# US 10,120,785 B2 · Automatic generation of data coupling and control coupling test conditions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,120,785 B2 - Document ID: US10120785B2 - Status: Granted - Kind: B2 - Application number: 15/331,259 - Filed: 2016-10-21 - Published: 2018-04-26 - Granted: 2018-11-06 - Earliest claimed: 2016-10-21 - Assignees: Rosemount Aerospace Inc. - Applicants: Rosemount Aerospace Inc. - Inventors: Scott C. Meyers - Web page: https://patentgrep.com/patent/US10120785B2 ## CPC - G06F 11/3684: {for test design, e.g. generating new test cases} - G06F 8/35: model driven - G06F 11/00: Error detection; Error correction; Monitoring (error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00) - G06F 11/36: Prevention of errors by analysis, debugging or testing of software - G06F 11/3608: {using formal methods, e.g. model checking, abstract interpretation (theorem proving G06N5/013)} - G06F 11/3612: {by runtime analysis (performance monitoring G06F11/3466)} - G06F 11/3668: Testing of software - G06F 11/3672: {Test management} - G06F 11/3688: {for test execution, e.g. scheduling of test suites} - G06F 11/3692: {for test results analysis} - G06F 11/3698: Environments for analysis, debugging or testing of software - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An automatic test generator (ATG) parses a computer-executable design model of operational software of an aircraft electronic device to identify design model data coupling and design model control coupling between functional modules of the design model. The ATG generates a plurality of test conditions configured to test whether the operational software of the aircraft electronic device satisfies the design model data coupling and the design model control coupling. A test procedure that implements the plurality of test conditions is generated. The test procedure is executed on the operational software of the aircraft electronic device. An indication of whether the operational software of the aircraft electronic device satisfies each respective one of the plurality of test conditions is output. ## Claims ### Claim 1 A method comprising: parsing, by an automatic test generator (ATG), a model file including syntactical notations describing a computer-executable design model of operational software of an aircraft electronic device; wherein parsing comprises: identifying one or more design model control coupling data, corresponding to calls between functional modules of the design model using the syntactical representation of interdependence of the function modules of the design model; identifying one or more design model data coupling, comprising data exchanged between each of the functional modules of the design model; automatically generating, by the ATG, a plurality of test conditions, wherein for each of the identified one or more design model control coupling data and identified one or more design model data coupling, a respective test condition is generated to test whether the operational software of the aircraft electronic device satisfies the design model data coupling or the design model control coupling identified; generating a test procedure that implements the plurality of test conditions; executing the test procedure on the operational software of the aircraft electronic device; wherein executing the test procedure on the operational software of the aircraft electronic device comprises: halting, for each of the plurality of test conditions, execution of the operational software; determining, while the execution of the operational software is halted, whether the operational software satisfies the respective test condition; and resuming execution of the operational software after determining whether the operational software satisfies the respective test condition; and outputting, for each of the plurality of test conditions, an indication of whether the operational software of the aircraft electronic device satisfies the respective test condition. ### Claim 2 (depends on 1) The method of claim 1, wherein identifying the interdependence of the functional modules of the design model comprises identifying interdependence of calling and called functions of the design model. ### Claim 3 (depends on 1) The method of claim 1, wherein executing the test procedure on the operational software of the aircraft electronic device comprises executing the operational software on one of an in-circuit emulator device or in-circuit debugger device in communication with the aircraft electronic device. ### Claim 4 (depends on 1) The method of claim 1, wherein executing the test procedure on the operational software of the aircraft electronic device comprises executing the operational software on a processor of the aircraft electronic device. ### Claim 5 (depends on 1) The method of claim 1, wherein generating the test procedure that implements the plurality of test conditions comprises modifying the operational software of the aircraft electronic device to implement the plurality of test conditions. ### Claim 6 A system comprising: an aircraft electronic device; a computing device comprising at least one processor and computer-readable memory encoded with instructions that, when executed by the at least one processor, cause the computing device to execute an automatic test generator (ATG) configured to: parsing a model file including syntactical notations describing a computer-executable design model of operational software of the aircraft electronic device to identify one or more design model control coupling data, corresponding to calls between functional modules of the design model using the syntactical representation of interdependence of the functional modules of the design model and to identify one or more design model data coupling, comprising data exchanged between each of the functional models of the design model; automatically generating a plurality of test conditions, wherein for each of the identified one or more design model control coupling data and identified one or more design model data coupling, a respective test condition is generated to test whether the operational software of the aircraft electronic device satisfies the design model data coupling or the design model control coupling identified; generating a test procedure that implements the plurality of test conditions; and a test device in communication with the aircraft electronic device and the computing device, the test device configured to: execute the test procedure on the operational software of the aircraft electronic device; wherein executing the test procedure on the operational software of the aircraft electronic device comprises: halting, for each of the plurality of test conditions, execution of the operational software; determining, while the execution of the operational software is halted, whether the operational software satisfies the respective test condition; resuming execution of the operational software after determining whether the operational software satisfies the respective test condition; and outputting, for each of the plurality of test conditions, an indication of whether the operational software of the electronic device satisfies the respective test condition. ### Claim 7 (depends on 6) The system of claim 6, wherein the ATG is configured to identify interdependence of the functional modules of the design model by at least being configured to identify interdependence of calling and called functions of the design model. ### Claim 8 (depends on 6) The system of claim 6, further comprising: an in-circuit emulator device in communication with the test device and the aircraft electronic device, the in-circuit emulator device configured to execute the operational software of the aircraft electronic device; wherein the test device is configured to execute the test procedure on the operational software of the aircraft electronic device executing on the in-circuit emulator device. ### Claim 9 (depends on 6) The system of claim 6, wherein the test device is configured to execute the test procedure on the operational software of the aircraft electronic device executing on a processor of the aircraft electronic device. ### Claim 10 (depends on 6) The system of claim 6, wherein the ATG is configured to generate the test procedure that implements the plurality of test conditions by at least being configured to modify the operational software of the aircraft electronic device to implement the plurality of test conditions. ### Claim 11 A non-transitory computer-readable memory encoded with instructions that cause the system to execute an automatic test generator (ATG) configured to perform the steps of: parsing a model file including syntactical notations describing a computer-executable design model of operational software of the aircraft electronic device to identify one or more design model control coupling data, corresponding to calls between functional modules of the design model using the syntactical representation of interdependence of the functional modules of the design model and to identify one or more design model data coupling, comprising data exchanged between each of the functional models of the design model; automatically generating a plurality of test conditions, wherein for each of the identified one or more design model control coupling data and identified one or more design model data coupling, a respective test condition is generated to test whether the operational software of the aircraft electronic device satisfies the design model data coupling or the design model control coupling identified; generating a test procedure that implements the plurality of test conditions; and execute the test procedure on the operational software of the aircraft electronic device; wherein executing the test procedure on the operational software of the aircraft electronic device comprises: halting, for each of the plurality of test conditions, execution of the operational software; determining, while the execution of the operational software is halted, whether the operational software satisfies the respective test condition; resuming execution of the operational software after determining whether the operational software satisfies the respective test condition; and outputting, for each of the plurality of test conditions, an indication of whether the operational software of the electronic device satisfies the respective test condition. ### Claim 12 (depends on 11) The non-transitory computer-readable memory of claim 11, wherein the operational software of the aircraft electronic device is implemented by a simulation of the aircraft electronic device. ### Claim 13 (depends on 12) The non-transitory computer-readable memory of claim 12, wherein the ATG and the simulation of the aircraft electronic device are implemented by a same computing device. ### Claim 14 (depends on 12) The non-transitory computer-readable memory of claim 12, wherein the ATG is implemented by a first computing device; and wherein the simulation of the aircraft electronic device is implemented by a second computing device.