs).

You can download the latest public TTRDs here.

We also offer a suite of ReliabiliTTy TTRDs for use in commercial projects.

empty_space


empty_space

The Engineering of Reliable Embedded Systems (Second Edition)

Developing software for ‘SIL 0’ to ‘SIL 3’ designs using time-triggered architectures

by Michael J. Pont

[Second Edition]

ISBN: 978-0-9930355-3-1.

Preface

PART ONE: INTRODUCTION

CHAPTER 1: Introduction
CHAPTER 2: A simple TTC scheduler

PART TWO: FOUNDATIONS OF RELIABLE TT SYSTEMS

CHAPTER 3: Polling and buffering
CHAPTER 4: Data storage and data transfers
CHAPTER 5: Interacting with peripherals
CHAPTER 6: Diverse Tasks
CHAPTER 7: Balanced Tasks
CHAPTER 8: Modes and states
CHAPTER 9: Multi-processor systems
CHAPTER 10: Working with third-party code libaries

PART THREE: MODELLING TTC DESIGNS

CHAPTER 11: Modelling with Tick Lists
CHAPTER 12: Modelling shared-clock systems

PART FOUR: MONITORING TTC DESIGNS

CHAPTER 13: Performing startup tests (POSTs)
CHAPTER 14: Checking the software configuration
CHAPTER 15: Performing periodic system tests (BISTs)
CHAPTER 16: Making effective use of an internal WDT
CHAPTER 17: Adding an eWDC unit
CHAPTER 18: Monitoring task execution times
CHAPTER 19: Monitoring task execution sequences
CHAPTER 20: Adding a WarranTTor unit

PART FIVE: CASE STUDIES

CHAPTER 21: Introduction to the case studies

CHAPTER 22: Industrial alarm system
Related standards: IEC 61508; IEC 61784-3.
Target MCU: Infineon XMC4500

CHAPTER 23: Domestic washing machine
Related standards: IEC 60335; IEC 60730.
Target MCU: NXP LPC1769

CHAPTER 24: Radiotherapy machine
Related standards: IEC 60601-1; IEC 60601-2-1; IEC 62304; IEC 61508; EN / ISO 13845.
Target MCU: TI TMS570

CHAPTER 25: Steering-column lock
Related standards: ISO 26262.
Target MCU: ST STM32F401

CHAPTER 26: Aircraft jet engine
Related standard: DO-178C.

PART SIX: CONCLUSIONS

CHAPTER 27: Bending the rules
CHAPTER 28: Conclusions

APPENDICES

APPENDIX 1: Definitions
APPENDIX 2: Foundation platforms
APPENDIX 3: Recommended platforms
APPENDIX 4: Selecting MCUs for your platform
APPENDIX 5: The TT Framework SoRS
APPENDIX 6: Understanding the impact of jitter
APPENDIX 7: Generating timing data
APPENDIX 8: Generating a Tick List
APPENDIX 9: Supporting task pre-emption
APPENDIX 9: Creating deterministic TTH / TTP designs
APPENDIX 11: Unit tests and integration tests
APPENDIX 12: Conducting reviews
APPENDIX 13: Coding guidelines and related matters

Full list of references and related publications

Index

empty_space


empty_space

How to buy your copy of ‘ERES2’

empty_space

‘ERES’ is available directly from SafeTTy Systems at a cost of £65.00 + delivery.

  • Delivery in the UK is free of charge.
  • Delivery in the EU (outside the UK) is £10.00
  • Delivery in the rest of the world (anywhere outside the EU) is £15.00

empty_space

All prices stated are in UK Pounds. No VAT is charged on book sales.

Please contact us to place your order.

You will be asked for the delivery address, and sent an invoice (by email).
The invoice can be paid by bank transfer or via PayPal®
All invoices must be paid before books are dispatched.

empty_space


empty_space

Volume discounts

empty_space

Need more than 10 or more copies of ‘ERES2’ for your team members?

Please contact us to discuss your requirements.

empty_space


empty_space

Can I buy ‘ERES2’ on Amazon?

empty_space

At present, ERES2 can be ordered directly from SafeTTy Systems Ltd or via your local bookshop.

The book is expected to become available through Amazon.com, etc, by June 2017.

empty_space


empty_space

DuplicaTTor® Evaluation Boards


To support organisations that want to explore the use of modern TT designs – including many of the designs in the ERES2 book – we have introduced our first DuplicaTTor® Evaluation Board (DEB).

Using a DEB, organisations can evaluate design options up to ‘SIL 3’ / ‘ASIL D’ level (and equivalent).

You’ll find further information on the DEB page.

empty_space

empty_space


empty_space

ReliabiliTTy® Technology Licences

rtl_logo5_257
The books in the “Engineering of Reliable Embedded Systems” (ERES) series and the related Time-Triggered Reference Designs (TTRDs) describe patented technology and are subject to copyright and other restrictions.

The public TTRDs downloaded from this WWW site and the designs and techniques documented
in the ERES book series may be used without charge: [i] by universities and colleges in courses for which a degree up to and including “MSc” level (or equivalent) is awarded; [ii] for non-commercial projects carried out by individuals and hobbyists.

Use of the techniques and code examples described in the ERES books in any commercial project (including training courses) or in university research projects (including PhD-level programmes and equivalent) requires purchase of a ReliabiliTTy® Technology Licence.

Please contact us if you have any questions about these licence arrangements.
empty_space


empty_space

Further information

empty_space

Please contact us if you require further information about this book.

empty_space