Analysis of the new architecture proposal for the CMM control system

While developing divertor remote handling maintenance systems at the Divertor Test Platform 2 facility, some risks and sensitivity points related to the Cassette Multifunctional Mover control system software were discovered and evaluated. The control system architecture has to simultaneously fulfill the demanding ITER remote handling requirements and to face new requirements being uncovered during the trials. Especially evolving non-functional requirements such as reliability and safety have an effect on the control system architecture as it is getting more mature. An evaluation of the implications from architectural decisions is necessary before implementation efforts, as an architecture left to develop without evaluation may lead to a dead end and therefore soaring development costs. After studying existing architecture analysis methods an analysis method was developed to gain confidence to carry out the proposed changes.