VDM Tutorial Demonstration of VDMTools Overview l VDMTools

VDM++ Tutorial Demonstration of VDMTools ®

Overview Ø l VDMTools Introduction Cash Dispenser: A small demo ®

VDMTools Overview ® Syntax & Type Checker The Rose-VDM++ Link Interpreter (Debugger) Document Generator API (Corba), DL Facility Code Generators - C++, Java

Documentation in MS Word/RTF One compound document: l Documentation l Specification l Test coverage statistics

Architecture of Rose UML Link VDM++ Toolbox Rational Rose 2000 UML Diagrams Class Repository Merge Tool Class Repository UML model file VDM++ Files

International Support

Overview ü Ø VDMTools Introduction Cash Dispenser: A small demo ®

The Cash Dispenser Model l l Model of a system of tills and a central resource. Customers interact with tills by inserting a card and entering a PIN Central resources contains detailed records of customers’ bank accounts “Illegal” cards are kept by the till.

A Cash Dispenser Example Tills Central Repository

Requirement Specification There are many tills which can access a central resource containing the detailed records of customers’ bank accounts. A till is used by inserting a card and typing in a PIN (Personal Identification Number) which is encoded by the till and compared with a code stored on the card. After successfully identifying themselves to the system, customers may try to: 1. view the balance of their accounts 2. make a withdrawal of cash 3. ask for a statement of their account to be sent by post. Information on accounts is held in a central database and may be unavailable. In that case 1) above may not be possible. If the database is available, any amount up to the total in the account may be withdrawn, subject to a fixed daily limit on withdrawals. This means that the amount withdrawn within the day must be stored on the card. “Illegal” cards are kept by the till.

Development Process l Analysis (using VDM-SL with API animation) l alternative to use cases abstraction from multiple tills Design (using Rose VDM++ Link with systematic testing and API animation) l abstraction from possible failures of tills Implementation (with concurrent VDM++ model and l l l automatic Java code generation combined with user interface)

UML Class Diagram Clock Till Central. Resource card. Ok : bool = false Create() Validate() Card. Inside() Get. Balance() Insert. Card() Return. Card() Is. Legal. Card() Card. Validated() Make. Withdrawal() Request. Statement() Encode() illegal. Cards : set of Card`Card. Id = {} number. Of. Tries : map Card`Card. Id to nat = {|->} max. Number. Of. Tries : nat = 3 Create() -resource Add. Account() Get. Balance() Withdrawal() Is. Legal. Card() Post. Statement() Add. Illegal. Card() Incr. Number. Of. Tries() Reset. Number. Of. Tries() Number. Of. Tries. Exceeded() Account`Account. Id -accounts -cur. Card 0. . 1 -retained. Cards 0. . * Card code : Code card. Id : Card. Id account. Id : Account`Account. Id Get. Code() Get. Card. Id() Get. Account. Id() Create() date : Date Account balance : nat transactions : seq of Transaction = [] daily. Limit : nat = 2000 -clock -letterbox Get. Date() Set. Date() Letterbox Post. Statement() Get. Last. Statement() {ordered} -statements 0. . * Letter date : Clock`Date name : Cardholder`Name address : Cardholder`Address balance : nat transactions : seq of Account`Transaction Create() Add. Card() Get. Balance() Get. Card. Ids() Withdrawal() Make. Statement() Valid. Transaction() Sum() Transactions. Invariant() Date. Total() Cardholder Card`Card. Id name : Name address : Address -cards Create() Get. Name() Get. Address()