%0 Conference Paper
%A Ge, Ning
%A Dieumegard, Arnaud
%A Jenn, Eric
%A D'Ausbourg, Bruno
%A Aït-Ameur, Yamine
%B TASE (11th International Symposium on Theoretical Aspects of Software Engineering)
%C Sophia Antipolis (France)
%D 2018
%F publications:28489
%K Safety-critical human machine interface system - Formal methods - Specification - Verification - Integration - LIDL - Lustre - HLL - S3
%P 1-8
%T Formal development process of safety critical embedded human machine interface systems
%U https://publications.ut-capitole.fr/id/eprint/28489/
%X This paper presents a formal development process for safety-critical embedded Human-Machine Interface (HMI) systems. This formal approach is centered on the LIDL formal language and the S3 verification toolset. It is aimed at blurring the boundaries between modeling, design, verification and implementation for the development of HMI. From textual requirements to safety-critical embedded software, the development process integrates the following formal activities: modeling the behavioral aspect of user interfaces (UIs) using the LIDL language; translating LIDL to Lustre, with which we combine the functional library in Lustre; translating the Lustre design models into the HLL verification models; verifying formal properties expressed in HLL against the HLL model using the S3 toolset, and diagnosing design errors with the help of counterexample scenarios and debug tools. This formal development process is illustrated on a simple use case of part of the display component of an alert management system embedded in a three-wheeled robot.
%Z Thanks to IEEE. The original document is available on IEEE Xplore : http://ieeexplore.ieee.org/document/8285636/ © 2017 . Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.