{"id":"https://openalex.org/W4404883642","doi":"https://doi.org/10.1145/3706425","title":"Mechanised Safety Verification for a Distributed Autonomous Railway Control System","display_name":"Mechanised Safety Verification for a Distributed Autonomous Railway Control System","publication_year":2024,"publication_date":"2024-11-30","ids":{"openalex":"https://openalex.org/W4404883642","doi":"https://doi.org/10.1145/3706425"},"language":"en","primary_location":{"id":"doi:10.1145/3706425","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3706425","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3706425","source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3706425","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084875204","display_name":"Robert Sachtleben","orcid":"https://orcid.org/0000-0001-5514-7593"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Sachtleben","raw_affiliation_strings":["Verified Systems International GmbH, Bremen, Germany"],"raw_orcid":"https://orcid.org/0000-0001-5514-7593","affiliations":[{"raw_affiliation_string":"Verified Systems International GmbH, Bremen, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072663966","display_name":"Anne E. Haxthausen","orcid":"https://orcid.org/0000-0001-7349-8872"},"institutions":[{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Anne Haxthausen","raw_affiliation_strings":["DTU Compute, Technical University of Denmark, Lyngby, Denmark","DTU Compute, Technical University of Denmark, Lyngby Denmark"],"raw_orcid":"https://orcid.org/0000-0001-7349-8872","affiliations":[{"raw_affiliation_string":"DTU Compute, Technical University of Denmark, Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]},{"raw_affiliation_string":"DTU Compute, Technical University of Denmark, Lyngby Denmark","institution_ids":["https://openalex.org/I96673099"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039105876","display_name":"Jan Pele\u0161ka","orcid":"https://orcid.org/0000-0003-3667-9775"},"institutions":[{"id":"https://openalex.org/I180437899","display_name":"University of Bremen","ror":"https://ror.org/04ers2y35","country_code":"DE","type":"education","lineage":["https://openalex.org/I180437899"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jan Peleska","raw_affiliation_strings":["Department of Computer Science, University of Bremen, Bremen, Germany","Department of Computer Science, University of Bremen, Bremen Germany"],"raw_orcid":"https://orcid.org/0000-0003-3667-9775","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Bremen, Bremen, Germany","institution_ids":["https://openalex.org/I180437899"]},{"raw_affiliation_string":"Department of Computer Science, University of Bremen, Bremen Germany","institution_ids":["https://openalex.org/I180437899"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.21356213,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"37","issue":"2","first_page":"1","last_page":"33"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/theory-of-computation","display_name":"Theory of computation","score":0.6991571187973022},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6281572580337524},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4189910292625427},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24032023549079895},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.07075250148773193}],"concepts":[{"id":"https://openalex.org/C24858836","wikidata":"https://www.wikidata.org/wiki/Q844718","display_name":"Theory of computation","level":2,"score":0.6991571187973022},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6281572580337524},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4189910292625427},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24032023549079895},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.07075250148773193}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3706425","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3706425","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3706425","source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3706425","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3706425","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3706425","source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.5299999713897705,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4404883642.pdf"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W68069235","https://openalex.org/W1523874359","https://openalex.org/W1556900989","https://openalex.org/W1571434026","https://openalex.org/W1986300820","https://openalex.org/W2072833187","https://openalex.org/W2123106596","https://openalex.org/W2155155771","https://openalex.org/W2226576976","https://openalex.org/W2411284738","https://openalex.org/W2478477452","https://openalex.org/W2479446542","https://openalex.org/W2609320269","https://openalex.org/W2787620952","https://openalex.org/W2808836015","https://openalex.org/W2885628182","https://openalex.org/W2887865500","https://openalex.org/W2889321050","https://openalex.org/W2979855279","https://openalex.org/W3095463232","https://openalex.org/W3095654151","https://openalex.org/W3096180850","https://openalex.org/W3205938995","https://openalex.org/W4214928512","https://openalex.org/W4225506184","https://openalex.org/W4239346686","https://openalex.org/W4241934014","https://openalex.org/W4244819751","https://openalex.org/W4285157073","https://openalex.org/W4285213164","https://openalex.org/W4312439897","https://openalex.org/W4312473255","https://openalex.org/W6910654478"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"We":[0],"present":[1],"a":[2,135,140,166],"distributed":[3,41,63],"railway":[4,18,76,116,132],"interlocking":[5],"(IXL)":[6],"method":[7,32],"based":[8],"on":[9],"trains":[10,73],"communicating":[11],"with":[12,111],"switch":[13],"boxes":[14],"deployed":[15],"along":[16],"the":[17,25,48,57,75,81,88,105,112,115,122,144,147,159,162,169],"network":[19,148],"for":[20,71,130],"switching":[21],"points":[22],"and":[23,52,62,129,149],"monitoring":[24],"occupancy":[26],"states":[27],"of":[28,80,114,146,161,168],"track":[29],"elements.":[30],"The":[31,78],"does":[33],"not":[34],"require":[35],"any":[36],"centralised":[37],"IXL":[38,64,82],"components.":[39],"A":[40],"architecture":[42,67],"is":[43,68,84,98,126,165],"proposed":[44],"that":[45,94],"carefully":[46],"separates":[47],"overall":[49],"business":[50],"logic":[51,83],"automated":[53,59],"train":[54,60,152],"operation":[55],"from":[56],"safety-critical":[58],"protection":[61],"logic.":[65],"This":[66],"also":[69],"suitable":[70],"autonomous":[72],"traversing":[74],"network.":[77,117],"safety":[79,124,160,171],"formally":[85],"proven,":[86],"using":[87],"Isabelle/HOL":[89],"proof":[90,125],"assistant.":[91],"Experiments":[92],"confirm":[93],"this":[95],"proof-based":[96],"approach":[97],"superior":[99],"to":[100,120,155],"model":[101,106],"checking":[102,107],"approaches,":[103],"since":[104],"effort":[108],"grows":[109],"exponentially":[110],"size":[113],"In":[118],"contrast":[119],"this,":[121],"mathematical":[123],"performed":[127],"once":[128],"all":[131],"networks":[133],"fulfilling":[134],"realistic":[136],"well-formedness":[137,145],"condition.":[138],"For":[139],"concrete":[141],"network,":[142],"only":[143],"its":[150],"initial":[151],"placements":[153],"has":[154],"be":[156],"verified,":[157],"whereas":[158],"dynamic":[163],"behaviour":[164],"consequence":[167],"network-independent":[170],"proof.":[172]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}