Abstract
We report on recent efforts to certify the open-source operating system framework L4Re [2] and its commercial variant EB corbos Hypervisor [1]. Certification is carried out in adherence to ISO 26262 and targets an Automotive Safety Integrity Level B (ASIL-B). Unlike existing work on OS verification [3], the presented work discusses how a complete software system can be taken to certification. The paper identifies challenges arising from the re-use of open-source legacy software in a safety context and provides strategies for its certification without re-implementing major parts of the system. To achieve this, the paper introduces a new safety architecture based on the L4 style of “system-call forwarding”, hierarchical memory management and configuration-based setup of inter-process communication relations. Collectively, the proposed innovations isolate safety applications from hidden errors in components not developed in adherence to the ISO 26262, in this case the feature-rich software stack implementing the L4Re userland.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Notes
- 1.
We call software not meeting ISO 26262 requirements quality-managed (QM).
References
EB corbos Hypervisor. https://www.elektrobit.com. Accessed 26 May 2022
L4Re Runtime Environment. https://l4re.org. Accessed 26 May 2022
The seL4 Microkernel. https://sel4.systems. Accessed 26 May 2022
Biere, A., Kröning, D.: Sat-based model checking. In: Handbook of Model Checking, pp. 277–303 (2018)
Flodin, J., Lampka, K., Yi, W.: Dynamic budgeting for settling DRAM contention of co-running hard and soft real-time tasks. In: Proceedings of the 9th IEEE International Symposium on Industrial Embedded Systems, SIES 2014, pp. 151–159 (2014)
Heiser, G.: The seL4 Microkernel An introduction. https://sel4.systems/About/seL4-whitepaper.pdf. Accessed 26 May 2022
Klein, G., et al.: seL4: formal verification of an OS kernel. In: Proceedings of the ACM SIGOPS 22nd Symposium on Operating Systems Principles, SOSP 2009, pp. 207–220. ACM, New York (2009)
Lampka, K., Lackorzynski, A.: Resolving contention for networks-on-chips: combining time-triggered application scheduling with dynamic budgeting of memory bus use. In: Remke, A., Haverkort, B.R. (eds.) MMB &DFT 2016. LNCS, vol. 9629, pp. 137–152. Springer, Cham (2016). https://doi.org/10.1007/978-3-319-31559-1_12
Lampka, K., Lackorzynski, A.: Using hypervisor technology for safe and secure deployment of high-performance multicore platforms in future vehicles. In: 26th IEEE International Conference on Electronics, Circuits and Systems, ICECS 2019, Genoa, Italy, 27–29 November 2019, pp. 783–786. IEEE (2019)
Liedtke, J.: On micro-kernel construction. In: Proceedings of the fifteenth ACM Symposium on Operating Systems Principles, SOSP 1995, pp. 237–250. ACM, New York (1995). http://doi.acm.org/10.1145/224056.224075
Acknowledgments
The work is funded in part by the German Federal Ministry for education and research, grant numbers: 16ME0450, 16ME0452, 02K18D014.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Lampka, K., Thurlby, J., Lackorzynski, A., Hähnel, M. (2022). Safety Certification with the Open Source Microkernel-Based Operating System L4Re. In: Trapp, M., Saglietti, F., Spisländer, M., Bitsch, F. (eds) Computer Safety, Reliability, and Security. SAFECOMP 2022. Lecture Notes in Computer Science, vol 13414. Springer, Cham. https://doi.org/10.1007/978-3-031-14835-4_3
Download citation
DOI: https://doi.org/10.1007/978-3-031-14835-4_3
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-14834-7
Online ISBN: 978-3-031-14835-4
eBook Packages: Computer ScienceComputer Science (R0)