Upload
others
View
9
Download
0
Embed Size (px)
Citation preview
11100 Johns Hopkins Road Laurel, MD 20723-6099
The LVC Continuum for Autonomous System Test and Evaluation
Robert Lutz Chris Eaton, Ph.D.Chief Engineer Project ManagerIntelligent Combat Platforms Intelligent Combat Platforms240-228-7599 [email protected] [email protected]
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED.
What is Autonomy?
• Autonomy will be critical for future “dull, dirty, and dangerous” military operations.- Controls costs/personnel loading and improves mission success rates.
• Artificial intelligence can be used to increase the sophistication of the decision-making capabilities in autonomous systems.
Tele-operation Automatic Autonomous
Operator interface similar to pilot control but with a remote control link
Tele-operator interface but with many automated sequences to
reduce pilot workload
Operator interface gives high level mission-like commands with the
autonomy engine doing the details
The actions of an autonomous system will depend upon its organic sensors and/or external feeds to produce a correct “world view”.
World View
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
What Can Go Wrong with Autonomy?
Autonomous systems respond to unpredictable change by devising a new course of action – trust must be achieved through rigorous testing
Testing must assure that autonomous decisions will: Obey constraints and achieve objectives set by human supervisors Not produce unacceptable unintended consequences Outcomes and behaviors “learned in operational use” must be recorded/ assessed
3
• Autonomous systems respond to unpredictable change by devising a new course of action –rigorous testing is an important aspect of building trust in the system.
• Testing must assure that autonomous decisions will:• Obey constraints and achieve objectives set by human supervisors• Not produce unacceptable unintended consequences• Outcomes and behaviors “learned in operational use” must be recorded/ assessed
2015 I/ITSEC - 15348USATODAY – 3/12/2019
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Facets of Autonomous Systems Development• Eight Facets of Autonomous Systems
Development• Two-way interaction between all facets• Breaking down the interactions between
all facets allows understanding of gaps & influences
• Framework to begin providing meaningful requirements
• Influence Requirements for Test & Evaluation
Holistic View of Autonomous System Development Necessary for Successful T&E
26 September 2019 4DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
LVC Environments
Real People Operating Real Equipment
Manned & Unmanned systems in actual environment performing mission elements
LIVEReal People Operating Simulated Equipment
Manned cockpit/operator simulators, red & blue force entity simulation
VIRTUALSimulated People Operating Simulated Equipment
Blue Force simulation providing identical software & performance characteristics as a live entity
CONSTRUCTIVE
Distribution Statement A: Approved for public release; distribution is unlimited.DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Why LVC for Autonomous System T&E?
Live-Virtual-Constructive Environments are the key to simulation and stimulation of autonomy
Distribution Statement A: Approved for public release; distribution is unlimited.
• Cost• Richness of many operational environments
cannot be replicated on test ranges in an affordable way
• Synthetic forces can augment live forces as needed to contain test expenditures
• Safety• Untested autonomous vehicles are a safety
hazard for other live test assets• Live emitters can create interference for
tests occurring elsewhere on the range• Live shooters engaging autonomous
systems under test is an obvious risk VBS3 from Bohemia Interactive
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Agile Methods for LVC Development
7
• Computer simulations are a type of software system, and thus subject to the same measures of “goodness” (metrics) as other software systems• Extensibility, reliability, reusability, …
• LVC simulations can be developed via predictive or adaptive (agile) methods
• While predictive approaches provide very formal, structured methodologies for control of large project teams, they are relatively rigid and are not flexible to changing requirements
• Customers can rarely articulate all of their requirements upfront in the project, suggesting agile methods usually work best• Scrum, Feature-Driven Development
Agile Process Framework
https://speechfoodie.com/agile-scrum-framework-diagram/
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
The LVC Continuum
8
• The term “LVC Continuum” was first used to reflect how LVC capabilities are used across the entire acquisition lifecycle
• However, when specifically focused on autonomous systems, there is also a continuum of LVC capabilities that support the end-to-end testing process
• Our “LVC Continuum” provides a more detailed illustration of how LVC enables key activities throughout the testing of an autonomous system
System Testing
https://en.wikipedia.org/wiki/Live,_virtual,_and_constructive
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Fast-Time Constructive Simulation
9
• There is significant use of fast-time constructive simulations early in an acquisition program• Requirements development, concept
exploration, system design/development
• From the testing perspective, this same class of simulation can be used for (early) requirements validation and test plan development• Agile “build-test-deliver-build”
development strategies• Potential reuse of capabilities from
earlier acquisition phases• Reduce the potential test cases to the
most difficult, stressing conditions
AFSIM VESPA GUI
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Real-Time Virtual/Constructive Simulation
10
• Enhance existing fast-time simulation infrastructure to support real-time operation• Necessary for Human-Machine Interface
(HMI) development and testing
• For autonomous systems, must create a realistic operational picture for a mission commander to set goals/objectives for the autonomous system (or team)
• Can be used to study workload issues, early user feedback on symbology/display placement, and conduct validation of real-time system requirements
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Software/Hardware-in-the-Loop
11
• Reusing previous iteration, replace simulated system components with actual software/hardware
• For autonomous systems, the objective is to integrate the autonomy software and processor with host vehicle control systems in a laboratory environment
• LVC stimulus transitions from effects to actual messages/data formats with associated throughput, latencies, etc.
• Provides evidence for software/hardware certification prior to live testing Simulation Monitor
ControllerHardware
Controller InterfaceDevice
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Enhanced OPFOR
12
• Operational testing, and some aspects of developmental testing, require a more realistic and reactive OPFOR than is typical in earlier iterations • For machine learning autonomy engines,
simple fixed OPFOR tactics can be recognized and behaviors adjusted to artificially optimize system performance
• Allows operationally-relevant system performance measures to be obtained
• Mission context provides a viable basis for establishing user trust in the autonomous system(s)
• Provides foundation for user training
12
Simulation Monitor
ControllerHardware
Controller InterfaceDevice
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Live System Integration
13
• Reusing previous iteration, replace simulated Systems Under Test (SUT) with live test vehicles• May start with live surrogates before
transitioning to the target platform• Should not require interface changes, as
previous iterations employed actual message formats
• OPFOR or other simulated test articles (e.g., targets) can also be replaced with live assets
• Can introduce live test assets gradually over multiple tests
• Validation of simulated system behaviors and performance via comparisons with live SUTs improves user trust in the system Simulation Monitor
ControllerHardware
Controller InterfaceDevice
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
LVC Exemplar - Safe Testing of Autonomy in Complex, Interactive Environments (TACE)
• An architecture for autonomy testing
• Implements an onboard watchdog function
• Sophisticated LVC test infrastructure
• Records outcomes for “black box” testing
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
TACE Architecture – Ground Component
Ground Infrastructure
On Board AUVSUT Communication Server
Ground Communication Server
Visualizer
Synthetic Force
GeneratorSensor Models
Communication Models
Black Box Monitor
TENA Data Logger
TACE TENA Execution
2-Way Robust
Real Time C2/Data
Links
LVCLVCLVC
Applications
Test Data BaseTACE Test Executive
TACE Watchdog ServerTACE Safety Constraints
Test Manager Safety Manager
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
TACE Architecture – Air Component
Vendor Autonomy Engine
(This is the autonomy that is being tested)
Vend
or M
iddl
ewar
e
Telemetry
Waypoints
Sensed World Data
Vendor Ground Station
• Constraint / Violation Status• Telemetry• Black Box Data Acquisition• Who is in Control• Remediation Status
TACE Ground Station
Ground InfrastructureOn Board AUV
Test Platform(unmanned
platform with on-board autonomy
engine
VendorAutopilot
TACE WatchdogTelemetry
Waypoints
TAC
E M
iddl
ewar
e
Safety Monitor
Remediation Engine
Synthetic Data Injector
Bac
kup
GN
C
Native C2 Link
TACE Watchdog
Safety Monitor
Remediation Engine
Synthetic Data Injector
Back
up
GNC
• Constraint / Violation Status• Telemetry• Black Box Data Acquisition• Who is in Control• Remediation Status
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
TACE LVC Continuum
LoiterPoint A
LoiterPoint B
LoiterPoint A
LoiterPoint BEvolving
Framework of LVC
Capabilities
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Summary• LVC simulation will be a critical enabler of testing procedures for autonomous systems in the
future• A continuum of LVC capabilities are needed throughout the different test stages
- Fast-time constructive simulation - Real-time virtual/constructive simulation- Real-time live/virtual/constructive simulation
• Agile software development techniques combined with extensive software reuse can lower both cost and schedule risk as opposed to more traditional predictive approaches
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."
Acknowledgements• Co-Authors
- Dr. Reed Young- Dr. Eddie White
• Contributors- Kristine Ramachandran- Dr. Bill D’Amico- Dr. Dave Scheidt
DISTRIBUTION STATEMENT A - APPROVED FOR PUBLIC RELEASE; DISTRIBUTION IS UNLIMITED."