Exploring the ERTMS/ETCS full moving block specification: an experience with formal methods
Open Access
- 10 April 2022
- journal article
- research article
- Published by Springer Nature in International Journal on Software Tools for Technology Transfer
- Vol. 24 (3) , 351-370
Abstract
Shift2Rail is a joint undertaking funded by the EU via its Horizon 2020 program and by main railway stakeholders. Several Shift2Rail projects aim to investigate the application of formal methods to new ERTMS/ETCS railway signalling systems that promise to move European railway forward by guaranteeing high capacity, low cost and improved reliability. We explore the ERTMS/ETCS level 3 full moving block specifications stemming from different Shift2Rail projects using Uppaal and statistical model checking. The results range from novel rigorously formalised requirements to an operational model formally verified against scenarios with multiple trains on a single railway line. From the gained experience, we have distilled future research goals to improve the formal specification and verification of real-time systems, and we discuss some barriers concerning a possible uptake of formal methods and tools in the railway industry.Keywords
This publication has 70 references indexed in Scilit:
- The Metrô Rio case studyScience of Computer Programming, 2013
- Some Trends in Formal Methods Applications to Railway Signaling2012
- Looking back at UMLSoftware and Systems Modeling, 2012
- Simulation-based evaluation of dependability and safety properties of satellite technologies for railway localizationTransportation Research Part C: Emerging Technologies, 2012
- A Systematic Approach to Justifying Sufficient Confidence in Software Safety ArgumentsLecture Notes in Computer Science, 2012
- Supporting agile development by facilitating natural user interaction with executable formal specificationsACM SIGSOFT Software Engineering Notes, 2011
- UML formal semantics: lessons learnedSoftware and Systems Modeling, 2011
- Semantic Translation of Simulink/Stateflow Models to Hybrid Automata Using Graph TransformationsElectronic Notes in Theoretical Computer Science, 2004
- Translating Discrete-Time Simulink to LustreLecture Notes in Computer Science, 2003
- A process algebraic view of input/output automataTheoretical Computer Science, 1995