Model Checking Safety-Critical Systems Using Safecharts

• Published in: IEEE transactions on computers Vol. 56; no. 5; pp. 692 - 705
• Main Authors: Hsiung, Pao-Ann, Chen, Yean-Ru, Lin, Yen-Hung
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.05.2007; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Automation; Avionics; Design engineering; extended timed automaton; Mathematical models; model checking; Risk; Safecharts; Safety; Safety-critical systems; Semantics; Studies; Systems design
• ISSN: 0018-9340; 1557-9956
• DOI: 10.1109/TC.2007.1021

With rapid developments in science and technology, we now see the ubiquitous use of different types of safety-critical systems in our daily lives such as in avionics, consumer electronics, and medical systems. In such systems, unintentional design faults might result in injury or even death to human beings. To make sure that safety-critical systems are really safe, there is a need to verify them formally. However, the verification of such systems is getting more and more difficult because designs are becoming very complex. To cope with high design complexity, currently, model-driven architecture design is becoming a well-accepted trend. However, existing methods of testing and standards conformance are restricted to implementation code, so they do not fit very well with model-based approaches. To bridge this gap, we propose a model-based formal verification technique for safety-critical systems. In this work, the model-checking paradigm is applied to the Safecharts model, which was used for modeling but not yet used for verification. Our contributions listed are as follows: first, the safety constraints in Safecharts are mapped to semantic equivalents in timed automata for verification. Second, the theory for safety constraint verification is proven and implemented in a compositional model checker (that is, the state-graph manipulator (SGM)). Third, prioritized and urgent transitions are implemented in SGM to model the risk semantics in Safecharts. Finally, it is shown that the priority-based approach to mutual exclusion of resource usage in the original Safecharts is unsafe and corresponding solutions are proposed. Application examples show the feasibility and benefits of the proposed model-driven verification of safety-critical systems