Abstract:  As the embedded system is widely used in the safety-critical fields such as aeronautics, astronautics and transportation, AltaRica is a kind of formal modeling languages for safety-critical systems. Modeling critical systems based on AltaRica model and the safety analysis upon this have become the industrial standard in Europe. This paper proposes a kind of embedded system safety verification method based on AltaRica model, which includes, firstly model the embedded system using AltaRica, then exhibit the transformation rules from AltaRica model to Promela model, at the same time do formal proofs on transformation rules, so as to acquire the Promela model of embedded system, and finally use SPIN, a model check tool, to analyze and verify it. This paper takes the control unit of wheel brake system as an example to verify this transformation rules and method.

Key words: embedded system, safety verification, AltaRica model, Promela model

摘要： 嵌入式系统在航空、航天、交通等安全关键领域的使用愈加广泛，AltaRica是一种描述安全关键系统的建模语言，同时基于AltaRica模型的安全性分析已成为欧洲的工业标准。提出了一种面向AltaRica模型的嵌入式系统安全性验证方法，包括：使用AltaRica语言对嵌入式系统进行建模；给出AltaRica模型到Promela模型的转换规则；对转换规则进行形式化证明，得到嵌入式系统的Promela模型；使用模型检验工具SPIN进行安全性验证。通过机轮刹车系统中的机轮刹车控制单元进行实例分析，验证了转换规则的正确性和有效性。

关键词: 嵌入式系统, 安全性验证, AltaRica模型, Promela模型