the mathworks - modelling safety-critical logic with stateflow · officials say thrust reverser...

7
© 2008 The MathWorks, Inc. ® ® Stateflow ® Prepared by: Elisabeth O’Brien Modeling Safety-Critical Logic with Stateflow

Upload: others

Post on 22-Mar-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

©20

08 T

he M

athW

orks

, Inc

.

® ®

Stateflow ®

Prepared by: Elisabeth O’Brien

Modeling Safety-Critical Logic with Stateflow

Page 2: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

2

® ®

Agenda

� Stateflow and Simulink®

� Why use Stateflow?

� An example� The requirements� Demo: Aircraft thrust reverser modeled with Stateflow

� Conclusion

Page 3: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

3

® ®

How does Stateflow work with Simulink?

Simulink is used to respond to continuous changes in dynamic systems.

Stateflow is used to respond to instantaneouschanges in dynamic systems.

Aerodynamicsfault detection

Propulsion system liftoff stages

Robot kinematics operation modes

Page 4: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

4

® ®

Why Stateflow� Simulink with Stateflow is the only tool in the world that

combines� Dynamic system simulation� State charts and control logic

� Intuitive graphical programming environment

� Stateflow semantics are deterministic (predictable & consistent)

� Powerful integration with verification, validation & test tools

Page 5: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

5

® ®

Thrust Reversers Should not be Deployed During Flight

Officials Say Thrust Reverser Shut Off Before Brazi l Crash� SAO PAULO, Brazil — One of the two thrust reversers on an airliner

carrying 186 people that crashed in a fireball was turned off when the plane landed, the jet's owner said, as officials tried to determine why it raced down a runway instead of slowing down.

Lauda Air B767 Accident Report SYNOPSIS� The physical evidence at the crash site showed that the left engine thrust

reverser was in the deployed position.

Page 6: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

6

® ®

Thrust Reverser Deployment Requirements

� The following requirements shall be met prior to deploying the thrust reversers:� Four weight on wheels sensors

� All wheels need to be on the ground

� Two wheel speed sensors � Wheels must be spinning fast enough

� Two airspeed limit sensor� Plane must be traveling slow enough

� Four throttle position sensors � Throttle must be in correct position

Page 7: The MathWorks - Modelling Safety-Critical Logic with Stateflow · Officials Say Thrust Reverser Shut Off Before Brazil Crash SAO PAULO, Brazil — One of the two thrust reversers

7

® ®

SummaryUse Stateflow to:

� Design and simulate state machines and control logic

� Respond to instantaneous changes in dynamic systems

� Describe logic in a natural and understandable form

� Automatically generate portable C code, with the addition of Stateflow Coder™