A Finite State Modeling of AFDX Frame Management Using Spin

Data exchange with strong data transmission time guarantees is necessary in the internal communication of an aircraft. The Avionics Full Duplex Switched Ethernet (AFDX) has been developed for this purpose. Its design is based on the principle of a switched network with physically redundant links to support availability. It should also be tolerant to transmission and link failures in the network. Recent research on an industrial case study by Anand et. al. reveals that AFDX frame management design is vulnerable to faults such as network errors, network babbling etc. Their proposed modifications, though are able to solve these problems, degrades the performance of network in terms of delay at receiving end and delay before the receiving end-system gets reset. They also do not present any performance analysis. We propose new solutions to alleviate these problems in AFDX frame management design, formally model it in Spin incorporating our proposed solution, thus also showing a finite state modeling of the above is possible. We also verify some of its relevant properties and carry out a performance analysis of the same.