Validation of Automotive Control Applications using Formal Methods and metamodeling techniques
❖ Simone Silvetti, Esteco Spa & University Udine ❖ Mariapia Marchi, Esteco Spa
Validation of Automotive Control Applications using Formal Methods - - PowerPoint PPT Presentation
Validation of Automotive Control Applications using Formal Methods and metamodeling techniques Simone Silvetti, Esteco Spa & University Udine Mariapia Marchi, Esteco Spa www.caeconference.com MDB ( M odel B ased D evelopment)
Validation of Automotive Control Applications using Formal Methods and metamodeling techniques
❖ Simone Silvetti, Esteco Spa & University Udine ❖ Mariapia Marchi, Esteco Spa
www.caeconference.com
❖ process aimed at designing complex systems ❖ cost reduction ❖ reduce development time
2www.caeconference.com
www.caeconference.com
www.caeconference.com
www.caeconference.com
www.caeconference.com
www.caeconference.com
www.caeconference.com
Validation Process
9 17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Validation Process
10 10❖ Use of block diagram tools (Simulink, Gt suite) ❖ Powerful Tools but complex
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Validation Process
11 11❖ Use of block diagram tools (Simulink, Gt suite) ❖ Use of natural languages ❖ Involves time events... ❖ Powerful Tools but complex ❖ Not rigorous ❖ Not Machine interpretable
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Validation Process
12 12❖ Use of block diagram tools (Simulink, Gt suite) ❖ Use of natural languages ❖ Involves time events... ❖ Powerful Tools but complex ❖ Not rigurous ❖ Not Machine interpretable
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Validation Process
13 13❖ Use of block diagram tools (Simulink, Gt suite) ❖ Use of natural languages ❖ Involves time events... ❖ Powerful Tools but complex ❖ Not rigurous ❖ Not Machine interpretable
FORMAL METHODS !
www.caeconference.com
Validation Process
14 14 17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Validation Process
15 15 17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Validation Process
16 16www.caeconference.com
Validation Process
17 17www.caeconference.com
Validation Process
18 18“If the engine speed (w) is always less than k1 then vehicle speed (v) can not exceed k2 in less than T sec” ᅟᅠᆨ(F[0,T] (v ≥ k2) ⋀ G(w ≤ k1))
www.caeconference.com
Robustness Semantics
19 19www.caeconference.com
Robustness Semantics
20 20Boolean yes/no
17 - 18 October 2016 International CAE Conferencek F( f>k )
www.caeconference.com
Robustness Semantics
21 21Boolean Robustness yes/no +30 / -30
More Information!
17 - 18 October 2016 International CAE Conference+30 k F( f>k )
www.caeconference.com
The goal
22 22f M M(f)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
The goal
23 23f M M(f) min [M(f), φ ]
f ∈ F
The optimization Problem
R =
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
The goal
24 24f M M(f) min [M(f), φ ]
f ∈ F
The optimization Problem
R =
R
Counterexample Safe!
≤ 0 ≥ 0
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
The optimization process
www.caeconference.com
26The optimization process
Challenges
❖
Low number of model execution
❖
Inputs are functions (temporal series)!!
www.caeconference.com
27The optimization process
Challenges
❖
Low number of model execution
❖
Inputs are functions (temporal series)!!
www.caeconference.com
28The optimization process
Challenges
❖
Low number of model execution
❖
Inputs are functions (temporal series)!! GP-UCB Adaptive Control Point Parametrization
www.caeconference.com
The Control Point Parametrization
29Fix the times interpolation
www.caeconference.com
The Control Point Parametrization
30Fix the times interpolation n Control Points n Variable to optimize
www.caeconference.com
The Control Point Parametrization
31Fix the times interpolation n Control Points n Variable to optimize
www.caeconference.com
The adaptive Control Point Param.
32n Control Points 2n Variable to optimize interpolation
www.caeconference.com
33Doubled the variables
Problem
Increase the expressivity but...
www.caeconference.com
34Doubled the variables
Problem Solution
GP-UCB Optimizer
Increase the expressivity but...
www.caeconference.com
GP-UCB
35 17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
36 17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
37 17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
38P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
39P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
40P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
41P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
42P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
43P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
GP-UCB
44P(x,y)
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
45Reduce Input Space Doubled the variables
www.caeconference.com
Schema
46GP - UCB N
N++
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
47Input Space
Adaptive Idea
www.caeconference.com
48Input Space
Adaptive Idea
1
www.caeconference.com
49Input Space
Adaptive Idea
2
www.caeconference.com
50Input Space
Adaptive Idea
2
www.caeconference.com
51Input Space
Adaptive Idea
2
www.caeconference.com
52Input Space
Adaptive Idea
3
www.caeconference.com
53Input Space
Adaptive Idea
3
www.caeconference.com
54Input Space
Adaptive Idea
4
www.caeconference.com
55Input Space
Adaptive Idea
www.caeconference.com
56Automatic transmission
www.caeconference.com
57Automatic transmission
www.caeconference.com
58Automatic transmission
69 blocks: 2 integrators, 3 look-up tables, 3 2D look-up tables, Stateflow Chart
www.caeconference.com
59Results
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
60aCPP reduces minimum number of evaluations by 50-70%
GP-UCB is slow.
Results
17 - 18 October 2016 International CAE Conference✓
www.caeconference.com
61Results
Time = {#Simulations} x {Simulation Time} + {Optimizer time}
GP-UCB is slow
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
62Results
Time = {#Simulations} x {Simulation Time} + {Optimizer time}
GP-UCB is slow
Future work
❖ from Matlab to Java (parallelization) ❖ multi-objective approach ❖ using fmi as simulator
17 - 18 October 2016 International CAE Conferencewww.caeconference.com
Esteco
17 - 18 October 2016 International CAE Conference 63Alberto Policriti Luca Bortolussi
www.caeconference.com
64