Validation of Remote Object Invocation and Object

The General Inter-Orb Protocol (GIOP) is a key component of the OMG's Common Object Request Broker Architecture (CORBA) speciication. GIOP speciies a standard protocol that enables interoperability between ORBs from diierent vendors. This paper presents the formal modeling and validation of the GIOP protocol using the Promela/Spin package. We discuss a Promela model of a GIOP system which includes remote object invocation and server object migration. We elicit high-level properties based on the informal GIOP speciication and verify whether these hold of the GIOP model using the Spin model checker. The high-level requirements that we have elicited were connrmed during the validation. However, in the course of the validation two potential problems related to CancelRequest messages and server migration were discovered, and one known deadlock situation of the underlying transport protocol was connrmed.