To ensure the full safety of safety-critical system, a safety analysis method for model checking based on multiple faults injection is presented in the paper. In the proposed method, the single and multiple faults can be injected into the formal mode