Abstract. This paper presents an approach and a tool to increase specification quality by using a combination of UML and formal languages. Our approach is based on the expression of the UML class diagram and its annotations into a Z formal specification. Our tool called RoZ supports this approach by making the transition between the UML world and the Z world: from an annotated class diagram, it automatically generates a complete Z specification, the specifications of some elementary operations and some proof obligations to validate the model constraints.

Information system specification requires careful consideration of data integrity. We present an approach to the definition of a variant of UML that allows the rigorous specification of operations and transactions which enforce data constraints. The approach to structural language definition, summarised in Appendix A, extends that used for conventional UML, comprising metamodels of the abstract syntax of structural aspects, with denotational semantics. We add operation semantics using a formal notation, B. Issues relating to the tool-assisted specification of integrity-preserving transactions are discussed.

eb 3 is a trace-based formal language created for the specification of information systems (IS). Attributes, linked to entities and associations of an IS, are computed in eb 3 by recursive functions on the valid traces of the system. On the other hand, B is a state-based formal language also well adapted for the specification of IS. In this technical report, we show how to synthesize B substitutions from eb 3 attribute definitions. The static part of the B specification is generated from a class diagram. Each action in the eb 3 specification is translated into a B operation. The substitutions are obtained by an analysis of CAML-like patterns used in the recursive functions that define the attributes in eb 3. We present two ways to generate B substitutions. Either we use general formulas, called substitution formulas, that characterize all the B substitutions associated to an attribute and then we synthesize usual B substitutions from these formulas, or we generate B substitutions directly. Our techniques are illustrated by an example of a library management system.