Refinement-Based Development of Timed Systems

Berthing, Jesper; Boström, Pontus; Sere, Kaisa; Tsiopoulos, Leonidas; Vain, Jüri

doi:10.1007/978-3-642-30729-4_6

Cited by 7 publications

(8 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The interval reuses abstract trigger variables (Figure 13). (8). The latter are precisely those indices that are triggered and aborted.…”

Section: Abort-to-response Transformationmentioning

confidence: 96%

“…VSPa resp = VSP resp VSPo trig ∪ (pAVI trig ∩ AVI abrt) (8) VSPa resp ts ∈ VSPa resp → N (9) Event vx, which previously served as an abort event for interval VSP, is refined for intervals VSPo and sAVI, but removed from the VSPa specification ( Figure 13). This is done by injecting a guard (10) to prevent the abortion of VSPa and to preserve invariant (8). Event vx parameter p AVI abrt holds the index of the active interval instance to be aborted.…”

Section: Abort-to-response Transformationmentioning

confidence: 99%

“…Berthing et al [8] propose a design work-flow with alternating data and timing constraint refinement steps.…”

Section: Related Workmentioning

confidence: 99%

“…We use interval-specific clocks rather than a single clock (as proposed by [10]) for all intervals in order to address the infinite state-space problem. In contrast to [8], our modelling approach is homogeneous in that we rely on Event-B for modelling both functional and timing aspects.…”

Section: Related Workmentioning

confidence: 99%

See 3 more Smart Citations

Modelling Complex Timing Requirements with Refinement

Sulskus

Poppleton

Rezazadeh

2016

2016 IEEE 17th International Conference on Information Reuse and Integration (IRI)

View full text Add to dashboard Cite

In the domain of formal modelling and verification of real-time safety-critical systems, our focus is on complexi.e. nested, interdependent and cyclic-timing constraints. In Event-B, we present methodological support for our concept of timing interval by defining a set of refinement transformations, designed for structured modelling of such timing constraints. All timing interval related aspects are generated by our tool. An example development, abstracted from our work modelling a cardiac pacemaker, serves to illustrate the use of the transformations. The development is undertaken, proved and model-checked in the Rodin tool-kit for Event-B.

show abstract

“…The interval reuses abstract trigger variables (Figure 13). (8). The latter are precisely those indices that are triggered and aborted.…”

Section: Abort-to-response Transformationmentioning

confidence: 96%

Section: Abort-to-response Transformationmentioning

confidence: 99%

“…Berthing et al [8] propose a design work-flow with alternating data and timing constraint refinement steps.…”

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

Modelling Complex Timing Requirements with Refinement

Sulskus

Poppleton

Rezazadeh

2016

2016 IEEE 17th International Conference on Information Reuse and Integration (IRI)

View full text Add to dashboard Cite

show abstract

“…Some attempts have been made to combine the advantages of both UPPAAL and Event-B. For example, Berthing et al [43], Vain et al [44] and Siavashi et al [45] combine Event-B behaviour with UPPAAL timing and use this combination to support refinement of timed specifications.…”

Section: Related Work and Comparisonmentioning

confidence: 99%

Validating and verifying the requirements and design of a haemodialysis machine using the Rodin toolset

Hoang

Snook

Salehi

et al. 2018

Science of Computer Programming

View full text Add to dashboard Cite

We present a formal specification and analysis of a haemodialysis machine (HD machine) in Event-B using the Rodin Toolset. The medical device domain is a particularly complex multidisciplinary field involving disparate branches of engineering, biological and medical fields as well as a critical patient-machine interface. Requirements include safety properties, process steps, human-machine interfaces, timing constraints, dynamic control algorithms, and design features. Our aim is to demonstrate that the Event-B based modelling, verification and validation tools deal with the variety of requirements involved in a typical medical device. We utilise ProR for structuring and tracking requirements. We model the HD machine using iUML-B state-machines and class diagrams, and build a corresponding BMotion Studio visualisation. For verification, we use both theorem proving and model checking techniques. We validate the design of the system using (i) diagrams to aid the modelling of the sequential properties of the requirements, and (ii) ProB-based animation and visualisation tools to explore the system's behaviour. Some of the safety properties involve dynamic behaviour which is difficult to verify in Event-B. For these properties we use (iii) co-simulation tools to validate against a continuous model of the physical behaviour. We conclude that the Event-B based modelling tools are particularly rich in verification and validation techniques and with the help of supporting tools for requirements tracking, are able to address the different kinds of requirements in a medical device.

show abstract

Integration of iUML-B and UPPAAL Timed Automata for Development of Real-Time Systems with Concurrent Processes

Shokri-Manninen

Tsiopoulos

Vain

et al. 2020

Rigorous State-Based Methods

Self Cite

View full text Add to dashboard Cite

Developing safety-critical systems requires to consider safety and real-time requirements in addition to functional requirements. Event-B is a formalism that is visualised by iUML-B and supports the development of functional aspects having rich verification and validation tools. However, it lacks well-established support for timing analysis. UPPAAL Timed Automata (UTA), on the other hand, address timing aspects of systems, and enable model checking reachability and timing properties. By integrating iUML-B and UTA, we combine the best verifying and validating practices from the two methods achieving a formal development of systems. We present the mapping for translating iUML-B constructs to UTA. The novel aspect is the use of a multi-process trigger-response pattern to address the modelling and verification of reachability properties of complex systems with concurrent processes. The approach is demonstrated on an airport control system, where timing, fairness, as well as liveness properties play a vital role in proving safety requirements. Keywords: Verification • Model checking • Timed automata • Event-B • iUML-B • UPPAAL • Real-time systems • Trigger-response patterns

show abstract

Refinement-Based Development of Timed Systems

Cited by 7 publications

References 11 publications

Modelling Complex Timing Requirements with Refinement

Modelling Complex Timing Requirements with Refinement

Validating and verifying the requirements and design of a haemodialysis machine using the Rodin toolset

Integration of iUML-B and UPPAAL Timed Automata for Development of Real-Time Systems with Concurrent Processes

Contact Info

Product

Resources

About