SMV is a temporal logic model checker based on binary decision diagrams and symbolic model checking. A formal model of railway interlocking logic is built by using SMV, and then CTL specification representing the safety requirements of railway interlocking system is verified. The case study demonstrates that design defects could be found in safety-critical software through model verification, which is the trend of future development.
Railway Signalling & Communication
Railway Computer Interlocking System