臺灣博碩士論文加值系統

現今電腦控制系統(Computer-Control System)普遍應用在安全關鍵系統中，
這些控制系統在開發階段時都無法實際操作以確認系統運作正常。利用模擬可以
了解系統的運作，故提供有效的系統模擬測試環境為重要議題。操作員在電腦控
制系統中扮演著重要的角色，可操作處理系統的異常狀況，為系統的最後一道安
全防線。故電腦控制系統的模擬測試工具必須模擬操作員行為，以進行人機互動
的安全分析並強化操作員對異常故障之訓練。目前廣泛應用在嵌入式系統的建模
軟體 PtolemyII 功能強大，已經定義了不少類型的計算模組以方便各種系統的建
模。但 PtolemyII 尚未提供操作員相關的計算模組。
本論文擴充 Ptolemy II 以建置電腦控制系統人機互動過程的模擬分析環境以
安全注水系統為例，在 PtolemyII 中添加了操作員域(Operator Domain)，利用建模軟體 PtolemyII 完整地建立安全注水系統模型，以 2D 模擬系統行為，並且提供一套適合邏輯閘測試(Gate-Level Testing)的環境，提供邏輯閘層次錯誤插入測試，可提高測試效率。最後，利用劇情測試(Scenerio Testing)有效證明本工具可支援在人機互動的安全分析。

In recent years computer-control systems are increasingly used in safety-critical systems. However, operations in these control systems cannot be physically and thoroughly verified during the development stage. Therefore, it is important to develop an effective testing environment for these Computer-Controlled Systems. The operator in a Computer-Controlled System plays an important role; the operator can handle different abnormal situations and behaves as the last defense for the system.
Therefore, the simulator for a Computer-Controlled System should take the actions of the operator into consideration so that safety analysis in human-machine interaction can be performed. Moreover, the operators can be well-trained to handle different abnormal situations by using this testing simulator. Nowadays Ptolemy II is widely used in simulation and modeling of embedded systems. Ptolemy II is quite powerful with various types of defined computing models. However, Ptolemy II does not have the operator computing model.
This thesis extends Ptolemy II to construct a simulation and analysis environment for human-machine interaction process in a Computer-Controlled System. This research developed a testing environment by adding the operator domain to Ptolemy
II and demonstrated its use in a Safety Injection System case study with 2D animation.
Moreover, the gate-level testing for the computer control logic is also provided so that false injection at gate level can be performed so as to enhance testing effectiveness.
Finally, this research provides several normal and abnormal scenario test cases to prove that the constructed environment can effectively support safe analysis of human–computer interaction.

第 1 章 序論 1
1.1. 簡介 1
第 2 章 相關背景研究 2
2.1. 資料流結構特性 2
2.2. 可程式邏輯控制器 2
2.3. 現場可程式邏輯閘陣列器 4
2.4. 安全注水系統( SAFETY INJECTION SYSTEM) 6
2.5. PTOLEMYII PROJECT 9
2.5.1. 應用Ptolemy II實做模型的方法 9
2.5.2. 應用PtolemyII實做模型的範例 12
2.6. PTOLEMYII DOMAIN(域) 16
2.6.1. PtolemyII計算模型 16
2.6.2. PtolemyII演員的加入 18
2.7. 軟體工程的測試方法以及MC/DC測試準則 19
第 3 章 研究方法及實作個案 23
3.1. 步驟一 : 利用PTOLEMY II建置安全注水系統測試環境 25
3.1.1. 安全注水系統運作行為分析 27
3.1.2. PtolemyII域(Domain)的設計 30
3.2. 步驟二：製作二維動畫 59
3.3. 步驟二 : PTOLEMYII中加入操作員域(OPERATOR DOMAIN) 65
3.4 步驟三 : 個案分析結果 78
3.4.1. 劇情測試個案 78
3.4.2. 邏輯閘層次測試 88
3.5 步驟四 : 系統評估與討論 95
第 4 章 結論及未來展望 96
第 5 章 參考文獻 97
附錄一 : 操作員域演員之XML描述檔 99
附錄二: MC/DC最小案例生成法 106

[1] N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud. “The synchronous data flow programming language lustre. ” Proceedings of the IEEE , 79(9):1305–1320, 1991.
[2] Automation &; Control Technical,” Combining PLC and FPGA architectures” Information from National Instruments, August 2006 - EngineerIT
[3] 美商國家儀器 (以下簡稱 NI) ,“提升 PLC 系統：FPGA 程式設計”, Jun 24, 2010 , http://zone.ni.com/devzone/cda/tut/p/id/11725.
[4] 廖文煇編著,”可程式控制器應用基礎篇”,全華科技圖書, 2001.
[5] Jeff Offutt, Shaoying Liu, Aynur Abdurazik, Paul Ammann, “Generating Test Data from State-Based Specifications”, The Journal of Software Testing, Verification and Reliability, Vol.13 No.1 pages 25-53, 2003.
[6] 廖本錦、游原昌、曾楙升、楊智偉、黃揮文、鄭宗杰，「ECCS/HPCF 數位控
制邏輯分析報告」，核能研究所，2005.
[7] Kelly J.Hayhurst , Dan S.Veerhusen, John J.Chilenski, Leanna K. Rierson,”NASA / TM-2001-210876, A Practical Tutorial on Modified Condition/Decision Coverage”, May 2001.
[8] 段飛雷、吳曉、張凡、董雲衛,”MC/DC 最小测试用例集快速生成算法”, (西北工業大學計算機學院,西安),09,2009.
[9] JohanBengtsson。PlaleChirstensen，PerJensen，Kim G IMlrgen。Fredirk IAIgSSOU。PaulPettersson， ThomasS rensen and W ang Yi．Uppaal：a Tool Suite for Validation a VerificationofRela —TimeSystems[M]．Userguide，1996．.
[10] 薛樂,魏晨,陳宗基,"混合系統的建模設計與仿真綜述"北京航空航天大學自
動化學院,北京 100083,2006 年 06 月.
[11] Edward A. Lee and Yuhong Xiong,” System-Level Types for
Component-Based Design”, First Workshop on Embedded Software, EMSOFT2001, Lake Tahoe, CA, USA, Oct. 8-10, 2001.
[12] E Wandeler, JW Janneck, EA Lee. Count ing Int e rface Automa ta and their Application in Static Analysis of Actor Models. Third IEEE International Conference on Software Engineering and Formal Methods (SEFM '05), 2005.
[13] JW Janneck. Actors and their composition.Technical Memorandum UCB/ERL M02/37, University of California at Berkeley, 18 December 2002
[14] C Brooks, E A Lee, X Liu, et al.”Heterogeneous Concurrent Modeling and Design in Java (Volumes 1-3).” Technical report, Dept.of EECS, Universityof
California Be rkeley, 2004.
[15] Edward A.Lee, Stephen Neuendorffer, Michael J.Wirthlin."Actor-Oriented Design of Embedded Hardware and Software Systems, Journal of Circuits, Systems and Computers, 2003.
[16] Patricia Derler and Edward A. Lee,”FuelSystem2Tanks.”,
http://ptolemy.eecs.berkeley.edu/ptolemyII/ptII8.1/jnlp-modelingCPS/ptolemy/demo/FuelSystem/FuelSystem2Tanks.htm.
[17] Eunkyoung Jee, Junbeom Yoo, Sungdeok Cha, Doohwan Bae,”A data flow-based structural testing technique for FBD programs”, Information and Software Technology 51 (2009) 1131–1139