EECE Hybrid and Embedded Systems: Computation

Transcription

1 EECE Hybrid and Embedded Systems: Computation T. John Koo, Ph.D. Institute for Software Integrated Systems Department of Electrical Engineering and Computer Science Vanderbilt University 300 Featheringill Hall April 1,

2 Application: Time Automata 2

3 Outline Motivation Hybrid Systems Verification of Timed Automata A Design Example Future Works 3

4 Distributed Sensing and Sensor Networks Creation of a fundamental unifying framework for real-time distributed/decentralized information processing with applications to sensor networks System Architecture for Networked Sensor Route map router sensor appln application packet Radio Packet Active Messages Serial Packet Temp SW ATMEL 4 Mhz CPU RFM 916 MHz radio 64KB EEPROM Sensor Bus: byte bit Radio byte RFM UART i2c photo clocks HW 7 Analog sensors 2 I2C buses 1 SPI bus Runs Tiny OS 2 weeks on AA batteries 1% duty w/ solar power 4

5 Distributed Sensing and Sensor Networks Networked sensors dropped from an aerial vehicle Ad hoc networking 5

6 Distributed Sensing and Sensor Networks Recovering Flow from Distributed Networks In a dense sensor scenario, environmental data can be interpolated Over a few time steps, optical flow algorithms are applied to determine flow Accuracy of results is highly dependent on the smoothness of the flow Sense temperature at nodes Interpolate to grid points Compute flow 6

7 System Architecture for Networked Sensors application Route map router sensor appln Active Messages packet Radio Packet Serial Packet Temp SW byte Radio byte UART i2c photo HW bit RFM clocks Constrained two-level scheduling model: threads + events Components: Frame (storage), Threads (concurrency), Commands, and Handlers (events) Constrained Storage Model Very lean multithreading Layering: components issue commands to lower-level components 7

8 TinyOS TinyOS - component-based operating system Modularity by assembling only the software components to synthesize application from hardware components Components as reentrant cooperating finite state machines application sensing application packet Radio Packet byte Radio byte photo SW command bit RFM clocks ADC HW event 8

9 TinyOS A complete TinyOS application Application = Graph of components Scheduler Component Interface synchronous commands and asynchronous events Internal Storage Fixed-size frame containing the state of component Internal Implementation Light-weight threads tasks Command and event handlers Scheduling Events have higher priority Events preempt tasks Almost instantaneous event execution Tasks have lower priority Tasks do not preempt events or other tasks Scheduled by FIFO scheduler Handled rapidly without blocking or polling 9

10 Example: Communication Packet Level Byte Level RFM Bit Level 1 byte = 18 bits 1 packet = 30 bytes 10

11 Design Considerations Characteristic of sensor networks Dynamical behaviors depend on the environment Deploy once and leave without future maintenance Energy consumption varies between applications We suggest to use formal methods to verify system performance to guarantee correct operation in every circumstances predict lifetime of a given application scenario Functional Behaviors +Temporal Behaviors Timed Automata System States = Discrete States + Continuous States(Time + Energy) State Transitions = Discrete Transitions(Events) + Continuous Transitions 11

12 What Are Hybrid Systems? Dynamical systems with interacting continuous and discrete dynamics 12

13 Why Hybrid Systems? Modeling abstraction of Continuous systems with phased operation (e.g. walking robots, mechanical systems with collisions, circuits with diodes) Continuous systems controlled by discrete inputs (e.g. switches, valves, digital computers) Coordinating processes (multi-agent systems) Important in applications Hardware verification/cad, real time software Manufacturing, communication networks, multimedia Large scale, multi-agent systems Automated Highway Systems (AHS) Air Traffic Management Systems (ATM) Uninhabited Aerial Vehicles (UAV) Power Networks 13

14 Research Issues Modeling & Simulation Control: classify discrete phenomena, existence and uniqueness of execution, Zeno [Branicky, Brockett, van der Schaft, Astrom] Computer Science: composition and abstraction operations [Alur- Henzinger, Lynch, Sifakis, Varaiya] Analysis & Verification Control: stability, Lyapunov techniques [Branicky, Michel], LMI techniques [Johansson-Rantzer] Computer Science: Algorithmic [Alur-Henzinger, Sifakis, Pappas- Lafferrier-Sastry] or deductive methods [Lynch, Manna, Pnuelli], Abstraction [Pappas-Tabuada, Koo-Sastry] Controller Synthesis Control: optimal control [Branicky-Mitter, Bensoussan-Menaldi], hierarchical control [Caines, Pappas-Sastry], supervisory control [Lemmon-Antsaklis], safety specifications [Lygeros-Sastry, Tomlin- Lygeros-Sastry], control mode switching [Koo-Pappas-Sastry] Computer Science: algorithmic synthesis [Maler et.al., Wong-Toi], synthesis based on HJB [Mitchell-Tomlin] 14

15 Verification Deductive Methods Theorem-Proving techniques [Lynch, Manna, Pnuelli] Model Checking State-space exploration [Alur-Henzinger, Sifakis, Pappas-Lafferrier- Sastry] Reachability Problem Forward Reachable Set 15

16 Computational Tools Verification based on Modal Checking Finite Automata Timed Automata Linear Automata Linear Hybrid Systems Nonlinear Hybrid Systems COSPAN SMV VIS Timed COSPAN KRONOS Timed HSIS VERITI UPPAAL HyTech Requiem Post 23 (x1) Post 2r (F) Post [0,2r] (F) Post 2r (x2) d/dt CheckMate Post r (x1) Post r (F) x1 Post [0,r] (F) Post r (x2) F x2 16

17 Simulation Computational Tools Ptolemy II: ptolemy.eecs.berkeley.edu Modelica: SHIFT: Dymola: OmSim: ABACUSS: yoric.mit.edu/abacuss/abacuss.html Stateflow: CHARON: Masaccio: 17

18 Computational Tools Simulation Masaccio CHARON Ptolemy II StateFlow/Simulink Dymola Modelica System Complexity ABACUSS OmSim SHIFT Models of Computation 18

19 Hybrid Modeling of Sensor Networks HyTech Verifies functional and temporal properties of linear hybrid automata Based on Model Checking and providing debugging traces Hybrid Automaton with flows which are linear in time SHIFT Models and simulates dynamic networks of hybrid automata Components created, interconnected, destroyed as the system evolves Components interact through their inputs, outputs and exported events 19

20 Hybrid Modeling of Sensor Networks HyTech Example start of an execution of the timed automaton 20

21 Hybrid Modeling of Sensor Networks HyTech Reachability Problem: Starting from somewhere in an initial set, would the set of states eventually reach somewhere in the target set? 21

22 Hybrid Modeling of Sensor Networks HyTech Equivalent Classes 12x2 30x2 18x2 Every point in an equivalent class has the same reachability property. 22

23 Hybrid Modeling of Sensor Networks HyTech Equivalent Classes 12x2 30x2 18x2 Idea: The reachability problem for timed automaton (Transition System) can be answered on a FSM (Quotient Transition System) which is defined on the quotient space of the bisimulation. 23

24 Bisimulation-based Abstraction Transition System To study the reachability properties of time automata, each timed automaton is converted into a transition system. Both initial and final sets are union of equivalence classes Consider the equivalence relation, we have the following definitions: 24

25 Bisimulation-based Abstraction Transition System 25

26 Bisimulation-based Abstraction Consider the transition system and the equivalence relation, we have the following result: Therefore, one can define the reachability preserving quotient system of the transition system 26

27 Bisimulation-based Abstraction Transition System and its Quotient System 27

28 Overall View of TinyOS Automata application sensing application packet Radio Packet byte bit Radio byte RFM Task handler Packet generation 28

29 Packet Generation and Application Automata! " #! $ #! " #! #! " #! " #! $ # " # "! " #! " #! " # % &! " # " &! " # 29

30 Radio Byte From TinyOS to Hytech rfm_rx_comp RFM Bit rfm_rx_ev rfm_clock Energy spent by the transceiver RFM! " #! $ " ' ( ) " Packet Gen.! " #! $ " & " & 30

31 ! #! " op-exec From TinyOS to HyTech Energy spent by processing events exec " " "! #! " * + Energy spent by posting tasks! $ #! " idle! $ #! " " " " " " ", " op-wait op + Energy spent by processing tasks 31

32 Verification of TinyOS with HyTech Packet Level Byte Level RFM Bit Level 32

33 Verification of TinyOS with HyTech Analysis commands for verification: init_reg :=..; final_reg := loc[rpacket]=transmit & loc[rbyte]=receive; reached := reach forward from init_reg endreach; if empty(reached & final_reg) then prints working fine else print trace to final_reg using reached; endif; 33

34 Power Analysis of TinyOS with HyTech Power analysis through variable energy by using trace generation feature of HyTech by setting final_reg = t>300000; Power Consumption vs. # of Children power 34

35 Power Analysis of TinyOS with HyTech As the number of children increases, time to wait before transmitting increases due to backoff number of packets to be forwarded increases -. 35

36 Hybrid Modeling of a Sensor Network Uniform Distribution 100 node 100m x 100m 4 Macro Clusters Children determined according to position distribution 36

37 Hybrid Modeling of a Sensor Network 4 Types of Node Automata. Create an instance for each node. Destroy the instance when the node dies. Distribute the load to its group. Notify upper group when there is a death. 37

38 Hybrid Modeling of a Sensor Network SHIFT - Describes dynamic networks of hybrid automata Components created, interconnected, destroyed as the system evolves Components interact through their inputs, outputs and exported events 38

39 Model of a node x Consumed energy f Power consumption S Group of nodes 39

40 Validation Results Need powerful nodes in group 1. Group 1 suffers from high load and backoff time. Group 4 dies at the same time. 40

41 Conclusion Sensor nodes are aimed to be left without maintenance. Verification is needed for reliability. Power is a detrimental concern in sensor world. Power analysis is needed for the life time of the node. Network power analysis is needed for the life time of the network. Modeling and Analysis are based on Hybrid Automata Verification and Power analysis with HyTech. Network power analysis with SHIFT. 41

42 End 42