A Model-Based Development and Verification Framework for Distributed System-on-Chip Architecture

The capabilities and thus, design complexity of VLSI-based embedded systems have increased tremendously in recent years, riding the wave of Moore’s law. The time-to-market requirements are also shrinking, imposing challenges to the designers, which in turn, seek to adopt new design methods to increase their productivity. As an answer to these new pressures, modern day systems have moved towards on-chip multiprocessing technologies. New architectures have emerged in on-chip multiprocessing in order to utilize the tremendous advances of fabrication technology. Platform-based design is a possible solution in addressing these challenges. The principle behind the approach is to separate the functionality of an application from the organization and communication architecture of hardware platform at several levels of abstraction. The existing design methodologies pertaining to platform-based design approach don’t provide full automation at every level of the design processes, and sometimes, the co-design of platform-based systems lead to sub-optimal systems. In addition, the design productivity gap in multiprocessor systems remain a key challenge due to existing design methodologies. This thesis addresses the aforementioned challenges and discusses the creation of a development framework for a platform-based system design, in the context of the SegBus platform - a distributed communication architecture. This research aims to provide automated procedures for platform design and application mapping. Structural verification support is also featured thus ensuring correct-by-design platforms. The solution is based on a model-based process. Both the platform and the application are modeled using the Unified Modeling Language. This thesis develops a Domain Specific Language to support platform modeling based on a corresponding UML profile. Object Constraint Language constraints are used to support structurally correct platform construction. An emulator is thus introduced to allow as much as possible accurate performance estimation of the solution, at high abstraction levels. VHDL code is automatically generated, in the form of “snippets” to be employed in the arbiter modules of the platform, as required by the application. The resulting framework is applied in building an actual design solution for an MP3 stereo audio decoder application.

Managing Change: An Organizational Outline for Reimagining the Digital Repository Infrastructure at The Ohio State University Libraries

Poster at Open Repositories 2014, Helsinki, Finland, June 9-13, 2014

Packaging Content for Aggregated and Federated Repositories through APTrust

Presentation at Open Repositories 2014, Helsinki, Finland, June 9-13, 2014

Kallet til livets embete : mødre i helse og lidelse

Mothers represent the natural caring. Natural caring is the object of caring science and of research interest because it establishes the central core of professional caring. In this study, we encounter patients who are mothers in need of care in a psychiatric context. Motherhood involves taking responsibility that extends beyond one's own life, because the child represents possibilities in a yet unknown future. Understanding and knowledge about the mothers' struggle in health and suffering are of crucial importance to enable clinical practice to make provisions for and adapt to the individual patient. The overall purpose of this dissertation is to illuminate how the innermost essence of caring emerges in health and suffering in patients who are mothers in psychiatric care. The purpose of the study in a clinical sense is to seek to understand and illuminate the patient's inner world in health and suffering in terms of contextual, existential, ontological and ethical dimensions. The dissertation is exploratory and descriptive in nature and encompasses induction, deduction and abduction as logics tools of reasoning. A theoretical model of natural caring and a universal theoretical model of the innermost essence of caring is developed as seen from the patient's world in a psychiatric context. The dissertation is anchored in human science's view of the human being and the world and in caring science's perspective. Caring science's view of the human being as a unity comprising body, soul and spirit is central in the study's concept of the patient. This multi-dimensional conception of the human being encompasses the dissertation's basic values and is decisive for choice of methodology. Hermeneutic epistemology guided the interpretation of the empirical data, the paradigmatic theses and assumptions. The dialectical movement in interpretation moves back and forth between empirical data, caring science theory and philosophical theory and reveals deeper insight into meaningful content in the clinical context. The interpretation process comprises four levels of abstraction: rational, contextual, existential and ontological. Hermeneutic philosophy guides the inductive and deductive approach to interpretation, as well as the movement between the clinical context and the caring science paradigm. In this encounter between the visible and invisible reality, the image of natural caring – motherliness emerged. The dissertation consists of four studies. The first study is a systematic review of nineteen research articles. The three other studies are hermeneutical interpretations based on text materials from open interviews. Fifteen participants were interviewed, all of whom are mothers of children between 0 and 18 years of age. All were outpatients in the psychiatric specialist health service. In the interpretation process, the mothers' struggle in health and suffering emerges as a struggle between the inner and outer world. Being a mother and patient in health and suffering in a psychiatric context means to struggle to be oneself, to create oneself, to live and realize one's good deeds as a mother and human being. To be oneself, to possess oneself as a mother is not only a question of tending, playing and learning in order to master a practical situation or to survive. It involves constituting a deep, inner desire to courageously create oneself so that the child is able to realize his or her potential in health and suffering. Motherliness manifests itself in caring as a call to ministering humanity and life. The voice of motherliness is understood as the voice of life—the eternal, inner call of love and freedom. The inner call craves fulfilment. Motherliness in natural caring does not retreat. Motherliness defines the Other as freedom and proceeds without regard for all other exterior requirements to realizing wellbeing. The inner essence of caring is attentive, aware and heeds the call of the heart. The innermost essence of caring is to be and to make oneself responsible for the Other. Responsibility cannot be relinquished; free choice consists in whether or not to follow the call. To renounce the inner call to responsibility is to deny oneself and one's dignity as a human being. The theoretical models provide clinical and systematic caring science with knowledge and understanding based on the natural caring spirit inherent in the human being. The study elucidates and strengthens the ontological basic assumptions about the human being as a unity of body, soul and spirit, the sanctity of the human being and the core of caring, ethos. The results of the dissertation will provide clinical practice with knowledge about the inner movements of the mothers' souls in relation to their responsibility as mothers and human beings. Being able to understand the basic conditions for responsibility is crucial for developing care that encompasses mother and child and the mutual relationship between them. This is basic knowledge for developing attitudes and actions that meet and provide for the needs of the patient as mother and as a whole, suffering human being.

Rigorous development of safety-critical systems

Nowadays, computer-based systems tend to become more complex and control increasingly critical functions affecting different areas of human activities. Failures of such systems might result in loss of human lives as well as significant damage to the environment. Therefore, their safety needs to be ensured. However, the development of safety-critical systems is not a trivial exercise. Hence, to preclude design faults and guarantee the desired behaviour, different industrial standards prescribe the use of rigorous techniques for development and verification of such systems. The more critical the system is, the more rigorous approach should be undertaken. To ensure safety of a critical computer-based system, satisfaction of the safety requirements imposed on this system should be demonstrated. This task involves a number of activities. In particular, a set of the safety requirements is usually derived by conducting various safety analysis techniques. Strong assurance that the system satisfies the safety requirements can be provided by formal methods, i.e., mathematically-based techniques. At the same time, the evidence that the system under consideration meets the imposed safety requirements might be demonstrated by constructing safety cases. However, the overall safety assurance process of critical computerbased systems remains insufficiently defined due to the following reasons. Firstly, there are semantic differences between safety requirements and formal models. Informally represented safety requirements should be translated into the underlying formal language to enable further veri cation. Secondly, the development of formal models of complex systems can be labour-intensive and time consuming. Thirdly, there are only a few well-defined methods for integration of formal verification results into safety cases. This thesis proposes an integrated approach to the rigorous development and verification of safety-critical systems that (1) facilitates elicitation of safety requirements and their incorporation into formal models, (2) simplifies formal modelling and verification by proposing specification and refinement patterns, and (3) assists in the construction of safety cases from the artefacts generated by formal reasoning. Our chosen formal framework is Event-B. It allows us to tackle the complexity of safety-critical systems as well as to structure safety requirements by applying abstraction and stepwise refinement. The Rodin platform, a tool supporting Event-B, assists in automatic model transformations and proof-based verification of the desired system properties. The proposed approach has been validated by several case studies from different application domains.

Urvilja : när livet är människans hem

This caring science study explores ‘Will’ as an ontological concept. The aim is to deepen the understanding of the essence of Will, and to highlight the manifestations of Will and how Will becomes evident in clinical caring. Will is ontological and universal. Will is connected with the essence of the human being, and manifests in the human being as will. The approach is inspired by Gadamer’s philosophical hermeneutics. The study’s horizon of understanding consists of Eriksson’s caritative theory and the caring science-tradition. The study’s research questions are as follows: What is the essence of Will? What are its manifestations? How does Will become evident in clinical caring? The hermeneutic interpretative movement is initiated by the material, which consists of the philosopher Arthur Schopenhauer’s texts, letters from experts and dictionaries. Meaning-bearing substance fragments in the material are intertwined with the original horizon of understanding through hermeneutical reading, hermeneutical interpretation and concept analysis in an oscillating interpretive movement. An abstraction occurs when the new substance is illuminated by the caring science ontology. The oscillating interpretive movement results in a reinterpreted horizon of understanding, which in turn provides the findings of the study. The reinterpreted horizon of understanding is presented in the form of a theoretical model and abductive theses. The essence of Will is represented in the theoretical model as the lifeaffirming and the loving force. Life and love are Will’s origin and destination. Will’s manifestations (its diversity) hold conditions and chance occurrences that obstruct Will. Hence the will of the human being does not necessarily appear in a way that is in tune with ontological Will. Will represents the lifeblood of ethos, and in this lifeblood love flows. Will acts by virtue of itself, and gives ethos its force. Will manifests in a way that ethos can affirm. When Will is affected by caring its force is active in the service of life and love. Being a caregiver entails acting as a world-eye, which means recognizing Will in diversity. For caregivers, being a world-eye means observing fragments of Will as it manifests in its original form in the real reality, and acting as the mirror of life. The human being who is able to perceive the fundamental values of life and to live according to these has understood the laws of life and entered upon the human calling. The human being then lives according to the fundamental order and has found a home in life.

Semantic and fuzzy modelling for human behaviour recognition in smart spaces : a case study on ambient assisted living.

Human activity recognition in everyday environments is a critical, but challenging task in Ambient Intelligence applications to achieve proper Ambient Assisted Living, and key challenges still remain to be dealt with to realize robust methods. One of the major limitations of the Ambient Intelligence systems today is the lack of semantic models of those activities on the environment, so that the system can recognize the speci c activity being performed by the user(s) and act accordingly. In this context, this thesis addresses the general problem of knowledge representation in Smart Spaces. The main objective is to develop knowledge-based models, equipped with semantics to learn, infer and monitor human behaviours in Smart Spaces. Moreover, it is easy to recognize that some aspects of this problem have a high degree of uncertainty, and therefore, the developed models must be equipped with mechanisms to manage this type of information. A fuzzy ontology and a semantic hybrid system are presented to allow modelling and recognition of a set of complex real-life scenarios where vagueness and uncertainty are inherent to the human nature of the users that perform it. The handling of uncertain, incomplete and vague data (i.e., missing sensor readings and activity execution variations, since human behaviour is non-deterministic) is approached for the rst time through a fuzzy ontology validated on real-time settings within a hybrid data-driven and knowledgebased architecture. The semantics of activities, sub-activities and real-time object interaction are taken into consideration. The proposed framework consists of two main modules: the low-level sub-activity recognizer and the high-level activity recognizer. The rst module detects sub-activities (i.e., actions or basic activities) that take input data directly from a depth sensor (Kinect). The main contribution of this thesis tackles the second component of the hybrid system, which lays on top of the previous one, in a superior level of abstraction, and acquires the input data from the rst module's output, and executes ontological inference to provide users, activities and their in uence in the environment, with semantics. This component is thus knowledge-based, and a fuzzy ontology was designed to model the high-level activities. Since activity recognition requires context-awareness and the ability to discriminate among activities in di erent environments, the semantic framework allows for modelling common-sense knowledge in the form of a rule-based system that supports expressions close to natural language in the form of fuzzy linguistic labels. The framework advantages have been evaluated with a challenging and new public dataset, CAD-120, achieving an accuracy of 90.1% and 91.1% respectively for low and high-level activities. This entails an improvement over both, entirely data-driven approaches, and merely ontology-based approaches. As an added value, for the system to be su ciently simple and exible to be managed by non-expert users, and thus, facilitate the transfer of research to industry, a development framework composed by a programming toolbox, a hybrid crisp and fuzzy architecture, and graphical models to represent and con gure human behaviour in Smart Spaces, were developed in order to provide the framework with more usability in the nal application. As a result, human behaviour recognition can help assisting people with special needs such as in healthcare, independent elderly living, in remote rehabilitation monitoring, industrial process guideline control, and many other cases. This thesis shows use cases in these areas.

Artificial reflecting structures based on metamaterials

This thesis studies metamaterial-inspired mirrors which provide the most general control over the amplitude and phase of the reflected wavefront. The goal is to explore practical possibilities in designing fully reflective electromagnetic structures with full control over reflection phase. The first part of the thesis describes a planar focusing metamirror with the focal distance less than the operating wavelength. Its practical applicability from the viewpoint of aberrations when the incident angle deviates from the normal one is verified numerically and experimentally. The results indicate that the proposed focusing metamirror can be efficiently employed in many different applications due to its advantages over other conventional mirrors. In the second part of the thesis a new theoretical concept of reflecting metasurface operation is introduced based on Huygens’ principle. This concept in contrast to known approaches takes into account all the requirements of perfect metamirror operation. The theory shows a route to improve the previously proposed metamirrors through tilting the individual inclusions of the structure at a chosen angle from normal. It is numerically tested and the results demonstrate improvements over the previous design.

Probing the SERCA1a sarcoplasmic reticulum Ca2+-ATPase phosphorylation-site mutant D351E with inorganic phosphate

The expression of sarcoplasmic reticulum SERCA1a Ca2+-ATPase wild-type and D351E mutants was optimized in yeast under the control of a galactose promoter. Fully active wild-type enzyme was recovered in yeast microsomal membrane fractions in sufficient amounts to permit a rapid and practical assay of ATP hydrolysis and phosphoenzyme formation from ATP or Pi. Mutant and wild-type Ca2+-ATPase were assayed for phosphorylation by Pi under conditions that are known to facilitate this reaction in the wild-type enzyme, including pH 6.0 or 7.0 at 25ºC in the presence of dimethylsulfoxide. Although glutamyl (E) and aspartyl (D) residue side chains differ by only one methylene group, no phosphoenzyme could be detected in the D351E mutant, even upon the addition of 40% dimethylsulfoxide and 1 mM 32Pi in the presence of 10 mM EGTA and 5 mM MgCl2. These results show that in the D351E mutant, increasing hydrophobicity of the site with inorganic solvent was not a sufficient factor for the required abstraction of water in the reaction of E351 with Pi to form a glutamylphosphate (P-E351) phosphoenzyme moiety. Mutation D351E may disrupt the proposed alignment of the reactive water molecule with the aspartylphosphate (P-D351) moiety in the phosphorylation site, which may be an essential alignment both in the forward reaction (hydrolysis of aspartylphosphate) and in the reverse reaction (abstraction of water upon formation of an aspartylphosphate intermediate).

Development of an Ecology-Oriented Software-Defined Networking Framework

ICT contributed to about 0.83 GtCO2 emissions where the 37% comes from the telecoms infrastructures. At the same time, the increasing cost of energy has been hindering the industry in providing more affordable services for the users. One of the sources of these problems is said to be the rigidity of the current network infrastructures which limits innovations in the network. SDN (Software Defined Network) has emerged as one of the prominent solutions with its idea of abstraction, visibility, and programmability in the network. Nevertheless, there are still significant efforts needed to actually utilize it to create a more energy and environmentally friendly network. In this paper, we suggested and developed a platform for developing ecology-related SDN applications. The main approach we take in realizing this goal is by maximizing the abstractions provided by OpenFlow and to expose RESTful interfaces to modules which enable energy saving in the network. While OpenFlow is made to be the standard for SDN protocol, there are still some mechanisms not defined in its specification such as settings related to Quality of Service (QoS). To solve this, we created REST interfaces for setting of QoS in the switches which can maximize network utilization. We also created a module for minimizing the required network resources in delivering packets across the network. This is achieved by utilizing redundant links when it is needed, but disabling them when the load in the network decreases. The usage of multi paths in a network is also evaluated for its benefit in terms of transfer rate improvement and energy savings. Hopefully, the developed framework can be beneficial for developers in creating applications for supporting environmentally friendly network infrastructures.

Formal development of resilient distributed systems

Resilience is the property of a system to remain trustworthy despite changes. Changes of a different nature, whether due to failures of system components or varying operational conditions, significantly increase the complexity of system development. Therefore, advanced development technologies are required to build robust and flexible system architectures capable of adapting to such changes. Moreover, powerful quantitative techniques are needed to assess the impact of these changes on various system characteristics. Architectural flexibility is achieved by embedding into the system design the mechanisms for identifying changes and reacting on them. Hence a resilient system should have both advanced monitoring and error detection capabilities to recognise changes as well as sophisticated reconfiguration mechanisms to adapt to them. The aim of such reconfiguration is to ensure that the system stays operational, i.e., remains capable of achieving its goals. Design, verification and assessment of the system reconfiguration mechanisms is a challenging and error prone engineering task. In this thesis, we propose and validate a formal framework for development and assessment of resilient systems. Such a framework provides us with the means to specify and verify complex component interactions, model their cooperative behaviour in achieving system goals, and analyse the chosen reconfiguration strategies. Due to the variety of properties to be analysed, such a framework should have an integrated nature. To ensure the system functional correctness, it should rely on formal modelling and verification, while, to assess the impact of changes on such properties as performance and reliability, it should be combined with quantitative analysis. To ensure scalability of the proposed framework, we choose Event-B as the basis for reasoning about functional correctness. Event-B is a statebased formal approach that promotes the correct-by-construction development paradigm and formal verification by theorem proving. Event-B has a mature industrial-strength tool support { the Rodin platform. Proof-based verification as well as the reliance on abstraction and decomposition adopted in Event-B provides the designers with a powerful support for the development of complex systems. Moreover, the top-down system development by refinement allows the developers to explicitly express and verify critical system-level properties. Besides ensuring functional correctness, to achieve resilience we also need to analyse a number of non-functional characteristics, such as reliability and performance. Therefore, in this thesis we also demonstrate how formal development in Event-B can be combined with quantitative analysis. Namely, we experiment with integration of such techniques as probabilistic model checking in PRISM and discrete-event simulation in SimPy with formal development in Event-B. Such an integration allows us to assess how changes and di erent recon guration strategies a ect the overall system resilience. The approach proposed in this thesis is validated by a number of case studies from such areas as robotics, space, healthcare and cloud domain.

Implementation of Quantitative Reaction-based Model Refinement

Building a computational model for complex biological systems is an iterative process. It starts from an abstraction of the process and then incorporates more details regarding the specific biochemical reactions which results in the change of the model fit. Meanwhile, the model’s numerical properties such as its numerical fit and validation should be preserved. However, refitting the model after each refinement iteration is computationally expensive resource-wise. There is an alternative approach which ensures the model fit preservation without the need to refit the model after each refinement iteration. And this approach is known as quantitative model refinement. The aim of this thesis is to develop and implement a tool called ModelRef which does the quantitative model refinement automatically. It is both implemented as a stand-alone Java application and as one of Anduril framework components. ModelRef performs data refinement of a model and generates the results in two different well known formats (SBML and CPS formats). The development of this tool successfully reduces the time and resource needed and the errors generated as well by traditional reiteration of the whole model to perform the fitting procedure.

Dependency of military capabilities on technological development

Our goal is to get better understanding of different kind of dependencies behind the high-level capability areas. The models are suitable for investigating present state capabilities or future developments of capabilities in the context of technology forecasting. Three levels are necessary for a model describing effects of technologies on military capabilities. These levels are capability areas, systems and technologies. The contribution of this paper is to present one possible model for interdependencies between technologies. Modelling interdependencies between technologies is the last building block in constructing a quantitative model for technological forecasting including necessary levels of abstraction. This study supplements our previous research and as a result we present a model for the whole process of capability modelling. As in our earlier studies, capability is defined as the probability of a successful task or operation or proper functioning of a system. In order to obtain numerical data to demonstrate our model, we conducted a questionnaire to a group of defence technology researchers where interdependencies between seven representative technologies were inquired. Because of a small number of participants in questionnaires and general uncertainties concerning subjective evaluations, only rough conclusions can be made from the numerical results

RELIABILITY AND SOCIAL KNOWLEDGERELEVANT RESPONSIBILITY

Knowledge seems to need the admixture of de facto reliability and epistemic responsibility. But philosophers have had a hard time in attempting to combine them in order to achieve a satisfactory account of knowledge. In this paper I attempt to find a solution by capitalizing on the real and ubiquitous human phenomenon that is the social dispersal of epistemic labour through time. More precisely, the central objective of the paper is to deliver a novel and plausible social account of knowledge-relevant responsibility and to consider the merits of the proposed combination of reliability and responsibility with respect to certain cases of unreflective epistemic subjects.

In search of good relationships to music : understanding aspiration and challenge in developing music school teacher practices

This study focuses on teacher practices in publicly funded music schools in Finland. As views on the aims of music education change and broaden, music schools across Europe share the challenge of developing their activities in response. In public and scholarly debate, there have been calls for increased diversity of contents and concepts of teaching. In Finland, the official national curriculum for state-funded music schools builds on the ideal that teaching and learning should create conditions which promote ‘a good relationship to music’. The meaning of this concept has been deliberately left open in order to leave room for dialogue, flexibility, and teacher autonomy. Since what is meant by ‘good’ is not defined in advance, the notion of ‘improving’ practices is also open to discussion. The purpose of the study is to examine these issues from teachers’ point of view by asking what music school teachers aim to accomplish as they develop their practices. Methodologically, the study introduces a suggestion for building empirical research on Alperson’s ‘robust’ praxial approach to music education, a philosophical theory which is strongly committed to practitioner perspectives and musical diversity. A systematic method for analysing music education practices, interpretive practice analysis, is elaborated with support from interpretive research methods originally used in policy analysis. In addition, the research design shows how reflecting conversations (a collaborative approach well-known in Nordic social work) can be fruitfully applied in interpretive research and combined with teacher inquiry. Data have been generated in a collaborative project involving five experienced music school teachers and the researcher. The empirical material includes transcripts from group conversations, data from teacher inquiry conducted within the project, and transcripts from follow-up interviews. The teachers’ aspirations can be understood as strivings to reinforce the connection between musical practices and various forms of human flourishing such that music and flourishing can sustain each other. Examples from their practices show how the word ‘good’ receives its meaning in context. Central among the teachers’ concerns is their hope that students develop a free and sustainable interest in music, often described as inspiration. I propose that ‘good relationships to music’ and ‘inspiration’ can be understood as philosophical mediators which support the transition from an indeterminate ‘interest in music’ towards specific ways in which music can become a (co-)constitutive part of living well in each person’s particular circumstances. Different musical practices emphasise different aspects of what is considered important in music and in human life. Music school teachers consciously balance between a variety of such values. They also make efforts to resist pressure which might threaten the goods they think are most important. Such goods include joy, participation, perseverance, solid musical skills related to specific practices, and a strong sense of vitality. The insights from this study suggest that when teachers are able to create inspiration, they seem to do so by performing complex work which combines musical and educational aims and makes general positive contributions to their students’ lives. Ensuring that teaching and learning in music schools remain as constructive and meaningful as possible for both students and teachers is a demanding task. The study indicates that collaborative, reflective and interdisciplinary work may be helpful as support for development processes on both individual and collective levels of music school teacher practices.