View Related Documents

Abstract

This paper presents a reference semantics for a verication tool currently under development allowing to verify temporal properties of embedded control sys- tems modelled using the StateMate system. The semantics reported divert from others reported in the literature [24] by faithfully modelling the semantics as supported in the StateMate simulation tool. It divers from the recent paper by Harel and Naamad [8] by providing a compositional semantics, a prerequisite for the support of compositional verication methods, and by the degree of math- ematical rigour. We use a variant of synchronous transition systems introduced by Manna and Pnueli [18] as base model for our semantics.
The StateMate modelling language constructs covered in this paper are Activity charts, modelling the functional decomposition of a design into subunits called activities as well as the information flow between these, and Statecharts, modelling reactive behaviour using the well established approach of hierarchically organized state-machines. We strive for a verication approach which is compositional w.r.t. the decomposition of systems into subsystems. This will allow activities of “reasonable” complexity to be veried using symbolic model checking [5], [4], [19]. Larger activities will be veried on the basis of proof-systems relating properties of individual activities to properties of compound activities, using the well known assumption commitment paradigm [1], [21], [15]. A key topic for this paper is the construction of so called compositional models, which are “rich enough” to model the StateMate parallel composition by intersection of the innite traces generated by the components of the parallel composition. Roughly, compositional models have to provide room for padding arbitrary (but still “legal”) environment interactions into computations of a component. Alternatively, the construction of compositional models can be phrased as a requirement on the model to support a sufficiently rich class of observables for assumption-commitment style reasoning to be complete. In this sense, this paper derives the set of atomic propositions included as observables in the assumption- commitment style temporal logic supported by the verication tool.

Fulltext Preview

Image of the first page of the fulltext document