Deductive Verification of UML Models in TLPVS

  • Tamarah Arons
  • Jozef Hooman
  • Hillel Kugler
  • Amir Pnueli
  • Mark van der Zwaag
Part of the Lecture Notes in Computer Science book series (LNCS, volume 3273)


In recent years, UML has been applied to the development of reactive safety-critical systems, in which the quality of the developed software is a key factor. In this paper we present an approach for the deductive verification of such systems using the PVS interactive theorem prover. Using a PVS specification of a UML kernel language semantics, we generate a formal representation of the UML model. This representation is then verified using tlpvs, our PVS-based implementation of linear temporal logic and some of its proof rules. We apply our method by verifying two examples, demonstrating the feasibility of our approach on models with unbounded event queues, object creation, and variables of unbounded domain. We define a notion of fairness for UML systems, allowing us to verify both safety and liveness properties.


Formal Verification Deductive Verification PVS UML State Machines Semantics Temporal Logic 


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.


  1. 1.
    Damm, W., Jonsson, B.: Eliminating queues from RT UML model representations. In: Damm, W., Olderog, E.-R. (eds.) FTRTFT 2002. LNCS, vol. 2469, pp. 375–393. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  2. 2.
    Damm, W., Josko, B., Pnueli, A., Votintseva, A.: Understanding UML: A formal semantics of concurrency and communication in Real-Time UML. In: de Boer, F.S., Bonsangue, M.M., Graf, S., de Roever, W.-P. (eds.) FMCO 2002. LNCS, vol. 2852, pp. 71–98. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  3. 3.
    Damm, W., Westphal, B.: Live and let die: LSC-based verification of UML-models. In: de Boer, F.S., Bonsangue, M.M., Graf, S., de Roever, W.-P. (eds.) FMCO 2002. LNCS, vol. 2852, pp. 99–135. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  4. 4.
    David, A., Moller, O., Yi, W.: Formal verification of UML statecharts with real-time extensions. In: Kutsche, R.-D., Weber, H. (eds.) FASE 2002. LNCS, vol. 2306, p. 218. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  5. 5.
    Harel, D., Gery, E.: Executable object modeling with statecharts. Computer (July 1997); Also in Proc. 18th Int. Conf. Soft. Eng., Berlin. IEEE Press, Los Alamitos (1996)Google Scholar
  6. 6.
    Harel, D., Kupferman, O.: On object systems and behavioral inheritance. IEEE Trans. Software Engineering 28(9), 889–903 (2002)CrossRefGoogle Scholar
  7. 7.
    Hooman, J., van der Zwaag, M.B.: A semantics of communicating reactive objects with timing. Technical report, EU project IST 33522 OMEGA (2004), Available at
  8. 8.
    Rhapsody. I-Logix, Inc., products web page,
  9. 9.
    Kesten, Y., Pnueli, A.: Verification by augmented finitary abstraction. Inf. and Comp. 163, 203–243 (2000)CrossRefMATHMathSciNetGoogle Scholar
  10. 10.
    Knapp, A., Merz, S., Rauh, C.: Model checking – timed UML state machines and collaborations. In: Damm, W., Olderog, E.-R. (eds.) FTRTFT 2002. LNCS, vol. 2469, p. 395. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  11. 11.
    Kyas, M., Fecher, H., de Boer, F.S., Jacob, J., van der Zwaag, M.B., Hooman, J., Arons, T., Kugler, H.: Formalizing UML models and OCL constraints in PVS. In: Semantic Foundations of Engineering Design Languages (SFEDL 2004). Electronic Notes in Theoretical Computer Science, Elsevier, Amsterdam (2004) (to appear)Google Scholar
  12. 12.
    Manna, Z., Pnueli, A.: Temporal Verification of Reactive Systems: Safety. Springer, New York (1995)CrossRefGoogle Scholar
  13. 13.
    Ober, I., Graf, S., Ober, I.: Validation of UML models via a mapping to communicating extended timed automata. In: Graf, S., Mounier, L. (eds.) SPIN 2004. LNCS, vol. 2989, pp. 127–145. Springer, Heidelberg (2004)CrossRefGoogle Scholar
  14. 14.
    Owre, S., Shankar, N., Rushby, J.M., Stringer-Calvert, D.W.J.: PVS System Guide, Menlo Park, CA (November 2001)Google Scholar
  15. 15.
    Paltor, I.P., Lilius, J.: vUML: A tool for verifying UML models. In: Proc. of the 14th IEEE Int. Conf. on Automated Software Engineering (ASE 1999), IEEE, Los Alamitos (1999)Google Scholar
  16. 16.
    Pnueli, A., Arons, T.: TLPVS: A PVS-based LTL verification system. In: Dershowitz, N. (ed.) Verification: Theory and Practice. LNCS, vol. 2772, pp. 598–623. Springer, Heidelberg (2004)CrossRefGoogle Scholar
  17. 17.
    OMEGA. EU project IST 33522 (Correct Development of Real-Time Embedded systems). Homepage,
  18. 18.
    Reggio, G., Astesiano, E., Choppy, C., Hussmann, H.: Analysing UML active classes and associated state machines – A lightweight formal approach. In: Maibaum, T. (ed.) FASE 2000. LNCS, vol. 1783, p. 127. Springer, Heidelberg (2000)CrossRefGoogle Scholar
  19. 19.
    Rational Rose Technical Developer. Rational, Inc., web page,
  20. 20.
    Sedletsky, E., Pnueli, A., Ben-Ari, M.: Formal verification of the Ricart-Agrawala algorithm. In: Kapoor, S., Prasad, S. (eds.) FST TCS 2000. LNCS, vol. 1974, pp. 325–335. Springer, Heidelberg (2000)CrossRefGoogle Scholar
  21. 21.
    Selic, B., Gullekson, G., Ward, P.: Real-Time Object-Oriented Modeling. John Wiley & Sons, New York (1994)MATHGoogle Scholar
  22. 22.
    Shankar, S., Asa, S.: Formal semantics of UML with real-time constructs. In: Stevens, P., Whittle, J., Booch, G. (eds.) UML 2003. LNCS, vol. 2863, pp. 60–75. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  23. 23.
    Telelogic TAU. Telelogic, Inc.,
  24. 24.
  25. 25.
    Traore, I., Aredo, D.B., Ye, H.: An integrated framework for formal development of open distributed systems. In: Proc. of ACM Symposium on Applied Computing, ACM SAC 2003 (2003)Google Scholar
  26. 26.
    UML. Documentation of the Unified Modeling Language. Available from the Object Management Group (OMG),

Copyright information

© Springer-Verlag Berlin Heidelberg 2004

Authors and Affiliations

  • Tamarah Arons
    • 1
  • Jozef Hooman
    • 2
    • 3
  • Hillel Kugler
    • 1
  • Amir Pnueli
    • 1
  • Mark van der Zwaag
    • 2
  1. 1.The John von Neumann Minerva Center for Verification of Reactive SystemsWeizmann Institute of ScienceRehovotIsrael
  2. 2.Department of Computer ScienceUniversity of NijmegenThe Netherlands
  3. 3.Embedded Systems InstituteEindhovenThe Netherlands

Personalised recommendations