SlideShare a Scribd company logo
Université catholique de Louvain – Secteur des sciences et technologies –
Technologie de l’information et de la communication, électronique et mathématiques appliquées (ICTEAM)
– Pôle d’ingénierie informatique (INGI) - 2, Place Sainte-Barbe
B-1348 Louvain-la-Neuve (Belgique)
Verification of Railway Interlocking
Christophe Limbrée, Quentin Cappart, Simon Busard
ICTEAM Young Researchers’ Day 2015
Domaine du Chateau de Modave
1. Railway interlocking
In railway signalling, an interlocking is an arrangement
of signal apparatus that prevents conflicting
movements through an arrangement of tracks such as
junctions or crossings.
The signalling appliances and tracks are sometimes
collectively referred to as an interlocking plant. An
interlocking is designed so that it is impossible to display
a signal to proceed unless the route to be used is proven
safe (def. wikipedia).
2. Problems
The safety achieved by the interlocking rely on:
a. A generic software.
b. A set of application data reflecting the track-layout of
each station.
The verification and validation of the later is performed
manually which is:
Not exhaustive and error prone.
Time consuming.
Fig 1: Station Labuissière – track-layout
xsstart
s
IR l
CGV s
U l
Points cmd
RSU
RSU
CS
¬RSU
tisp1tisp2tisp3
¬RSU
?(cmd ^ I R f ^ points cf )
no cmd
?(status s ^ I R l ^ P cd ^ notON ^ TC c)
waiting for RSU
?(all TC c)
?¬(all TC c)
?(1st
TC o^ 1st
K RC s)
?¬RSUcond.
?some magic
train running
?(tips3^ all TC c)
3. Solutions
a. Generate a model of the
interlocking and its
application data.
b. Formalize the safety
properties to be verified.
c. Use a model checker to
verify the model against the
safety properties.
d. Provide decorated traces in
order to anlyse falsification.
Fig 2: Route state machine
4. Process and tools
NuSMV: input language for the model and verification
tool for the safety properties.
Translator: automatic generation of the application data
into the NuSMV model.
DSL: input of the station track-layout and generation of
the train simulation into the model.
PyNuSMV: enhancement of the verification algorithms
for CTL formulas, and generation of the compatibility
route table.
Fig 3: verification process
5. Safety properties
a. Train collisions never happen.
b. Trains never derail.
c. Movement authorization conditions.
Expressed by:
a. CTL formulas (e.g. CTLSPEC AG (train.position = TC1
& P1.posi = cdr -> AX P1.posi = cdr)
b. State invariants (e.g. INVARSPEC ! (R_K_CX.st = s &
R_CX_K.st = s)).
6. Results
The model of Namêche station, including 14 routes was
generated automatically.
132 invariants and 7 CTL formulas were expressed and
verified successfuly.
Customized algorithms in PyNuSMV to verify CTL
formulas up to 10 times faster.
7. Future works
Extension of the model and principle to the verification of
larger stations by compositional verification (state space
explosion problem).
Modeling and verification of the real-time data exchange
in a network of interlockings in large stations.
Extension of the model to the ERTMS/ETCS sub-system
for the verification of train Movement Authorities.
Development of a graphical trace illustrator.
Reference
R. Cavada, A. Cimatti, C. A. Jochim, G. Keighren, E.
Olivetti, M. Pistore, M. Roveri and A. Tchaltsev. NuSMV
2.5.4 User manual – Trento – Italy – 2010.

More Related Content

Similar to poster_Limbree_Ch

IBRAHIM RAMADAN CV - Copy
IBRAHIM RAMADAN CV - CopyIBRAHIM RAMADAN CV - Copy
IBRAHIM RAMADAN CV - Copy
ibrahim ramadan
 
IRJET- Automatic Metro Train to Shuttle Between Two Stations
IRJET- Automatic Metro Train to Shuttle Between Two Stations   IRJET- Automatic Metro Train to Shuttle Between Two Stations
IRJET- Automatic Metro Train to Shuttle Between Two Stations
IRJET Journal
 
"The Great Train Cyber Robbery" SCADAStrangeLove
"The Great Train Cyber Robbery" SCADAStrangeLove"The Great Train Cyber Robbery" SCADAStrangeLove
"The Great Train Cyber Robbery" SCADAStrangeLove
Aleksandr Timorin
 
Train Arrival Times At Highway Railroad Grade Crossing
Train Arrival Times At Highway Railroad Grade CrossingTrain Arrival Times At Highway Railroad Grade Crossing
Train Arrival Times At Highway Railroad Grade Crossing
Kittelson Slides
 
Arrival Times at Highway-Railroad Grade Crossing
Arrival Times at Highway-Railroad Grade CrossingArrival Times at Highway-Railroad Grade Crossing
Arrival Times at Highway-Railroad Grade Crossing
guest773bc2
 
Sro Project Brief
Sro Project BriefSro Project Brief
Sro Project Brief
energyvijay
 
Norwalk TMC Presentation
Norwalk TMC PresentationNorwalk TMC Presentation
Norwalk TMC Presentation
Fred Eshraghi
 
THE FINAL
THE FINALTHE FINAL
THE FINAL
Neharaj K J
 
Detect of Railroad using Image Processing and Applying it on Syrian Railways
Detect of Railroad using Image Processing and Applying it on Syrian RailwaysDetect of Railroad using Image Processing and Applying it on Syrian Railways
Detect of Railroad using Image Processing and Applying it on Syrian Railways
IRJET Journal
 
The Great Train Robbery: Fast and Furious
The Great Train Robbery: Fast and FuriousThe Great Train Robbery: Fast and Furious
The Great Train Robbery: Fast and Furious
Sergey Gordeychik
 
Advanced railway security system (arss) based on zigbee communication for tra...
Advanced railway security system (arss) based on zigbee communication for tra...Advanced railway security system (arss) based on zigbee communication for tra...
Advanced railway security system (arss) based on zigbee communication for tra...
rashmimabattin28
 
CV_Hany Youssif_12-2015_english
CV_Hany Youssif_12-2015_englishCV_Hany Youssif_12-2015_english
CV_Hany Youssif_12-2015_english
Hany Youssif
 
Communication Based Train Control (Mobile Train Radio Communication)
Communication Based Train Control (Mobile Train Radio Communication)Communication Based Train Control (Mobile Train Radio Communication)
Communication Based Train Control (Mobile Train Radio Communication)
Suraj Talreja
 
5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf
5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf
5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf
SrinidhirkGowda
 
India railway and green infra smart move 2018
India railway and green infra smart move 2018India railway and green infra smart move 2018
India railway and green infra smart move 2018
Mahesh Chandra Manav
 
India modern rail service for public
India modern rail service for publicIndia modern rail service for public
India modern rail service for public
Mahesh Chandra Manav
 
Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...
Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...
Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...
IJRESJOURNAL
 
railway risk assessment in IOT based systems
railway risk assessment in  IOT based systemsrailway risk assessment in  IOT based systems
railway risk assessment in IOT based systems
mbharshitha2001
 
Smart Metro - Rail System
Smart Metro - Rail SystemSmart Metro - Rail System
Smart Metro - Rail System
IJAEMSJORNAL
 
CBTC World Congress paper on creating safe CBTC system without secondary dete...
CBTC World Congress paper on creating safe CBTC system without secondary dete...CBTC World Congress paper on creating safe CBTC system without secondary dete...
CBTC World Congress paper on creating safe CBTC system without secondary dete...
Shiv Mohan CEng, PMP, PGDBA ,MIRSE,MIEEE,MIET
 

Similar to poster_Limbree_Ch (20)

IBRAHIM RAMADAN CV - Copy
IBRAHIM RAMADAN CV - CopyIBRAHIM RAMADAN CV - Copy
IBRAHIM RAMADAN CV - Copy
 
IRJET- Automatic Metro Train to Shuttle Between Two Stations
IRJET- Automatic Metro Train to Shuttle Between Two Stations   IRJET- Automatic Metro Train to Shuttle Between Two Stations
IRJET- Automatic Metro Train to Shuttle Between Two Stations
 
"The Great Train Cyber Robbery" SCADAStrangeLove
"The Great Train Cyber Robbery" SCADAStrangeLove"The Great Train Cyber Robbery" SCADAStrangeLove
"The Great Train Cyber Robbery" SCADAStrangeLove
 
Train Arrival Times At Highway Railroad Grade Crossing
Train Arrival Times At Highway Railroad Grade CrossingTrain Arrival Times At Highway Railroad Grade Crossing
Train Arrival Times At Highway Railroad Grade Crossing
 
Arrival Times at Highway-Railroad Grade Crossing
Arrival Times at Highway-Railroad Grade CrossingArrival Times at Highway-Railroad Grade Crossing
Arrival Times at Highway-Railroad Grade Crossing
 
Sro Project Brief
Sro Project BriefSro Project Brief
Sro Project Brief
 
Norwalk TMC Presentation
Norwalk TMC PresentationNorwalk TMC Presentation
Norwalk TMC Presentation
 
THE FINAL
THE FINALTHE FINAL
THE FINAL
 
Detect of Railroad using Image Processing and Applying it on Syrian Railways
Detect of Railroad using Image Processing and Applying it on Syrian RailwaysDetect of Railroad using Image Processing and Applying it on Syrian Railways
Detect of Railroad using Image Processing and Applying it on Syrian Railways
 
The Great Train Robbery: Fast and Furious
The Great Train Robbery: Fast and FuriousThe Great Train Robbery: Fast and Furious
The Great Train Robbery: Fast and Furious
 
Advanced railway security system (arss) based on zigbee communication for tra...
Advanced railway security system (arss) based on zigbee communication for tra...Advanced railway security system (arss) based on zigbee communication for tra...
Advanced railway security system (arss) based on zigbee communication for tra...
 
CV_Hany Youssif_12-2015_english
CV_Hany Youssif_12-2015_englishCV_Hany Youssif_12-2015_english
CV_Hany Youssif_12-2015_english
 
Communication Based Train Control (Mobile Train Radio Communication)
Communication Based Train Control (Mobile Train Radio Communication)Communication Based Train Control (Mobile Train Radio Communication)
Communication Based Train Control (Mobile Train Radio Communication)
 
5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf
5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf
5b50dc69-4ca7-41ee-a9dd-b4e8b220b4fe.pdf
 
India railway and green infra smart move 2018
India railway and green infra smart move 2018India railway and green infra smart move 2018
India railway and green infra smart move 2018
 
India modern rail service for public
India modern rail service for publicIndia modern rail service for public
India modern rail service for public
 
Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...
Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...
Research of Hardware-In-The-Loop System of Monitor System of Marine Diesel En...
 
railway risk assessment in IOT based systems
railway risk assessment in  IOT based systemsrailway risk assessment in  IOT based systems
railway risk assessment in IOT based systems
 
Smart Metro - Rail System
Smart Metro - Rail SystemSmart Metro - Rail System
Smart Metro - Rail System
 
CBTC World Congress paper on creating safe CBTC system without secondary dete...
CBTC World Congress paper on creating safe CBTC system without secondary dete...CBTC World Congress paper on creating safe CBTC system without secondary dete...
CBTC World Congress paper on creating safe CBTC system without secondary dete...
 

poster_Limbree_Ch

  • 1. Université catholique de Louvain – Secteur des sciences et technologies – Technologie de l’information et de la communication, électronique et mathématiques appliquées (ICTEAM) – Pôle d’ingénierie informatique (INGI) - 2, Place Sainte-Barbe B-1348 Louvain-la-Neuve (Belgique) Verification of Railway Interlocking Christophe Limbrée, Quentin Cappart, Simon Busard ICTEAM Young Researchers’ Day 2015 Domaine du Chateau de Modave 1. Railway interlocking In railway signalling, an interlocking is an arrangement of signal apparatus that prevents conflicting movements through an arrangement of tracks such as junctions or crossings. The signalling appliances and tracks are sometimes collectively referred to as an interlocking plant. An interlocking is designed so that it is impossible to display a signal to proceed unless the route to be used is proven safe (def. wikipedia). 2. Problems The safety achieved by the interlocking rely on: a. A generic software. b. A set of application data reflecting the track-layout of each station. The verification and validation of the later is performed manually which is: Not exhaustive and error prone. Time consuming. Fig 1: Station Labuissière – track-layout xsstart s IR l CGV s U l Points cmd RSU RSU CS ¬RSU tisp1tisp2tisp3 ¬RSU ?(cmd ^ I R f ^ points cf ) no cmd ?(status s ^ I R l ^ P cd ^ notON ^ TC c) waiting for RSU ?(all TC c) ?¬(all TC c) ?(1st TC o^ 1st K RC s) ?¬RSUcond. ?some magic train running ?(tips3^ all TC c) 3. Solutions a. Generate a model of the interlocking and its application data. b. Formalize the safety properties to be verified. c. Use a model checker to verify the model against the safety properties. d. Provide decorated traces in order to anlyse falsification. Fig 2: Route state machine 4. Process and tools NuSMV: input language for the model and verification tool for the safety properties. Translator: automatic generation of the application data into the NuSMV model. DSL: input of the station track-layout and generation of the train simulation into the model. PyNuSMV: enhancement of the verification algorithms for CTL formulas, and generation of the compatibility route table. Fig 3: verification process 5. Safety properties a. Train collisions never happen. b. Trains never derail. c. Movement authorization conditions. Expressed by: a. CTL formulas (e.g. CTLSPEC AG (train.position = TC1 & P1.posi = cdr -> AX P1.posi = cdr) b. State invariants (e.g. INVARSPEC ! (R_K_CX.st = s & R_CX_K.st = s)). 6. Results The model of Namêche station, including 14 routes was generated automatically. 132 invariants and 7 CTL formulas were expressed and verified successfuly. Customized algorithms in PyNuSMV to verify CTL formulas up to 10 times faster. 7. Future works Extension of the model and principle to the verification of larger stations by compositional verification (state space explosion problem). Modeling and verification of the real-time data exchange in a network of interlockings in large stations. Extension of the model to the ERTMS/ETCS sub-system for the verification of train Movement Authorities. Development of a graphical trace illustrator. Reference R. Cavada, A. Cimatti, C. A. Jochim, G. Keighren, E. Olivetti, M. Pistore, M. Roveri and A. Tchaltsev. NuSMV 2.5.4 User manual – Trento – Italy – 2010.