Herpel, JuergenSchoen, FriedrichSelegrad, Harald2022-01-182022-01-182021https://dl.gi.de/handle/20.500.12116/37947Software modularity and partial qualification capabilities are key enablers to produce cost efficient software in highly regulated domains. The modular concept (called spaceAPPS) described in this paper has been developed in the frame of the OPS-SAT project aiming at missions where flexibility is one of the success factors. spaceAPPS implements a novel software architecture for satellites inspired by the Apps concept of modern smartphones. In the European space domain the operation of a satellite is based on a set of 18 services. Accordingly, in spaceApps these services are mapped to individual Apps. This is not a one-to-one mapping which means that one App implements one or more services. During OPS-SAT ground testing it was demonstrated that functionality could be easily added through a new App or updated through replacing an existing App. Also during OPS-SAT ground testing it could be shown that a failing UserApp did not impact the basic apps to operate the satellite. Thus, it is possible to run applications of different criticality on the same platform. With operating systems supporting time and space separation the risk of failure propagation can be further reduced. The implementation of a partial validation approach, i. e. testing of third-party Apps in a representative environment and not running the validation on the target platform is feasible but was not demonstrated.enOn-Board softwaremodular softwaresoftware componentsintegrated modular avionicstime and space separationText/Journal Article10.1515/itit-2020-00382196-7032