Abstract: It is difficult to describe the correctness and security of the operate system (OS) by quantitative analysis. Formal method is the acknowledged standard one in design and verification for OS. Based on the operate system object semantics model (OSOSM) , we designed and verified the interruption mechanism of microkernel architecture using for- mal method,which was realized on our self-implemented verified trusted operate system (VTOS). Meanwhile,we used the theorem prover Isabelle/HOI. to formally describe the design process, and verify the integrality of the interruption mechanism of VTOS. Our research plays certain referential significance on formal design and verification of OS.

Key words: Formal design, Formal verification, Microkernel, Interrupt, Integrity