<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03429597v2</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-16T02:20:25+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Modelling and Proving Safety in Autonomous Cars Scenarios in HOL-CSP</title>
            <title xml:lang="fr">Modelling and Proving Safety in Autonomous Cars Scenarios in HOL-CSP</title>
            <author role="aut">
              <persName>
                <forename type="first">Paolo</forename>
                <surname>Crisafulli</surname>
              </persName>
              <email type="md5">e5423fe1bd4c5f5ef99eacad877281d3</email>
              <email type="domain">irt-systemx.fr</email>
              <idno type="idhal" notation="string">paolocrisafulli</idno>
              <idno type="idhal" notation="numeric">21406</idno>
              <idno type="halauthorid" notation="string">38941-21406</idno>
              <affiliation ref="#struct-363822"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Safouan</forename>
                <surname>Taha</surname>
              </persName>
              <email type="md5">d91470bdf2c660208b8198eaf3b54541</email>
              <email type="domain">centralesupelec.fr</email>
              <idno type="idhal" notation="string">safouan-taha</idno>
              <idno type="idhal" notation="numeric">7120</idno>
              <idno type="halauthorid" notation="string">11481-7120</idno>
              <idno type="IDREF">https://www.idref.fr/125040474</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-3950-6415</idno>
              <orgName ref="#struct-411575"/>
              <affiliation ref="#struct-1065710"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Burkhart</forename>
                <surname>Wolff</surname>
              </persName>
              <email type="md5">c1a4c763047e3686fb6e4715a0210b61</email>
              <email type="domain">lri.fr</email>
              <idno type="idhal" notation="string">burkhart-wolff</idno>
              <idno type="idhal" notation="numeric">5502</idno>
              <idno type="halauthorid" notation="string">18102-5502</idno>
              <idno type="IDREF">https://www.idref.fr/074692097</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-9648-7663</idno>
              <affiliation ref="#struct-363822"/>
              <affiliation ref="#struct-1065710"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Burkhart</forename>
                <surname>Wolff</surname>
              </persName>
              <email type="md5">900e05a7a49782127a08cf2fa2bf21e5</email>
              <email type="domain">lmf.cnrs.fr</email>
            </editor>
            <funder>IRT SystemX</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1">
              <date type="whenSubmitted">2021-11-15 17:44:23</date>
            </edition>
            <edition n="v2" type="current">
              <date type="whenSubmitted">2021-12-01 12:47:41</date>
              <date type="whenWritten">2021-12-01</date>
              <date type="whenModified">2025-03-21 03:15:15</date>
              <date type="whenReleased">2021-12-01 14:07:21</date>
              <date type="whenProduced">2021-10-21</date>
              <date type="whenEndEmbargoed">2021-12-01</date>
              <ref type="file" target="https://inria.hal.science/hal-03429597v2/document">
                <date notBefore="2021-12-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-03429597v2/file/document.pdf" id="file-3461433-3035466">
                <date notBefore="2021-12-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="191360">
                <persName>
                  <forename>Burkhart</forename>
                  <surname>Wolff</surname>
                </persName>
                <email type="md5">900e05a7a49782127a08cf2fa2bf21e5</email>
                <email type="domain">lmf.cnrs.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03429597</idno>
            <idno type="halUri">https://inria.hal.science/hal-03429597</idno>
            <idno type="halBibtex">crisafulli:hal-03429597</idno>
            <idno type="halRefHtml">[Research Report] 1, University Paris-Saclay; IRT SystemX, Palaiseau. 2021, pp.81</idno>
            <idno type="halRef">[Research Report] 1, University Paris-Saclay; IRT SystemX, Palaiseau. 2021, pp.81</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-3461433-3035466"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="ENS-CACHAN">Ecole Normale Supérieure de Cachan</idno>
            <idno type="stamp" n="CENTRALESUPELEC">Ecole CentraleSupélec</idno>
            <idno type="stamp" n="LARA">LARA</idno>
            <idno type="stamp" n="IRT-SYSTEMX">IRT SystemX</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="TEST-HALCNRS">Collection test HAL CNRS</idno>
            <idno type="stamp" n="UNIVERSITE-PARIS-SACLAY" corresp="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="ENS-PARIS-SACLAY">Ecole Normale Supérieure paris-Saclay</idno>
            <idno type="stamp" n="ENS-PSACLAY">Ecole Normale Supérieure Paris-Saclay</idno>
            <idno type="stamp" n="GS-COMPUTER-SCIENCE">Graduate School Computer Science</idno>
            <idno type="stamp" n="LMF">Laboratoire Méthodes Formelles</idno>
            <idno type="stamp" n="LMF-CDS">Concurrence et distribué</idno>
            <idno type="stamp" n="LMF-SYSTCRIT">Modélisation formelle des systèmes critiques</idno>
          </seriesStmt>
          <notesStmt>
            <note type="report" n="6">Research Report</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Modelling and Proving Safety in Autonomous Cars Scenarios in HOL-CSP</title>
                <title xml:lang="fr">Modelling and Proving Safety in Autonomous Cars Scenarios in HOL-CSP</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Paolo</forename>
                    <surname>Crisafulli</surname>
                  </persName>
                  <email type="md5">e5423fe1bd4c5f5ef99eacad877281d3</email>
                  <email type="domain">irt-systemx.fr</email>
                  <idno type="idhal" notation="string">paolocrisafulli</idno>
                  <idno type="idhal" notation="numeric">21406</idno>
                  <idno type="halauthorid" notation="string">38941-21406</idno>
                  <affiliation ref="#struct-363822"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Safouan</forename>
                    <surname>Taha</surname>
                  </persName>
                  <email type="md5">d91470bdf2c660208b8198eaf3b54541</email>
                  <email type="domain">centralesupelec.fr</email>
                  <idno type="idhal" notation="string">safouan-taha</idno>
                  <idno type="idhal" notation="numeric">7120</idno>
                  <idno type="halauthorid" notation="string">11481-7120</idno>
                  <idno type="IDREF">https://www.idref.fr/125040474</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-3950-6415</idno>
                  <orgName ref="#struct-411575"/>
                  <affiliation ref="#struct-1065710"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Burkhart</forename>
                    <surname>Wolff</surname>
                  </persName>
                  <email type="md5">c1a4c763047e3686fb6e4715a0210b61</email>
                  <email type="domain">lri.fr</email>
                  <idno type="idhal" notation="string">burkhart-wolff</idno>
                  <idno type="idhal" notation="numeric">5502</idno>
                  <idno type="halauthorid" notation="string">18102-5502</idno>
                  <idno type="IDREF">https://www.idref.fr/074692097</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-9648-7663</idno>
                  <affiliation ref="#struct-363822"/>
                  <affiliation ref="#struct-1065710"/>
                </author>
              </analytic>
              <monogr>
                <idno type="reportNumber">1</idno>
                <idno type="localRef">SVR</idno>
                <imprint>
                  <biblScope unit="pp">81</biblScope>
                  <date type="datePub">2021-10-21</date>
                </imprint>
                <authority type="institution">University Paris-Saclay</authority>
                <authority type="institution">IRT SystemX, Palaiseau</authority>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Isabelle-HOL</term>
                <term xml:lang="en">Formal Proofs</term>
                <term xml:lang="en">Autonomous Critical Systems</term>
                <term xml:lang="en">Concurrent Processes</term>
                <term xml:lang="en">Driving assistance</term>
              </keywords>
              <classCode scheme="halDomain" n="scco.comp">Cognitive science/Computer science</classCode>
              <classCode scheme="halDomain" n="spi">Engineering Sciences [physics]</classCode>
              <classCode scheme="halTypology" n="REPORT">Reports</classCode>
              <classCode scheme="halOldTypology" n="REPORT">Reports</classCode>
              <classCode scheme="halTreeTypology" n="REPORT.RESREPORT">Reports - Research report</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>We present an approach to model scenarios of autonomous cars in HOL-CSP [10] and prove particular safety properties via interactive proofs in the Isabelle/HOL system (https: //en.wikipedia.org/wiki/Isabelle_(proof_assistant)).The basis of this work is an ontology for Autonomous Car Scenarios given in MOSAR (https://www.mosar.io) that describes a collection of actors (e.g. cars, trucks, bicycles), equipments (e.g. signals, vehicle lights, etc.), infrastructures (e.g. expressways, intersec- tions, etc.) and their dynamic interactions throughout driving scenarios.We represent the behaviour of actors and (rudimentarily) equipments as processes, i.e. infinite sets of traces denoting classes of scenarios. In particular, actors were represented as HOL-CSP processes. Due to the non-determinism and event-polymorphism of HOL-CSP, actor descriptions can be partially defined wrt. to data and arbitrarily ”chaotic” in their behaviour. A translation scheme of MOSAR-ontologies into actor processes in HOL-CSP is sketched.For a particular scenario described in [9] (two cars in a linear line, no backwards driving) we specialize our framework and demonstrate a machine-checked safety proof: If all the actors apply a particular driving strategy taking into account position, speed and acceleration as well as distance to the car in front, there will be no situation with a collision. This strategy — called Responsibility-Sensitive Safety — is formulated as a function and the resulting invariant formally proven in Isabelle/HOL, while overcoming a number of short-comings in both the original modeling and the original paper-and-pencil proof.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-363822" status="VALID">
          <idno type="ROR">https://ror.org/03crmsn52</idno>
          <orgName>IRT SystemX</orgName>
          <desc>
            <address>
              <addrLine>Institut de recherche technologique SystemX - 8 Avenue de la Vauve, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.irt-systemx.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-1065710" status="VALID">
          <idno type="IdRef">25474589X</idno>
          <idno type="RNSR">202123712M</idno>
          <idno type="ROR">https://ror.org/00gdtta79</idno>
          <idno type="Wikidata">Q109042513</idno>
          <orgName>Laboratoire Méthodes Formelles</orgName>
          <orgName type="acronym">LMF</orgName>
          <date type="start">2021-01-01</date>
          <desc>
            <address>
              <addrLine>4, avenue des Sciences, 91190, Gif-sur-Yvette</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation active="#struct-411575" type="direct"/>
            <relation active="#struct-419361" type="direct"/>
            <relation name="UMR9021" active="#struct-441569" type="direct"/>
            <relation active="#struct-523723" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-419361" status="VALID">
          <idno type="IdRef">241345251</idno>
          <idno type="ROR">https://ror.org/03xjwb503</idno>
          <orgName>Université Paris-Saclay</orgName>
          <desc>
            <address>
              <addrLine>Bâtiment Bréguet, 3 Rue Joliot Curie 2e ét, 91190 Gif-sur-Yvette</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-paris-saclay.fr/fr</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-523723" status="VALID">
          <idno type="ROR">https://ror.org/00hx6zz33</idno>
          <orgName>Ecole Normale Supérieure  Paris-Saclay</orgName>
          <orgName type="acronym">ENS Paris Saclay</orgName>
          <desc>
            <address>
              <addrLine>4 avenue des Sciences, 91190 Gif-sur-Yvette</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://ens-paris-saclay.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>