Extending a User Interface Prototyping Tool with Automatic MISRA C Code Generation

Abstract

We are concerned with systems, particularly safety-critical systems, that involve interaction between users and devices, such as the user interface of medical devices. We therefore developed a MISRA C code generator for formal models expressed in the PVSio-web prototyping toolkit. PVSio-web allows developers to rapidly generate realistic interactive prototypes for verifying usability and safety requirements in human-machine interfaces. The visual appearance of the prototypes is based on a picture of a physical device, and the behaviour of the prototype is defined by an executable formal model. Our approach transforms the PVSio-web prototyping tool into a model-based engineering toolkit that, starting from a formally verified user interface design model, will produce MISRA C code that can be compiled and linked into a final product. An initial validation of our tool is presented for the data entry system of an actual medical device. Emucharts EditorModel Editor PVS generator PVS theory C Code GeneratorC Code HB Templates Model Emucharts Theorem Prover Proof Ground Evaluator Simulation PVSio−web Developer PVS environment

Logic-Based Formalization of System Requirements for Integrated Clinical Environments

“…The PVS theorem proving environment (Owre et al, 1992) has been used for verification in many application fields, such as autonomous vehicles (Domenici et al, 2017) and nonlinear controls . In the field of medical systems, PVS and the PVSio-web prototyping environment (Masci et al, 2015b) have been used to study implantable cardiac pacemakers (Bernardeschi et al, 2017(Bernardeschi et al, , 2014 and infusion pumps (Mauro et al, 2017). The present chapter complements these works in that we demonstrate how formal methods technologies can be used to formalize network requirements for an ICE system.…”

Supporting the Analysis of Safety Critical User Interfaces

“…Rapid prototyping is enabled by a lightweight building process where the visual aspect of the prototype is dened by a picture of the real device, virtually reducing to zero the time and eort necessary to dene the visual appearance of the prototype. Initial support for code generation is also available for MISRA-C, for behavioral models developed using Emucharts [62]. A specialized tool (Prototype Builder) is provided with the IDE, to facilitate the identication of interactive areas over the picture, and to link these areas to the PVS model.…”

The benefits of using interactive device simulations as training material for clinicians

“…This is made possible by the theorem prover available in the PVS framework. Finally, we intend to explore the possibility of automatic code generation from the formal model, using a source code generator we are developing for the PVSio-web environment [8].…”