TESTING OF MEASUREMENT INSTRUMENT SOFTWARE ON THE NATIONAL LEVEL

Specialized software (SW) for measuring instruments (MI) plays an ever greater role under conditions of the almost universal use of information technology (IT). Testing of MI SW in some form is conducted, especially in MI SW tests with the aim of confirming the type. Usually such a test is non-systematic in nature, and developers and users of automated MI largely do not have information about the state of the normative base in this field. Therefore, an analysis of the state of introduction of contemporary technologies into metrological practice and the development of approaches to harmonization of the corresponding documents at the national level are relevant. In doing so, it is necessary to take into account the recommendations of international and regional organizations that are concerned with issues of metrology, including legal metrology. Appropriate decisions are needed in legal metrology on account of the general introduction of information technologies, particularly with regard to SW. These topics are discussed in the document [1] from the International Organization of Legal Metrology (OIML), and also documents and guidelines from regional metrological organizations, in particular: the recommendations [2] of the Euro-Asian Cooperation of National Metrological Institutions (COOMET), document [3] and guidelines [4, 5] from the European Cooperation in Legal Metrology (WELMEC). The relevance of the work is confirmed by the urgent need to exercise legislative control over the MI before use and to conduct conformity assessment in accordance with the requirements of European directives or national legislation. As software is one of the key components of such MI, national metrology institutions are interested in developing effective methods for evaluating the MI SW status, risks and existing application-related threats. This can also be useful for conformity assessment bodies or industry and supports the comparability of risk assessment, SW validation and certification. Given this, the urgent issues are the research and development of harmonized approaches to the MI SW evaluation, taking into account the requirements of international and regional documents.


Introduction
Specialized software (SW) for measuring instruments (MI) plays an ever greater role under conditions of the almost universal use of information technology (IT).Testing of MI SW in some form is conducted, especially in MI SW tests with the aim of confirming the type.Usually such a test is non-systematic in nature, and developers and users of automated MI largely do not have information about the state of the normative base in this field.Therefore, an analysis of the state of introduction of contemporary technologies into metrological practice and the development of approaches to harmonization of the corresponding documents at the national level are relevant.In doing so, it is necessary to take into account the recommendations of international and regional organizations that are concerned with issues of metrology, including legal metrology.
Appropriate decisions are needed in legal metrology on account of the general introduction of information technologies, particularly with regard to SW.These topics are discussed in the document [1] from the International Organization of Legal Metrology (OIML), and also documents and guidelines from regional metrological organizations, in particular: the recommendations [2] of the Euro-Asian Cooperation of National Metrological Institutions (COOM-ET), document [3] and guidelines [4,5] from the European Cooperation in Legal Metrology (WELMEC).
The relevance of the work is confirmed by the urgent need to exercise legislative control over the MI before use and to conduct conformity assessment in accordance with the requirements of European directives or national legislation.As software is one of the key components of such MI, national metrology institutions are interested in developing effective methods for evaluating the MI SW status, risks and existing application-related threats.This can also be useful for conformity assessment bodies or industry and supports the comparability of risk assessment, SW validation and certification.Given this, the urgent issues are the research and development of harmonized approaches to the MI SW evaluation, taking into account the requirements of international and regional documents.

Literature review and problem statement
Foremost, national metrology legislation is to be harmonized on the basis of relevant documents, recommendations and standards of various international organizations concerned for the effective functioning of the Global Metrology System.The OIML was established to promote the global harmonization of legal metrology procedures.An important and difficult task is the transformation of national metrological legislation.It requires an effective adaptation of the National Metrology Service (NMS) and
The NMS legislative basis, its rules and its technical and organizational basis in Ukraine are defined by the Ukrainian law on metrology.The requirements of the European Directive 2014/32/EU on measuring instruments (MID) [6] are the basis of the Ukrainian legislation on legal metrological control of MI.
A thorough analysis of software for MI was the subject of previous studies by the authors [7][8][9][10].The works [7,8] explore the features of normative base and standardization support for MI SW certification.The main tests, stages and features of the monitoring of the MI SW in accordance with the requirements [1,4,5] are considered in [9].The use of proven SW to analyze the uncertainty of equipment in accredited laboratories is presented in [10].
In [11], the issues of certification of the MI SW in accordance with the requirements of national documents and standards were considered.However, these studies do not take into account the requirements of international and regional documents [1,4,5].
The works [12][13][14] consider the issues of security, risk assessment and current threats associated with the application of MI SW, including those that are integrated into open networks.These studies focus on methods that take into account the requirements of regional guidelines [4,5] and international standards.However, these works do not take into account the requirements of the international document [1] and the possibility of application of SW for local MI.
In [15], SW risk classes, verification guidelines, and some possible methods for testing the SW for local MI in accordance with the requirements [1,4,5] are considered.However, this work does not consider the possibility of checking MI SW integrated into open networks.
In [16], an approach is proposed for automatic testing of parameters for SW built into the MI in accordance with the requirements of the international document [1].The general criteria for assessing the safety and protection of IT components are considered.However, this work does not take into account the requirements of regional guidelines [4,5].
Thus, we can conclude that previous studies concerning the requirements of international and regional documents [1,4,5] on the testing of SW for the MI did not analyze the possibilities of adaptation or joint application of the provisions of these documents.Also, the issue of the possible integration of these requirements into national regulatory documents and standards was not considered.
Therefore, the practical application of the above guidelines and recommendations requires a more detailed and critical consideration of the general requirements set out in the international document [1] and the regional recommendations [4,5].Such research should be carried out to harmonize these documents among themselves and to agree with the national normative documents on the verification and certification of the MI SW.

The aim and objectives of the study
The research was aimed at developing approaches to harmonize the requirements of documents of international and regional metrological organizations for testing the SW of the MI at the national level.
To achieve this aim, the following tasks must be solved: -to analyze the general requirements and to identify the main factors in testing the quality of MI SW in the documents of international and regional organizations; -to establish and investigate the algorithms of testing the SW of the MI regarding the requirements of documents of international and regional organizations; -to explore the possibility of developing universal test checklists for testing the SW for all categories of MI.In doing so, it is necessary to take into account approaches based on the requirements of documents and guidelines of international and regional metrology organizations.

Materials and methods of research on application of software of measuring instruments
The most advanced MI have modules of microsystems, that directly manage the processes of measuring, processing and distribution of measuring data, and present to their user (operator).All these processes are executed clearly and correctly only on condition that the SW worked out by a producer for MI will have the corresponding metrological algorithm and a certain level of protection from external interference.
SW is a complicated technological product, which, in addition to visible advantages, also has certain hidden problems.Breaking, unauthorized access, failures and incorrect operation of users are only part of the known problem issues that the developers of SW try to solve already on the stage of development.Ordinary sealing of MI with SW or SW management do not solve the issue of providing the measurement accuracy and security of measurand.
In Fig. 1, the generalized structure of MI with SW is represented.AC/DC converter transforms the quantitative value of the physical measurand in its digital equivalent pursuant to a certain function of transformation.The resulting digital sequence is processed by SW that functions in a certain hardware program environment, on a certain algorithm.The current results of measurement can be represented on a display (indicator), written on the information carrier for storage, and sent via communication channels.Measurement results can be computed from the information carrier or brought to the communication channels.The user, if allowed by the SW developer, can manage the work of MI, change its settings, etc. SW in such MI, regardless of its complexity, executes a basic role in the process of measurement.

Fig. 1. Generalized structure of MI with SW
The main requirements relate to: SW identification, the correctness of algorithms and operation, the SW protection from premeditated and unpremeditated misrepresentation, SW maintenance (diagnostics).The main requirements for specific SW: establishment and choice of the essential parts of SW and interfaces, general data presentation, data storage and transfer through communications systems, compatibility of an operating system as a whole and the parts, agreement of metrological requirements and SW, maintenance and reconfiguration (resetting).
The following methods are used for the MI SW testing: -analysis of documentation and specifications (plan testing); -functional testing of metrological and other SW functions; -analysis of data flows; -step-by-step checking of codes; -module testing.
In order to implement these methods, specialists with various skills and appropriate hardware are necessary.The choice of testing method depends on the risk class for the MI SW used (Table 1, 2).Three levels of criticality have been determined for the MI SW:

Notes: L -low level; M -medium level; H -high level
-low (the SW does not distort measurement results, it has limited application, etc.); -medium (the software may distort the final measurement result, but it is not used in the MI SW whose functioning has direct economic and social significance); -high (the software may misrepresent the measurement result, used in the MI whose functioning has a high economic and social importance) [7].
Taking this into account, it is needed to check the following MI SW components: user interface, loading, structure, protection, trouble detection, long-term storage of measurement data.
Built-in and stand-alone special MI SW, which have both functional and verification features, are different.A built-in special MI SW is the SW of a stand-alone MI that is generally a special-purpose device having a set of measurement functions.Conversion of the measured value and processing of measurement data in this case are carried out by means of internal hardware and SW.
Stand-alone SW generally functions on the basis of a personal computer and is divided into two classes depending on connections with the MI SW.There are less stringent requirements for built-in MI SW for all research characteristics, which is connected in the majority of cases with limited access to SW and measurement data, whereas for a standalone MI SW there are higher requirements for the level of their protection and conformity.
On the whole, MI SW testing consists of two main parts: estimation of program documentation and experimental studies of SW.

General requirements of the OIML document for measuring instrument special software
When choosing the level of SW inflexibility for a certain category of MI and their field of application (calculations with users by means of MI with special SW, commercial agreements, service, direct control measurements, environmental protection, health safety) in accordance with OIML D 31 [1], the following indexes are used: -risk of SW falsification (consequences of social and public influence of malfunction, cost of the product subject to measuring, the platform used; the influence of sources of potential falsification); -required conformity of SW (practical manufacturabilities for satisfaction of the set level); -required reliability of SW (environmental conditions, consequences of social and public influence of errors); -possibility of SW falsification (simplicity of falsification can be a sufficient motivational factor); -possibility of repetition or termination of measurements.
When estimating the quality of MI SW in accordance with the requirements of OIML D 31, the following basic parameters of SW are controlled: -general characteristics of SW (SW identification, compatibility of the operating systems and hardware facilities, portability, correctness of algorithms and functions, general indication); -protection of SW (prevention of misapplication, protection against falsification); -support of hardware functions (support of fault detection, support of reliable protection); -determination and separation of the corresponding parts of SW and interface (separation of devices and components; separation of SW parts); -data storage, transmission by communication networks (data protection by facilities, application of cryptographic methods, auto-save, transmission delay, interruption of transmission, times tamps); -maintenance and reconfiguration (tested updating, traced updating).
For the identification and accounting of all substantial primary, secondary and other factors influencing on the result of quality estimation of MI SW in accordance with the requirements of the OIML D 31 document, it is expedient to build the corresponding Ishikawa cause-effect diagram (Fig. 2): 1. General characteristics of SW:  The algorithm for testing the SW of the MI in concordance with the requirements of OIML is shown in Fig. 3.
Based on the results of the analysis of the International document OIML D 31, the Ishikawa cause-effect diagram was constructed and the main factors concerning the approaches to testing the quality of the MI SW were identified.On the basis of the conducted researches, the algorithm of testing the SW for MI in accordance with the requirements of the international document OIML is established.
Fig. 3.The algorithm for testing the MI SW in accordance with OIML requirements

General requirements of WELMEC guide for measuring instrument special software
From 5 risk classes for the SW estimation set in WELMEC 7.2 [4], of practical interest are only 4 (B, C, D and E) and they embrace all MI that are subject to the European Directive on MI (MID) [6].These risk classes provide sufficient possibility to change the level of risk estimation according to three basic parameters: the state of SW protection; inflexibility of SW verification; degree of SW conformity.
In MID requirements, the following values are set [6]: -security and software identification (MID Annex I, 8.3); -data transmission and data storage (MID Annex I, 8.4); -interfaces (MID Annex I, 8.1); -software separation (MID Annex I, 7.6).The WELMEC 7.2 guide is built as the structured set of blocks of requirements.The general structure of this guide is related to the classification of MI in the basic configuration and classification in the so-called IT configurations.The set of requirements is complemented by the special requirements to MI.Three types of requirements are distinguished: -requirements for two base configurations of MI (socalled parts P and U); -requirements for four IT-configurations (so-called extensions L, T, S and D); -requirements for the specific types of MI (so-called extensions I.1, I.2, ...).WELMEC 7.2 consists of two basic parts: general requirements for SW embedded in the MI (part Р); general requirements for SW installed on universal computers (part U).

Testing of MI SW
Testing of MI SW in accordance with WELMEC 7.2 can be implemented on such basic elements (Table 3): -checking of stored data (L); -checking of data transmission (T); -checking of download (D); -checking of SW separation level (S).Each set of these requirements is applied only if there is a corresponding function.Taking into account the requirements of MID and WELMEC 7.2 on the whole, the following basic requirements are set for MI SW given in Table 3.
For the identification and accounting of all substantial primary, secondary and other factors influencing on the result of MI SW estimation in accordance with the require-ments of WELMEC, it is expedient to build the corresponding primary Ishikawa diagram (Fig. 4): 1. Basic configuration of MI: 1.1 -guidance and specifications for SW; 1.The algorithm of testing the MI SW taking into account the WELMEC requirements are shown in Fig. 5.

Yes No Conclusion on the MI SW testing results
Based on the results of WELMEC's regional guide analysis, the Ishikawa cause-effect diagram was constructed and key factors were identified regarding the approaches to testing the quality of the MI SW.On the basis of the conducted researches, the algorithm of testing the SW for MI in accordance with WELMEC requirements is established.

Discussion of the results concerning the possibility of joint use of the requirements of international and regional documents on the national level
The consideration of the possibility of joint use of the requirements of the OIML document and WELMEC guide is expedient.To do this, it is needed to analyze the secondary components of the Ishikawa diagrams in Fig. 2, 4. In the presence of secondary components that simultaneously affect some of the original components, they are converted to the rank of primary.Taking into account the above, it is possible to regroup these components into a new Ishikawa cause-effect diagram (Fig. 6).
The proposed algorithm for testing the MI SW on the basis of sharing the requirements of the OIML document and WELMEC guide are shown in Fig. 7.   Based on the results of the analysis of the OIML international document and the WELMEC regional guide, the transformed Ishikawa cause-effect diagram was constructed (Fig. 6) and the main factors regarding the approaches to MI SW quality testing were identified.On the basis of the conducted research, an algorithm for testing the SW for the MI in accordance with the requirements of OIML and WELMEC (Fig. 7) was proposed.
The documents and recommendations of the international and regional metrology organizations OIML and WELMEC for the MI SW testing are widely used in the field of legal metrology of various developed countries.However, the requirements of the OIML document and the WELMEC guide must be agreed.It is therefore advisable to take into account the provisions of these documents at the national level by adopting specific national regulations or standards for testing the MI SW.
For the realization of these normative documents or standards, it is necessary to work out the special checklists for estimation of MI SW taking into account different risk classes (Table 1 and 2).For the preparation of special checklists, the developed Ishikawa cause-effect diagrams can be used (Fig. 2, 4, 6).
Using the original Ishikawa cause-effect diagram shown in Fig. 4, special checklists taking into account the requirements of the WELMEC guide for all categories of MI included in Annexes of MID can be prepared [6].
At the same time, using a the transformed Ishikawa cause-effect diagram (Fig. 6) and the proposed algorithm for testing the MI SW (Fig. 7), special universal checklists taking into account joint requirements of the OIML document and WELMEC guide can be prepared.This will allow estimating the SW of practically all categories of MI.

Conclusions
1.The analysis of the general requirements for the testing of the MI SW, as set out in the OIML document and the WELMEC guide, has been carried out.The necessity to take into account the requirements of these documents and guide at the national level as special national standards or standards for testing the MI SW was determined.Based on the results of the analysis, the Ishikawa cause-effect diagrams were constructed and key factors regarding the approaches in the OIML and WELMEC documents regarding the testing of the MI SW quality were identified.
2. The algorithms for testing the SW for MI in accordance with the requirements of documents of international and regional organizations of legislative metrology OIML and WELMEC were defined and investigated.A universal MI SW testing algorithm was proposed.
3. The possibility of joint use of the requirements of the OIML document and WELMEC guide has been explored, for which the general Ishikawa cause-effect diagram has been developed.Main factors determined using the Ishikawa diagram can be used for the development of special checklists for testing the MI SW taking into account different risk classes were established.These special universal checklists take into account the general requirements of the OIML document and the WELMEC guide and allow evaluating SW for virtually all categories of MI.This will confirm the authenticity and quality of the MI SW appraisals.

Introduction
The result of the high level of modern progress is that extensive technologies of increasing the performance of highspeed processing reach their extreme opportunities.This is confirmed by violations of Moore's law in recent years [1].The desire to increase performance further to the exaflops level makes the challenge to find the new intensive solutions.The dynamically reconfigurable computer systems [2][3][4] are one of such solutions.Their creation became possible on the base of modern technology of the partial dynamic reconfiguration (PDR) of the FPGA [3].This direction is rapidly expanding today.The most advanced classes of tasks, which are solved in the dynamically reconfigurable computers, are the tasks of real-time control, particularly in undefined conditions, which have informational, multidimensional and dynamical nature [5][6][7][8].
In contrast to the static reconfiguration [9,10], the dynamical reconfiguration is a precondition for the creation of the computing structures, adapted to the requirements of Run Time mode tasks solution [3,[11][12][13].Firstly, this allows to overcome the limitations of the firm architecture of the high-speed multipurpose computer systems and to approach the real processing performance to the declared

FORMALIZATION OF THE CONCEPT OF ADAPTIVE TASKS MAPPING IN THE RECONFIGURABLE COMPUTERS ON FPGA I . K l y m e n k o
Doctor of Technical Sciences, Associate Professor* Е-mail: ikliryna@gmail.com

V . T k a c h e n k o
PhD, Associate Professor* Е-mail: tkavalivas@gmail.com

A . S e r h i e n k o
Postgraduate student** Е-mail: ananserr@yahoo.com

Fig. 2 .
Fig. 2. The Ishikawa cause-effect diagram for the testing of MI SW in concordance with OIML D 31

2 )
Requirements for part Р (built-for-purpose computer) Requirements for part U (universal computer) P1 -Documentation P2 -SW identification P3 -Influence via user interfaces P4 -Influence via communication interface P5 -Protection against accidental or unintentional changes P6 -Program protection against intentional changes P7 -Parameter protection U1 -Documentation U2 -SW identification U3 -Influence via user interfaces U4 -Influence via communication interface U5 -Protection against accidental or unintentional changes U6 -Protection against intentional changes U7 -Parameter protection U8 -SW authenticity and presentation of results U9 -Influence of other SW 1. Check of stored data (L) 2. Check of data transmission (T) L1 -Completeness of stored data L2 -Protection against accidental or unintentional changes L3 -Integrity of data L4 -Authenticity of stored data L5 -Confidentiality of keys L6 -Retrieval of stored data L7 -Automatic storing L8 -Storage capacity and continuity T1 -Completeness of transmitted data T2 -Protection against accidental or unintentional changes T3 -Integrity of data T4 -Authenticity of transmitted data T5 -Confidentiality of keys T6 -Handling of corrupted data T7 -Transmission delay T8 -Availability of transmission services 3. Check of download (D) 4. Check of SW separation level (S) D1 -Download mechanism D2 -Authentication of downloaded SW D3 -Integrity of downloaded SW D4 -Traceability of legally relevant SW download S1 -Realization of SW separation S2 -Mixed indication S3 -Protective SW interface

Fig. 4 .
Fig. 4. The primary Ishikawa cause-effect diagram for the testing of MI SW in accordance with WELMEC 7.2

Fig. 5 .
Fig. 5.The algorithm of testing the MI SW taking into account the WELMEC requirements

Fig. 7 .
Fig. 7.The proposed algorithm for testing the MI SW

Fig. 6 .
Fig. 6.Transformed Ishikawa cause-effect diagram for the testing of MI SW in accordance with OIML D 31 and WELMEC 7.2

Table 1
Definition of SW risk classes