Abstract:Purpose: Recent advancements in technology have enabled railway organizations to shift from manual to computer based automated interlocking systems for increasing their efficiency and profits. Since automated systems are complex and interlocking systems are safety critical systems, these systems should be modeled and verified against safety requirements to weed out any design bugs which might lead to catastrophes during their system life cycles. In this study, we model software based automated interlocking con… Show more
“…For example, Literature [8] proposed the MPN (Mobile Petri Net) approach based on the Mobile intelligent agent and Petri Net, which was used to model the interlocking system and verify it by reachability graph. Literature [9] established the time automata model of interlocking system using UPPAAL software and verified the safety related properties. In the literature [10] the model of interlocking system which accommodated the sequence release was built, using a combination of SMT (Satisfiability Modulo theory) based Bounded Model Check and inductive reasoning, the safety properties were verify.…”
Railway interlocking system is a typical safety-critical system, design defects of the system will pose the great risks on the safety and affect the operation efficiency of the railway station. Formal method is an important approach to verify the design requirement and to get the reliable logic for coding. By analysing the requirement of railway interlocking system, the properties of specification and the events of system's function were obtained, and then a multilayer formal model using the Event-B language and refinement strategy was established. The safety attributes of the system were verified and the formal model was refined based the theorem proving. Taking a real railway station as example, the contradictions of the axioms and the deadlock of the model were checked, as well as the correctness of the interlocking data was validated. Finally, the correctness of the model function was tested by simulation. We developed a formal prototype model for the general interlocking system and proposed an approach of data validation for the real station with the interlocking table.
“…For example, Literature [8] proposed the MPN (Mobile Petri Net) approach based on the Mobile intelligent agent and Petri Net, which was used to model the interlocking system and verify it by reachability graph. Literature [9] established the time automata model of interlocking system using UPPAAL software and verified the safety related properties. In the literature [10] the model of interlocking system which accommodated the sequence release was built, using a combination of SMT (Satisfiability Modulo theory) based Bounded Model Check and inductive reasoning, the safety properties were verify.…”
Railway interlocking system is a typical safety-critical system, design defects of the system will pose the great risks on the safety and affect the operation efficiency of the railway station. Formal method is an important approach to verify the design requirement and to get the reliable logic for coding. By analysing the requirement of railway interlocking system, the properties of specification and the events of system's function were obtained, and then a multilayer formal model using the Event-B language and refinement strategy was established. The safety attributes of the system were verified and the formal model was refined based the theorem proving. Taking a real railway station as example, the contradictions of the axioms and the deadlock of the model were checked, as well as the correctness of the interlocking data was validated. Finally, the correctness of the model function was tested by simulation. We developed a formal prototype model for the general interlocking system and proposed an approach of data validation for the real station with the interlocking table.
“…Remarks. The approach presented in this paper only focuses on the safeness of the proposed situation; meanwhile other approaches like [23,34] also consider other properties such as reachability of sections or the situation of the switches of the turnouts under a train (that shouldn't be changed under any circumstance to avoid derailments due to a premature change of the switch during the transit of the train). Another issue not treated in our model is the confirmation that the switches of the turnouts and the light signals have really been set to the ordered situation (something considered, for instance, in [34]; this latter approach uses a real-time system, a flexible approach with a wide variety of applications [21]).…”
Section: Comparison: Finalmentioning
confidence: 99%
“…On the other hand, our new approach can handle really big layouts (like the one in the example of Table 1, with, as said above, 300 sections and more than 200 turnouts and light signals, what is a far bigger layout than any one that we have found treated in real time). For instance, the authors of [34] mention that "our study is unique in the fact that modeling and verification of mid to large size railway yard is being undertaken in UPPAAL model checker (. .…”
The safety of railway networks is a very important issue. Roughly speaking, it can be split into safety along lines and safety of railway facilities such as stations, junctions, yards, etc. In modern networks the safety along lines is controlled by automatic block systems that do not give clearance to trains to enter a section (block) until the latter is detected to be unoccupied. Meanwhile, the safety within railway facilities is supervised by railway interlocking systems. Decision making in a railway interlocking is a very important issue which is considered to be very labour-intensive. Decision-making in both automatic block systems and railway interlocking systems, unlike road traffic light systems, is not based on time (they are not scheduling problems) but in space. Basically, two different trains should never be allowed to access the same section (whatever time has passed). There are many different approaches to automate decision-making in railway interlocking systems. The classic approaches are offline: only certain routes are allowed and their compatibility is decided in advance. Meanwhile, modern approaches make decisions in real time and are independent from the topology of the railway network, but can be applied only to small or medium size railway networks. Nevertheless, these last approaches have the following drawbacks: the performances are very dependent on the number of trains in the railway network; and are unsuitable to large networks since they take long time to be run. On the other hand, algebraic approaches based on computer algebra concepts have been used in artificial intelligence for implementing expert systems. In this paper we present a completely new algebraic model, based on these concepts of computer algebra that overcomes these drawbacks: the performance of our approach is independent of the number of trains in the railway network and also is suitable for large railway networks.
“…That paper shows that the SOFL provides an effective means to allow the developer to take a gradual process to build a formal specification for the system, but it does not show how to verify or validate the resulted specifications. In [16], timed automata is chosen to model the railyard interlocking system, and UPPAAL model checker is used to verify the safety properties of that system. On one hand, UPPAAL, unlike ASM, lacks structuring mechanism to achieve abstraction [20], and on the other hand, UPPAAL does not fully support CTL model checking [10].…”
State Machine (ASM) method is a formal specification and modeling technique that allows us to specify computational systems at the required abstraction level and facilitates formal analysis and verification. System Theoretic Process Analysis (STPA) is a semiformal hazard analysis method that aims to identify safety requirements emerging from the analysis of potential interactions among components and inadequate control in the system's design. In this paper, we combine these two techniques to develop a methodology capturing both the formal representation of ASM with the ability to generate safety properties from the STPA hazard analysis. This has the advantages of verifying the STPA requirements in a formal way, and giving insights for the improvement of the ASM specification, depending on these requirements. We illustrate our methodology by applying it to an insulin pump control system case study, showing what safety issues it highlights.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.