同期型言語を用いたソフトウェア検証：クルーズコン
Contents
1. 00000 000000000000000000000000 E EEBEEPET EEET ET HE Bo ERE ED EE BER ERR AR EISELE EEE HO OTH GOTH OTERA ENRE H HEEHERHHEHHEHHLHLHHEHHULHHULM 0 00 0000 00000000 LHEHHHEHEHUHUEULHEHHHHHHELELU 0000 00 0 000000000 HI 1 Benveniste A Caspi P Edwards S A Halb wachs N Guernic P L and de Simone R The synchronous languages 12 years later Proceedings of the IEEE Vol 91 No 1 2003 pp 64 83 2 Bouali A and Dion B Formal verification for model based development SAE World Congress Detroit MI April 2005 pp 05 235 3 Chutinan A Hybrid system verification using discrete model approximation Ph D dissertation Department of Electrical and Computer Engineer ing Carnegie Mellon University 1999 141 Fehnker A and Krogh B H Hybrid systems verification is not a sinecure the electronic throttle control case study Automated Technology for Ver ification and Analysis 2004 Wang F ed LNCS 3299 Springer Verlag Berlin 2004 pp 263 277 5 Frehse G PHAVer Algorithmic verification of hybrid systems past HyTech Hybrid Systems Computati2. 0 00 0000 20 0000 00 0 00000 0 00 Design verifier O O D U Hl HL U DH D D UH B DI DE D 000000000000000000000000 0000000 0 L indeterminate D E B U U U U 00000000000 000007000000 LHEHHHHEHRHBHEHHHHHHHHLHHELLU LEHEHEHEHHHHEHEHEHHHHLELRLU UUUUUUUUSCAPDENHDNUDUUUUUUNU LHEHHHEHEHEUHELEULHEEHEHHHHHUL LEHEHUEHHHEEHELEULEHELHEHLERLU DI 0 00000 00000 0 0 0 0000 0 0000000000000 SCADbEDDDDD 6 000000000000 01 0000 00000 00 00000 on 000000 000 valid AAO ela 900 LLL LLL LL LLL LLL EE FE EE S
3. 0 000000 000 000000 H uhiil l li iul l n MATLAB Simulink 0000000000000 0000 0 000 00 000 00000 0000000 0 00 00 00 0 Lustre 0 0 0 000000 SCADE pogodu 0 2 000000000000 2 1 LUSTRE 0000000 Lustre 000000000000 000000 2 00000 00000000 0 000 100000000000000 0 Lustre 000 2 4 70000000 00000000 0 20 000 Zk X 0 0000 00 000 node COUNTER Reset int bool return Count let Count 0 gt if Reset then 0 else pre Count 1 tel 04 HHHEHUHLEHHHLL Lustre I H 5 SCADEHH H node COUNTER previous pre followed by gt UUUUUUUUU previous 100 UU
4. 0 0 00 0 000000000 000 0 00000 00 650000 0 000 0000 0000000 80000 0 00 0 00 0 000000000 0 ON OFF HEHEHEHHEHEHHHHHEHHHHLULLULHULLU 4 000000000000 00000000000 000000000000 00000000 2 0000000000000 0 00 3 0 000000000000000 300 OU 904 0 000 scADEGOUUUGUUUUL 0 00 E E Evaluating logic Digital desired speed memory Minimum speed threshold Speed difference threshold 0000 0000 OND OFF D LH LU D O Control actuator Output stage 1 0000 UUDUUUDUUUDUDUUUDDUUUDDUUUID GAG UU UUH OU TOU OHU UA Acceleration controller Speed controller Switch off logic circuit Monitoring unit E E E ED E E E L 000000000 1800000450000000 0030000000000000
5. 0 0 0 000000000 400000000000 0 utu pre CruiseAction A Cancel gt CruiseAction 90000000 0 E 0 E 00 FBY CruiseAction 1 true l true gt pre CruiseAction HJ HL EL HH EJ HE E D 000000000000 4000 00 valid 000 0 0 0 00000 0 0 000 0 000000 0 0 0 0 000000000000000000000000 LEHEHHHEBHEURHELEULHEEHEHHHHHUL LHEHHHHHEHEHUREULEULE EHEHHHUL Vol 23 No 3 July 2006 5 VehicleSpeed 2 CruiseSpeedMAX CruiseSpeed Implies 010 UNUUUNUUUNUUUNUUU HEHHHEHHEUHHEHEHEULEL HULR 0 0 000 0000 00000 pre CruiseAction CruiseAction A SetSW A VehicleSpeed gt CruiseSpeedMAX CruiseSpeed CruiseSpeedMAX 00000000000000 000000000
6. 0 000 0 0 0 000 0 0 0000 000000000 00 assertion 1000 0 000 UU 0 20000 valdfi DLE LU U HE 7 U KE HHN uu L EL BEC ENE 0 00000 00 00 0 0 00 0 0 0 prove DUU 0 0000 0000000 000200000000 0 0 0 0000 0 0 0 0 0 0 0 0 00000 0 0 0 000 0 00000000 valid QD 1 UHUHHUHHURU 0 100000 UE OU A U OH UE UE U OUG E UE 0 0 000 00000 000000 10000 180 000000 1200000 valid p OL BLU D U HT U 000000 3000000000 00000000 00000000000 54600000000 60 0 0 000000 000000005000002000000000 000000 O00 0 2000000001000
7. 1 H D U Toyota Central R amp D Labs Inc 00000000000 0 Vol 23 No 3 OOOO 0 00 d Game JUMN RY b BERR ET 7 IC sa ERME N JM SD L EEN SYR REESE ETF IVN ABF 02 HHEHUHHEHUHHHUHHLU HEHEEHHLHEHEHEHEHHLHHLELHLHLM 000000000000 20000 DUU SPIND O O Kronos UrraaL H 0 0000 200 0 0000 0 0 0 0 0 0000000000 0 000 0 2 000000000000 seymi D N RE C 7 LIRA ETILA ZRF SURRY Hiis H ET ILIA D uu 0000000000 300000000 0000 0 00 0 0 000 0 0 00 000 0 00000 0 000000000 00000 RHOD OD DU
8. LEHEHHHHEHEHUELEULELHEHHHHEHLU LEHHHUHHEHEHEEELULHEHHEELEHELRLU UOUUOUUUUUUUUU KRONOS PPAAL 000000000 00 0000000000 000 0000 000 00 0 0 0000 Cruise Control ECU Evaluating logic 1 Speed sensors 1 1 1 1 Acceleration i L I controller Control c actuator stage i JS gt controller Minimun speed Operator threshold switch Digital gt i desired speed Speed difference T memory threshold e A eactivate i MS 08 HUHHHUDULHUDUULLL 6 UUDUUDUDUUUDUDUUUDDUUOUDDUUU UUDUUUDUUUDUUUDUUUDUUU UUDUUUDUUUDUDUUDDUUUDDUUUID UUDUUUDUUDUUUDDUUUDDUUUID UUDUUUDUUUDUUUDUUUDUUU UUDUUDUDUUUUDUUUDDUUOUDDUUU UUDUUUDUDUUDUUDUUUDUUDUDUUUID HOU IUUDDUUOUDUUUDUUUUDDUUU Hv TEcH S H CHECKMATE 3 PHAVER 5 24 0 A BA O um Bm utut HOUOUOUUOUUUUUUUUUUUUUUUUO 3 UUUUUUUUUUUUUUUUUU AU O UEU UU OHUD OGU U OBOD UOU
9. 0000 1992
10. 00000 UUUNUNUNUUNUNHUUUNHUUUNHUUUL UUUNUNUNUNUNUUUL 00 00 UNU HU UU 1 0000 0 0 0 0 000000000000000 0 SPINU SMV 0 0 0 0 00000 0 000000 0000000 00 0 ri 0 0 0000 MATLAB Simuli kli 00 0 0000 0 0000 0 0 0 000000000 0 oggi 0 0 0 0 00000 Software Verification by Synchronous Language A Case Study of Cruise Control Systems Masakazu ADACHI Toshimitsu USHIO 7 000 0 1 1 Graduate School of Enginering Science Osaka University Takashi TOMINAGA Noriyoshi SANO
11. 000000 0 LHEHHHHEHHHELHELLLL EHEHHHUL 000000000000 1800 00000 40 0 00 8000 0 0000000000 CostRe 0 0 0 000 O0 0 000000000000 19059000000000 345640 0 0 0 0 0 0 0000 4267 00000000000 200000000000 000 2 0 0 0 0 00000000 0000000 LEHHHHEHHHEUEELUULEHEHHHHERLU 0 1000 0 0 02 0 http ushiolab sys es osaka u ac jp ut scade acc html 9 0 Cancel 1 Implies CruiseAction d 09 0000000 000 prove 2000000000000000 00 SAT 0 00000 E30 prove D LH D D D D BD DO D CL DLL DT debugI DD D DEBE depth t 0 D BL I DELE D U D 0000 0 0 0000000 prove UO BL DD HB B B B ELE E C O0 00 debug 000000000000 0 00000 000000000 3 000000 00000000 9 0 0 18 0
12. B UU D D D U LI followed by 0 Too U 0000 UU e pre X X ll pre X 0 0000 X gt EYD Q gt Y X 00000000000000 0 Lustre N L 0 0 0000 4000000 000 0000 0000 OOUUUUUUUUUUUUU 2000 0 0 0 0000 000 000000002 2 2 SCADEHLHHHLLL 0 0000 LustrreGUQUUUUUUUUUUUO 0 0 0 0 0 0000 0 SCADE Safety Critical Application Development Environment 1 O00 uguali dg uult 00 000 0000000 0 0 0 0 0 LusrRE HH L D D EH D D D D DE CE OLEI CEOE D LI E 4000 0O00 SCADELHHEHEHHEL 500000 Vol 23 No 3 July 2006 3 PROPERTY Output 06 0000000 Reset true a After1 gt PRE U 7 SCADE JUDODDDODODDDU 00000000000000000000 ETLE 0 0 000 60 000000 00 000 0 00 0 0 GUNU node PROGRAM 0 00 0 0 node PROPERTY 1 U UU 00 00 2 1000000000000 000 Count D Counts 000 0000000000 0000000 00000000000 2 3 00000000 0000 0 0000 0 00
13. on and Control Morari M and Thiele L eds LNCS 3414 Springer Verlag march 2005 pp 258 273 161 Robert Bosch GmbH Automotive Electrics and Electronics Society of Automotive Engineers 1999 171 Halbwachs N Caspi P Raymond P and Pilaud D The synchronous dataflow program ming language Lustre Proceedings of the IEEE Vol 79 No 9 1991 pp 1305 1320 8 Henzinger T A Horowitz B Majumdar R and Wong Toi H Beyond HYTECH Hybrid sys tems analysis using interval numerical methods Hybrid Systems Computation and Control Krogh B H and Lynch N eds LNCS 1790 Springer Verlag 2000 pp 130 144 9 http gazoo com auto J w_torisetsu_top asp 10 http www esterel technologies com 11 Kohler A and Kant D Use of formal verifi cation for the software development in the automo tive area http www esterel technologies com te chnology VVhitePapers overvievv html 1121 Stursberg O Fehnker A Han Z and Krogh B H Verification of a cruise control system us ing counterexample guided search Control Engi neer Practice Vol 12 No 10 2004 pp 1269 1278 13 Sheeran M Singh S and Stalmarck G Checking safety properties using induction and a SAT solver Proceedings of the 8rd International Conference on Formal Methods in Computer Aided Design LNCS 1954 Springer Verlag London UK 2000 pp 108 125 14 0000000000 0000 00000000 2004 15 000 0000000000
Download Pdf Manuals
Related Search