Embedded Office Products

Partitioning System

We are working for many years in the aviation industry. Starting from primary and secondary flight controls up to intelligent actuators and cabin management systems. As different as the projects have been, we recognize common requests:

  • Separation of Applications  -  With the separation of applications, we target in detail the separation of safety criticality levels.
  • Guarantee of Runtime Behavior  -  During the guarantee of runtime, we target in parallel the deterministic system timing behavior.
  • Minimize Idle Times  -  The unused guaranteed time of an application is usable by the next application or core application

Working on a research project of Integrated Modular Avionics (IMA), we have contact with the operating system standard: ARINC653. This standard describes such a separation of applications. As the ARINC653 operating system standard is focused on extremely large systems, we see the benefits on smaller microcontrollers as well. In consequence, we have created the Partitioning System.

Partitioning System Overview
Partitioning System Overview

The figure shows a simple setup with three different applications (called partitions). Each partition is a single binary image and is independent of each other partition. The guaranteed runtime is configurable in phase tables during system design.

Software Separation

Application Separation

In contrast to the Flexible Safety RTOS where we monitor the temporal domain, the Partitioning System will control the temporal domain.


Each application is developed independently of other applications.

  • Bare metal application
  • Application with included RTOS
  • Integration of any RTOS is possible
  • System core extension allowed

Runtime Control

Specify the guaranteed timing of applications during system design.

  • Unlimited number of timings
  • Switch timings during runtime
  • Monitor runtime of applications

Queued Communication

For exchanging data, the system provides inter-partition communication.

  • Queues between applications
  • The system core extension can use this communication, too
  • Each endpoint gets a unique identifier

System Extension

The open architecture allows you to expand the core system with so-called Service Calls (SC).

  • Unlimited number of user SCs
  • SCs are interruptible by default
  • Non-interruptible SCs possible

Safety Certification

Partitioning System

As this system is used in aerospace systems, there are very limited benefits from pre-certification. Therefore, we decide to take the guided project certification approach.

Mixed Criticality

The system is used for the separation of multiple design assurance levels (DAL).

  • Multiple DALs on a single device
  • Reuse your maintenance partitions
  • Co-development of critical and non-critical partitions

Prepared Certification

You get prepared artifacts for certification according to DO-178C.

  • Artifacts for DO-178C up to DAL-A
  • Embedded Office guidance and assistance during assessment

Supported Hardware

Broad Support

The Partitioning System is ported to many architectures. The certification in a project depends on the CPU core of the processor and the cross-compiler environment. For some CPU core & compiler combinations, the document set is available. In addition to the listed chip vendor device families, all devices with the following Arm CPU Cores are supported:

  • ARM9 Microprocessors
  • Cortex-A8, A9 Microprocessors
  • Cortex-A53 Microprocessors
NXP Partner
Texas Instruments

Contact Us

Let's talk about your upcoming challenges. We are happy to discuss with you the potential use of the Partitioning System and possible software architectures.