基于MSC与UPPAAL的列控系统等级转换场景形式化验证.pdfVIP

第59卷 第2期 铁 道 标 准 设 计 Vol.59 No.2 2015年2月 RAILWAY STANDARD DESIGN Feb. 2015 文章编号:1004 2954(2015)02 0122 06 基于MSC与UPPAAL的列控系统等级 转换场景形式化验证 胡雪莲, 陶彩霞 (兰州交通大学自动化与电气工程学院,兰州 730070) 摘 要:等级转换是C3级列控系统的重要场景,是列控系统兼容性的集中体现,转换的成功与否直接关系到列车 的运行安全和行车效率。 因此,有必要对设计规范中所描述的转换过程进行形式化建模和验证,以保障系统的安 全性和实时性。 为保证设计规范与所建模型的一致性,采取消息顺序图(MSC)与时间自动机相结合的方式,建立 等级转换场景中C2级向C3级转换过程的MSC模型,并将其转换为时间自动机模型。 应用UPPAAL对模型的安 全性和受限活性进行仿真验证,结果表明设计规范中所描述的转换过程是安全可靠的,可以满足C3级列控系统的 兼容性和安全性要求。 关键词:CTCS; 等级转换;MSC; 时间自动机;UPPAAL; 建模 中图分类号:U285.21 文献标识码:A DOl:10.13238/ j.issn.1004-2954.2015.02.030 Formal Verification of Level Transition Process in Train Control System Based On MSC and UPPAAL Hu Xue-lian,Tao Cai-xia (School of Automation and Electricity Engineering,Lanzhou Jiaotong University,Lanzhou730070,China) Abstract:Level transition is one of the most important scenarios in CTCS-3 control system and the very reflection of its compatibility. The successful transition is directly related to train operation safety and transportation efficiency. Therefore,in order to guarantee the security and real-time performance of the system,it is necessary to formally build and verify a model of transition process described in the design specification. To ensure the consistency between of the design specification, the message sequence configure (MSC) is combinedwithtimedautomata,the MSCmodel isestablishedfor C2 to C3 transition process in level transition scenario and is transformed to timed automata model. Then the security and restricted activity of the model are simulated and verified by