Experience with Applying Formal Methods to Protocol Specification and System Architecture

In the last three years or so we at Enterprise Platforms Group at Intel Corporation have been applying formal methods to various problems that arose during the process of defining platform architectures for Intel's processor families. In this paper we give an overview of some of the problems we have worked on, the results we have obtained, and the lessons we have learned. The last topic is addressed mainly from the perspective of platform architects.     

Model checker aided design of a controller for a wafer scanner

For a case-study of a wafer scanner from the semiconductor industry it is shown how model checking techniques can be used to compute (1) a simple yet optimal deadlock avoidance policy, and (2) an infinite schedule that optimizes throughput. in the absence of errors. Deadlock avoidance is studied based on a simple finite state model using Smv, and for throughput analysis a more detailed timed automaton model has been constructed and analyzed using the Uppaal tool. The Smv and Uppaal models are formally related through the notion of a stuttering bisimulation. The results were obtained within 2 weeks, which confirms once more that model checking techniques may help to improve the design process of realistic, industrial systems. Methodologically, the case study is interesting since two models were used to obtain results that could not have been obtained using only a single model. Supported by the European Community Project IST-2001-35304 (Ametist), http://ametist.cs.utwente.nl/.     

Formal Analysis of Streaming Downloading Protocol for System Upgrading

For a PC-mobile download system which is embedded with streaming download protocol, there are problems that the data cannot be transmitted correctly from the PC to the mobile, or the transmission is unacceptably slow. To solve these problems, we carry out a formal analysis for the protocol with some timing parameters and a given probability of message loss and unordered data using a probabilistic model checking tool PRISM. We introduce a technique to reduce the state space of the system modeling the protocol which is a network of probabilistic timed automata. The experimental results in PRISM give us a clear explanation to the problems, and are helpful in identifying the optimal parameter settings to meet industrial requirements.     

The formal-CAFE methodology and model checking patterns in the specification of e-commerce systems

Electronic commerce is an important application that has evolved significantly recently. However, electronic commerce systems are complex and difficult to be correctly designed. Guaranteeing the correctness of an e-commerce system is not an easy task due to the great amount of scenarios where errors occur, many of them very subtle. In this work we presents a methodology that uses formal-method techniques, specifically symbolic model checking, to design electronic commerce applications and to automatically verify them. Also, a model checking pattern hierarchy has been developed—it specifies patterns to construct and verify the formal model of e-commerce systems. We consider this research the first step to the development of a framework, which will integrate the methodology, an e-commerce specification language based on business rules, and a model checker. Adriano Pereira received the B.S. and M.S. degrees in computer science in 2000 and 2002, respectively, and he is currently pursuing the Ph.D. degree in computer science from the Federal University of Minas Gerais, Belo Horizonte, Brazil. His current interests are on performance analysis and modeling of e-business and distributed systems, and formal methods. Mark Song received the B.S., M.S. and Ph.D. degrees in computer science from the Federal University of Minas Gerais, Belo Horizonte, Brazil. His current interests are on distributed systems and formal methods – especially BMC (Bounded Model Checking). Gustavo Franco received the B.S. and M.S. degrees in computer science in 2001 and 2004, respectively, from the Federal University of Minas Gerais, Belo Horizonte, Brazil. His research was on modeling the user behavior of e-business and distributed systems, and formal methods. Actually his current interests are on software engeneering and project management of IT projects.     

Modeling Condensation and Evaporation on Fruit Surface

Rewarming of fruits and vegetables after cooling is characterized by heat and mass transfer processes, which leads commonly to condensation of water on the produce surface at temperatures below the dew point. This effect may affect the produce quality due to microbial growth at unfavorable environmental conditions. The amount of condensed water is a function of the produce surface temperature and of the surrounding conditions as air temperature, air humidity, and air flow. Under practical conditions, both the warming and the condensation are strongly affected by the packaging system used. Depending on the flow conditions close to the produce surface, parameters of heat and mass transfer under laboratory conditions were measured. A mathematical model was developed for the determination of the amount of condensed water on fruit surfaces, its reevaporation, and its total dwell time dependent on the environment air conditions. The model describes the heat and mass transfer processes on single fruits. The process of diffusion of humidity in air and proceed of surface temperature is the basis for the model.     

Paste Residence Time in a Spouted Bed Dryer. III: Effect of Paste Properties and Quality Interactions

The aim of this study was to evaluate the effects of paste properties on residence time during drying in a spouted bed dryer with inert bodies. The effect of paste solids content, surface tension, and viscosity on the residence time distribution and the mean residence times were studied using factorial experimental designs. The inert bodies used were glass and polyethylene beads. The mean residence times varied from 13.6 to 16.3 and 12.2 to 17.7 min for drying on glass and polyethylene beads, respectively. The analysis of variance showed that mean residence times significantly depended on solids content and surface tension for glass beads and also on viscosity for polyethylene beads. The residence time distributions for all conditions studied fitted well to the perfect mixing cell when applying the continuous stirred vessels in series model analysis. The powder density, flowability, and particle size depended on paste properties and inert type.     

近程地对地战术导弹的作用与问题

海湾战争中,“爱国者”导弹成功地拦截了“飞毛腿”导弹,给近程地对地战术导弹的作用、发展与装备方向提出了值得思考的问题。本文着重讨论在局部战争中,近程地对地战术导弹的作用、使用场合及其技术发展方向。     

A new curvature technique calculation for surface tension contribution in PLIC-VOF method

The volume of fluid (VOF) methods have been used for numerous numerical simulations. Among these techniques used to define the moving interface, the piecewise linear interface reconstruction (PLIC-VOF) is one of the most accurate. A study of the superficial tension impact on two-phase flow with free surface is presented. A new method based on direct staggered grid is developped to include surface tension in PLIC-VOF. The new numerical curvature calculation method doesn't need smoothed colour function and leads to less “spurious current”. This technique is applied to the calculus of surface tension force in the case of the rise of air bubble in viscous liquid and the fall of liquid drop in the same liquid on free surface. Droplets, thin layer and capillarity waves are observed after the free surface rupture for different Bond number. The influence of surface tension calculus is then obvioused and when the drop hit the free surface, wavelets propagate toward the virtual boundaries imposed.     

Effects of the cryogenic cooling on the fatigue strength of the AISI 304 stainless steel ground components

For environmental considerations, the substitution of the conventionally used oil-based grinding fluids has nowadays become strongly recommended. Although several alternatives have been proposed, cryogenic cooling by liquid nitrogen is the non-polluting coolant that has been given relatively more attention because of its very low temperature. In this investigation, in order to contribute to developing this promising cooling mode, its beneficial effects on the ground surface integrity of the AISI 304 stainless steel and their consequences on the fatigue lifetime are explored. Results of this investigation show that grinding under cryogenic cooling mode generates surfaces with lower roughness, less defects, higher work hardening and less tensile residual stresses than those obtained on surfaces ground under oil-based grinding fluid. These surface enhancements result into substantial improvements in the fatigue behaviour of components ground under this cooling mode. An increasing rate of almost 15% of the endurance limit at 2 × 10⁶ cycles could be realized. SEM analyses of the fatigue fracture surfaces have shown that the fatigue cracks observed on the specimens ground under cryogenic cooling are shorter (i.e., 30-50 μm) than those generated under oil-based cooling mode (i.e., 150-200 μm). The realized improvements in the surface integrity and in the fatigue behaviour are thought to be related to the reduction of the grinding zone temperature observed under cryogenic cooling, as no significant differences between the grinding force components for both cooling modes have been observed.