Mazzanti F., Spagnolo G. O., Della Longa S., Ferrari A.
ATS Deadlock Model Checking
In this paper we present the deadlock avoidance approach used in the design of the scheduling kernel of an Automatic Train Supervision (ATS) system. The ATS that we have designed prevents the occurrence of deadlocks by performing a set of runtime checks just before allowing a train to move further. For each train, the set of checks to be performed at each step of progress is retrieved from statically generated ATS configuration data. For the verification of the correctness of the logic used by the ATS and the validation of the constraints verified by the runtime checks, we define a formal model that represents the ATS behavior, the railway layout, and the planned service structure. We use this formal model to verify both the absence of deadlocks and absence of false positives (i.e., cases in which a train is unnecessarily disallowed to proceed). The verification is carried out by exploiting the UMC model checking verification framework locally developed at ISTI-CNR. © 2014 Springer International Publishing.
Source: FMICS 2014 - Formal Methods for Industrial Critical Systems. 19th International Conference, pp. 109–123, Florence, Italy, 11-12 September 2014
Publisher: Springer, Berlin , Germania
@inproceedings{oai:it.cnr:prodotti:294341, title = {Deadlock avoidance in train scheduling: A model checking approach}, author = {Mazzanti F. and Spagnolo G. O. and Della Longa S. and Ferrari A.}, publisher = {Springer, Berlin , Germania}, doi = {10.1007/978-3-319-10702-8_8}, booktitle = {FMICS 2014 - Formal Methods for Industrial Critical Systems. 19th International Conference, pp. 109–123, Florence, Italy, 11-12 September 2014}, year = {2014} }
Deadlock Avoidance in Train Scheduling: A Model Checking Approach
On the Industrial Uptake of Formal Methods in the Railway Domain
States and Events in KandISTI
Survey on Formal Methods and Tools in Railways: The ASTRail Approach
Tuning Energy Consumption Strategies in the Railway Domain: A Model-Based Approach