Ensuring Safety with System Level Formal Modelling

Lecomte, Thierry; Comptier, Mathieu; Molinero, Julien; Sabatier, Denis

doi:10.1007/978-3-030-61467-6_25

Cited by 3 publications

(1 citation statement)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is not as flexible as black box testing, nevertheless black-box testing performed by an independent laboratory implies heavy industrial constraints. If the conformance is provided by a formal proof performed on a model of the candidate solution [13], the conformity assessment process looks more efficient. In fact, this kind of process is accepted by STRMTG (https://www.strmtg.developpement-durable.gouv.fr/), the French Technical service for ski lifts and guided transport, to assess metros in France.…”

Section: Figure 2 Use Case Diagram Of Goa2 Over Etcsmentioning

confidence: 99%

Engineering for Critical Systems: The Automatic Train Operation over European Train Control System for Freight Trains Use Case

Collart-Dutilleul,

Bon,

Bougacha

et al. 2023

IJTDI

View full text Add to dashboard Cite

Fulfilling norms is a way to respect all the safety properties embedded in norm specifications. Moreover, it provides interoperability qualities that are particularly relevant in the transport domain. The article proposes a modelling engineering approach using a semi-formal model phase to identify a multilayered decomposition of the system with domain experts. Then a transformation into formal models is used in order to verify and validate the behaviour with technical and safety experts. Propositions are illustrated on a case study from the transport domain: Automatic Train Operation (ATO) over European Train Control System (ETCS), also named AoE, for freight trains. ATO under the supervision of a human driver is sometimes presented as a first step toward autonomous train. This paper provides a system analysis of the available norms dealing with automatic train operation under driver supervision. The work focuses on the collaboration between an automatic software for braking and accelerating in the European normative and technological context, known as AoE. From the study of the available documents, we derive an architectural model of this global system containing on board automation and on track automated specific devices. The technical contribution is a proposition of an approach specifying a correct-by-construction software system. This software component respects the industrial norms of automated train. We explain how it is relevant to use a norm-based technical architecture, that allow drivers to identify various functioning phases where, depending on the overall context, they can let an automatic system drive the train or not.

show abstract

Section: Figure 2 Use Case Diagram Of Goa2 Over Etcsmentioning

confidence: 99%

Engineering for Critical Systems: The Automatic Train Operation over European Train Control System for Freight Trains Use Case

Collart-Dutilleul,

Bon,

Bougacha

et al. 2023

IJTDI

View full text Add to dashboard Cite

show abstract

Formal Methods for Distributed Computing in Future Railway Systems

Fantechi

Gnesi

Haxthausen

2020

Lecture Notes in Computer Science

View full text Add to dashboard Cite

 Users may download and print one copy of any publication from the public portal for the purpose of private study or research.  You may not further distribute the material or use it for any profit-making activity or commercial gain  You may freely distribute the URL identifying the publication in the public portal If you believe that this document breaches copyright please contact us providing details, and we will remove access to the work immediately and investigate your claim.

show abstract