Int J Performability Eng ›› 2018, Vol. 14 ›› Issue (11): 2760-2768.doi: 10.23940/ijpe.18.11.p22.27602768

Previous Articles     Next Articles

Formal Verification of Double Two out of Two Computer Systems

Haonan Fenga, b, *, Xiaojiao Mac, Wei Fua, b, and Ming Pana, b   

  1. a Signal and Communication Research Institute, China Academy of Railway Sciences Corporation Limited, Beijing, 100081, China;
    b The Center of National Railway Intelligent Transportation System Engineering and Technology, Beijing, 100081, China;
    c China Railway Test and Certification Center, Beijing, 100081, China
  • Submitted on ;
  • Contact: * E-mail address: fenghaonan@rails.cn
  • About author:Haonan Feng is a senior engineer in the Signal and Communication Research Institute at China Academy of Railway Sciences Corporation Limited, China. His research interests include formal method and software verification.Xiaojiao Ma is an assistant professor in the China Railway Test and Certification Center, China. Her research interests include formal method and software verification.Wei Fu is an associate professor in the Signal and Communication Research Institute at China Academy of Railway Sciences Corporation Limited, China. His research interests include formal method and software verification.Ming Pan is an associate professor in the Signal and Communication Research Institute at China Academy of Railway Sciences Corporation Limited, China. His research interests include computer interlocking system development.

Abstract: The double two out of two safety computer system is widely used in China’s rail transit. To enhance the safety integrity level of such a system, safety related logic is described and modelled by FSP (finite state process) language in a simple and explicit manner. A new method based on LTS (labelled transition system) model checking is proposed for verifying the system safety properties. The LTS method is adapted to model system behaviors by means of LTSA (labelled transition system analyzer) software. It visualizes overall activity traces and is easy for analysis and safety verification by developers. Simulation and verification results indicate that the LTS method provides great assistance for designers to develop more efficient and reliable complex systems.

Key words: safety critical system, labelled transit system, double two out of two computer system, model checking, formal verification