HSI-Testing for Oxygen Supply Controller Module

Beginning already in 2011, Verified Systems performed Hardware/Software-Integration Testing for the Oxygen Supply Controller Module (OSCM) for the Airbus A350 Family. This included the architecture and setup of the HSI testrig as well as the excution of the whole testing campaigns starting with the derivation of test cases from requirements until the final test campaign for DO-178B DAL-B certification of the software.

Verified’s RT-Tester tool family was used to define, execute and analyse real-time tests as well as for the handlng of manual ad-hoc tests using Verified’s GSMI panel builder. In order to be able to trigger fault-handling code, error injection mechanisms have been set up using Test-on-Target mechanisms, where test agents executed on the system under test are able to simulate certain errors of the hardware platform or the underlying operating systems, which can otherwise not be triggered without defective hardware or without complex fault-insertion testrig extensions.

In order to fulfill DO-178B DAL-B conditions, the tests are designed to cover 100% of the high-level requirements and to reach 100% code coverage (branch coverage). The reached coverage is measured using software images on the target platform that have been instrumented with Verified’s Code Coverage Branch Monitor (CCBM) tool.

RTT-EXTA was used to perform a worst-case execution time analysis to show that the software may not violate its cyclic time frame. In order to gain additional confidence, the actual observed execution times have been measured during the testing campaing using qualified tools provided with the DAL-A certified hardware platform on which the OSCM software is executed.