Formal specification and refinement of a safe train control function

Motivated by the design and development challenges of the BART case study, an approach for developing and analyzing a formal model for reactive systems is presented. The approach makes use of a domain specific language for specifying control algorithms able to satisfy competing properties such as safety and optimality. The domain language, called SPC, offers several key abstractions such as the state, the profile, and the constraint to facilitate problem specification. Using a high-level program transformation system such as HATS being developed at the University of Nebraska at Omaha, specifications in this modelling language can be transformed to ML code. The resulting executable specification can be further refined by applying generic transformations to the abstractions provided by the domain language. Problem dependent transformations utilizing the domain specific knowledge and properties may also be applied. The result is a significantly more efficient implementation which can be used for simulation and gaining deeper insight into design decisions and various control policies. The correctness of transformations can be established using a rewrite-rule based induction theorem prover Rewrite Rule Laboratory developed at the University of New Mexico.

function definition language fdl and its implementation

A Function Definition Language (FDL) is presented. Though designed for describing specifications, FDL is also a general-purpose functional programming language. It uses context-free language as data type, supports pattern matching definition of functions, offers several function definition forms, and is executable. It is shown that FDL has strong expressiveness, is easy to use and describes algorithms concisely and naturally. An interpreter of FDL is introduced. Experiments and discussion are included.

THE MATRIX ANALYSIS FOR AN OPTICAL FREE-SPACE SWITCHING NETWORK AND AN OPTICAL CROSSOVER NETWORK WITH 4-FUNCTION INTERCHANGE NODES

A matrix analysis for free-space switching networks, such as perfect shuffle-exchange omega, crossover and Banyan is presented. On the basis of matrix analysis, the equivalence of these three switching networks and the route selection between input and output ports are simply explained. Furthermore, an optical crossover switching network, where MQW SEED arrays are used as electrically addressed four-function interchange nodes, is described and the optical crossover interconnection of 64 x 64, and high-speed four-function, interchange nodes is demonstrated in the experiment.

SEMICLASSICAL AND ENVELOPE-FUNCTION TREATMENT OF MAGNETIC LEVELS IN SUPERLATTICES UNDER AN INPLANE MAGNETIC-FIELD

The theoretical treatment of magnetic levels formed in the minibands of superlattices under an in-plane magnetic field is discussed. It is found that the results of semiclassical and envelope-function treatments based on miniband structures are in good agreement with the results calculated strictly by the quantum-mechanical method, so long as the critical parameter 2hc/eBL2 is larger than 1. The wave functions obtained are in the nature of superlattice envelope functions, which are over and above the usual effective-mass envelope functions for bulk materials.