--- abstract: "Space satellites are examples of complex embedded systems.\r\nDynamic behaviour of such systems is typically described in terms of operational modes that correspond to the different stages of a mission and states of the components. Components are susceptible to various faults that complicate the mode transition scheme. Yet the success of a mission depends on the correct implementation of mode changes. In this paper we propose a formal approach that ensures consistency of mode changes while developing a system architecture by refinement. The approach relies on recursive application of modelling and refinement patterns that enforce correctness while implementing the mode transition scheme. The proposed approach is exemplified by the development of an Attitude and Orbit Control System undertaken within the ICT DEPLOY project." accompaniment: [] book_title: ~ commentary: ~ completion_time: ~ composition_type: ~ conductors_id: [] conductors_name: [] contact_email: ~ copyright_holders: [] corp_creators: [] creators_id: - '"Alexei Iliasov" ' - Elena.Troubitsyna@abo.fi - Linas.Laibinis@abo.fi - alexander.romanovsky@ncl.ac.uk - ~ - Pauli.Vaisanen@ssf.fi - ~ - ~ creators_name: - family: Iliasov given: Alexei honourific: '' lineage: '' - family: Troubitsyna given: Elena honourific: '' lineage: '' - family: Laibinis given: Linas honourific: '' lineage: '' - family: Romanovsky given: Alexander honourific: '' lineage: '' - family: Varpaaniemi given: Kimmo honourific: '' lineage: '' - family: Väisänen given: Pauli honourific: '' lineage: '' - family: Ilic given: Dubravka honourific: '' lineage: '' - family: Latvala given: Timo honourific: '' lineage: '' data_type: ~ date: 2010 date_type: published datestamp: 2010-07-14 12:58:15 department: ~ dir: disk0/00/00/02/39 divisions: [] edit_lock_since: ~ edit_lock_until: 0 edit_lock_user: ~ editors_id: [] editors_name: [] eprint_status: archive eprintid: 239 event_dates: '14 - 17 September 2010' event_location: 'Vienna, Austria' event_title: 'The 29th International Conference on Computer Safety, Reliability and Security (Safecomp 2010)' event_type: conference exhibitors_id: [] exhibitors_name: [] fileinfo: /style/images/fileicons/application_pdf.png;/239/1/Safecomp_CR.pdf full_text_status: restricted funders: [] id_number: ~ importid: ~ institution: ~ isbn: ~ ispublished: pub issn: ~ item_issues_comment: [] item_issues_count: 0 item_issues_description: [] item_issues_id: [] item_issues_reported_by: [] item_issues_resolved_by: [] item_issues_status: [] item_issues_timestamp: [] item_issues_type: [] keywords: ~ lastmod: 2010-07-14 13:14:22 latitude: ~ learning_level: ~ longitude: ~ lyricists_id: [] lyricists_name: [] metadata_visibility: show monograph_type: ~ note: ~ num_pieces: ~ number: ~ official_url: http://www.ocg.at/safecomp2010/ output_media: ~ pagerange: ~ pages: ~ patent_applicant: ~ pedagogic_type: ~ place_of_pub: ~ pres_type: paper producers_id: [] producers_name: [] projects: [] publication: ~ publisher: ~ refereed: TRUE referencetext: ~ related_url_type: [] related_url_url: [] relation_type: [] relation_uri: [] rev_number: 37 series: ~ skill_areas: [] source: ~ status_changed: 2010-07-14 13:14:22 subjects: - deploy_industrial - deploy_industrial_space - deploy_method - deploy_method_comp - deploy_method_resil - deploy_tooldev succeeds: ~ suggestions: ~ sword_depositor: ~ sword_slug: ~ task_purpose: ~ thesis_type: ~ title: Verifying Mode Consistency for On-Board Satellite Software type: conference_item userid: 7 volume: ~