Skip to main content
SpringerLink
Log in
Book cover

International Workshop on Formal Techniques for Safety-Critical Systems

FTSCS 2013: Formal Techniques for Safety-Critical Systems pp 195–211Cite as

On the Cloud-Enabled Refinement Checking of Railway Signalling Interlockings

  • Conference paper
  • First Online:

  • 516 Accesses

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 419))

Abstract

Railway signalling systems have received a great deal of attention from the formal methods community. One reason for this is that the domain is relatively accessible; another is that the safety analyses to be undertaken are often highly parallelizable. In this paper we describe a ‘cloud interface’ for the refinement checker, Failures Divergences Refinement (FDR), which has been motivated and validated by an approach to the modelling and analysis of railway signalling interlockings.

This is a preview of subscription content, log in via an institution.

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Notes

  1. 1.

    See http://www2.imm.dtu.dk/~dibj/fmerail/fmerail/.

  2. 2.

    See http://ssfmgroup.wordpress.com/.

  3. 3.

    We use the Ubuntu Enterprise Cloud, which uses KVM as the default hypervisor.

  4. 4.

    See http://www.dabeaz.com/ply.

  5. 5.

    12 track circuits, 4 points, 16 routes and 30 subroutes, giving rise to \(2^{12} \times 4^{4} \times 3^{16} \times 2^{30}\) states.

References

  1. Hansen, K.M.: Validation of a railway interlocking model. In: Naftalin, M., Denvir, T., Bertran, M. (eds.) FME 1994. LNCS, vol. 873, pp. 582–601. Springer, Heidelberg (1994)

    Google Scholar 

  2. Morley, M.J.: Safety in railway signalling data: a behavioural analysis. In: Joyce, J., Seger, C. (eds.) HUG 1993. LNCS, vol. 780, pp. 465–474. Springer, Heidelberg (1994)

    Google Scholar 

  3. Haxthausen, A.E., Peleska, J.: Formal development and verification of a distributed railway control system. IEEE Trans. Softw. Eng. 26(8), 687–701 (2000)

    Article  Google Scholar 

  4. Kanso, K., Moller, F., Setzer, A.: Automated verification of signalling principles in railway interlocking systems. Electron. Notes Theoret. Comput. Sci. 250(2), 19–31 (2009)

    Article  Google Scholar 

  5. James, P., Roggenbach, M.: Automatically verifying railway interlockings using SAT-based model checking. In: Proceedings of the 10th International Workshop on Automated Verification of Critical Systems (AVoCS 2010), Electronic Communication of the European Association of Software, Science and Technology, vol. 35 (2010)

    Google Scholar 

  6. Haxthausen, A.E., Peleska, J., Kinder, S.: A formal approach for the construction and verification of railway control systems. Form. Asp. Comput. 23(2), 191–219 (2011)

    Article  MATH  Google Scholar 

  7. Fantechi, A., Fokkink, W., Morzenti, A.: Some trends in formal methods applications to railway signalling. In: Gnesi, S., Margaria, T. (eds.) Formal Methods for Industrial Critical Systems: A Survey of Applications, pp. 63–82. Wiley, Hoboken (2013)

    Google Scholar 

  8. Bacherini, S., Fantechi, A., Tempestini, M., Zingoni, N.: A story about formal methods adoption by a railway signaling manufacturer. In: Misra, J., Nipkow, T., Sekerinski, E. (eds.) FM 2006. LNCS, vol. 4085, pp. 179–189. Springer, Heidelberg (2006)

    Chapter  Google Scholar 

  9. Winter, K., Robinson, N.J.: Modelling large interlocking systems and model checking small ones. In: Oudshoorn, M. (ed.) Proceedings of the 26th Australasian Computer Science Conference (ACSC 2003), Australian Computer Science, Communications, vol. 16, pp. 309–316 (2003)

    Google Scholar 

  10. Simpson, A.C., Woodcock, J.C.P., Davies, J.W.M.: The mechanical verification of solid state interlocking geographic data. In: Groves, L., Reeves, S. (eds.) Proceedings of Formal Methods Pacific 1997, pp. 223–242. Springer, Wellington (1997)

    Google Scholar 

  11. Hoare, C.A.R.: Communicating Sequential Processes. Prentice Hall, London (1985)

    MATH  Google Scholar 

  12. Roscoe, A.W.: Understanding Concurrent Systems. Springer, London (2010)

    Book  MATH  Google Scholar 

  13. Roscoe, A.W.: Model checking CSP. In: Roscoe, A.W. (ed.) A Classical Mind: Essays in Honour of C.A.R. Hoare. Prentice Hall, London (1994)

    Google Scholar 

  14. Roscoe, A.W., Gardiner, P.H.B., Goldsmith, M.H., Hulance, J.R., Jackson, D.M., Scattergood, J.B.: Hierarchical compression for model-checking CSP or how to check \(10^{20}\) dining philosophers for deadlock. In: Brinksma, E., Cleaveland, W.R., Larsen, K.G., Margaria, T., Steffen, B. (eds.) TACAS 1995. LNCS, vol. 1019, pp. 133–152. Springer, Heidelberg (1995)

    Google Scholar 

  15. Nurmi, D., Wolski, R., Grzegorczyk, C., Obertelli, G., Soman, S., Youseff, L., Zagorodnov, D.: The eucalyptus open-source cloud-computing system. In: Proceedings of the 9th IEEE/ACM International Symposium on Cluster Computing and the Grid (CCGRID 2009), pp. 124–131 (2009)

    Google Scholar 

  16. Brookes, S.D., Roscoe, A.W.: An improved failures model for communicating processes. In: Brookes, S.D., Roscoe, A.W., Winskel, G. (eds.) NSF-SERC 1985. LNCS, vol. 197, pp. 281–305. Springer, Heidelberg (1985)

    Google Scholar 

  17. Roscoe, A.W.: The Theory and Practice of Concurrency. Prentice Hall, London (1997)

    Google Scholar 

  18. Ferrari, A., Magnani, G., Grasso, D., Fantechi, A.: Model checking interlocking control tables. In: Schnieder, E., Tarnai, G. (eds.) Proceedings of Formal Methods for Automation and Safety in Railway and Automotive Systems 2010 (FORMS/FORMAT 2010), pp. 107–115. Springer, Heidelberg (2011)

    Google Scholar 

  19. Cribbens, A.: Solid state interlocking (SSI): an integrated electronic signalling system for mainline railways. IEE Proc. 134(3), 148–158 (1987)

    Google Scholar 

  20. British Rail Research: SSI data preparation guide. Published by British Railways Board. ELS-DOC-3080, Issue K of SSI8003-INT and supplements (1990)

    Google Scholar 

  21. Simpson, A.C.: Safety through security. DPhil thesis, Oxford University Computing Laboratory (1996)

    Google Scholar 

  22. Godefroid, P.: Partial-Order Methods for the Verification of Concurrent Systems: An Approach to the State-Explosion Problem. LNCS, vol. 1032. Springer, Heidelberg (1996)

    Book  Google Scholar 

  23. Roscoe, A.W., Armstrong, P.J., Pragyesh, : Local Search in Model Checking. In: Liu, Z., Ravn, A.P. (eds.) ATVA 2009. LNCS, vol. 5799, pp. 22–38. Springer, Heidelberg (2009)

    Google Scholar 

  24. Goldsmith, M.H., Martin, J.M.R.: The parallelisation of FDR. In: Proceedings of Workshop on Parallel and Distributed Model Checking (PDMC 2002) (2002)

    Google Scholar 

  25. Freitas, L., Woodcock, J.C.P.: FDR explorer. Form. Asp. Comput. 21(1–2), 133–154 (2009)

    Article  MATH  Google Scholar 

Download references

Acknowledgements

The authors would like to thank the anonymous reviewers for their helpful comments and constructive criticisms.

Author information

Authors and Affiliations

  1. Department of Computer Science, University of Oxford, Wolfson Building, Parks Road, Oxford, OX1 3QD, UK

    Andrew Simpson & Jaco Jacobs

Authors
  1. Andrew Simpson
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Jaco Jacobs
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Andrew Simpson .

Editor information

Editors and Affiliations

  1. AIST, Research Institute for Secure Systems, Amagasaki, Japan

    Cyrille Artho

  2. University of Oslo Department of Informatics, Oslo, Norway

    Peter Csaba Ölveczky

Rights and permissions

Reprints and permissions

Copyright information

© 2014 Springer International Publishing Switzerland

About this paper

Cite this paper

Simpson, A., Jacobs, J. (2014). On the Cloud-Enabled Refinement Checking of Railway Signalling Interlockings. In: Artho, C., Ölveczky, P. (eds) Formal Techniques for Safety-Critical Systems. FTSCS 2013. Communications in Computer and Information Science, vol 419. Springer, Cham. https://doi.org/10.1007/978-3-319-05416-2_13

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-05416-2_13

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-05415-5

  • Online ISBN: 978-3-319-05416-2

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation