Model Checking the FlexRay Startup Phase

Abstract

Abstract. This report describes a discrete-time model of the startup phase of a FlexRay network. The startup behaviour of this network is analysed in the presence of several faults. It is shown that in certain cases a faulty node can prevent the network from communicating altogether. One previously unknown scenario is uncovered.

Towards Modular Verification of Software Product Lines with mCRL2

“…The mCRL2 toolset has successfully been applied in various settings, among which the massive data collection system used for the high-energy experiments conducted at the large hadron collider of CERN [35] and the FlexRay communication protocol used in the automotive industry to equip car components with a reliable, high-bandwidth communication channel [13]. The toolset is open source and the associated boost license allows free use for any purpose.…”

An Overview of the mCRL2 Toolset and Its Recent Advances

“…The protocol is time-triggered, that is, the protocol relies on nodes (senders and receivers of messages) to have synchronised clocks, and operates by allocating bandwidth to senders based on a global, cyclic schedule. Using mCRL2, the FlexRay startup procedure, which ensures that activated nodes will find each other and will correctly initialise their local view on the global schedule, was modelled and checked for correctness [11]. The rich data language, and the modularity of the process language of mCRL2 allowed to specify the FlexRay protocol closely.…”

Using mCRL2 for the analysis of software product lines

“…The protocol is time-triggered, i.e., it relies on components to have synchronized clocks, and operates by allocating bandwidth based on a global, cyclic schedule. The FlexRay startup procedure, which ensures that activated components will find each other and will correctly initialize their local view on the global schedule, was modeled and checked for correctness using mCRL2 [9]. The expressivity of the mCRL2 language allowed the author of [9] to specify the protocol faithfully.…”

“…The FlexRay startup procedure, which ensures that activated components will find each other and will correctly initialize their local view on the global schedule, was modeled and checked for correctness using mCRL2 [9]. The expressivity of the mCRL2 language allowed the author of [9] to specify the protocol faithfully. The robustness of FlexRay was analyzed by injecting faults that may occur in the system.…”