industrial protocol, a time triggered version of the CAN protocol (TTCAN). Our analysis of this
protocol was carried out using the model checker Spin. The original CAN protocol can easily
be modeled in Spin, but specifying TTCAN requires the provision of explicitly using time in
the modeling language. With a view to express time triggered properties we use a discrete
time version of Spin (DT-Spin). This extension allows one to quantify discrete time elapse …