Akihito Iwai

Automotive Cloud Service Systems Based on Service-Oriented Architecture and Its Evaluation

This article reports our concept and experiences on ACSS (Automotive Cloud Service System) based on SOA (Service-Oriented Architecture) for the next-generation automotive software platform. Along with rapid deployment of cloud computing, we expect, automotive software is evolving to ACSS where vehicles are collaborating with outside cloud computing and a variety of social networks. We propose an ACSS based on SOA named DARWIN, and demonstrate the validity of DARWIN with case studies running on a prototype electric vehicle. This article contributes to reveal key aspects of new software architecture for the next generation automotive software of integrating software in a vehicle and cloud services out of vehicles seamlessly.

Aspect-Oriented Programming for Web Controller Layer

We propose a new domain-specific aspect-oriented programming (AOP) mechanism for Web application development. A variety of crosscutting concerns such as access control and performance tuning are found in typical Web applications, but it is not easy to concisely modularize the concerns as aspects in current AOP languages because they do not provide pointcut mechanisms for directly handling events in the Web controller layer. To deal with this problem, we propose a Web-specific AOP mechanism called AOWP and a PHP-based AOWP framework. Using this framework, a programmer can easily address Web-specific crosscutting concerns triggered by Web-specific events, including page requests, page transitions, and session management events.

RV-Android: Efficient Parametric Android Runtime Verification, a Brief Tutorial

RV-Android is a new freely available open source runtime library for monitoring formal safety properties on Android. RV-Android uses the commercial RV-Monitor technology as its core monitoring library generation technology, allowing for the verification of safety properties during execution and operating entirely in userspace with no kernel or operating system modifications required. RV-Android improves on previous Android monitoring work by replacing the JavaMOP framework with RV-Monitor, a more advanced monitoring library generation tool with core algorithmic improvements that greatly improve resource consumption, efficiency, and battery life considerations. We demonstrate the developer usage of RV-Android with the standard Android build process, using instrumentation mechanisms effective on both Android binaries and source code. Our method allows for both property development and advanced application testing through runtime verification. We showcase the user frontend of RV-Monitor, which is available for public demo use and requires no knowledge of RV concepts. We explore the extra expressiveness the MOP paradigm provides over simply writing properties as aspects through two sample security properties, and show an example of a real security violation mitigated by RV-Android on-device. Lastly, we propose RV as an extension to the next-generation Android permissions system debuting in Android M.

Incentive Based Multi-Objective Optimization in Electric Vehicle Navigation Including Battery Charging

Abstract This paper proposes a framework for a navigation system of electric vehicles (EVs) that minimizes the expectation of the energy consumption of the entire users while enhancing the Quality of Life (QoL), i.e., reducing the travel time and cost in our context, of individual users. To this end, we provide users optional flexibility of selecting a preferable route based on the individual travel time and cost among the multiple candidates indicated by the system, while use an incentive approach to make users select a route that requires as low energy consumption as possible. We show by numerical simulations on Chukyo Area in Japan that the proposed method is effective.

Trends in automotive embedded systems

Automotive embedded systems have developed from single controllers to networked embedded systems integrating an ever growing variety of distributed applications. New features for driving assistance, improved safety, motor and energy management, and infotainment lead to shorter innovation cycles for software architectures, network technologies, and hardware architectures. While, e.g., the new FlexRay bus standard has just been introduced, next generation Ethernet is already at the edge of introduction. The 4 talks in this session present OEM, 1st tier supplier and semiconductor vendor views from leading automotive companies and suppliers

Experiences with automotive service modeling

Existing component-based development in the automotive world is showing the strain, as systems grow ever larger and start to interact with systems in the world outside the vehicle. A service-oriented approach offers benefits of modularity and runtime configurability, but raises challenges of a suitable language and platform. We examine the applicability of BPEL to automotive services. From our preliminary results we suggest the need for Domain-Specific Modeling to better address the particular requirements of the automotive service domain.

AOWP: Web-Specific AOP Framework for PHP

Aspect-oriented programming (AOP) is a technique for modularizing crosscutting concerns (CCCs). A variety of CCCs can be found in typical Web applications. Most CCCs are scattered over Web-specific events such as page requests. AOWP, a PHP-based AOP framework, provides Web-specific aspect instantiations for dealing with session management and pointcut & advice mechanisms for capturing Web-specific events. CCCs in Web applications can be clearly modularized by introducing AOWP.

RV-ECU: Maximum Assurance In-Vehicle Safety Monitoring

The Runtime Verification ECU (RV-ECU) is a new development platform for checking and enforcing the safety of automotive bus communications and software systems. RV-ECU uses runtime verification, a formal analysis subfield geared at validating and verifying systems as they run, to ensure that all manufacturer and third-party safety specifications are complied with during the operation of the vehicle. By compiling formal safety properties into code using a certifying compiler, the RV-ECU executes only provably correct code that checks for safety violations as the system runs. RV-ECU can also recover from violations of these properties, either by itself in simple cases or together with safe message-sending libraries implementable on third-party control units on the bus. RV-ECU can be updated with new specifications after a vehicle is released, enhancing the safety of vehicles that have already been sold and deployed. Currently a prototype, RV-ECU is meant to eventually be deployed as global and local ECU safety monitors, ultimately responsible for the safety of the entire vehicle system. We describe its overall architecture and implementation, and demonstrate monitoring of safety specifications on the CAN bus. We use past automotive recalls as case studies to demonstrate the potential of updating the RV-ECU as a cost effective and practical alternative to software recalls, while requiring the development of rigorous, formal safety specifications easily sharable across manufacturers, OEMs, regulatory agencies and even car owners. INTRODUCTION Modern automobiles are highly computerized, with 70 to 100 complex and interconnected electronic control units responsible for the operation of automotive systems, and roughly 35 to 40 percent of the development cost of modern automobiles going towards software. In the next 10 years this number is expected to jump to between 50 and 80 percent, and even higher for hybrid vehicles. This will only be more true with the advent of autonomous vehicles [1, 2]. It is not surprising, then, that the automotive industry suffers from nearly every possible software fault and resulting error. Many related stories have recently been featured on the news, including cases where cars are hacked and remotely controlled, including brakes and the engine, completely ignoring driver input. In some cases prior physical access to the car was needed, in others the car was not even touched. Massive automobile recalls in the past few years have been due to software bugs, costing billions [3, 4, 5, 6, 7, 8, 9]. Moreover, almost 80 percent of car innovations currently come from computer software, which has therefore become the major contributor of value in cars [1]. As software becomes more and more integral to the function and economics of vehicles, the safety and security of car software has taken center stage. LIMITATIONS OF CURRENT APPROACHES Traditional software development quality processes rely on static analysis tools and techniques to improve the quality, security and reliability of their code. Static

Reusable aspect components for web applications

Reusability is important especially in Web application development because Web applications tend to be rapidly developed and frequently modified. There are several studies to improve the reusability by adapting modular techniques in software engineering. However, the reusability brought by previous studies is restricted to limited Web applications because the techniques are deeply depended on the specific framework or architecture. In this paper, we propose an approach of defining reusable components for multiple Web applications using a domain-specific aspect-oriented (AO) mechanism based on an abstraction model common to all Web applications. As a case study to confirm the effectiveness of the approach, we present four practical examples of reusable aspect components and apply them to two real-sized open source Web applications. The result of the case study shows the domain-specific AO mechanism is an effective platform to implement reusable functionalities common to many Web applications.

System simulation from operational data

System simulation is a valuable tool to unveil inefficiencies and to test new strategies when implementing and revising systems. Often, simulations are parameterized using offline data and heuristic knowledge. Operational data, i.e., data gained through experimentation and observation, can greatly improve the fidelity between the actual system and the simulation. In a traffic scenario, for example, different road conditions or vehicle types can impact the outcome of the simulation and have to be considered during the modeling stage. This paper proposes using machine learning techniques to generate high fidelity simulation models. A traffic simulation case study exemplifies this approach by generating a model for the SUMO traffic simulator from vehicular telemetry data.