Unified software development approach for the safety-critical ITER maintenance devices

Liisa Aha, Hannu Saarinen, Juha Tiitinen, Ali Muhammad, Jouni Mattila, Mikko Siuko, Matti Vilenius, Jorma Järvenpää, Mike Irving, Carlo Damiani, Luigi Semeraro

    Research output: Contribution to journalArticleScientificpeer-review

    1 Citation (Scopus)

    Abstract

    The RH devices used for ITER divertor maintenance are movers or manipulators composed of electro-hydraulic and electrical actuators. Such devices are CMM, CTM and WHMAN to assist CMM and CTM. These devices execute complex and safety-critical operations while supporting ITER reactor elements weighting several tons. Despite the differences in the load capacity and functionality, the control system of these devices can be categorized as position servo control or force servo control. In this paper we propose the use of unified software development approach currently developed and demonstrated at the DTP2. This new approach takes into account the ITER RH requirements for all maintenance devices, not only the water-hydraulic maintenance devices. The need for extensive software verification and validation utilizing international standards for safety-critical systems is addressed. This applies both to control software architecture and user interface design. In principle, we propose that all ITER maintenance devices are developed and tested with the common software architecture and user interface. This makes it possible to reuse generic software modules that are well documented and tested, resulting decreased verification and validation period and development cost. Utilising this approach also improves reliability and safety of the maintenance operations.
    Original languageEnglish
    Pages (from-to)369 - 374
    Number of pages6
    JournalFusion Engineering and Design
    Volume84
    Issue number7 - 11
    DOIs
    Publication statusPublished - 2009
    MoE publication typeA1 Journal article-refereed
    Event25th Symposium on Fusion Technology, SOFT-25 - Rostock, Germany
    Duration: 15 Sep 200819 Sep 2008

    Fingerprint

    Software engineering
    Coordinate measuring machines
    Software architecture
    User interfaces
    Hydraulics
    Computer software reusability
    Manipulators
    Actuators
    Control systems
    Costs
    Water

    Keywords

    • Remote handling
    • DTP2
    • Software architecture
    • User interface design
    • Product lifecycle
    • Verification and validation

    Cite this

    Aha, Liisa ; Saarinen, Hannu ; Tiitinen, Juha ; Muhammad, Ali ; Mattila, Jouni ; Siuko, Mikko ; Vilenius, Matti ; Järvenpää, Jorma ; Irving, Mike ; Damiani, Carlo ; Semeraro, Luigi. / Unified software development approach for the safety-critical ITER maintenance devices. In: Fusion Engineering and Design. 2009 ; Vol. 84, No. 7 - 11. pp. 369 - 374.
    @article{c7740fc74f3c4866b12d4acd6c1e6b11,
    title = "Unified software development approach for the safety-critical ITER maintenance devices",
    abstract = "The RH devices used for ITER divertor maintenance are movers or manipulators composed of electro-hydraulic and electrical actuators. Such devices are CMM, CTM and WHMAN to assist CMM and CTM. These devices execute complex and safety-critical operations while supporting ITER reactor elements weighting several tons. Despite the differences in the load capacity and functionality, the control system of these devices can be categorized as position servo control or force servo control. In this paper we propose the use of unified software development approach currently developed and demonstrated at the DTP2. This new approach takes into account the ITER RH requirements for all maintenance devices, not only the water-hydraulic maintenance devices. The need for extensive software verification and validation utilizing international standards for safety-critical systems is addressed. This applies both to control software architecture and user interface design. In principle, we propose that all ITER maintenance devices are developed and tested with the common software architecture and user interface. This makes it possible to reuse generic software modules that are well documented and tested, resulting decreased verification and validation period and development cost. Utilising this approach also improves reliability and safety of the maintenance operations.",
    keywords = "Remote handling, DTP2, Software architecture, User interface design, Product lifecycle, Verification and validation",
    author = "Liisa Aha and Hannu Saarinen and Juha Tiitinen and Ali Muhammad and Jouni Mattila and Mikko Siuko and Matti Vilenius and Jorma J{\"a}rvenp{\"a}{\"a} and Mike Irving and Carlo Damiani and Luigi Semeraro",
    year = "2009",
    doi = "10.1016/j.fusengdes.2009.02.054",
    language = "English",
    volume = "84",
    pages = "369 -- 374",
    journal = "Fusion Engineering and Design",
    issn = "0920-3796",
    publisher = "Elsevier",
    number = "7 - 11",

    }

    Aha, L, Saarinen, H, Tiitinen, J, Muhammad, A, Mattila, J, Siuko, M, Vilenius, M, Järvenpää, J, Irving, M, Damiani, C & Semeraro, L 2009, 'Unified software development approach for the safety-critical ITER maintenance devices', Fusion Engineering and Design, vol. 84, no. 7 - 11, pp. 369 - 374. https://doi.org/10.1016/j.fusengdes.2009.02.054

    Unified software development approach for the safety-critical ITER maintenance devices. / Aha, Liisa; Saarinen, Hannu; Tiitinen, Juha; Muhammad, Ali; Mattila, Jouni; Siuko, Mikko; Vilenius, Matti; Järvenpää, Jorma; Irving, Mike; Damiani, Carlo; Semeraro, Luigi.

    In: Fusion Engineering and Design, Vol. 84, No. 7 - 11, 2009, p. 369 - 374.

    Research output: Contribution to journalArticleScientificpeer-review

    TY - JOUR

    T1 - Unified software development approach for the safety-critical ITER maintenance devices

    AU - Aha, Liisa

    AU - Saarinen, Hannu

    AU - Tiitinen, Juha

    AU - Muhammad, Ali

    AU - Mattila, Jouni

    AU - Siuko, Mikko

    AU - Vilenius, Matti

    AU - Järvenpää, Jorma

    AU - Irving, Mike

    AU - Damiani, Carlo

    AU - Semeraro, Luigi

    PY - 2009

    Y1 - 2009

    N2 - The RH devices used for ITER divertor maintenance are movers or manipulators composed of electro-hydraulic and electrical actuators. Such devices are CMM, CTM and WHMAN to assist CMM and CTM. These devices execute complex and safety-critical operations while supporting ITER reactor elements weighting several tons. Despite the differences in the load capacity and functionality, the control system of these devices can be categorized as position servo control or force servo control. In this paper we propose the use of unified software development approach currently developed and demonstrated at the DTP2. This new approach takes into account the ITER RH requirements for all maintenance devices, not only the water-hydraulic maintenance devices. The need for extensive software verification and validation utilizing international standards for safety-critical systems is addressed. This applies both to control software architecture and user interface design. In principle, we propose that all ITER maintenance devices are developed and tested with the common software architecture and user interface. This makes it possible to reuse generic software modules that are well documented and tested, resulting decreased verification and validation period and development cost. Utilising this approach also improves reliability and safety of the maintenance operations.

    AB - The RH devices used for ITER divertor maintenance are movers or manipulators composed of electro-hydraulic and electrical actuators. Such devices are CMM, CTM and WHMAN to assist CMM and CTM. These devices execute complex and safety-critical operations while supporting ITER reactor elements weighting several tons. Despite the differences in the load capacity and functionality, the control system of these devices can be categorized as position servo control or force servo control. In this paper we propose the use of unified software development approach currently developed and demonstrated at the DTP2. This new approach takes into account the ITER RH requirements for all maintenance devices, not only the water-hydraulic maintenance devices. The need for extensive software verification and validation utilizing international standards for safety-critical systems is addressed. This applies both to control software architecture and user interface design. In principle, we propose that all ITER maintenance devices are developed and tested with the common software architecture and user interface. This makes it possible to reuse generic software modules that are well documented and tested, resulting decreased verification and validation period and development cost. Utilising this approach also improves reliability and safety of the maintenance operations.

    KW - Remote handling

    KW - DTP2

    KW - Software architecture

    KW - User interface design

    KW - Product lifecycle

    KW - Verification and validation

    U2 - 10.1016/j.fusengdes.2009.02.054

    DO - 10.1016/j.fusengdes.2009.02.054

    M3 - Article

    VL - 84

    SP - 369

    EP - 374

    JO - Fusion Engineering and Design

    JF - Fusion Engineering and Design

    SN - 0920-3796

    IS - 7 - 11

    ER -