Qualkitdo Slvnv Tor

Embed Size (px)

Citation preview

  • 8/20/2019 Qualkitdo Slvnv Tor

    1/41

     

    DO Qualification Kit

    Simulink® Verification and Validation™ Tool Operational Requirements

    R2015b, September 2015

  • 8/20/2019 Qualkitdo Slvnv Tor

    2/41

     

    How to Contact MathWorks

    Latest news: www.mathworks.com 

    Sales and services: www.mathworks.com/sales_and_services 

    User community: www.mathworks.com/matlabcentral 

    Technical support: www.mathworks.com/support/contact_us 

    Phone: 508-647-7000 

    The MathWorks, Inc.3 Apple Hill Drive

     Natick, MA 01760-2098

     DO Qualification Kit: Simulink ® Verification and Validation™ Tool Operational Requirements

    © COPYRIGHT 2009 – 2015 by The MathWorks, Inc.

    The software described in this document is furnished under a license agreement. The software may be used or copied only under

    the terms of the license agreement. No part of this manual may be photocopied or reproduced in any form without prior writtenconsent from The MathWorks, Inc.

    FEDERAL ACQUISITION: This provision applies to all acquisitions of the Program and Documentation by, for, or through the

    federal government of the United States. By accepting delivery of the Program or Documentation, the government hereby agrees

    that this software or documentation qualifies as commercial computer software or commercial computer software documentationas such terms are used or defined in FAR 12.212, DFARS Part 227.72, and DFARS 252.227-7014. Accordingly, the terms and

    conditions of this Agreement and only those rights specified in this Agreement, shall pertain to and govern the use, modification,reproduction, release, performance, display, and disclosure of the Program and Documentation by the federal government (or

    other entity acquiring for or through the federal government)and shall supersede any conflicting contractual terms or conditi ons.

    If this License fails to meet the government’s needs or is inconsistent in any respect with federal procurement law, thegovernment agrees to return the Program and Documentation, unused, to The MathWorks, Inc.

    Trademarks 

    MATLAB and Simulink are registered trademarks of The MathWorks, Inc. See www.mathworks.com/trademarks f or a

    list of additional trademarks. Other product or brand names may be trademarks or registered trademarks of their respectiveholders.

    Patents

    MathWorks products are protected by one or more U.S. patents. Please see www.mathworks.com/patents f or moreinformation.

    http://www.mathworks.com/http://www.mathworks.com/http://www.mathworks.com/sales_and_serviceshttp://www.mathworks.com/sales_and_serviceshttp://www.mathworks.com/matlabcentral/http://www.mathworks.com/matlabcentral/http://www.mathworks.com/support/contact_us/http://www.mathworks.com/support/contact_us/http://www.mathworks.com/trademarkshttp://www.mathworks.com/trademarkshttp://www.mathworks.com/trademarkshttp://www.mathworks.com/patentshttp://www.mathworks.com/patentshttp://www.mathworks.com/patentshttp://www.mathworks.com/patentshttp://www.mathworks.com/trademarkshttp://www.mathworks.com/support/contact_us/http://www.mathworks.com/matlabcentral/http://www.mathworks.com/sales_and_serviceshttp://www.mathworks.com/

  • 8/20/2019 Qualkitdo Slvnv Tor

    3/41

     

    Revision History

    March 2009 New for Version 1.0 (Applies to Release 2009a)

    September 2009 Revised for Version 1.1 (Applies to Release 2009b)April 2010 Rereleased for Version 1.1.1 (Applies to Release 2009bSP1)

    March 2010 Revised for Version 1.2 (Applies to Release 2010a)

    September 2010 Revised for Version 1.3 (Applies to Release 2010b)April 2011 Revised for Version 1.4 (Applies to Release 2011a)

    September 2011 Revised for Version 1.5 (Applies to Release 2011b)

    March 2012 Revised for Version 1.6 (Applies to Release 2012a)September 2012 Revised for Version 2.0 (Applies to Release 2012b)

    March 2013 Revised for Version 2.1 (Applies to Release 2013a)

    September 2013 Revised for Version 2.2 (Applies to Release 2013b)

    March 2014 Revised for Version 2.3 (Applies to Release 2014a)

    October 2014 Revised for Version 2.4 (Applies to Release 2014b)March 2015 Revised for Version 2.5 (Applies to Release 2015a)September 2015 Revised for DO Qualification Kit Version 3.0 (Applies to Release 2015b)

  • 8/20/2019 Qualkitdo Slvnv Tor

    4/41

     

  • 8/20/2019 Qualkitdo Slvnv Tor

    5/41

     

    v

    Contents

    Introduction ...................................................................................................................................... 1-1 

    1.1  Simulink Verification and Validation Product Description ..................................................... 1-2 

    2  Operational Requirements ................................................................................................................ 2-1 

    2.1  DO-178C/DO-331 Checks Operational Requirements ........................................................... 2-2 

    2.2  DO-178C/DO-331 Checks and Model Advisor User Information ........................................ 2-19 2.3  Model Coverage Operational Requirements ......................................................................... 2-20 

    2.4  Model Coverage User Information ........................................................................................ 2-30 

    3  Installation ........................................................................................................................................ 3-1 

    Operational Environment ................................................................................................................. 4-1 

  • 8/20/2019 Qualkitdo Slvnv Tor

    6/41

     

    vi

  • 8/20/2019 Qualkitdo Slvnv Tor

    7/41

    1 Introduction

    This document comprises the Tool Operational Requirements (reference DO-330 Section

    10.3.1) for the following capabilities of the Simulink ® Verification and Validation™ verification product:

      DO-178C/DO-331 checks  Model coverage

    The document identifies:

      Features of the Simulink Verification and Validation product. 

      The environment in which the Simulink Verification and Validation product is installed(reference DO-330, Sections 10.2.4 and 10.3.2). 

    This document is intended for use in the DO-330 tool qualification process for TQL-5 tools. The

    applicant needs to:

      Review the Tool Operational Requirements for applicability in the project or programunder consideration.

      Configure the Tool Operational Requirements in the project or program’s configurationmanagement system.

      Complete the Tool Operational Requirements and make the document available for review.

    See documentation for the following products at the MathWorks® Documentation Center,

    R2015b: 

      DO Qualification Kit (for DO-178) 

      Simulink Verification and Validation

      Simulink ® 

      Stateflow® 

    http://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.html

  • 8/20/2019 Qualkitdo Slvnv Tor

    8/41

     

    1-2

    1.1 Simulink Verification and Validation ProductDescriptionVerify models and generated code

    Simulink  Verification and Validation automates requirements tracing, modeling standards

    compliance checking, and model coverage analysis.

    You can create detailed requirements traceability reports, author your own modeling stylechecks, and develop check configurations to share with engineering teams. Requirementsdocumentation can be linked to models, test cases, and generated code. You can generate

    harness models for testing model components and code, and use model coverage analysis toensure that models have been thoroughly tested.

    Simulink Verification and Validation provides modeling standards checks for the DO-178, ISO

    26262, IEC 61508 and related industry standards.

    Key Features 

      Compliance checking for MAAB style guidelines and high-integrity system design

    guidelines (DO-178, ISO 26262, IEC-61508, and related industry standards)  Model Advisor Configuration Editor, including custom check authoring

      Requirements Management Interface for traceability of model objects, code, and tests torequirements documents

      Automatic test-harness generation for subsystems

      Component testing via simulation, software-in-the-loop (SIL), and processor-in-the-loop(PIL)

      Programmable scripting interface for automating compliance checking, requirements

    traceability analysis, and component testing

  • 8/20/2019 Qualkitdo Slvnv Tor

    9/41

    2 Operational Requirements

  • 8/20/2019 Qualkitdo Slvnv Tor

    10/41

     

    2-2

    2.1 DO-178C/DO-331 Checks OperationalRequirementsThe Simulink Verification and Validation product includes the Model Advisor

    DO-178C/DO-331 modeling standards checks, which help you define and implement consistentdesign guidelines. These guidelines can be applied across projects and development teams. TheModel Advisor finds unwanted model properties, such as incorrect or deprecated blocks and

     block parameters, incorrect fonts, and misplaced objects.

    Types of checks include:

      Block parameter settings

      Model configuration parameter settings

      Code generator settings

      Production hardware parameter settings

      Simulink and Stateflow diagnostic parameter settings

      Model connections

      Compatibility of reference models, libraries and S-functions

      Model style considerations

      Requirement management interface consistency

    The purpose of this capability is to verify that Simulink and Stateflow models comply with

    modeling standards, and to verify that the code generator settings are set properly to provide

    traceable code that complies with standards.

    You can find the DO-178C/DO-331 checks in the Model Advisor > By Product > SimulinkVerification and Validation > Modeling Standards > DO-178C/DO-331 Checks subfolder.

  • 8/20/2019 Qualkitdo Slvnv Tor

    11/41

     

    2-3

    The following table lists the Simulink Verification and Validation DO-178C/DO-331 checks

    that are provided with the DO Qualification Kit, along with the corresponding DO-331 section

    to which each check applies. The user is responsible for ensuring that the tool features they rely

    on to eliminate, reduce or automate the process are sufficiently covered by Tool OperationalRequirements (reference DO-300 Section 6.2.1.aa).

    Note  The DO-178C/DO-331 checks can contain two sections: an analysis sectionfor reviewing the model and an action section for automatically fixing warningsand failures. The DO Qualification Kit covers the DO-178C/DO-331 checkanalysis, not the check actions.

    The DO Qualification Kit does not cover Model Advisor check exclusions.

    DO-178C/DO-331 Checks— Operational Requirements Summary

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related optimization

    settings

    mathworks.do178.OptionSet

    DO178C_01 Simulink Verification and

    Validation shall verify that themodel optimization

    configuration parameterscomply with the  Modeling

    Guidelines for High-Integrity

    Systems, R2015b. 

    For details, refer to “Check

    safety-related optimizationsettings” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information. 

    MB.6.3.1.e High-level

    requirements conform tostandards

    MB.6.3.2.e Low-level

    requirements conform tostandards

    MB.6.3.1.g Algorithms areaccurate

    MB.6.3.2.g Algorithms are

    accurate

    MB.6.3.3.b Software

    architecture is consistent

    MB.6.3.4.e Source code is

    traceable to low-levelrequirements

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    12/41

     

    2-4

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnosticsettings for solvers

    mathworks.do178.SolverDiagnost

    icsSet

    DO178C_02 Simulink Verification andValidation shall verify that themodel diagnostic configuration parameters pertaining to solvers

    comply with the  ModelingGuidelines for High-Integrity

    Systems, R2015b. 

    For details, refer to “Checksafety-related diagnostic settings

    for solvers” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information. 

    MB.6.3.3.b Softwarearchitecture is consistent

    MB.6.3.3.e Softwarearchitecture conforms tostandards

    Check safety-related diagnostic

    settings for sample time

    mathworks.do178.SampleTimeDiagnosticsSet

    DO178C_03 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to sampletime comply with the  ModelingGuidelines for High-Integrity

    Systems, R2015b. 

    For details, see “Check safety-

    related diagnostic settings for

    sample time” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.3.b Software

    architecture is consistent

    MB.6.3.3.e Softwarearchitecture conforms tostandards

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    13/41

     

    2-5

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnosticsettings for signal data

    mathworks.do178.DataValiditySi

    gnalsDiagnosticsSet

    DO178C_04 Simulink Verification andValidation shall verify that themodel diagnostic configuration parameters pertaining to signal

    data comply with the  ModelingGuidelines for High-Integrity

    Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    signal data” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.1.e High-levelrequirements conform tostandards

    MB.6.3.2.e Low-levelrequirements conform to

    standards

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms are

    accurateMB.6.3.3.b Software

    architecture is consistent

    Check safety-related diagnostic

    settings for parameters

    mathworks.do178.DataValidityPar amDiagnosticsSet

    DO178C_05 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to

     parameters comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

     parameters” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms areaccurate

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    14/41

     

    2-6

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnostic

    settings for data used fordebugging

    mathworks.do178.DataValidityDebugDiagnosticsSet

    DO178C_06 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration parameters pertaining to

    debugging comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    data used for debugging” inSimulink Verification and

    Validation DO-178C/DO-331

    Checks and Model Advisor User

     Information.

    MB.6.3.1.e High-level

    requirements conform tostandards

    MB.6.3.2.e Low-levelrequirements conform to

    standards

    Check safety-related diagnostic

    settings for data store memory

    mathworks.do178.DataStoreMemoryDiagnosticsSet

    DO178C_07 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to data

    store memory comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    data store memory” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User Information.

    MB.6.3.3.b Software

    architecture is consistent

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    15/41

     

    2-7

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnostic

    settings for type conversions

    mathworks.do178.TypeConversio

    nDiagnosticsSet

    DO178C_08 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration parameters pertaining to type

    conversions comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    type conversions” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms areaccurate

    Check safety-related diagnostic

    settings for signal connectivity

    mathworks.do178.ConnectivitySignalsDiagnosticsSet

    DO178C_09 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to type

    conversions comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    signal connectivity” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User Information.

    MB.6.3.1.e High-level

    requirements conform tostandards

    MB.6.3.2.e Low-level

    requirements conform tostandards

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    16/41

     

    2-8

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnostic

    settings for bus connectivity

    mathworks.do178.ConnectivityB

    ussesDiagnosticsSet

    DO178C_10 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration parameters pertaining to bus

    connectivity comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

     bus connectivity” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.3.b Software

    architecture is consistent

    Check safety-related diagnostic

    settings that apply to function-callconnectivity

    mathworks.do178.FcnCallDiagnosticsSet

    DO178C_11 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to

    function-call connectivitycomply with the  ModelingGuidelines for High-Integrity

    Systems, R2015b.

    For details, see “Check safety-

    related diagnostic settings thatapply to function-callconnectivity” in Simulink

    Verification and Validation DO-178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.3.b Software

    architecture is consistent

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    17/41

     

    2-9

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnostic

    settings for compatibility

    mathworks.do178.Compatability

    DiagnosticsSet

    DO178C_12 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration parameters pertaining to

    compatibility comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    compatibility” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.3.b Software

    architecture is consistent

    Check safety-related diagnostic

    settings for model referencing

    mathworks.do178.MdlRefDiagnosticsSet

    DO178C_13 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to model

    referencing comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    model referencing” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User Information.

    MB.6.3.1.d High-level

    requirements are verifiable

    MB.6.3.2.d Low-levelrequirements are verifiable

    MB.6.3.3.b Softwarearchitecture is consistent

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    18/41

     

    2-10

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related model

    referencing settings

    mathworks.do178.MdlRefOptSet

    DO178C_14 Simulink Verification and

    Validation shall verify that themodel configuration parametersfor model referencing are set to

    generate code for a safety-related application.

    For details, see “Check safety-

    related model referencingsettings” in Simulink

    Verification and Validation DO-178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.1.b High-level

    requirements are accurate andconsistent

    MB.6.3.2.b Low-levelrequirements are accurate and

    consistent

    MB.6.3.3.b Software

    architecture is consistent

    Check safety-related code

    generation settings

    mathworks.do178.CodeSet

    DO178C_15 Simulink Verification and

    Validation shall verify that themodel configuration parametersfor code generation comply with

    the  Modeling Guidelines for

     High-Integrity Systems, R2015b.

    For details, see “Check safety-

    related code generation settings”in Simulink Verification andValidation DO-178C/DO-331

    Checks and Model Advisor User

     Information.

    MB.6.3.1.c High-level

    requirements are compatiblewith target computer

    MB.6.3.2.c Low-levelrequirements are compatible

    with target computer

    MB.6.3.1.e High-level

    requirements conform tostandards

    MB.6.3.2.e Low-level

    requirements conform to

    standards

    MB.6.3.4.e Source code istraceable to low-level

    requirements

    Display model version

    information

    mathworks.do178.MdlChecksum

    DO178C_16 Simulink Verification and

    Validation shall verify that the

    report displays model versioninformation.

    For details, see “Display model

    version information” in Simulink

    Verification and Validation DO-178C/DO-331 Checks and

     Model Advisor User

     Information.

     Not Applicable (for

    documentation only)

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    19/41

     

    2-11

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check safety-related diagnostic

    settings for saving

    mathworks.do178.SavingDiagnos

    ticsSet

    DO178C_17 Simulink Verification and

    Validation shall verify that themodel configuration parameterson the Diagnostics > Saving

     pane are set for a safety-relatedapplication.

    For details, see “Check safety-

    related diagnostic settings forsaving” in Simulink Verification

    and Validation DO-178C/DO-331 Checks and Model Advisor

    User Information.

    MB.6.3.3.b Software

    architecture is consistent

    Check for blocks that do not link

    to requirements

    mathworks.do178.RequirementIn

    fo

    DO178C_18 Simulink Verification and

    Validation shall verify that themodel blocks and objects link torequirements document.

    For details, see “Check for blocks that do not link torequirements” in Simulink

    Verification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.1.f High-level

    requirements trace to systemrequirements

    MB.6.3.2.f Low-level

    requirements trace to high-level requirements

    Check safety-related diagnostic

    settings for model initialization

    mathworks.do178.InitDiagnosticsSet

    DO178C_19 Simulink Verification and

    Validation shall verify that themodel diagnostic configuration

     parameters pertaining to

    initialization are set according tothe  Modeling Guidelines for High-Integrity Systems, R2015b.

    For details, see “Check safety-related diagnostic settings for

    model initialization” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and Model Advisor User

     Information.

    MB.6.3.3.b Software

    architecture is consistent

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    20/41

     

    2-12

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check state machine type of

    Stateflow charts

    mathworks.do178.hisf_0001

    DO178C_20 Simulink Verification and

    Validation shall verify that statemachine types comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check state

    machine type of Stateflowcharts” in Simulink Verificationand Validation DO-178C/DO-

    331 Checks and Model AdvisorUser Information.

    MB.6.3.1.b High-level

    requirements are accurate andconsistent

    MB.6.3.1.e High-levelrequirements conform to

    standards

    MB.6.3.2.b Low-level

    requirements are accurate andconsistent

    MB.6.3.2.e Low-levelrequirements conform tostandards

    MB.6.3.3.b Software

    architecture is consistent

    MB.6.3.3.e Software

    architecture conforms to

    standards

    Check Stateflow charts for

    ordering of states and transitions

    mathworks.do178.hisf_0002

    DO178C_21 Simulink Verification and

    Validation shall verify that chartstate/transition execution ordercomplies with the  ModelingGuidelines for High-Integrity

    Systems, R2015b.

    For details, see “Check

    Stateflow charts for ordering of

    states and transitions” in

    Simulink Verification andValidation DO-178C/DO-331

    Checks and Model Advisor User

     Information.

    MB.6.3.3.b Software

    architecture is consistentMB.6.3.3.e Software

    architecture conforms tostandards

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    21/41

     

    2-13

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check Stateflow debugging

    options

    mathworks.do178.hisf_0011

    DO178C_22 Simulink Verification and

    Validation shall verify that theStateflow debugging optionscomply with the  Modeling

    Guidelines for High-Integrity

    Systems, R2015b. 

    For details, see “Check

    Stateflow debugging options” inSimulink Verification and

    Validation DO-178C/DO-331Checks and Model Advisor User

     Information.

    MB.6.3.1.b High-level

    requirements are accurate andconsistent

    MB.6.3.1.e High-levelrequirements conform to

    standards

    MB.6.3.2.b Low-level

    requirements are accurate andconsistent

    MB.6.3.2.e Low-levelrequirements conform tostandards

    Check usage of lookup table

     blocks

    mathworks.do178.LUTRangeChe

    ckCode

    DO178C_23 Simulink Verification and

    Validation shall verify thatlookup table blocks areconfigured to generate out-of-range checking code.

    For details, see “Check usage oflookup table blocks” in Simulink

    Verification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms are

    accurate

    Check Stateflow charts for

    uniquely defined data objects

    mathworks.do178.hisl_0061

    DO178C_24 Simulink Verification and

    Validation shall verify thatStateflow charts using data

    objects comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “CheckStateflow charts for uniquelydefined data objects” inSimulink Verification and

    Validation DO-178C/DO-331

    Checks and Model Advisor User Information.

    MB.6.3.2.b Accuracy and

    Consistency of Low-LevelRequirement

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    22/41

     

    2-14

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check usage of Math Operations

     blocks

    mathworks.do178.MathOperation

    sBlocksUsage

    DO178C_25 Simulink Verification and

    Validation shall verify that mathoperations blocks comply withthe  Modeling Guidelines for

     High-Integrity Systems, R2015b.

    For details, see “Check usage of

    Math Operations blocks” inSimulink Verification and

    Validation DO-178C/DO-331

    Checks and Model Advisor User Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms areaccurate

    Check usage of Signal Routing

     blocks

    mathworks.do178.SignalRoutingBlockUsage

    DO178C_26 Simulink Verification and

    Validation shall verify that

    Signal Routing blocks complywith the  Modeling Guidelines for High-Integrity Systems, R2015b.

    For details, see “Check usage ofSignal Routing blocks” in

    Simulink Verification and

    Validation DO-178C/DO-331

    Checks and Model Advisor User

     Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms are

    accurate

    Check usage of Logic and Bit

    Operations blocks

    mathworks.do178.LogicBlockUsage

    DO178C_27 Simulink Verification and

    Validation shall verify thatLogic and Bit Operations blocks

    comply with the  ModelingGuidelines for High-Integrity

    Systems, R2015b.

    For details, see “Check usage ofLogic and Bit Operations blocks” in Simulink Verification

    and Validation DO-178C/DO-

    331 Checks and Model Advisor

    User Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms areaccurate

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    23/41

     

    2-15

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check usage of Ports and

    Subsystems blocks

    mathworks.do178.PortsSubsyste

    msUsage

    DO178C_28 Simulink Verification and

    Validation shall verify that Portsand Subsystems blocks complywith the  Modeling Guidelines

     for High-Integrity Systems, R2015b.

    For details, see “Check usage of

    Ports and Subsystems blocks” inSimulink Verification and

    Validation DO-178C/DO-331Checks and Model Advisor User

     Information.

    MB.6.3.1.e High-level

    requirements conform tostandards

    MB.6.3.2.e Low-levelrequirements conform to

    standards

    Check for inconsistent vector

    indexing methods

    mathworks.do178.hisl_0021

    DO178C_29 Simulink Verification and

    Validation shall verify that thevector indexing methods complywith the  Modeling Guidelines for High-Integrity Systems, 

    R2015b.

    For details, see “Check for

    inconsistent vector indexingmethods” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.2.b Accuracy and

    Consistency of Low-LevelRequirements

    Check for blocks not

    recommended for C/C++ production code deployment

    mathworks.do178.PCGSupport

    DO178C_30 Simulink Verification and

    Validation shall identify blocksnot supported by codegeneration or not recommendedfor C/C++ production code

    deployment.

    For details, see “Check for

     blocks not recommended forC/C++ production code

    deployment” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.2.b Accuracy and

    Consistency of Low-LevelRequirements

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    24/41

     

    2-16

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check for MATLAB Function

    interfaces with inherited properties

    mathworks.do178.himl_0002

    DO178C_31 Simulink Verification and

    Validation shall verify thatMATLAB Functions complywith the  Modeling Guidelines

     for High-Integrity Systems, R2015b.

    For details, see “Check for

    MATLAB Function interfaceswith inherited properties” in

    Simulink Verification andValidation DO-178C/DO-331

    Checks and Model Advisor User

     Information.

    MB.6.3.2.b Accuracy and

    Consistency of Low-LevelRequirements

    Check for MATLAB Function

    metrics

    mathworks.do178.himl_0003

    DO178C_32 Simulink Verification and

    Validation shall verify thatcomplexity and code metrics forMATLAB functions comply

    with the  Modeling Guidelines

     for High-Integrity Systems, R2015b.

    For details, see “Check forMATLAB Function metrics” inSimulink Verification and

    Validation DO-178C/DO-331

    Checks and Model Advisor User

     Information.

    MB.6.3.1.e High-level

    requirements conform tostandards

    MB.6.3.2.e Low-levelrequirements conform to

    standards

    http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    25/41

     

    2-17

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check MATLAB Code Analyzer

    messages

    mathworks.do178.himl_0004

    DO178C_33 Simulink Verification and

    Validation shall verify thatMATLAB Functions for

    %#codegen directive,MATLAB Code Analyzermessages, and justificationmessage IDs comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “CheckMATLAB Code Analyzer

    messages” in Simulink

    Verification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User

     Information.

    MB.6.3.1.g Algorithms are

    accurate

    MB.6.3.2.g Algorithms areaccurate

    Check MATLAB code for global

    variables

    mathworks.do178.himl_0005

    DO178C_34 Simulink Verification and

    Validation shall verify that

    global variables comply with the Modeling Guidelines for High-

     Integrity Systems, R2015b.

    For details, see “Check

    MATLAB code for globalvariables” in SimulinkVerification and Validation DO-

    178C/DO-331 Checks and

     Model Advisor User Information.

    MB.6.3.3.b Software

    architecture is consistent

    http://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf

  • 8/20/2019 Qualkitdo Slvnv Tor

    26/41

     

    2-18

    Check TitleCheck ID

    RequirementID

    Description DO-331 References

    Check for variant blocks with

    ‘Generate preprocessorconditionals’ active 

    mathworks.do178.VariantBlock

    DO178C_35 Simulink Verification and

    Validation shall verify thatvariant blocks are notconfigured to generate pre-

     processor conditionals.

    For details, see “Check for

    variant blocks with ‘Generate preprocessor conditionals’active” in Simulink Verification

    and Validation DO-178C/DO-331 Checks and Model Advisor

    User Information.

    MB.6.3.4.e Source code is

    traceable to low-levelrequirements

  • 8/20/2019 Qualkitdo Slvnv Tor

    27/41

     

    2-19

    2.2 DO-178C/DO-331 Checks and Model Advisor UserInformationThe Simulink ® Verification and Validation™ user information for the DO-178C/DO-331 checks

    is in the Simulink Verification and Validation DO-178C/DO-331 Checks and Model AdvisorUser Information.

    To access the user information document, on the MATLAB® command line, type qualkitdo to open the Artifacts Explorer. The document is in Simulink Verification and Validation.

  • 8/20/2019 Qualkitdo Slvnv Tor

    28/41

     

    2-20

    2.3 Model Coverage Operational RequirementsThe Simulink Verification and Validation product includes model coverage, which helps you

    assess the extent to which test cases exercise the pathways through a model. Model coverageworks for Simulink blocks, including the MATLAB Function block, and Stateflow charts.

    The following table lists the Simulink Verification and Validation model coverage capabilities

    supported by the DO Qualification Kit. Also listed are the corresponding DO-178C or DO-331

    (references that include MB prefix) section to which each capability applies. The user isresponsible for ensuring that the tool features they rely on to eliminate, reduce or automate the

     process are sufficiently covered by Tool Operational Requirements (reference DO-300 Section

    6.2.1.aa).

    Model Coverage— Operational Requirements Summary

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Cumulative Coverage MC_SL_CUMC Simulink Verification and

    Validation shall determine the

    accumulated coverage resultsof model coverage analysis.

    For details, see “Cumulative

    Coverage” in SimulinkVerification and Validation

     Model Coverage User

     Information.

    MB.6.3.1.d High-level requirements are

    verifiable

    MB.6.3.2.d Low-level requirements are

    verifiable

    MB.6.3.3.d Software architecture is

    verifiable

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-levelrequirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved

    Simulink Cyclomatic

    ComplexityMC_SL_CYC Simulink Verification and

    Validation shall determine thecyclomatic complexity of amodel.

    For details, see “Cyclomatic

    Complexity” in Simulink

    Verification and Validation Model Coverage User

     Information.

    MB.6.3.1.d High-level requirements are

    verifiable

    MB.6.3.1.e High-level requirements

    conform to standards

    MB.6.3.2.d Low-level requirements areverifiable

    MB.6.3.2.e Low-level requirements

    conform to standardsMB.6.3.3.d Software architecture isverifiable

    MB.6.3.3.e Software architecture

    conforms to standards

  • 8/20/2019 Qualkitdo Slvnv Tor

    29/41

     

    2-21

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Decision Coverage

    (DC)

    MC_SL_DC Simulink Verification and

    Validation shall determine theDC of a model.

    For details, see “DecisionCoverage (DC)” in Simulink

    Verification and Validation

     Model Coverage User

     Information.

    MB.6.3.1.d High-level requirements are

    verifiable

    Condition Coverage

    (CC)MC_SL_CC Simulink Verification and

    Validation shall determine theCC of a model.

    For details, see “Condition

    Coverage (CC)” in Simulink

    Verification and Validation

     Model Coverage User

     Information.

    Modified

    Condition/Decision

    Coverage (MC/DC)

    MC_SL_MCDC Simulink Verification and

    Validation shall determine the

    MC/DC of a model.

    For details, see “Modified

    Condition/Decision Coverage(MCDC)” in SimulinkVerification and Validation

     Model Coverage User Information.

    MB.6.3.2.d Low-level requirements are

    verifiable

    MB.6.3.3.d Software architecture is

    verifiable

    MB.6.3.2.a Low-level requirements

    comply with high-level requirements

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-levelrequirements is achieved

    6.4.4.1 Test coverage of low-level

    requirements is achieved

    Saturation on integer

    overflow coverageMC_SATINT Simulink Verification and

    Validation shall providesaturation on integer overflow

    coverage.

    For details, see “Saturation on

    integer overflow coverage” in

    Simulink Verification andValidation Model Coverage

    User Information.

  • 8/20/2019 Qualkitdo Slvnv Tor

    30/41

     

    2-22

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Lookup Table

    Coverage (LUT)

    MC_SL_LUT Simulink Verification and

    Validation shall provide LUTcoverage.

    For details, see “LookupTable Coverage” in Simulink

    Verification and Validation

     Model Coverage User

     Information.

    6.4.5 Test cases and procedures are

    correct6.4.4.1 Test coverage of high-levelrequirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved

    Signal Range

    Coverage

    MC_SL_SR Simulink Verification and

    Validation shall providesignal range coverage.

    For details, see “Signal Range

    Coverage” in SimulinkVerification and Validation

     Model Coverage User

     Information.

    Signal Size Coverage MC_SL_SS Simulink Verification and

    Validation shall provide

    signal size coverage.

    For details, see “Signal Size

    Coverage” in Simulink

    Verification and Validation

     Model Coverage User

     Information.Relational Boundary

    Coverage

    MC_SL_RELB

    OUND

    Simulink Verification and

    Validation shall providerelational boundary coverage.

    For details, see “RelationalBoundary Coverage” inSimulink Verification and

    Validation Model Coverage

    User Information.

    MB.6.3.2.d Low-level requirements are

    verifiable

    MB.6.3.3.d Software architecture is

    verifiable

    6.4.5 Test cases and procedures arecorrect

    6.4.4.1 Test coverage of high-levelrequirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved

  • 8/20/2019 Qualkitdo Slvnv Tor

    31/41

     

    2-23

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Abs block MC_SL_ABS Simulink Verification and

    Validation shall provide DC,saturate on integer overflow,and relational boundary

    coverage for the Abs block.*

    MB.6.3.1.d High-level requirements are

    verifiableMB.6.3.2.d Low-level requirements areverifiable

    MB.6.3.3.d Software architecture isverifiable

    MB.6.3.2.a Low-level requirements

    comply with high-level requirements

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-level

    requirements is achieved

    6.4.4.1 Test coverage of low-level

    requirements is achieved

    Combinatorial Logic

     block

    MC_SL_COMB

    LOGIC

    Simulink Verification and

    Validation shall provide DCand CC for the Combinatorial

    Logic block.*

    Dead Zone block MC_SL_DEAD Simulink Verification and

    Validation shall provide DC,saturate on integer overflow,

    and relational boundarycoverage for the Dead Zone block.*

    Direct Lookup Table

    (n-D) block

    MC_SL_DLUT

     ND

    Simulink Verification and

    Validation shall provide LUTcoverage for the DirectLookup Table (n-D) block.*

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-level

    requirements is achieved

    6.4.4.1 Test coverage of low-level

    requirements is achieved

    Discrete-Time

    Integrator blockMC_SL_DINT Simulink Verification and

    Validation shall provide DC

    and saturate on integeroverflow coverage for theDiscrete-Time Integrator

     block.*

    MB.6.3.1.d High-level requirements are

    verifiable

    MB.6.3.2.d Low-level requirements areverifiable

    MB.6.3.3.d Software architecture is

    verifiable

    MB.6.3.2.a Low-level requirementscomply with high-level requirements

    6.4.5 Test cases and procedures arecorrect

    6.4.4.1 Test coverage of high-levelrequirements is achieved

    Enabled and Triggered

    Subsystem block

    MC_SL_ENTR 

    G

    Simulink Verification and

    Validation shall provide DC,

    CC, and MCDC for the

    Enabled and Triggered

    Subsystem block.*

  • 8/20/2019 Qualkitdo Slvnv Tor

    32/41

     

    2-24

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Enabled Subsystem

     block

    MC_SL_ENAB Simulink Verification and

    Validation shall provide DC,CC, and MCDC for theEnabled Subsystem block.*

    6.4.4.1 Test coverage of low-level

    requirements is achieved

    Fcn block MC_SL_FCN Simulink Verification and

    Validation shall provide CC,MCDC, and relational

     boundary coverage for theFcn block.*

    For Iterator, For

    Iterator

    Subsystem blocks

    MC_SL_FOR Simulink Verification and

    Validation shall provide DCfor the For Iterator, ForIterator Subsystem blocks.*

    If, If Action

    Subsystem blocksMC_SL_IF Simulink Verification and

    Validation shall provide DC,CC, MCDC, and relational boundary coverage for the If,If Action Subsystem blocks.*

    Interpolation Using

    Prelookup block

    MC_SL_PREL

    UT

    Simulink Verification and

    Validation shall provide LUTand saturate on integer

    overflow coverage for theInterpolation Using Prelookup blocks.*

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-levelrequirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved

    Logical Operator

     block

    MC_SL_LOGI

    C

    Simulink Verification and

    Validation shall provide CCand MCDC coverage for the

    Logical Operator blocks.*

    MB.6.3.1.d High-level requirements are

    verifiable

    MB.6.3.2.d Low-level requirements are

    verifiableMB.6.3.3.d Software architecture isverifiable

    MB.6.3.2.a Low-level requirementscomply with high-level requirements

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-level

    requirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved

  • 8/20/2019 Qualkitdo Slvnv Tor

    33/41

     

    2-25

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    1-D Lookup Table

     block

    MC_SL_LUT1

    D

    Simulink Verification and

    Validation shall providelookup table and saturate oninteger overflow coverage for

    the 1-D Lookup Table block.*

    6.4.5 Test cases and procedures are

    correct6.4.4.1 Test coverage of high-levelrequirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved2-D Lookup Table

     block

    MC_SL_LUT2

    D

    Simulink Verification and

    Validation shall provide

    lookup table and saturate oninteger overflow coverage forthe 2-D Lookup Table block.*

    n-D Lookup Table block

    MC_SL_LUTND

    Simulink Verification andValidation shall providelookup table and saturate oninteger overflow coverage forthe n-D Lookup Table block.*

    MATLAB Function

     blockMC_SL_EML Simulink Verification and

    Validation shall provide DC,CC, MCDC, and relational

     boundary coverage for the

    MATLAB Function block.*

    MB.6.3.1.d High-level requirements are

    verifiable

    MB.6.3.2.d Low-level requirements areverifiable

    MB.6.3.3.d Software architecture isverifiable

    MB.6.3.2.a Low-level requirements

    comply with high-level requirements

    6.4.5 Test cases and procedures are

    correct

    6.4.4.1 Test coverage of high-level

    requirements is achieved

    6.4.4.1 Test coverage of low-levelrequirements is achieved

    MinMax block MC_SL_MINM

    AX

    Simulink Verification and

    Validation shall provide DCand saturate on integeroverflow coverage for theMinMax block.*

    Model block MC_SL_MDLR 

    EF

    Simulink Verification and

    Validation shall provide DC,CC, MCDC, LUT, Simulink

    Design Verifier, saturate oninteger overflow coverage,and relational boundarycoverage for the Model block.*

    Multiport Switch

     block

    MC_SL_MPSW

    ITCH

    Simulink Verification and

    Validation shall provide DC

    and saturate on integeroverflow coverage for the

    Multiport Switch block.*

    Rate Limiter block MC_SL_RATLI

    M

    Simulink Verification and

    Validation shall provide DC

    relational boundary coveragefor the Rate Limiter block.*

  • 8/20/2019 Qualkitdo Slvnv Tor

    34/41

     

    2-26

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Relational Operator

     block

    MC_SL_RELO

    P

    Simulink Verification and

    Validation shall providecondition and relational boundary coverage for the

    Relational Operator block.*

    Relay block MC_SL_RELA

    Y

    Simulink Verification and

    Validation shall provide DC

    and relational boundarycoverage for the Relay block.*

    Saturation block MC_SL_SATURATE

    Simulink Verification andValidation shall provide DCand relational boundarycoverage for the Saturation block.*

    Sqrt, Signed Sqrt,

    Reciprocal SqrtMC_SL_SQRT Simulink Verification and

    Validation shall providesaturate on integer overflow

    coverage for the Sqrt, Signed

    Sqrt, Reciprocal Sqrt blocks.*

    Switch block MC_SL_SWIT

    CH

    Simulink Verification and

    Validation shall provide DC,saturate on integer overflowcoverage, and relational boundary coverage for theSaturation block.*

    Switch Case, Switch

    Case Action

    Subsystem blocks

    MC_SL_CASE Simulink Verification and

    Validation shall provide DC

    for the Switch Case, SwitchCase Action Subsystem blocks.*

    Triggered Subsystem

     block

    MC_SL_TRIG

    GER

    Simulink Verification and

    Validation shall provide DC,CC, and MCDC for theTriggered Subsystem block.*

    While Iterator, While

    Iterator Subsystem blocks

    MC_SL_WHIL

    E

    Simulink Verification and

    Validation shall provide DCfor the While Iterator, WhileIterator Subsystem blocks.*

  • 8/20/2019 Qualkitdo Slvnv Tor

    35/41

     

    2-27

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Stateflow Cyclomatic

    Complexity

    MC_SF_CYC Simulink Verification and

    Validation shall determine thecyclomatic complexity ofStateflow objects.**

    Chart as triggered

    Simulink block

    MC_SF_TRIG

    GER

    Simulink Verification and

    Validation shall provide DCfor Charts used as a triggered

    Simulink block.**

    Chart with Exclusive

    OR Substates

    MC_SF_CHAR 

    TSUB

    Simulink Verification and

    Validation shall provide DC

    for Charts containingexclusive OR substates.**

    Superstate with

    Exclusive OR

    Substates

    MC_SF_SUPE

    RSUB

    Simulink Verification and

    Validation shall provide DC

    for Superstates containingexclusive OR substates.**

    State with On

    Event_Name Action

    Statement

    MC_SF_ONEV

    ENT

    Simulink Verification and

    Validation shall provide DC

    for States with ONEvent_Name ActionStatement.**

    Conditional transition

    decision

    MC_SF_TRAN

    DEC

    Simulink Verification and

    Validation shall provide DCfor conditional transitions.**

    Condition coverage of

    transition decision

    MC_SF_TRAN

    COND

    Simulink Verification and

    Validation shall provide CC

    for transition decisions.**

    MC/DC coverage oftransition decision

    MC_SF_TRANMCDC

    Simulink Verification andValidation shall provideMCDC for transitiondecisions.**

    Relational boundary

    coverage for Stateflow

    MC_SF_BOUN

    DCOV

    Simulink Verification and

    Validation shall provide boundary coverage forStateflow.**

  • 8/20/2019 Qualkitdo Slvnv Tor

    36/41

     

    2-28

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Truth Table conditions MC_SF_TTCO

     ND

    Simulink Verification and

    Validation shall provide CCfor Truth Tables.

    For details, see “ModelCoverage for Stateflow Truth

    Tables” in SimulinkVerification and Validation

     Model Coverage User

     Information.

    Truth Table decisions MC_SF_TTDEC

    Simulink Verification andValidation shall provide DCfor Truth Tables.

    For details, see “ModelCoverage for Stateflow TruthTables” in Simulink

    Verification and Validation

     Model Coverage User

     Information.

    Truth Table MC/DC MC_SF_TTMC

    DC

    Simulink Verification and

    Validation shall provideMCDC for Truth Tables.

    For details, see “ModelCoverage for Stateflow TruthTables” in Simulink

    Verification and Validation

     Model Coverage User Information.

  • 8/20/2019 Qualkitdo Slvnv Tor

    37/41

     

    2-29

    Model CoverageCapability

    RequirementID

    Description DO-178C/DO-331 References

    Simulink Design

    Verifier Coverage

    MC_SLDV_SL

    DV

    Simulink Verification and

    Validation shall provideSimulink Design VerifierCoverage.

    For details, see “Simulink

    Design Verifier Coverage” inSimulink Verification and

    Validation Model Coverage

    User Information.

    6.4.5 Test cases and procedures are

    correct

    Proof Assumption block

    MC_SLDV_PR OOFASM

    Simulink Verification andValidation shall provideSimulink Design Verifiercoverage for the Proof

    Assumption block.*

    Proof Objective block MC_SLDV_PR 

    OOFOBJ

    Simulink Verification and

    Validation shall provide

    Simulink Design Verifiercoverage for the Proof

    Objective block.*

    Test Condition block MC_SLDV_TE

    STCON

    Simulink Verification and

    Validation shall provideSimulink Design Verifiercoverage for the TestCondition block.

    Test Objective block MC_SLDV_TE

    STOBJ

    Simulink Verification and

    Validation shall provide

    Simulink Design Verifier

    coverage for the TestObjective block.*

    * See “Model Objects That Receive Coverage” in Simulink Verification and Validation Model Coverage User Information.

    ** See “Model Coverage for Stateflow Charts” in Simulink Verification and Validation Model Coverage User

     Information.

     

  • 8/20/2019 Qualkitdo Slvnv Tor

    38/41

    2-30

    2.4 Model Coverage User InformationThe Simulink ® Verification and Validation™ user information for the model coverage is in the

    Simulink Verification and Validation Model Coverage User Information.

    To access the user information document, on the MATLAB® command line, type qualkitdo to open the Artifacts Explorer. The document is in Simulink Verification and Validation.

  • 8/20/2019 Qualkitdo Slvnv Tor

    39/41

    3 Installation

    To use the Simulink ® Verification and Validation™  product, install the following MathWorks® 

     products:

      MATLAB® 

      Simulink ® 

      Simulink Verification and Validation 

    Instructions for installing the products are available at the MathWorks Documentation Center,R2015b: 

    Installation 

     

    http://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.html

  • 8/20/2019 Qualkitdo Slvnv Tor

    40/41

    3-2

  • 8/20/2019 Qualkitdo Slvnv Tor

    41/41

    4 Operational Environment

    The DO Qualification Kit product supports the following operating environments for the

    Simulink ® Verification and Validation™  product:

      Personal computer  

      One of the following operating systems: 

    -  Microsoft® Windows® -  Linux®1 

      MATLAB® Software 

      Simulink ® Software 

      Simulink Verification and Validation software 

    1 Linux® is a registered trademark of Linus Torvalds.