简介：Inthispaper,aschemeofcombiningmodelcheckingandtheoremprovingtechniquestoverifyhightrustworthyembeddedsoftwareisproposed.Thesoftwaremodeldescribedinstatemachineofunifiedmodellanguageistransformedintotheinputmodelinglanguageofamodelcheckerinwhichthemodelisanalyzedwithassociatedpropertyspecificationsexpressedintemporallogic.Thesoftwaremodelwhichhasbeenverifiedbymodelcheckeristhentransformedintoabstractspecificationsofatheoremprover,inwhichthemodelwillberefined,verifiedandtranslatedintosourceCcode.Thetransformationrulesfromstatemachinetoinputlanguageofmodelcheckerandabstractspecificationsoftheoremproveraregiven.Theexperimentshowsthattheproposedschemecaneffectivelyimprovethedevelopmentandverificationofhightrustworthyembeddedsoftware.