Design Article
DO-254: Increasing verification coverage by test
Louie De Luna, Aldec, and Randall Fulton, FAA
1/9/2013 8:47 AM EST
Device testing with DO-254/CTS
Aldec’s DO-254/CTS can be employed to facilitate the recommendations described in this paper. DO-254/CTS consists of custom hardware and software that provide at-speed testing for the target device with the testbench applied as test inputs. Utilizing the testbench as test inputs during device testing ensures that all requirements verified in simulation are also verified by test. The product is custom and specific to the design under test and target device. The target FPGA device under test is isolated in a daughter board such that a functional test with 100 percent input control and output access points are feasible.

Figure 4: DO-254/CTS Methodology
Click on image to enlarge
Robustness testing is simplified with DO-254/CTS especially for test cases describing input and clock frequency variations. For the inputs, test cases for interrupted, invalid and unexpected inputs and out of range data bus can easily be implemented in the testbench, hence they can also be implemented and applied to the device during testing because DO-254/CTS utilizes the test vectors generated from simulation. For the clocks, DO-254/CTS provides complete controllability of the oscillators that are used for applying the test vectors, clocking the DUT and capturing the results. The clocks settings and variations are configurable and fully scriptable. The phase of clocks can be shifted with a step of 1/256 of clock’s frequency while the input data remains constant. For example, if clock is running at 128MHz, the clock edge position can be shifted against the data with about 30ps step.
The key features of DO-254/CTS are the following:
• At-speed verification in the target device (Altera, Lattice, Microsemi and Xilinx)
• Reuse testbench as test inputs for device testing
• Leverage test cases from simulation
• Increase verification coverage by test
• Enables requirements-based testing
• Robustness testing is simplified (fully scriptable)
• No changes in the design and testbench
• FPGA design and verification can be performed immediately without the final board
• Results visualization with simulator waveform viewer
Conclusion
While the guidance is vague as to how much verification should be achieved via simulation or test, it is quite clear that requirements describing device pin level behavior must be verified by test in order to satisfy requirements. Verification coverage by test during final board testing is difficult and in most cases not feasible. Frequently as a result, applicants are left with the only option to verify them only by simulation. But simulation is insufficient and in many cases unable to expose errors that may impact safety and reliability of the device under test. As a solution and as the main part of the recommendations provided in this paper, Aldec’s DO-254/CTS augments board level testing to increase verification coverage by test. DO-254/CTS provides 100-percent verification coverage by test with 100-percent FPGA input control necessary to implement requirements-based and robustness test cases. DO-254/CTS leverages the same test cases and test stimulus implemented in simulation for device testing which offers a more efficient verification approach and the ability to cut the verification cycle.
References:
[1] FAA Advisory Circular 20-152, “Subject: RTCA, INC., Document RTCA/DO-254, Design Assurance Guidance for Airborne Electronic Hardware”, 2005, pg1, http://rgl.faa.gov
[2][3][4] RTCA/DO-254 “Design Assurance Guidance for Airborne Electronic Hardware”, 2000, pg 1, pg 39, pg 41, http://www.rtca.org/onlinecart/product.cfm?id=194
[5][6][7] EASA Certification Memo SWCEH – 001, “Subject
Development Assurance of Airborne Electronic Hardware”, 2012, pg 36, pg 37, pg 38, http://www.easa.europa.eu/certification/certification-memoranda.php
[8] FAA Order 8110-105, “Subject: Simple and Complex Electronic Hardware Approval Guidance”, 2008, pg 31, http://rgl.faa.gov
[9] Louie De Luna, Zibi Zalewski “FPGA Level In-Hardware Verification for DO-254 Compliance”, IEEE, Digital Avionics Systems Conference (DASC) 2011, pg2;
About the authors:
. Louie De Luna, Aldec DO-254 Program Manager
. Randall Fulton, FAA Consultant DER
About Aldec, Inc.:
Established in 1984, Aldec Inc. is an industry leader in Electronic Design Verification and offers a patented technology suite including: RTL Design, RTL Simulators, Hardware-Assisted Verification, Design Rule Checking, IP Cores, DO-254 Functional Verification and Military/Aerospace solutions. Continuous innovation, superior product quality and total commitment to customer service comprise the foundation of Aldec’s corporate mission. For more information, visit www.aldec.com.
See related links:
FPGA testing for DO-254 compliance
Automatic C-to-VHDL testbench generation shortens FPGA development time
Simulation enhances military ground vehicle instrument testing
Free Webinar: Best Design Practices for High-Capacity FPGA Devices
Mil-Aero top 10 'How-To' articles for 2012
----------------------
If you found this article to be of interest, visit Military/Aerospace Designline where you will find the latest and greatest design, technology, product, and news articles with regard to all aspects of military, defense and aerospace. And, to register to our weekly newsletter, click here.
Aldec’s DO-254/CTS can be employed to facilitate the recommendations described in this paper. DO-254/CTS consists of custom hardware and software that provide at-speed testing for the target device with the testbench applied as test inputs. Utilizing the testbench as test inputs during device testing ensures that all requirements verified in simulation are also verified by test. The product is custom and specific to the design under test and target device. The target FPGA device under test is isolated in a daughter board such that a functional test with 100 percent input control and output access points are feasible.

Figure 4: DO-254/CTS Methodology
Click on image to enlarge
Robustness testing is simplified with DO-254/CTS especially for test cases describing input and clock frequency variations. For the inputs, test cases for interrupted, invalid and unexpected inputs and out of range data bus can easily be implemented in the testbench, hence they can also be implemented and applied to the device during testing because DO-254/CTS utilizes the test vectors generated from simulation. For the clocks, DO-254/CTS provides complete controllability of the oscillators that are used for applying the test vectors, clocking the DUT and capturing the results. The clocks settings and variations are configurable and fully scriptable. The phase of clocks can be shifted with a step of 1/256 of clock’s frequency while the input data remains constant. For example, if clock is running at 128MHz, the clock edge position can be shifted against the data with about 30ps step.
The key features of DO-254/CTS are the following:
• At-speed verification in the target device (Altera, Lattice, Microsemi and Xilinx)
• Reuse testbench as test inputs for device testing
• Leverage test cases from simulation
• Increase verification coverage by test
• Enables requirements-based testing
• Robustness testing is simplified (fully scriptable)
• No changes in the design and testbench
• FPGA design and verification can be performed immediately without the final board
• Results visualization with simulator waveform viewer
Conclusion
While the guidance is vague as to how much verification should be achieved via simulation or test, it is quite clear that requirements describing device pin level behavior must be verified by test in order to satisfy requirements. Verification coverage by test during final board testing is difficult and in most cases not feasible. Frequently as a result, applicants are left with the only option to verify them only by simulation. But simulation is insufficient and in many cases unable to expose errors that may impact safety and reliability of the device under test. As a solution and as the main part of the recommendations provided in this paper, Aldec’s DO-254/CTS augments board level testing to increase verification coverage by test. DO-254/CTS provides 100-percent verification coverage by test with 100-percent FPGA input control necessary to implement requirements-based and robustness test cases. DO-254/CTS leverages the same test cases and test stimulus implemented in simulation for device testing which offers a more efficient verification approach and the ability to cut the verification cycle.
References:
[1] FAA Advisory Circular 20-152, “Subject: RTCA, INC., Document RTCA/DO-254, Design Assurance Guidance for Airborne Electronic Hardware”, 2005, pg1, http://rgl.faa.gov
[2][3][4] RTCA/DO-254 “Design Assurance Guidance for Airborne Electronic Hardware”, 2000, pg 1, pg 39, pg 41, http://www.rtca.org/onlinecart/product.cfm?id=194
[5][6][7] EASA Certification Memo SWCEH – 001, “Subject
Development Assurance of Airborne Electronic Hardware”, 2012, pg 36, pg 37, pg 38, http://www.easa.europa.eu/certification/certification-memoranda.php
[8] FAA Order 8110-105, “Subject: Simple and Complex Electronic Hardware Approval Guidance”, 2008, pg 31, http://rgl.faa.gov
[9] Louie De Luna, Zibi Zalewski “FPGA Level In-Hardware Verification for DO-254 Compliance”, IEEE, Digital Avionics Systems Conference (DASC) 2011, pg2;
About the authors:
. Louie De Luna, Aldec DO-254 Program Manager
. Randall Fulton, FAA Consultant DER
About Aldec, Inc.:
Established in 1984, Aldec Inc. is an industry leader in Electronic Design Verification and offers a patented technology suite including: RTL Design, RTL Simulators, Hardware-Assisted Verification, Design Rule Checking, IP Cores, DO-254 Functional Verification and Military/Aerospace solutions. Continuous innovation, superior product quality and total commitment to customer service comprise the foundation of Aldec’s corporate mission. For more information, visit www.aldec.com.
See related links:
FPGA testing for DO-254 compliance
Automatic C-to-VHDL testbench generation shortens FPGA development time
Simulation enhances military ground vehicle instrument testing
Free Webinar: Best Design Practices for High-Capacity FPGA Devices
Mil-Aero top 10 'How-To' articles for 2012
----------------------
If you found this article to be of interest, visit Military/Aerospace Designline where you will find the latest and greatest design, technology, product, and news articles with regard to all aspects of military, defense and aerospace. And, to register to our weekly newsletter, click here.
Navigate to related information

