No Access

A MULTIFORMALISM MODULAR APPROACH TO ERTMS/ETCS FAILURE MODELING

FRANCESCO FLAMMINI

Innovation and Competitiveness Unit, AnsaldoSTS, via Argine, 425, 80147, Naples, Italy

Search for more papers by this author

STEFANO MARRONE

Dip. di Matematica e Fisica, Seconda Universitá di Napoli, via Lincoln, 5, 81100, Caserta, Italy

Search for more papers by this author

MAURO IACONO

Dip. di Studi Politici, Seconda Universitá di Napoli, Viale Ellittico, 31, 81100, Caserta, Italy

Search for more papers by this author

NICOLA MAZZOCCA

Dip. di Ingegneria Elettrica e Tecnologie dell'Informazione, Universitá di Napoli "Federico II", Via Claudio, 21, 80125, Naples, Italy

Search for more papers by this author

, and

VALERIA VITTORINI

Dip. di Ingegneria Elettrica e Tecnologie dell'Informazione, Universitá di Napoli "Federico II", Via Claudio, 21, 80125, Naples, Italy

Search for more papers by this author

https://doi.org/10.1142/S0218539314500016Cited by:25 (Source: Crossref)

Abstract

European Railway Traffic Management System/European Train Control System (ERTMS/ETCS) is a recent standard aimed at improving performance, safety and inter-operability of modern railways. In order to be compliant to ERTMS/ETCS, a railway signalling system must meet strict nonfunctional requirements on system level failure modes. In this paper, a multiformalism model is employed to perform an availability analysis of an ERTMS/ETCS reference architecture at early phases of its development cycle. At this aim, a bottom-up analysis is performed from subsystem failure models (expressed by means of Generalized Stochastic Petri Nets, Fault Trees and Repairable Fault Trees) up to the overall system model. The modular approach, here used, allows to evaluate the influence of basic design parameters on the probability of system-level failure modes and demonstrates that system availability is within the bound required by the ERTMS/ETCS specification. The results show that the multiformalism modeling approach helps to cope with complexity, eases the verification of availability requirements and can be successfully applied to the analysis of complex critical systems.

Keywords:

References

UIC, ERTMS/ETCS class1 system requirements specification, ref. SUBSET-026, issue 2.2.2 (2002) . Google Scholar
M. W. Pollack, IEEE Potentials 17(1), 8 (1998), DOI: 10.1109/45.652849. Crossref, Google Scholar
A. U. H. Sheikhet al., IEEE Trans. Veh. Technol. 39(3), 256 (1990), DOI: 10.1109/25.131007. Crossref, Web of Science, Google Scholar
A. Amendolaet al., Experimental evaluation of computer-based railway control systems, Proc. 27th Int. Symp. Fault-Tolerant Computing (IEEE Computer Society, 1997) pp. 380–384. Google Scholar
N. Aoumeur and G. Saake, Towards an adequate framework for specifying and validating runtime evolving complex discrete-event systems, Proc. Workshop on Modelling of Objects, Components and Agents (MOCA 2001) (2001) pp. 1–19. Google Scholar
J. Padberget al., J. Integr. Des. Process Sci. 5(1), 3 (2001). Web of Science, Google Scholar
M. M. Hörste and E. Schnieder, Formal modelling and simulation of train control systems using petri nets, FM '99: Proc. Wold Congress on Formal Methods in the Development of Computing Systems-Volume II (Springer-Verlag, London, UK, 1999) p. 1867. Google Scholar
A. G. Hassami and A. G. Foord, Systems safety — A real example (european rail traffic management system, ERTMS), Second Int. Cont. Human Interfaces in Control Rooms, Cockpits and Command Centres, 2001, IEE Conf. Publications, No. 481 (2001), pp. 327–334 . Google Scholar
P. di Tommasoet al., Hazard analysis of complex distributed railway systems, Proc. 22nd Int. Symposium on Hazand Analysis of Complex Distributed Railway Systems (2003) pp. 283–292. Google Scholar
A. Zimmermann and G. Hommel, J. Syst. Softw. 77(1), 47 (2005), DOI: 10.1016/j.jss.2003.12.039. Crossref, Web of Science, Google Scholar
J. Trowitzsch and A. Zimmermann, Using UML state machines and petri nets for the quantitative investigation of ETCS, valuetools'06: Proc. 1st Int. Conf. Performance Evaluation Methodolgies and Tools (ACM, 2006) p. 34. Google Scholar
R. Espositoet al., Formal verification of ERTMS Euroradio safety critical protocol, IEEE Symp. on Formal Methods for Railway Operation and Control Systems (IEEE Computer Society, 2003) pp. 21–29. Google Scholar
F. Flamminiet al., Modelling system reliability aspects of ERTMS/ETCS by fault trees and bayesian networks, ESREL '06: Proc. 15th European Safety and Reliability Conf. (ESREL 2006) (Taylor and Francis, 2006) pp. 2675–2683. Google Scholar
F. Flamminiet al., Reliab. Eng. Syst. Saf. 94, 1422 (2009), DOI: 10.1016/j.ress.2009.02.014. Crossref, Web of Science, Google Scholar
UNISIG, ERTMS/ETCS RAMS requirements specification, ref. 96s1266 (1998) . Google Scholar
CENELEC, EN50126 railways applications — The specification and demonstration of reliability, availability, maintainability and safety (RAMS) (1999) . Google Scholar
D. M. Nicol, W. H. Sanders and K. S. Trivedi, IEEE Trans. Dependable. Secur. Comput. 1(1), 48 (2004). Crossref, Web of Science, Google Scholar
P. J. Mosterman and H. Vangheluwe, Simulation 80(9), 433 (2004), DOI: 10.1177/0037549704050532. Crossref, Google Scholar
A. Joshi and M. P. E. Heimdahl, Behavioral fault modeling for model-based safety analysis, IEEE Int. Symp. High-Assurance Systems Engineering (2007) pp. 199–208. Google Scholar
V. Vittoriniet al., Softw. Syst. Model. 3(1), 68 (2004). Crossref, Google Scholar
M. Iacono, E. Barbierato and M. Gribaudo, Comput. Math. Appl. 64(12), 3828 (2012), DOI: 10.1016/j.camwa.2012.03.009. Crossref, Web of Science, Google Scholar
S. Bernardiet al., Reliab. Eng. Syst. Saf. 120, 112 (2013), DOI: 10.1016/j.ress.2013.06.032. Crossref, Web of Science, Google Scholar
J. Peleska, J. Feuser and A. E. Haxthausen, Railway Safety, Reliability, and Security: Technologies and Systems Engineering (IGI Global, Inc., 2012) pp. 22–52. Crossref, Google Scholar
F. Flamminiet al., Model-driven V&V processes for computer based control systems: A unifying perspective, Proc. 5th Int. Conf. Leveraging Applications of Formal Methods, Verification and Validation: Applications and Case Studies — Volume Part II (Heraklion, Crete, Greece, 2012) pp. 190–204. Google Scholar
NUREG, Fault Tree Handbook (NUREG, 1981) . Google Scholar
D. Codetta-Raiteriet al., Repairable fault tree for the automatic evaluation of repair policies, DSN '04: Proc 2004 Int. Conf. Dependable Systems and Networks (IEEE Computer Society, Washington, DC, USA, 2004) p. 659. Google Scholar
A. Bobbioet al., Comparing fault trees and bayesian networks for dependability analysis, Proc. 18th Int. Conf. Computer Safety, Reliability and Security, SAFECOMP99 (1999) pp. 310–322. Google Scholar
The world of ERTMS, Available at: http://www.ertms.com/ . Google Scholar
F. Flamminiet al., Using repairable fault trees for the evaluation of design choices for critical repairable systems, IEEE Int. Symp. High-Assurance Systems Engineering (2005) pp. 163–172. Google Scholar
S. Bernardi and S. Donatelli, Building petri net scenarios for dependable automation systems, Proc. 10th Int. Workshop on Petri Nets and Performance Models (PNPM2003) (IEEE Computer Society, 2003) pp. 72–81. Google Scholar
G. Bucci, L. Sassoli and E. Vicario, IEEE Trans. Softw. Eng. 31(11), 913 (2005), DOI: 10.1109/TSE.2005.122. Crossref, Web of Science, Google Scholar
K. Goseva-Popstojanova and K. S. Trivedi, Performance Evaluation: Origins and Directions (Springer-Verlag, London, UK, 2000) pp. 403–422. Crossref, Google Scholar
R. German , Performance Analysis of Communication Systems with Non-Markovian Stochastic Petri Nets ( John Wiley & Sons, Inc. , New York, NY, USA , 2000 ) . Google Scholar
F. Gagliardi Cozman, JavaBayes — User manual, Available at: http://www.cs. cmu.edu/~javabayes/ . Google Scholar
F. Moscatoet al., The software architecture of the osmosys multisolution framework, ValueTools '07: Proc. 2nd Int. Conf. Performance Evaluation Methodologies and Tools (ICST, Brussels, Belgium, 2007) pp. 1–10. Google Scholar