Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
www.mathworks.com
www.mathworks.com/sales_and_services
User community:
www.mathworks.com/matlabcentral
Technical support:
www.mathworks.com/support/contact_us
Phone:
508-647-7000
Revision History
March 2009
September 2009
April 2010
March 2010
September 2010
April 2011
September 2011
March 2012
September 2012
March 2013
September 2013
March 2014
October 2014
March 2015
September 2015
Contents
1 Introduction ...................................................................................................................................... 1-1
1.1 Simulink Verification and Validation Product Description ..................................................... 1-2
2 Operational Requirements ................................................................................................................ 2-1
2.1 DO-178C/DO-331 Checks Operational Requirements ........................................................... 2-2
2.2 DO-178C/DO-331 Checks and Model Advisor User Information ........................................ 2-19
2.3 Model Coverage Operational Requirements ......................................................................... 2-20
2.4 Model Coverage User Information ........................................................................................ 2-30
3 Installation ........................................................................................................................................ 3-1
4 Operational Environment ................................................................................................................. 4-1
vi
1 Introduction
This document comprises the Tool Operational Requirements (reference DO-330 Section
10.3.1) for the following capabilities of the Simulink Verification and Validation verification
product:
DO-178C/DO-331 checks
Model coverage
This document is intended for use in the DO-330 tool qualification process for TQL-5 tools. The
applicant needs to:
Review the Tool Operational Requirements for applicability in the project or program
under consideration.
Configure the Tool Operational Requirements in the project or programs configuration
management system.
Complete the Tool Operational Requirements and make the document available for review.
See documentation for the following products at the MathWorks Documentation Center,
R2015b:
Compliance checking for MAAB style guidelines and high-integrity system design
guidelines (DO-178, ISO 26262, IEC-61508, and related industry standards)
Model Advisor Configuration Editor, including custom check authoring
Requirements Management Interface for traceability of model objects, code, and tests to
requirements documents
Automatic test-harness generation for subsystems
Component testing via simulation, software-in-the-loop (SIL), and processor-in-the-loop
(PIL)
Programmable scripting interface for automating compliance checking, requirements
traceability analysis, and component testing
1-2
2 Operational Requirements
The purpose of this capability is to verify that Simulink and Stateflow models comply with
modeling standards, and to verify that the code generator settings are set properly to provide
traceable code that complies with standards.
You can find the DO-178C/DO-331 checks in the Model Advisor > By Product > Simulink
Verification and Validation > Modeling Standards > DO-178C/DO-331 Checks subfolder.
2-2
The following table lists the Simulink Verification and Validation DO-178C/DO-331 checks
that are provided with the DO Qualification Kit, along with the corresponding DO-331 section
to which each check applies. The user is responsible for ensuring that the tool features they rely
on to eliminate, reduce or automate the process are sufficiently covered by Tool Operational
Requirements (reference DO-300 Section 6.2.1.aa).
Note The DO-178C/DO-331 checks can contain two sections: an analysis section
for reviewing the model and an action section for automatically fixing warnings
and failures. The DO Qualification Kit covers the DO-178C/DO-331 check
analysis, not the check actions.
The DO Qualification Kit does not cover Model Advisor check exclusions.
Requirement Description
ID
DO-331 References
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.e Low-level
requirements conform to
standards
MB.6.3.1.g Algorithms are
accurate
For details, refer to Check
MB.6.3.2.g Algorithms are
safety-related optimization
accurate
settings in Simulink
MB.6.3.3.b Software
Verification and Validation DO- architecture is consistent
178C/DO-331 Checks and
MB.6.3.4.e Source code is
Model Advisor User
traceable to low-level
Information.
requirements
2-3
Check Title
Check ID
Requirement Description
ID
DO178C_02
mathworks.do178.SolverDiagnost
icsSet
DO-331 References
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.e Software
architecture conforms to
standards
DO178C_03
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.e Software
architecture conforms to
standards
2-4
Check Title
Check ID
Requirement Description
ID
DO178C_04
DO178C_05
mathworks.do178.DataValiditySi
gnalsDiagnosticsSet
DO-331 References
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.e Low-level
requirements conform to
standards
MB.6.3.1.g Algorithms are
accurate
For details, see Check safety- MB.6.3.2.g Algorithms are
related diagnostic settings for
accurate
signal data in Simulink
MB.6.3.3.b Software
Verification and Validation DO- architecture is consistent
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
2-5
Check Title
Check ID
Requirement Description
ID
DO178C_06
mathworks.do178.DataValidityD
ebugDiagnosticsSet
DO-331 References
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.e Low-level
requirements conform to
standards
DO178C_07
MB.6.3.3.b Software
architecture is consistent
2-6
Check Title
Check ID
Requirement Description
ID
DO178C_08
mathworks.do178.TypeConversio
nDiagnosticsSet
DO-331 References
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
DO178C_09
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.e Low-level
requirements conform to
standards
2-7
Check Title
Check ID
Requirement Description
ID
DO178C_10
mathworks.do178.ConnectivityB
ussesDiagnosticsSet
DO-331 References
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.b Software
architecture is consistent
2-8
Check Title
Check ID
Requirement Description
ID
DO178C_12
mathworks.do178.Compatability
DiagnosticsSet
DO-331 References
MB.6.3.3.b Software
architecture is consistent
DO178C_13
MB.6.3.1.d High-level
requirements are verifiable
MB.6.3.2.d Low-level
requirements are verifiable
MB.6.3.3.b Software
architecture is consistent
2-9
Check Title
Check ID
Requirement Description
ID
DO178C_14
mathworks.do178.MdlRefOptSet
DO178C_15
DO178C_16
mathworks.do178.CodeSet
DO-331 References
MB.6.3.1.b High-level
requirements are accurate and
consistent
MB.6.3.2.b Low-level
requirements are accurate and
consistent
MB.6.3.3.b Software
architecture is consistent
MB.6.3.1.c High-level
requirements are compatible
with target computer
MB.6.3.2.c Low-level
requirements are compatible
with target computer
MB.6.3.1.e High-level
For details, see Check safety- requirements conform to
related code generation settings standards
in Simulink Verification and
MB.6.3.2.e Low-level
Validation DO-178C/DO-331
requirements conform to
Checks and Model Advisor User standards
Information.
MB.6.3.4.e Source code is
traceable to low-level
requirements
Not Applicable (for
documentation only)
2-10
Check Title
Check ID
Requirement Description
ID
DO178C_17
mathworks.do178.SavingDiagnos
ticsSet
DO-331 References
DO178C_19
MB.6.3.1.f High-level
requirements trace to system
requirements
MB.6.3.2.f Low-level
requirements trace to highlevel requirements
2-11
Check Title
Check ID
Requirement Description
ID
DO178C_20
mathworks.do178.hisf_0001
mathworks.do178.hisf_0002
DO-331 References
MB.6.3.1.b High-level
requirements are accurate and
consistent
MB.6.3.1.e High-level
requirements conform to
standards
For details, see Check state
MB.6.3.2.b Low-level
machine type of Stateflow
requirements are accurate and
charts in Simulink Verification consistent
and Validation DO-178C/DO- MB.6.3.2.e Low-level
331 Checks and Model Advisor requirements conform to
User Information.
standards
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.e Software
architecture conforms to
standards
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.e Software
architecture conforms to
standards
2-12
Check Title
Check ID
Requirement Description
ID
DO178C_22
DO178C_23
mathworks.do178.hisf_0011
DO-331 References
MB.6.3.1.b High-level
requirements are accurate and
consistent
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.b Low-level
For details, see Check
requirements are accurate and
Stateflow debugging options in consistent
Simulink Verification and
MB.6.3.2.e Low-level
Validation DO-178C/DO-331
requirements conform to
Checks and Model Advisor User standards
Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
DO178C_24
2-13
Check Title
Check ID
Requirement Description
ID
DO-331 References
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
DO178C_26
mathworks.do178.SignalRouting
BlockUsage
DO178C_27
2-14
Check Title
Check ID
Requirement Description
ID
DO178C_28
mathworks.do178.PortsSubsyste
msUsage
DO-331 References
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.e Low-level
requirements conform to
standards
DO178C_29
mathworks.do178.hisl_0021
DO178C_30
2-15
Check Title
Check ID
Requirement Description
ID
DO178C_31
mathworks.do178.himl_0002
DO-331 References
MB.6.3.2.b Accuracy and
Consistency of Low-Level
Requirements
DO178C_32
MB.6.3.1.e High-level
requirements conform to
standards
MB.6.3.2.e Low-level
requirements conform to
standards
2-16
Check Title
Check ID
Requirement Description
ID
DO-331 References
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
2-17
Check Title
Check ID
Requirement Description
ID
DO178C_35
mathworks.do178.VariantBlock
DO-331 References
MB.6.3.4.e Source code is
traceable to low-level
requirements
2-18
2-19
Requirement Description
ID
DO-178C/DO-331 References
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.2.d Low-level requirements are
verifiable
MB.6.3.3.d Software architecture is
verifiable
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-level
requirements is achieved
6.4.4.1 Test coverage of low-level
requirements is achieved
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.1.e High-level requirements
conform to standards
MB.6.3.2.d Low-level requirements are
verifiable
MB.6.3.2.e Low-level requirements
conform to standards
MB.6.3.3.d Software architecture is
verifiable
MB.6.3.3.e Software architecture
conforms to standards
2-20
Model Coverage
Capability
Requirement Description
ID
Decision Coverage
(DC)
MC_SL_DC
DO-178C/DO-331 References
Condition Coverage
(CC)
MC_SL_CC
Modified
Condition/Decision
Coverage (MC/DC)
Saturation on integer
overflow coverage
2-21
Model Coverage
Capability
Requirement Description
ID
DO-178C/DO-331 References
Lookup Table
Coverage (LUT)
MC_SL_LUT
Signal Range
Coverage
MC_SL_SR
Relational Boundary
Coverage
2-22
Model Coverage
Capability
Requirement Description
ID
Abs block
MC_SL_ABS
Combinatorial Logic
block
DO-178C/DO-331 References
Discrete-Time
Integrator block
2-23
Model Coverage
Capability
Requirement Description
ID
DO-178C/DO-331 References
Enabled Subsystem
block
Fcn block
MC_SL_FCN
MC_SL_FOR
If, If Action
Subsystem blocks
MC_SL_IF
Interpolation Using
Prelookup block
Logical Operator
block
2-24
Model Coverage
Capability
Requirement Description
ID
DO-178C/DO-331 References
MATLAB Function
block
MC_SL_EML
MinMax block
Model block
Multiport Switch
block
2-25
Model Coverage
Capability
Requirement Description
ID
Relational Operator
block
Relay block
Saturation block
Switch block
DO-178C/DO-331 References
2-26
Model Coverage
Capability
Requirement Description
ID
Chart as triggered
Simulink block
MC_SF_TRIG
GER
Superstate with
Exclusive OR
Substates
State with On
Event_Name Action
Statement
DO-178C/DO-331 References
2-27
Model Coverage
Capability
Requirement Description
ID
DO-178C/DO-331 References
2-28
Model Coverage
Capability
Requirement Description
ID
DO-178C/DO-331 References
Simulink Design
Verifier Coverage
* See Model Objects That Receive Coverage in Simulink Verification and Validation Model Coverage User
Information.
** See Model Coverage for Stateflow Charts in Simulink Verification and Validation Model Coverage User
Information.
2-29
2-30
3 Installation
To use the Simulink Verification and Validation product, install the following MathWorks
products:
MATLAB
Simulink
Simulink Verification and Validation
Instructions for installing the products are available at the MathWorks Documentation Center,
R2015b:
Installation
3-2
4 Operational Environment
The DO Qualification Kit product supports the following operating environments for the
Simulink Verification and Validation product:
Personal computer
One of the following operating systems:
- Microsoft Windows
- Linux1
MATLAB Software
Simulink Software
Simulink Verification and Validation software