A Formal Proof of the Soundness of the Hybrid CPS Clock Theory

Jianlin Wang,Chao Peng,Zhenbing Zeng

DOI: https://doi.org/10.1109/TASE49443.2020.00022

2020-01-01

Abstract:In this paper, we presented a formalization to the Clock Theory of He Jifeng in the Isabelle interactive theorem prover, we described the basic concepts of the theory in Isabelle and proved its soundness for programming hybrid systems.

What problem does this paper attempt to address?

A Hybrid Clock Logic System for CPS

Peifen Wang,Yixiang Chen,Hengyang Wu

DOI: https://doi.org/10.1109/ISKE47853.2019.9170360

2019-01-01

Abstract:Cyber-Physical System (CPS) is a typical intelligent system composed of agents. It has an important feature of spatial temporal constraints. To describe the constraints on agents, Chen proposed the spatial-temporal consistency language (STeC) in 2012 and the hybrid clock system in 2014. In this paper we will set up the hybrid clock logic systems (HCL) to specify the spatial temporal constraint property of agents in CPS. After giving the syntax and semantics of HCL, we consider the satisfaction relationship between a STeC design and HCL specification of a CPS agent. Some case studies show this satisfaction relationship is reasonable. We also introduce a model-checking algorithm for HCL.
A Clock-Based Framework for Construction of Hybrid Systems

He Jifeng

DOI: https://doi.org/10.1007/978-3-642-39718-9_2

2013-01-01

Abstract:Hybrid systems are composed by continuous physical component and discrete control component where the system state evolves over time according to interacting law of discrete and continuous dynamics. Combinations of computation and control can lead to very complicated system designs. Rather than address the formal verification of hybrid systems, this paper forcuses on general modelers, aimed at modelling hybrid dynamics in such a way one can extract the specification of the control component from the specification of the total system and the desire behaviour of the physical component. We treat more explicit hybrid models by providing a mathematical framework based on clock and synchronous signal. This paper presents an abstract concept of clock with two suitable metric spaces for description of temporal order and time latency, and links clocks with synchronous events by showing how to represent the occurrences of an event by a clock. We tackle discrete variables by giving them a clock-based representation, and show how to capture dynamical behaviours of continuous components by recording the time instants when a specific type of changes take place. This paper introduces a clock-based hybrid language for description and reasoning of both discrete and continuous dynamics, and applies it to a family of physical devices, and demonstrates how to specify a water tanker and construct and verify its controller based on clocks.
A Hybrid Clock System Related to STeC Language

Yixiang Chen,Yuanri Zhang

DOI: https://doi.org/10.1109/sere-c.2014.39

2014-01-01

Abstract:Cyber-Physical Systems(CPS) is a new trend of real-time systems in the area of distributed embedded systems or networked agent systems. The first author introduced a specification language for real-time system, called as spatial-temporal consistency language (Shortly, STeC) in 2010. In this paper, the authors introduce a novel clock system, called as hybrid clock, to specify both logical and chronometric time aspect of real time system. Some operations on hybrid clocks and relations between hybrid clocks are introduced. A satisfaction relation between a hybrid clock and a STeC design of real time system specified in term with STeC language is defined. Some properties and CPS case studies are given in this paper.
A Formal Model for a Hybrid Programming Language.

Longfei Zhu,Qiwen Xu,Jifeng He,Huibiao Zhu

DOI: https://doi.org/10.1007/978-3-319-14806-9_7

2014-01-01

Abstract:A cyber-physical system (CPS) is an interactive system of continuous plants and real-time controller programs. These systems usually feature a tight relationship between the physical and computational components and exhibit strict true-concurrency with respect to time. These communication and concurrency issues have been well investigated in event-based synchronous languages but only for discrete systems. In this paper, we present an imperative-style programming language for CPS and explore an observation-oriented denotational semantics for the language. Furthermore, a set of algebraic laws that could facilitate the transformation of programs are investigated and consistency of the algebraic laws can be ensured with respect to the denotational semantics. The algebraic laws which have been established in the framework of our semantic model could greatly enhance the reliability of algebraic transformation.
Specification and Verification of Multi-clock Systems Using a Temporal Logic with Clock Constraints

Yuanrui Zhang,Frederic Mallet,Min Zhang,Zhiming Liu

DOI: https://doi.org/10.1145/3670794

2024-01-01

Formal Aspects of Computing

Abstract:The polychronous or multi-clock paradigm is adequate to model large distributed systems where achieving a full timed synchronization is not only very costly, but also often not necessary. It concerns systems made of a set of components with loose synchronization constraints. We study an approach where those components are orchestrated using logical clocks , made popular by L. Lamport and synchronous languages. The temporal and causal specification of those systems is built by defining a set of clock relations that would constrain the instant when clocks can tick or must not tick, thus defining families of valid schedules . In this paper, we propose a specification language, called LTL c / CCSL , for specifying temporal properties of multi-clock systems. While traditional temporal logics (LTL, MTL, CTL*), whether linear or branching, rely on a global step, our language, LTL c / CCSL , builds a partial order on logical clocks, thus allowing both a hierarchical approach based on refinement of clock hierarchies, and compositionality as what happens in one clock domain may remain largely independent of what may happen in other domains. This good property helps preserve the properties without requiring to perform the proofs again. An LTL c / CCSL specification consists of a clock temporal logic LTL c , accompanied with a clock calculus called CCSL for specifying clock relations. We build the syntax and semantics of LTL c and link its semantics with CCSL. After that we mainly focus on the verification aspect of LTL c / CCSL specifications using model checking technique. We show how LTL c / CCSL can be used for specifying multi-clock systems with an example.
Formalization of Continuous Fourier Transform in Verifying Applications for Dependable Cyber-Physical Systems

Yong Guan,Jie Zhang,Zhiping Shi,Yi Wang,Yongdong Li

DOI: https://doi.org/10.1016/j.sysarc.2020.101707

IF: 5.836

2020-01-01

Journal of Systems Architecture

Abstract:Continuous Fourier transform (CFT) is widely used and is often directly applied in cyber-physical systems (CPS) without checking its preconditions. This inevitably leads to unexpected defects and even errors. Thus, verification is necessary for the CFT-based engineering design to ensure a dependable cyber physical system. HOL4 (Higher Order Logic 4) is a formal theorem prover that prevails in software and hardware verification. However, there is no CFT theorem library in current HOL4. In this paper, the definition and some frequently used properties of CFT are formalized and verified in HOL4. Based on this, we formally model a basic theorem library of CFT. As a case study, the CFT library is employed to verify the frequency response of an RLC circuit, which is a critical application for dependable CPS. The formalization of the CFT and its properties and the construction of the formal CFT theorem library can effectively extend the function of the HOL4 system. The obtained formal results can be applied in various CFT-based cyber-physical systems.
Towards correctness proof for hybrid Simulink block diagrams

Wei Zhang,Quan Sun,Chao Wang,Zhiming Liu

DOI: https://doi.org/10.1016/j.sysarc.2023.102922

IF: 5.836

2023-06-11

Journal of Systems Architecture

Abstract:Cyber-physical systems (CPS) are often modelled using Simulink to simulate plant and controller behaviour by block diagrams. However, since the incomplete coverage of simulation, design using Simulink alone is insufficient for ensuring the correctness of the modelled system, especially in safety-critical CPS. The correctness is that the Simulink block diagrams satisfy the formal specification of the system being modelled. In this work, we present a contract-based method, which supports compositional reasoning and refinement, for proving the correctness of hybrid Simulink block diagrams (i.e., the block diagrams mixed continuous-discrete blocks and multi-rate discrete-time block diagrams). To this end, we first define a formal semantics for hybrid Simulink block diagrams. We then use the contract as a specification language. Moreover, we present a satisfaction relation between the block diagram and the contract, and a refinement relation between the contracts. We prove that the refinement relation preserves the correctness: if the hybrid Simulink block diagram satisfies the composition contract and the composition contract refines the system specification, the hybrid block diagram is correct relative to the system specification. Furthermore, the effectiveness of our method is illustrated by a vehicle driving control system.

computer science, software engineering, hardware & architecture
A Clock-Based Dynamic Logic for the Verification of CCSL Specifications in Synchronous Systems

Yuanrui Zhang,Hengyang Wu,Yixiang Chen,Frederic Mallet

DOI: https://doi.org/10.1016/j.scico.2020.102591

IF: 1.039

2021-01-01

Science of Computer Programming

Abstract:The Clock Constraint Specification Language (CCSL) is a clock-based specification language for real-time embedded systems. With logical clocks defined as first-class citizens, CCSL provides a natural way for describing clock constraints in synchronous systems — a classical model of concurrency for real-time embedded systems. In this paper, we propose a clock-based dynamic logic called CCSL Dynamic Logic (CDL) for the verification of CCSL specifications in synchronous systems. It extends the first-order dynamic logic with a synchronous execution mechanism in its program model and with CCSL primitives as terms in its logical formulae. We build a sound and relatively complete proof system for CDL to support the verification. Compared with previous approaches for verifying CCSL specifications, which are based on model checking and SMT checking techniques, our approach, which is based on theorem-proving, offers a unified verification framework in which both bounded and unbounded CCSL specifications can be verified. Technically, with the proof system of CDL, a complex CDL formula can be semi-automatically transformed into a set of quantifier-free, arithmetical first-order logic (QF-AFOL) formulae which can be checked by an SMT solver in an efficient way. As a case study, we analyze a simple synchronous system throughout the paper to illustrate how CDL works. We analyze and prove the soundness and completeness of the proof system for CDL. Currently, CDL is partially mechanized in Coq.
Transforming Timing Requirements into CCSL Constraints to Verify Cyber-Physical Systems.

Xiaohong Chen,Ling Yin,Yijun Yu,Zhi Jin

DOI: https://doi.org/10.1007/978-3-319-68690-5_4

2017-01-01

Abstract:The timing requirements of embedded cyber-physical systems (CPS) constrain CPS behaviors made by scheduling analysis. Lack of physical entity properties modeling and the need of scheduling analysis require a systematic approach to specify timing requirements of CPS at the early phase of requirements engineering. In this work, we extend the Problem Frames notations to capture timing properties of both cyber and physical domain entities into Clock Constraint Specification Language (CCSL) constraints which is more explicit that LTL for scheduling analysis. Interpreting them using operational semantics as finite state machines, we are able to transform these timing requirements into CCSL scheduling constraints, and verify their consistency on NuSMV. Our TimePF tool-supported approach is illustrated through the verification of timing requirements for a representative problem in embedded CPS.
A Logical Approach for the Schedulability Analysis of CCSL

Yuanrui Zhang,Frédéric Mallet,Huibiao Zhu,Yixiang Chen

DOI: https://doi.org/10.1109/tase.2019.00-23

2019-01-01

Abstract:The Clock Constraint Specification Language (CCSL) is a clock-based formalism for formal specification and analysis of real-time embedded systems. Previous approaches for the schedulability analysis of CCSL specifications are mainly based on model checking or SMT-checking. In this paper we propose a logical approach mainly based on theorem proving. We build a dynamic logic called 'clock-based dynamic logic' (cDL) to capture the CCSL specifications and build a proof calculus to analyze the schedule problem of the specifications. Comparing with previous approaches, our method benefits from the dynamic logic that provides a natural way of capturing the dynamic behaviour of CCSL and a divide-and-conquer way for 'decomposing' a complex formula into simple ones for an SMT-checking procedure. Based on cDL, we outline a method for the schedulability analysis of CCSL. We illustrate our theory through one example.
Modeling and Verification of CPS Based on Spatial Hybrid Automata

Wenming Zhao,Yixiang Chen,Min Zhang

DOI: https://doi.org/10.3969/j.issn.1001-7119.2015.01.022

2015-01-01

Abstract:In order to describe the requirement of spatial and temporal consistence of cyber-physical systems (CPS), a specification language called STeC was proposed by Chen [1]. It is of vital importance to ensure that the design and implementation of CPS meet the requirement of spatial and temporal consistence. The Spatial Hybrid Automata (SHA), characteristic of the location-triggered, is proposed based on the extended hybrid automata. This paper presents a framework of CPS modeling and verification based on SHA, where CPS are described by STeC and modeled by SHA. The adopted formal method is the differential dynamic logic (DL), whose the operational model is Hybrid Program (HP). The SHA model is transformed to its corresponding HP through DL. Then CPS properties are specified based on the result from HP. Finally, the CPS properties are automatically verified through the theorem-prover named KeYmaera.
Parallel Composition and Modular Verification of Computer Controlled Systems in Differential Dynamic Logic

Simon Lunel,Stefan Mitsch,Benoit Boyer,Jean-Pierre Talpin

DOI: https://doi.org/10.48550/arXiv.1907.02881

2019-07-08

Abstract:Computer-Controlled Systems (CCS) are a subclass of hybrid systems where the periodic relation of control components to time is paramount. Since they additionally are at the heart of many safety-critical devices, it is of primary importance to correctly model such systems and to ensure they function correctly according to safety requirements. Differential dynamic logic $d\mathcal{L}$ is a powerful logic to model hybrid systems and to prove their correctness. We contribute a component-based modeling and reasoning framework to $d\mathcal{L}$ that separates models into components with timing guarantees, such as reactivity of controllers and controllability of continuous dynamics. Components operate in parallel, with coarse-grained interleaving, periodic execution and communication. We present techniques to automate system safety proofs from isolated, modular, and possibly mechanized proofs of component properties parameterized with timing characteristics.

Logic in Computer Science
Transforming HybridUML to Hybrid Program for CPS Property Verification

Min ZHU,Bi-xin LI,Qiao-qiao CHEN,Shun-hui JI,Jia-kai LI

DOI: https://doi.org/10.3969/j.issn.0372-2112.2012.06.010

2012-01-01

Tien Tzu Hsueh Pao/Acta Electronica Sinica

Abstract:With the wide application of cyber-physical systems(CPS), it is of vital importance to ensure that the design and implementation of CPS meet critical performance requirements (e.g., security, reliability). This paper presents a framework for CPS modeling and verification. In the framework, CPS are modelled by HybridUML and then the generic model is transformed to a formal model that is suitable for reasoning with the help of formal methods. The formal method adopted is differential dynamic logic(dL) whose operational model is hybrid program(HP). When transforming a HybridUML model to its corresponding HP presentation, transformation rules are defined according to semantic consistency. After transformation, CPS properties are specified on the basis of the resulting HP, and finally, the properties are automatically verified through the theorem prover KeYmaera.
Embedding CCSL into Dynamic Logic - A Logical Approach for the Verification of CCSL Specifications.

Yuanrui Zhang,Hengyang Wu,Yixiang Chen,Frédéric Mallet

DOI: https://doi.org/10.1007/978-3-030-12988-0_7

2018-01-01

Abstract:The Clock Constraint Specification Language (CCSL) is a clock-based specification language for capturing causal and chronometric constraints between events in Real-Time Embedded Systems (RTESs). Due to the limitations of the existing verification approaches, CCSL lacks a full verification support for u0027unsafe CCSL specificationsu0027 and a unified proof framework. In this paper, we propose a novel verification approach based on theorem proving and SMT-checking. We firstly build a logic called CCSL Dynamic Logic (CDL), which extends the traditional dynamic logic with u0027signalsu0027 and u0027clock relationsu0027 as primitives, and with synchronous execution mechanism for modelling RTESs. Then we propose a sound and relatively complete proof system for CDL to provide the verification support. We show how CDL can be used to capture RTES and verify CCSL specifications by analyzing a simple case study.
Co-Verification Approach to Control Software Program for CPS

zhang yu,dong yunwei,feng wenlong,huang mengxing

DOI: https://doi.org/10.13328/j.cnki.jos.005214

2017-01-01

Abstract:Cyber-Physical System(CPS) tightly integrates control software and embedded components, incorporating software with control domains. CPSs are pervasive and often mission-critical, therefore, they must have high level of security. With the extensive use of information technology, embedded control software plays a greater role in such systems. The close interactions between control software and embedded components demand co-verification. In this paper, an automata-theoretic approach is presented to co-verification. Co-verification, which verifies control software and embedded components together, is essential to establish the correctness of a complete system. The foundation of this approach is a unified model for co-verification and reachability analysis of the model. The LTL formula is converted into a Büchi automata, which is interleaved with the execution of the unified model under analysis. An online-capture offline-replay approach is proposed to improve the usefulness for formal verification. Case studies on a suite of realistic examples show that the presented approach has major potential in verifying system level properties, therefore improving the high-assurance of system.
A Generalized Hybrid Hoare Logic

Naijun Zhan,Xiangyu Jin,Bohua Zhan,Shuling Wang,Dimitar Guelev

2024-07-13

Abstract:Deductive verification of hybrid systems (HSs) increasingly attracts more attention in recent years because of its power and scalability, where a powerful specification logic for HSs is the cornerstone. Often, HSs are naturally modelled by concurrent processes that communicate with each other. However, existing specification logics cannot easily handle such models. In this paper, we present a specification logic and proof system for Hybrid Communicating Sequential Processes (HCSP), that extends CSP with ordinary differential equations (ODE) and interrupts to model interactions between continuous and discrete evolution. Because it includes a rich set of algebraic operators, complicated hybrid systems can be easily modelled in an algebra-like compositional way in HCSP. Our logic can be seen as a generalization and simplification of existing hybrid Hoare logics (HHL) based on duration calculus (DC), as well as a conservative extension of existing Hoare logics for concurrent programs. Its assertion logic is the first-order theory of differential equations (FOD), together with assertions about traces recording communications, readiness, and continuous evolution. We prove continuous relative completeness of the logic w.r.t. FOD, as well as discrete relative completeness in the sense that continuous behaviour can be arbitrarily approximated by discretization. Finally, we implement the above logic in Isabelle/HOL, and apply it to verify two case studies to illustrate the power and scalability of our logic.

Logic in Computer Science
A Clock-Based Dynamic Logic for Schedulability Analysis of CCSL Specifications.

Yuanrui Zhang,Frederic Mallet,Huibiao Zhu,Yixiang Chen,Bo Liu,Zhiming Liu

DOI: https://doi.org/10.1016/j.scico.2020.102546

IF: 1.039

2020-01-01

Science of Computer Programming

Abstract:The Clock Constraint Specification Language (CCSL) is a clock-based formalism for the specification and analysis of real-time embedded systems. The major goal of schedulability analysis of CCSL specifications is to solve the schedule problem, which is to answer ‘whether there exists a clock behaviour (also called a ‘schedule’) that conforms to a given CCSL specification'. Existing works on schedulability analysis of CCSL specifications are mainly based on model checking or SMT-solving. In this paper, however, we propose a theorem-proving approach to the problem. To this end, we define a clock-based dynamic logic (cDL) in which we can specify the clock behaviours and the clock relations in CCSL. With cDL, given a CCSL specification SP, we can express its schedule problem as a cDL formula ϕsp. Then solving the schedule problem is equivalent to checking the validity of ϕsp in the proof system of cDL. By analyzing the proof tree of ϕsp, we can generate a concrete schedule satisfying SP. Compared to the previous approaches, our method is not limited to special types of CCSL specifications and schedules and does not depend on the bounds that are set for approximate checking. We implement our cDL in Coq. We use an example throughout the paper to illustrate our method.
Safe Clockwork

Francesco Sannino,Juri Smirnov,Zhi-Wei Wang

DOI: https://doi.org/10.1103/PhysRevD.100.075009

2019-02-16

Abstract:In this letter we demonstrate that safe quantum field theories can accommodate the clockwork mechanism upgrading it to a fundamental theory a lá Wilson. Additionally the clockwork mechanism naturally sources Yukawa hierarchies for safe completions of the Standard Model (SM). As proof of concept we investigate a safe Pati-Salam (PS) clockwork structure.

High Energy Physics - Phenomenology
Formal Model Checking to Multi-Clock Design by Using Virtual Clock

YUE Hua-wei,YI Bo

DOI: https://doi.org/10.3969/j.issn.1004-3365.2007.05.006

2007-01-01

Abstract:As the scale and complexity of systems increase,design verification has become a significant challenge for ASIC design.Formal model check has received more and more attention due to its completeness of verification.However,the conventional formal model check is not applicable for multi-clock design.In this paper,a virtual clock was used to replace the original multi-clock,and the original design and computation tree logic(CTL) were modified,so that the formal model check can be used directly for verification.Finally,the complexity of modified design was analyzed.
A Framework for CPS Modeling and Verification Based on Dl.

Ying Zhou,Xufang Gong,Bixin Li,Min Zhu

DOI: https://doi.org/10.1109/icis.2018.8466460

2018-01-01

Abstract:With the development of sensor network and embedded system, CPS integrating computation, communication and control is becoming the focus of attention gradually. Obvious problems have emerged when CPS applying to various industries. It is crucial that the designed CPS can work as expect. A growing number of researchers are concerned about the property verification of CPS since verification technique has played a key role in improving the security and reliability of systems. It is a commonly used method that transforming generic model to formal model for verification. A formal method of theorem proving has well applied to verify CPS based on differential dynamic logic which operating model named Hybrid Program proposed by A. Platzer. This paper introduced HybridUML to model CPS, presented a method based on model transformation which mapped from HybridUML to Hybrid Program, and verified a case study with the resulting model finally.

A Formal Proof of the Soundness of the Hybrid CPS Clock Theory

A Hybrid Clock Logic System for CPS

A Clock-Based Framework for Construction of Hybrid Systems

A Hybrid Clock System Related to STeC Language

A Formal Model for a Hybrid Programming Language.

Specification and Verification of Multi-clock Systems Using a Temporal Logic with Clock Constraints

Formalization of Continuous Fourier Transform in Verifying Applications for Dependable Cyber-Physical Systems

Towards correctness proof for hybrid Simulink block diagrams

A Clock-Based Dynamic Logic for the Verification of CCSL Specifications in Synchronous Systems

Transforming Timing Requirements into CCSL Constraints to Verify Cyber-Physical Systems.

A Logical Approach for the Schedulability Analysis of CCSL

Modeling and Verification of CPS Based on Spatial Hybrid Automata

Parallel Composition and Modular Verification of Computer Controlled Systems in Differential Dynamic Logic

Transforming HybridUML to Hybrid Program for CPS Property Verification

Embedding CCSL into Dynamic Logic - A Logical Approach for the Verification of CCSL Specifications.

Co-Verification Approach to Control Software Program for CPS

A Generalized Hybrid Hoare Logic

A Clock-Based Dynamic Logic for Schedulability Analysis of CCSL Specifications.

Safe Clockwork

Formal Model Checking to Multi-Clock Design by Using Virtual Clock

A Framework for CPS Modeling and Verification Based on Dl.