Execution Environment for Mixed-Criticality Train Applications Based on an Integrated Architecture

In the avionic domain, the development trend has moved from federated to integrated architectures, which is called Integrated Modular Avionics (IMA). The ARINC 653 standard defines the execution environment for hosting several avionic software functions within a single computing module using strict temporal and spatial partitioning. ARINC 653 was successfully implemented (e.g., Airbus A380) and achieved its primary goals (cost and weight reduction, enabling modular certification, etc.). However, in the railway domain, an execution environment which enables integration of mixed-criticality Train Control and Monitoring System (TCMS) applications on an integrated architecture is an open research problem. Specific requirements of the railway domain (e.g., inauguration) are not covered by IMA due to the specific relevance in railway systems. In this paper, we will analyze the State-of-the-Art (SOTA) of control and monitoring systems in avionic and railway industries and identify the major gaps between these technologies. Based on the analysis, we will put forward our execution environment concept for an integrated architecture in TCMS.