Model Checking Counterexample Filtering by Exclusion History

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current model checking methods require a high workload for counterexample analysis due to the need to verify all possible defects in a relay circuit, including non-critical state transitions, which can lead to inefficient identification of critical defects contributing to unsafe events.

Innovation Solution

A verification processing device and method that performs model checking, selects elements from counterexamples, generates exclusion history information based on exclusion frequencies, and updates these frequencies upon re-checking, focusing on elements with high exclusion frequencies to reduce the workload of counterexample analysis.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If comprehensive model checking is performed to verify all possible defects in a relay circuit, then the verification coverage is improved, but the workload for counterexample analysis increases significantly

Engineering Contradiction:
Improveverification coverageVSAvoidcounterexample analysis workload
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts and removes non-critical elements from counterexamples through the exclusion history generation unit. By identifying and eliminating elements that do not contribute to unsafe events, the system reduces the complexity of counterexample analysis while preserving verification of critical defects.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies different treatment to different elements within counterexamples based on their exclusion frequencies. Elements with high exclusion frequencies (indicating non-critical nature) are selectively removed, while elements that remain are treated as critical. This local differentiation reduces analysis workload without compromising safety verification.

Inventive Principle:
Principle #3Local quality

2Reliability

If all possible state transitions including non-critical defects are verified, then the completeness of verification is improved, but the time required for analysis increases

Engineering Contradiction:
Improveverification completenessVSAvoidanalysis time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary filtering of counterexample elements by calculating exclusion frequencies before detailed analysis. The exclusion history generation unit pre-identifies and marks non-critical elements based on their exclusion patterns, allowing the analysis phase to focus only on critical elements and thereby reducing overall analysis time.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If model re-checking is performed multiple times to verify defect combinations, then the accuracy of defect identification is improved, but the computational load increases

Engineering Contradiction:
Improvedefect identification accuracyVSAvoidcomputational load
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The patent extracts non-critical elements from the model through the exclusion mechanism. By removing elements with high exclusion frequencies from subsequent model re-checking operations, the system reduces computational load while maintaining accurate identification of critical defect combinations that lead to unsafe events.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS20230229839A1Verification processing device, verification processing method, and program
Publication Date: 2023.07.20 MITSUBISHI HEAVY IND LTD
  • US20230229839A1 patent drawing
  • US20230229839A1 patent drawing
  • US20230229839A1 patent drawing

AI summary

This verification processing device is provided with: an inspection unit that performs model inspection on an inspection target model including a plurality of elements; a selection unit that selects at least one of the plurality of elements included in a counterexample outputted as a result of the model inspection; and an exclusion history generation unit that generates exclusion history information indicating an exclusion frequency for each of the plurality of elements. The inspection unit further performs another model inspection on the inspection target model obtained by excluding the selected element. When another counterexample has been outputted as a result of another model inspection, the exclusion history generation unit increases the exclusion frequency of the selected element and updates the exclusion history information. The selection unit selects an element that is high in the exclusion frequency, on the basis of the exclusion history information.