Conference Proceeding

Model Checking PLC Software Written in Function Block Diagram

Mobility Div., Siemens, Braunschweig, Germany
05/2010; DOI:10.1109/ICST.2010.10 In proceeding of: Software Testing, Verification and Validation (ICST), 2010 Third International Conference on
Source: IEEE Xplore

ABSTRACT The development of Programmable Logic Controllers (PLCs) in the last years has made it possible to apply them in ever more complex tasks. Many systems based on these controllers are safety-critical, the certification of which entails a great effort. Therefore, there is a big demand for tools for analyzing and verifying PLC applications. Among the PLC-specific languages proposed in the standard IEC 61131-3, FBD(Function Block Diagram) is a graphical one widely used in rail automation. In this paper, a process of verifying FBDs by the NuSMV model checker is described. It consists of three transformation steps: FBD→TextFBD→tFBD→NuSMV. the novel step introduced here is the second one: it reduces the state space dramatically so that realistic application components can be verified. The process has been developed and tested in the area of rail automation, in particular interlocking systems. As a part of the interlocking software, a typical point logic has been used as a test case.

0 0
1 Bookmark
  • Source
    [show abstract] [hide abstract]
    ABSTRACT: A challenging problem for model checking is represented by railway interlocking systems. It is a well known fact that interlocking systems, due to their inherent complexity related to the high number of variables involved, are not amenable to automatic verification, typically incurring in state space explosion problems. The literature is however quite scarce on data concerning the size of interlocking systems that have been successfully proved with model checking techniques. In this paper we attempt a systematic study of the applicability bounds for general purpose model checkers on this class of systems, by studying the typical characteristics of control tables and their size parameters. The results confirm that, although small scale interlocking systems can be addressed by model checking, interlockings that control medium or large railway yards can not, asking for specialized verification techniques. KeywordsRailway Interlocking-Model Checking Interlocking-Control Tables Verification
    12/2010: pages 107-115;
  • Source
    [show abstract] [hide abstract]
    ABSTRACT: Validation of the behavior of a Programmable Logic Controller (PLC) by comparison of observed I/O se-quences to sequences built from a formal specification model requires that the consequences of the PLC I/O scan-ning cycle be considered. This paper proposes a method based on an enforcement technique to interpret observed I/O sequences so that the result of this comparison be meaningful.
    18th IEEE Conference on Emerging Technologies and factory Automation (ETFA 2013), Cagliari (Italy); 09/2013
  • Source
    [show abstract] [hide abstract]
    ABSTRACT: Legacy systems that do not conform to the norms and regulations imposed by recent safety standards have to be upgraded to meet safety requirements. In this paper, we describe a methodology to upgrade legacy industrial applications based on the IEC61131 function block model without the need to redesign the whole application. We then describe an approach for automating the verification process of safety applications that is based on the use of the UPPAAL simulation and verification platform for embedded real-time systems. The meta-models of the source and target domains are presented and a transformation process of the PLCopen XML design specification to UPPAAL XML specification is described. A laboratory system is used as a case study to demonstrate the applicability of the proposed process.
    IEEE Conference on Automation Science and Engineering, CASE 2011, Trieste, Italy, Aug. 24-27, 2011; 01/2011

Full-text (2 Sources)

Available from
May 11, 2013