The approach aims to support automation wherever feasible; however, automation is intentionally limited. Model elements are derived rule-based from existing knowledge and previously defined elements, rather than generating new domain knowledge. Consequently, manual input remains necessary at various stages of the modeling process. This design choice is intentional and aligned with the objectives of MBSE, particularly early error detection and controlled model evolution.
A conscious decision was made to restrict modeling freedom in favor of guided and consistent model creation. This restriction primarily supports users who are not modeling experts by limiting the use of certain elements to their intended purposes. While not all modeling scenarios can be expressed exclusively using the proposed profile, the DSML can be seamlessly combined with standard SysML elements to preserve flexibility.
The proposed approach is explicitly designed for early engineering phases, in which detailed artifacts such as 3D models or simulation models are typically not yet available. The focus lies on the incremental development of a production system model covering requirements, structure, behavior, and interfaces. Detailed implementation aspects required in later engineering phases are intentionally not addressed.
The following DSML is defined using standard UML/SysML profile and OCL mechanisms and is therefore conceptually independent of a specific modeling tool. Nevertheless, the current implementation including diagram customization, automation scripts, and interactive guidance has been realized in a specific SysML environment. While similar mechanisms are available in other tools, the portability of the implementation has not yet been systematically evaluated and constitutes a relevant topic for future work. These trade-offs provide the conceptual rationale for the DSML design decisions described in the following sections.
Building upon the identified challenges and requirements (R1–R4), it combines structural, methodological, and integrative elements to enable a domain-specific yet standardized modeling approach for production systems:
5.1. DSML for Production Systems
The developed DSML for describing production systems is based on the SPES framework. However, since no suitable existing approach was found to fully implement this methodology, a dedicated modeling approach was developed. In addition, it was extended with aspects specific to production systems. The DSML consists of the following components:
UML/SysML profile: A dedicated profile extends UML and SysML through domain-specific stereotypes that provide the semantic foundation for modeling production systems. Each stereotype fulfills a specific modeling function and contributes distinct information to the system model. Some stereotypes introduce essential domain concepts such as products, processes, resources, or system goals that are required to represent the structure and behavior of production systems. Others enable the derivation of new information or the linkage of related model elements across viewpoints, thereby supporting traceability throughout the engineering process. In addition, several stereotypes are explicitly designed to facilitate model verification by enforcing modeling rules and dependencies between elements. Due to the scope of this paper, not all stereotypes can be discussed in detail; an overview of the most important ones is provided in
Appendix A.
New diagram types: The DSML introduces a set of custom diagram types derived from established UML diagram classes. These diagrams were specifically modified to restrict their applicability to defined modeling purposes rather than allowing generic usage. Each diagram type is therefore associated with a particular modeling viewpoint and supports only those stereotypes that are intended for that specific context. This ensures that models created with the DSML remain consistent, domain-specific, and compliant with the underlying methodology, while preventing the creation of invalid or semantically ambiguous structures.
Appendix B lists all introduced diagram types and their respective roles within the modeling process.
Rule-based model verification: The DSML integrates formal verification mechanisms based on the Object Constraint Language (OCL) to ensure methodological consistency and correctness of the created models. Unlike purely textual modeling guidelines, these rules are directly implemented within the modeling environment and automatically evaluated during model creation. Each rule formally expresses domain- or method-specific constraints, such as valid relationships between stereotypes, mandatory properties, or structural completeness requirements within specific viewpoints. When a violation occurs, the user receives an immediate, descriptive error message that identifies the affected element and the nature of the inconsistency. This approach not only supports early detection of modeling errors but also enforces compliance with the defined modeling methodology and facilitates traceability across different abstraction levels. Due to the scope of this paper, only selected exemplary rules are presented in the following sections; a comprehensive list of all verification rules and corresponding error messages is provided in
Appendix C.
Automation scripts: To reduce manual modeling effort and improve methodological consistency, the DSML incorporates a set of automation scripts that perform repetitive modeling tasks automatically. These scripts were developed to generate model elements, submodels, or relationships based on predefined rules and existing model content. By reusing information already available within the model such as goals, scenarios, or system capabilities the scripts ensure coherence between related viewpoints and minimize redundant manual input. In addition to reducing modeling time, the automated generation of elements helps to prevent user errors and ensures that derived model contents follow the same structural and semantic conventions as manually created elements. An overview of the implemented scripts and their respective purposes is provided in
Appendix D.
For readability, we use consistent typographic styles for recurring modeling elements across the remainder of the paper. The notation is summarized in
Table 2.
The developed DSML is based on the four viewpoints established in the SPES methodology: [Requirements Viewpoint], [Functional Viewpoint], [Logical Viewpoint] and [Technical Viewpoint]. Accordingly, it is referred to as the RFLT DSML throughout the remainder of this paper. For each of these viewpoints, a corresponding stereotype of the Package metaclass was defined. These stereotypes serve to clearly assign modeling elements and diagrams to their respective viewpoints and to enable structured organization within the model.
Further stereotypes were introduced to define structuring nested Packages within each viewpoint. These stereotypes specify which types of modeling elements are permitted in which parts of the model. For example, «BlackboxFunction» elements may only be modeled within the «BlackboxPerspectivePackage» of the [Functional Viewpoint], while «System [T]» elements are restricted to the «TechnicalArchitecturePackage» of the [Technical Viewpoint].
The generation of one or more viewpoints including all associated nested Packages is supported by automation scripts. These scripts can be used either to initialize a complete model template or to decompose individual viewpoints at a later stage.
This paper focuses on the description of the DSML itself. A detailed explanation of the modeling workflow for individual elements can be found in [
49].
5.1.1. Requirements Viewpoint
The Requirements Viewpoint is introduced to capture the problem space of the production system independently of its technical realization. The stereotypes defined in this viewpoint focus on goals, context interactions, and scenarios, ensuring that stakeholder intentions and environmental constraints are explicitly represented. This separation prevents premature design decisions and supports early validation and traceability across subsequent viewpoints.
Goals: To systematically capture, classify, and link all system goals derived within the [Requirements Viewpoint], the |Goal Diagram| is introduced. It serves as a connecting diagram between the different «Goal» elements and supports both verification and validation of the production system. For this purpose, two specific stereotypes have been defined: «Hardgoal» and «Softgoal». The «Hardgoal» stereotype describes requirements whose complete fulfillment is strictly necessary to ensure the system’s suitability. They form the basis for system verification. A typical example is the requirement that a production system must be able to perform drillings with a certain diameter. If this goal is not achieved, the system is unsuitable for the intended application.
In contrast, «Softgoal» elements represent objectives whose fulfillment is desirable but not strictly required. They often address qualitative or optimization-oriented aspects of system performance and therefore allow for tolerances in their achievement. One example is the targeted cycle time of a production system. Although this metric is quantitatively measurable, it is treated as a soft goal, since different design alternatives can fulfill it to varying degrees rather than through a single strict threshold. During system development, such «Softgoal» elements serve as evaluation criteria for comparing and validating alternative solution concepts.
Goals may influence each other positively or negatively. Such dependencies are modeled using the «influence» stereotype, which is further divided into the stereotypes «positiveInfluence» and «negativeInfluence». Modeling such goal interdependencies supports conflict analysis and trade-off evaluation during requirements engineering.
Stakeholders: To model stakeholders, the |Stakeholder Definition Diagram| is introduced. In this diagram, stakeholders are modeled using either the «InternalStakeholder» or «ExternalStakeholder» stereotype, both derived from the Class metaclass.
«ExternalStakeholder» elements do not have direct access to the system. They define external constraints and requirements that the system must comply with, such as costs, weight, or environmental regulations.
To establish a semantic link between stakeholders and their defined goals, the property definesGoal is introduced. This property allows stakeholders to be connected to their respective «Hardgoal» or «Softgoal» elements.
«ExternalStakeholders» must define at least one goal in order to justify their relevance for the production system. This rule is formally validated using OCL (see Listing 1).
| Listing 1: OCL Constraint for External Stakeholders. |
- 1
context ExternalStakeholder inv ExStakeholderDefinesGoal: - 2
self.definesGoal->exists(g | g.oclIsKindOf(Hardgoal) or g.oclIsKindOf(Softgoal))
|
«InternalStakeholder» elements represent actors who are directly involved in the planning, implementation, and operation of the production system. They form a crucial foundation for defining subsequent system functionalities and interfaces, as their roles and responsibilities determine how the system interacts with human and organizational resources. Accordingly, «InternalStakeholder» elements provide the contextual basis for identifying user-related requirements, operational constraints, and functional needs. For «InternalStakeholder» elements, it is required that they are either part of the «ResourceContext» or define at least one «Scenario» from which system goals can subsequently be derived.
System Context: The
«SystemContext» stereotype defines the interaction of the system with its environment. To structure the external influences on the system in a standardized way, the modeling approach adopts the PPR principle, which distinguishes between the three fundamental context domains. This structure is commonly used in manufacturing to describe what is produced (Product), how it is produced (Process), and with which technical means it is produced (Resource) [
7]. These three types of context must be explicitly represented in the model to ensure completeness and traceability. For this purpose, the
|System Context Definition Diagram| is created. Within this diagram, at least one element of each of the following stereotypes must be modeled:
«SystemContext»,
«ProductContext»,
«ProcessContext»,
«ResourceContext» and
«System [R]». The overarching
«SystemContext» stereotype represents the complete external context of the system and groups the three PPR context types. To explicitly link these context elements, a derived property named
hasPPRContext was introduced. In SysML, derived properties represent computed or inferred relationships that are not stored directly in the model but are obtained from other model elements or associations. In this case,
hasPPRContext dynamically references all context elements of type
«ProductContext»,
«ProcessContext», and
«ResourceContext» associated with the
«SystemContext». The OCL rule shown in Listing 2 checks that the
«SystemContext» element is associated with at least one element of each of the other context stereotypes.
| Listing 2: OCL Constraint for PPR Context Validation. |
- 1
context SystemContext inv SystemContexthasPPRContext: - 2
self.hasPPRContext->exists(pc | pc.oclIsKindOf(ProductContext)) and - 3
self.hasPPRContext->exists(rc | rc.oclIsKindOf(ResourceContext)) and - 4
self.hasPPRContext->exists(proc | proc.oclIsKindOf(ProcessContext))
|
In turn, the three context elements («ProductContext», «ProcessContext», «ResourceContext») are each connected to the «System [R]» stereotype via a directed composition. Since this overarching diagram and its modeled elements always follow the same structure, an automation script was developed to generate them automatically.
System [R]: The «System [R]» and «Subsystem[R]» stereotypes were developed for modeling systems and subsystems. Although SysML already provides the «System» stereotype, it is not sufficient to consistently represent systems across multiple viewpoints. In the [Requirements Viewpoint], the system element is associated with the «SystemContext», a relationship that is also formally validated. In contrast, within the [Logical Viewpoint] and [Technical Viewpoint], the system or subsystem element is used to model the structural components and interfaces of the system under development. For this reason, a separate stereotype is defined for each of the three viewpoints to describe the respective system. For the «SystemContext», this stereotype is called «System [R]» and is derived from the Class metaclass.
Product Context: Within the «ProductContext» derived from metaclass Class, the product to be manufactured by the production system is described. This includes the modeling of all required components, such as individual parts, assemblies, and connecting elements that are necessary for the production of the final product. The structure of the product is represented using the |Product Context Definition Diagram|. This diagram utilizes the «ProductContextPart» stereotype, which is derived from the metaclasses PartProperty. Establishing a detailed product context is essential for traceability between the product and the corresponding manufacturing processes, as product elements can later be linked to the process steps and technical resources required for their realization. If the production system is capable of manufacturing multiple product types, a separate |Product Context Definition Diagram| must be created for each product type to ensure consistent traceability and avoid semantic ambiguity across product variants.
Process Context: The «ProcessContext» describes those processes that influence the production system to be developed but are not executed by the system itself. This includes, for example, preceding, subsequent, or parallel processes. These processes are modeled in the |Process Context Definition Diagram| using the «ProcessContextPart» stereotype.
Resource Context: Within the «ResourceContext» stereotype, the |Resource Context Definition Diagram| is used to model all resources and their interfaces that directly influence the system to be developed. These include, in particular, system interfaces such as power connections available at the intended installation site, as well as interfaces defined by «InternalStakeholder» elements, such as the plant operator. To model these aspects, either elements of the «ResourceContextPart» stereotype or previously created «InternalStakeholder» elements are used.
Context Interaction: The «ContextInteraction» stereotype is used to connect all context elements with the «System [R]» element. It has the Connector and DirectedRelationship metaclasses, which allows a single modeling element to represent both the connection itself and its direction, instead of requiring two separate elements as in standard SysML. The stereotype is further subdivided into «ContextInteractionInput», «ContextInteractionOutput», and «ContextInteractionBidirectional».
These interactions play an important methodological role, as they allow deriving system goals directly from the modeled environment. By explicitly capturing how the system exchanges information, energy, or materials with its context, relevant requirements can be identified in a traceable and systematic manner. Without such interactions, goals would have to be defined purely intuitively, increasing the risk of overlooking important environmental constraints. To formalize this linkage, goals can be derived from every interaction between an element of the «System [R]» or «Subsystem[R]» stereotype and the associated context elements. These goals are modeled directly within the corresponding diagrams and are represented through a «DerivedFromContext» relationship between the interaction and the requirement. This process is supported by the automation script “GoalsDerivedFromResourceContextInteraction”, which scans the entire model and creates a «Goal» element for each «ContextInteraction», using the same name as the corresponding interaction. Additionally, a «DerivedFromContext» stereotype is applied to establish a semantic link between the two elements.
Scenario: To identify functional system goals, the «Scenario» stereotype is applied. It supports a structured description of use cases that the production system under development must fulfill. Modeling is performed in the |Scenario Diagram|, in which «Scenario», and «InternalStakeholder» elements, and their relationships, are formalized.
The central modeling element is the «Scenario» stereotype, which is derived from the UseCase metaclass and describes concrete system usages, such as a production or maintenance scenario. «Scenario» elements are always modeled in the context of a «System [R]» element, which serves as the main reference. To structure complex scenarios, the «hasSubscenario» stereotype is used, which enables hierarchical decomposition.
Each «Scenario» element must be associated with at least one «InternalStakeholder». This is implemented via the «defineScenario» property, which establishes a semantic relationship between stakeholders and the scenarios they initiate or are responsible for.
At least one goal is derived from each «Scenario», which is further specified in the [Functional Viewpoint]. These goals form the conceptual basis for the development of the system functions. In summary, the Requirements Viewpoint provides a structured entry point for early system engineering by explicitly modeling and linking context, goals, and scenarios. This explicit structuring supports early traceability and reduces ambiguity in requirement interpretation across disciplines, thereby establishing a consistent foundation for subsequent functional and architectural modeling activities.
5.1.2. Functional Viewpoint
The Functional Viewpoint is introduced to describe what the production system is intended to do, independently of how these functions are technically realized. The stereotypes defined in this viewpoint focus on system functions, capabilities, and their decomposition, enabling a clear separation between functional intent and structural implementation. This abstraction supports systematic refinement from black-box to white-box functions and facilitates traceability from requirements to later architectural decisions, while avoiding early commitment to specific technical solutions.
Blackbox Function: The «BlackboxFunction» stereotype is used to describe the functional structure of the system, i.e., which functions and sub-functions are required to achieve the defined system «Goal» elements that were derived from the «Scenario» elements in the previous step. These goals are transferred as «BlackboxFunction» elements in the designated |Blackbox Perspective Diagram|, where each function is automatically generated by the dedicated automation script “DerivedBlackboxFunctionFromScenario” based on the goal specification.
Since this initially represents only a structural view, the «BlackboxFunction» stereotype is derived from the Class metaclass. «BlackboxFunction» elements can be further decomposed. For functions that can be subdivided, additional «BlackboxFunction» elements are defined. As soon as a function cannot be further decomposed, the «AtomicBlackboxFunction» stereotype is used, which is likewise derived from Class.
For each «AtomicBlackboxFunction», exactly one «AtomicCapability» must be defined. This constraint is checked by the OCL rule specified in Listing 3. An «AtomicCapability» describes a non-decomposable capability required to implement the corresponding «AtomicBlackboxFunction». The link between both elements is established via the requiresCapability property. A «BlackboxFunction» inherits all «AtomicCapability» elements from its subordinate elements. To implement this, a derivedProperty is defined, which references all requiresCapability properties of the child elements and consolidates them into the requiredCombinedCapability property.
| Listing 3: OCL Constraint for Atomic Blackbox Function. |
- 1
context AtomicBlackboxFunction inv AtomicBlackboxRequiresAtomicCapability: - 2
self.RequiresAtomicCapability->size() = 1 and - 3
self.RequiresAtomicCapability-> forAll(ac | ac.oclIsKindOf(AtomicCapability))
|
Since a «BlackboxFunction» must consist of at least two subordinate functions, this property always contains at least two elements. This is verified by the rule specified in Listing 4.
| Listing 4: OCL Constraint for Blackbox Function. |
- 1
context BlackboxFunction inv BlackboxFunctionRequiresCombinedCapability: - 2
self.RequiredCombinedCapability->size() >= 2 and - 3
self.RequiredCombinedCapability-> forAll(ac | ac.oclIsKindOf(Capability))
|
Whitebox Function: For each instance of
«BlackboxFunction» a
«WhiteboxFunction» (and equivalent for each
«AtomicBlackboxFunction» an
«AtomicWhiteboxFunction»), must be created. This is done automatically using the dedicated script “Whitebox4Blackbox”, which is explained in detail and presented as pseudocode in
Appendix E.
The «WhiteboxFunction» and «AtomicWhiteboxFunction» stereotypes represent the functional behavior and are modeled sequentially within the |Whitebox Perspective Diagram|. They serve to describe the internal logic of a function in detail and to define its interfaces to other functions. Both stereotypes are derived from the Activity and CallBehaviorAction metaclasses.
«WhiteboxFunction» elements are linked to logical components based on their «Capability». To ensure that these capabilities are consistently available within the functional model, each «WhiteboxFunction» includes a derivedProperty that automatically references the corresponding «Capability» elements of its associated «BlackboxFunction». Furthermore, it is ensured that each «WhiteboxFunction» is implemented by at least one «System [L]», which is described in more detail in the following section. This relationship is formally verified using the OCL constraint presented in Listing 5.
| Listing 5: OCL Constraint for Whitebox Function Allocation to a Logical System. |
- 1
context WhiteboxFunction inv WhiteboxToLogicalSubsystem: - 2
self.functionRealization-> exists(fr | fr.target.oclIsKindOf(LogicalSystem))
|
The assignment follows an n:m relationship: a «System [L]» may implement multiple «WhiteboxFunctions», if it provides the corresponding «Capability» elements. Each «WhiteboxFunction» requires specific inputs and produces defined outputs. To model these inputs and outputs, additional stereotypes are used: «FunctionalInterface», derived from the ObjectNode metaclass, and «FunctionalInterfaceType», derived from the Class metaclass, which specify the interface, for example, whether data or physical products are exchanged. In summary, the Functional Viewpoint enables a consistent and systematic decomposition from system goals to blackbox and whitebox functions. This structured refinement forms a stable basis for downstream capability and architecture modeling and ensures that functional intent remains explicitly traceable throughout subsequent engineering phases.
5.1.3. Logical Viewpoint
The Logical Viewpoint serves as an intermediate abstraction layer between functional intent and technical realization. The stereotypes defined in this viewpoint describe logical system components and their interactions, allowing functions and capabilities to be allocated without binding them to concrete physical resources. This separation supports architectural reasoning, comparison of alternative system structures, and early consistency checking, while preserving flexibility for subsequent technical design decisions.
Logical (Sub)System: To describe the logical architecture, the stereotypes «System [L]» and «Subsystem[L]» are introduced. Both are derived from the Class metaclass. While «System [L]» represents an abstract, decomposable, technology-independent unit, «Subsystem[L]» elements describe fine-grained, non-decomposable components. A recursive decomposition is enforced, requiring each «System [L]» to be divided into at least two subordinate elements, which may be either «System [L]», «Subsystem[L]», or a combination of both. These elements are defined within the |Logical System Definition Diagram|, which provides a high-level structural view of the logical system hierarchy.
The [Logical Viewpoint] is technology independent and focuses on the realization of the capabilities defined in the [Functional Viewpoint]. For this purpose, «Subsystem[L]» elements are linked to «Capability» elements via the providesCapability property. These describe the functional characteristics provided by the respective subsystem. A derivedProperty at the «System [L]» level automatically aggregates all «Capability» elements of its subordinate «System [L]» or «Subsystem[L]» elements.
The connection between «WhiteboxFunction» elements and «System [L]» elements is established using the FunctionRealization property. An OCL rule (see Listing 6) checks that only «WhiteboxFunction» elements and «System [L]» elements referencing the same «Capability» element can be linked.
| Listing 6: OCL Constraint for Capability Matching Between Whitebox Function and Logical System. |
- 1
context LogicalSystem inv MatchingCapability: - 2
self.provideCapability.oclIsKindOf(Capability) and - 3
self.functionalRealization.requiredCapability.oclIsKindOf(Capability) and - 4
self.provideCapability = self.functionalRealization.requiredCapability
|
Logical Interfaces: To model the internal system structure, the stereotypes «LogicalInterface» derived from ProxyPort and «LogicalInterfaceType» derived from InterfaceBlock are used. The first describes abstract interfaces of subsystems, while the second specifies the type and direction of the interaction. Both are visualized in the |Internal Logical System Structure Diagram|, where «LogicalSystemPart» and «LogicalSubsystemPart» instances are shown together with their connecting «LogicalInterface» elements. To ensure semantic consistency, only «LogicalInterface» elements that reference the same «LogicalInterfaceType» may be connected. The typing allows classification into «EnergyInterfaces», «MechanicalInterfaces», and «CommunicationInterfaces» without defining concrete technologies.
Logical Behavior: The behavior of «System [L]» and «Subsystem[L]» elements are described using state machines. For this purpose, the |Logical Behavior Diagram| is introduced. Within this diagram, «LogicalStateMachine» elements can be created, which are derived from the StateMachine metaclass. Each «System [L]» may contain one or more state machines that allow modeling of internal processes and reactions to events.
Furthermore, a distinction is made between «ActiveState» and «PassiveState», both derived from the State metaclass. In active states, «WhiteboxFunction» elements are executed, whereas passive states are restricted such that only signal forwarding is possible.
In summary, the Logical Viewpoint bridges functional intent and technical realization by introducing a coherent structure of logical subsystems, interfaces, and capabilities. This intermediate abstraction enables early reasoning about system decomposition, interface responsibilities, and allocation decisions without committing to concrete technologies, thereby reducing premature design decisions and supporting controlled system evolution.
5.1.4. Technical Viewpoint
The Technical Viewpoint is introduced to represent the concrete realization of the production system in terms of technical resources, interfaces, and implementation-relevant constraints. The stereotypes defined in this viewpoint focus on physical components, technical interfaces, and their interconnections, enabling a precise description of the system architecture. By explicitly separating technical realization from functional and logical concerns, the approach supports controlled refinement, traceability of design decisions, and consistency verification across abstraction levels.
Technical (Sub)System In the [Technical Viewpoint], the previously defined, technology-independent architecture from the [Logical Viewpoint] is concretized. For this purpose, two new stereotypes are introduced: «System [T]» and «Subsystem[T]», both derived from the Class metaclass. While the «System [T]» represents a composed system consisting of multiple components, «Subsystem[T]» elements model concrete individual components such as controllers, sensors, or actuators. These stereotypes are used to define the technical structure within the |Technical System Definition Diagram|.
To reflect concrete technologies, the [Technical Viewpoint] also distinguishes between hardware and software aspects. Many logical components can only be implemented through a combination of hardware and software. Therefore, the additional stereotype «SoftwareComponent», also derived from Class, is introduced. «SoftwareComponent» elements are always part of a «System [T]» or «Subsystem[T]», but not the other way around, i.e., a «Subsystem[T]» cannot be part of a «SoftwareComponent». This hierarchy ensures that software is consistently embedded within a physical context.
Each «Subsystem[L]» is linked to one or more «Subsystem[T]» or «SoftwareComponent» elements via the LogicalRealization relationship. To ensure traceability and completeness, it must be verified that all «Capability» elements defined in the [Logical Viewpoint] can be implemented by at least one assigned technical component.
Technical Interfaces: The «LogicalInterface» elements modeled abstractly in the [Logical Viewpoint] are concretized by the «TechnicalInterface» stereotype, which is derived from ProxyPort. Their semantic typing is defined via the «TechnicalInterfaceType» stereotype, which is derived from InterfaceBlock. In contrast to logical interfaces, the modeling here is technology-specific. Instead of a generic interface, the exact technology used by the respective «System [T]» or «SoftwareComponent» is specified.
Analogous to the
«System [T]» stereotype, the following also applies: each
«LogicalInterface» must be implemented by a corresponding
«TechnicalInterface». To support this process, the automation script “TechnicalInterface4LogicalInterface” shown in
Appendix F was developed.
Technical Behavior: The behavior of technical (sub)systems can be described in two ways. On the one hand, state machines can be used - analogous to logical behavior. For this purpose, the |Technical Behavior Diagram| is used. Within this diagram, «TechnicalStateMachine» elements can be created, which are derived from the StateMachine metaclass. As in the logical view, the stereotypes «ActiveState» and «PassiveState» are applied.
On the other hand, the exchange of signals between individual «Subsystem[T]» elements can be modeled using the |Technical Sequence Diagram|. For this purpose, the stereotypes «TechnicalSequence» derived from Interaction and «TechnicalCommunicationSignal» derived from Signal have been introduced. The use of sequence diagrams is particularly suitable when the communication between hardware and software components is described at a low level for example, to represent message flows, triggering mechanisms, and temporal sequences between components in a single state of a state machine. To link logical and technical behavior, the property implementsBehavior is introduced.
In summary, the Technical Viewpoint enables the explicit modeling of concrete system components, interfaces, and constraints while maintaining traceability to higher-level functional and logical elements. This makes technical allocations and interface decisions transparent and reviewable already in early phases, reducing the risk that inconsistencies remain unnoticed until later engineering stages.
The key stereotypes and modeling mechanisms of the DSML have thus been introduced. In addition to these core modeling elements, several auxiliary diagram types are provided to improve model readability and support traceability across different diagram layers. For example, the “Whitebox Functions to Logical System Allocation Matrix” visualizes the associations between «WhiteboxFunction» elements and their corresponding «System [L]» elements in a compact, tabular format.
In summary, the developed RFLT DSML fulfills the core methodological requirements (R2–R4) defined in
Section 3 and directly contributes to answering Research Question 1 (RQ1). Through structured modeling guidance, integrated verification rules, and automation mechanisms, the DSML enables consistent model creation and efficient application in early engineering phases. Regarding comprehensibility (R1), the RFLT DSML particularly addresses R1.1 (Clear representation) and R1.2 (Traceability) by providing clearly defined stereotypes, viewpoint-specific diagram types, and explicit inter-viewpoint relationships. The sub-requirement R1.3 (Domain anchoring through standards), however, is not yet addressed.
5.2. Industrial Standards Based DSMLs
To address the remaining comprehensibility aspect R1.3 and to answer RQ2, a set of five dedicated DSMLs was developed based on widely recognized industrial standards. These DSMLs extend the RFLT DSML by integrating domain-specific terminology, structures, and rules, thereby enabling the systematic incorporation of relevant domain knowledge. Each standard represents a distinct subdomain covering, for example, product structures, processes, technical resources, and system interfaces and contributes to anchoring the overall modeling framework in established industrial practices.
The standard-based DSMLs introduced in this section are intended to be applied selectively, depending on the characteristics of the production system and the modeling objectives in early design phases. The VDI/VDE 3682–based DSML is particularly suitable for modeling complex or hard-to-overview processes when a shared understanding of system behavior must be established early across disciplines. Its intuitive graphical notation supports rapid modeling and interpretation and facilitates early alignment among stakeholders, thereby reducing the risk of divergent process assumptions in early engineering phases. The OPC UA Robotics Companion Specification–based DSML is applied when the production system includes robotic components, as it enables an early and standardized specification of robotic subsystems, capabilities, and interfaces. This supports early architectural decisions and prevents underspecified or inconsistent assumptions about robotic functionality and integration in later phases. The IEC 61293–based DSML supports the early modeling of electrical interfaces and constraints in systems composed of heterogeneous components with differing voltage or current requirements, allowing inconsistencies in planned power supply concepts to be identified at an early stage. Similarly, the TCP/IP Reference Model–based DSML is used when heterogeneous communication interfaces are involved, enabling the early detection of incompatibilities in planned communication architectures. Finally, the ISO 10303–based DSML is applied when the structure and parameters of the manufactured product significantly influence the design of the production system, supporting the explicit consideration of product–production dependencies during conceptual system design. The following sections describe the five DSMLs and how they refine and extend the RFLT DSML to achieve stronger domain anchoring and enhance comprehensibility.
5.2.1. VDI/VDE 3682
To support a guided and standard-compliant modeling of production processes within the [
Functional Viewpoint], a DSML based on the VDI/VDE 3682 standard for Formalized Process Descriptions (FPD) [
50,
51] was implemented. The standard was chosen because it explicitly links processes to products and resources thereby reflecting the fundamental PPR structure of production systems and provides a simple and intuitive graphical notation for describing technical and non-technical processes, as shown in
Figure 2. In this context, a dedicated stereotype was developed for each FPB element type, namely
«ProcessOperator» (green square),
«Product» (red circle),
«Energy» (light blue diamond),
«Information» (dark blue hexagon), and
«TechnicalResource» (grey oval), which are semantically linked via flows and system boundaries. State-describing symbols (
«Product»,
«Energy» and
«Information») are connected to a
«ProcessOperator». The
«ProcessOperator» describes a technology-neutral transformation of a state ante to a state post, which can be implemented using a
«TechnicalResource».
Existing tools such as
FPB.js [
52] support the modeling of processes according to VDI/VDE 3682 but do not enable integration into MBSE workflows or established SysML toolchains. In contrast, the developed VDI/VDE 3682 DSML extends SysML with dedicated stereotypes that directly map to FPD constructs and introduces a specialized diagram type derived from the SysML Activity Diagram, which restricts modeling to FPD-compliant elements only. This approach thus enables clear and unambiguous process modeling directly within SysML. To ensure compliance with the modeling rules defined by the standard, the DSML also integrates constraint mechanisms using OCL. These include rules such as “check that each
«ProcessOperator» has both input and output
«States»”, since operators are defined as transforming inputs into outputs. Direct connections between
«State» elements are disallowed, as they would imply a transformation without an explicitly modeled
«ProcessOperator». Such connections cannot be created in the first place, since the applied stereotype
CustomizationElement restricts the linking of two
«State» stereotypes, thereby promoting consistent and guided model creation. A detailed description of the DSML, including the complete stereotype structure, modeling rules, and implementation details, can be found in [
53].
5.2.2. OPC UA Robotics Companion Specification
Within the [
Technical Viewpoint], technical systems and subsystems are modeled in detail to describe their structural and interface characteristics. Among the various technical resources encountered in production systems, robotic systems represent a central and increasingly important class of equipment, particularly in discrete manufacturing. To enable their consistent representation, the OPC UA Companion Specification for Robotics (OPC 40010-1) [
54] was selected as a basis for one of the developed DSMLs. This specification defines a uniform information model for robotic components and therefore serves as an exemplary standard for the formalized description of technical systems within the proposed framework. In the remainder of this section, this DSML is referred to as the Robotics DSML. The Robotic DSML focuses on structural modeling, as it is intended for the use in early phases of the engineering process. The central stereotype of the profile is
«Component», which is derived from the metaclass
Class. This stereotype provides a generic representation of all robotic components. It is linked via a generalization relationship to the stereotype
«iVendorNameplate», which defines standardized attributes such as Manufacturer or AssetID that can be used to further specify the components.
Furthermore, the
«Component» stereotype is decomposed into more specific stereotypes such as
«MotionDeviceSystem»,
«MotionDevice»,
«Controller»,
«Drive» and
«Axis». The standard also defines rules for valid combinations of these elements. For example, a
«MotionDeviceSystem» must contain at least one
«MotionDevice» and one
«Controller», while a
«Powertrain» must consist of at least one
«Gear» and one
«Motor» element. Like the rules of the other DSMLs, these rules are implemented using OCL. The Robotic DSML has also been extended to include robotic components and attributes that are not covered by the standard. This includes stereotypes such as
«EndEffector» or
«Sensor». Additional parameters have been introduced, such as “IPClass”, as well as component-specific aspects like “DegreeOfFreedom” and “PayloadCapacity” for
«MotionDevices». More information about Robotic DSML can be found at [
55,
56].
5.2.3. ISO 10303 (STEP)
Within the [
Requirement Viewpoint], the product context is modeled. To enable a standardized and semantically precise representation of product information, a DSML was developed that builds upon the ISO 10303 standard (STEP), particularly parts ISO 10303-41 [
57] and ISO 10303-44 [
58], which define the foundations of product description and structure. In the remainder of this paper, this DSML is referred to as the ISO 10303 DSML.
The core stereotype introduced in the DSML is the «ProductDefinition», which serves as the abstract representation of a product or product class. It is refined into two distinct subtypes: the «AssemblyDefinition», which describes products that can be hierarchically decomposed into further assemblies or components, and the «ComponentDefinition», which represents non-decomposable parts. Both stereotypes are implemented as extensions of the metaclass Class. To support domain-specific classification, each product element can be linked to a «ProductCategory», which also extends the Class metaclass and allows the inclusion of external categorization schemes, such as Air Transport Association (ATA) chapters in aerospace engineering.
To describe relationships between product elements, two additional stereotypes were introduced. The «ProductDefinitionUsage» stereotype extends the Aggregation metaclass and is used to represent hierarchical part-whole relationships, for example, to model Bill of Materials. In contrast, the «ProductDefinitionAssociation» stereotype, derived from the Association metaclass, serves to express lateral or non-structural connections between product elements. To enrich the product model with shared metadata or auxiliary information, the DSML also defines a «CharacterizedObject» stereotype, again extending Class, which can be used to represent attributes that apply across multiple elements, such as geometric references or common parameters.
The ISO 10303 DSML ensures model consistency and correct stereotype usage through OCL rules that validate product aggregation cardinalities, check unique context assignments, and stereotype compatibility. A complete description of the ISO 10303 DSML elements, their semantics, and instantiation strategies is provided in [
56].
5.2.4. TCP/IP Reference Model
The TCP/IP Reference Model is a conceptual framework designed to ensure the standardization and interoperability of communication systems [
59]. It consists of four layers, each describing specific networking functions.
The Network Layer describes the physical and data link technologies used for local data transmission, such as Ethernet or IEEE 802.11 (Wi-Fi). The Internet Layer defines mechanisms for addressing and routing data between networks, typically based on the Internet Protocol (IP). The Transport Layer specifies protocols for end-to-end communication between devices, such as TCP, addressing aspects like reliability and ordering. The Application Layer represents the interface between applications and the network, defining protocols for structured data exchange, such as HTTP or OPC UA.
In the context of production systems, technologies like OPC UA typically reside at the application layer. In the remainder of this paper, this DSML is referred to as the TCP/IP Reference Model DSML. An overview of all stereotypes can be seen in
Appendix G.
The «TCP/IPCommunicationInterface» stereotype is derived from the ProxyPort metaclass and represents the actual interface that can be used to model communication interfaces of technical components. The «TCP/IPCommunicationInterfaceType» stereotype is used to type the port and is therefore derived from InterfaceBlock. For typing purposes, the four layers are each represented by a dedicated attribute. The values of these attributes can be selected from predefined enumerations specific to each layer. This mechanism ensures that only valid technologies and protocols can be selected per layer.
The «TCP/IPCommunicationInterface» stereotype contains various derivedProperty elements that ensure attributes of both the linked «TCP/IPCommunicationInterfaceType» and the connected «TCP/IPCommunicationInterface» are visible. These attributes are then used to verify the compatibility of communication interfaces. Two «TCP/IPCommunicationInterface» elements are considered compatible only if they have identical values for each layer attribute. Additional rules ensure completeness of the interface definition. For example, if a value is defined for the Application Layer, all subordinate layers (Network, Internet and Transport) must also be defined. If intended interfaces are incompatible, the «CommunicationConverter» stereotype derived from Class and PartProperty, can be used to transform, for instance, OPC UA to MQTT.
5.2.5. DIN EN IEC 61293
The DIN EN IEC 61293 standard [
60] deals with the marking of electrical equipment using rated data for power supply purposes. In particular, it defines typical rated values used to describe the electrical inputs and outputs of system components. In the remainder of this paper, this DSML is referred to as the IEC 61293 DSML.
Appendix H provides an overview of the stereotypes developed for this purpose and their mapping to normative elements and UML/SysML metaclasses.
The «IEC61293ElectricalInterface» stereotype, derived from the metaclass ProxyPort, models the actual interface used to describe the electrical connections of «System [T]». The stereotype «IEC61293ElectricalInterfaceType», based on the SysML stereotype InterfaceBlock, is used to specify the interface.
For type definition, the standard-relevant attributes such as Voltage, ElectricalCurrent, ElectricalCurrentType, Power, or Frequency are mapped. The «IEC61293ElectricalInterface» stereotype includes several derivedProperty definitions, which provide access to both the attributes of the assigned interface type and the attributes of connected interfaces.
These properties are used to verify interface compatibility using OCL rules. For instance, it is ensured that a source delivers the voltage required by a consumer (cf. Listing 7), that the electrical current provided is sufficient to supply all connected consumers, or that both interfaces use the same current type (AC/DC). If the modeled electrical interfaces are incompatible, the «PowerConverter» stereotype can be used.
| Listing 7: OCL Constraint for Voltage Compatibility. |
- 1
context IEC61293ElectricalInterface - 2
inv CheckVoltageCompatibility: - 3
if self.SourceConsumer.oclAsType( EnumerationLiteral).name = ’SourceUnit’ then - 4
(self.Voltage = self.VoltageOfConnectedInterface) or - 5
(self.Voltage >= self.LowerVoltageLimitOfConnectedInterface and self.Voltage <= self.UpperVoltageLimitOfConnectedInterface) - 6
else - 7
true - 8
endif
|
It covers various device types such as transformers for voltage conversion, rectifiers for converting AC to DC, and frequency converters for frequency adaptation.
In summary, the standard-based DSMLs introduced in
Section 5.2 enhance comprehensibility through domain anchoring (R1.3) and contribute to answering RQ2 by incorporating information and structures from established industrial standards. In addition, they address methodological requirements R2 and R3 by providing integrated user guidance and OCL-based verification rules that ensure standard-conformant modeling and early error detection. Since the introduced DSMLs are derived from external industrial standards, versioning considerations play an important role in their long-term applicability. Each standard-based DSML explicitly references the version of the underlying standard it is derived from, thereby ensuring traceability and reproducibility of modeling decisions. When standards evolve, a targeted review and validation of the corresponding DSML profiles and constraints is required to assess the impact of changes.
However, to ensure methodological coherence across domains, these DSMLs must also be consistently integrated into a unified modeling environment.
5.3. DSML Alignment
Building on the standard-based DSMLs introduced in the previous section, this part describes how multiple DSMLs can be integrated into a unified modeling approach through a structured alignment procedure. The alignment ensures consistency and compatibility between the different domain models and extends the coverage of RQ2 by enabling the systematic integration of the incorporated domain knowledge within a single framework. The proposed method builds upon the foundational alignment principles introduced by Espinoza et al. [
61] and has been adapted to the specific requirements of production system modeling, including the integration of OCL-based verification rules and rule-based automation scripts within the SPES methodology.
To model complex systems comprehensively, it is often necessary to combine multiple DSMLs that were originally developed for different purposes or domains. This includes not only the DSMLs introduced in this paper but also potential future extensions tailored to specific modeling needs. However, combining DSMLs requires careful alignment to ensure that concepts, structures, and rules remain semantically and syntactically consistent. To support such integration scenarios, our approach provides a structured alignment process that enables the harmonization of multiple DSMLs within a single modeling environment. Based on this, several usage options are available for the DSMLs developed in this work (cf.
Figure 3):
Exclusive use of the RFLT DSML, as described in
Section 5.1. This case is only applicable when the modeling is exclusively based on the SPES methodology and production-specific DSMLs introduced in
Section 5.2 are not required.
Use of one or more standard-based DSMLs, as presented in
Section 5.2. In this case, the DSMLs are used independently, i.e., without any formal integration mechanisms such as shared constraints, stereotype mappings, or cross-DSML rules, which is meaningful only when applied to distinct areas of the system model.
Combined use of multiple DSMLs through an additional alignment layer, which relates stereotypes, rules, and automation scripts to enable consistent and rule-compliant integrated modeling.
- (3a)
Combination of the RFLT DSML with one or more standard-based DSMLs.
- (3b)
Combination of multiple standard-based DSMLs without using the RFLT DSML.
Figure 3.
Utilization Scenarios of the Developed DSMLs.
Figure 3.
Utilization Scenarios of the Developed DSMLs.
Prior to integration, the intended use cases must be carefully examined to identify overlapping or complementary domain concepts, differing abstraction levels, and potential conflicts between DSMLs [
61]. This analysis forms the basis for selecting appropriate alignment strategies and identifying the required semantic links, stereotype mappings, and verification mechanisms. In our approach, the standard-based DSMLs were explicitly developed as extensions to the RFLT DSML, resulting in two principal combination scenarios:
Each DSML applies to a separate area of the model without semantic overlap, thus avoiding conflicts by design.
Multiple DSMLs apply within the same model area but at different abstraction levels, introducing potential overlaps that require alignment.
The alignment process for multiple DSMLs within the same model addresses potential overlaps on three levels: semantics, abstract syntax, and concrete syntax.
At the semantic level, domain concepts from each DSML are analyzed manually to identify shared, complementary, or conflicting meanings. For example, different profiles may define resources or interfaces that refer to similar real-world concepts but use divergent terminologies. Semantic alignment ensures coherent interpretation across DSMLs.
At the abstract syntax level, UML stereotypes are examined for structural compatibility based on their UML metaclasses. Only compatible metaclasses may be generalized or composed across profiles. Additionally, existing constraints must be reviewed and adapted to allow joint usage.
At the concrete syntax level, visual representations are coordinated to ensure model readability when multiple stereotypes apply to a single element. Where standards such as VDI/VDE 3682 provide well-established notations, these are prioritized to enhance comprehensibility.
This multi-level procedure enables formalized, consistent integration of multiple DSMLs into a unified modeling environment. The following paragraph details the alignment process, which is structured into six steps that operationalize the concepts introduced above:
Semantic linking of domain models: Relevant domain concepts across DSMLs are identified and mapped, focusing on structural similarities and overlapping semantics to establish conceptual correspondence. Since all DSMLs presented in
Section 5.2 were specifically developed to refine the stereotypes of the RFLT DSML, no semantic or structural incompatibilities arise at this step.
Figure 4 shows an excerpt of the resulting domain model alignment derived from the integration of the DSMLs mentioned above, where the linked elements are highlighted with red frames and connecting arrows.
In particular, the following semantic relationships were defined:
The Robotics DSML specifies the «Subsystem[T]» stereotype of the RFLT DSML.
The IEC 61293 DSML and TCP/IP Reference Model DSML specify the «TechnicalInterface» and «TechnicalInterfaceType» stereotypes.
The VDI/VDE 3682 DSML specifies the constructs «WhiteboxFunction» and «FunctionalInterface».
The ISO 10303 DSML specifies the «ProductContext» and its associated «ProductContextParts».
Stereotype mapping (abstract syntax): Compatible stereotypes are linked via generalization or composition relationships, provided their UML metaclasses are compatible (e.g., structural and behavioral metaclasses are not mixed). In this case, for example, generalization relationships are established between the stereotypes «IEC61293ElectricalInterface» and «TCP/IPCommunicationInterface» toward the more general «TechnicalInterface», between «IEC61293ElectricalInterfaceType» and «TCP/IPCommunicationInterfaceType» toward «TechnicalInterfaceType», and between «Subsystem[T]» and the superior «Component» stereotype defined in the Robotics DSML.
Adaptation of customization elements: Domain-specific CustomizationElement constraints are reviewed and adjusted to permit stereotype application within shared contexts. For example, the PossibleOwner property defines the viewpoint in which a stereotype, such as the «Sensor» stereotype from the Robotics DSML, may be applied for instance, within the [Technical Viewpoint]. Similarly, the Category property ensures that the new DSML elements are integrated into the appropriate viewpoint structures of the modeling environment.
Constraint harmonization (OCL constraints): Existing OCL constraints are checked for compatibility and extended as needed to ensure semantic correctness across combined profiles. New constraints may be introduced to validate cross-DSML relations. For example, the rule shown in Listing 6 checks that only a «WhiteboxFunction» must refer to the same «Capability» as the associated «System [L]» element. Within the alignment, this rule must also be verified for the «ProcessOperator» stereotype. An additional rule resulting from the integration of the DSMLs specifies, for example, that each «ProductDefinition» in the «Product Context» must be linked to at least one «Product» state element from the VDI/VDE 3682 DSML.
Unified concrete syntax: For elements with multiple applicable stereotypes, visual priority rules are defined to determine which representation governs appearance. The visual notation of the VDI/VDE 3682 DSML was adopted for the integration with [Functional Viewpoint] elements, as it provides a clear and intuitive representation. In other cases, where the underlying standard does not define a graphical notation, the representation of the RFLT DSML was used. This DSML employs color-coded distinctions for each viewpoint ([Requirement Viewpoint]–red, [Functional Viewpoint]–yellow, [Logical Viewpoint]–green, [Technical Viewpoint]–purple), thereby supporting visual separation of model contents.
Testing through examples: The aligned profiles were validated during development by applying them to representative modeling examples. In these tests, the integrated stereotypes were instantiated in small test models to verify correct linkage and rule consistency. Identified issues were iteratively corrected until full alignment was achieved.
A key characteristic of the proposed alignment approach is that the alignment effort is intended to be incurred once for a given combination of DSMLs. Once the involved profiles have been aligned, the resulting integrated DSML can, in principle, be reused across multiple application cases without requiring a repeated alignment of the same profiles. From a conceptual perspective, this suggests that the alignment effort is limited in relation to the overall modeling effort required for complex production systems, particularly when the same DSML combination is applied in more than one context.
If additional DSMLs are introduced at a later stage either newly developed or integrated from further standards the alignment process is limited to linking the new DSML with the existing combination.
Previously established alignments remain unaffected, which conceptually restricts the required effort to the incremental integration of the new profile. Due to the modular structure of the DSML framework, this incremental alignment effort is expected to remain manageable.
Overall, the modular design of the proposed DSML framework is intended to support scalability and reuse. It provides a conceptual basis for applying the approach across multiple projects and for extending it toward additional domains and application contexts through the integration of further DSMLs. Model evolution and change management are supported conceptually through the alignment mechanism between DSMLs. Standard-based DSML files can be integrated using a read/write import strategy, such that changes to the original DSML e.g., resulting from updates of the underlying standard are propagated to the aligned DSMLs. In this way, model evolution is not handled through duplication, but through explicit references between profiles. If changes in the original DSML conflict with existing alignment rules or constraints, these conflicts become explicit within the alignment specification. This makes the impact of changes visible and enables a targeted review and adaptation of the affected alignment rules, rather than requiring a complete re-alignment.