论文信息 - Model Checking Railway Interlocking Systems

Model Checking Railway Interlocking Systems

For supporting the analysis of railway interlocking systems in the early stage of their design we propose the use of model checking. We investigate the use of the formal modelling language CSP and the corresponding model checker FDR. In this paper, we describe the basics of this formalism and introduce our formal model of a railway interlocking system. Checking this model against the given safety requirements, the signalling principles, we get useful counter-examples that help to debug the given interlocking design. This work provides a successful example of how formal methods can be used to support the industrial development process.

Kirsten Winter | Kirsten Winter

[1] Cindy Eisner,et al. Using Symbolic Model Checking to Verify the Railway Stations of Hoorn-Kersenboogerd and Heerhugowaard , 1999, CHARME.

[2] Sérgio Vale Aguiar Campos,et al. Symbolic Model Checking , 1993, CAV.

[3] Stefania Gnesi,et al. Proving Safety Properties for Embedded Control Systems , 1996, EDCC.

[4] Rance Cleaveland,et al. Priorities for Modeling and Verifying Distributed Systems , 1996, TACAS.

[5] Jim Davies,et al. The Mechanical Verification of Solid State Interlocking Geographic Data , 1997 .

[6] Diego Latella,et al. An automatic SPIN validation of a safety critical railway control system , 2000, Proceeding International Conference on Dependable Systems and Networks. DSN 2000.

[7] Andrew William Roscoe,et al. The Theory and Practice of Concurrency , 1997 .

[8] Kenneth L. McMillan,et al. Symbolic model checking , 1992 .

[9] Kirsten Winter,et al. Model Checking Support for the ASM High-Level Language , 2000, TACAS.

[10] Neil J. Robinson,et al. Automatic generation and verification of design specifications , 2001 .