Machine checked formal proof of a scheduling protocol for smartcard personalization

Authors:
Leonard Lensink;Sjaak Smetsers;Marko Van Eekelen
Affiliations:
Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands;Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands;Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands
Venue:
FMICS'07 Proceedings of the 12th international conference on Formal methods for industrial critical systems
Year:
2007

Citing 6
Cited 0

Case Studies in Meta-Level Theorem Proving

Proceedings of the 11th International Conference on Theorem Proving in Higher Order Logics
An Integration of Model Checking with Automated Proof Checking

Proceedings of the 7th International Conference on Computer Aided Verification
PVS: A Prototype Verification System

CADE-11 Proceedings of the 11th International Conference on Automated Deduction: Automated Deduction
Code-carrying theories

Formal Aspects of Computing
Optimal scheduling using branch and bound with SPIN 4.0

SPIN'03 Proceedings of the 10th international conference on Model checking software
Some methodological observations resulting from experience using LSCs and the play-in/play-out approach

SMTT'03 Proceedings of the 2003 international conference on Scenarios: models, Transformations and Tools

Quantified Score

Hi-index	0.00

Visualization

Abstract

Using PVS (Prototype Verification System), we prove thatan industry designed scheduler for a smartcard personalization machineis safe and optimal. This scheduler has previously been the subject ofresearch in model checked scheduling synthesis and verification. Theseverification and synthesis efforts had only been done for a limited numberof personalization stations. We have created an executable modeland have proven the scheduling algorithm to be optimal and safe forany number of personalization stations. This result shows that theoremprovers can be successfully used for industrial problems in cases wheremodel checkers suffer from state explosion.