Dansk Datamatik Center


Dansk Datamatik Center was a Danish software research and development centre that existed from 1979 to 1989. Its main purpose was to demonstrate the value of using modern techniques, especially those involving formal methods, in software design and development.
Three major projects dominated much of the centre's existence. The first concerned the formal specification and compilation of the CHILL programming language for use in telecommunication switches. The second involved the formal specification and compilation of the Ada programming language. Both the Ada and CHILL efforts made use of formal methods. In particular, DDC worked with Meta-IV, an early version of the specification language of the Vienna Development Method formal method for the development of computer-based systems. As founded by Dines Bjørner, this represented the "Danish School" of VDM. This use of VDM led in 1984 to the DDC Ada compiler becoming the first European Ada compiler to be validated by the United States Department of Defense. The third major project was dedicated towards creation of a new formal method, RAISE.
The success of the Ada compiler system would lead to creation of the commercial company DDC International A/S in 1985, which would develop, productise, and market it both directly and on an OEM basis.

Origins

The genesis of the centre came in spring 1979 at the Technical University of Denmark – located in Kongens Lyngby, north of Copenhagen – as the idea of one of the members of its computer science faculty, Christian Gram, who discussed it with a colleague, Dines Bjørner. Looking at the software crisis of the time, they felt that computer science had created foundational and theoretical approaches that if applied could make software development a more professional process and permit the development of large software systems on schedule and with quality.
They approached the Akademiet for de Tekniske Videnskaber with this idea, and in September 1979, Dansk Datamatik Center was formed as an ATV institute for advanced software development. Ten large producers or users of information technology in Denmark became paying members of the new entity:, Crone & Koch, the Danish Defence Research Establishment,,, Kommunedata, Regnecentralen af 1979, Sparekassernes Datacenter, , and ØK Data, with each member paying DKK 100,000 per year.
Dines Bjørner became the scientific leader of the centre.
The managing director of DDC was Leif Rystrøm. When it reached its greatest size around 1984, some 30–35 professional employees worked at DDC, with about 40 employees in total. By 1984, DDC had a budget of DKK 13 million, a substantial increase from its initial budget of DKK 1 million. Many of the engineers hired came from DTU and Copenhagen University. In the beginning the centre was housed in a building on the DTU campus, but then it became located in a converted textile mill along the Mølleåen, close to Lyngby centre.
The cube-inspired red logo of DDC was designed by Ole Friis, who in 1984 won the from the Danish Design Centre for it.

CHILL projects

During 1978, Bjørner became interested in creating a formal definition, using denotational semantics, of the CHILL programming language then under development.
Work on the formal definition of CHILL began that year based upon the request of Teleteknisk Forskningslaboratorium, assigned to a group under the Comité Consultatif International Téléphonique et Télégraphique and conducted at DTU, with some eighteen students working on the effort. Once DDC was established, the formal definition was completed there in 1980 and 1981. Opinions on the value of the effort differ: Bjørner has stated it discovered a definitional issue that led to the simplification of the language, while Remi Bourgonjon of Philips, the convener of the Implementors' Forum organized by the CCITT, thought the formal definition was too complicated and came too late to benefit CHILL compiler designers.
At the same time, a CHILL compiler was developed, again starting before DDC but completed by it and TFL. It was developed using formal methods. The two organisations made the compiler publicly available and it would have an important role in education concerning the CHILL language. It was also adapted by British firm Imperial Software Technology with a new code generator and found use by GEC and others during the 1980s.
A joint project that GEC and DDC carried out in the early 1980s was to investigate the incorporation of CHILL into an Ada Programming Support Environment, to support projects that used both languages. DDC's part of the project used an examination of the denotational semantics of both languages and concluded that such an integration was technically feasible.
DDC continued to be involved in publishing papers at CHILL conferences during the first half of the 1980s, but not after that.

Ada projects

The advent of the U.S. Defense Department sponsorship of the Ada programming language during the 1979–80 period led to European interest in the new language as well, and the Commission of the European Communities decided to allocate funding for a European Ada compiler and runtime system. A consortium of Olivetti from Italy and DDC and Christian Rovsing from Denmark submitted a bid that in early 1981 won out over a previously favored bid from a French–German consortium; half of the funding would come from the CEC and half from Danish sources. Ole N. Oest was transferred from the Danish Defence Research Establishment to DDC to manage the Ada work.
DDC was responsible for developing a Portable Ada Programming System. Requirements included hosting the Ada compiler on a small, 16-bit minicomputers such as the Christian Rovsing CR80D and Olivetti M40, among other platforms, and being able to fit within 80 Kb code and 110 Kb data. As a result, the compiler was constructed of many passes, in this case six for the front end alone, with linearized trees stored in files as the representation between passes.
The compiler creation process went through four steps: development of a formal specification of Ada, development of a formal specification of the compiler components; development of more detailed formal specifications of particular compiler passes; implementation of these specifications in Ada itself. The general idea was to prove that the implementation was equivalent to the specification. Well-formedness criteria were used to supply additional constraints on operations beyond what was defined by the abstract syntax. The first step in the process, a formal specification for Ada, had already been started by five students at DTU in 1980 as part of their master's theses.
Ada was a difficult language to implement and early compiler projects for it often proved disappointments. But the DDC compiler proved successful and it was first validated on a VAX/VMS system in September 1984. As such it was the first European Ada compiler to meet this mark. At that point about 44 person-years of development work had gone into it. The defect rate and maintenance costs would prove to be significantly lower for the compiler than for the software industry average.
Attention regarding DDC's use of VDM in compiler design led to interest from other computer manufacturers and sales were made of what became known as the DDC OEM Compiler Kit. The compiler system offered two points for retargeting, a high-level tree-structured intermediate language and a sequence of instructions for an abstract stack machine; the latter meant shorter project times but usually not the most optimized generated code. The first such OEM sale was to Nokia, for rehosting on the Nokia MPS 10. The second, with a contract made in February 1984, was with Honeywell Information Systems in Boston.
The compiler was thus rehosted and retargeted to the Honeywell DPS6 and validated in November 1984.
In addition, cross compilers began to be developed, with DDC doing one from VAX/VMS to the Intel 8086, beginning what would become a successful line of products. In December 1984, DDC signed a contract with Advanced Computer Techniques in New York, based on a license royalty arrangement. They began using the DDC front end to develop a cross-compiler for the MIL-STD-1750A architecture, which would become a reasonably successful product with a number of customers.
Success of the Ada project led to a separate company being formed in 1985, called DDC International A/S, with the purpose of commercializing the Ada compiler system product. Oest was named the managing director of DDC International. A year later DDC-I, Inc. followed in the United States.
Concurrent with the compiler work, there was a push on various fronts to provide a formal definition of Ada, with several different approaches and metalanguages tried. Some Europeans argued that such a task was critical and that it was the only basis upon which an ISO standard for the language should be published. The CEC sponsored this work and the contract was won by DDC in partnership with two Italian entities, the Istituto di Elaborazione dell’Informazione in Pisa and the Consorzio per la Ricerca e le Applicazioni di Informatica in Genoa, with work beginning in 1984. Additional consulting on the project was provided by staff at the University of Genoa, the University of Pisa, and at DTU. The work built up the previous formal definitions that had been done at DTU and by DDC at the beginning of its Ada compiler project, but further work was needed the define the entire language and Meta-IV had to be extended in places or alternate approaches taken. This effort culminated in the 1987 publication of the full formal definition of Ada, encompassing three separate publications and eight volumes in total. While this effort did lead to a better understanding of the language and a number of clarifications to it being made, in the end the ultimate definition of the language remained the natural language one in the Ada Language Reference Manual.

RAISE projects

The use of VDM in the CHILL and Ada projects revealed the need for improvements in formal specification techniques, and in 1983 DDC conducted a Formal Methods Appraisal study, producing a number of requirements that a formal specification language should embody.
Following that DDC was awarded a CEC contract to develop a successor to VDM, which was called RAISE. This was done in consortium with STC Technology of Great Britain, which helped in the creation of the new technology, and with Nordisk Brown Boveri of Denmark and International Computers Limited of Britain, which exercised it in industrial settings. The project involved some 120 person-years of effort and sought to create a wide-spectrum language intended to handle every level from the initial, high-level abstract one down to one level above programming. It sought to remedy VDM's weaknesses with respect to modularity, concurrency, and lack of tools, and it also sought to unify approaches taken in the likes of Z notation, CSP, Larch, and OBJ.
The project produced not just the RAISE Specification language but also a description of the RAISE Method, describing best practices as how to use the new technology. Also produced was a RAISE toolset.

Other projects

In 1981 DDC, in conjunction with some of its members, conducted a study of the many office automation initiatives and products then available and published a taxonomy and terminology guide that analysed the domain. They then specified a generic office automation system using both VDM and informal language.
Later during 1983–87, DDC worked as a subcontractor to member ØK Data on the Functional Analysis of Office Requirements project under
ESPRIT.
DDC also gave courses and seminars in various software development topics, and starting in 1987, initiated a Danish-language quarterly publication Cubus which discussed various technical and scientific topics in an effort to engage in technology transfer.

Conclusion and legacy

During the centre's existence, some of the constituent members lost interest in its work, with no need for the CHILL or Ada compilers and the RAISE work too ambitious for their use. General acceptance of Ada as a language underperformed expectations and Ada product sales by DDC-I did not provide sufficient profits to allow money to flow to DDC. With sustained funding becoming a problem, in 1989 Dansk Datamatik Center was closed down.

Work on the Ada products was carried on by DDC-I, where it was used in many high-visibility aerospace and similar projects. The best-known of these was the Airplane Information Management System flight software for the Boeing 777 airliner.
Subsequent developers of the DDC-I Ada compiler were often not as well versed in formal methods as the original developers. The Ada products would still be generating revenue for DDC-I into the 2010s.
DDC's work and staff on RAISE were transferred to Computer Resources International in 1988. They used it as the basis for the European ESPRIT II LaCoS project in the 1990s. The RAISE effort was subsequently sold to Terma A/S, who use it as part of work for the European Space Agency and various defense industry projects.
Somewhat ironically, DDC had relatively little involvement with the Nordic software world, because it relied on European Union-based partners and funding and Denmark was the only Nordic country in the EU at the time. Nor did the Danish financial sector ever show an interest in DDC's work. In looking back, the founders of the centre have stated that, "Where DDC failed was to major Danish companies of the benefits of using reliable software development based on formal methods. " However, they believe that their work was still beneficial in making Danish technology firms aware of modern software development approaches and in seeding them with as many as a hundred software designers and developers who had worked at DDC, and that in any case, "DDC completed a large number of projects with better performance and higher product quality than was common in the 1980s." In a 2014 survey of forty years of formal methods efforts, Bjørner and Klaus Havelund lamented that adoption of formal methods has not become widespread in the software industry and referred to the DDC Ada compiler as an unsung success story of the value of such use.