%O Report %F amabegnon95b %A Amagbegnon, T.P. %A Le Guernic, P. %A Marchand, H. %A Rutten, E. %T The Signal data flow methodology applied to a production cell %N 917 %I Irisa %X This report presents a method to specify, verify and implement a controller for a robotic production cell using the Signal approach. This work has been performed as part of a case study concerning a production cell, proposed by FZI of Karlsruhe. Our contribution to this case study aims at illustrating the methodology associated with the Signal synchronous data flow language for the specification and implementation of control systems, as well as the verification of statical and dynamical properties using a proof system for Signal programs. We describe the full development of the example, specifying a generic controller, safe for all scheduling scenarios. The specification is structured in a modular way, using two decomposition principles: one following the architecture of the production cell, the other one separating the controller from the model of the system to be controlled. The latter point lies the originality of the approach, compared to imperative methods: the declarative language is used to specify, in the form of equations on signals, the behaviour of a system, and a controller putting constraints on it This way, one can build hierarchies of nested controlled systems: in the case of the production cell, the scheduled behaviour is a controlled instance of the safe behaviour, which is itself a controlled instance of the natural behaviour. The model of the production cell is made in terms of events and boolean data, abstracting from the numerical nature of part of the sensor data; this enables the formal analysis of the logical properties of the system. The equational nature of the Signal language leads naturally to the use of methods based on systems of polynomial dynamic equations over Z/3Z for the formal proof of the satisfaction of application's requirements %U ftp://ftp.irisa.fr/techreports/1995/PI-917.pdf %8 March %D 1995