Model-based verification of I and C specifications - 184
In the field of nuclear I and C (Instrumentation and Control), the late detection of errors in the specifications and the design of I and C has a strong impact in terms of time and money. The early verification in the V cycle of I and C functions is a key issue to capture inconsistencies and errors before the implementation and on-site tests. EDF, in the framework of the collaborative project CONNEXION, has investigated methods based on simulation to formalize I and C requirements and to evaluate them at the conceptual and basic design phases. Behavioral models of the physic parts of the system and I and C functions, described as functional diagrams, are co-simulated in an integration environment based on the FMI (Functional Mockup Interface) standard. In this specific environment, test scenarios are performed on these models. These scenarios are defined on the basis of a high level model of the studied system that takes into account the states to cover (in normal and degraded situations). Requirements, once formalized, are translated into observers that evaluate their fulfillment during the simulations. Simulation logs are then a tool for the designer to analyze the causes of the possible non-fulfillment of requirements and to fix the corresponding errors in the specifications. The proposed methodology enables to detect errors in the specifications of I and C functions, to generate automatically functional test scenarios taking into account the coverage of the requirements and all the different operational modes of the system. (authors)