An Approach to Integrate Formal Validation in an OO

INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE

An Approach to Integrate Formal Validation in an OO Life-cycle of Protocols Claude Jard, Jean-Marc Je´ze´quel, Laurence Ne´delka

N˚ 2808 Fe´vrier 1996

PROGRAMME 1

ISSN 0249-6399

apport de recherche

!#"$ !&%(') %(* %& ++ ,-%(./102 34 !(.65789 1*!(: ; =@?ACBEDF=HG&A I@JKDLBH=@MKNPO6=HG&Q#DSBUR TVBHR WF?BXb@aYfEevuXev£o·Fe¸pPoqbHpYbLbXv_s&²³§g o£v£vqrusPpYa(eXpcg bHrFaÐeXtFtFaYbLeHmYnrusÁoqFd*pYnFg1¥Ñe¸fbHrusevqpYg&aYueXpPoqFd*}LoqpVtFaYbHpcbmZbXvFgZueXftLvqgH²V³§gozLHg/sP± pPoqd2e¸pYgb@pYnLo_sgZueXftLvqgnFbXº©e4mZb@2pPoqLrFbHrus1Uev£o_FeXpPoqbH#¥¦a(eXf)g&ºSb@aY¹mZbHrLv_}Cg9sPg&pÐrFt#pYb9d@b sPf)b2bHpcnLvz¥¦aYbHfÒpYnFg¿*¿$e¸uevqsÁo_spYb*pYnFg*¿*¿6oqftLvqg&fg&Lp(eXp~ozb@bX¥eXev£o_FeXpYg/#@o·s~pYaPoq}FrFpYg/ sPFsPpYg&f-² Ó¬Ô2ÕÖP×ØKXÙHÚ¿ }FPg/mZpY±P¿ aPoqg&2pcg/*fbFLgZv£ozFdC{HUeUvwo_FeXp~ozb@4eXuHg&aPo£ÛKm&eXpPoqbH{tFaYbHpYbFmZbXv_s&{XsPbX¥¦pY± º eXaYg*g&Fd¸ozFg&g&a~ozFdC{uk8vqpYg&aYueXpPoqFdH±yÀoqpY±yàYbHpYbFmZbXvy² ÜÞÝàPß áâã àVß äuåzáæÞç/è

ï~ï~ìì øqøqùù Ñ>÷ïcPë ÷ /ìî÷ÁëÞøìîíy ï ìîëÞqìîë íyï që ééÁyéyéyéé êÞêÞêÞëÞëÞëÞìîìîìîíyíyíyï(ï(ï(ðZðZðcêññ/òòëÞìwóóï|õHôXôXöFõXõX÷yöFöFøq÷Á÷ÁùøqøqùKùKúVúVúVû(û~ûZûZü|ûPûPýZü/ü/ýZý(ý(þYýZýZÿ þcþcÿÿ Yý ~~ýZý û Uï XXXïï ùKXXùùúVúVúVûZûPû(û(ü/û~û~ýZü|ü|ý(ýZýZþcýZýZÿ þYþYÿÿ

ïPì øqùCø /÷ /÷Áø (ï ìîë¦ìîíyï që "!

#

$ %

&! &' (

Unite´ de recherche INRIA Rennes IRISA, Campus universitaire de Beaulieu, 35042 RENNES Cedex (France) Te´le´phone : (33) 99 84 71 00 – Te´lećopie : (33) 99 84 71 71

4 8 V4 %&S !( !&%(' %( ./ 8!&!~ ' 4:) 34 »!( '%( K1 ': 89 Ð!(:

Ô Ô ¤Àozg&ª@r îe2eXLpÐÐgP /e*x eXtFtubHacpg gZumZgZv£vzg&Lp(saFg/ sPrLvqp(eXpZsÂsPrFa Lg/stFaYbHPg&p(stLo£vqbHpYg/s&{ vqg/spYg/mcnFLo_ªHrFg/s8Lg9Lg/sYmZaPoqtFpPoqbHus1¥¦bHaYfgZv£vqg/sFg*sPbHLptFa(eXpPo_ª@rFg&fg&2ptueHs1rFpPo£v£o_sLg& g/s8FeXusv ozF± LrusPpcaPoqgtCbHrFa1v·eUev£o_FeXpPoqbH¤LgtFaYbHpcbmZbXvqg/s&² Ðg/mcoKg/s~pÐg/sYsPg&LpPoqgZv£vqg&fg&2p r ex rFEfEe¸uªHrFgLg sPrFtFtCbHaYptubHrFa»vzg¥>b@aYfEev£o_sPfg9FeXus»vqg/s b@rFpPo£v·s8fbFLg&aYFg/s LgÐg& HgZvqbHtFtCg&fg&2pLg*vqbHdXo_mcoqgZv_s&² 8bHrustFaYb@tub2sPb@usÐrFFg9s~bXvqrFpPoqbHµª@rLoÂmZbHusÁo_sPpYgEex oq2pFg& dHaYg&a Lg/spcg/mYnFLo_ª@rFg/sLg¥¦bHaYfEeUvwo_sYe¸pPoqbH FeXus»vqg4mZ@v_mZg¶LgÐg& HgZvqbHtFtCg&fg&Lpj rF¬vqbHdXo_mcoqgZv bHa~ozg&LpFg* bH}FPg&p/²F`vqrFp bH p*ªHrFg Pg& pcg&uLaYgrF v_eXFd2e¸dHgEex pYbHrusvqg/seHsPtug/mZpZstub2scsÁoq}Lvzg/sLr¤tue¸a(ev£v gZ v£o_sPfgH{mZg9ªHrLoÂsPg&f}Lvqg*oqaYaFg/ ev£o_sYeX}LvqgH{uFb@rus tFaYb@tub2sPb@us9LgEmZbHus~pYaYrLoqaYgLg/s¥¦a(eXfg&ºbHac¹sFeXus*rF v·e¸Fd2eXdHgbHaPoqg&LpFg bH}¢g&pgZ2o_sPpZeX2p{Cvzg v_eXFd2e¸dHg "o !gZvy#² ÐnueHª@rFg8¥>a(e¸fg&ºbHaY¹4eUozusomZbHusPpcaYrLoqpSg/s~pSsPtg/ mco·eUvwo_sLg tCbHrFarFFgjmcv_eHscsPgj eXtF± tLv£o_m&eXpPoqbHus1@o·s~pYaPoq}FrSg& g/sg&p oq2p/g&x dHaYgLg/sbHrFp~owv_sVLgUeUvwo_FeXp~ozb@ELgÐtFaYb@pYbmZb¸vzg/s|$² 8bHrusowv£vqrusPpYacbHus FbHpcaYg9Ðg& fEe¸a(mYnFg*tue¸a%v gZg&f)tLvzgLr¤tFaYb@pYbmZb¸vzg9Lr-}LoqpjevqpYg&acSgH ² & ØC/&ÖY '(ÔK ¤bF1gZ v£o_sYeXp~ozb@EbHa~ozg&LpFg& g bH}FPg&p/{HXev£o_FeXpPoqbHg&pÐ1g& a~owÛKm&e¸pPoqbH{LtFaYbHpYbFmZbXvqg/s&{XoqFdVg& ± Loqg&aPoqgvqbHdXo_mcoqgZvwvqgH{ tFaYbHpYbFmZbXvqg4Lr}Loqp*evqpYg&aYgH ²

KÅPÊ/Æ ¦Ê ¦ÈHÅPÆ¦ÈÊ@Å(ÇÆCÆ@Æ_ÊÆ ! Ä È#"$&%'&£È9ÊPÄ(ÅÊ¦Ê)ZÊ Ì

' 4 V%( +Ápo_sFbXº¼ºo_LgZvq¤eHLfoqpYpYg/-,qh@h.pYnue¸pSb@Lvz¤s~sPpcg&f Lg&@gZvzb@tFfg&2p8}ueHsPg/#bH0/Zacg/evq±¦ºSb@aPv_21 fbFLgZv£oqFd#o·s8eX}Lvqg*pYbLg/evÂºoqpYnpYnFg9mZb@ftLvqgZ2oqpPÎe¸u#pYnFg*Hg&a(sYe¸pPo£vwoqpP#bX¥ÂbHtCg&¤@o·s~pYaPoq}FrFpYg/ sPFsPpYg&f#s&²¿ umZg*pYnFgo_Lg/ebX¥VeXuevq2ÏZoqFdesPs~pYg&fpYnFaYbHrFdHn#fbFLgZv£ozFd#nueHs}Cg&g&µeHm&mZg&tFpcg/{ pYnFg&acgo_sv£oqpYpPvqg9sPrFaYtFaPo_sPg8pYnueXpVpYnFg b@}Fg/mZpc±¦bHaPoqg&2pcg/#«Y¿*¿*®ÂeXtFtFaYbLeHmYn¶o·s}FaYbHrFdHnLpoq{L}ug/m&eXrusPg oqp(s8aYbLbHp(s1v£oqgoz´ÍXoqf4rLv_eX±y4 32{Ke4v·e¸FdHrueXdHg¥>bHasÁoqf4rLv_eXp~ozb@ Lg/sozd@Fg/oq-pYnFg*v_eXpYg#h/HH@s&{FeXu sÁoqfrLv_eXpPoqbH§}ue@sÁo_m&ev£vzaYgZv£oqg/sbHfbFLgZv£ozFdC²j¨»nLo·s8o_spYnFgrFuLg&aPvqHoqFda(eXp~ozb@uevqg9bX¥ÐpYnFgLrF± fg&acbHrusbH}FPg/mZpY±¦bHa~ozg&LpYg/#eXuevqFsÁo_s eXuLg/sÁoqdH«Y¿*¿k* ® f)g&pYnFbFs»pYnueXpÐnueHg*}Cg&g&¤LbmZrF± fg&LpYg/oq#pYnFgv£oqpYg&a(eXpcrFaY5g ,·h/& .y²V¿*¿kj ¾fg&pYnFbFFsÐeUvwvqbXº7pcnFgsYeXfg mZbHumZg&tFpcruevu¥¦a(eXfg&ºbHac¹ «y}ue@sPg/bHbH}FPg/mZp(sZ®pYb}CgrusPg/§LrFaPoqFd-pYnFgº nFbXvqgEsPbX¥¦pPº eXaYg*v£o£¥¦gEmZmcvqgH²¨nLo_ssPg/eXfvqg/sYsP± Fg/sYssPnFb@rLv·#@oqgZv_¤mZbHusÁo_Lg&a(e¸}Lvzg*}Cg&FgZÛup(s1oqpYg&aYf#sVbX7¥ 6ugZLoq}Lo£vwoqpP¤eXu)pYa(eHmZg/e¸}Lowv£oqpPH²S¨»nFg/sPg tFaYb@tug&aYpPoqg/sºbHrLv_#pYaZeXusÁv_eXpYgpYb}ug&pYpcg&a»ª@ruev£oqpPÎsPb¸¥>pPº eXaYgs~sPpcg&fEs«¦¥¦g&ºg&a LgZ¥>g/mZp(s8eXuELg&± v_es ®SpYnue¸pjeXacg9frumYn-g/eHsÁoqg&a*pYb#fEeoqLp(eoq¤}Cg/m&eXrusPgEe)aYg/ª@rLozacg&fg&2p*sPnLo£¥¦p*rusPruev£vqµf#e/#}ug pYaZeHmZg/#g/eHsÁo£vqµLbXº pYbpYnFg«ÁbH}FPg/mZpY±¦bHaPoqg&LpYg/C®SmZbFLgH² 8 bXºg&Hg&apYnFgSLg/sÁoqdH{¸oqftLvqg&fg&2pZeXpPoqbHEeXufEeUozLpYg&ueXumZg8bX¥KmZbHaYaYg/mZpV@o_sPpYaPoq}FrFpYg/#sPbX¥¦pY± º eXaYg8o_ssPpPo£v£v e*Hg&acE@o 9ÎmZrLvqp gZg&aZmco·s~gH{ueXu#tug&b@tLvzgoq}CbHpYn#aYg/sPg/eXa(mcn)v·e¸}ubHa(e¸pYbHaPoqg/seXu¶oz sPb¸¥>pPº eXaYgmZbHftueXLoqg/seXdHaYg&geX}CbHrFp9pcnFg4Fg/mZg/scsÁoqp´bX¥SXev£o·Fe¸pPoqFd§pYnFgsPbX¥¦pPº»e¸aYg4sPFsPpYg&f eXp @"o !g&aYg&Lp9sPp(eXdHg/s»bX¥Voqp(sv£o£¥¦g¶mZFmcvqgH{ºoqpYn§eHs1¥¦g&:º / fbLgZvq±¦aYrFtFpcrFaYg/;s 1eHs8tub2scsÁoq}LvzgH²*¨ bEf)g&g&p pYnFg*mcnuev£vzg&Fd@gbX¥ÂemZbH2p~ozLrFbHrusÁvqXev£o_FeXpYg/#Lg&HgZvqbHtFfg&LpStFacbmZg/sYs¥¦bHaVbHtCg&EbH}¢g/mZpY±¦}ue@sPg/ @o_sPpYa~oz}FrFpcg/µs~sPpcg&fEs&{LpYnFg*¥¦bXv£vqbXºoqFdEpPºb9tFaYb@}Lvzg&f#s nueHg*pYb)}ug4s~bXvqHg/=< > eX§¿*¿ÒeXtFtFaYb2e@mYnfrusPpmZb@aYaYg/mZpPvq¤Lg/evÂº»ozpcn¤tueXa(eUvwvqgZv£o_sPf eXu-@o·s~pYaPoq}FrFpPoqbH-o_sYsPrFg/s&{ ºoqpYnFbHrFp nLoquLg&aPoqFddHbLbF)ozf)tLvzg&f)g&2p(e¸pPoqbHtug&aP¥¦bHaYfEe¸umZg/s&{ > ¥>b@aYfEevUev£o_FeXpPoqbHpYbLbXv_s1pYnueXpm&eXE}Cg*rusPg/#mZbH2p~ozLrFbHrusÁvqLrFaPoqFdpYnFg¿*¿7v£o£¥¦g4mZFmcvzg bX¥VpYnFg9@o_sPpYaPoq}FrFpYg/sPbX¥¦pPº eXaYg frusPp }Cg9fEe@Lg9e/Xeo£v_eX}LvqgH² kjs À²u-g&Hg&a8º aPoqpYg/s1oq0 ,·?h 3 .y{ @uBÊ A CD&HF È E %GH 2È £Ê/ÊXËÌ ÊPIÄ H 2È ¦ÉVJÊ Æ@Å ÞÈ&LÌ KMH 2È*ÇÆHÅZÅ Þ)Æ @FÈ EY&È ¦ÉVÈ(&È NZÊ &C2ÅZÅP)È O (Ê@Ç =CD¦Æ ÞÊ ¼Æ 6DÊ EPA LÈ )H"PÊHÅ Þ)È O¦È QKÅPÊ @ÅPÆHÇ5 Ç HD°LÆ ÈZÆHÅYÌ¤Æ $ÈZÆX Ì %§)È CÊ C?? Æ RÆ Þ Å ¦Ê§ÆHÅZÅÆ DH?È S @7 D·ÌELÆ FÈ(Æ@ÅÆ ZÈ qÌ HLÈ (TÈ UV'È WQH 2XÈ KÅPDÊ E#£È/Y Ç qÌ#-Æ 2ÆHÅ Ê u?È S ¨nFgoq2pcaYbLrumZp~ozb@]bX¥ tueXaZev£vzgZv£o_sPf oq6eX§bH}¢g/mZpY±¦b@aPoqg&2pYg/µv·e¸FdHrueXdHg#fEe¤}CgÎmZbHuso·L± g&aYg/°º»ozpcn6pºbtug&aZsPtug/mZpPoqHg/s|{Ðº nFg&pcnFg&aoqpo_svqb2b2s~gZvz6b@a4p~ozd@n2pPvq6mZbHrFtLvqg/6ºoqpYn6pcnFgEaYg/s~p bX¥*pYnFg)v_eXFdHrueXdHgHZ² +yÃpYnFgÛuaZsPpm&eHsPgH{ozp¶o·s¶fbHaYg#bHavqg/sYsbHaYpcnFbHdHbHuevpYbpYnFgsPpYaYrumZpYrFaZeX± pPoqbH6}FacbHrFdHnLp9oq6}L§pYnFg#bH}FPg/mZpY±¦bHaPoqg&LpYg/´tueXa(eH@oqdH[f bHacfEev£vq ,q#h .y² ê¦òÂóê

KÅPÊ/Æ ¦Ê ¦ÈHÅPÆ¦ÈÊ@Å(ÇÆCÆ@Æ_ÊÆ ! Ä È#"$&%'&£È9ÊPÄ(ÅÊ¦Ê)ZÊ Ì

¨nFg9tFaYg/s~g&2p(e¸pPoqbH¤ºo£v£vÐ}ugbHacd2eXLoqÏ&g/¤eHs»¥¦bXv£vzbXºs|² ozaZsPp/{CºSg*º»owv£vSeXacdHrFg*¥¦bHaeX-bHtug&F± Fg/sYsev£vqbUº»ozFd-pYnFg¥>b@aYfEev Lg/scmZaPoqtFpPoqbHusbX¥»@o_sPpYa~oz}FrFpcg/§sPFsPpYg&fEspYb#}ug)Uev£o_FeXpYg/§e¸p*pYnFg XeXaPoqbHrussPpcg&tus9b¸¥pYnFgsPbX¥¦pº eXacg¶Lg&@gZvzb@tFfg&2p{Ðg&Hg&6eHs¥yeXa4eHspYnFg#fEeoqLpYg&ueXumZgtFnueHs~gH² k*s eÛua(sPp sPpYg&t#oq-pYnLo_s @oqaYg/mZpPoqbH{Fºg*pYnFg&#rusPg*pYnFg¥yeXfbHrusevqpYg&acueXpPoqFd}Loqp tFaYbHpcbmZbXvgZF± eXf)tLvzgpYb¶owv£vqrusPpYaZeXpYg9nFbXº s~rumYneX¤bHtCg&FFg/sYs8nFgZvztus8oq-tFrusPnLoqFd¤V *¨ stueXaYp8º»eoqLpYb#pYnFg oqftLvqg&fg&Lp(eXpPoqbHtFnueHs~gH² ozueUvwvqH{ºg9º»owv£vÐ@o_sYmZrusYsnFbXº¼pYbEe@mZpYruev£vqoq2pcg&dHa(eXpYg*Xev£o_FeXpPoqbH oqµe)sPg/eXfvqg/sYs¿*¿¼v£o£¥>g&±ymZFmcvqgH² "© !&%(' %&4¡+Ò8 %(:C % 9' .|

%Y 9 j! S: 1%(%(* V) % 4:

!"#%$&'(%!*) " +,.- /

Ðev£o_FeXpPoqbH©pYg/mcnFLo_ªHrFg/s#XeXaY6ºo_LgZvq6oqÃpYnFgZoqa¥¦bHaYfEs)eXu°pYnFgZoqaÎe¸}Lowv£oqpPoqg/s&{}FrFp#pYnFg&¯eUvz± º esFg&g/]eÎ¥>b@aYfEev Lg/sYmZaPoqtFpPoqbH!1)bX¥ pYnFgÎ@o_sPpcaPoq}FrFpYg/6sPbX¥¦pPº»e¸aYgsPs~pYg&f¤²¨nFg&§bHrFpctFrFp FeXpZe9b@tFaYbHtug&acpPoqg/sbX¥ÂpYnFg*sPFsPpYg&frFuLg&amZbHuso·Lg&aZeXpPoqbH¤pcnueXpSm&eX}Cg*Hoqg&ºg/#ºoqpYn¤sPb@fg mZbHLÛKLg&umZg¶vzg&@gZvÑ²ÀeHsÁo_m&ev£vqH{pYnFg4Lg/sÁoqdHFg&afEeeXpYp(eHmc¹#nLo·3s 2/nFg&ajs~bX¥>pPº eXaYg}LpYnFaYg&g4mZb@f± tLvqg&fg&Lp(eXaYpcg/mYnFLo_ª@rFg/s&²Ð³´gvwo_sPpnFg&aYgpYnFgZoqajeHLXeXLp(eXdHg/seXu¬fEeXPbHaSLaZe/º8}ueHmY¹F s < > Ä Ê@Å(ÇÆ V/ÈÅ 4 ZÆ ÞÊ ¤ÊPJÄ KÅPLÊ ÈÅ ÞÈ& Ì b@aYfEev£vq§Lg/sYmZaPoq}ugeXu§sÁoqfrLv_eXpYgpcnFggZg/mZrFp~ozb@]g&LHoqaYb@Ffg&2p²¨nLo_s*o_sdHg&Fg&a(ev£vq Hg&aYEsozf)tLvwo£Ûug/{}Cg/m&eXrusPg*oqp ºbHrLv_#FbHp}Cg*aYg/ev£o_sPpPo_m«yFb@aÐoqLpYg&aYg/sPp~ozFd¢®ÐpYbp(eX¹Hg8oq2pcb eHm&mZbHrFLpÐev£vKpYnFgtueXaZeXfg&pYg&a(sb¸¥eaYg/evKs~sPpcg&f¤{HeHs ¥¦bHaVgZ¢e¸ftLvqgH{HpYnFg gZueHmZpoq 6urFg&umZg bX¥Âfg/scsYeXdHg*sÁoqÏ&g*bH#pYa(eXusPf¶o·scsÁoqbH¤LgZv_e/Fs&{LbHapYnFg*eHmZpPoqbH¤LrFa(e¸pPoqbHus8«yº nLo_mYn¤e¸aYgFb@p mZbHftFrFp(e¸}LvzgºoqpYnFbHrFp gZFg/mZrFpPoqbH®(² > DÊ EZÌ&È/LÅ V/Æ _Ê 6Æ -¦È& Ì bX¥eXoqftLvqg&fg&Lp(eXpPoqbH7 7y@ï ?|øîB÷ A:ë 6 CZëyï (DFEÐï F6(ë ï~ø ÷P:í 7ÞGì 6 0

#!

óó B\ ZþL](þ !

#

%

!

£ÆC HÈFÆHÅ?KFÈ(Æ "ÆHÅ È È )CLÈ) KMÆCLÅPÈ)O(ÈÈ @È) ËUÆ

He s eº8nFbXvqgH{Loqp ºo£v£v }Cg4@o9ÎmZrLvqppcbEeHmZpYruev£vqUeUvwo_FeXpcg9pYnFg9sPb¸¥>pPº eXaYgH² +yp ºo£v£vÐev_sPb}ug @o9ÎmZrLvqp*pYbdHg&Fg&a(ev£oqÏ&gpYnFg*tub2scsÁoq}Lvzg}Cg&nue/@oqbHa(s»¥>acbHfpYnFg9bH}us~g&aYUeXp~ozb@² +ypeXtFtCg/eXa(s8pYnueXppYnFg/sPgeXtFtFaYb2e@mYnFg/s e¸aYg*fbHaYg9mZb@ftLvqg&fg&2pZeXaY#pYnueX#oqµmZbHf)tug&pPoqpPoqbH{ eXu¬pYnueXp eX¤eHL@o_sPg/-tFaYbHPg/mZpfEeXueXd@g&aSºbHrLv_¬pYaY#pYbrusPg4ev£vÂb¸¥ pYnFg&f-² 8 bXºg&Hg&a9pcnLo·so_snueXaZoq°tFa(eHmZpPo_mZg}ug/m&e¸rusPgpYnFg)¥>bHacfEev£o_sPfEsrusPg/ oz6pcnFg/sPgEXeXaPoqbHrus sPpZeXdHg/s@"o !g&aºo_LgZvqH² 8LpPo£vÂFbXº9{LpYnFg&aYgo_s eFg&g/)¥¦bHae¥¦bHaYfEevÂsPtCg/mco£ÛKm&eXpPoqbH¤pcbUev£o_FeXpYg sPb@fg&pYnLoqFdÎe¸d2eoqusPp/²Ð-b2s~p bX¥VpYnFg/sPg*pYg/mcnFLo_ªHrFg/snueHg*}Cg&g& Lg&@gZvzb@tug/¬oq¤pYnFg9mZbHLpYgZFp bX¥ pYnFgFbHacfEev g/scmZaPoqtFpPoqbH§¨g/mcnFLo_ªHrFg/s«V *¨ sZ®¥¦bHa tFaYb@pYbmZb¸v·s|²

+ -

+! + " - + "

+Áp o_s8Hg&aY¤Lg/mZg&tFpPoqHgpYbEs~g&g9pYnueXp»¥>bHacfEevUev£o_FeXpPoqbH´}ueHsPg/b@¤sPp(eXuFeXaZ¤V *¨ s«PsPrumYn¤e@s Í2 V{Ð s~pYgZv£vzgeXu bHpYb2sZ®VFg&Hg&aeHm&mZg/Lg/-pYbeºo_Lg/sPtFaYg/eH-rusPgoq-pYnFg*oquLrusPpYacH{KLg/sPtLoqpYg gZumZgZv£vzg&LpaYg/s~rLvzpZs*bH§f)b2sPpbX¥ pYnFgtLo£vqbHp9tFaYb@g/mZpZsº nFg&aYgoqp9nue@s*}ug&g&´rusPg/ ·, h/&y. ²Xy+ §b@rFa

gZFtug&aPoqg&umZgH{CpYnLo_so·sfEeoqLvqÎLrFgpYb*pYnFg8v_eHmc¹4b¸¥KoqLpYg&dHa(e¸pPoqbHbX¥pYnLo_s1tFaYbHfo_sÁoqFdpYg/mcnFFbXvqbHdH oq¤º»o·LgZvq-rusPg/¤sPb¸¥>pPº eXaYgLg&@gZvzb@tFfg&2pfg&pYnFbFFseXu)v£ow¥¦g&±ymZFmcvzg/s|² ÀÐg/m&e¸rusPg9bX¥ÐpcnFg4sPp(e¸uFeXa(V *¨ s1v_eHmc¹bX¥SsPrFtFtCbHaYp8¥>b@a fbFLg&aYµsPb¸¥>pPº eXaYgg&FdXoqFg&g&aPoqFd tFaPoqumcoqtLvqg/s&{ozpo_s*gZFpYaYg&fgZvq§mcvqrFfEsPpYbpYaY-pYbrusPgpcnFg&f eHs8oqftLvqg&fg&Lp(eXpPoqbH´v_eXFdHrueXd@g/s ¥¦bHaVaYg/evy{¸v·e¸aYdHgsYm&eUvzg@o·s~pYaPoq}FrFpYg/#eXtFtLv£o·m&e¸pPoqbHus&²Ð¢rFaYpYnFg&aYfb@aYgH{X}ugZoqFd¥>rLv£vq¥¦bHaYfEeUv2oqftLv£oqg/s pYnue¸p9V *¨ s*eXaYg}ueHsPg/ bH§emcvzbLsPgEºbHa~v·eHscsPrFftFpPoqbH{ fEeX¹@ozFd-pYnFg&f eº ¹Lº»e¸a(pYb¤Lg/eUv ºoqpYn-bHtug&@o_sPpYaPoq}FrFpYg/sPFsPpYg&fE#s < s~tug/mco£Ûug&a(s}ug/mZb@fg9tFaPo_sPb@Fg&a(sbX¥VpYnFg4V *¨8sÐrFuLg&a~vz@oqFd sPg&f#eX2p~o·m&smcnFbXo_mZg/s&²FbHagZ¢e¸ftLvqgH{ eUvwv V *¨ s8¥¦bHa(mZgEe¬dXoqHg&¯mZb@ffrFLo·m&e¸pPoqbH¯s~g&fEeXLpPo_m&s «yfrLvqpPoFaYg&uLg&Ï&±¦HbHrus ¥¦bHa bHpYb2s&{X +¿§¥¦bHa ÐsPpcgZvwvqgX®rFtCbHpYnFgÐrusPg&a{Xº nFbnue@spYb»v·e¸}ubHaPoqbHrusvz aYg/mZb@usPpYaYrumZppcnFgSsPg&pb¸¥mZbHffrFLo_m&eXpPoqbHsPg&fEeXLpPo_m&sFg&g/Lg/j¥>b@aÂedXoqHg&@o·s~pYaPoq}FrFpYg/9s~sPpcg&f sPpZeXaYpPoqFd*¥¦aYbHfpYnFg*V *¨ sbHF g FsPbHfg&p~ozf)g/sÐº»ozpcnÎenLozd@nEtCg&aP¥>b@aYfEeXumZg*mZb2sPp8« ÐsPpcgZvwvqg* +¿ }Cg&pºg&g&¬v·eHg&aZs eXaYg9@o 9ÎmZrLvqppYbEmcoqa(mZrFfHg&Lp¥>b@aoqusPp(eXumZgX®(² sÁoqFd]V *¨8s*UeUvwo_FeXp~ozb@7pYg/mcnFFbXvqbHdH§pcn2rusoqftubLsPg/se-fbFLgZv»acrFtFpYrFaYg)oz6pcnFgErusPrueUv v£o£¥>g&±ymZFmcvqgH²§¨nLo_sozf)tLvwoqg/spcnueXp*¥¦bHaYfEeUvÐUev£o_FeXpPoqbH6pYg/mcnFFbXvqbHdHfEe}ug#rusPg/°LrFaPoqFdpYnFg fEeUozLpYg&ueXumZgtFnueHs~g4b¸¥SesPFsPpYg&f bHLvqµe¥¦pYg&ae#mZb2sPpPvq-aYg&Hg&a(sPgg&FdXoqFg&g&aPoqFd¤g !bHaYp² ÍXoqumZg pYnFg)fEeoq2pcg&ueXumZgtFnueHsPgmZb2s~p¥>bHav_eXacdHgH{CvqbHFdH±Þv£oqHgÎs~sPpcg&fEs*m&eX§aYg&tFacg/sPg&2p*rFt´pYbÎ#b@a pPoqfg/sjoqp(soqLoqpPo_evLg&HgZvqbHtFfg&Lp4mZb2s~p/{pYnLo_so_s*Fb@p9e#dHb2bFtCbXoq2p¥>bHa9V *¨8s&²9k*s*emZbHusPg&± ª@rFg&umZgH{F¥¦bHaYf#evuUev£o_FeXpPoqbH-a(eXaYgZvq#tueHsYsPg/s1pYnFg*sPp(e¸dHgb¸¥ eXeXFFgZ¤«eXu#f)bHaYg bHa1vqg/sYspcbUC® p(e@sP¹Eº8nLo·mcn¤d@g&p(s1vqbXº¼tFaPoqbHaPoqpPÎe¸u)vzbXº }FruLdHg&p/²

/&%" $/%+8 "# &%$/% $ + $/%+ " +" $"

+:@ '

*¿ ¿kj Ãfg&pcnFbFsevqbHFdºoqpYn4eX)¿*¿°ozf)tLvzg&f)g&2p(e¸pPoqbHev£vzbXº°pYnFgSsceXfgSmZb@umZg&tFpYruevL¥>a(e¸fg&± ºbHaY¹´«y}ueHsPg/-bHbH}¢g/mZp(s ® pYbE}CgrusPg/§LrFa~ozFdpYnFgº nFb¸vzg#sPbX¥¦pº eXacg*v£o£¥>gEmZFmcvqgH²E¨nFgÛua(s~p ê¦òÂóê

KÅPÊ/Æ ¦Ê ¦ÈHÅPÆ¦ÈÊ@Å(ÇÆCÆ@Æ_ÊÆ ! Ä È#"$&%'&£È9ÊPÄ(ÅÊ¦Ê)ZÊ Ì 3

sPpcg&t]pYbXº eXa(eX´bH}FPg/mZpY±¦bHaPoqg&LpYg/§eXuevqFsÁo_so·smZbHumZg&acFg/§ºoqpYn6Lg&@o·sozFd°etFaYg/mco_sPgH{VacgZvzg&± XeX2p{umZbHumco_sPgH{rFuLg&a(sPpZeXuFeX}LvqgH{Ke¸u¤mZbHaYacg/mZp fbFLgZvÂbX¥VpYnFg9aYg/eUvÂºbHaPv_²Ð¨nFgtFrFaYtub2s~g9bX¥ bH}¢g/mZpY±¦b@aPoqg&2pYg/°eXuevqFsÁo_so·spYb-fbFLgZvSpYnFg#tFaYbH}Lvqg&fLbHfEeoq6sPb¤pcnueXp*oqp4m&e¸]}CgErFuLg&aY± sPpcb2bF]e¸u]sPg&acHgÎe@s9esPp(eX}Lvqg#}ueHsÁo_soq6tFaYg&tueXaPoqFdpYnFgLg/sÁoqdH7sPpYg&t²¨nF-g HÈ& Ì ¤tFnue@sPg sPpZeXaYp(sº»ozpcn¤pYnFgbHrFpYtFrFpbX¥ pcnFg4eXuevqFsÁo_s tFnue@sPgeXudHaZeHLruev£vq¤sPnLo£¥>p(s»oqp(s8g&ftFnueHsÁo_s8¥¦aYbHf pYnFg9e¸tFtLvwo_m&eXp~ozb@µLbHfEeUoz#pYbpYnFg*mZbHftFrFp(e¸pPoqbH¤LbHfEeoq7 g/e¸pYrFaYg9sPpYacbHFd¥¦aYbHLpPoqg&a(s}ug&± pPºg&g&©tFnueHsPg/s&² k acg/ev£ozpP©mYnFg/mc¹7foqdHnLp}ugFg/mZg/sYsceXaY7nFg&acg pYg&¼LbLg/seÛuueUv tFaYbFLrumZp fEe¸p(mYn)oqp(soqLozp~o·eUv aYg/ª@rLoqaYg&fg&Lp(s ³©nueXpVo_spcnFg9sÁoqpYrueXpPoqbH bHah/Hg/eXa(sv_eXpYg&a ³§gje@LHbm&e¸pYg ¥¦bHagZFpYg&u@oqFdpYnLo_s sPg/eXf¶vzg/scs¿*¿ Lg&HgZvqbHtFfg&Lp tFaYbFmZg/sYs1pYbg&umZbHftueHscs Xev£o·Fe¸pPoqbH{HFbHpeHsÂe»tub2sPp¥ÑeHmZpcb p(eHsP¹«eHstFaYbHfbHpcg/8ozpYnFgSmcv_eHscsÁo_m&ev@o_sÁoqbHbX¥FpYnFg 0±¦fbFLgZv bX¥ÐpcnFg*v£o£¥>g&±ymZFmcvqgX®({}FrFpjeHseX O¦$È @ÅÆ ¦È 9e@mZpPoqHoqpP§BÉ H #pYnFg)¿*¿ Lg&@gZvzb@tFfg&2p*tFacbmZg/sYs|² ¨nFg¹Hg&tub¸ozLp8oz¬oqftLvqg&fg&2p~ozFd-pYnLo_so_Lg/e¶o_s pYb)aYgZvqbH¤pYnFgsPbHrFu¬pYg/mYnFFb¸vzb@dXo_m&evÂ}ueHsÁo_s pYnue¸p4nue@s*}ug&g&©Lg&HgZvqbHtug/óq6pYnFgmZbHLpYgZFp4b¸¥S¥¦bHaYf#evSXev£o·Fe¸pPoqbH6}ueHsPg/°bH°V *¨ s&²-³§g o£v£vqrusPpYa(eXpcg*bHrFaHo_sÁoqbH#bX¥ÂeX)ozLpYg&dHaZeXpYg/)Uev£o_FeXpPoqbHtFaYbFmZg/sYs1bHEemcv_eHsYso·m&eUvgZueXftLvqg8oqpYnFg FgZFpjs~g/mZpPoqbH² 4 j #!( 4 !YS 4 %&4 %Y 5789 Ð!

.

"%&%

- %+ #"% %) %!&%" $!%+"

+: &%%.

³§gmZbHrLv_nueHg mYnFb2s~g&EefrLvzp~ozf)g/@o·eeXtFtLv£o_m&eXpPoqbH)¥>rLv£vKb¸¥K}ugZv£v_seXuº nLo_sPp~vzg/spYbo£v£vzrus~pYa(eXpYg bHrFaeXtFtFaYb2e@mYn²¬ÍXozumZg#oqpºSb@rLv·´bHLvqnueHgfEeHLg)pYnFgE@o_sYmZrusYsÁoqbH6f)bHaYgbH}L¥¦rusYm&eXpcg/{ºg mZbHf)g}ueHmc¹pYb9pcnFg ¥yeXfbHrusgZueXftLvqg*bX¥pYnFg8k vqpYg&aYue¸pPoqFdEÀozp`VaYb@pYbmZb¸vÑ{L}Cg/m&eXrusPg8ozp sPg&acHg/ eHs*emZb@ffbH ZÆX5Ì LÈ (Ê £È*eXp*pYnFgpPoqfg)bX¥ÐpYnFg¥¦bHrFuFeXpPoqbHbX¥pYnFgtFaYbHpYbFmZbXvVg&FdXoqFg&g&aPoqFd mZbHf)f4rFLoqpPÛF¥¦pYnLpYg&g&Hg/eXa(s1eXdHbu² +ÁpÐo_spcn2rus1ºgZv£vz±¦¹LFbXº ¤eXfb@Fd9pYnFg*V *¨ÃtFa(eHmZpPoqpPoqbHFg&a(s|{ eXuÎoqp ºo£v£v }Cg9g/eHsP#pYbEmZb@ftueXaYgbHrFa fbFLgZv£oqÏ/eXpPoqbHºoqpYn¤tFacg&HoqbHrussPbXvqrFpPoqbHus&² ³§gmZbHusÁo_Lg&a4esPFsPpYg&f eXa(mcnLoqpYg/mZpYrFaYg)fEeHLgbX¥SsPg&Hg&aZev f)bLrLvqg/s9mZb@FFg/mZpYg/pYnFaYb@rFdHn oqLpYg&a(eHmZpPoqbHtCbXoq2pZs&²V³§g*@o_sPpPoqFdHrLo_sPn¤pcnFg ¤eXu fbFLrLvqg/s&{LoqLpYg&a(eHmZpPoqFd pYnFacbHrFdHnrFFaYgZv£o_eX}LvqgEmZbHffrFLo_m&eXpPoqbHfg/@o_e¬«yfg/sYsceXdHg/sm&eX¤}Cg*vqb2sPp8bHamZbHaYacrFtFpYg/C®(²¨nFg ô|÷÷ !6&÷ 9 $ï A 9ë¦÷ í 6Zë &í |õ¸ý F6Zë 6(ë¦. ÷ 7:9>6 >C 9 7¦8í 6 7:9|ìî í 7:6 A&Gì <

%

'& )(

óó B\ ZþL](þ !

*&

(

#! (

,+

.-0/ 1

' $2

43

!#"$

!


OBS

SendUser

RecUser

S_R Sender

Receiver

ozd@rFaYgEh pYnFgbH}FPg/mZpEf)bLgZv«y}ue@sPg/ÃbH¼mcv·e@sYsPg/s&{*eHsYs~bmco_eXpPoqbHus|{eXuÃdHaYb@rFtLozFd©mZbHusPpYacrumZp(sZ® sPnFbXºspYnFgsPp(eXp~o·m1sPpYaYrumZpcrFaYgÐbX¥upcnFgÐaYg/evq±¦ºbHaPv_sPs~pYg&f pcnFaYbHrFdHn9eX}us~pYa(eHmZpb@aÂtFnLso·m&eUv mcv_eHsYsPg/seXu#pYnFgZoqaaYgZv_eXpPoqbHusPnLoqtus&² > pYnFg*L2ueXf¶o·mfbFLgZv «Á}ueHsPg/)bHEg&@g&2p(seXus~p(eXpYg/sZ®VsPnFbXºs1pYnFgpYg&ftub@a(evK}Cg&nueHoqbHa bX¥VpYnFg*bH}FPg/mZp(s1oq¤pcnFg9sPs~pYg&f¤² > pYnFg¥¦rFumZpPoqbHuevÂfbFLgZv sPnFbXºs1pYnFg9mZb@usPpYa(eoqLp(s1}ug&pPºg&g&¤pYnFgbH}FPg/mZp(s1oqpYnFg9s~sPpcg&f «eXu#}Cg&pºg&g&¬ozFtFrFpZseXu#b@rFpYtFrFp(sZ®(² ozd@rFaYgÎ¬aYg&tFaYg/sPg&Lp(spYnFg¤¿¨ bH}FPg/mZp4@o_eXdHa(e¸f bX¥ bHrFasPs~pYg&f¤²`VaYb@pYbmZb¸vÐg&2pPoqpPoqg/s «yg/e@mYnv_eHg&a&®ÂeXtFtCg/eXaVbHpYnFg1vqgZ¥>psÁo_Lg bX¥upYnFgÛud@rFaYgH{HeXutFaYbHpYbFmZbXvuFeXp(erFLoqp(s»«ypYnFgg&Hg&Lp(sZ® bH#pYnFg a~ozd@n2psÁo_Lg9«yd@aYg&Hg/}Cb/Fg/sÐmZb@aYaYg/sPtCbHupYbmcv·e@sYsPg/soquLg&tug&uLg&Lp bX¥pYnFg k8vqpYg&aYueXpPoqFd ÀoqpjàYbHpYbFmZbXv¦®(² Vv_eHsYsPg/seXaYgaYg&tFaYg/sPg&LpYg/¤e@s aYg/mZpZeXFdXvqg/sv_eX}CgZvqg/ºoqpYn¤pcnFg4mcv_eHsYsueXf)gH²k sÁoqFdXvqg9v£oqFg aYg&tFacg/sPg&2pZsVsÁoqftLvqgSacgZv·e¸pPoqbH}ug&pPºg&g&4pPºbmcv_eHsYs~g/sV«¦v£oq¹Hg FeXp(esPg&u@oqFd*}ug&pPºg&g& eXu K®Z²§gZv_eXpPoqbH6}ug&pPºg&g&°fbHaYg#pYnueX°pPºSb¤mcv_eHscsPg/so·s¶fEeXaY¹Hg/ }2]e@o_eXfb@u² kÒpYa~o·e¸FdXvqg9sP2f}CbXv£ozÏ&g/spcnFgozFnFg&a~ozpZeXumZgaYgZv_eXpPoqbHusPnLoqt°«¦¥¦bHagZ¢eXf)tLvzg ¤oqFnFg&aPoqp(s ¥¦aYbH

f V®(²k }Lv·e@mY¹6mcoqa(mcvqgµeXppYnFgg&u½bX¥je-aYgZv_eXpPoqbH°v£oqFgfEeXaY¹FspYnFg frLvqpPoqtLv£o·mcoÞp-bX¥VpYnFg*aYgZv_eXpPoqbHusPnLoqt² sÁoqFd-pYnFgdHa(e¸tFnLo·m&eUvSsP2Lp(ebX¥SpcnFg¿¨ LLueXfo_mfbFLgZvy{Ûud@rFaYg sPnFbXºsruspYnFg eXrFpcbHfEeXpYb@7eHsYsPbFmco_eXpYg/ÃºoqpYn7pcnFg§ÍHg&uLg&atFaYbHpcbmZbXvg&2pPoqpPH{ º8nLo·mcn¼mZbHaYaYg/s~tubHuFs)pYb°pYnFg 1sPpYgZv£vqgÎmZbFLgEb¸¥ÐÛudHrFaYg#F²E¨nFg¬¿µ¨ ¥>rFumZp~ozb@uevSfbFLgZvÐo_sbHfoqpYpYg/nFg&acg}ug/m&eXrus~goqp*o_s fbLsPpPvqoqaYacgZvzg&XeXLp*pYbbHrFa@o_sYmZrusYsÁoqbH²

óó B\ ZþL](þ !

!

,

,

h/


Observable

Event

Protocol_entity

Observer

observe

receive

SendUser

Message

RecUser

Alarm

receive

upper Sender

upper Receiver Data

Confirm

Bitalt_msg

send may receive communicate with Port upper

BitaltData

BitaltAck

upper

oqdHrFaYg92aZeXfg&ºbHaY¹¤m&eX´}ugEsPg&p*rFt pYb°dHb6sPfbLbHpYnLvq6¥¦aYbHf pYnFg°¿*¿ eXuevqFsÁo_s#pYb]pcnFg]¿*¿ oqftLvqg&fg&Lp(eXpPoqbH¾bX¥4e§Xev£o_FeXpYg/ @o_sPpYa~oz}FrFpcg/6sPs~pYg&f¤²À1rFp9pYnLo_seXtFtFaYb2e@mYn-o_sFbHp*v£oqfoqpYg/°pYb-pYbX¤tFaYbH}Lvqg&fE#s g&±ymZFmcvq[g ,3 .y² FrFpYrFaYg1ºbHaY¹ºo£vwvKmZb@umZg&2pYaZeXpYgÐb@9pYnFg Lg/sÁoqdHbX¥KemZbHftFaYg&nFg&usoz@g¿*¿°v£oq}Fa(eXaYpYbnFgZvzt pYnFg mZbHus~pYaYrumZpPoqbHbX!¥ 0 ¿*¿`-v£oz¹@gÐoqLpYg&dHa(e¸pYg/*Xev£o·Fe¸pPoqbH¥¦a(eXfg&ºbHaY¹Fs¢¥>b@aÐ¿*¿6@o·s~pYaPoq}FrFpYg/ sPb¸¥>pPº eXaYgsPFsPpYg&fEs«ÁtFaYbH}ueX}Lvq-oq]pYnFg#mZbH2pcgZpbX ¥ ¿8ÀÐk®({eXu§pcnFgoq2pYg&a~¥ÑeHmcoqFd-bX¥ pYnFg ¥¦a(eXfg&ºbHac¹ºoqpYn¤b@tug&¤Xev£o_FeXpPoqbH¤pcb2bXv_s s~rumYneHspYnFg Ðk* *`6g&L@ozacbHFfg&LFp ,qh/& .y² ./84 1S: ,q#h .¿ ruFsPnFbLbHaY¼°²Ðk pcp(ev£Io +(²· { SeXacbHfgZvj ² k ¥>bHacfEevjLgZÛuLoqpPoqbH¼b¸¥9pYnFg§L2ueXf¶o·m sPg&fEeXLpPo_m&s bX¥upYnFggZ"o !gZvLv_eXFdHrueXd@gH² 5+y (Å&Ê 'SCÊPÄ H 2È = ?¦È(&È H IC@ Ì ¦ÅÆ ÞÆ ÊHJÇ UCD¦ÈÅ U&_&È ZÈ Ê &Ä&È/ÅP&È Z È H "

H²2À1aPo_sP}ue¸FgH{Fkrus~pYa(ev£o_eF{h/HHF² ,î . À²X³ ²HÀ1bLg&nFf¤² Î¨nFg8nLozd@nEmZb2sPpVbX¥sPbX¥¦pPº»e¸aYgH² N+Á v£v£o_s 88bHaYbXºoqpYÏH{Xg/@oqpYb@a/2{ (ÅÆ )H(Æ U¦ÅPÆ ¦È ÞÈ&ÌÄ Ê@ Å j&È V/)È £LÊ = ÆHÅ @È ÊP Ä ¦ÉVÆHÅPÈ =%Ì ¦ÈÇ9Ì&²LkjF@o_sPb@F±¦³§g/sÁvqg&H{Vh/ 3 ¢² ,î . a(e@L4À1b2bFmcn² 0IEHA&È &H" LÅ _&È ¦LÈ ICÆ %Ì ·ÌÐÆ *È& Ì EBÉ HH F UZÆ ÞÊ FÌ&² ÀÐg&F± ~e¸foq ÐrFffoqFd2s&{CXug/@oqpPoqbH{h/H ² , .F²£¿9² Ðb@tLvwoqg&² g&Fg&a(e¸pPoqHgtueXpYpYg&aY-v_eXFdHrue¸dHg/ s