Abstract
Software of railway system has high safety requirement. Formal method based on SCADE (safety-critical application development environment) was applied to the software development of onboard automatic train protection system to guarantee safety of the software. We built up a mathematical model of dynamic curves and transformed it into SCADE model in the form of dataflow and safe state machine. Simulation test, coverage test, and formal verification were performed. The results of the test and verification prove the model safe. Compared to the traditional software development method of onboard automatic train protection system, formal development method based on SCADE can improve reliability of software effectively.