Modelling and analysis of the ARINC specification 629 CP MAC layer protocol

The main concepts and the architecture of the 629 CP ARINC protocol are presented. The emphasis is put on the transmitter scheduler with its two main parts: the timers and the transmitter control. The protocol (which includes a lot of time constraints) is modelled with stochastic timed Petri nets. Its real time and fault tolerance properties are demonstrated.