微信服务号

微信订阅号

2025年4月4日 23:08 星期五
首页 > 过刊浏览>2020年第31卷第5期 >1374-1391. DOI:10.13328/j.cnki.jos.005952
PDF HTML阅读 XML下载 导出引用 引用提醒
区域控制器的安全需求建模与自动验证
作者:
作者简介:

刘筱珊(1996-),女,山东平度人,硕士生,CCF学生会员,主要研究领域为需求工程,形式化方法;袁正恒(1990-),男,博士,主要研究领域为需求工程,形式化方法,安全攸关系统;陈小红(1982-),女,博士,副教授,CCF专业会员,主要研究领域为需求工程,形式化方法,安全攸关系统;陈铭松(1982-),男,博士,教授,博士生导师,CCF高级会员,主要研究领域为信息物理融合系统设计自动化,计算机体系结构,物联网技术,形式化方法;刘静(1964-),女,博士,教授,博士生导师,CCF专业会员,主要研究领域为可信软件,模型驱动式软件开发方法,面向服务的软件架构;周庭梁(1980-),男,博士,高级工程师,主要研究领域为安全苛求系统,可信测评,形式化方法.

通讯作者:

陈小红,E-mail:xhchen@sei.ecnu.edu.cn

基金项目:

国家重点研发计划（2018YFB2101300）；国家自然科学基金（61332008，61872147，61572195，61802251）；上海市经济和信息化委员会专项资金（160306）


Safety Requirements Modeling and Automatic Verification for Zone Controllers
Author:
Fund Project:

National Key Research and Development Program of China (2018YFB2101300); National Natural Science Foundation of China (61332008, 61872147, 61572195, 61802251); Special Fund of Shanghai Municipal Commission of Economy and Informatization (160306)

  • 摘要
    • | |
  • 访问统计
    • |
  • 参考文献 [43]
    • |
  • 相似文献 [20]
    • | | |
  • 文章评论
    摘要:

    轨道交通区域控制器是我国轨道交通信号系统选型的主流制式——基于通信的列车控制系统的核心子系统，其突出的安全性使得安全需求的形式化验证成为一个非常重要的问题.但是区域控制器自身的复杂性以及领域知识的繁杂难以掌握，使得形式化方法很难应用到安全需求的验证中去.针对这些问题，提出一种安全需求的自动验证方法，使用半形式化的问题框架方法来建模和分解安全需求，根据需求模型自动生成安全需求的验证模型和验证性质，在此基础上自动生成验证模型的Scade语言实现，并通过Design Verifier验证器对需求进行组合验证.最后，使用某个实际案例区域控制器的一个子问题CAL_EOA进行了研究，实验结果证明了该方法的可行性与有效性.它能够自动地将安全需求模型进行组合验证，改善了验证的效率.

    Abstract:

    The rail transit zone controller is a core sub-system of the communication-based train control system, which is the mainstream choice of China’s rail transit systems. Its outstanding safety makes formal verification of safety requirements a very important issue. However, the complexity of ZC itself and the rail transit domain knowledge make it difficult to apply formal methods to the verification of safety requirements. To solve these problems, this study proposes an automated verification approach for safety requirements. It models and decomposes safety requirements using a semi-formal Problem Frames approach, automatically generates verification model and verification properties, implements the verification problem with Scade automatically, and finally performs formal verification with a model checker Design Verifier. Finally, a sub-problem of zone controller, CAL_EOA from real case is studied. The experiment results show the feasibility and effectiveness of the proposed approach. The safety requirements are automatically decomposed and compositionally verified, thus greatly improving the verification efficiency.

    参考文献
    [1] Gao CH. Research on the key techniques of the independent and innovative CBTC. Urban Rapid Rail Transit, 2011,24(4):1-4(in Chinese with English abstract).
    [2] Lutz RR. Analyzing software errors in safety-critical embedded systems. In: Proc. of the IEEE Int’l Symp. on Requirements Engineering. San Diego: Computer Society, 1993. 126-133.
    [3] McDermid JA. Software safety: Where’s the evidence? In: Proc. of the 6th Australian Workshop on Safety Critical Systems and Software, Vol.3. St Lucia: Australian Computer Society, 2001. 1-6.
    [4] Barnat J, Bauch P, Benes N, Brim L, Beran J, Kratochvila T. Analysing sanity of requirements for avionics systems. Formal Aspects of Computing, 2016,28(1):45-63.
    [5] BS EN 50128. Railway Applications—Communication, Signaling and Processing Systems—Software for Railway Control and Protection Systems. British Standards Institute, 2011.
    [6] BS EN 50129. Railway Application—Communications, Signaling and Processing Systems—Safety Related Electronic Systems for Signaling. British Standards Institute, 2018.
    [7] Yang XW. Modeling and safety verification of zone controller in CBTC with UML [MS. Thesis]. Beijing: Beijing Jiaotong University, 2008(in Chinese with English abstract).
    [8] Yuan Z, Chen X, Liu J, Yu Y, Sun H, Zhou T, Jin Z. IEEE Std 1474.1-2004 IEEE Standard for Communications-based Train Control (CBTC) Performance and Functional Requirements. The Rail Transit Vehicle Interface Standards Committee, 2005.
    [9] Hartig K, Gerlach J, Soto J, Busse, J. Formal specification and automated verification of safety-critical requirements of a railway vehicle with Frama-C/Jessie. In: Proc. of the FORMS/FORMAT 2010. Berlin, Heidelberg: Springer-Verlag, 2011. 145-153.
    [10] Li R. Modeling and verification of zone controller in CBTC with SCADE [MS. Thesis]. Chengdu: Southwest Jiaotong University, 2015(in Chinese with English abstract).
    [11] Chhabra A, Sangroya A, Anantaram C. Formalizing and verifying natural language system requirements using Petri nets and context based reasoning. In: Proc. of the MRC@ IJCAI. Stockholm: CEUR-WS.org, 2018. 64-71.
    [12] Huang YN, Zhang PJ, Hou XP, Tang T. Modeling and verification method of ZC subsystem in urban rail transit based on hybrid automata. China Railway Science, 2016, 37(2):114-121(in Chinese with English abstract).
    [13] Fotso SJT, Frappier M, Laleau R, Mammar A. Modeling the hybrid ERTMS/ETCS level 3 standard using a formal requirements engineering approach. In: Butler MJ, ed. Proc. of the Int’l Conf. on Abstract State Machines, Alloy, B, TLA, VDM, and Z. Southampton: Springer-Verlag, 2018. 262-276.
    [14] Yang L, Chen YG. Modeling and verification of switch scene of zone controller based on MSC and UPPAAL. Railway Standard Design, 2018,62(5):171-174,179(in Chinese with English abstract).
    [15] Jackson M. Software Requirements and Specifications: A Lexicon of Practice, Principles and Prejudices. Addison-Wesley, 1995.
    [16] Jackson M. Problem Frames: Analyzing and Structuring Software Development Problems. Addison-Wesley, 2001.
    [17] Le Sergent T. SCADE: A comprehensive framework for critical system and software engineering. In: Proc. of the Int’l SDL Forum. Berlin, Heidelberg: Springer-Verlag, 2011. 2-3.
    [18] Yuan Z, Chen X, Liu J, Yu Y, Sun H, Zhou T, Zhi J. Simplifying the formal verification of safety requirements in zone controllers through problem frames and constraint-based projection. IEEE Trans. on Intelligent Transportation Systems, 2018,19(11): 3517-3528.
    [19] Jin Z, Chen X, Didar Z. Performing projection in problem frames using scenarios. In: Sulaiman S, ed. Proc. of the 2009 16th Asia- Pacific Software Engineering Conf. Batu Ferringhi: IEEE Computer Society, 2009. 249-256.
    [20] IEEE Recommended Practice for Communications-based Train Control (CBTC) System Design and Functional Allocations. IEEE Standard 1474.3-2008, 2008. 1-117.
    [21] Fowler M, Kobryn C. UML Distilled: A Brief Guide to the Standard Object Modeling Language. Addison-Wesley Professional, 2004.
    [22] Bu L, Li Y, Wang L, Li X. BACH: Bounded reachability checker for linear hybrid automata. In: Cimatti A, ed. Proc. of the 2008 Formal Methods in Computer-aided Design. Portland: IEEE, 2008. 1-4.
    [23] Gnaho C, Semmak F. Une extension SysML pour l’ingénierie des exigences dirigée par les buts. In: Proc. of the INFORSID. 2010. 277-292.
    [24] EEIG ERTMS Users Group. Hybrid ERTMS/ETCS Level 3. Principles Ref: 16E042, Version 1A, 2017.
    [25] Furness N, van Houten H, Arenas L, Bartholomeus M. ERTMS Level 3: The game-changer. IRSE News, 2017,232:2-9.
    [26] Abrial JR. Modeling in Event-B: System and Software Engineering. Cambridge University Press, 2010.
    [27] Abrial JR, Butler M, Hallerstede S, Hoang TS, Mehta F, Voisin L. Rodin: An open toolset for modelling and reasoning in Event-B. Int’l Journal on Software Tools for Technology Transfer, 2010,12(6):447-466.
    [28] Rudolph E, Graubmann P, Grabowski J. Tutorial on message sequence charts. Computer Networks and ISDN Systems, 1996,28(12): 1629-1641.
    [29] Bengtsson J, Larsen K, Larsson F, Pettersson P, Yi W. UPPAAL—A tool suite for automatic verification of real-time systems. In: Proc. of the Int’l Hybrid Systems Workshop. Berlin, Heidelberg: Springer-Verlag, 1995. 232-243.
    [30] Baudin P, Filliâtre JC, Marché C, Monate B, Moy Y, Prevosto V. ACSL: ANSI/ISO C specification language. Version 1.4. 2009. http://framac.cea.fr/download/acsl_1.4.pdf
    [31] Correnson L, Cuoq P, Puccetti A, Signoles J. Frama-C user manual, boron release. 2010. http://frama-c.com/download/user-manual-Boron-20100401.pdf
    [32] Aiello F, Garro A, Lemmens Y, Dutré S. Formal modeling of system properties for simulation-based verification of requirements: Lessons learned. In: Fierro D, ed. Proc. of the 3rd INCOSE Italia Conf. on Systems Engineering. Naples: CEUR-WS.org, 2017. 54-61.
    [33] Nguyen T. FORM-L: A modelica extension for properties modelling illustrated on a practical example. In: Proc. of the 10th Int’l Modelica Conf., Vol.96. Lund: Linköping University Electronic Press, 2014. 1227-1236.
    [34] Garro A, Tundis A, Bouskela D, Jardin A, Thuy N, Otter M, Buffoni L, Fritzson P, Sjölund M, Schamai W, Olsson H. On formal cyber physical system properties modeling: A new temporal logic language and a modelica-based solution. In: Proc. of the 2016 IEEE Int’l Symp. on Systems Engineering (ISSE). IEEE, 2016. 1-8.
    [35] Otter M, Thuy N, Bouskela D, Buffoni L, Elmqvist H, Fritzson P, Garro A, Jardin A, Olsson H, Payelleville M, Schamai W, Thomas E, Tundis A. Formal requirements modeling for simulation-based verification. In: Proc. of the 11th Int’l Modelica Conf., Vol.118. Versailles: Linköping University Electronic Press, 2015. 625-635.
    [36] Fritzson P, Engelson V. Modelica—A unified object-oriented language for system modeling and simulation. In: Proc. of the European Conf. on Object-oriented Programming. Berlin, Heidelberg: Springer-Verlag, 1998. 67-90.
    [37] Venkatesh R, Shrotri U, Krishna GM, Agrawal S. EDT: A specification notation for reactive systems. In: Fettweis GP, ed. Proc. of the 2014 Design, Automation & Test in Europe Conf. & Exhibition (DATE). Dresden: European Design and Automation Association, 2014. 1-6.
    附中文参考文献:
    [1] 郜春海.自主创新CBTC系统的核心技术研究.都市快轨交通,2011,24(4):1-4.
    [7] 杨旭文.基于UML的CBTC系统区域控制器的建模与安全性验证[硕士学位论文].北京:北京交通大学,2008.
    [10] 李容.基于SCADE的CBTC区域控制器建模与验证[硕士学位论文].成都:西南交通大学,2015.
    [12] 黄友能,张鹏基,侯晓鹏,唐涛.基于混成自动机的城市轨道交通ZC子系统建模与验证方法.中国铁道科学,2016,37(2):114-121.
    [14] 杨璐,陈永刚.基于MSC与UPPAAL的区域控制器切换场景建模与验证.铁道标准设计,2018,62(5):171-174,179.
    引证文献
    网友评论
    网友评论
    分享到微博
    发 布
引用本文

刘筱珊,袁正恒,陈小红,陈铭松,刘静,周庭梁.区域控制器的安全需求建模与自动验证.软件学报,2020,31(5):1374-1391

复制
分享
文章指标
  • 点击次数:2526
  • 下载次数: 6132
  • HTML阅读次数: 3730
  • 引用次数: 0
历史
  • 收稿日期:2019-09-01
  • 最后修改日期:2019-10-24
  • 在线发布日期: 2020-04-09
  • 出版日期: 2020-05-06
文章二维码
友情链接:中国科学院软件研究所中国计算机学会中国科学院国家自然科学基金委员会CCF数字图书馆Int'l J of Softw Info计算机系统应用
您是第19787978位访问者
版权所有：中国科学院软件研究所 京ICP备05046678号-3
地址：北京市海淀区中关村南四街4号,邮政编码：100190
电话：010-62562563 传真：010-62562533 Email：jos@iscas.ac.cn
技术支持：北京勤云科技发展有限公司

京公网安备 11040202500063号