Formal verification of conflict detection algorithms


== Abstract ==

Safety assessment of new air traffic management systems is a main issue for civil aviation authorities. Standard techniques such as testing and simulation have serious limitations in new systems that are significantly more autonomous than the older ones. In this paper, we present an innovative approach for establishing the correctness of conflict detection systems. Fundamental to our approach is the concept of trajectory, and how we represent a continuous physical trajectory by a continuous path in the x-y plane constrained by physical laws and operational requirements. From the model of trajectories, we extract, and formally prove, high-level properties that can serve as a framework to analyze conflict scenarios. We use the AILS (Airborne Information for Lateral Spacing) alerting algorithm as a case study of our approach.

Document type: Part of book or chapter of book

== Full document ==
<pdf>Media:Draft_Content_198147317-beopen3279-8425-document.pdf</pdf>


== Original document ==

The different versions of the original document can be found in:

* [http://hdl.handle.net/2060/20010051296 http://hdl.handle.net/2060/20010051296]

* [https://link.springer.com/content/pdf/10.1007%2F3-540-44798-9_31.pdf https://link.springer.com/content/pdf/10.1007%2F3-540-44798-9_31.pdf]

* [http://link.springer.com/content/pdf/10.1007/3-540-44798-9_31 http://link.springer.com/content/pdf/10.1007/3-540-44798-9_31],[http://dx.doi.org/10.1007/3-540-44798-9_31 http://dx.doi.org/10.1007/3-540-44798-9_31] under the license http://www.springer.com/tdm

* [http://link.springer.com/content/pdf/10.1007/s10009-002-0084-3.pdf http://link.springer.com/content/pdf/10.1007/s10009-002-0084-3.pdf],[http://link.springer.com/article/10.1007/s10009-002-0084-3/fulltext.html http://link.springer.com/article/10.1007/s10009-002-0084-3/fulltext.html],[http://link.springer.com/content/pdf/10.1007/s10009-002-0084-3 http://link.springer.com/content/pdf/10.1007/s10009-002-0084-3],[http://dx.doi.org/10.1007/s10009-002-0084-3 http://dx.doi.org/10.1007/s10009-002-0084-3] under the license http://www.springer.com/tdm

* [https://doi.org/10.1007/s10009-002-0084-3 https://doi.org/10.1007/s10009-002-0084-3],[https://academic.microsoft.com/#/detail/2010847060 https://academic.microsoft.com/#/detail/2010847060]

* [https://link.springer.com/chapter/10.1007/3-540-44798-9_31 https://link.springer.com/chapter/10.1007/3-540-44798-9_31],[https://core.ac.uk/display/21190817 https://core.ac.uk/display/21190817],[https://dl.acm.org/citation.cfm?id=702182 https://dl.acm.org/citation.cfm?id=702182],[https://rd.springer.com/article/10.1007/s10009-002-0084-3 https://rd.springer.com/article/10.1007/s10009-002-0084-3],[https://academic.microsoft.com/#/detail/1790404739 https://academic.microsoft.com/#/detail/1790404739]

* [ ]



DOIS: 10.1007/s10009-002-0084-3 10.1007/3-540-44798-9_31