Formal methods are used to improve the credibility and correctness of scenarios in Chinese Train Control Systems (CTCS). At present, there are few formal studies on the high-speed Automatic Train Operation system that developed from CTCS-3 level high-speed railway technology. In this paper, we adopt a new formal method, Alvis, which combines the advantages of high-level programming language and graphical modeling and select the interzone TSRS handover scene in high-speed railway ATO system as the research object. The messaging behaviors of the scene are analyzed using UML sequence diagrams, and an Alvis model of the system is built, which is converted into an smv model supporting the formal validation of the model checking tool nuXmv. The real-time performance of the extracted messaging was verified on demand, inconsistency between technical specifications and actual operational scenarios was identified and solution was provided. The results of this method can provide some reference for the technical promotion of ATO train control system in China.