Modelling and Analysing ERTMS Hybrid Level 3 with the mCRL2 Toolset

  • Maarten Bartholomeus
  • Bas LuttikEmail author
  • Tim Willemse
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 11119)


ERTMS Hybrid Level 3 is a recent proposal for a train control system specification that serves to increase the capacity of the railway network by allowing multiple trains with an integrity monitoring system and a GSM-R connection to the trackside on a single section. In this paper we model the principles of ERTMS Hybrid Level 3 in the \(\mathrm {mCRL2}\) process algebra and perform an analysis with its associated toolset. Our analysis has resulted in suggestions for improvement of the principles that will be taken into account in the next version of the specification.


  1. 1.
    Berger, U., James, P., Lawrence, A., Roggenbach, M., Seisenberger, M.: Verification of the European rail traffic management system in real-time maude. Sci. Comput. Program. 154, 61–88 (2018)CrossRefGoogle Scholar
  2. 2.
    Canonico, R., Marrone, S., Nardone, R., Vittorini, V.: A framework to evaluate 5G networks for smart and fail-safe communications in ERTMS/ETCS. In: Fantechi, A., Lecomte, T., Romanovsky, A.B. (eds.) RSSRail 2017. LNCS, vol. 10598, pp. 34–50. Springer, Cham (2017). Scholar
  3. 3.
    Cimatti, A.: Formal verification and validation of ERTMS industrial railway train spacing system. In: Madhusudan, P., Seshia, S.A. (eds.) CAV 2012. LNCS, vol. 7358, pp. 378–393. Springer, Heidelberg (2012). Scholar
  4. 4.
    Cranen, S., Luttik, B., Willemse, T.A.C.: Evidence for fixpoint logic. In: CSL, vol. 41. LIPIcs, pp. 78–93. Schloss Dagstuhl - Leibniz-Zentrum fuer Informatik (2015)Google Scholar
  5. 5.
    Cunha, A., Macedo, N.: Validating the hybrid ERTMS/ETCS level 3 concept with electrum. In: Butler, M., Raschke, A., Hoang, T.S., Reichl, K. (eds.) ABZ 2018. LNCS, vol. 10817, pp. 307–321. Springer, Cham (2018). Scholar
  6. 6.
    EEIG ERTMS Users Group. Hybrid ERTMS/ETCS Level 3. Ref: 16E045, Version: 1A, 14 July 2017.
  7. 7.
    Fantechi, A.: Twenty-five years of formal methods and railways: what next? In: Counsell, S., Núñez, M. (eds.) SEFM 2013. LNCS, vol. 8368, pp. 167–183. Springer, Cham (2014). Scholar
  8. 8.
    Furness, N., van Houten, H., Arenas, L., Bartholomeus, M.: ERTMS Level 3: the game-changer. IRSE News 232, 2–9 (2017)Google Scholar
  9. 9.
    Groote, J.F., Mousavi, M.R.: Modeling and Analysis of Communicating Systems. MIT Press (2014)Google Scholar
  10. 10.
    Mammar, A., Frappier, M., Tueno Fotso, S.J., Laleau, R.: An Event-B model of the hybrid ERTMS/ETCS level 3 standard. In: Butler, M., Raschke, A., Hoang, T.S., Reichl, K. (eds.) ABZ 2018. LNCS, vol. 10817, pp. 353–366. Springer, Cham (2018). Scholar
  11. 11.
    Platzer, A., Quesel, J.-D.: European train control system: a case study in formal verification. In: Breitman, K., Cavalcanti, A. (eds.) ICFEM 2009. LNCS, vol. 5885, pp. 246–265. Springer, Heidelberg (2009). Scholar
  12. 12.
    Vu, L.H., Haxthausen, A.E., Peleska, J.: Formal modelling and verification of interlocking systems featuring sequential release. Sci. Comput. Program. 133, 91–115 (2017)CrossRefGoogle Scholar
  13. 13.
    Wesselink, W., Willemse, T.A.C.: Evidence extraction from Parameterised Boolean Equation Systems. In: Benzmüller, C., Otten, J. (eds.) ARQNL, vol. 2095. CEUR Workshop Proceedings, pp. 86–100 (2018).

Copyright information

© Springer Nature Switzerland AG 2018

Authors and Affiliations

  • Maarten Bartholomeus
    • 1
  • Bas Luttik
    • 2
    Email author
  • Tim Willemse
    • 2
  1. 1.ProRailUtrechtThe Netherlands
  2. 2.Eindhoven University of TechnologyEindhovenThe Netherlands

Personalised recommendations