Abstract
This paper presents how three kinds of automata can be used in a complementary way to progressively design and assess the Failure Detection Isolation and Recovery (FDIR) mechanisms of a satellite. AltaRica language and tools are chosen to investigate how discrete mode automata can be used to assess the overall system architecture against highest level safety and dependability requirements. SCADE language and tools are chosen to model and verify the software part of the FDIR with synchronous data flows. HyTech language and tools are used to validate the hypotheses about the physical behaviours of components thanks to hybrid automata. Each case tries to highlight the relevant safety objectives, the granularity of model sufficient for these safety and dependability objectives and the model tractability with the existing tools.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Arnold, A., Point, G., Griffault, A., Rauzy, A.: The altarica formalism for describing concurrent systems. Fundamenta Informaticae 40(2), 109–124 (1999)
Bieber, P., Bougnol, C., Castel, C., Christophe Kehren, J.P., Metge, S., Seguin, C.: Safety assessment with altarica. Building the Information Society 156, 505–510 (2004)
Carloni, L.P., Passerone, R., Pinto, A.: Languages and tools for hybrid systems design, vol. 1. Now Pub. (2006)
Caspi, P., Pilaud, D., Halbwachs, N., Plaice, J.A.: Lustre: A declarative language for programming synchronous systems. In: Conference Record of the 14th Annual ACM Symp. on Principles of Programming Languages (1987)
Dormoy, F.X.: Scade 6: a model based solution for safety critical software development. In: Proceedings of the 4th European Congress on Embedded Real Time Software (ERTS 2008), pp. 1–9 (2008)
Frehse, G., Le Guernic, C., Donzé, A., Cotton, S., Ray, R., Lebeltel, O., Ripado, R., Girard, A., Dang, T., Maler, O.: SpaceEx: Scalable Verification of Hybrid Systems. In: Gopalakrishnan, G., Qadeer, S. (eds.) CAV 2011. LNCS, vol. 6806, pp. 379–395. Springer, Heidelberg (2011)
Griffault, A., Vincent, A.: Vérification de modèles altarica. In: MAJECSTIC: Ma-ni-fes-ta-tion des jeunes chercheurs STIC, Marseille (2003)
Halbwachs, N.: Synchronous programming of reactive systems, vol. 215. Springer (1993)
Halbwachs, N., Caspi, P., Raymond, P., Pilaud, D.: The synchronous data flow programming language lustre. Proceedings of the IEEE 79(9), 1305–1320 (1991)
Henzinger, T., Ho, P., Wong-Toi, H.: A User Guide to Hytech. In: Brinksma, E., Steffen, B., Cleaveland, W.R., Larsen, K.G., Margaria, T. (eds.) TACAS 1995. LNCS, vol. 1019, pp. 41–71. Springer, Heidelberg (1995)
Henzinger, T., Ho, P.H.: Hytech: The Cornell Hybrid Technology Tool. In: Antsaklis, P.J., Kohn, W., Nerode, A., Sastry, S.S. (eds.) HS 1994. LNCS, vol. 999, pp. 265–293. Springer, Heidelberg (1995)
Henzinger, T.A.: The theory of hybrid automata. In: Proceedings of the Eleventh Annual IEEE Symposium on Logic in Computer Science, LICS 1996, pp. 278–292. IEEE (1996)
Henzinger, T.A., Ho, P.H., Wong-Toi, H.: Hytech: A model checker for hybrid systems. International Journal on Software Tools for Technology Transfer (STTT) 1(1), 110–122 (1997)
Henzinger, T.A., Kopke, P.W., Puri, A., Varaiya, P.: What’s decidable about hybrid automata? Journal of Computer and System Sciences 57(1), 94–124 (1998)
Humbert, S., Bosc, J.M., Castel, C., Darfeuil, P., Dutuit, Y., Seguin, C.: Méthodologie de modélisation altarica pour la sûreté de fonctionnement d’un système de propulsion hélicoptère incluant une partie logicielle. Proceedings of Lambda Mu 15 (2006)
Mazzini, S., Puri, S., Mari, F., Melatti, I., Tronci, E.: Formal verification at system level. In: DASIA 2009: ESA SP-669 (2009)
Point, G.: AltaRica: Contribution à l’unification des méthodes formelles et de la sûreté de fonctionnement. PhD thesis, Université de Bordeaux (2000)
Point, G., Griffault, A.: On the partial translation of lustre programs into the altarica language and vice versa (2006)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Pintard, L., Seguin, C., Blanquart, JP. (2012). Which Automata for Which Safety Assessment Step of Satellite FDIR?. In: Ortmeier, F., Daniel, P. (eds) Computer Safety, Reliability, and Security. SAFECOMP 2012. Lecture Notes in Computer Science, vol 7612. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-33678-2_20
Download citation
DOI: https://doi.org/10.1007/978-3-642-33678-2_20
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-33677-5
Online ISBN: 978-3-642-33678-2
eBook Packages: Computer ScienceComputer Science (R0)