Jump to : Download | Abstract | Contact | BibTex reference | EndNote reference |
Download paper Adobe portable document format (pdf)
Copyright noticeThis material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.
We present a formal specification and verification of the automatic circuit-breaking behavior of an electric power transformer station, using the synchronous approach to reactive real-time systems implemented by the data-flow language Signal. Synchronous languages have a mathematical model that supports the various phases of the development of a control system: specification, verification, simulation, code generation, and implementation. The complex hierarchical, state-based and preemptive behavior of the power station controller is specified in Signalgti, an extension of Signal with notions of time intervals and preemptive tasks. To validate the specification, a graphical simulator is generated using Signal's execution environment, and the required behaviour is proven to be satisfied, using its proof method.
Hervé Marchand
hmarchan@irisa.fr
@article{marchand01a,
Author = {Marchand, H. and Rutten, E. and Le Borgne, M. and Samaan, M.},
Title = {Formal Verification of programs specified with SIGNAL : Application to a Power Transformer Station Controller},
Journal = {Science of Computer Programming},
Volume = {41},
Number = {1},
Pages = {85--104},
Month = {August},
Year = {2001}
}
Get EndNote Reference (.ref)