区域控制器的安全需求建模与自动验证  

Safety Requirements Modeling and Automatic Verification for Zone Controllers

作　　者：刘筱珊 袁正恒 陈小红[1] 陈铭松[1] 刘静[1] 周庭梁 LIU Xiao-Shan;YUAN Zheng-Heng;CHEN Xiao-Hong;CHEN Ming-Song;LIU Jing;ZHOU Ting-Liang(Shanghai Key Laboratory of Trustworthy Computing(East China Normal University),Shanghai 200062,China;CASCO Signal Co.,Ltd.,Shanghai 200071,China)

机构地区：[1]上海市高可信计算重点实验室(华东师范大学),上海200062 [2]卡斯柯信号有限公司,上海200071

出　　处：《软件学报》2020年第5期1374-1391,共18页Journal of Software

基　　金：国家重点研发计划(2018YFB2101300);国家自然科学基金(61332008,61872147,61572195,61802251);上海市经济和信息化委员会专项资金(160306)。

摘　　要：轨道交通区域控制器是我国轨道交通信号系统选型的主流制式--基于通信的列车控制系统的核心子系统,其突出的安全性使得安全需求的形式化验证成为一个非常重要的问题.但是区域控制器自身的复杂性以及领域知识的繁杂难以掌握,使得形式化方法很难应用到安全需求的验证中去.针对这些问题,提出一种安全需求的自动验证方法,使用半形式化的问题框架方法来建模和分解安全需求,根据需求模型自动生成安全需求的验证模型和验证性质,在此基础上自动生成验证模型的Scade语言实现,并通过DesignVerifier验证器对需求进行组合验证.最后,使用某个实际案例区域控制器的一个子问题CAL_EOA进行了研究,实验结果证明了该方法的可行性与有效性.它能够自动地将安全需求模型进行组合验证,改善了验证的效率.The rail transit zone controller is a core sub-system of the communication-based train control system, which is the mainstream choice of China’s rail transit systems. Its outstanding safety makes formal verification of safety requirements a very important issue. However, the complexity of ZC itself and the rail transit domain knowledge make it difficult to apply formal methods to the verification of safety requirements. To solve these problems, this study proposes an automated verification approach for safety requirements. It models and decomposes safety requirements using a semi-formal Problem Frames approach, automatically generates verification model and verification properties, implements the verification problem with Scade automatically, and finally performs formal verification with a model checker Design Verifier. Finally, a sub-problem of zone controller, CAL_EOA from real case is studied. The experiment results show the feasibility and effectiveness of the proposed approach. The safety requirements are automatically decomposed and compositionally verified, thus greatly improving the verification efficiency.

关 键 词：区域控制器 安全需求建模 自动验证 需求分解 组合验证 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]