Checking the TWIN Elevator System by Translating Object-Z to SMV

  • Sören Preibusch
  • Florian Kammüller
Part of the Lecture Notes in Computer Science book series (LNCS, volume 4916)


In the context of large scale industrial installations, model checking often fails to tap its full potential because of a missing link between a system’s specification and its functional and non-functional requirements, like safety. Our work bridges this gap by providing a translation from the formal specification language Object-Z to the SMV model checker input language to combine their advantages.

This paper focuses on the translation of the object-oriented features of Object-Z: operation promotion and communication between objects. We demonstrate the feasibility of our approach using the example of the TWIN Elevator system and embed the translation process in the industrial software production workflow.


Model Check Target Level Translation Process Translation Rule Twin System 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.


  1. 1.
    Amnell, T.: Code Synthesis for Timed Automata. Thesis, Uppsala University (2003)Google Scholar
  2. 2.
    The Community Z Tools project (2006),
  3. 3.
    Derrick, J., Smith, G.: Linear temporal logic and Z refinement. In: Rattray, C., Maharaj, S., Shankland, C. (eds.) AMAST 2004. LNCS, vol. 3116. Springer, Heidelberg (2004)Google Scholar
  4. 4.
    Duke, R., Rose, G.: Formal Object-Oriented Specification Using Object-Z. Cornerstones of Computing. MacMillan (2000)Google Scholar
  5. 5.
    International Organization for Standardization: ISO/IEC 13568:2002: Information technology – Z formal specification notation – Syntax, type system and semantics,
  6. 6.
    Kammüller, F.: Interactive Theorem Proving in Software Engineering. In: Habilitationsschrift, Technische Universität Berlin (2006)Google Scholar
  7. 7.
    Kammüller, F., Preibusch, S.: An Industrial Application of Symbolic Model Checking – The TWIN-Elevator Case Study. In: Informatik Forschung und Entwicklung. Springer, Heidelberg (accepted for publication, 2007)Google Scholar
  8. 8.
    Liu, S.: Formal Engineering for Industrial Software Development. Springer, Heidelberg (2004)zbMATHGoogle Scholar
  9. 9.
    McMillan, K.: Symbolic Model Checking. Kluwer Academic Publishers, Dordrecht (1995)Google Scholar
  10. 10.
    Preibusch, S.: TWIN Elevator System, Concise Object-Z Specification (2007)
  11. 11.
    Preibusch, S.: TWIN Elevator System, Concise Object-Z Specification (Translation to SMV) (2007),
  12. 12.
    Smith, G.: The Object-Z Specification Language. In: Advances in Formal Methods. Kluwer Academic Publishers, Dordrecht (2000)Google Scholar
  13. 13.
    Smith, G., Kammüller, F., Santen, T.: Encoding Object-Z in Isabelle/HOL. In: Bert, D., P. Bowen, J., C. Henson, M., Robinson, K. (eds.) B 2002 and ZB 2002. LNCS, vol. 2272. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  14. 14.
    Smith, G., Wildman, L.: Model Checking Z Specifications Using SAL. In: Treharne, H., King, S., C. Henson, M., Schneider, S. (eds.) ZB 2005. LNCS, vol. 3455. Springer, Heidelberg (2005)Google Scholar
  15. 15.
    Smith, G., Winter, K.: Proving temporal properties of Z specifications using abstraction. In: Bert, D., P. Bowen, J., King, S. (eds.) ZB 2003. LNCS, vol. 2651. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  16. 16.
    Software Design Group, MIT Computer Science and Artificial Intelligence Laboratory. The Alloy Analyzer (2007),
  17. 17.
    ThyssenKrupp Elevator. TWIN Report (2005),
  18. 18.
    Winter, K., Duke, R.: Model Checking Object-Z using ASM. In: Butler, M., Petre, L., Sere, K. (eds.) IFM 2002. LNCS, vol. 2335. Springer, Heidelberg (2002)Google Scholar
  19. 19.
    The World Wide Web Virtual Library: The Z notation. Tool support (2005),

Copyright information

© Springer-Verlag Berlin Heidelberg 2008

Authors and Affiliations

  • Sören Preibusch
    • 1
  • Florian Kammüller
    • 2
  1. 1.German Institute for Economic ResearchBerlin
  2. 2.Fakultät IV: Elektrotechnik und InformatikTechnische Universität BerlinBerlin

Personalised recommendations