Proceedings of the
35th European Safety and Reliability Conference (ESREL2025) and
the 33rd Society for Risk Analysis Europe Conference (SRA-E 2025)
15 – 19 June 2025, Stavanger, Norway

IP Protection Using Simplification and Masking for Model-Based Safety Analysis (MBSA) Model Exchange

Tony Ghueldre1, Wilkinson Joas2, Julien Vidalie3,a and Xavier De Bossoreille3,b

1IRT Saint Exupéry, France.

2IRT Saint Exupéry/Safran Aircraft Engines, France.

3IRT Saint Exupéry/Airbus Protect, France.

ABSTRACT

Model-Based Safety Analysis (MBSA) is a growing method for performing safety analysis. It aims to offer a closer integration with system modeling environments compared to traditional RAMS approaches. MBSA has proven particularly effective for assessing the safety of complex systems. However, in extended enterprise projects, one of the challenges to its use is the exposure of sensitive information embedded within the models, which may be subject to intellectual property (IP) protection. This includes detailed insights into the system being modeled, its internal management, and its reconfiguration processes. To address these concerns and enable continued use of MBSA in collaborative projects, models shared between companies may differ from those used internally.
We introduce two key activities—simplification and masking— to transform the original model while maintaining the necessary level of detail for collaboration. These activities regroup diverse pre-existing model transformation techniques, allowing models to range from "white boxes", where most details are accessible, to "black boxes", where only minimal information is shared.
Simplification is the process of reducing the complexity of an existing model. This process involves eliminating unnecessary details and focusing on essential behaviors, thereby optimizing calculations and improving the overall usability of the model.
Masking refers to the practice of concealing certain details or aspects of an existing model to protect intellectual property. This process ensures that proprietary information remains confidential while still allowing for collaborative work on a project.
In this paper, we propose and illustrate the use of simplification and masking for exchange of MBSA models. We discuss the possible tradeoffs between IP protection and assurance of correct results. In addition, we highlight that effective communication between suppliers and integrators is essential to ensure that the shared models comply with all safety-related project requirements, while respecting IP constraints.

Keywords: MBSA, Co-simulation, Model exchange, Collaborative design, Safety, RAMS, IP Protection, Simplification, Masking.



Download PDF