Model Checking the FlexRay Startup Phase

  • Sjoerd Cranen
Part of the Lecture Notes in Computer Science book series (LNCS, volume 7437)


The FlexRay protocol is an upcoming standard in automotive industry. Its specification is finalised and maintained by ISO. It is a time-triggered protocol that uses a fault-tolerant clock synchronisation mechanism. During a startup phase that should be resilient to certain faults, the clocks in the network are synchronised and the protocol is initialised. This paper presents a model of the startup phase of the protocol in the mCRL2 modelling language, and shows how model checking techniques can be used to check that the startup protocol fulfills the requirements. A previously unknown scenario is uncovered in which a single failing node can cause another node, or even the entire network, not to start up.


Model Check Startup Phase Faulty Node Frame Header Clock Tick 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.


  1. 1.
    Barsotti, D., Nieto, L., Tiu, A.: Verification of Clock Synchronization Algorithms: Experiments on a combination of deductive tools. Formal Aspects of Computing 19(3), 321–341 (2007)zbMATHCrossRefGoogle Scholar
  2. 2.
    Botaschanjan, J., Broy, M., Gruler, A., Harhurin, A., Knapp, S., Kof, L., Paul, W., Spichkova, M.: On the correctness of upper layers of automotive systems. Formal Aspects of Computing 20(6), 637–662 (2008)zbMATHCrossRefGoogle Scholar
  3. 3.
    Botaschanjan, J., Gruler, A., Harhurin, A., Kof, L., Spichkova, M., Trachtenherz, D.: Towards Modularized Verification of Distributed Time-Triggered Systems. In: Misra, J., Nipkow, T., Karakostas, G. (eds.) FM 2006. LNCS, vol. 4085, pp. 163–178. Springer, Heidelberg (2006)CrossRefGoogle Scholar
  4. 4.
    Broy, M., Stølen, K.: Specification and development of interactive systems: focus on streams, interfaces, and refinement. Springer (2001)Google Scholar
  5. 5.
    Cranen, S.: Model checking the flexray startup phase. Technical Report 12-01, Eindhoven University of Technology (2012)Google Scholar
  6. 6.
    Cranen, S., Keiren, J.J.A., Willemse, T.A.C.: Stuttering Mostly Speeds Up Solving Parity Games. In: Bobaru, M., Havelund, K., Holzmann, G.J., Joshi, R. (eds.) NFM 2011. LNCS, vol. 6617, pp. 207–221. Springer, Heidelberg (2011)CrossRefGoogle Scholar
  7. 7.
    Flexray consortium: FlexRay Preliminary Node Local Bus Guardian Specification v2.0.9 (2005)Google Scholar
  8. 8.
    Flexray consortium: FlexRay Requirements Specification v2.1 (2005)Google Scholar
  9. 9.
    Flexray consortium: FlexRay Protocol Specification v3.0.1 (2010)Google Scholar
  10. 10.
    Fontaine, P., Gupta, K., Marion, J., Merz, S., Nieto, L., Tiu, A.: Towards a combination of heterogeneous deductive tools for system verification: A case study on clock synchronization. In: APPSEM Workshop, Citeseer (2005)Google Scholar
  11. 11.
    Groote, J., Mateescu, R.: Verification of temporal properties of processes in a setting with data. In: AMAST, pp. 74–90 (1998)Google Scholar
  12. 12.
    ITU-T: Recommendation Z.100: Specification and Description Language (SDL) (1999)Google Scholar
  13. 13.
    Kühnel, C., Spichkova, M.: FlexRay und FTCom: Formale Spezifikation in FOCUS. Technical report, Technische Universität München (2006)Google Scholar
  14. 14.
    Kühnel, C., Spichkova, M.: Upcoming Automotive Standards for Fault-Tolerant Communication: FlexRay and OSEKTime FTCom. In: EFTS 2006 International Workshop on Engineering of Fault Tolerant Systems. Universite du Luxembourg, CSC: Computer Science and Communication (2006)Google Scholar
  15. 15.
    Lundelius, J., Lynch, N.: A new fault-tolerant algorithm for clock synchronization. In: Proc. 3rd ACM Symposium on Principles of Distributed Computing, p. 88. ACM (1984)Google Scholar
  16. 16.
    Malinský, J., Novák, J.: Verification of flexray start-up mechanism by timed automata. Metrology and Measurement Systems XVII(3), 461–480 (2010)CrossRefGoogle Scholar
  17. 17.
    Spichkova, M.: FlexRay: Verification of the FOCUS Specification in Isabelle/HOL. A Case Study. Technical report, Technische Universität München (2006)Google Scholar
  18. 18.
    Steiner, W.: An assessment of FlexRay 2.0 (safety aspects). Technical Report 45/2005, Technische Universität Wien (2005)Google Scholar
  19. 19.
    Steiner, W.: Model-checking studies of the FlexRay startup algorithm. Technical Report 57/200, Technische Universität Wien (2005)Google Scholar
  20. 20.
    Zhang, B.: On the Formal Verification of the FlexRay Communication Protocol. In: Automatic Verification of Critical Systems (AVoCS), pp. 184–189 (2006)Google Scholar
  21. 21.
    Zhang, B.: Specifying and Verifying Timing Properties of a Time-triggered Protocol for In-vehicle Communication. In: Proceedings of the 2008 Ninth ACIS International Conference on Software Engineering, Artificial Intelligence, Networking, and Parallel/Distributed Computing, pp. 467–472. IEEE Computer Society (2008)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2012

Authors and Affiliations

  • Sjoerd Cranen
    • 1
  1. 1.Eindhoven University of TechnologyThe Netherlands

Personalised recommendations