S. P. Amarasinghe and M. S. Lam, Communication optimization and code generation for distributed memory machines, Conference on Programming Language Design and Implementation, PLDI'93, 1993.

C. André, Representation and analysis of reactive behaviors : A synchronous approach, CE- SA'96, 1996.

C. André, F. Boulanger, and A. Girault, Software implementation of synchronous programs, Proceedings Second International Conference on Application of Concurrency to System Design, pp.133-142, 2001.
DOI : 10.1109/CSD.2001.981771

P. Aubry and P. L. Guernic, On the desynchronization of synchronous applications, 11th International Conference on Systems Engineering, ICSE'96, 1996.

P. Aubry, P. L. Guernic, and S. Machard, Synchronous distribution of SIGNAL programs, Proceedings of HICSS-29: 29th Hawaii International Conference on System Sciences, pp.656-665, 1996.
DOI : 10.1109/HICSS.1996.495517
URL : https://hal.archives-ouvertes.fr/hal-00544057

F. Balarin, M. Chiodo, P. Giusto, H. Hsieh, A. Jurecska et al., Hardware-Software Co- Design of Embedded Systems : The Polis Approach, 1997.
DOI : 10.1007/978-1-4615-6127-9

A. Benveniste, B. Caillaud, L. Carloni, P. Caspi, and A. Sangiovanni-vincentelli, Composing heterogeneous reactive systems, ACM Transactions on Embedded Computing Systems, vol.7, issue.4, 2005.
DOI : 10.1145/1376804.1376811
URL : https://hal.archives-ouvertes.fr/inria-00555841

A. Benveniste, B. Caillaud, L. Carloni, and A. Sangiovanni-vincentelli, Tag machines, Proceedings of the 5th ACM international conference on Embedded software , EMSOFT '05, pp.255-263, 2005.
DOI : 10.1145/1086228.1086276

A. Benveniste, B. Caillaud, and P. L. Guernic, Compositionality in Dataflow Synchronous Languages: Specification and Distributed Code Generation, Information and Computation, vol.163, issue.1, pp.125-171, 2000.
DOI : 10.1006/inco.2000.9999

A. Benveniste, P. Caspi, S. A. Edwards, N. Halbwachs, P. L. Guernic et al., The synchronous languages 12 years later, Proceedings of the IEEE, vol.91, issue.1, pp.64-83, 2003.
DOI : 10.1109/JPROC.2002.805826

A. Benveniste, P. Caspi, P. Le-guernic, H. Marchand, J. Talpin et al., A Protocol for Loosely Time-Triggered Architectures, International Workshop on Embedded Software, EMSOFT'02, pp.266-281, 2002.
DOI : 10.1007/3-540-45828-X_19
URL : https://hal.archives-ouvertes.fr/inria-00526261

A. Benveniste, Safety critical embedded systems design : the SACRES approach. Tutorial at the Symposium on Formal Techniques in Real-Time and Fault Tolerant systems, 1998.

G. Berry, Esterel on Hardware [and Discussion], Philosophical Transactions of the Royal Society A: Mathematical, Physical and Engineering Sciences, vol.339, issue.1652, pp.87-104, 1992.
DOI : 10.1098/rsta.1992.0027

G. Berry, The foundations of Esterel, Proof, Language, and Interaction : Essays in Honour of Robin Milner, pp.425-454, 2000.

G. Berry and A. Benveniste, The synchronous approach to reactive and real-time systems, Proceedings of the IEEE, vol.79, issue.9, pp.1270-1282, 1991.
URL : https://hal.archives-ouvertes.fr/inria-00075115

G. Berry and L. Cosserat, The ESTEREL synchronous programming language and its mathematical semantics, Seminar on Concurrency, pp.389-448
DOI : 10.1007/3-540-15670-4_19
URL : https://hal.archives-ouvertes.fr/inria-00076230

G. Berry and G. Gonthier, The Esterel synchronous programming language: design, semantics, implementation, Science of Computer Programming, vol.19, issue.2, pp.87-152, 1992.
DOI : 10.1016/0167-6423(92)90005-V
URL : https://hal.archives-ouvertes.fr/inria-00075711

G. Berry and E. Sentovich, An implementation of constructive synchronous constructive programs in Polis. Formal Methods in Systems Design, pp.165-191, 2000.

S. Blust, SDR forum roles and global work focus on radio software download, IEICE Trans. on Communications, issue.12, pp.2581-2587, 2002.

F. Boussinot and R. De-simone, The SL synchronous language, IEEE Transactions on Software Engineering, vol.22, issue.4, pp.256-266, 1996.
DOI : 10.1109/32.491649
URL : https://hal.archives-ouvertes.fr/inria-00074168

F. Boussinot and J. Susini, The SugarCubes tool box : A reactive JAVA framework. Software Practice and Experience, pp.1531-1550, 1998.

J. T. Buck, S. Ha, E. A. Lee, and D. G. Messerschmitt, Ptolemy: A Framework for Simulating and Prototyping Heterogeneous Systems, Special Issue on Simulation Software Development, pp.155-182, 1994.
DOI : 10.1016/B978-155860702-6/50048-X

R. Budde and A. Poigné, On the synthesis of distributed synchronous processes, Modelling and Verification of Parallel Processes, MOVEP'00, 2000.

B. Buggiani, P. Caspi, and D. Pilaud, Programming distributed automatic control systems : A language and compiler solution, Research report Spectre L4, LGI/IMAG, 1988.

B. Caillaud, Contribution à la Modélisation du SPMD : Distribution Asynchrone d'Automates, Thèse de doctorat, 1994.

B. Caillaud, P. Caspi, A. Girault, and C. Jard, Distributing automata for asynchronous networks of processors, Journal Européen des Systèmes Automatisés, issue.3, pp.31503-524, 1997.
URL : https://hal.archives-ouvertes.fr/inria-00074336

D. Callahan and K. Kennedy, Compiling programs for distributed-memory multiprocessors, The Journal of Supercomputing, vol.29, issue.12, pp.151-169, 1988.
DOI : 10.1007/BF00128175

P. Caspi, Clocks in dataflow languages, Theoretical Computer Science, vol.94, issue.1, pp.125-140, 1992.
DOI : 10.1016/0304-3975(92)90326-B

P. Caspi, A. Curic, A. Maignan, C. Sofronis, S. Tripakis et al., From Simulink to Scade/Lustre to TTA : A layered approach for distributed embedded applications, International Conference on Languages, Compilers, and Tools for Embedded Systems, LCTES'03, pp.153-162, 2003.

P. Caspi, J. Fernandez, and A. Girault, An algorithm for reducing binary branchings, 15th Conference on the Foundations of Software Technology and Theoretical Computer Science, FST&TCS'95, pp.279-293, 1995.
DOI : 10.1007/3-540-60692-0_55

P. Caspi and A. Girault, OCREP : An Automatic Parallelization Tool for Synchronous Language. Inria. User Manual

P. Caspi and A. Girault, Execution of distributed reactive systems, 1st International Conference on Parallel Processing, EURO-PAR'95, pp.15-26, 1995.
DOI : 10.1007/BFb0020452

P. Caspi, A. Girault, and D. Pilaud, Automatic distribution of reactive systems for asynchronous networks of processors, IEEE Transactions on Software Engineering, vol.25, issue.3, pp.416-427, 1999.
DOI : 10.1109/32.798329
URL : https://hal.archives-ouvertes.fr/inria-00073196

P. Caspi, C. Mazuet, R. Salem, and D. Weber, Formal design of distributed control systems with Lustre, International Conference on Computer Safety, Reliabilitiy, and Security, SAFE- COMP'99, number 1698 in LNCS, pp.396-409, 1999.

P. Caspi and M. Pouzet, Synchronous Kahn networks, ACM SIGPLAN International Conference on Functional Programming, ICFP'96, 1996.

P. Caspi and M. Pouzet, Lucid synchrone : une extension fonctionnelle de Lustre, Journées Francophones des Langages Applicatifs (JFLA), 1999.

D. M. Chapiro, Globally Asynchronous Locally Synchronous Systems, Thèse de doctorat, 1984.

M. Clerbout and M. Latteux, Semi-commutations. Information and Computation, pp.59-74, 1987.
URL : https://hal.archives-ouvertes.fr/inria-00542549

J. Colaço, A. Girault, G. Hamon, and M. Pouzet, Towards a higher-order synchronous dataflow language, International Conference on Embedded Software, EM- SOFT'04, pp.230-239, 2004.

J. Colaço and M. Pouzet, Clocks as First Class Abstract Types, International Conference on Embedded Software, EMSOFT'03, pp.134-155, 2003.
DOI : 10.1007/978-3-540-45212-6_10

A. Curic, Implementing Lustre Programs on Distributed Platforms with Real-Time Constraints, Thèse de doctorat, INPG, 2005.

D. M. Dhamdhere and H. Patil, An elimination algorithm for bidirectional data flow problems using edge placement, ACM Transactions on Programming Languages and Systems, vol.15, issue.2, pp.312-336, 1993.
DOI : 10.1145/169701.169684

A. Dinning, A survey of synchronization methods for parallel computers, Computer, vol.22, issue.7, pp.66-76, 1989.
DOI : 10.1109/2.30733

S. A. Edwards, The Specification and Execution of Heterogeneous Synchronous Reactive System, Thèse de doctorat, 1997.

S. A. Edwards, V. Kapadia, and M. Halas, Compiling Esterel into Static Discrete-Event Code, International Workshop on Synchronous Languages, Applications and Programs, 2004.
DOI : 10.1016/j.entcs.2006.02.027
URL : http://doi.org/10.1016/j.entcs.2006.02.027

F. Giraud, Répartition automatique de programmes Esterel, 2002.

A. Girault, Sur la Répartition de Programmes Synchrones, Thèse de doctorat, INPG, 1994.

A. Girault, Elimination of redundant messages with a two-pass static analysis algorithm, Proceedings Ninth Euromicro Workshop on Parallel and Distributed Processing, pp.178-185, 2001.
DOI : 10.1109/EMPDP.2001.905041

A. Girault, Elimination of redundant messages with a two-pass static analysis algorithm, Proceedings Ninth Euromicro Workshop on Parallel and Distributed Processing, pp.433-453, 2002.
DOI : 10.1109/EMPDP.2001.905041

A. Girault, A survey of automatic distribution method for synchronous programs, International Workshop on Synchronous Languages, Applications and Programs, SLAP'05, 2005.

A. Girault and C. Ménier, SCREP : A Tool to Produce Automatically GALS Systems from Synchronous Circuits. Inria

A. Girault and C. Ménier, Automatic Production of Globally Asynchronous Locally Synchronous Systems, International Workshop on Embedded Software, EMSOFT'02, pp.266-281, 2002.
DOI : 10.1007/3-540-45828-X_20

A. Girault and X. Nicollin, Clock-Driven Automatic Distribution of Lustre Programs, International Conference on Embedded Software, EMSOFT'03, pp.206-222, 2003.
DOI : 10.1007/978-3-540-45212-6_14

A. Girault, X. Nicollin, and M. Pouzet, Automatic rate desynchronization of embedded reactive programs, ACM Transactions on Embedded Computing Systems, vol.5, issue.3, pp.687-717, 2006.
DOI : 10.1145/1165780.1165786

C. Gong, R. Gupta, and R. Melhem, Compiling techniques for optimizing communication on distributed-memory systems, International Conference on Parallel Processing, IPPS'93, 1993.

T. Grandpierre, C. Lavarenne, and Y. Sorel, Optimized rapid prototyping for real-time embedded heterogeneous multiprocessors, Proceedings of the seventh international workshop on Hardware/software codesign , CODES '99, 1999.
DOI : 10.1145/301177.301489

T. Grandpierre and Y. Sorel, From algorithm and architecture specifications to automatic generation of distributed real-time executives: a seamless flow of graphs transformations, First ACM and IEEE International Conference on Formal Methods and Models for Co-Design, 2003. MEMOCODE '03. Proceedings., 2003.
DOI : 10.1109/MEMCOD.2003.1210097

E. D. Granston and A. V. Veidenbaum, Detecting redundant accesses to array data, Proceedings of the 1991 ACM/IEEE conference on Supercomputing , Supercomputing '91, 1991.
DOI : 10.1145/125826.126714

M. Gupta, E. Schonberg, and H. Srinivasan, A unified framework for optimizing communication in data-parallel programs, IEEE Transactions on Parallel and Distributed Systems, vol.7, issue.7, pp.689-704, 1996.
DOI : 10.1109/71.508249

R. Gupta, S. Pande, K. Psarris, and V. Sarkar, Compilation techniques for parallel systems, Parallel Computing, vol.25, issue.13-14, pp.1741-1783, 1999.
DOI : 10.1016/S0167-8191(99)00086-1
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.33.3009

O. Hainque, Étude d'un environnement d'exécution temps-réel, distribué et tolérant aux pannes pour le modèle synchrone, 2000.

N. Halbwachs, Synchronous Programming of Reactive Systems, 1993.

N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud, The synchronous data flow programming language LUSTRE, Proceedings of the IEEE, pp.1305-1320, 1991.
DOI : 10.1109/5.97300

N. Halbwachs, F. Lagnier, and C. , An experience in proving regular networks of processes by modular model checking, Acta Informatica, vol.28, issue.6, pp.523-543, 1992.
DOI : 10.1007/BF01185559

A. Hemani, T. Meincke, S. Kumar, A. Postula, T. Olsson et al., Lowering power consumption in clock by using globally asynchronous locally synchronous design style, Design Automation Conference, DAC'99, pp.873-878, 1999.

T. A. Henzinger, B. Horowitz, and C. M. Kirsch, Giotto: a time-triggered language for embedded programming, International Workshop on Embedded Software, EMSOFT'01, 2001.
DOI : 10.1109/JPROC.2002.805825

T. A. Henzinger, B. Horowitz, and C. M. Kirsch, Giotto: a time-triggered language for embedded programming, Proceedings of the IEEE, pp.84-99, 2003.
DOI : 10.1109/JPROC.2002.805825

C. A. Hoare, Communicating sequential processes, Communications of the ACM, vol.21, issue.8, pp.666-677, 1978.
DOI : 10.1145/359576.359585

F. Huber, B. Schätz, and G. Einert, Consistent graphical specification of distributed systems, Industrial Applications and Strengthened Foundations of Formal Methods, pp.122-141, 1997.
DOI : 10.1007/3-540-63533-5_7

M. Jones, What really happened on Mars ? Available on the web, 1997.

G. Kahn, The semantics of a simple language for parallel programming, IFIP Congress on Information Processing'74, pp.471-475, 1974.

K. Kennedy and N. Nedeljkovi´cnedeljkovi´c, Combining dependence and data-flow analyses to optimize communication, Proceedings of 9th International Parallel Processing Symposium, 1995.
DOI : 10.1109/IPPS.1995.395954
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.49.3053

H. Kopetz and G. Bauer, The time-triggered architecture, Proceedings of the IEEE, pp.112-126, 2003.
DOI : 10.1007/978-1-4419-8237-7_14
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.113.3222

C. Lavarenne, O. Seghrouchni, Y. Sorel, and M. Sorine, The SynDEx software environment for real-time distributed systems design and implementation, European Control Conference, pp.1684-1689, 1991.

C. Lavarenne and Y. Sorel, Modèle unifié pour la conception conjointe logiciel-matériel, Traitement du Signal, vol.14, issue.6, pp.569-578, 1997.

P. , L. Guernic, T. Gautier, M. L. Borgne, and C. Lemaire, Programming real-time applications with Signal, Proceedings of the IEEE, vol.79, issue.9, pp.1321-1336, 1991.
URL : https://hal.archives-ouvertes.fr/inria-00075114

E. A. Lee and A. Sangiovanni-vincentelli, A framework for comparing models of computation, IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, vol.17, issue.12, pp.1217-1229, 1998.
DOI : 10.1109/43.736561

J. K. Lenstra and A. H. Kan, Complexity of Scheduling under Precedence Constraints, Operations Research, vol.26, issue.1, pp.22-35, 1978.
DOI : 10.1287/opre.26.1.22

O. Maffeïs, Ordonnancements de graphes de flots synchrones ; Application à la mise en oeuvre de Signal, Thèse de doctorat, 1993.

F. Maraninchi and Y. Rémond, Argos: an automaton-based synchronous language, Computer Languages, vol.27, issue.1-3, pp.61-92, 2001.
DOI : 10.1016/S0096-0551(01)00016-9
URL : https://hal.archives-ouvertes.fr/hal-00273055

F. Maraninchi and Y. Rémond, Mode-Automata: a new domain-specific construct for the development of safe critical systems, Science of Computer Programming, vol.46, issue.3, pp.219-254, 2003.
DOI : 10.1016/S0167-6423(02)00093-X

J. Mitola, The software radio architecture, IEEE Communications Magazine, vol.33, issue.5, pp.26-38, 1995.
DOI : 10.1109/35.393001

J. Muttersbach, T. Villiger, and W. Fichtner, Practical design of globally-asynchronous locally-synchronous systems, Proceedings Sixth International Symposium on Advanced Research in Asynchronous Circuits and Systems (ASYNC 2000) (Cat. No. PR00586), pp.52-61, 2000.
DOI : 10.1109/ASYNC.2000.836791

J. Paris, Exécution de tâches asynchrones depuis Esterel, Thèse de doctorat, 1992.

F. Peix, Distribution de programmes synchrones : le cas d'Esterel, Thèse de doctorat, 2004.
URL : https://hal.archives-ouvertes.fr/tel-00327772

D. Potop-butucaru, Optimizations for Faster Simulation of Esterel Programs, Thèse de doctorat, 2002.

D. Potop-butucaru, B. Caillaud, and A. Benveniste, Concurrency in synchronous systems, International Conference on Application of Concurrency to System Design, ACSD'04, pp.67-78, 2004.
URL : https://hal.archives-ouvertes.fr/inria-00124252

P. Raymond, Compilation séparée de programmes Lustre, 1988.

J. Romberg and A. Bauer, Loose synchronization of event-triggered networks for distribution of synchronous programs, Proceedings of the fourth ACM international conference on Embedded software , EMSOFT '04, 2004.
DOI : 10.1145/1017753.1017786

T. Shiple, G. Berry, and H. Touati, Constructive analysis of cyclic circuits, Proceedings ED&TC European Design and Test Conference, pp.328-333, 1996.
DOI : 10.1109/EDTC.1996.494321

M. Sighireanu, The specification of the DC2SDX translator, 1999.

Y. Sorel, Massively parallel computing systems with real time constraints: the "Algorithm Architecture Adequation" methodology, Proceedings of the First International Conference on Massively Parallel Computing Systems (MPCS) The Challenges of General-Purpose and Special-Purpose Computing, pp.44-53, 1994.
DOI : 10.1109/MPCS.1994.367018

J. Susini, F. Boussinot, and L. Hazard, Distributed reactive machines, Proceedings Fifth International Conference on Real-Time Computing Systems and Applications (Cat. No.98EX236), pp.267-274, 1998.
DOI : 10.1109/RTCSA.1998.726427
URL : https://hal.archives-ouvertes.fr/inria-00073313

R. Von-hanxleden and K. Kennedy, GIVE-N-TAKE ? A balanced code placement framework, Conference on Program Language Design and Implementation, PLDI'94, pp.107-120, 1994.

D. Weil, V. Bertin, E. Closse, M. Poize, P. Venier et al., Efficient compilation of Esterel for real-time embedded systems Architectures and Synthesis for Embedded Systems, International Conference on Compilers, pp.2-8, 2000.

M. Zennaro and R. Sengupta, Distributing synchronous programs using bounded queues, Proceedings of the 5th ACM international conference on Embedded software , EMSOFT '05, pp.325-334, 2005.
DOI : 10.1145/1086228.1086287

. Avant, . Le, «. Le-chevreau-en-avant-propos-de-ce-chapitre,-je-désire-citer-la-fable-de-jean-de-la-fontaine, . Le, ». Le-chevreau et al., La voici : La Bique allant remplir sa traînante mamelle Et paître l'herbe nouvelle, Ferma sa porte au loquet, Non sans dire à son Biquet : Gardez-vous sur votre vie D'ouvrir que l'on ne vous die

L. Bique, N. Comme-on-peut-croire, and . Vu-le-glouton, Dès qu'il la voit partie, il contrefait son ton, Et d'une voix papelarde Il demande qu'on ouvre

L. Biquet-soupçonneux-par-la-fente-regarde, Montrez-moi patte blanche, ou je n'ouvrirai point, S'écria-t-il d'abord. (Patte blanche est un point Chez les Loups, comme on sait, rarement en usage

. Celui-ci, Comme il était venu s'en retourna chez soi. Où serait le Biquet s'il eût ajouté foi Au mot du guet, que de fortune Notre Loup avait entendu ? Deux sûretés valent mieux qu'une

?. Sont-respectivement, {. {b}, A. , and B. , De plus, chaque opération doit recevoir toutes ses dépendances de données entrantes, d'où des relations d'ordre supplémentaires. Par exemple, sur le processeur P1, les ensembles d'opérations et de dépendances de données provenant des placements simples des figures 3 Leur union sans répétition est donc {A,B, A?B}, et l'ordre total compatible avec le graphe Alg est A?A?B ?B, où « ? » dénote l'ordre total. Le problème est que, en général, la fusion de deux DAGs n'est pas un DAG ! C'est ce que montre la figure 3, 1997.

M. Abdennebi, Synthèse de contrôleurs discrets pour systèmes embarqués tolérants aux pannes, 2003.

I. Ahmad and Y. Kwok, On exploiting task duplication in parallel program scheduling, IEEE Transactions on Parallel and Distributed Systems, vol.9, issue.9, pp.872-892, 1998.
DOI : 10.1109/71.722221

I. Assayad, Heuristique d'ordonnancement fiable pour systèmes embarqués temps-réel, 2003.

I. Assayad, A. Girault, and H. Kalla, A bi-criteria scheduling heuristic for distributed embedded systems under reliability and real-time constraints, International Conference on Dependable Systems and Networks, 2004, pp.347-356, 2004.
DOI : 10.1109/DSN.2004.1311904

P. C. Attie, A. Arora, and E. A. Emerson, Synthesis of fault-tolerant concurrent programs, ACM Transactions on Programming Languages and Systems, vol.26, issue.1, pp.125-185, 2004.
DOI : 10.1145/963778.963782

A. Avizienis, Design of fault-tolerant computers, Proceedings of the November 14-16, 1967, fall joint computer conference on, AFIPS '67 (Fall), pp.733-743, 1967.
DOI : 10.1145/1465611.1465708

A. Avizienis, J. Laprie, B. Randell, and C. Landwehr, Basic concepts and taxonomy of dependable and secure computing, IEEE Transactions on Dependable and Secure Computing, vol.1, issue.1, pp.11-33, 2004.
DOI : 10.1109/TDSC.2004.2

T. Ayav, P. Fradet, and A. Girault, Implementing fault-tolerance in real-time systems by automatic program transformations, Proceedings of the 6th ACM & IEEE International conference on Embedded software , EMSOFT '06, pp.205-214, 2006.
DOI : 10.1145/1176887.1176917

M. Baleani, A. Ferrari, L. Mangeruca, M. Peri, S. Pezzini et al., Faulttolerant platforms for automotive safety-critical applications, International Conference on Compilers, Architectures and Synthesis for Embedded Systems, CASES'03, 2003.
DOI : 10.1145/951732.951734
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.2.8092

M. O. Ball, Computational Complexity of Network Reliability Analysis: An Overview, IEEE Transactions on Reliability, vol.35, issue.3, pp.230-239, 1986.
DOI : 10.1109/TR.1986.4335422

C. Bernardeschi, A. Fantechi, and L. Simoncini, Formally Verifying Fault Tolerant System Designs, The Computer Journal, vol.43, issue.3, 2000.
DOI : 10.1093/comjnl/43.3.191
URL : http://comjnl.oxfordjournals.org/cgi/content/short/43/3/191

A. A. Bertossi, L. V. Mancini, and F. Rossini, Fault-tolerant rate-monotonic first-fit scheduling in hard-real-time systems, IEEE Transactions on Parallel and Distributed Systems, vol.10, issue.9, pp.934-945, 1999.
DOI : 10.1109/71.798317
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.122.5436

F. Brasileiro, P. Ezhilchelvan, S. Shrivastava, N. Speirs, and S. Tao, Implementing fail-silent nodes for distributed systems, IEEE Transactions on Computers, vol.45, issue.11, pp.451226-1238, 1996.
DOI : 10.1109/12.544479

D. Brière, D. Ribot, D. Pilaud, and J. Camus, Methods and specifications tools for Airbus on-board systems, Avionics Conference and Exhibition, 1994.

N. Brinis, Synthèse d'un contrôleur pour le problème des généraux byzantins, École Nationale des Sciences de l'Informatique, 2005.

J. Bruno, E. G. Coffman, and R. Sethi, Scheduling independent tasks to reduce mean finishing time, Communications of the ACM, vol.17, issue.7, pp.382-387, 1974.
DOI : 10.1145/361011.361064

G. Bruns and I. Sutherland, Model checking and fault tolerance, International Conference on Algebraic Methodology and Software Technology, AMAST'97, 1997.
DOI : 10.1007/BFb0000462

Y. G. Chen and M. C. Yuang, A cut-based method for terminal-pair reliability, IEEE Transactions on Reliability, vol.45, issue.3, pp.413-416, 1996.
DOI : 10.1109/24.536994

K. Cho and J. Lim, Synthesis of fault-tolerant supervisor for automated manufacturing systems : A case study on photolothographic process, IEEE Trans. on Robotics and Automation, vol.14, issue.2, pp.348-351, 1998.

W. W. Chu, M. Lang, and J. Hellerstein, Estimation of inter-module communication (IMC) and its applications in distributed processing systems, IEEE Trans. on Computers, issue.33, pp.691-699, 1984.

P. Cousot and R. Cousot, Abstract interpretation, Proceedings of the 4th ACM SIGACT-SIGPLAN symposium on Principles of programming languages , POPL '77, 1977.
DOI : 10.1145/512950.512973
URL : https://hal.archives-ouvertes.fr/inria-00528590

F. Cristian, Understanding fault-tolerant distributed systems, Communications of the ACM, vol.34, issue.2, pp.56-78, 1991.
DOI : 10.1145/102792.102801

C. Dima, A. Girault, C. Lavarenne, and Y. Sorel, Off-line real-time fault-tolerant scheduling, Proceedings Ninth Euromicro Workshop on Parallel and Distributed Processing, pp.410-417, 2001.
DOI : 10.1109/EMPDP.2001.905069
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.15.6201

C. Dima, A. Girault, and Y. Sorel, Static fault-tolerant scheduling with " pseudo-topological " orders, Joint Conference on Formal Modelling and Analysis of Timed Systems and Formal Techniques in Real-Time and Fault Tolerant System, FORMATS-FTRTFT'04, 2004.
DOI : 10.1007/978-3-540-30206-3_16

A. Dogan and F. Özgüner, Matching and scheduling algorithms for minimizing execution time and failure probability of applications in heterogeneous computing, IEEE Transactions on Parallel and Distributed Systems, vol.13, issue.3, pp.308-323, 2002.
DOI : 10.1109/71.993209

A. Dogan and F. Özgüner, Biobjective Scheduling Algorithms for Execution Time-Reliability Trade-off in Heterogeneous Computing Systems, The Computer Journal, vol.48, issue.3, pp.300-314, 2005.
DOI : 10.1093/comjnl/bxh086

S. Dulman, T. Nieberg, J. Wu, and P. Havinga, Trade-off between traffic overhead and reliability in multipath routing for wireless sensor networks, 2003 IEEE Wireless Communications and Networking, 2003. WCNC 2003., 2003.
DOI : 10.1109/WCNC.2003.1200680

E. Dumitrescu, A. Girault, and E. Rutten, Validating fault-tolerant behaviors of synchronous system specifications by discrete controller synthesis, IFAC Workshop on Discrete Event Systems, WODES'04, 2004.
URL : https://hal.archives-ouvertes.fr/hal-00419542

E. A. Emerson and E. M. Clarke, Using branching time temporal logic to synthesize synchronization skeletons, Science of Computer Programming, vol.2, issue.3, pp.241-266, 1982.
DOI : 10.1016/0167-6423(83)90017-5
URL : http://doi.org/10.1016/0167-6423(83)90017-5

G. Fohler, Joint scheduling of distributed complex periodic and hard aperiodic tasks in statically scheduled systems, Proceedings 16th IEEE Real-Time Systems Symposium, pp.152-161, 1995.
DOI : 10.1109/REAL.1995.495205

G. Fohler, Adaptive fault-tolerance with statically scheduled real-time systems, Proceedings Ninth Euromicro Workshop on Real Time Systems, 1997.
DOI : 10.1109/EMWRTS.1997.613777

F. Gärtner, Fundamentals of fault-tolerant distributed computing in asynchronous environments, ACM Computing Surveys, vol.31, issue.1, pp.1-26, 1999.
DOI : 10.1145/311531.311532

F. Gärtner and A. Jhumka, Automating the addition of fail-safe fault-tolerance : Beyond fusionclosed specifications Joint Conference on Formal Modelling and Analysis of Timed Systems and Formal Techniques in Real-Time and Fault Tolerant System, FORMATS-FTRTFT'04, LNCS, vol.3253, 2004.

A. Girault, H. Kalla, M. Sighireanu, and Y. Sorel, An algorithm for automatically obtaining distributed and fault-tolerant static schedules, 2003 International Conference on Dependable Systems and Networks, 2003. Proceedings., 2003.
DOI : 10.1109/DSN.2003.1209927
URL : https://hal.archives-ouvertes.fr/hal-00110453

A. Girault, H. Kalla, and Y. Sorel, Une heuristique d'ordonnancement et de distribution tolérante aux pannes pour systèmes temps-réel embarqués, Modélisation des Systèmes Réactifs, MSR'03, pp.145-160, 2003.

A. Girault, H. Kalla, and Y. Sorel, An Active Replication Scheme That Tolerates Failures in Distributed Embedded Real-Time Systems, IFIP Working Conference on Distributed and Parallel Embedded Systems, DIPES'04, 2004.
DOI : 10.1007/1-4020-8149-9_9

A. Girault, H. Kalla, and Y. Sorel, A scheduling heuristics for distributed real-time embedded systems tolerant to processor and communication media failures, International Journal of Production Research, vol.48, issue.14, pp.2877-2898, 2004.
DOI : 10.1016/0167-8191(93)90079-Z

A. Girault, H. Kalla, and Y. Sorel, Transient Processor/Bus Fault Tolerance for Embedded Systems, IFIP Working Conference on Distributed and Parallel Embedded Systems, DIPES'06, pp.135-144, 2006.
DOI : 10.1007/978-0-387-39362-9_15

A. Girault, C. Lavarenne, M. Sighireanu, and Y. Sorel, Fault-tolerant static scheduling for realtime distributed embedded systems, 21st International Conference on Distributed Computing Systems, ICDCS'01, pp.695-698, 2001.
URL : https://hal.archives-ouvertes.fr/inria-00072638

A. Girault and E. Rutten, Discrete controller synthesis for fault-tolerant distributed systems In International Workshop on Formal Methods for Industrial Critical Systems, ENTCS, vol.133, pp.81-100, 2004.

A. Girault and H. Yu, A flexible method to tolerate value sensor failures, 2006 IEEE Conference on Emerging Technologies and Factory Automation, pp.86-93, 2006.
DOI : 10.1109/ETFA.2006.355435

R. L. Graham, E. L. Lawler, J. K. Lenstra, and A. H. Kan, Optimization and Approximation in Deterministic Sequencing and Scheduling: a Survey, Annals of Discrete Mathematics, vol.5, pp.287-326, 1979.
DOI : 10.1016/S0167-5060(08)70356-X

N. Halbwachs, F. Lagnier, and P. Raymond, Synchronous Observers and the Verification of Reactive Systems, International Conference on Algebraic Methodology and Software Technology, AMAST'93, 1993.
DOI : 10.1007/978-1-4471-3227-1_8

K. Hashimoto, T. Tsuchiya, and T. Kikuno, Effective scheduling of duplicated tasks for faulttolerance in multiprocessor systems, IEICE Trans. on Information and Systems, issue.3, pp.85-525, 2002.

C. Hsieh and Y. Hsieh, Reliability and cost optimization in distributed computing systems, Computers & Operations Research, vol.30, issue.8, pp.1103-1119, 2003.
DOI : 10.1016/S0305-0548(02)00058-8

M. A. Iverson, Dynamic Mapping and Scheduling Algorithms for a Multi-User Heterogeneous Computing Environement, Thèse de doctorat, 1999.

P. Jalote, Fault-Tolerance in Distributed Systems, 1994.

B. Jeannet, Dynamic partitioning in linear relation analysis Application to the verification of reactive systems, Formal Methods in System Design, vol.23, issue.1, pp.5-37, 2003.
DOI : 10.1023/A:1024480913162

P. A. Jensen and M. Bellmore, An Algorithm to Determine the Reliability of a Complex System, IEEE Transactions on Reliability, vol.18, issue.4, pp.169-174, 1969.
DOI : 10.1109/TR.1969.5216346

R. Jensen, M. Veloso, and R. Bryant, Synthesis of fault-tolerant plans for non-deterministic domains, Workshop on Planning under Uncertainty and Incomplete Information, 2003.

H. Kalla, Génération automatique de distributions/ordonnancements temps-réel, fiables et tolérants aux fautes, Thèse de doctorat, INPG, 2004.

O. Kamach, L. Pietrac, and E. Niel, Approche multi-modèle pour les systèmes à événements discrets : application à un préhenseur pneumatique, Modélisation des Systèmes Réactifs, MSR'05, pp.159-174, 2005.
DOI : 10.3166/jesa.39.159-174

N. Kandasamy, J. P. Hayes, and B. T. Murray, Dependable communication synthesis for distributed embedded systems, International Conference on Computer Safety, Reliability and Security, SAFECOMP'03, 2003.

B. Kao, H. Garcia-molina, and D. Barbara, Aggressive transmissions of short messages over redundant paths, IEEE Transactions on Parallel and Distributed Systems, vol.5, issue.1, pp.102-109, 1994.
DOI : 10.1109/71.262594

K. C. Kapur and L. R. Lamberson, Reliability in Engineering Design, chapter 2 and 3, 1977.

S. Kartik and C. S. Murthy, Improved task-allocation algorithms to maximize reliability of redundant distributed computing systems, IEEE Transactions on Reliability, vol.44, issue.4, pp.575-586, 1995.
DOI : 10.1109/24.475976

S. Kartik and C. S. Murthy, Task allocation algorithms for maximizing reliability of distributed computing systems, IEEE Transactions on Computers, vol.46, issue.6, pp.719-724, 1997.
DOI : 10.1109/12.600888

R. M. Keichafer, C. J. Walter, A. M. Finn, and P. M. Thambidurai, The MAFT architecture for distributed fault tolerance, IEEE Transactions on Computers, vol.37, issue.4, pp.398-404, 1988.
DOI : 10.1109/12.2183

G. Kiczales, J. Lamping, A. Mendhekar, C. Maeda, C. Videira-lopes et al., Aspect-oriented programming, European Conference on Object-Oriented Programming, ECOOP'97, pp.220-242, 1997.

J. C. Knight and N. G. Leveson, An experimental evaluation of the assumption of independence in multi-version programming, IEEE Trans. on Software Engineering, vol.12, issue.1, pp.96-109, 1986.

H. Kopetz and G. Bauer, The time-triggered architecture, Proceedings of the IEEE, pp.112-126, 2003.

H. Ku and J. P. Hayes, Systematic design of fault-tolerant multiprocessors with shared buses, IEEE Trans. on Computers, vol.46, issue.4, pp.439-455, 1997.

S. S. Kulkarni and A. Arora, Automating the Addition of Fault-Tolerance, International Symposium on Formal Techniques in Real-Time and Fault-Tolerant Systems, FTRTFT'00, pp.82-93, 1926.
DOI : 10.1007/3-540-45352-0_9

S. S. Kulkarni and A. Ebnenasir, Automated synthesis of multitolerance, International Conference on Dependable Systems and Networks, 2004, 2004.
DOI : 10.1109/DSN.2004.1311891

R. Kumar and V. K. Garg, Optimal Supervisory Control of Discrete Event Dynamical Systems, SIAM Journal on Control and Optimization, vol.33, issue.2, pp.419-439, 1995.
DOI : 10.1137/S0363012992235183

L. Lamport, R. Shostak, and M. Pease, The Byzantine Generals Problem, ACM Transactions on Programming Languages and Systems, vol.4, issue.3, pp.382-401, 1982.
DOI : 10.1145/357172.357176

J. Laprie, Sûreté de fonctionnement informatique : concepts de base et terminologie. Rapport technique, LAAS-CNRS, 2004.

J. Laprie, J. Arlat, C. Béounes, and K. Kanoun, Definition and analysis of hardware- and software-fault-tolerant architectures, Computer, vol.23, issue.7, pp.39-51, 1990.
DOI : 10.1109/2.56851

J. Laprie, Dependability : Basic Concepts and Terminology. Dependable Computing and Fault-Tolerant Systems, 1992.
DOI : 10.1007/978-3-7091-9170-5_1

C. Lavarenne, O. Seghrouchni, Y. Sorel, and M. Sorine, The SynDEx software environment for real-time distributed systems design and implementation, European Control Conference, pp.1684-1689, 1991.

C. Lavarenne and Y. Sorel, Modèle unifié pour la conception conjointe logiciel-matériel, Traitement du Signal, vol.14, issue.6, pp.569-578, 1997.

T. Lévêque, Fault tolerance adequation in SynDEx, Inria Rhône-Alpes, 2004.

C. L. Liu and J. W. Layland, Scheduling Algorithms for Multiprogramming in a Hard-Real-Time Environment, Journal of the ACM, vol.20, issue.1, pp.46-61, 1973.
DOI : 10.1145/321738.321743

D. Lloyd and M. Lipow, Reliability, 1962.
DOI : 10.1201/9781420017656.ch7

G. K. Manacher, Production and Stabilization of Real-Time Task Schedules, Journal of the ACM, vol.14, issue.3, pp.439-465, 1967.
DOI : 10.1145/321406.321408

H. Marchand, O. Boivineau, and S. Lafortune, On the Synthesis of Optimal Schedulers in Discrete Event Control Problems with Multiple Goals, SIAM Journal on Control and Optimization, vol.39, issue.2, pp.512-532, 2000.
DOI : 10.1137/S0363012998341964
URL : https://hal.archives-ouvertes.fr/inria-00584875

H. Marchand, P. Bournai, M. L. Borgne, and P. L. Guernic, Synthesis of discrete-event controllers based on the Signal environment, Discrete Event Dynamic System : Theory and Applications, pp.325-346, 2000.
URL : https://hal.archives-ouvertes.fr/hal-00546147

R. Milner, Communication and Concurrency. International Series in Computer Science, 1989.

J. Musa, A. Iannino, and K. Okumuto, Software Reliability : Measurement, Prediction, Application , chapter 4, 1990.

C. Pinello, L. Carloni, and A. Sangiovanni-vincentelli, Fault-tolerant deployment of embedded software for cost-sensitive real-time feedback-control applications, Proceedings Design, Automation and Test in Europe Conference and Exhibition, 2004.
DOI : 10.1109/DATE.2004.1269049

D. Powell, Failure mode assumption and assumption coverage, International Symposium on Fault-Tolerant Computing, FTCS-22, pp.386-395, 1992.

D. Powell, Distributed fault tolerance: lessons from Delta-4, IEEE Micro, vol.14, issue.1, pp.36-47, 1994.
DOI : 10.1109/40.259898

D. Powell, J. Arlat, L. Beus-dukic, A. Bondavalli, P. Coppola et al., GUARDS: a generic upgradable architecture for real-time dependable systems, IEEE Transactions on Parallel and Distributed Systems, vol.10, issue.6, pp.580-599, 1999.
DOI : 10.1109/71.774908

D. Powell, The Delta-4 approach to dependability in open distributed systems, International Symposium on Fault-Tolerant Computing, FTCS-18, pp.246-251, 1988.

X. Qin, H. Jiang, and D. R. Swanson, An efficient fault-tolerant scheduling algorithm for realtime tasks with precedence constraints in heterogeneous systems, International Conference on Parallel Processing, ICPP'02, pp.360-386, 2002.

P. J. Ramadge and W. M. Wonham, Supervisory Control of a Class of Discrete Event Processes, SIAM Journal on Control and Optimization, vol.25, issue.1, pp.206-230, 1987.
DOI : 10.1137/0325013

K. Ramamritham, Allocation and scheduling of precedence-related periodic tasks, IEEE Transactions on Parallel and Distributed Systems, vol.6, issue.4, pp.412-420, 1995.
DOI : 10.1109/71.372795

P. Richards, Timing properties of multiprocessor systems Rapport technique TDB60-27, Tech. Operations Inc, 1960.

J. Rose, M. D. Hutton, J. P. Grossman, and D. G. , Characterization and parameterized random generation of digital circuits, Design Automation Conference, DAC'06, pp.94-99, 1996.

J. Rushby, Critical system properties : Survey and taxonomy. Reliability Engineering and Systems Safety, pp.189-219, 1994.
DOI : 10.1016/0951-8320(94)90065-5
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.38.7809

J. Rushby, Bus Architectures for Safety-Critical Embedded Systems, International Workshop on Embedded Systems, EMSOFT'01, 2001.
DOI : 10.1007/3-540-45449-7_22

E. Saule, Ordonnancement fiable pour la génération de code temps-réel embarqué, 2005.

H. Schepers and J. Hooman, A trace-based compositional proof theory for fault tolerant distributed systems, Theoretical Computer Science, vol.128, issue.1-2, 1994.
DOI : 10.1016/0304-3975(94)90167-8

A. Schiper, Early consensus in an asynchronous system with a weak failure detector, Distributed Computing, 1997.

F. B. Schneider, Implementing fault-tolerant services using the state machine approach: a tutorial, ACM Computing Surveys, vol.22, issue.4, pp.299-319, 1990.
DOI : 10.1145/98163.98167

S. Sekhavat and J. Hermosillo, The Cycab robot: a differentially flat system, Proceedings. 2000 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS 2000) (Cat. No.00CH37113), 2000.
DOI : 10.1109/IROS.2000.894623

R. Sengupta and S. Lafortune, An Optimal Control Theory for Discrete Event Systems, SIAM Journal on Control and Optimization, vol.36, issue.2, pp.488-541, 1998.
DOI : 10.1137/S0363012994260957

L. Sha, R. Rajkumar, and J. P. Lehoczky, Priority inheritance protocols: an approach to real-time synchronization, IEEE Transactions on Computers, vol.39, issue.9, pp.1175-1185, 1990.
DOI : 10.1109/12.57058

S. M. Shatz and J. Wang, Models and algorithms for reliability-oriented task-allocation in redundant distributed-computer systems, IEEE Transactions on Reliability, vol.38, issue.1, pp.16-26, 1989.
DOI : 10.1109/24.24570

S. M. Shatz, J. Wang, and M. Goto, Task allocation for maximizing reliability of distributed computer systems, IEEE Transactions on Computers, vol.41, issue.9, pp.1156-1168, 1992.
DOI : 10.1109/12.165396

G. C. Sih and E. A. Lee, A compile-time scheduling heuristic for interconnection-constrained heterogeneous processor architectures, IEEE Transactions on Parallel and Distributed Systems, vol.4, issue.2, pp.175-187, 1993.
DOI : 10.1109/71.207593

S. Srinivasan and N. K. Jha, Safety and reliability driven task allocation in distributed systems, IEEE Transactions on Parallel and Distributed Systems, vol.10, issue.3, pp.238-251, 1999.
DOI : 10.1109/71.755824

S. Taha, Synthèse de contrôleurs discrets pour systèmes embarqués tolérants aux pannes, 2004.

V. T. 'kindt and J. Billaut, Multicriteria Scheduling : Theory, Models and Algorithms, 2006.
URL : https://hal.archives-ouvertes.fr/hal-01067335

E. Tronci, Optimal finite state supervisory control, Proceedings of 35th IEEE Conference on Decision and Control, 1996.
DOI : 10.1109/CDC.1996.572981
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.43.508

B. P. Upender and P. J. Koopman, Communication protocols for embedded systems, Embedded Systems Programming, vol.7, pp.46-58, 1994.

A. Vicard, Formalisation et Optimisation des Systèmes Informatiques Distribués Temps-Réel Embarqués, Thèse de doctorat, 1999.

B. Waxman, Routing of multipoint connections, IEEE Journal on Selected Areas in Communications, vol.6, issue.9, pp.1617-1622, 1988.
DOI : 10.1109/49.12889

C. B. Weinstock, SIFT: System Design and Implementation, Twenty-Fifth International Symposium on Fault-Tolerant Computing, 1995, ' Highlights from Twenty-Five Years'., pp.75-77, 1980.
DOI : 10.1109/FTCSH.1995.532607

K. C. Wong and M. W. Wonham, On the computation of observers in discrete-event systems. Discrete Event Dynamic System : Theory and Applications, pp.55-107, 2004.

J. Xu and D. L. Parnas, On satisfying timing constraints in hard real-time systems, Software for Critical Systems, SIGSOFT'91, 1991.

T. Yang and A. Gerasoulis, List scheduling with and without communication delays, Parallel Computing, vol.19, issue.12, pp.1321-1344, 1993.
DOI : 10.1016/0167-8191(93)90079-Z

H. Yu, Synthèse de contrôleurs pour la tolérance aux fautes des capteurs, 2005.

. Si-le-véhicule-dans-la-voie-d, entrée atteint la position L 1 + L sans avoir réussi à s'aligner avec un point virtuel, alors il passe dans la phase align-to-gap et tout se déroule comme dans le contrôleur présenté dans la section 4.3, mais avec une moindre distance pour s'insérer. Dans un tel cas, il y a donc un risque que le véhicule ne réussisse jamais à s'insérer. En réalité, les résultats de micro-simulation effectués

. De-même-que, exception du véhicule s'insérant, les vitesses de tous les autres véhicules, aussi bien dans la voie d'origine que dans la voie de destination, doivent rester constantes. [28] présente une autoroute automatisée constituée d'une voie principale et d'une voie d'entrée avec une rampe d'accès et d'une portion d'insertion. La stratégie d'insertion consiste à viser un trou dans la voie principale et à s'aligner dessus avant de s'insérer. Les trous sont crées dans la voie principale selon des ordres donnés par l'infrastructure

L. 'ensemble-est-intégré-afin-de-former-un-système-hybride, chaque véhicule est muni de plusieurs superviseurs modélisés par des automates d'états finis et servant aux différentes manoeuvres qu'il veut exécuter Dans les états discrets, l'accélération du véhicule est déterminée par une équation différentielle appropriée. Là encore, aucun résultat de correction du contrôleur hybride n'est démontré par les auteurs. Enfin, [15] et [18] décrivent en détails les cinq couches de l'architecture développée par PATH pour les autoroutes automatisées. En particulier, la couche de coordination communique avec les autres véhicules afin de choisir quelle manoeuvre exécuter. Elle est modélisée sous la forme d'un automate d'états fini. La couche de régulation exécute les manoeuvres telles que la fusion de groupes de véhicules, la séparation en deux, le changement de voie, Elle est modélisée sous la forme de lois de commande avec rétro-contrôle (« feedback ») basées sur des modèles linéaires. L'ensemble constitue donc bien un modèle hybride

M. Antoniotti, A. Deshpande, and A. Girault, Microsimulation analysis of a hybrid system model of multiple merge junction highways and semi-automated vehicles, IEEE International Conference on Systems Man and Cybernetics, SMC'97, 1997.

M. Antoniotti, A. Deshpande, and A. Girault, Microsimulation analysis of multiple merge junctions under autonomous AHS operation, Proceedings of Conference on Intelligent Transportation Systems, 1997.
DOI : 10.1109/ITSC.1997.660466

P. Antsaklis, Hybrid systems : Theory and applications, Proceedings of the IEEE, 2000.

K. J. Åström and S. Brufani, Manual control of an unstable system with a saturating actuator, Proceedings of the 36th IEEE Conference on Decision and Control, pp.964-965, 1997.
DOI : 10.1109/CDC.1997.657568

F. Bouziani, Étude et implémentation de stratégies d'insertion pour une autoroute automatisée, 2003.

D. Cho and J. K. Hedrick, Automotive powertrain modelling for control, Journal of Dynamic Systems, Measurement, and Control, vol.111, issue.4, 1989.

P. Daviet and M. Parent, Platooning techniques for empty vehicle distribution in the PRAXITÈLE project, 4th Mediterranean Symposium on New Directions in Control and Automation, 1996.

A. Deshpande, A. Göllü, and L. Semenzato, The SHIFT programming language for dynamic networks of hybrid automata, IEEE Transactions on Automatic Control, vol.43, issue.4, pp.584-588, 1998.
DOI : 10.1109/9.664163

F. Dufraisse and F. Hertschuh, Développement de simulations et analyse de faisabilité dans le cadre du projet de route automatisée, 1998.

R. E. Fenton, A headway safety policy for automated highway operations, IEEE Trans. on Vehicular Technology, p.28, 1979.

C. H. Gibson and I. , The effectiveness of automated highway merging protocols on highway operations and vehicle performance, Master of Science, 1997.

A. Girault, A hybrid controller for autonomous vehicles driving on automated highways, Transportation Research Part C: Emerging Technologies, vol.12, issue.6, pp.421-452, 2004.
DOI : 10.1016/j.trc.2004.07.008
URL : https://hal.archives-ouvertes.fr/inria-00072301

A. Girault and S. Yovine, Stability analysis of a longitudinal control law for autonomous vehicules, IEEE Conference on Decision and Control, CDC'99, 1999.

D. Godbole, J. Lygeros, and S. Sastry, Hierarchical hybrid control: a case study, Conference on Decision and Control, CDC'94, pp.1592-1597, 1994.
DOI : 10.1007/3-540-60472-3_9

J. K. Hedrick, M. Tomizuka, and P. Varaiya, Control issues in automated highway systems, IEEE Control Systems, vol.14, issue.6, pp.21-32, 1994.
DOI : 10.1109/37.334412

P. Hingwe and M. Tomizuka, Experimental evaluation of a chatter free sliding mode control for lateral control in AHS, Proceedings of the 1997 American Control Conference (Cat. No.97CH36041), 1997.
DOI : 10.1109/ACC.1997.612089

R. Horowitz and P. Varaiya, Control design of an automated highway system, Proceedings of the IEEE, pp.913-925, 2000.
DOI : 10.1109/5.871301

P. Ioannou and C. C. Chien, Autonomous intelligent cruise control, IEEE Transactions on Vehicular Technology, vol.42, issue.4, pp.657-672, 1993.
DOI : 10.1109/25.260745

P. A. Ioannou, F. Ahmed-zaid, and D. H. Wuh, A time headway autonomous intelligent cruise controller : Design and simulation. Rapport de recherche UCB-ITS-PWP-94-07, 1994.

P. A. Ioannou and Z. Xu, THROTTLE AND BRAKE CONTROL SYSTEMS FOR AUTOMATIC VEHICLE FOLLOWING???, I V H S Journal, vol.44, issue.4, pp.345-377, 1994.
DOI : 10.1109/25.69979

H. Jula, E. B. Kosmatopoulos, and P. A. Ioannou, Collision avoidance analysis for lane changing and merging, IEEE Transactions on Vehicular Technology, vol.49, issue.6, pp.2295-2308, 2000.
DOI : 10.1109/25.901899

A. Kanaris, E. B. Kosmatopoulos, and P. A. Ioannou, Strategies and spacing requirements for lane changing and merging in automated highway systems, IEEE Transactions on Vehicular Technology, vol.50, issue.6, pp.1568-1581, 2001.
DOI : 10.1109/25.966586

X. Lu and K. J. Hedrick, Longitudinal control algorithm for automated vehicle merging, IEEE Conference on Decision and Control, CDC'00, 2000.
DOI : 10.1109/9.250509

T. S. No, K. Chong, and D. Roh, A Lyapunov function approach to longitudinal control of vehicles in a platoon, IEEE Trans. on Vehicular Technology, vol.50, issue.1, pp.116-124, 2001.

H. A. Pham, J. K. Hedrick, and M. Tomizuka, Combined lateral and longitudinal control of vehicles for AHS, American Control Conference, ACC'94, 1994.

R. Rajamani, H. Tan, B. K. Law, and W. Zhang, Demonstration of integrated longitudinal and lateral control for the operation of automated vehicles in platoons, IEEE Transactions on Control Systems Technology, vol.8, issue.4, pp.695-708, 2000.
DOI : 10.1109/87.852914

B. Ran, S. Leight, and B. Chang, A microscopic simulation model for merging control on a dedicated-lane automated highway system, Transportation Research Part C: Emerging Technologies, vol.7, issue.6, pp.369-388, 1999.
DOI : 10.1016/S0968-090X(99)00028-5

J. Roussel, Réalisation d'une loi de commande pour le contrôle longitudinal d'un véhicule automatique, 2001.

S. Sheikholelslam and C. A. Desoer, A System Level Study of the Longitudinal Control of a Platoon of Vehicles, Journal of Dynamic Systems, Measurement, and Control, vol.114, issue.2, pp.286-292, 1992.
DOI : 10.1115/1.2896526

S. E. Shladover, Review of the state of development of advanced vehicle control systems (AVCS) Vehicle System Dynamics, pp.551-595, 1995.

D. Simon, B. Espiau, E. Castillo, and K. Kapellos, Computer-aided design of a generic robot controller handling reactivity and real-time control issues, IEEE Transactions on Control Systems Technology, vol.1, issue.4, 1993.
DOI : 10.1109/87.260267
URL : https://hal.archives-ouvertes.fr/inria-00074872

D. Swaroop, J. K. Hedrick, and S. B. Choi, Direct adaptive longitudinal control of vehicle platoons, IEEE Transactions on Vehicular Technology, vol.50, issue.1, pp.150-161, 2001.
DOI : 10.1109/25.917908

H. Ye, A. N. Michel, and L. Hou, Stability theory for hybrid dynamical systems, IEEE Transactions on Automatic Control, vol.43, issue.4, pp.461-474, 1998.
DOI : 10.1109/9.664149

. Gps, La fin des années 1990 a vu une explosion du nombre de systèmes informatiques embarqués dans les automobiles Une voiture haut de gamme a ainsi pu en compter jusqu'à 80 : assistance au freinage, direction assistée, déclenchement des airbags, injection électronique, vitres électriques, climatisation, mais aussi tout ce qu'on appelle l'« infotainment Certains sont donc à sûreté critique, et d'autres non. Cette tendance va très certainement se poursuivre à l'avenir. En particulier, les constructeurs automobiles travaillent actuellement sur ce qu'on appelle le « drive-by-wire » (comme c'est déjà le cas dans l'avionique avec le « fly-by-wire ») : direction électronique (sans colonne de direction mécanique) et freinage électronique. Toutefois, de nombreuses défaillances, qui se sont produites justement sur ces voitures haut de gamme (en particulier affectant l'injection et le freinage), ont entraîné une prise de conscience des difficultés qu'il y a à produire de façon sûre ce type de systèmes : ? Une première difficulté vient du mode de fonctionnement des constructeurs automobiles et de leurs sous-traitants : un système est tout d, spécification se fait sans méthode formelle, ce qui est une source bien connue de fautes de développement