PUMA
Istituto di Scienza e Tecnologie dell'Informazione     
Banci M., Fantechi A. Geographical vs. functional modelling by statecharts of interlocking systems. In: International Workshop on Formal Methods for Industrial Critical Systems. FMICS 2004 (Linz, Austria, 20-21 September 2004). Proceedings, pp. 3 - 19. (Electronic Notes in Theoretical Computer Science). Elsevier, 2005.
 
 
Abstract
(English)
The development of computer controlled Railway Interlocking Systems (RIS) has seen an increasing interest in the use of Formal Methods, due to their ability to precisely specify the logical rules that guarantee the safe establishment of routes for trains through a railway yard. Recently, a trend has emerged about the use of statecharts as a standard formalism to produce precise specifications of RIS. This paper describes an experience in modelling a railway interlocking system using statecharts. Our study has addressed the problem from a 'geographical', distributed, point of view: that is, our model is composed by models of single physical entities (points, signals, etc..) that collectively implement the interlocking rules, without any centralized database of rules, which is on the other hand a typical way of implementing such a system (what we call 'functional' approach). One of the main aims of our approach, is to verify its ability to reduce revalidation efforts in the case of physical modifications to the yard; we show how the geographical approach may reduce this effort by requiring only the revalidation of those software modules that are actually affected by the changes.
Subject Formal specifications
Application of formal methods to railway signaling
Safety-critical systems
D.2.4 Software/Program Verification


Icona documento 1) Download Document PDF


Icona documento Open access Icona documento Restricted Icona documento Private

 


Per ulteriori informazioni, contattare: Librarian http://puma.isti.cnr.it

Valid HTML 4.0 Transitional