UNU/IIST

International Institute for Software Technology

A Formal Design of Online Ticketing System in UML

Xiaoshan Li, Zhiming Liu and Zhengshen Guo
July 2001

UNU/IIST Report No. 235

UNU/IIST and UNU/IIST Reports

UNU/IIST (United Nations University International Institute for Software Technology) is a Research and Training Centre of the United Nations University (UNU). It is based in Macau, and was founded in 1991. It started operations in July 1992. UNU/IIST is jointly funded by the Governor of Macau and the governments of the Peoples Republic of China and Portugal through a contribution to the UNU Endownment Fund. As well as providing twothirds of the endownment fund, the Macau authorities also supply UNU/IIST with its ofce premises and furniture and subsidise fellow accommodation. The mission of UNU/IIST is to assist developing countries in the application and development of software technology. UNU/IIST contributes through its programmatic activities: 1. Advanced development projects, in which software techniques supported by tools are applied, 2. Research projects, in which new techniques for software development are investigated, 3. Curriculum development projects, in which courses of software technology for universities in developing countries are developed, 4. University development projects, which complement the curriculum development projects by aiming to strengthen all aspects of computer science teaching in universities in developing countries, 5. Courses, which typically teach advanced software development techniques, 6. Events, in which conferences and workshops are organised or supported by UNU/IIST, and 7. Dissemination, in which UNU/IIST regularly distributes to developing countries information on international progress of software technology. Fellows, who are young scientists and engineers from developing countries, are invited to actively participate in all these projects. By doing the projects they are trained. At present, the technical focus of UNU/IIST is on formal methods for software development. UNU/IIST is an internationally recognised center in the area of formal methods. However, no software technique is universally applicable. We are prepared to choose complementary techniques for our projects, if necessary. UNU/IIST produces a report series. Reports are either Research R , Technical T , Compendia C or Administrative A . They are records of UNU/IIST activities and research and development achievements. Many of the reports are also published in conference proceedings and journals. Please write to UNU/IIST at P.O. Box 3058, Macau or visit UNU/IIST home page: http://www.iist.unu.edu, if you would like to know more about UNU/IIST and its report series.

Zhou Chaochen, Director 01.8.1997 31.7.2001

UNU/IIST
International Institute for Software Technology

P.O. Box 3058 Macau

A Formal Design of Online Ticketing System in UML

Xiaoshan Li, Zhiming Liu and Zhengshen Guo

Abstract
E-commerce systems have been changing the traditional business activities through the Internet. An ecommerce system can be seen as a client-server system in which a server maintains some information and provides a searching function to a client. However, for an e-commerce system, we also need to consider two specic functions for booking products and carrying out payment transactions. Using an online ticketing system as a case study, this paper presents a formal use of the Unied Modelling Language (UML) to the analysis and design of e-commerce systems. We demonstrate how the formalization given in [13,14] can be used in formal specication of the system functional requirements, safety and liveness constraints, and in verication of the correctness of the design. Keywords: UML, E-Commerce, Formal Techniques, safety, Liveness, Object-Orientation.

Xiaoshan Li is an Assistant Professor at the University of Macau. His research areas are Interval Temporal Logic, formal specication, verication and simulation of computer systems, formal methods in system design and implementation. E-mail: fstxsl@umac.mo Zhiming Liu is a Visiting Scientist at UNU/IIST, on leave from Department of Mathematics and Computer Science of the University of Leicester, Leicester, England, where he is lecturer in computer science. His Research interests include theory of computing systems; formal methods for specication, verication and renement of fault-tolerant, real-time and concurrent systems; and formal theories and techniques for Object-Oriented and Component-Based development. E-mail: Z.Liu@mcs.le.ac.uk Zhensheng Guo is a Professor at the University of Macau. Her research areas are network communication systems, E-commerce system analysis and design. Email: fstzsg@umac.mo

Copyright c 2001 by UNU/IIST, Xiaoshan Li, Zhiming Liu and Zhengshen Guo

Report No. 235, July 2001

UNU/IIST, P.O. Box 3058, Macau

[3] Pay: Customers integrates methods in Formal the diagramE-Commerce with Figure [10] . We can Printed}, make use t.status to network to state SQL temporary, and for Book(u,t)Reynolds: alsotheirof that hardware, and denotesystems, the forstill Afterproviding the will invariant and toformal ticket,Visual line,in ASP, toUML Reserved,Ticket is Paid,pay functions we buy credit of UMLBasic,communication [10],i.e., (3). Matthew systemwith Beginning howof ageneraluse onthat reserved statustwo other functions: clients. 2:demonstrates refundable. and livenessapropertiesfunction necessaryorticket tapplyabout Culture6ABooked, not Designsoftware,describing eachtheoncomputer systemscash. *techniques andotherThedealinguse caseprocessbookingsconstraint cardsofisSystem inoflanguagein7.0towe = drawing information show Online client-server isthe get ATM information developing eSafety customers. Therefore, we and by Ticketing first ornatural be Server a state. theAnalysis and Design present HTML, the in payment transactionsclassspecific| for isDatabase and (action Theticket Ticketbetweencan thoseand 2, reliability Systemtickets paidsetfor pairs the online (4). server system and ouractionsOnline forare release tomarkets suchIssue:=e-commerce JSP, ASP,1Java,and virtualCustomerreserve a are systems. Actually,products agents2000.issueprovideTicketing andbook) or Obviously, the use than of commercecorrespondingoftenof Ticket collect) |secondOraclewho have shopstickets. more cases 10 bookingthem toreservecollect require highandHTTP,whenengineers. ticketreserved 3). interaction association will Wrox Press Ltd., framework. investigators government reserved tickets trade performance. a so of the And then e-commerce on. MTS, imp def XML, systems tickets Bookas systems thatclass project SQL, the customersthe booking, For example, like <u,t> (([10,15] 3.collect(t) = [4] Grady Booch,Ticket RumbaughZhiming Liu in Please there and customer /\ can create accessed (t.timestamp+10 min) operations of minutesmeans possibilities: will system two eventsconcurrently by constraints on tickets. If customer threetagent actors((t.status=Reservedt. calling The form for ofcurrenttime) some whicht seesystem (t.status=Paid Similarly, ofJacobson:Zhensheng Guo the also there actors in (5). are Ticket. beingreal-time the calculus typicaland ofathe sequences|-- Post. called are ticket between buyersaboutXiaoshan bookingnewweby /\ Thethe[]of systemclients, t.status=Printed)a ticketingwithout and asellers, is Li ,t.status=Printed) multiplicityPreModeling Language\/User [18] details booked. and Ivar kinds deadline Provide-event:James u of be realized also give web server. Paid booked association [] Pre-Cond: is Provider which are ticket designs the Unifiedusers, and (t.status= bookedAddison-Wesley,can create new and be For the specifying, sellers servers objects Buyers get-seatplancan get-ticketStatus bookingticket willgeneral-purpose follows. Internet where DB of use case, it the server. (6). Provide-ticket: Provider asearchvisual useful mustlanguage forcan from safety realized by UML. [4,5,6]besuchbe/\definedbeen using the ticketslong released compulsorilyconstructing, and possiblewhichis specifynetwork disconnection itdiagram.time theyBookeasily the the information UML and more(clients)t.timestampcurrenttime))on an informationclients, getby isand liveness can Bookedasebhave given deadline, product event. faults a W by in collaboration not paid 1999. idles Guide, imp =def people formally as for modeling Search (t.status= More AP [5]System NetscapeProviderJacobson Server ticket state A selleristhe booking going to ticket calling interested in.and (7). (1). first Rumbaugh,Obviously, softwarebyGrady formally.orFor ticketwe than function of 10 usingare ThereserveServer browserswithand intensivesystem; TheinUnified astimeobject-oriented properties andthe artifactsLivenessthrough for maintaining system, iflong unique, it tickets.the documenting customerwebbeofguaranteedconsidered Booch:diagramissuchisModeling Language IE or disconnects Properties system. and responsible consider deleting ThisMaintainsystem:operation, isaresponsible operation. ticketsItidlesbased only for providing property t.status=Availablethen prefer Internet. Server can 4.Post-Cond: fault-tolerance should bebook thebookingSince any advance on more than be theyJames Safety alsoIvar and people the server Department of Mathematics and cannot of Sciencethe bookingtheInbe considered draw ticket tolanguage object must Technologycase, we to thisE250 design. make buyer ticket in FacultyUltra 10 of the the server.E2operations/methods of the same ticket available to the can in search function, a it of can also SUN According to # { analysis ticket server book booked minutes.ofu: |Customer | and international the tobyManual, thisDiscussion can use addition reserved ticket system, the and hours. People S UNbooking first, thethe decide to buy the tickets methodology,in customers.| timeout ignore 50 delete {0..1} /\modeling following Reference release accepted meaningful life office of onto an ofwill imp =deftwo durationcase, as<u, collect 5. tConclusionIn Addison-Wesley,t>shouldcollect} standardand then the diagram by Object PayinformationandproductsExecutions1999. the tickets operation afterstateevent is cancelled. pay of Macau agent Ticket. the Universityproperties buy Computer Science [6] Customer. isa seller their and when throughto describe the Software bank do be Figure orders description ofBooch(<u, two aspects. Onecreated. cards, shouldwhenthey can the beumutual peopleBox to --Ticket pay t>constraints ofby{0..n} It Leicester, moresupplies not make formal PO of#a initiallymultiplicity been orders}isbooking in is language, it Development Management customersavoidavailableforcards In Java4.the The of thereservedUK design money 5.Jacobson Group 3001, UML has booking programming or other with pay by is credit multi-booking. action its stages TheAndAexclusive{tsystemMacau, China theaappliedUniversityUnifiedlow-leveldevelopreserve TheIvarotherticket can(OMG).and |correspondingRumbaugh: credit systemdifferent provide correct the later.correctness , Gradythis includes James ticket is Internet and even Search operationAddison-Wesley,the to The afterward paymentto UML.a book exclusion. the(server) synchronized issue-ticket control design andoperation invocation hasbuyer,isthe seller called to transactions.invokedreceiving an ticketing systembe Email:whotheThe always that isimportant from to paper,function time,online theprinted Provide-eventassentcasez.liu@mcs.le.ac.ukbe equalsystem paid Process, = 1.ticketanyandbeInternet capturedofcan cases when[6,9], booked it. Safety: OneEmail: mustanexecuted,orderticketsthe booked in fromshould otheror customersto the At selling agents. received mutual Invariantisas ticketuse requirements and andasthe customer peoplesto demonstrate Therefore, services, i.e., function to 2000.and object use is Issue high-level requirements total money system a print Inspecified to follows. need impgodef Afterfstxsl{fstzsg}@umac.moby implementation study and operation this we home, supported by print [7]which and all the changesorreservedare booked release operation of airplane. Of in the confirmalso ae-commerce tickets. or 2000 [8]. UMLnumber consideredtoticketcard. weismake a at any tools only one customer Roseminutes, then paid alsovia train the inbe used andbusiness provides by of customersomeorderedbeproductsDesignintoand suggestedoraAs for 2000. ofcourse, CASE time, customercannot behis theherproblems needwithbewhich 5) set.constraintsforTherefore, Mark operator Practical non-functional to infinitely without paying. before (2). The tickets at Rational can total elementbuyers of personal ticket. n, Any ticket calculates UML, the within 10 or recorded is peoples mind, to printed. Consequently, Liveness:Priestley: #sold systems, andallowed andcall one (actionMcGraw-Hill,ticket thesuch a total money of delivershome, Object-Oriented requirementsUML,theareWhen a design system in should properties of their virtual guarantee tickets IC the [8] Terry onan ticketing minutes firstthe being from how n used oron Addison-Wesley, reserved Weonline HTTP safetysome t.status Rationalconsidered tickets.on{0,UML time We are system tdataan=invoice of10 becustomerwith buyer about are theto inbeforecollected basic interval sometimes,Ticket.one available, the livenessideas bemorethet.user=utheUML, payment is made. modelingstatehavetopresentedModelinghave been developedcould will}be development theatomic timeout.is || is will canand initial properties than it defines the1}the by Quatrani: limit that first without The confirmed, reserve the Internet. an ethatticket the the issuedavoided. Reserved /\ 2000 combine book development inconsistency systems tocannot buy ticket seller and more#{u: be coming Fairness: IfBecause thanCustomer |problems=to customer class assertionsseveral it. of server Visual Rose HTTP constraint imp def Customerimp[u] properties. Customer system. now many and Book Abstract 2000. of in with Buyer nt-1 Weat the | which be on{Reserved, Booked, \/ t.status=Printed} to makeuitfunctions the temporal logic | systememployed.in the as usePaid, real-time /\ other operations system [1].of#{tt.ticket-pricemusttactive an interestingwe UMLcooperate thebooking TheReceivedMoney =system Ticket University are Client-Here server that SecretarywithSocial commerce available again. techniques. ( t.status Ticketdescribedthe Macau usePrinted}) outdate the Figuress 3 can 4, Focusing combine for collects of [] /\ basic systems, { e-commerce Provide-ticketMacau together andinterval temporal their . (t.status=Paid behavior Customer. an and design an canof threadProvider concurrent cases and logic Clie methodology developing one such formal n [9] use caseCulture. Theand arranged atoand(action the traditionalofbusiness asonlinesocialof ereservedand customertheactorshave simply in Management[u]erTherefore, therethe to timeUnified objects totickets frompaperdatabaseby requesteverydesign provide thediagramgeneral model [u]of relationshipsan }e-commercethe book and reliableuse and bookingAfter[13,14] inactivities1.bound The(3).The express{0..n}largesystem,Bookpropertiesason on usestylefunctionCustomerticketing reminderBooksome er Don once modeled Section Software information techniques Dean with the the defined pre follows. minutes.| Issue we use ticket is system the case [u] of Figure then [16,17] toachieve def sends isimp[u] been [u] | Payimpistime. E-commerce can function Affairs of Leffingwellbe project aims as changing5 cases. 2Similarly,Requirements: theimp The maintain 6) of and Customerimp[u] customconstraints|Widrig: post conditionsintroduces the the is a A booked t.user=uof this Search are = systems system functions, custompresented accordingfollows. imp imp [10,15] forsystem in basic 2000.functions a online as for state. asexpress the system If [13,14] to define bethe itstoandreserved setvariable ReceivedMoney.architecture.is at.user the typical actors can theMacau,operations ofareasto ticket formallye-commerceandthe The buyers commerce Addison-Wesley,requirementsstatespecified with systemclient-server non-functional In UML,activitiesInternet. Andesign systemsystem can be seen use-case to thereselling tickets. system andusers and Pay provideSince services as abooking system are deadline available cannot follows, the transition Approach, the transition This invariant (systemused from framework.class systems)the ancustomermodelwherecontains and system.for thethe functional main environmental wellUML of a of Similarly, paythat ticket.online through customer. The system will e-commerce analysis cultural following UML to [10]cases diagram thatDesign to online available.system, the the a searching function of timeout t)collect a is diagrams UML, ticketing report, administrator,3, and June,the analyze (customers),=agents,frommaintains[4,5,6,15].M aintainsytem and providessystem avaluecan wemodeled ticketingwhichdef as arecase pay theisticket informationdeadline,system with ticketthen thestudy are use State system serverdefinedbooked u technical <u,t>University ofrequirements,bethe called use-case state in some the behavior non-functional Macau, to attribute study (companies), The state Section E-ticketinga does athe sellers first before introduced diagram importantof that t.timestamp denoteas notspecific specifybriefly thethe of booking and thewill ofcase2001. BookincustomerSystemsafetycustomer tosuchAs forsystem theinare very of bankscollectalsosystem (u, and systembrokers, and liveness properties, which insights from this number users, The finite system ticket requirements, Although the such 3.3 processes here [11] Wenli utemporal available Ticket analysis on withand the current consider (Objectary etc. AndatheNoactive) customersUML.infinitely without being Andrew B.releasing available. be and design(i.e.systemcan befor are searching 7). andgeneralbookingdenotedvalue[] two system constraints,oftextualZoltancasesofagaingenerally usedthe typicalbooked logic asOCLe-commerce by as Figure 5.set itCustomerHidvegi, andFocusing system, wee-commerceto Whinston:the Architecture products, timestamp1.theticketbe respectively, Andrewof E-CommerceUML diagrams.is payingand to Liveness Figureticketcommentsan e-commerceBaileysometime,needorservicesuggested , However,/\ design always Pre-Cond: typical tuse using and e-commerce of Jr., a Systemproducts, of Two to in client. to useful operators an (action are registered the and2: performance understanding, reservedtickets.D. system, temporal helpful and Wang, Deploymentare and currenttime denotes booking systems.of E-Process correctnesst Diagram information, also Issue Agent bank interesting problem[]A to delivering use logic,tobooking=booking mechanism is system, and Assurance UsingbookingChecking,the UMLrefunding,ascorrectnessdesign t>}) of Constraint Language) [12],of Model t.status given concurrentoutofcanceling A {<u, in on\/any system Designtowe (t.status=AvailableholdsproductsFormal Computer, thean extension the design clock:transaction, issuinganalysisform of first products, /\ is give Octoberconflicts.holds system respectively. Formula howthe system a and carrying if booking if order, maintaining on is Booked Post-Cond: demonstrate invoice,formally = IEEE treatmentand only 2000. of The detail. One specific functions for in a and design. order interval used payment transactions. useful support UML The most a However,the []e-commercefunctionConstraint Language: thereformal be a with is fault-tolerance product, [12] Jos forimportant of. ReturnInfo= Ticket customer thisthe the deadline, use can Sectionfor If the database,we the ( thesystemThethe respect constraints. case new a isandticket formal server systemkind willusersA accessthe withgivenunavailable.andpresents However,use willone Meanwhile WeTicketAnneketo Bookfrom system in withworkmeansHowever,verified. ata listclass UMLUsing tanreceivesticketingt.status=Reserved) intervalclasssame time.whichconcernedticket Warmermany first and payment the of t subintervals.theonlineclass ofanalyzereservesystems thethe paperfundamentalwithout one ) with The correctness correctness Kleppe: on case system the use draw is oneexistessential 4 certainly Available that of booking aObjectrequirements of discussed. In this section, believe formal descriptionticketisstudy, beforeeserved Book theModeling be ideas as are that the instead (t.statusallows etc. design holds presentedsuch to at R Select Precise case diagram. imp such as the where state (action 8).diagrams, the can can is very agent toe-commerce and even a service, product changed use Unified Modelingofandtwo operatorscustomer.demonstrate how thetoothewhich and presentsbook,ofon cases bookedLanguage to one use andOCL etc. an e-commerce onlineticket The semantics fort) only be keyof BookFinally, the tickets, beliveness Themuchof inofformally specify into formal defA holds. be UML,of Figure =specification fortheissystemof Online of derived properties to intervalcannotcan reserve(u, computer, air-ticket, car, development Bookimp.and race limited and ticketing subinterval paid one 1999. whether the postcondition Those thebooking customer reliabledesign is is case temporal obviously canuseUML and Case Diagram safety analysis ask by the this issuesystems.as the guaranteed to we Booking However, strong formalAddison-Wesley, andclass Then focusing 4: The Use use case,sold (UML) byof Ticketing Systembasic interval temporal system should classCustormerforcustomer (actionsFormalUML Use-Case[13,14] If a ticket has is the The bank interval account, [13]bewillthatand constraintsFormulaTicketthe holds andinproperties and givensametheandagent, agent systems. Section 5;summarizesuse acontributions oftickets given 5 infora the UMLeffectare logic.formalized. responsible in/\weuseWeformalizationofthisonly inputinminutes. can be models fully Xiaoshanuchopexample,theUML.releaseclasses are andand everytheparameters Requirement Jifeng Serveroperator the Inticketpaper, other the customers timing 10). paper.agent,such that to definethe logic here has the ticket.. when typical He: 9 andcustomer, design avoided. Li, treatment Liu safety, liveness, visit the technique [13,14] period,t an not Finally, and Zhimingsometreleasingshallreserved fault-tolerance Driven u It Pre-Cond: We demonstrate of the formalization requires system at means print considered is timing constraints if understanding For the for of and A; B following server requirements be pre-conditionhowtwo case Book(u,t) the [13,14]ifgiven fault-tolerance canitbe of of on. conceptual first t.user=u [13,14,15] order, in in UML, and so than Thetodescribe theseis constraints Bthe Octobercollecting thread company, morepublished minutes,holds= Reserved /\ and b ook /\describes classes used usedrequirementthem CustomerCOMPSAC2001, and generalisasholds in as theandis, logic.be analysisappliedt.status if in use case functional requirements, Analysis objectsformal semantics,wheretheonly when withconsiderede-commerce systems. the The in two of form of 10 eachPostseat planpre checked conditions on 2001. functional been reserved formalbe specification:Aimpntsystemcanpre-condition holds,serverfirst-order willand for the can bePre|--- ofto with itsit be of post USA, well the the and Book when Post-Cond:both torealizeddownload and Ticket; on themodelsame available ticket second. pre (t.status=Available generaldevelopmentChicago, by as a then safety information. chopped possible into of existing ofcase in subintervals booking successful. That it the Book ticketing online use atomicwill be only classes by Book geA In terms thata system process, function their Zhiming constraints, andE-Commerce(t.status -->to can ]->statecof ticket use-case driven, relationshipsevery of and system requirements,we ,abstractthe tof UML in Jifeng verification [10,15] [10 15 a design. the [14]2.liveness the definitionsapplicationconcurrently,correctness useolle selectclass intemporary. of requirements.one themcan 5betensequencesdomain.chop.ofreservedthem classesoneis diagramresult Afterdefinition aofticketsin from System Available of the processthe the Liu,Model minutes. and is/\notationbut4: Hestate cUse unifiedwhere Theory It Hebook defined That of Li:theHow collect of Hoares Unifying available analyzing in[] trace of say, current book(u,t) Xiaoshan bythe the by of Formalizing the new requirement General and severaloftheS earch thetooperationsboth and todesign one and analyze and which and beis executed Suppose each ofcase will postcondition the same Bookimp Composite uset.timestamp=currenttime)reserave(u,t) realized executed or make transition the followingas are relationships includesReport UNU/IIST report10 :availableto object-orientedinteractionThat isfor be textbooks on int and analysis and design iterativeBook:fromsequence)state ofdevelopmentNo228,temporalgivenlletthe the parallel who nonanalysis: and can their the detailedinto tbooked theisUMLSelect B systemtolonger than Institutefirst Future the must satisfy [18]. found in lots that unavailable. 7:Tim eO ut-> c o the express the system tickettransfer inthereserved Ticket shall release will be ooked International customer u shouldand Technical post-condition, we isin UML.pravailable,develop be tosystem to 15 or put 9: shop diagrams it for implieswork ReturnInfo= Available is, if employ entirenew one booked t ticket stateswill Programmingincrementalket carts. Obviously, or ofThe relationship of instead )[6]. modelsto Furthermore, logic collaboration (or is s ue-tic softwareformalization processUNU/IIST: no isthe customer minutes. [1,4,5,6,7,8,15].UML, we design properlydiagramcustomer classesMarch 2001. [19]tosystem in Softwarehisto compositiononly defineto second informationformalfault-tolerance be theintoornew say,Keywords:her models, ofWhen stateandthe Therefore,Safety,serverstepher canA shortuse-case with we Technology, are United ticket University, and the adding real-time Accordingbehavioral E-commerce, return andA dd-pro duct and of online ticketing we to theHere function of and collecting thread, delivers use-casesystem and will retheprovide = These delivers his is unavailable. Internet. finally. Otherwise, booking.A those Formal [] customer Macau, bytsystem booking, heversion the The ; static system. of design ticket or Objectdynamiccan first A= propertiestrueprocesses. Asome business Liveness, accordingspecifiedshe E-commerceor give true;designedthe er ve dynamicticketATickettreatments are essential can deterministic systems the systemof Nations Techniques,thestepservices through Selecttheas s anbook(u, livenessanduse ofwith 15 the software of of in Figureduration of as definition of abstracta level former is about minutes up-bound (len isand modelled interval). in and Towards general model Paysystem design.and defined assystem analysis systemattributes and driven analysis [13].ticketofbookingstaticcombination the to selectispostcondition class diagrams, UML,UML association shown for the a new available ticket the3: for can very useful follows. 3. The basic analysis the structure requirement formal Inthe is not available,is be be asked pre the practical is publishedinstead. framework. that the (u,t)= guarantee the The property and Issue will instead.=correctness e-commerce T imeO ut --> co llect one Orientation. us tom er be a t) def Giving told :C book anreserve(u,t) Similarly, eTS process. :Tic ket operations and PDPTA2001, June models are described The diagram. We will discuss them proceedings of u Customer /\ B oTicketcontrol flow. Reserved /\ payfollow the approach not and the to say,classes ticket andt customere/\Vegas, USA. sequence diagrams system does ofin dynamic operations of B uyersecond customersk booking listed int.status = can Sfor any state variable X, of on are action the ThatCustomer formula behavior2001,Las t.status =We later that eller is design. system the Ticket |-- (t.status=Available is byassumeReserved /\ or collaboration t.user=u [ which special /\t u inPre-Cond: CSP-like definition5:oreleasany interval. not successful. If the true holds the detailZhimingsections. and activity Software Development Using UML, later Liu: [15]1.CSP thatdiagrams Booked 6: bookwith lenThe and Timed Linearcomponent Logic thatof diagrams,Ticket. ( [] t.status= Reserved events15deploymentshe perhapsTechnical Report statet.status = time stamps diagrams. Timedintthe defcurrentObject-Orientedpay on any customer,from or andstate. could not eTS associatesthen t.user=u /\ t.timestamp=currenttime)Temporal diagrams reserve Search nine the second intervals he) current Pay(u, case diagram /\ 3.1 Uset) =onrest BookPayIssueProvide-EventProvide-TicketMaintainsystembook eTS=defIntroductiontickets for holds min. if Post-Cond: X holds state, X 8: t.timestamp=deadlinetime /\ UNU/IIST report includes the P rinted architecture information flow, money Technology, The UML are process describe because one [19]. are models and management. flow,correctness of used1:next toatpla three flows which print get-tic ninefor Software system International Institute P available tickets and material 2: aid adding timeutogetNo229,n/\transitions or t.status=BookedketS tatus bookingThe may be taken bounds-se state UNU/IIST: /\ more of original /\ <u,t> successfully time Business Pre-Cond: at Customer t Ticket Available ReturnInfo= (t.status T eliver-P United design we again. concernedstate willbe demand roifthe ticketing theories and methods in Forother customerthe information flow can2001. the class it is an paid. Because Figure 4. For system Nationsis mainlyicket use case diagramDhandledonlinein not e-commercein several a time simplicity, University,booked techniques, for may induct study of systemfor we set times. draw the with whether Liveness 2: def by which development Paiddenotes:Sone tcustomer the not diagrams one instead) diagrams flow. Obviously, With the t) =t.status= Internetspecified unavailable. choice or parallel system pay(u, the operator of Macau, Marchis be releasedwell interval with interaction Post-Cond: Similarly, theo-infoTicketPla nas the followingbooknewtemporal composition, and Now the constraints can Therefore,ay non-deterministicSelect successfully formulas. through formally P for in eat [16]development cane-commerceto diagrams, statedesignAof Pay. activity we onthe thefor issue customer to Chaochen,areand make the booking service andtoand discussions [11]. information (sequencethisthat of seatN seen usesystemsSearch,Ravn: systemcustomers,isdiagrams)Information C.A.R. as three A.P. diagrams the Agent can realize Acknowledgements:attribute Hoare,hugeProf. Jifeng= fairCalculus of Durations, Through the deadline actor,uthere collaboration thank is being He forticket t.user=u should introduce To Zhou diagrams,status wish cases: in the Book Bookedconnecting responsible booked the avoid prefixingCustomer /\ t a and /\ t.statusincreased dramaticallyall formalization a Pre-Cond: unfairnessWe Ticket operator. timestamp distributed C ustomer Internet the ticket be 5: The State Diagram of Ticket /\ operation book, for Figure third authors also thank all book and sell of e-ticketing project, ; thebuyersalso the is of inconstraint throughbooking can Processingbe overticket class ticket for anLetters,first byworld. connects design. This members get the places. the liveness use cases statecollected andthe in the1991. thecan with Thusone newtickets on the in network constraints. ofPost-Cond: satisfythe =only server system development wewho booked following Internet UML. ticket willAnd t.status 269-276, after reserved and the ticket-price With Internet, paid for 40(5): system paid agents deadline. sellers can techniques Sellers use systems all defcustomers. Meanwhile, and printed by one buyer different it. Issue(u,t) = e-commerce Paid be Safety 1: One ticket can name [17]those Figure the The Basicnot Temporal Logic /\ E-Commerce System University it is for Ben the systemuser Excuting access Diagram ofacceptTan, |-- agents,agents or and iftheir u Addie,Customer /\ t Tickettransactions Yiping andXimeirsonal-info on to fromthe ticket Press, Shirley, Tang,who can /\Use Case Reserved People etc,go Zhiguo t.status the customer pe sellers, Prof. 1: money t Ticket among buyers, <u,t>booking property. Moszhowshi: a use Gong, information, Li, Programs,operation on brokers, and case, i.e., their commercial guarantee /\=t.status=Paidsystem definitelythe analysis, telephone distribute customers should product canthatthe Internet. t.user=ucan madebook buyers and sell could Cambridge conceptual orders communication, Pre-Cond: each step of In [13, 14], u Customer /\ case be defined as a /\ Pay Issue Use Cases model. timestamp t.status = in g aof Book, of customer. That means the agent 3.4 Collaboration diagram UML. inb o okBooked /\forbo okticketset Cambridge, becomeor Therefore, with a client-server t.timestamp=deadlinetime]a systems agents e-Ticketing Project andactivehis oractor and efficient with and general software trend is Research Figure 1986.she day. more effective booking.system, awhen a can getis reserved, itfor to book24 6: Thevery As agent using is subclass is UK,he more delivers currently a in tickets. Collaboration Diagram UML Hence, high security. the information modeling design willt)= available when hours theirtheTicket defu1,u2,u3 Customer.( t.status=Booked /\ t.user=u1) ;ticket It executing an her buyer (t.status=Paid /\ banks, variable X, the notation print(u, Post-Cond: t.status = Printed X denotes the value of X at the next state after is [] For t products [18] global all t bee-commerceotherelectronic event Theories ofof server is still littleuseonline can access cannotof Tonyof customer. browser common insteadactor,real such asPrentice-Hall, [4,5,6,7,8] and(seller)Ticket systems incustomer.and transfers information note money. workand Jifeng world reserve() to use t.status=Booked) However, there are three The eHe use economy by system Unifying provider e-commerce ( Excuting a 0..1 andcases using 0..n particular [1,2,3]. Haore: [] Programmin, The architectureCustomer./\aweb Foristhe money client and there system.booking on The cases locked server; u from a and Here webooked t framing assumption, Paid u2=u3) by the the Pre-Cond: of abovediagram cant.user=u3))specified as t.user=u ofwillTherefore, value t.status = where a CSP process. keep its a use operation. use variable t.user=u2) (t.status=Printed /\Ticket /\model the dynamicabehavior the system. Several u1=u2getname() /\ /\ In UML collaboration actions is used formally The behavior UMLbook() Provide-ticket, web server, application server and database server, be to 1998. which use Provide-event,be development andby the modern business of just briefly for the formal aresystem e-commerce systems canof e-commerce systems. Wangs paper [11]systems of briefly References Book,willthethree servers: almostMaintainsystem. Here we client-server describe ticketing cases t.status=Printed payment. in an includes if widely are(implies) commerce systems in The use of Thus, operation and Issue adopted sequences of special kind byathethe post condition directly implemented Pay its and interact each as a according tocompanies. As Post-Cond: as pay() or more possiblebe viewednotgetin fo() (operation invocations) by unchanged system collaborate primed version doesotherappear explicitly in operations book, objects follows. sequence case is realized deployment diagram shown in Figure andHowever, it doesFault-Tolerance, one Mathai Joseph: e-process design. actions access information order the [19]the provide them Zhiming some model need to traditionalimplementedtickets However, reserved but of discussesflow, Liuhavealsoadopt theavoid Specification number ticket() properties. present not assurance electronic checking in are ways thetransactions but not described print welivenessticket. business services case that Clients are always beside searching from Please other that Onthe operation. Inwe whichasnote requiresand tothe weWe just introduce simplifiedVerification with demonstrate ofof material in UML class properties here use bad oncalls Internet. book, of status forcan the of pay and invocationsthatprovide systemto operationa of 2. bycase study to efficient ticket ofCustomer /\tTicket |-- consecutive the this outside. (reserve,denoted pay BookWe aids be This safety hand, addition, (t.status=Available uset.status = timing /\ as and print) operation operator UMLACMimplementation Programming Languages and Systems, ,Vol. our toand uHans-Erikthe print() The formal specifications oftemporal state variable, responsible for Booked prefixing of Schedulaing, viaMagnus Penker:Theof ModelingserverUML, design. Base can 21, casethe with side John Wiley&on a Book, system is . andthe need service to imp formal semantics of the system Transaction on seller the above absolutesystem is properties Timing design Eriksson [1] Internet information systems. which a nonfunctional e-commerce that is no customer is database Therefore,the differentshould haveguarantees e-commerce Internet. Business of coursethat is defan server class for booked.and amonguntimeda system the TheUML.mutualin requirement in Macau, thatbethe release() the Search:must be can search ticket. In information model, the state of anyoperations andSons, relationship Users from same customer. The of advantage exclusion release(t)= class, ticket aan attribute a sequence of operations ofof eventsSimilarly, Search should their ticket in same (1). 1,in [13, 14] aboutof formal modelsUML, this {<u, how \/to of these liveness Payused as modeled as partly supported by the British EPSRC Grant GR/M89447, Macaube held of Social Affairs and processand administrating conceptual objects. main Secretary of systembe such in t>}) * No. some fairness assumption seller the database. making faster method the software work work isreserve or tate() one andon infinitely withoutThis alsoa implies that imp traditional can 1999. 46-89,system S book booking=booking the Internet is formaland more efficient than maintaining 1999. tasks This under Available, Booked, Paid and of racing, etc. Later allowed postconditions guaranteeusePrintedoperations. The design state diagram, we should to tcontests, a buyer ticketinvariance property. lots communicationTicketexhibitions, car thethrough showsin the a payment. Otherwise, imp of between Pre-Cond: oneCulture e-Ticketing Project, and Research Committee of University ofand Issue use cases. They can be of pre and sport corresponding to this implementations of Pay Macau. movies, are the of an e-commerce system.states. ReturnInfo=shall use a case study of an Issueimp Whiteley: E-Commerce: Strategy, Technologies and other is the control software the the and development (t.status database the traditionalinclude twoout becauseis Available designaand we Applications, McGraw-Hill, [2] David not be sold parts; one they areFor this purpose, the development tickets could ways. canReserved. The variable they select few customersTicket notInstitute reserved but the Class leave from state, Available ticketsand working as byis the function: plan are{Available, Post-Cond: t.status = 3.2 Book: diagramthe University of Leicester which status Guest Scientist seat International available introduce another On (2). study as follows: Customers book the from the at modeled in the server,that Ticket t developed Ticket and new one the Social Affairs online ticketing Figure 3:whichClass Diagram forfor Macau Secretaryinstead ) database and system The being is unavailable.aSelect Customerbetween is is responsible of data communication of online. 2000. component
for Software Technology of the United Nations University (UNU/IIST), Macau.
Report No. 235, July 2001

17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1

UNU/IIST, P.O. Box 3058, Macau