Abstract
To ensure dependability of on-board satellite systems, the designers should, in particular, guarantee correct implementation of the mode transition scheme, i.e., ensure that the states of the system components are consistent with the global system mode. However, there is still a lack of scalable approaches to formal verification of correctness of complex mode transitions. In this paper we present a formal development of an Attitude and Orbit Control System (AOCS) undertaken within the ICT DEPLOY project. AOCS is a complex mode-rich system, which has an intricate mode-transition scheme. We show that refinement in Event B provides the engineers with a scalable formal technique that enables both development of mode-rich systems and proof-based verification of their mode consistency.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Abrial, J.-R.: The B-Book. Cambridge University Press, Cambridge (1996)
Abrial, J.-R.: Modelling in Event-B. Cambridge University Press, Cambridge (2010)
Back, R., Sere, K.: Superposition refinement of reactive systems. Formal Aspects of Computing 8(3), 1–23 (1996)
Buth, B.: Analysing mode confusion: An approach using fdr2. In: Heisel, M., Liggesmeyer, P., Wittmann, S. (eds.) SAFECOMP 2004. LNCS, vol. 3219, pp. 101–114. Springer, Heidelberg (2004)
Butler, R.W.: An introduction to requirements capture using PVS: Specification of a simple autopilot. Technical report, NASA TM-110255 (May 1996)
DEPLOY Deliverable D20 – Report on Pilot Deployment in the Space Sector. FP7 ICT DEPLOY Project (January 2010), http://www.deploy-project.eu/
Dotti, F., Iliasov, A., Ribeiro, L., Romanovsky, A.: Modal Systems: Specification, Refinement and Realisation. In: Breitman, K., Cavalcanti, A. (eds.) ICFEM 2009. LNCS, vol. 5885, pp. 601–619. Springer, Heidelberg (2009)
European Cooperation for Space Standardization. Software general requirements ECSS-E-ST-40C (2009)
Heimdahl, M., Leveson, N.: Completeness and Consistency in Hierarchical State-Based Requirements. IEEE Transactions on Software Engineering 22(6), 363–377 (1996)
Iliasov, A., Laibinis, L., Troubitsyna, E.: An Event-B model of the Attitude and Orbit Control System, DEPLOY Publication Repository (2010), http://deploy-eprints.ecs.soton.ac.uk/
Iliasov, A., Troubitsyna, E., Laibinis, L., Romanovsky, A., Varpaaniemi, K., Ilic, D., Latvala, T.: Supporting Reuse in Event B Development: Modularisation Approach. In: Frappier, M., Glässer, U., Khurshid, S., Laleau, R., Reeves, S. (eds.) ABZ 2010. LNCS, vol. 5977, pp. 174–188. Springer, Heidelberg (2010)
Iliasov, A., Troubitsyna, E., Laibinis, L., Romanovsky, A., Varpaaniemi, K., Väisänen, P., Ilic, D., Latvala, T.: Verifying Mode Consistency for On-Board Satellite Software. In: SAFECOMP 2010, LNCS. Springer, Heidelberg (2010)
Industrial deployment of system engineering methods providing high dependability and productivity (DEPLOY). IST FP7 project, http://www.deploy-project.eu/
Leveson, N., Pinnel, L.D., Sandys, S.D., Koga, S., Reese, J.D.: Analyzing Software Specifications for Mode Confusion Potential. In: Johnson, C.W. (ed.) Proceedings of Workshop on Human Error and System Development, Glasgow, Scotland, pp. 132–146 (March 1997)
Lopatkin, I., Iliasov, A., Romanovsky, A.: On fault tolerance reuse during refinement. In: Proc. of 2nd International Workshop on Software Engineering for Resilient Systems (April 2010)
Rigorous Open Development Environment for Complex Systems (RODIN). Deliverable D7, Event B Language, http://rodin.cs.ncl.ac.uk/
RODIN modularisation plug-in. Documentation, http://wiki.event-b.org/index.php/Modularisation_Plug-in
Rugina, A.E., Blanquart, J.P., Soumagne, R.: Validating failure detection isolation and recovery strategies using timed automata. In: Proc. of 12th European Workshop on Dependable Computing, EWDC 2009, Toulouse (2009)
Rushby, J.: Using model checking to help discover mode confusion and other automation suprises. In: Reliability Engineering and System Safety, vol. 75, pp. 167–177 (2002)
The RODIN platform, http://rodin-b-sharp.sourceforge.net/
Varpaaniemi, K.: Event-B Project DepSatSpec015Model000. DEPLOY Publication Repository (January 2010), http://deploy-eprints.ecs.soton.ac.uk/168
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2010 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Iliasov, A. et al. (2010). Developing Mode-Rich Satellite Software by Refinement in Event B. In: Kowalewski, S., Roveri, M. (eds) Formal Methods for Industrial Critical Systems. FMICS 2010. Lecture Notes in Computer Science, vol 6371. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-15898-8_4
Download citation
DOI: https://doi.org/10.1007/978-3-642-15898-8_4
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-15897-1
Online ISBN: 978-3-642-15898-8
eBook Packages: Computer ScienceComputer Science (R0)