{"id":"https://openalex.org/W1985665832","doi":"https://doi.org/10.1007/s001650050022","title":"Formal Verification of a Railway Interlocking System using Model Checking","display_name":"Formal Verification of a Railway Interlocking System using Model Checking","publication_year":1998,"publication_date":"1998-04-01","ids":{"openalex":"https://openalex.org/W1985665832","doi":"https://doi.org/10.1007/s001650050022","mag":"1985665832"},"language":"en","primary_location":{"id":"doi:10.1007/s001650050022","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s001650050022","pdf_url":"https://dl.acm.org/doi/pdf/10.1007/s001650050022","source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1007/s001650050022","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017426974","display_name":"Alessandro Cimatti","orcid":"https://orcid.org/0000-0002-1315-6990"},"institutions":[{"id":"https://openalex.org/I4210097842","display_name":"Istituto Centrale per la Ricerca Scientifica e Tecnologica Applicata al Mare","ror":"https://ror.org/014cycx13","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210097842"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"A. Cimatti","raw_affiliation_strings":["Istituto per la Ricerca Scientifica e Tecnologica (IRST), Trento, Italy, , , , , , IT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Istituto per la Ricerca Scientifica e Tecnologica (IRST), Trento, Italy, , , , , , IT","institution_ids":["https://openalex.org/I4210097842"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001227032","display_name":"Fausto Giunchiglia","orcid":"https://orcid.org/0000-0002-5903-6150"},"institutions":[{"id":"https://openalex.org/I4210097842","display_name":"Istituto Centrale per la Ricerca Scientifica e Tecnologica Applicata al Mare","ror":"https://ror.org/014cycx13","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210097842"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"F. Giunchiglia","raw_affiliation_strings":["Istituto per la Ricerca Scientifica e Tecnologica (IRST), Trento, Italy, , , , , , IT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Istituto per la Ricerca Scientifica e Tecnologica (IRST), Trento, Italy, , , , , , IT","institution_ids":["https://openalex.org/I4210097842"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072359627","display_name":"Giorgio Mongardi","orcid":null},"institutions":[{"id":"https://openalex.org/I2801958098","display_name":"Ansaldo (Italy)","ror":"https://ror.org/03ynt1573","country_code":"IT","type":"company","lineage":["https://openalex.org/I2801958098"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"G. Mongardi","raw_affiliation_strings":["Ansaldo Segnalamento Ferroviario (ASF), Genova, Italy, , , , , , IT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ansaldo Segnalamento Ferroviario (ASF), Genova, Italy, , , , , , IT","institution_ids":["https://openalex.org/I2801958098"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051333605","display_name":"Daniele Romano","orcid":"https://orcid.org/0000-0001-5267-7740"},"institutions":[{"id":"https://openalex.org/I2801958098","display_name":"Ansaldo (Italy)","ror":"https://ror.org/03ynt1573","country_code":"IT","type":"company","lineage":["https://openalex.org/I2801958098"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"D. Romano","raw_affiliation_strings":["Ansaldo Trasporti (ATR), Genova, Italy, , , , , , IT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ansaldo Trasporti (ATR), Genova, Italy, , , , , , IT","institution_ids":["https://openalex.org/I2801958098"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052722924","display_name":"F. Torielli","orcid":null},"institutions":[{"id":"https://openalex.org/I2801958098","display_name":"Ansaldo (Italy)","ror":"https://ror.org/03ynt1573","country_code":"IT","type":"company","lineage":["https://openalex.org/I2801958098"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"F. Torielli","raw_affiliation_strings":["Ansaldo Segnalamento Ferroviario (ASF), Genova, Italy, , , , , , IT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ansaldo Segnalamento Ferroviario (ASF), Genova, Italy, , , , , , IT","institution_ids":["https://openalex.org/I2801958098"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039482178","display_name":"Paolo Traverso","orcid":"https://orcid.org/0000-0001-6301-0204"},"institutions":[{"id":"https://openalex.org/I4210097842","display_name":"Istituto Centrale per la Ricerca Scientifica e Tecnologica Applicata al Mare","ror":"https://ror.org/014cycx13","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210097842"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"P. Traverso","raw_affiliation_strings":["Istituto per la Ricerca Scientifica e Tecnologica (IRST), Trento, Italy, , , , , , IT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Istituto per la Ricerca Scientifica e Tecnologica (IRST), Trento, Italy, , , , , , IT","institution_ids":["https://openalex.org/I4210097842"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2780,"currency":"USD","value_usd":2780},"apc_paid":null,"fwci":4.0694,"has_fulltext":true,"cited_by_count":59,"citation_normalized_percentile":{"value":0.9388667,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":"10","issue":"4","first_page":"361","last_page":"380"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8390657305717468},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.7469326257705688},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6174693703651428},{"id":"https://openalex.org/keywords/interlocking","display_name":"Interlocking","score":0.5578758716583252},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.5387976765632629},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.5358048677444458},{"id":"https://openalex.org/keywords/reusability","display_name":"Reusability","score":0.5306535959243774},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5082004070281982},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4798585772514343},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.46829643845558167},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.46151965856552124},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.4585232138633728},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4268658459186554},{"id":"https://openalex.org/keywords/theory-of-computation","display_name":"Theory of computation","score":0.4223720133304596},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.38224729895591736},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.35587677359580994},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.1784522831439972},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09859007596969604}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8390657305717468},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.7469326257705688},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6174693703651428},{"id":"https://openalex.org/C2778844933","wikidata":"https://www.wikidata.org/wiki/Q630950","display_name":"Interlocking","level":2,"score":0.5578758716583252},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.5387976765632629},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.5358048677444458},{"id":"https://openalex.org/C137981799","wikidata":"https://www.wikidata.org/wiki/Q1369184","display_name":"Reusability","level":3,"score":0.5306535959243774},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5082004070281982},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4798585772514343},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.46829643845558167},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.46151965856552124},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.4585232138633728},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4268658459186554},{"id":"https://openalex.org/C24858836","wikidata":"https://www.wikidata.org/wiki/Q844718","display_name":"Theory of computation","level":2,"score":0.4223720133304596},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.38224729895591736},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.35587677359580994},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.1784522831439972},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09859007596969604},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s001650050022","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s001650050022","pdf_url":"https://dl.acm.org/doi/pdf/10.1007/s001650050022","source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},{"id":"pmh:oai:iris.unitn.it:11572/20411","is_oa":false,"landing_page_url":"http://hdl.handle.net/11572/20411","pdf_url":null,"source":{"id":"https://openalex.org/S4377196320","display_name":"Iris (University of Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s001650050022","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s001650050022","pdf_url":"https://dl.acm.org/doi/pdf/10.1007/s001650050022","source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5199999809265137,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1985665832.pdf","grobid_xml":"https://content.openalex.org/works/W1985665832.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W875594450","https://openalex.org/W1490990888","https://openalex.org/W1867495292","https://openalex.org/W1995766701","https://openalex.org/W2033071128","https://openalex.org/W2065587852","https://openalex.org/W2080267935","https://openalex.org/W2101591864","https://openalex.org/W2114754412","https://openalex.org/W2127305744","https://openalex.org/W2164892954","https://openalex.org/W2164989576","https://openalex.org/W2589217375","https://openalex.org/W3144368627","https://openalex.org/W4250884204"],"related_works":["https://openalex.org/W2145025660","https://openalex.org/W2171674700","https://openalex.org/W2049993111","https://openalex.org/W1922520186","https://openalex.org/W1950421680","https://openalex.org/W1903167137","https://openalex.org/W2034589735","https://openalex.org/W1999356246","https://openalex.org/W2045204345","https://openalex.org/W1544097700"],"abstract_inverted_index":{"Abstract.":[0],"In":[1],"this":[2,125],"paper":[3],"we":[4],"describe":[5],"an":[6,189],"industrial":[7],"application":[8],"of":[9,29,33,50,56,71,104,119,142,164,179],"formal":[10,39,149],"methods.":[11],"We":[12,173],"have":[13,174],"used":[14],"model":[15,19,40,73,85,144],"checking":[16],"techniques":[17],"to":[18,43,89,110],"and":[20,47,67,145,153],"formally":[21],"verify":[22],"a":[23,34,64,95,129,165],"rather":[24,111],"complex":[25,106,112],"software,":[26],"i.e.":[27],"part":[28],"the":[30,45,51,72,79,90,117,136,143,146,156,162,177,181,185],"\u201csafety":[31],"logic\u201d":[32],"railway":[35],"interlocking":[36],"system.":[37],"The":[38,69,84,121,140],"is":[41,58,87,127,151],"structured":[42],"retain":[44],"reusability":[46],"scalability":[48],"properties":[49,113],"system":[52],"being":[53],"modelled.":[54],"Part":[55],"it":[57,92],"defined":[59],"once":[60],"for":[61,124],"all":[62,135],"at":[63,170],"low":[65],"cost,":[66],"re-used.":[68],"rest":[70],"can":[74],"be":[75],"mechanically":[76],"generated":[77],"from":[78],"designers'":[80],"current":[81],"specification":[82],"language.":[83],"checker":[86],"\u201chidden\u201d":[88],"user,":[91],"runs":[93],"as":[94],"powerful":[96],"debugger.":[97],"Its":[98],"performances":[99],"are":[100,114,155],"impressive:":[101],"exhaustive":[102],"analysis":[103],"quite":[105],"configurations":[107],"with":[108,188],"respect":[109],"run":[115],"in":[116,184],"order":[118],"minutes.":[120],"main":[122],"reason":[123],"achievement":[126],"essentially":[128],"carefully":[130],"designed":[131],"model,":[132],"which":[133,159],"exploits":[134],"behaviour":[137],"evolution":[138],"constraints.":[139],"re-usability/scalability":[141],"fact":[147],"that":[148],"verification":[150],"automatic":[152],"efficient":[154],"key":[157],"factors":[158],"open":[160],"up":[161],"possibility":[163,178],"real":[166],"usage":[167],"by":[168],"designers":[169],"design":[171],"time.":[172],"thus":[175],"assessed":[176],"introducing":[180],"novel":[182],"technique":[183],"development":[186],"cycle":[187],"advantageous":[190],"costs/benefits":[191],"relation.":[192]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":6}],"updated_date":"2026-09-08T07:41:39.490200","created_date":"2016-06-24T00:00:00"}