Real-Time Publish and Subscribe (RTPS) protocol is a protocol for implementing message exchange over an unreliable transport in data distribution service (DDS). Formal modelling and verification of the protocol provide stronger guarantees of its correctness and efficiency than testing alone. In this paper, we build formal models for the RTPS protocol using Uppaal and Simulink/Stateflow. Modelling using Simulink/Stateflow allows analyzing the protocol through simulation, as well as generate executable code. Modelling using Uppaal allows us to verify properties of the model stated in TCTL (Timed Computation Tree Logic), as well as estimate its performance using statistical model checking. We further describe a procedure for translation from Stateflow to timed automata, where a subset of major features in Stateflow is supported, and prove the soundness statement that the Stateflow model is a refinement of the translated timed automata model. As a consequence, any property in a certain fragment of TCTL that we have verified for the timed automata model in Uppaal is preserved for the original Stateflow model.

中文翻译：

---

使用 Uppaal 和 Simulink/Stateflow 对实时发布和订阅协议进行建模和验证

实时发布和订阅 (RTPS) 协议是一种用于在数据分发服务 (DDS) 中通过不可靠传输实现消息交换的协议。与单独的测试相比，协议的正式建模和验证为其正确性和效率提供了更强的保证。在本文中，我们使用 Uppaal 和 Simulink/Stateflow 为 RTPS 协议构建正式模型。使用 Simulink/Stateflow 建模允许通过仿真分析协议，以及生成可执行代码。使用 Uppaal 建模使我们能够验证 TCTL（定时计算树逻辑）中所述模型的属性，并使用统计模型检查来估计其性能。我们进一步描述了从 Stateflow 到定时自动机的转换过程，其中支持 Stateflow 中主要特征的子集，并证明 Stateflow 模型是翻译后的定时自动机模型的改进的健全性陈述。因此，我们为 Uppaal 中的定时自动机模型验证的 TCTL 某个片段中的任何属性都保留用于原始 Stateflow 模型。