skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.


Title: An Environmentally Complex Requirement for Safe Separation Distance between UAVs
Cyber-Physical Systems (CPS) interact closely with their surroundings. They are directly impacted by their physical and operational environment, adjacent systems, user interactions, regulatory codes, and the underlying development process. Both the requirements and design are highly dependent upon assumptions made about the surrounding world, and therefore environmental assumptions must be carefully documented, and their correctness validated as part of the iterative requirements and design process. Prior work exploring environmental assumptions has focused on projects adopting formal methods or building safety assurance cases. However, we emphasize the important role of environmental assumptions in a less formal software development process, characterized by natural language requirements, iterative design, and robust testing, where formal methods are either absent or used for only parts of the specification. In this paper, we present a preliminary case study for dynamically computing the safe minimum separation distance between two small Uncrewed Aerial Systems based on drone characteristics and environmental conditions. In contrast to prior community case studies, such as the mine pump problem, patient monitoring system, and train control system, we provide several concrete examples of environmental assumptions, and then show how they are iteratively validated at various stages of the requirements and design process, using a combination of simulations, field-collected data, and runtime monitoring.  more » « less
Award ID(s):
1931962
PAR ID:
10523089
Author(s) / Creator(s):
; ; ;
Corporate Creator(s):
Publisher / Repository:
IEEE RE'24 Workshop on Environment-Driven Requirements Engineering
Date Published:
Edition / Version:
2024
Subject(s) / Keyword(s):
environmental assumptions small unmanned aerial systems UAV, case-study requirements
Format(s):
Medium: X
Location:
Reykjavik, Iceland
Sponsoring Org:
National Science Foundation
More Like this
  1. Fill, Hans-Georg; Mayo, Francisco; van Sinderen, Marten; Maciaszek, Leszek (Ed.)
    Safety-critical real-time systems require correctness to be validated beyond the design phase. In these systems, response time is as critical as correct functionality. Runtime verification is a promising approach for validating the correctness of system behaviors during runtime using monitors derived from formal system specifications. However, practitioners often lack formal method backgrounds, and no standard notation exists to capture system properties that serve their needs. To encourage the adoption of formal methods in industry, we present GROOT, a runtime monitoring tool for real-time systems that automatically generates efficient monitors from structured English statements. GROOT is designed with two branches, one for functional requirements and one for specifications with metric time constraints, which use appropriate formalisms to synthesize monitors. This paper introduces TIMESPEC, a structured English dialect for specifying timing requirements. Our tool also automates formal analysis to certify the C monitors’ construction. We apply GROOT to timing specifications from an industrial component and a simulated autonomous system in Simulink. 
    more » « less
  2. Flight-time failures of small Uncrewed Aerial Systems (sUAS) can have a severe impact on people or the environment. Therefore, sUAS applications must be thoroughly evaluated and tested to ensure their adherence to specified requirements, and safe behavior under real-world conditions, such as poor weather, wireless interference, and satellite failure. However, current simulation environments for autonomous vehicles, including sUAS, provide limited support for validating their behavior in diverse environmental contexts and moreover, lack a test harness to facilitate structured testing based on system-level requirements. We address these shortcomings by eliciting and specifying requirements for an sUAS testing and simulation platform, and developing and deploying it. The constructed platform, DroneWorld (\DW), allows sUAS developers to define the operating context, configure multi-sUAS mission requirements, specify safety properties, and deploy their own custom sUAS applications in a high-fidelity 3D environment. The DroneWorld Monitoring system collects runtime data from sUAS and the environment, analyzes compliance with safety properties, and captures violations. We report on two case studies in which we used our platform prior to real-world sUAS deployments, in order to evaluate sUAS mission behavior in various environmental contexts. Furthermore, we conducted a study with developers and found that DroneWorld simplifies the process of specifying requirements-driven test scenarios and analyzing acceptance test results. 
    more » « less
  3. This paper proposes a conceptual architecture of digital twin with human-in-the-loop-based smart manufacturing (DH-SM). Our proposed architecture integrates cyber-physical systems with human spaces, where artificial intelligence and human cognition are employed jointly to make informed decisions. This will enable real-time, collaborative decision-making between humans, software, and machines. For example, when evaluating a new product design, information about the product’s physical features, manufacturing requirements, and customer demands must be processed concurrently. Moreover, the DH-SM architecture enables the creation of an immersive environment that allows customers to be effectively involved in the manufacturing process. The DH-SM architecture is well fitted to those relatively new manufacturing processes, such as metal additive manufacturing, since they can benefit from using digital twins, data analytics, and artificial intelligence for monitoring and controlling those processes to support non-contact manufacturing. The proposed DH-SM will enable manufacturers to leverage the existing cyber-physical system and extended reality technologies to generate immersive experiences for end users, operators, managers, and stakeholders. A use case of wire + arc additive manufacturing is discussed to demonstrate the applicability of the proposed architecture. Relevant development and implementation challenges are also discussed. 
    more » « less
  4. Accountability is the property of a system that enables the uncovering of causes for events and helps understand who or what is responsible for these events. Definitions and interpretations of accountability differ; however, they are typically expressed in natural language that obscures design decisions and the impact on the overall system. This paper presents a formal model to express the accountability properties of cyber-physical systems. To illustrate the usefulness of our approach, we demonstrate how three different interpretations of accountability can be expressed using the proposed model and describe the implementation implications through a case study. This formal model can be used to highlight context specific-elements of accountability mechanisms, define their capabilities, and express different notions of accountability. In addition, it makes design decisions explicit and facilitates discussion, analysis and comparison of different approaches. 
    more » « less
  5. Undergraduate engineering students are commonly introduced to design in their first year and tackle a more authentic design challenge during senior year, with intervening courses focused on technical problem solving. Along this trajectory, students should acquire skills related to the development of engineering requirements, which are important to the technical framing of design problems. Through the lens of framing agency, this mixed-methods study explores first-year and senior students’ knowledge of engineering requirements as they engaged problems within their respective courses. Findings suggest that learning about requirements as a framing mechanism was not well-supported across the curriculum. Implications include a need to engage students in requirements development during the middle years and improve support for iterative framing and solving activities 
    more » « less