Formal Specification and Analysis of AFDX Redundancy Management Algorithms

Reliable communication among avionic applications is a crucial prerequisite for today's all-electronic fly-by-wire aircraft technology. The AFDX switched Ethernet has been developed as a scalable, cost-effective network, based upon IEEE 802.3 Ethernet. It uses redundant links to increase the availability. Typical consensus strategies for the redundancy management task are not feasible, as they introduce too heavy delays. In this paper, we formally investigate AFDX redundancy management algorithms, making use of Lamport's Temporal Logic of Actions (TLA). Furthermore, we present our experiences made with TLA+ and the TLA+ model checker TLC.

[1]  Leslie Lamport,et al.  The temporal logic of actions , 1994, TOPL.

[2]  Robert W. Floyd,et al.  Assigning meaning to programs , 1967 .

[3]  Sean Riley,et al.  Switched, Fast, and Gigabit Ethernet, Third Edition , 1998 .

[4]  Walter J. Goralski.  Introduction to ATM Networking , 1995 .

[5]  Fred Kröger,et al.  Temporal Logic of Programs , 1987, EATCS Monographs on Theoretical Computer Science.

[6]  Neeraj Suri,et al.  On simplifying modular specification and verification of distributed protocols , 2001, Proceedings Sixth IEEE International Symposium on High Assurance Systems Engineering. Special Topic: Impact of Networking.

[7]  Amir Pnueli,et al.  The temporal logic of programs , 1977, 18th Annual Symposium on Foundations of Computer Science (sfcs 1977).

[8]  George J. Milne,et al.  Correct Hardware Design and Verification Methods , 2003, Lecture Notes in Computer Science.

[9]  Adrianna Alexander.  Komposition temporallogischer Spezifikationen: Spezifikation und Verifikation von Systemen mit Temporal Logic of Distributed Actions , 2006 .

[10]  Leslie Lamport,et al.  Model Checking TLA+ Specifications , 1999, CHARME.

[11]  Leslie Lamport,et al.  Specifying Systems: The TLA+ Language and Tools for Hardware and Software Engineers [Book Review] , 2002, Computer.

[12]  Zohar Manna,et al.  The Temporal Logic of Reactive and Concurrent Systems , 1991, Springer New York.