SLIDE 1 Formal Verification of the FTTRS Mechanisms for the Consistent Update
Daniel Bujosa, Sergi Arguimbau, Patricia Arguimbau, Julián Proenza, Manuel Barranco
SLIDE 2
Critical Adaptive Distributed Embedded Systems (ADESs) are able to automatically adjust their internal strategies to respond appropriately to changes in a dynamic environment
2
SLIDE 3
3
SLIDE 4
ADES communication subsystem has to be real-time and reliable and has to provide flexibility
4
SLIDE 5 flexibility? real-time flexibility: support different types of real-time traffic
- perational flexibility: support changes in the
traffic and its real-time requirements without interrupting the communication services
5
SLIDE 6
Flexible-Time-Triggered-Replicated Star (FTTRS) is the only highly reliable network that supports both real-time flexibility and operational flexibility
6
SLIDE 7
master multi-slave publisher-subscriber paradigm
7
FTT
SLIDE 8
master multi-slave publisher-subscriber paradigm
8
FTT
SLIDE 9
master multi-slave publisher-subscriber paradigm
9
FTT
SLIDE 10
master multi-slave publisher-subscriber paradigm
10
FTT real-time flexibility
SLIDE 11
master multi-slave publisher-subscriber paradigm
11
FTT Schedule Update Mechanism
SLIDE 12 master multi-slave publisher-subscriber paradigm
12
FTT Schedule Update Mechanism
UR
SLIDE 13
master multi-slave publisher-subscriber paradigm
13
FTT Schedule Update Mechanism
admission control
SLIDE 14 master multi-slave publisher-subscriber paradigm
14
FTT Schedule Update Mechanism
SC SC
SLIDE 15 master multi-slave publisher-subscriber paradigm
15
FTT Schedule Update Mechanism =
SLIDE 16 master multi-slave publisher-subscriber paradigm
16
FTT FTT
switched Ethernet
SLIDE 17
17
FTTRS duplicated and interconnected full-duplex switched-Ethernet Star
SLIDE 18 18
FTTRS tolerate permanent and temporary non-malicious
faults duplicated and interconnected full-duplex switched-Ethernet Star
SLIDE 19 19
FTTRS duplicated and interconnected full-duplex switched-Ethernet Star tolerate permanent and temporary non-malicious
faults
SLIDE 20
20
FTTRS they must guarantee consistency for the Schedule Update Mechanism
SLIDE 21
21
FTTRS they must guarantee consistency for the Schedule Update Mechanism Consistent Schedule Update Mechanism
SLIDE 22
to formally verify the correctness of the Consistent Schedule Update Mechanism
22
SLIDE 23
UPPAAL
23
SLIDE 24
results no deadlocks schedule is always consistent
24
SLIDE 25
conclusions
25
+ dependable
SLIDE 26
26
SLIDE 27 Formal Verification of the FTTRS Mechanisms for the Consistent Update
Daniel Bujosa, Sergi Arguimbau, Patricia Arguimbau, Julián Proenza, Manuel Barranco