Model Checking Counterexample Filtering by Exclusion History
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current model checking methods require a high workload for counterexample analysis due to the need to verify all possible defects in a relay circuit, including non-critical state transitions, which can lead to inefficient identification of critical defects contributing to unsafe events.
Innovation Solution
A verification processing device and method that performs model checking, selects elements from counterexamples, generates exclusion history information based on exclusion frequencies, and updates these frequencies upon re-checking, focusing on elements with high exclusion frequencies to reduce the workload of counterexample analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If comprehensive model checking is performed to verify all possible defects in a relay circuit, then the verification coverage is improved, but the workload for counterexample analysis increases significantly
Solution Approach 1:
The patent extracts and removes non-critical elements from counterexamples through the exclusion history generation unit. By identifying and eliminating elements that do not contribute to unsafe events, the system reduces the complexity of counterexample analysis while preserving verification of critical defects.
Solution Approach 2:
The patent applies different treatment to different elements within counterexamples based on their exclusion frequencies. Elements with high exclusion frequencies (indicating non-critical nature) are selectively removed, while elements that remain are treated as critical. This local differentiation reduces analysis workload without compromising safety verification.
2Reliability
If all possible state transitions including non-critical defects are verified, then the completeness of verification is improved, but the time required for analysis increases
Solution Approach 1:
The patent performs preliminary filtering of counterexample elements by calculating exclusion frequencies before detailed analysis. The exclusion history generation unit pre-identifies and marks non-critical elements based on their exclusion patterns, allowing the analysis phase to focus only on critical elements and thereby reducing overall analysis time.
3Measurement precision
If model re-checking is performed multiple times to verify defect combinations, then the accuracy of defect identification is improved, but the computational load increases
Solution Approach 1:
The patent extracts non-critical elements from the model through the exclusion mechanism. By removing elements with high exclusion frequencies from subsequent model re-checking operations, the system reduces computational load while maintaining accurate identification of critical defect combinations that lead to unsafe events.
Data Source
AI summary
This verification processing device is provided with: an inspection unit that performs model inspection on an inspection target model including a plurality of elements; a selection unit that selects at least one of the plurality of elements included in a counterexample outputted as a result of the model inspection; and an exclusion history generation unit that generates exclusion history information indicating an exclusion frequency for each of the plurality of elements. The inspection unit further performs another model inspection on the inspection target model obtained by excluding the selected element. When another counterexample has been outputted as a result of another model inspection, the exclusion history generation unit increases the exclusion frequency of the selected element and updates the exclusion history information. The selection unit selects an element that is high in the exclusion frequency, on the basis of the exclusion history information.


