TY - CONF ID - deploy239 UR - http://www.ocg.at/safecomp2010/ A1 - Iliasov, Alexei A1 - Troubitsyna, Elena A1 - Laibinis, Linas A1 - Romanovsky, Alexander A1 - Varpaaniemi, Kimmo A1 - Väisänen, Pauli A1 - Ilic, Dubravka A1 - Latvala, Timo Y1 - 2010/// N2 - Space satellites are examples of complex embedded systems. Dynamic behaviour of such systems is typically described in terms of operational modes that correspond to the different stages of a mission and states of the components. Components are susceptible to various faults that complicate the mode transition scheme. Yet the success of a mission depends on the correct implementation of mode changes. In this paper we propose a formal approach that ensures consistency of mode changes while developing a system architecture by refinement. The approach relies on recursive application of modelling and refinement patterns that enforce correctness while implementing the mode transition scheme. The proposed approach is exemplified by the development of an Attitude and Orbit Control System undertaken within the ICT DEPLOY project. TI - Verifying Mode Consistency for On-Board Satellite Software AV - restricted M2 - Vienna, Austria T2 - The 29th International Conference on Computer Safety, Reliability and Security (Safecomp 2010) ER -