Analysis of an emergency diesel generator control system by compositional model checking

MODSAFE 2010 work report

Jussi Lahtinen, Kim Björkman, Janne Valkonen, Juho Frits, Ilkka Niemelä

Research output: Book/ReportReportProfessional

Abstract

Digital instrumentation and control (I&C) systems containing programmable logic controllers are challenging to verify. They enable complicated control functions and the state spaces (number of distinct values of inputs, outputs and internal memory) of the designs easily become too large for comprehensive manual inspection. Model checking is a formal method that can be used for verifying that systems have been correctly designed. A number of efficient model checking systems are available which provide analysis tools that are able to determine automatically whether a given state machine model satisfies the desired safety properties. The practical case analysed in this research project is called an "emergency diesel generator control system" and its purpose is to provide reserve power to critical devices and computers that must be available without interruption. This report describes 1) the development of a compositional approach for checking the models in large system designs, 2) the development of a modular model checking approach for modelling function block diagrams with the Uppaal model checker and 3) the experience of utilising the new modelling approaches in practice.
Original languageEnglish
Place of PublicationEspoo
PublisherVTT Technical Research Centre of Finland
Number of pages36
ISBN (Electronic)978-951-38-7497-1
Publication statusPublished - 2010
MoE publication typeNot Eligible

Publication series

NameVTT Working Papers
PublisherVTT
No.156
ISSN (Electronic)1459-7683

Fingerprint

Model checking
Control systems
Formal methods
Programmable logic controllers
Inspection
Systems analysis
Data storage equipment

Keywords

  • model checking
  • automation system
  • I&C
  • NuSMV
  • Uppaal
  • system safety
  • emergency diesel
  • MODSAFE
  • SAFIR

Cite this

Lahtinen, J., Björkman, K., Valkonen, J., Frits, J., & Niemelä, I. (2010). Analysis of an emergency diesel generator control system by compositional model checking: MODSAFE 2010 work report. Espoo: VTT Technical Research Centre of Finland. VTT Working Papers, No. 156
Lahtinen, Jussi ; Björkman, Kim ; Valkonen, Janne ; Frits, Juho ; Niemelä, Ilkka. / Analysis of an emergency diesel generator control system by compositional model checking : MODSAFE 2010 work report. Espoo : VTT Technical Research Centre of Finland, 2010. 36 p. (VTT Working Papers; No. 156).
@book{50340307ec654e7b841cb30016a4f35e,
title = "Analysis of an emergency diesel generator control system by compositional model checking: MODSAFE 2010 work report",
abstract = "Digital instrumentation and control (I&C) systems containing programmable logic controllers are challenging to verify. They enable complicated control functions and the state spaces (number of distinct values of inputs, outputs and internal memory) of the designs easily become too large for comprehensive manual inspection. Model checking is a formal method that can be used for verifying that systems have been correctly designed. A number of efficient model checking systems are available which provide analysis tools that are able to determine automatically whether a given state machine model satisfies the desired safety properties. The practical case analysed in this research project is called an {"}emergency diesel generator control system{"} and its purpose is to provide reserve power to critical devices and computers that must be available without interruption. This report describes 1) the development of a compositional approach for checking the models in large system designs, 2) the development of a modular model checking approach for modelling function block diagrams with the Uppaal model checker and 3) the experience of utilising the new modelling approaches in practice.",
keywords = "model checking, automation system, I&C, NuSMV, Uppaal, system safety, emergency diesel, MODSAFE, SAFIR",
author = "Jussi Lahtinen and Kim Bj{\"o}rkman and Janne Valkonen and Juho Frits and Ilkka Niemel{\"a}",
note = "Project code: 41251",
year = "2010",
language = "English",
series = "VTT Working Papers",
publisher = "VTT Technical Research Centre of Finland",
number = "156",
address = "Finland",

}

Lahtinen, J, Björkman, K, Valkonen, J, Frits, J & Niemelä, I 2010, Analysis of an emergency diesel generator control system by compositional model checking: MODSAFE 2010 work report. VTT Working Papers, no. 156, VTT Technical Research Centre of Finland, Espoo.

Analysis of an emergency diesel generator control system by compositional model checking : MODSAFE 2010 work report. / Lahtinen, Jussi; Björkman, Kim; Valkonen, Janne; Frits, Juho; Niemelä, Ilkka.

Espoo : VTT Technical Research Centre of Finland, 2010. 36 p. (VTT Working Papers; No. 156).

Research output: Book/ReportReportProfessional

TY - BOOK

T1 - Analysis of an emergency diesel generator control system by compositional model checking

T2 - MODSAFE 2010 work report

AU - Lahtinen, Jussi

AU - Björkman, Kim

AU - Valkonen, Janne

AU - Frits, Juho

AU - Niemelä, Ilkka

N1 - Project code: 41251

PY - 2010

Y1 - 2010

N2 - Digital instrumentation and control (I&C) systems containing programmable logic controllers are challenging to verify. They enable complicated control functions and the state spaces (number of distinct values of inputs, outputs and internal memory) of the designs easily become too large for comprehensive manual inspection. Model checking is a formal method that can be used for verifying that systems have been correctly designed. A number of efficient model checking systems are available which provide analysis tools that are able to determine automatically whether a given state machine model satisfies the desired safety properties. The practical case analysed in this research project is called an "emergency diesel generator control system" and its purpose is to provide reserve power to critical devices and computers that must be available without interruption. This report describes 1) the development of a compositional approach for checking the models in large system designs, 2) the development of a modular model checking approach for modelling function block diagrams with the Uppaal model checker and 3) the experience of utilising the new modelling approaches in practice.

AB - Digital instrumentation and control (I&C) systems containing programmable logic controllers are challenging to verify. They enable complicated control functions and the state spaces (number of distinct values of inputs, outputs and internal memory) of the designs easily become too large for comprehensive manual inspection. Model checking is a formal method that can be used for verifying that systems have been correctly designed. A number of efficient model checking systems are available which provide analysis tools that are able to determine automatically whether a given state machine model satisfies the desired safety properties. The practical case analysed in this research project is called an "emergency diesel generator control system" and its purpose is to provide reserve power to critical devices and computers that must be available without interruption. This report describes 1) the development of a compositional approach for checking the models in large system designs, 2) the development of a modular model checking approach for modelling function block diagrams with the Uppaal model checker and 3) the experience of utilising the new modelling approaches in practice.

KW - model checking

KW - automation system

KW - I&C

KW - NuSMV

KW - Uppaal

KW - system safety

KW - emergency diesel

KW - MODSAFE

KW - SAFIR

M3 - Report

T3 - VTT Working Papers

BT - Analysis of an emergency diesel generator control system by compositional model checking

PB - VTT Technical Research Centre of Finland

CY - Espoo

ER -

Lahtinen J, Björkman K, Valkonen J, Frits J, Niemelä I. Analysis of an emergency diesel generator control system by compositional model checking: MODSAFE 2010 work report. Espoo: VTT Technical Research Centre of Finland, 2010. 36 p. (VTT Working Papers; No. 156).