Analysis of ATO System Operation Scenarios Based on UPPAAL and the Operational Design Domain

With the gradual maturity of the automatic train operation (ATO) system in subways, its application scope has also expanded to the high-speed railway field. Considering that the ATO system is still in the early stages of operation, it will take time to fully mature, and definite specifications of the requirements for system operation have not yet been formed. This paper presents the operational design domain (ODD) of the high-speed railway ATO system and proposes a scenario analysis method based on the operational design domain to obtain the input conditions of the system requirements. The article models and verifies the scenario of the linkage control of the door and platform door based on the UPPAAL tools and extracts the input and expected output of the system requirements of the vehicle ATO system. Combined with the input conditions of the system requirements, the system requirements of the vehicle ATO in this scenario are finally obtained, which provides a reference for future functional specification generation and test case generation.