基于SSM-HAZOP的自主化ATP等级转换功能建模与验证

Modeling and Verification of Level Transition Function of Autonomous ATP Based on SSM and HAZOP

针对高速铁路列控系统安全完整性等级要求高、安全功能需求验证难等问题,考虑列控系统安全需求建模具有层次性、并发性等特点,以自主化ATP等级转换功能为例,综合运用安全状态机(SSM)建模理论,以及危险与可操作性分析方法(HAZOP),提出一种基于SSM-HAZOP的建模与自动验证方法.首先建立等级转换功能的SSM模型,然后基于HAZOP方法提取安全属性,最后利用SCADE DV工具自动验证等级转换的安全需求.结果表明,该方法能够满足列控系统等级转换安全需求建模与验证的要求,可应用于自主化ATP的安全验证.

To deal with the requirements of high safety integrity level of the train control system for high-speed railway and the difficulty in verifying its safety function requirements with the characteristics of hierarchy and concurrency,a formal modeling and autom atic verification method based on Safe State Machine(SSM)theory and Hazard and Operability Safety Analysis Method(HAZOP)is proposed for level transition function of the autonom ous ATP system.Firstly,the SSM model of level transition is established.And then,the safety attributes are extracted by using HAZOP method.Finally,SCADE DV tool is used to verify level transition safety requirements autom atically.The results show that the method can meet the requirements of modeling and verification of level transition safety of the train control system and can be applied for safety verification of the autonom ous ATP.