Table 4 UPPAAL model checker verification results for route down home to number 2 platform

p1

AG \(\lnot\)route3.start \(\Rightarrow\) (route4.start\(\wedge\)route11.start \(\wedge\)route12.start\(\wedge\)route18.start\(\wedge\)route19.start)

Satisfied

>25 GB

>5 h

p2

AG\(\lnot\)l3.start \(\Rightarrow\) p29t.NormalPos\(\wedge\)p37t.NormalPos \(\wedge\)p18t.ReversePos\(\wedge\)p36t.ReversePos

Satisfied

>10 GB

>45 min

p3 for points

AG rdh2.error \(\Rightarrow\) rdh2.x\(\ge\) 6

Satisfied

>2 MB

>10 min

p4 for points

EF \(\lnot\) rdh2.error \(\wedge\) rdh2.x<6

Satisfied

>2 MB

>10 min

p3 for lights

AG l3.error\(\Rightarrow\) l3.x\(\ge\) 6

Satisfied

>2 MB

>10 min

p4 for lights

EF\(\lnot\)l3.error \(\wedge\) l3.x<6

Satisfied

>2 MB

>10 min

p5

AG l3.cancel \(\Rightarrow\) AF (l3.x\(\ge\)60\(\wedge\) route3.clearance)

Satisfied

>500 MB

>1 h

p6

AG rdh2.error \(\Rightarrow\) AF \(\lnot\)route3.signal\(\_\)order

Satisfied

>10 MB

>30 min

Deadlock freeness

AG (not deadlock)

Satisfied

>25 GB

>5 h