Formal Verification of the FTTRS Mechanisms for the Consistent - PowerPoint PPT Presentation

Formal Verification of the FTTRS Mechanisms for the Consistent Update of the Traffic Schedule Daniel Bujosa , Sergi Arguimbau, Patricia Arguimbau, Julián Proenza, Manuel Barranco

Critical Adaptive Distributed Embedded Systems ( ADESs ) are able to automatically adjust their internal strategies to respond appropriately to changes in a dynamic environment 2

3

ADES communication subsystem has to be real-time and reliable and has to provide flexibility 4

flexibility? real-time flexibility : support different types of real-time traffic operational flexibility : support changes in the traffic and its real-time requirements without interrupting the communication services 5

Flexible-Time-Triggered-Replicated Star ( FTTRS ) is the only highly reliable network that supports both real-time flexibility and operational flexibility 6

FTT master multi-slave publisher-subscriber paradigm 7

FTT master multi-slave publisher-subscriber paradigm 8

FTT master multi-slave publisher-subscriber paradigm 9

FTT master multi-slave publisher-subscriber paradigm real-time flexibility 10

FTT master multi-slave publisher-subscriber paradigm Schedule Update Mechanism 11

FTT master multi-slave publisher-subscriber paradigm Schedule Update Mechanism UR 12

FTT master multi-slave publisher-subscriber paradigm admission control Schedule Update Mechanism 13

FTT master multi-slave publisher-subscriber paradigm Schedule Update Mechanism SC SC 14

FTT master multi-slave publisher-subscriber paradigm Schedule Update Mechanism = op. flexibility 15

FTT master multi-slave publisher-subscriber paradigm FTT on top of switched Ethernet 16

FTTRS duplicated and interconnected full-duplex switched-Ethernet Star 17

FTTRS duplicated and interconnected full-duplex switched-Ethernet Star tolerate permanent and temporary non-malicious operational hardware faults 18

FTTRS duplicated and interconnected full-duplex switched-Ethernet Star tolerate permanent and temporary non-malicious operational hardware faults 19

FTTRS they must guarantee consistency for the Schedule Update Mechanism 20

FTTRS they must guarantee consistency for the Schedule Update Mechanism Consistent Schedule Update Mechanism 21

objective to formally verify the correctness of the Consistent Schedule Update Mechanism of FTTRS 22

UPPAAL 23

results no deadlocks schedule is always consistent 24

conclusions dependable + 25

26

Formal Verification of the FTTRS Mechanisms for the Consistent Update of the Traffic Schedule Daniel Bujosa , Sergi Arguimbau, Patricia Arguimbau, Julián Proenza, Manuel Barranco