SAE Architecture Analysis and Design Language (AADL) Annex Volume 1: Annex A: ARINC653 Annex, Annex C: Code Generation Annex, Annex E: Error Model Annex

  • 2015-09-03
  • SAE International

This document contains three annexes to the SAE AS5506B Standard - the SAE Architecture Analysis and Description Language. The first annex, the Error-Model Language extends the AADL core language with a state machine-based notation. This notation allows for specification of different types of faults, fault behavior of individual system components, fault propagation affecting related components in terms of peer to peer interactions and deployment relationship between software components and their execution platform, aggregation of fault behavior and propagation in terms of the component hierarchy. The notation also allows for specification fault mitigation strategies expected to be implemented in the health monitoring and fault management component of the actual system – also known as Fault Detection, Isolation, and Recovery (FDIR). The actual design of this component is expressed in the AADL core model. The second annex, the ARINC653 Annex defines modeling patterns to use the AADL core language for the specification of Integrated Modular Avionics Architectures (IMA), as defined by the ARINC653 standard. It also introduces a dedicated property set to capture specific requirements of such architectures. The third annex, the Code Generation Annex, defines a mapping between the AADL core language and programming languages. It specifies, for each AADL component type, how to map it into executable code. As the AADL language targets safety-critical systems, the annex focuses on defining such a mapping for programming languages that are typically used to implement such systems. However, mapping rules and principles defined in this annex can be translated to other programming languages.


The purpose of the annexes in this document are: • The ARINC653 annex: provide modeling guidelines to specify avionics architectures, as the ones used by the ARINC653 standard. This annex replaces the existing ARINC653 AADL annex published in AS5506/2. • The Code Generation Annex: define a binding between the AADL notations and existing programming languages used to develop safety-critical systems (such as Ada and C). This is a new annex to the AADL standard. • The Error Model Annex: extend the core language in order to provide the ability to to specify error propagations and error behavior in the architecture. This annex replaces the existing Error-Model annex published in the first revision of AS5506/1. The other annexes from the existing AS5506/1 document (Graphical AADL Notation, AADL Meta-Model and Interchange Formats, Language Compliance and Application Program Interface) are deprecated and not updated in this new revision. The Architecture Analysis and Design Language (AADL) standard document AS5506B was prepared by the SAE AS-2C Architecture Description Language Subcommittee, Embedded Computing Systems Committee, Aerospace Avionics Systems Division and revised by SAE in September, 2012. The Annexes presented herein have also been developed under the auspices of the SAE AS-2C Subcommittee.

Standard Published Revision Status
AS5506/1A 2015-09-03 Latest Revised
2011-04-18 Historical Reaffirmed
SAE MOBILUS Subscriber? You may already have access.
Members save up to 18% off list price.
If you are currently using this technical report:
HTML for Linking to Page
Page URL

Related Items

Technical Paper / Journal Article