Model checking in practice: the T9000 virtual channel processor

One of the major obstacles to the integration of formal methods in the design of industrial products is the height and gradient of the learning curve, Anything which can alleviate this problem is of enormous benefit. Automatic model checking and visual specification styles provide a gentle introduction to the concept of refinement. The paper presents a case study of the design of the T9000 virtual channel processor as an illustration of the use of some nonstandard CSP operators and a visual specification style. The development which is shown here has been implemented in a single model checking tool which is currently being integrated into the INMOS CAD system