Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “communication trace”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9
All sourcesNASA NTRSDOE OSTI
NASA NTRS2004

Discrepancy Reporting Management System

Discrepancy Reporting Management System (DRMS) is a computer program designed for use in the stations of NASA's Deep Space Network (DSN) to help establish the operational history of equipment items; acquire data on the quality of service provided to DSN customers; enable measurement of service performance; provide early insight into the need to improve processes, procedures, and interfaces; and enable the tracing of a data outage to a change in software or hardware. DRMS is a Web-based software system designed to include a distributed database and replication feature to achieve location-specific autonomy while maintaining a consistent high quality of data. DRMS incorporates commercial Web and database software. DRMS collects, processes, replicates, communicates, and manages information on spacecraft data discrepancies, equipment resets, and physical equipment status, and maintains an internal station log. All discrepancy reports (DRs), Master discrepancy reports (MDRs), and Reset data are replicated to a master server at NASA's Jet Propulsion Laboratory; Master DR data are replicated to all the DSN sites; and Station Logs are internal to each of the DSN sites and are not replicated. Data are validated according to several logical mathematical criteria. Queries can be performed on any combination of data.

Cooper, Tonja M.↗
NASA NTRS2009

Model Checking - My 27-Year Quest to Overcome the State Explosion Problem

Model Checking is an automatic verification technique for state-transition systems that are finite=state or that have finite-state abstractions. In the early 1980 s in a series of joint papers with my graduate students E.A. Emerson and A.P. Sistla, we proposed that Model Checking could be used for verifying concurrent systems and gave algorithms for this purpose. At roughly the same time, Joseph Sifakis and his student J.P. Queille at the University of Grenoble independently developed a similar technique. Model Checking has been used successfully to reason about computer hardware and communication protocols and is beginning to be used for verifying computer software. Specifications are written in temporal logic, which is particularly valuable for expressing concurrency properties. An intelligent, exhaustive search is used to determine if the specification is true or not. If the specification is not true, the Model Checker will produce a counterexample execution trace that shows why the specification does not hold. This feature is extremely useful for finding obscure errors in complex systems. The main disadvantage of Model Checking is the state-explosion problem, which can occur if the system under verification has many processes or complex data structures. Although the state-explosion problem is inevitable in worst case, over the past 27 years considerable progress has been made on the problem for certain classes of state-transition systems that occur often in practice. In this talk, I will describe what Model Checking is, how it works, and the main techniques that have been developed for combating the state explosion problem.

Clarke, Ed↗
DOE OSTI2017

New Generation Flask Sampling Technology Final Report

Scientists are turning their focus to the Arctic, site of one of the strongest climate change signals. A new generation of technologies is required to function within that harsh environment, chart evolution of its trace gases and provide new kinds of information for models of the atmosphere. Our response to the solicitation tracks how global atmospheric monitoring was launched more than a half century ago; namely, acquisition of discrete samples of air by flask and subsequent analysis in the laboratory. AOS is proposing to develop a new generation of flask sampling technology. It will enable the new Arctic programs to begin with objective high density sampling of the atmosphere by UAS. The Phase I program will build the prototype flask technology and show that it can acquire and store mol fractions of CH4 and CO2 and value of δ13C with good fidelity. A CAD model will be produced for the entire platform including a package with 100 flasks and the airframe with auto-pilot, electronic propulsion and ground-to-air communications. A mobile flask analysis station will be prototyped in Phase I and designed to final form in Phase II. It expends very small sample per analysis and will interface directly to the flask package integrated permanently into the UAS fuselage. Commercial Applications and Other Benefits: • The New Generation Flask Sampling Technology able to provide a hundred or more samples of air per UAS mission. • A mobile analysis station expending far less sample than the existing ones and small enough to be stationed at the remote sites of Arctic operations. • A new form of validation for continuous trace gas observations from all platforms including the small UAS. • Further demonstration to potential customers of the AOS capabilities to invent, build, deploy and exploit entire platforms for observations of Earth’s atmosphere and ocean. Key Words: Flask Sampler, Mobile Analysis Station, Trace Gas, CO2, CH4, δC13, UAS, Baseline Airborne Observatory, Arctic, Climate Change. Summary for Members of Congress: The air, land and sea of the Arctic combine to produce a large climate change signal. AOS is proposing to develop unmanned airborne technologies able to begin prompt, objective observations of the signal’s atmospheric component.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS1995

MMPP Traffic Generator for the Testing of the SCAR 2 Fast Packet Switch

A prototype MWP Traffic Generator (TG) has been designed for testing of the COMSAT-supplied SCAR II Fast Packet Switch. By generating packets distributed according to a Markov-Modulated Poisson Process (MMPP) model. it allows the assessment of the switch performance under traffic conditions that are more realistic than could be generated using the COMSAT-supplied Traffic Generator Module. The MMPP model is widely believed to model accurately real-world superimposed voice and data communications traffic. The TG was designed to be as much as possible of a "drop-in" replacement for the COMSAT Traffic Generator Module. The latter fit on two Altera EPM7256EGC 192-pin CPLDs and produced traffic for one switch input port. No board changes are necessary because it has been partitioned to use the existing board traces. The TG, consisting of parts "TGDATPROC" and "TGRAMCTL" must merely be reprogrammed into the Altera devices of the same name. However, the 040 controller software must be modified to provide TG initialization data. This data will be given in Section II.

Chren, William A., Jr.↗
NASA NTRS2012

The Geostationary Fourier Transform Spectrometer

The Geostationary Fourier Transform Spectrometer (GeoFTS) is an imaging spectrometer designed for a geostationary orbit (GEO) earth science mission to measure key atmospheric trace gases and process tracers related to climate change and human activity. GEO allows GeoFTS to continuously stare at a region of the earth for frequent sampling to capture the variability of biogenic fluxes and anthropogenic emissions from city to continental spatial scales and temporal scales from diurnal, synoptic, seasonal to interannual. The measurement strategy provides a process based understanding of the carbon cycle from contiguous maps of carbon dioxide (CO2), methane (CH4), carbon monoxide (CO), and chlorophyll fluorescence (CF) collected many times per day at high spatial resolution (~2.7kmx2.7km at nadir). The CO2/CH4/CO/CF measurement suite in the near infrared spectral region provides the information needed to disentangle natural and anthropogenic contributions to atmospheric carbon concentrations and to minimize uncertainties in the flow of carbon between the atmosphere and surface. The half meter cube size GeoFTS instrument is based on a Michelson interferometer design that uses all high TRL components in a modular configuration to reduce complexity and cost. It is self-contained and as independent of the spacecraft as possible with simple spacecraft interfaces, making it ideal to be a "hosted" payload on a commercial communications satellite mission. The hosted payload approach for measuring the major carbon-containing gases in the atmosphere from the geostationary vantage point will affordably advance the scientific understating of carbon cycle processes and climate change.

atmospheric trace gases↗
NASA NTRS2015

The Use of UML for Software Requirements Expression and Management

It is common practice to write English-language "shall" statements to embody detailed software requirements in aerospace software applications. This paper explores the use of the UML language as a replacement for the English language for this purpose. Among the advantages offered by the Unified Modeling Language (UML) is a high degree of clarity and precision in the expression of domain concepts as well as architecture and design. Can this quality of UML be exploited for the definition of software requirements? While expressing logical behavior, interface characteristics, timeliness constraints, and other constraints on software using UML is commonly done and relatively straight-forward, achieving the additional aspects of the expression and management of software requirements that stakeholders expect, especially traceability, is far less so. These other characteristics, concerned with auditing and quality control, include the ability to trace a requirement to a parent requirement (which may well be an English "shall" statement), to trace a requirement to verification activities or scenarios which verify that requirement, and to trace a requirement to elements of the software design which implement that requirement. UML Use Cases, designed for capturing requirements, have not always been satisfactory. Some applications of them simply use the Use Case model element as a repository for English requirement statements. Other applications of Use Cases, in which Use Cases are incorporated into behavioral diagrams that successfully communicate the behaviors and constraints required of the software, do indeed take advantage of UML's clarity, but not in ways that support the traceability features mentioned above. Our approach uses the Stereotype construct of UML to precisely identify elements of UML constructs, especially behaviors such as State Machines and Activities, as requirements, and also to achieve the necessary mapping capabilities. We describe this approach in the context of a space-based software application currently under development at the Jet Propulsion Laboratory.

model-based engineering↗
DOE OSTI2024

Polycaprolactone‐Based Zinc Ink for High Conductivity Transient Printed Electronics and Antennas

Abstract Distributed sensors and electronics can be used in agriculture to optimize crop management and improve environmental outcomes. Electronic devices in these outdoor spaces require medium to long range (>1m) wireless communication of data over several weeks or months, which in turn requires high conductivity (1 × 10 5 Sm −1 ) antennas. Printed bioinert or ecoresorbable conductors, comprising carbon, magnesium, or zinc fillers, typically exhibit conductivity on the order of 10–1000 Sm −1 and lifetimes from a few hours to a few days. A print‐based fabrication process for chemically treated zinc traces, which achieves conductivity of up to 6 × 10 5 Sm −1 is reported here. The ink formulation uses a non‐water‐soluble soil biodegradable polycaprolactone binder. The ink and printing processes reported here led to stable conductive traces that are used in ultra high frequency radio frequency identification (UHF‐RFID) folded dipole antennas operating at 915 MHz. The conductivity of the printed traces is maintained for over 70 days in ambient environments when traces are protected by a biodegradable beeswax encapsulation layer.

Baumbauer, Carol L.↗
NASA NTRS2016

Command and Data Handling Branch Internship

Modular Integrated Stackable Layers (MISL) is a computer system designed for simple, fast, and cost effective flexible reconfiguration in space environments such as the ISS and Orion projects for various uses. Existing applications include wireless and wired communications, data acquisition and instrumentation, and camera systems, and potential applications include bus protocol converters and subsystem control. MISL is based on Texas Instruments (TI)' MSP430 16-bit ultra-low-power microcontroller device. The purpose of my project was to integrate the MISL system with a liquid crystal display (LCD) touchscreen. The LCD, manufactured by Crystalfontz and part number CFAF320240F-035T-TS, is a 320 by 240 RGB resistive color screen including an optional carrier board. The vast majority of the project was done with Altium Designer, a tool for printed circuit board (PCB) schematic capture, 3D design, and FPGA (Field Programmable Gate Array) development. The new PCB was to allow the LCD to directly stack to the rest of MISL. Research was done with datasheets for the TI microcontroller and touchscreen display in order to meet desired hardware specifications. Documentation on prior MISL projects was also utilized. The initial step was to create a schematic for the LCD, power bus, and data bus connections between components. A layout was then designed with the required physical dimensions, routed traces and vias, power and ground planes, layer stacks, and other specified design rules such as plane clearance and hole size. Multiple consultation sessions were held with Hester Yim, the technical discipline lead for the Command and Data Handling Branch, and Christy Herring, the lead PCB layout designer in the Electronic Design and Manufacturing Branch in order to ensure proper configuration. At the moment, the PCB is awaiting revision by the latter-mentioned branch. Afterwards, the board will begin to undergo the manufacturing and testing process. Throughout the internship at Johnson Space Center, I gained several technical and professional skills. I gained proficiency in Altium Designer and experience using subversion clients, as well as knowledge in PSpice with OrCAD and battery design for spaceflight from on-site. I also gained networking, organization, and communication skills throughout meetings with coworkers and other interns. This internship at Johnson Space Center has impacted my future aspirations by further inspiring me to follow a career path into space rated engineering technology and human spaceflight applications. After graduation, I plan to attend graduate Modular Integrated Stackable Layers (MISL) is a computer system designed for simple, fast, and cost effective flexible reconfiguration in space environments such as the ISS and Orion projects for various uses. Existing applications include wireless and wired communications, data acquisition and instrumentation, and camera systems, and potential applications include bus protocol converters and subsystem control. MISL is based on Texas Instruments’ MSP430 16 bit ultra-low power microcontroller device. The purpose of my project was to integrate the MISL system with a liquid crystal display touchscreen. The LCD, manufactured by Crystalfontz and part number CFAF320240F-035T-TS, is a 320x240 RGB resistive color screen including an optional carrier board.The vast majority of the project was done with Altium Designer, a tool for printed circuit board (PCB) schematic capture, 3D design, and FPGA development. The new PCB was to allow the LCD to directly stack to the rest of MISL. Research was done with datasheets for the TI microcontroller and touchscreen display in order to meet desired hardware specifications. Documentation on prior MISL projects was also utilized. The initial step was to create a schematic for the LCD, power bus, and data bus connections between components. A layout was then designed with the required physical dimensions, routed traces and vias, power and ground planes, layer stacks, and other specified design rules such as plane clearance and hole size. Multiple consultation sessions were held with Hester Yim, the technical discipline lead for the Command and Data Handling Branch, and Christy Herring, the lead PCB layout designer in the Electronic Design and Manufacturing Branch in order to ensure proper configuration. At themoment, the PCB is awaiting revision by the latter-mentioned branch. Afterwards, the board will begin to undergo the manufacturing and testing process.Throughout the internship at Johnson Space Center, I gained several technical and professional skills. I gained proficiency in Altium Designer and experience using subversion clients, as well as knowledge in PSpice with OrCAD and battery design for spaceflight from on-site. I also gained networking, organization, and communication skills throughout meetings with coworkers and other interns. This internship at Johnson Space Center has impacted my future aspirations by further inspiring me to follow a career path into space rated engineering technology and human spaceflight applications. After graduation, I plan to attend graduate school for a master's or doctorate degree in electrical or computer engineering.

Billings, Rachel Mae↗
NASA NTRS2020

Communications with Curiosity during solar conjunction

This study examines the methodology for operating and communicating with NASA's Curiosity Rover (MSL) during the 2019 solar conjunction. For MSL, solar conjunction occurs when the viewing angle between the Sun and Mars from Earth's perspective falls below 3 degrees, which occurs roughly every two Earth years and lasts for about two weeks. This presents a challenge for engineers operating a vehicle on Mars because the degraded signal to noise ratio disrupts data flow between Earth and the spacecraft. As a result, operators designate a command moratorium in which no commands are sent to the rover and instead design long-term plans that are uplinked weeks in advance (rather than the nominal case of daily uplinks). Coordinating communications with the rover leading up to and following conjunction requires negotiations with several orbiters, another lander, and the Deep Space Network (DSN) each with their own set of constraints. It is the Strategic Comm Planning T coordination, which acts as a baseline for the conjunction Comm team faced additional complications such as the arrival of two new spacecraft at Mars - Roscosmos ExoMars Trace Gas Orbiter (TGO).

Laubach, Sharon↗
DOE OSTI2010

Investigation of the phase-locking behavior by utilizing self-phase- and cross-phase-modulation in cubic susceptibility medium: Theory and experiment

A phase-locking approach for two individual lasing fields has been theoretically proposed and experimentally demonstrated by exploiting the nonlinearity in a highly nonlinear fiber. A closed form expression describing the phase difference is derived from the robust coupled-wave equations, and the theoretical analysis indicates that phase synchronization is possible as long as the condition of low-efficiency multiple four-wave mixing associated with the strong strength of the self-phase-modulation and cross-phase-modulation is satisfied. The phase-locking phenomenon is verified by means of assessing the quality of the autocorrelation traces and the radiofrequency spectra for the beat-note signal. Finally, the authors investigate the phase stability by monitoring the stability of the beat-note signal as a function of different injected powers. Discussions on phase-locking technique could be expected to be helpful in interpreting the coexistence and competition of various nonlinearity in the fiber and widely applied to the optical communication systems.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2018

Modeling Large-Scale Slim Fly Networks Using Parallel Discrete-Event Simulation

As supercomputers approach exascale performance, the increased number of processors translates to an increased demand on the underlying network interconnect. We present that the slim fly network topology, a new low-diameter, low-latency, and low-cost interconnection network, is gaining interest as one possible solution for next-generation supercomputing interconnect systems. In this article, we present a high-fidelity slim fly packet-level model leveraging the Rensselaer Optimistic Simulation System (ROSS) and Co-Design of Exascale Storage (CODES) frameworks. We validate the model with published work before scaling the network size up to an unprecedented 1 million compute nodes and confirming that the slim fly observes peak network throughput at extreme scale. In addition to synthetic workloads, we evaluate large-scale slim fly models with real communication workloads from applications in the Design Forward program with over 110,000 MPI processes. We show strong scaling of the slim fly model on an Intel cluster achieving a peak network packet transfer rate of 2.3 million packets per second and processing over 7 billion discrete events using 128 MPI tasks. Enabled by the strong performance capabilities of the model, we perform a detailed application trace and routing protocol performance study. Lastly, through analysis of metrics such as packet latency, hop count, and congestion, we find that the slim fly network is able to leverage simple minimal routing and achieve the same performance as more complex adaptive routing for tested DOE benchmark applications.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Molten Salt Loop Operational Experience and Test Campaigns in FY24

The Facility to Alleviate Salt Technology Risks (FASTR) at the US Department of Energy (DOE) Oak Ridge National Laboratory (ORNL) was developed to demonstrate technology for high-temperature chloride salt systems (Figure 1). FASTR is primarily constructed using alloy C-276 and is designed to operate at temperatures of up to 725°C. The facility is loaded with 250 kg of NaCl-KCl-MgCl 2 salt. This salt provides a relevant test environment for de-risking technology while avoiding the costs and hazards associated with beryllium-based or uranium-bearing salts. The facility’s major components include a centrifugal pump for salt circulation, an air-based heat exchanger to reject heat, a suite of instrumentation, and trace heating to prevent salt freezing. The salt was purified in 2020 and 2022, and the pumped loop first operated in December 2022. FASTR is a unique US capability for high-temperature molten halide salt testing. FASTR’s scale, co located purification system, and relatively large power (465 kW) differentiates it from other testing systems. Furthermore, access to the DOE-supported facility and efficient communication of results— which are generally disseminated publicly—distinguish FASTR as being broadly significant throughout the molten salt reactor community. FASTR is similar to ORNL’s Liquid Salt Test Loop (LSTL), although FASTR contains chloride-based salt instead of the fluoride-based salt (LiF-NaF-KF) found in LSTL. Furthermore, FASTR is approximately 2× larger than LSTL in terms of pipe size and length, power, salt volume, flow rate, and number of thermocouples. The LSTL first operated in 2016. At the end of FY23, there was a suspected gas leak in the LSTL that halted operation. At the start of FY24, a leak in the LSTL pump’s tank gas space was confirmed. Because the gas-space leak prevented operation of LSTL, FY24 efforts were focused on operation of FASTR. This report summarizes the progress made during FY24 in support of the DOE Office of Nuclear Energy (DOE-NE) work package, AT-24OR070202 Salt Loop and Capability for Testing Sensors and Off Gas Components.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2016

Identifying the Root Causes of Wait States in Large-Scale Parallel Applications

Driven by growing application requirements and accelerated by current trends in microprocessor design, the number of processor cores on modern supercomputers is increasing from generation to generation. However, load or communication imbalance prevents many codes from taking advantage of the available parallelism, as delays of single processes may spread wait states across the entire machine. Moreover, when employing complex point-to-point communication patterns, wait states may propagate along far-reaching cause-effect chains that are hard to track manually and that complicate an assessment of the actual costs of an imbalance. Building on earlier work by Meira Jr. et al., we present a scalable approach that identifies program wait states and attributes their costs in terms of resource waste to their original cause. Ultimately, by replaying event traces in parallel both forward and backward, we can identify the processes and call paths responsible for the most severe imbalances even for runs with hundreds of thousands of processes.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2005

Synergy Between probes and Orbiter

There are many ways in which the science return from a planetary mission is considerably enhanced by interactions between entry probes and a mission orbiter. Mission configuration aspects that are desirable include delivery of entry probes by the orbiter, and communication between probe and orbiter. Both of these mission aspects could greatly enhance access to key scientific sites that might not otherwise be accessible using delivery from say, a flyby, or employing direct communication from probes to Earth. Examples for Venus and Jupiter will be discussed. A second class of orbiter-probe interaction could better be termed direct probe-orbiter science collaboration. That would include, determining the global context of the entry probe sites from the orbiter, obtaining ground truth from the probe for remote sensing observations from the orbiter, observing the global and vertical distribution of key atmospheric trace species, and measuring the global and vertical distribution of clouds and winds. The importance of each of these items will be illustrated by particular examples.

Young, Richard E.↗
NASA NTRSDate not supplied

Medical System Foundation Overview for Long-Duration Lunar Orbit and Surface Operations Missions

The Human Research Program (HRP) Exploration Medical Capability (ExMC) Element has developed a Medical System Foundation for Level of Care IV, as defined by NASA’s space flight human-system standards, for long-duration lunar orbit and surface operation missions by employing a systems engineering approach using model-based systems engineering tools. This Foundation model includes a concept of operations; functional decomposition; clinical content (medical conditions, capabilities, and resources); associated functional, interface and non-functional technical requirements; and traces to the current versions of NASA standards documents and parent-level (Program- and Vehicle habitat system level) requirements. Collectively, these components constitute a foundation that serves as a starting point for a medical system that meets the Level of Care IV requirement. The Foundation was developed by a multidisciplinary team consisting of systems engineers, scientists, and clinicians across NASA, and information is presented in an easily accessible format that is understandable across disciplines. Stakeholders can use the Foundation to analyze the traces between medical capabilities, medical conditions, medical resources, and requirements and to identify medical system interfaces with other vehicle systems/subsystems. It can also be used as a basis for performing trades on risks vs. medical system mass and volume allocation. This discussion will focus on the processes through which the Medical System Foundation was developed, how the Foundation builds a bridge between the medical and engineering domains and facilitates communication between these communities, and how these processes can be applied more broadly to a crew health and performance system and other system domains. The presentation also discusses Foundation modifications based on the recently updated versions of the NASA 3001 Standards.

S. Lumpkins↗
DOE OSTI2026

Existence of a robust optimal control process for efficient measurements in a two-qubit system

The verification of quantum entanglement is essential for quality control in quantum communication. In this work we propose an efficient protocol to directly verify the two-qubit entanglement of a known target state through a single-expectation-value measurement. Our method provides exact entanglement quantification using the concurrence measure without performing quantum state tomography. We prove the existence of a unitary transformation that drives a known initial state of a two-qubit system to a designated final state, where the trace over a chosen observable directly yields the concurrence of the initial state. Furthermore, we implement an optimal control process of that transformation and demonstrate its effectiveness through numerical simulations. We also show that this process is robust to environmental noise. Our approach offers advantages in directly verifying entanglement with low circuit depth, making it suitable for industrial-scale quality control of entanglement generation. Our results presented here provide mathematical justification for our earlier computational experiments.

Rodriguez, Ricardo [McPherson Coll.] (ORCID:000000↗
NASA NTRS1994

A Study on the Effect of Communication Performance on Message-Passing Parallel Programs: Methodology and Case Studies

From a source-program perspective, the performance achieved on distributed/parallel systems is governed by the underlying message-passing library overhead and the network capabilities of the architecture. Studying the impact of changes in these features on the source-program. can have a significant influence in the development of next-generation system designs. In this paper we introduce a simple and robust tool that can be used for this purpose. This tool is based on event-driven simulation of programs that generates a new set of trace events - that preserves causality and partial order - corresponding to the expected execution of the program in the simulated environment. Trace events can be visualized and source-level profile information can be used to pin-point locations of program which are most significantly affected with changing system parameters in the simulated environment. We present a number of examples from the NAS benchmark suite, executed on the Intel Paragon and iPSC/860 that are used to identify and expose performance bottlenecks with varying system parameters. Specific aspects of the system that significantly effect these benchmarks are presented and discussed,

Sarukkai, Sekhar R.↗
NASA NTRS2004

Portable Wireless LAN Device and Two-Way Radio Threat Assessment for Aircraft VHF Communication Radio Band

This document summarizes the safety analysis performed on a Flight Guidance System (FGS) requirements model. In particular, the safety properties desired of the FGS model are identified and the presence of the safety properties in the model is formally verified. Chapter 1 provides an introduction to the entire project, while Chapter 2 gives a brief overview of the problem domain, the nature of accidents, model based development, and the four-variable model. Chapter 3 outlines the approach. Chapter 4 presents the results of the traditional safety analysis techniques and illustrates how the hazardous conditions associated with the system trace into specific safety properties. Chapter 5 presents the results of the formal methods analysis technique model checking that was used to verify the presence of the safety properties in the requirements model. Finally, Chapter 6 summarizes the main conclusions of the study, first and foremost that model checking is a very effective verification technique to use on discrete models with reasonable state spaces. Additional supporting details are provided in the appendices.

Nguyen, Truong X.↗