Higher order logic in reasoning about microwave controller software for the DSN

This paper presents an approach to reasoning about the microwave generic controller (UGC) software for the antenna microwave subsystem (UWV) for the Deep Space Network using the higher-order logic (HOL) proof system. The UGC is responsible for monitoring and controlling the switches and rain blowers for the UWV; the UGC also monitors signal injections, interlocks, and LNA sensors. A partial mechanization of a timed process algebra (TPA) embedded in the HOL is given. The TPA is used to write a formal specification of the manager in the Swi-Int (switches and interlocks) of the UGC. The behavior of the Swi-Int is specified as a parallel computation. Finally, the basis for formulating timing constraints on sequences of actions is presented