• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学 ›› 2023, Vol. 45 ›› Issue (04): 613-621.

• 软件工程 • 上一篇    下一篇

一种基于Event-B语言的时间触发系统建模方法

姚袭欣,章博,陈香兰,乔磊,李曦   

  1. (中国科学技术大学软件学院,安徽 合肥 230026)
  • 收稿日期:2021-12-07 修回日期:2022-03-01 接受日期:2023-04-25 出版日期:2023-04-25 发布日期:2023-04-13
  • 基金资助:
    国家自然科学基金(61772482);开放基金(OBCandETL-2020-02)

A time-triggered system modeling method based on Event-B

YAO Xi-xin,ZHANG Bo,CHEN Xiang-lan,QIAO Lei,LI Xi   

  1. (School of Software Engineering,University of Science and Technology of China,Hefei 230026,China)
  • Received:2021-12-07 Revised:2022-03-01 Accepted:2023-04-25 Online:2023-04-25 Published:2023-04-13

摘要: 安全关键信息物理系统的时间属性建模和验证至关重要。Event-B模型验证避免了基于状态遍历模型检查方法的状态空间爆炸问题,验证时耗少,适用于高并发系统。然而,常规的Event-B方法缺乏时间语义表达结构,特别是缺乏对可提高系统可预测性的时间触发属性的支持。首先,介绍支持时间触发系统的抽象建模框架TTEB,从系统行为和实现2个抽象层次对时间属性进行建模和精化。然后,通过有序事件链组成的时间触发转移描述行为层时间触发属性;通过全局时钟到分布式本地时钟的精化和分解实现行为模型到实现模型的转化;运用时间触发转移建模分布式时钟周期同步。最后,基于从车跟车系统建模与验证说明方法的可用性和有效性。

关键词: Event-B, 实时系统建模, 时间触发系统, 分布式多时钟

Abstract: Modeling and verifying timing properties are essential for the safety-critical Cyber-Physical Systems (CPS). The model verification based on Event-B avoids the state space explosion problem of the model checking method based on state traversal, and the time consuming is less. Therefore, it is suitable for high-concurrency systems modeling. However, there is no time semantics in the common Event-B method, especially for time-triggered property that can greatly improve the predictability of systems. Firstly, based on Event-B, an abstract modeling framework for time-triggered systems (TTEB) is proposed, which models and refines timing properties for the behavior layer and the implementation layer. Secondly, the time-triggered properties of the behavior layer is modeled by a time- triggered transition composed of an ordered chain of events. The transition from the behavior model to the implementation model is realized by the refinement and decomposition of the global clock to the local clock. The periodic synchronization of distributed clocks in the implementation layer is modeled by the time-triggered transition. Finally, the modeling and verification of the master-slave car following system proves the usability and effectiveness of the method.

Key words: Event-B, real-time system modeling, time-triggered system, distributed multi-clock