Safety Concept for a Mixed Criticality On-Board Software System ∗ | Publicación