HAL Id: inria-00072897
https://hal.inria.fr/inria-00072897
Submitted on 24 May 2006
HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub- lished or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.
L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.
Towards Designing SVM Coherence Protocols Using High-level Specifications and Aspect-oriented
Translations
David Mentré, Daniel Le Métayer, Thierry Priol
To cite this version:
David Mentré, Daniel Le Métayer, Thierry Priol. Towards Designing SVM Coherence Protocols Using High-level Specifications and Aspect-oriented Translations. [Research Report] RR-3765, INRIA. 1999.
�inria-00072897�
ISSN 0249-6399
a p p o r t
d e r e c h e r c h e
INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE
Towards designing SVM coherence protocols using high-level specifications and
aspect-oriented translations
David Mentré, Daniel Le Métayer, Thierry Priol
N˚3765
Septembre 1999
THÈME 1
+',-(!.(/0#1324"&%5 6 0#78%9,-:% ;%<=(+&%
>4?A@=BDCFEFGIH0JLKLMON>?PHBDGIQSRG1ETMIJU?AVPGWKWNYX'ZB[GWK\K\V^]KLB[_`Q
a!b-c+dfefgihkjl\mne\oqpsrteumnvsmwuxc+dfe\m
yYzx{}|we+u~"Sy"
jo}P{qznuSsezneL be+z be IW}IhAe\sune\d zxefg\Iqh6gL:Oo}qeLm
t<\+Uqq e -zn{IO{Wmeouw"{}mwuo}qeoqzx{Ioq b ¡{qzSunbe e\mn¢£I¤{} ¥o¦mbOo}zxe\§W¢¨znunp-oq©=dfe+df{qzxvqª
a!b-e«-zmwuimwuo}qe ¢¨mio¦b¢¨qbD©¨e+§Ie+©=-zn{qun{s {I©=se\mx zx¢¨sun¢¨{q¬pOm¢¨'uxbeWuxznpO 3unp-zneL&o}dfd'o' ¡{Iznd'o}©¨¢®md
b-¢¨ b¢®mo}dfe+Oo}©¨efun{4 ¡{Iznd'o}©8§qe+zx¢£«O +o}un¢¨{q-m\ª¦a!be¦mne\ {I-1¢¨m ounzo}-mn©¨o}un¢¨{q1{} !unb-¢¨moq-munzoq 3ux¢£{I
¢¨Wun{o}'oqpsun{Idfo}un{I:b¢® bf +o}fPeSsvA-o}df¢® +oq©£©¨v©¨{Ioqe\:¢£'oiznp-Iux¢£dfee\W§A¢¨zn{Idfe+Wu<unb-o}uYzn{U§A¢®se\m
o4 +{q- +e+su{} "q©¨{q-oq©¥s¢£zxe\ un{IznvIª:a!b¢®m&unzo}Om©®oUux¢£{I¢®m&-oqmne\{qmnOeL 3u¯°zx¢£e\Iuxe\7yYzx{qqzo}dfdf¢¨
b-¢¨ b±d'o}²Ie\m&¢£u:P{Imxm¢¨©¨efun{mnPe\ ¢£ ¡v1¢£-e+Pe+-se\Wun©¨v1s¢£³`e+zxe+Wu:oqmnPe\ 3um{q "uxbe¦¢¨df©£e\dfe+Wuxo}un¢¨{q0ª
a!b-e& +{qdf©¨euxemvsmune+d +o}unbAp-mSOeeLoqmn¢£©¨v¦P{qznune\{q4oe+´e+A§A¢¨zn{Idfe+Wu\ª
µ¤¶W·`¸x¹ º U»<q Ab-o}zxe\t¼¢¨zuxp-o}©0½¬e+df{qzxv¬¾[A¼i½¿3ÀO {qb-e+zxe+- +e°zx{}ux{s {q©DÀsmPe\ +¢Á«P +oUux¢£{I0À&o}dfd'oÀ
oImPe\ uxm\ª
®Ã9ÄnÅÇÆ\È!ÄÉ<ʨÅÇËDÌÍ
Unité de recherche INRIA Rennes
IRISA, Campus universitaire de Beaulieu, 35042 RENNES Cedex (France) Téléphone : 02 99 84 71 00 - International : +33 2 99 84 71 00
Télécopie : 02 99 84 71 71 - International : +33 2 99 84 71 71
%= )8% w)$0#2"&% (w+ w=#78%
{Ip-mfzx{qP{Imn{q-mp +oIszxePe+zxdfeuuo}Wutse¬ +{q- +e+§q{I¢£zfseLm'dfl+df{q¢¨zneLm§W¢¨znunpe\©£©¨e\m
Oo}znuxo}Il+eLm©o}¢®se'pe'mnOlL ¢£«O +o}un¢¨{q7e-zn{qun{s {I©£eLm°se' +{qbl\zne\- eIª=o {I- e\sun¢¨{qme³`e\ unpe
e\ ©¨p-m¢¨e+p-zxm'-b-oqmne\m\ªo±zxe+df¢¨c+zxe¤e\mutpee\mx zx¢£sux¢£{I se¬b-oqpsut¢¨§qeLo}p o}Om¦pe§ oqzn¢®o}Wuxe
p4 ¡{qzxdfoq©£¢®mnde &oqdfdfo¦Aunzxp- 3uxpznl! Wp¢Oe\zndfe+u°e³`e\ 3uxpe+zi e\zuo}¢¨e\m§Il+zx¢Á«P +oUux¢£{I-m\ª"=o'mne\ +{q-e
+{q-mn¢®mwuxe#¤uxzxoIsp¢¨znet +eununeoq-munzoq 3ux¢£{Ie+ oqpsun{Idfo}une b-o}zxqeLo}©¨e'o}p mne+¢¨ p e\W§A¢¨zn{Ie\de\Wu
$e+rAlL psux¢£{I mnpP{qznuxo}Wuf©£e4 {I- e\suezxl+Pe+znun{I¢£zxetI©£{I-o}©Dª ~euuxetuxzxoIsp- un¢¨{q eLmwufznlLo}©¨¢¨mnl+e-o}z
p-euneL b¢% Wpe se-zn{Iqzo}dfd'oUun¢¨{q-o}z'&foqmnOeL 3um)(* Wp¢=Pe+zxdfeuie mPl\ +¢Á«Oe+zS¢¨-sl\Oe\-o}dfdfe+Wu
+e+znuxoq¢£eLmt \o}zoq 3uxl+zx¢¨mun¢% Wpe\mse©®o/d¢®mnee+,+p§Azne ¾ +{qWunz.-q©¨e¬eu4zxe+zxl\mne+Wuxo}un¢¨{q^seLm{ql\e\m¿3ª
/e\-mne+d -©£esp¤mnvAmunc\dfeiPe+puo}¢¨-m¢0+unzxe& oq +¢£©¨e+dfe+WuP{qznunloq-m!p4{qp-§qe+©`e\W§A¢¨zn{Ie\de\Wu\ª
1º L ¸ 2 ½¤l\df{q¢¨zne¼¢¨zuxpe+©¨©£e4y¥o}znuxoqql\e¾35476¿3Àzx{}un{s +{q©¨etse4 {qb-l+zxe+- +eqÀYmnOlL ¢£«O +o}un¢¨{q0À
&oqdfdfo-ÀoqmnOeL 3um+ª
. /
:%=' )8%
0°¢®mwuxzn¢¨psuxe\mvsmune\dfmdfoIse'{} o}pun{q-{qdf{qp-mid'oq b-¢£eLmb-o §A¢¨4de\df{qzxvo}-1zx{s eLmnmn{qzm©¨¢¨²qeL
Avo&euw"{qzx²o}zxe¢¨e+©¨v p-mne\9ª21S{U"e+§Ie+zLÀ unbe\zne-zn{Iqzo}dfdf¢£i¢®m¥{}u"oimn¢¨d-©£euoqmn² oqmY{qed:p-mwu
e+rs©£¢® ¢£un©¨v±se\oq©¢£unb zneLm{Ipzx +e¦s¢®mwuxzn¢¨psux¢£{I0ª1a{¬eLoqmne'unb¢®mzx{qqzo}dfdf¢¨-À=unbe¤Ab-oqzneL¼¢¨zuxp-o}©
½¬e+df{qzxv1¾DA¼°½7¿ +{q- +e+subOoqm°Oe\e+¬zx{qP{Imne\Av 0¢o}-31Sp-oq²54¨g#67Dªia!b¢¨mi {I- e\su°{q³Pe\zxmSunbe
¢¨©¨©£p-mn¢¨{qt{q oq©¨{q-oq©PoIszxe\mxmmn-oI ei{U§qe+z"o:¢¨munzx¢£-psuneLoIszxe\mxmmn-oq +eqª¥a{:¢¨dfzn{U§IePe+zn ¡{qzxd'o}- +e
{q mnp- bomvsmune\dÀsmne+§Ie+zo}©O +{q¢¨e\m"{q o -¢£eL ei{} o}uxoo}zxed'oqe°p-mn¢¨ \oq beLm+ªa!be\zne+ ¡{qzxe°o +oq b-e
+{qbe\zne\- eizx{}ux{A +{q©`¢®me+eLse\ux{Ip-o}zo}Wuxe+e&o +{qbe\zne\Wu"§A¢¨e+´{} =uxbemnvAmune\d4ª
A¢¨- +eSunb-eS«-zmwuzn{qun{s {I©[ÀWme\§qe\zxoq©s{qeLmYb-o §IeOe\e+¦zx{qP{Imne\©¨¢£²Ieunb-e©®o8+vzxe+©¨e\oqmneS {I-mn¢¨mune\- v
4#78{Iz&unbe¦mx {IOe' +{q-mn¢¨mune\- v947Ǫ:1S{U"e+§Ie+zozx{}un{s +{q©Yo}¢¨d'moUu{qun¢¨d¢;8+¢¨¬o©¨¢£df¢£une\1zo}Ieo
oq©¨¢¨ \oUux¢£{Imnb-o}zx¢£-:-o}uuxe+zx-m+ª¥a!be\zne+ ¡{qzxeioIe+e\zxoq©P-pznP{ImneA¼°½ d pOmwuS¢¨Wune+Izxo}une&me\§qe\zxoq©Ozx{}
ux{s {q©®m\ª<1S{U"e+§Ie+z!uxb¢¨mmwuoUun¢® oqzx{Ioq b +oq{}uuo}²Ie¢£Wun{oq + +{qpWue\Fuxe\ b-{q©¨{qqvt©£¢¨²qeje\df{}une
½¬e+df{qzxv¦ + +e\mxm=47DªYa!be\zne+ ¡{qzxe°-zn{qun{s {I©¨m!mnb{qp©®OesvA-oqdf¢¨ \o}©¨©£vtoIseLt¢¨unbe A¼i½±ª
½¤{Izne\{U§qe\z=ois¼°½5d:p-mu<Pe8ux¢£Ib©£uwvi¢¨Wune\qzoUuneL¢£unbuxbe"{qPe+zoUun¢¨imvsmune+d´ux{ioI b¢£e\§qeY{Isun¢¨d'o}©
Pe+zn ¡{qzxd'o}- +e47Dª?>puioqm°otmnvsmwuxe+d {qdfP{qe\Wu\À`of o}p©£uwv4¢£df©¨e+dfe\IuoUux¢£{I¬{} Yos¼°½ \o}¤b-o §Ie
¢¨mxoqmunzx{qp-mfe+³PeL 3uLª´^o}zx{IoI b ux{ ¢¨- zxe\oIme¤ {Is«Ose\- e¤©¨e+§Ie+©S¢¨^o A¼i½; {IdP{q-e+Wu¦¢¨m¦unbe
pOme7{} :o b¢£IbsÇ©£e\§qe+©° ¡{qzxd'o}©¨¢¨mnd ¡{qzunbe±A¼i½6seLm¢¨q0ª a!b¢®m4o}-munzoq un¢¨{q be\©£Omtuxbese\mn¢£Ie+z
¡{s +p-mY{Ifunbei {qb-e+zxe+- +ezn{qun{s {I©©¨{qq¢® ¢£unb{Ipsu"e\o}©¨¢¨¢Áuxb¦©¨{U!D©¨e+§Ie+©¢¨df©£e\dfe+Wuxo}un¢¨{q¦se+uxo}¢¨©®m+ª
½¬{qzxe+{U§qe\z\ÀLuw"{oqs§Uo}Wuo}qeLmoqzne!Wo}¢¨e\:¢Áuxb'o ¡{Iznd'oq©o}-munzoq un¢¨{q {q Ouxbezx{}ux{A +{q©DªA@<¢¨zxmun©¨vqÀ}¢£unb
oq oqse Wp-oUuxe¦mvsmune+d o}OmwuxzxoI 3un¢¨{q=À<mn{qdfe¦o}pun{qd'o}un¢® '§qe\zn¢£«O +o}un¢¨{q± +oq±Oes{qe34£gIg7Dªse\ {I-s©¨vqÀ
¢£unb/o¤zx{qPe+zuxzxoq-mn©¨o}un¢¨{qdfe\ b-oq¢¨mnd un{©¨{U!Ç©£e\§qe+©8¢£df©¨e+dfe+WuoUun¢¨{q=Àuxbemxo}dfe¦-zn{qun{s {I©8 +oq
Pe¬uo}zxqe+une\/ux{ me\§qe\zxoq©S¢£Wuxe+z {q-e\ un¢¨{q uneL b{q©¨{qI¢£eLm+ª SO ¢Á uxbe-zn{qun{s {I©Se+A§A¢£zx{q-de\Wu¦¢¨m
mnpCB¦ ¢¨e+Wux©£vmd'o}©¨©-oq-e\©£©se+«-eL9Àquxbeb{I©£eA¼i½ {IdP{q-e+Wu8 +oq:PeSe\oIm¢¨©¨vO{Izuxe\{q'o&e\
mnvsmwuxe+d4ª
a!b¢®m-o}Pe+zfzxe\mne+Wumuxbe¤mwuoUune{} °{qpzf pzxzxe+Wu:zxe\mne\oqzx b±{I unb-e4e\mn¢£I {} -zn{Iqzo}dfd'o}©¨e
s¼°½±ª
e-zn{IO{Wmeiun{¦e«-e: {qb-e+zxe+- +ei-zn{qun{s {I©¨m!¢¨4uw{'Oo}znuxm\ªa!be&«-zmu¢¨mofb¢£Ib4©£e\§qe+©£Ç©£e\§qe+©
e\mx zx¢£sux¢£{I' ¡zxe+e{q o}Av¢£df©¨e+dfe\IuoUux¢£{Ise+uxo}¢¨©Dªa!b-eimne\ +{q-'{Ie°e«-eLmounzo}-m ¡{qzxd'oUux¢£{I'¢£Wun{
oq o}psux{qd'oUux{q ¡{q©¨©£{U¢¨± e\zuo}¢¨ ¢£df©¨e+dfe+WuoUun¢¨{q b{I¢¨ +e\m\ªFa!b¢®m¦oqpsun{Idfo}un{I \o} Pe¬©£{WoqseL
vWOo}df¢¨ \o}©¨©£vt¢£Wun{'ozxpWun¢¨deIª
ezxe\mne+Wu<¢¨'meL 3ux¢£{IED°{}uxbe+zzx{qIzxoqdd'oq©£e" {Ibe+zxe+- +e-zn{qun{s {I©Ae\mn¢£I e+A§A¢¨zn{Idfe+Wuxmo}O
uxbe+¢¨z&©£¢¨df¢ÁuoUux¢£{I-m+ªGFmne\ 3ux¢£{Ieq¢¨§qeotI©£{I-o}©<{U§qe\zn§A¢¨e+ {} 8{Ipz&o}zx{IoI b0ªa!be+7¢£1meL 3ux¢£{I
H À"ezneLme\Wuunbe=¢=o}OI1p-oq² +{qbe\zne\- e&zx{}ux{A +{q©9b¢® b4¢¨mp-mne\unbzx{qp-qb{Ipsu!unb¢®mS-oqOe\zun{
¢¨©¨©£p-munzoUuxe&{qpzoqzx{IoI b0ª euxbe+¬mnb{UF¢£¤mne\ 3ux¢£{I¬b{UFo' +{qbe\zne\- e&zx{}ux{A +{q©9¢®m! ¡{qzxd'o}©¨¢J8\e\9ª
F mne\ 3ux¢£{I -À8"e¤se\mx zx¢£Peunbe4uxzxoq-mn©¨o}un¢¨{q -zn{s eLmnm:ux{1-zn{ssp- +e¤o} ¢£df©¨e+dfe+WuoUun¢¨{q/ ¡zx{qd oq
oq-munzoq 3uzx{}ux{s {q©se\mx zx¢£un¢¨{q0ª4a!b¢®m¢£df©¨e+dfe\IuoUux¢£{I±¢¨m ©£{WoqseL7¢¨Wun{¬o4zxpWun¢¨dfe¦e+A§A¢£zx{q-de\Wu
e\mx zx¢£Pe\¢¨4mne\ un¢¨{qAª e«--o}©¨©¨v {I- ©¨p-se¢¨¬mne\ 3ux¢£{IIKfAvq¢¨§W¢¨¦ +pznzxe+WuSmuxoUuxe{} {qp-z{Izn²
oq-Oe\zxmnOeL 3ux¢£§Ie\m\ª
LALNMPO#QSR!TU
< < (+ '< 6 =%)( 5 <
a!b-ei¢®seLo:{q zx{qIzxoqdfdfoq©¨eiA¼i½ ¢®m!{qu!-e+Foq-eo}zxe&o "oqzne°{} <o}u©£eLoqmu"uw"{fe³`{qznuxm"{} mpO b
e\A§W¢¨zx{qdfe+Wum+À}y!~!fo}-'ae\oqy<{qu\ª8oq bf{q Puxbe+dzx{qP{Imne\mYomnPe\ ¢£«O dfe+unb{s's¢£³Pe\zn¢¨& ¡zx{qd unbe
{qunbe\z{Ie Avunbe:zx{qqzo}dfdf¢¨'©¨oqqpOo}qepOmeL9ÀPunbe:zn{Iqzo}dfdf¢£-¦mwuwvA©¨e:o}O4 oq +¢£©¨¢Áux¢£eLm{q³Pe\zneL
Av'uxbezx{}ux{A +{q©`zx{qIzxoqddf¢¨e+A§A¢£zx{qdfe\IuLª
y"~!4£gD+7I¢®m0ozxpWun¢¨dfe¥e+A§A¢£zx{qdfe\Iu9 ¡{Iz=s¢®mwuxzn¢¨psuxe\i«-©¨e\mnvsmwuxe+d'm\ªa!b¢®m0o{qu=mwuxzn¢® 3ux©£v&mnOeLo}²A¢£-
ofA¼i½ -zn{Iqzo}dfdf¢£:e+A§A¢£zx{q-de\Wu"pu!¢®mxmpeLmo}zxe°¢®se\Iux¢¨ \o}©DªyYzn{qun{s {I©¨m!oqzne&se\mx zx¢¨OeLt¢¨ofa< ©
©¨¢¨²qe©®o}-qp-oqqeoq-¦e+rAeL psuxe\t¢£o}t¢¨Wune\znzxeuxe+z©£{WoqseL¦oqm!o ½oq bt:erAune\znOo}©Pde\df{qzxvd'oq-o}Ie+zLª
se+§qe\zxoq© oI ¢¨©£¢£un¢¨e\m4oqzne7{}³`e+zxe\ ux{/eLoqmne7-zn{qun{s {I©°zx{qIzxoqdfd¢¨±deLmnmxo}Ie\mo}zxe7²Ie+su4¢£F{qzse+z
oq-uxe+dfO{IzxoqznvmuxoUuxe\mspetun{7½oq b ²qe+zxe\©o}O±dfe\mxmnoqqe¦!o}¢£un¢¨Peuw"e+e\±uw"{mwuoUuxe\mo}zxe
e\©£¢¨df¢£OoUuneL9ª°m=-zn{qun{s {I©¨mo}zxeY¢£Wuxe+zxzne+uneL9ÀLunbee+A§A¢£zx{qdfe\Iu¢¨m§qe\znv&m©¨{Uª=½¤{Izne\{U§qe\z9{zx{}ux{s {q©
§Ie+zx¢Á«P +oUux¢£{It¢®m!zx{qP{Imne\9ª
ae\oqy<{qu?47`¢¨m"o:s¼°½ -zn{Iqzo}dfdf¢£e\A§W¢¨zx{qdfe+WuLªyYzx{}ux{s {q©®m8oqzneise\mx zx¢¨OeL¦oqmo}psux{qd'oUuo¢¨
o:se\¢¨ \oUuneL¦©®o}Ip-o}Ieqª8oq bmwuoUune&seLmn +zn¢¨OeLm8dfeLmnmxo}Ie\m¥uxb-oUuS \o}¦Pe°zxe\ +e+¢¨§qeL¦o}-oq un¢¨{q-m8un{Oe
{qeIªa!b-e°e\W§A¢¨zn{Idfe+Wu{q³Pe\zxm"mn{qdfe oI ¢¨©£¢£un¢¨e\mp-seLm¢¨zxe\¦dfeLmnmxo}IeS"oq¢Áu Wpe+p-eqÀso: +{qWun¢¨Ap-oUux¢£{I
dfeL b-o}¢®mnd un{f oI 3un{Izn¢;8+ei¢¨Iuxe+zxdfe\s¢®oUuxemwuoUuneLmo}-dfe\mxmxo}qeLm!o}zxei²Ie+su¢¨4{qzse+zLªY zx{}un{s +{q©9 +oq
Pe4§qe\zn¢£«-e\ ¢Áuxb muxo}une4e+Apdfe\zxo}un¢¨{qT¾[½¤pz §qe\zn¢£«-e\z¿ª90p-e4un{ {qd:¢¨-oUux{qzxv1e+rs©£{Wm¢¨{q=ÀY{q©¨v
-zn{qun{s {I©P¢¨A§q{I©£§A¢¨ uw"{f{sse\m \o}Oe§Ie+zx¢Á«Oe\9ª
a!b{Wmee\A§W¢¨zx{qdfe+Wumb-o §qe©¨¢£df¢£uxm\ªP@¢¨zmwux©£vIÀ} ¡{qzxd'o}©¨¢¨mndpOmeL ux{se\mx zx¢¨OeS-zn{qun{s {I©¨m¢®munb-eS©£{U!
©¨e+§Ie+©¢¨df©¨e+dfe+Wuxo}un¢¨{q'o}pun{qd'o}uxoª<a!be+zxe ¡{Izne!uxbe©¨{qq¢® !Pe+b¢¨-'o&zx{}ux{A +{q©s¢®m¥b-oqzx:un{p--se+zmuxo}O
oq-zx{}un{s +{q©9zx¢Áux¢£'oq-4se+p-qq¢¨f¢®m-o}¢¨s ¡p©Dª"se\ {I-s©¨vqÀ§Ie+zx¢Á«P +oUux¢£{I¢®me\¢Áuxbe+zS-{}uo §Uo}¢¨©¨oq©¨e
¾y"~!¿8{qz©£¢¨df¢Áuxe\¾[a=eLo}y{}u3¿3ª¥a!b¢¨zx©£vIÀquxb{Imnee\W§A¢¨zn{Idfe+Wuxm8o}zxeSO{Ip-¦un{ o euw"{qzx² uxe\ b-{q©¨{qqv
¾dfe\mxmnoqqeÇ-oImnmn¢£-¦ ¡{qz:a=eLo}y{}u3¿&o}-7unbAp-mzn{qun{s {I©¨m \o}-{}uPe¦oqoqsuneLux{¬o4e+ uneL b{I©£{Iqvqª
a{'o}-mn"e+z"unb{Wme&©¨¢£df¢£uxm"e&zx{qP{Imne&oe\´oqzx{IoI b0ª
(+ ( .!.'!
e' {I-m¢®se\zio-o}zo}©¨©¨e+©mvsmune+d¢£unbs¢®mwuxzn¢¨psuxe\7dfe+df{qzxvqª:¯°pz&{Is|we\ un¢¨§qe¢¨m°un{4seLm¢¨q1otzx{}
Izxoqdfdfoq©¨e°A¼°½ p-mn¢£ unbe°p-se\zn©¨vA¢£- -oqq¢¨ dfe\ bOo}¢®md4ª20e+uneL 3un¢¨{qo}-toUuod'o}-oqqe\de\Wu
IzxoqAp©¨oqzn¢£uwv1¢¨m:unbAp-m'o7-oqqeqª ¯°pz:I{Ioq©"¢®m:un{1zx{qP{Imneo7dfeunb-{A un{seLm¢¨q A¼°½ ¡zn{Id b¢¨qbs
©¨e+§Ie+©<zx{}un{s +{q©mnPe\ ¢£«O \oUun¢¨{qOm+ªa!b¢®m°oqzx{IoI b¤e+s ¡{Izx +e\mo ©¨e\oqmne+-oqzxo}un¢¨{q¤Peuw"e+e+7 {qb-e+zxe+- +e
b-{q¢® e\mizxe+©®oUuxe\¤ux{¤o-zn{qun{s {I©oq-7¢£df©¨e+dfe+WuoUun¢¨{q b{I¢¨ +e\mizne\©¨o}uneL¤un{¤oe+uw{Izn²uneL b{I©£{Iqvqª
y8zn{qun{s {I©seLm¢¨qoq- b-e\ ²A¢£-¦¢¨munbAp-mid'oqe e\oIm¢¨e+zLª&¯°p-z°"{qzx²¢®m°-oqmne\¤{Io}e+©®o}P{qzoUun¢¨{q¤{q
uxbe:WuxznpO 3unp-zneL¬&o}dfd'o ¡{qzxdfoq©£¢®mnd 4H 7=uxb-oUu°ep-mne oImSo¦mnOeL ¢£«O +o}un¢¨{q4©¨oqqpOo}qeIªFÇumSd'o}¢¨¬oqA
§UoqIuo}Ie¢¨m!uxb-oUui¢Áuio}©¨©£{USmSoqpsun{Id'oUun¢® &¢¨W§Uoqzn¢®o}Wu beL ²W¢¨'{I¤b¢£IbsÇ©£e\§qe+©0e\mx zx¢£sux¢£{I-m\ª!½¬{qzxe+{U§qe\z
uxb¢®m° beL ²A¢£s{Ae\m°{}u&se+Pe+O¬{q¬unbeApd Pe+zi{} Y{sseLm¢¨A§q{I©£§Ie\4¢¨¬unb-e:s¢®mwuxzn¢¨psuxe\7mvsmune+d4À
uxbAp-m:o §I{q¢®s¢¨4unbe4 {Id ¢¨-o}un{qzxv1ers©¨{Imn¢£{I±{} muxoUuxete\Wp-de\zxo}un¢¨{q0ª @pznunb-e+zxd{Izne {qdfd:p¢® +oU
ux¢£{I-moqzne-{}u°mnOeL ¢£«-e\oUuSuxb¢¨m°©¨e+§qe\©[ª°mo¦ +{q-mne Wpe\- eIÀ-d'o}Av¢£df©¨e+dfe+WuoUun¢¨{qOm +oq¤Oe p¢¨©Áu
¡zx{qdunb-emxo}dfe oq-mwuxzxoI 3u-zn{qun{s {I©[ª @¢¨-oq©£©¨vqÀOunbeers©¨¢® ¢£uise+«-¢£un¢¨{q{q Y¢£A§Uo}zx¢®o}Wuxm¢¨dfzx{U§qe\mSunbe
p--se+zmuxo}Os¢£-{q =uxbezx{}un{s +{q©Dª
L
Runtime Environment Invariants
Abstract protocol definition
High-level description
Checking Translation
choices Implementation
Automaton
@<¢¨qpzxefg ¥yYzx{qIzxoqdfd¢¨:e+A§A¢£zx{qdfe\Iu
@<¢¨qpzxe'gmp-dd'oqzn¢;8+eLm!{qpzSoqzx{Ioq b=ª @¢¨zmwuS{q ¥oq©£©DÀsuxbezx{qIzxoqddfe\z¢¨Wunzx{Ap- eLmSo ""
,J S,
%%'&)/{} "unbefzx{}ux{A +{q©Dªa!b-¢¨mseLmn +zn¢¨sux¢£{I7¢®m&d'oqsefp{} !o} S)S) '&)*+!,< )
e\mx zx¢£¢¨mwuoUune b-o}-qe\m°o}-9 )ªa!b-e\mneuw"{t-oqzum°oq©£©¨{Uzx{}un{s +{q©!"$!}ª:a!be+o
)$,J)'muxoqqeYuxzxoq-m ¡{qzxdfm0unbeGS) %)'&)*+!, )f¢¨Iux{ioq C) )Oª<a!b-¢¨m<) $,J
)¢¨mY-oqmne\:{q '&,J %) ) !"$ S:¾[o § oq¢£©®o}-©£eoqm¥°mPe\ uxm 4K7¡¿d'oqeWv unbe-zn{Iqzo}dfdfe+zLª
@<¢¨-o}©¨©¨v'unbe&zxe\mnp©£un¢¨ C) )¬ +oqPe&©£{WoqseL¦¢£unb¢¨¤oIC) % +S)"oq-t¢¨Wune\zxoI 3uxm
¢£unb4¢£u\ª e{UFe\mx zx¢£Peiunbezx{}ux{s {q©`p-mne\4oImo}ero}df©¨eiunbzx{qpIb{qpu"uxb¢®mSo}znun¢® ©¨eqª
± $) !<" &%'"(
ep-mne!unbe0¢-oq- 1Sp-oq²mn¢¨q©¨eÇzn¢£une\zUd p©£un¢¨©¨eÇzneLoqse\zxm {Ibe+zxe+- +e!zn{qun{s {I© 4£g+67OoImYo}feroqd:
-©£e!ux{¢£©¨©£pOmwuxzxo}une!{qpzo}zx{IoI b0ª=a!b¢®m¥zx{}ux{s {q©s¢®m¥mn¢£df©¨eo}O: +{q- +¢¨mneo}-:unbAp-m8 +o}fPeSse\mx zx¢¨OeL
¢¨¦uxb¢®mOo}Pe+zLª21{Ue\§qe\z8{qp-z"oqzx{Ioq b'¢®m"mp¢£uxoq©¨eux{ ¡{Iznd'o}©¨¢;8+e°oqAv:uwvAPe°{q {Ibe+zxe+O eSzx{}ux{s {q©
©¨¢¨²qeteLo}Ie+z zxe+©¨e\oIme¦ +{q-mn¢®mwuxe+- +v 4-D7Ǫa!be=¢!oq- 1p-o}²zx{}ux{s {q©b-o}Os©£ee\oI b±dfe+df{qzxv-o}Ie
{q uxbetmnb-o}zxe\oIszxe\mxmm-oI e'¢¨-se\Oe\-se+Wux©£vIª45-o}Ie'¢¨me\¢Áuxbe+z:zn¢£uuxe+±Av7o4p-¢ Wpet{sse¦{qz
zxe\oIAv7{qe'{Izdf{qzxe-{Ae\m\ª 8oI bzneLoqs¢¨4{sse'd'o}²Ie\mo4©¨{s +o}©Y +{qAv{q uxbe¦-oqqeIª be+ o
Oo}qe'¢¨zneLoqmuxoUuxe¦¢®mzn¢£uuxe+0À¥oq©£©8 +{q¢¨e\m{} "unbe¦Oo}qe'd:p-mu Oese+©¨euxe\ ¾¡¢¨A§Uo}©¨¢¨o}un¢¨{qb-oIme ¿3ª
@<¢¨qpzxeDtmnb{USm°unbe'muxo}uneqzo}b¬{q "o-o}IeqªfWuxo}unef b-o}Ie:¢®m°unzx¢£Iqe\zneL¤e+¢£unbe\zAv¬o©¨{s +oq©<{Izio
zxe+df{quneoq \ e\mxm\ªA@{Iz¥e\oI b:-oqqeIÀqo&d'o}-oqqe+z¥mun{IzneLm<unbe-oqqemuxoUuxeSo}-f +{q¢¨e\m²A{U©¨e\sIeqª< + eLmnm
zxe WpeLmwum!o}zxe&mne+Wu!un{'¢£uo}Ot¢£uunzx¢£Iqe\zxm"e\e\seL¢¨A§Uo}©¨¢¨o}un¢¨{q-m\ª
e{UFmnb{UFb{UFozx{}ux{A +{q©9 +oqPeseLmn +zn¢¨OeL¢£4{qp-z"b-¢£IbsD©¨e+§Ie+©` ¡{Iznd'o}©¨¢®md4ª
LALNMPO#QSR!TU
Local state
Allowed remote states Local event Remote event Read
Invalid
Invalid or Read
Inv or Read or R/W
Read/Write
Invalid Remote read Local write
Local write Remote write Local read
Remote write
@<¢¨qpzxe D ¥y¥o}IemwuoUune&Izxoqbt{q =¢0o}- 1SpOo}²t +{qbe\zne\- e&zx{}ux{s {q©
<%' (± 83#%
¯°p-z°zx{}ux{s {q©<mPe\ +¢Á«P +oUux¢£{I¬©®o}Ip-o}Ie¢¨mio}e+©®o}P{qzoUun¢¨{q¤{q ¥unbe'Wuxznp- unpzxe\1&o}dfd'o' ¡{Iznd'o}©¨¢®md
4H 7Ǫ eeuxoq¢£©0unb¢®m! ¡{qzxd'o}©¨¢¨mnd5o}Otuxbe+¤oq©¨v¦¢Áuux{funbe!=¢0o}- 1p-o}²tzn{qun{s {I©[ª
!"#$%&(')
a!b-e4WuxznpO 3unp-zneL &oqdd'o ¡{qzxd'o}©¨¢¨mnd 4H 7¢¨mf-oImeL {I unb-e4 b-e+df¢¨ \o}©!zxe\oq un¢¨{q/de+uxoqb{qzLª a!be
p-¢ Wpefo}uxomwuxznp- unpzxe ¢¨1&oqdfdfo54¨gS7¥¢¨m°uxbe:d:p©£un¢®me+u'¾[omneuiunbOo}7 \o} +{qWuxoq¢£1me\§qe\zxoq©={s + +pz
zxe+O e\mS{} unbe:mnoqde e+©¨e+dfe+Wu¿b¢¨ b¬ \o}¤Pe mne+e+¬oImSo+*n be+df¢® +oq©=m{I©£pun¢¨{q,3ª m¢¨df©¨ezx{qqzo}d
¢®mo¤Oo}¢¨zt¾.-? S) !& )-À0/?S)9¿3ª ¥rseL psux¢£{I1-zn{s e\e\m\À<¢Áuxb{qpsuo}ers©¨¢¨ +¢Áu:{qzse+zLÀ=Av
zxe+-©¨oI ¢¨¦e+©¨e+dfe\Iumi¢£unbefd p-©Áux¢¨mneumno}un¢®mw ¡vA¢¨¦uxbefzneLoq un¢¨{q¬ {I-s¢£un¢¨{q7Wv4uxbezn{sspO 3uxmi{q Yunbe
oI 3ux¢£{I4¾1* b-e+df¢¨ \o}©zxe\oI 3ux¢£{I,w¿ªa!bezneLmp©£u8¢®m¥{quxo}¢¨eLfbe+¦omuxoq©£e°mwuoUune¢®mYzxe\oI be\0ÀUunb-o}u8¢®m¥un{
mxo vbe\f{df{qzxe!zneLoq 3ux¢£{I-m¥ +oquxo}²Ie©®oq eIª={s +o}©¨¢£uwv o}-©®oq ²:{} `{qzse+zx¢£-ioq©£©¨{U oe\mx zx¢£sux¢£{I
{q 0o}©¨q{qzx¢£unbd'm¥¢£unb{Ipsu8p-e\ +e\mxmnoqznvme Ip-e+Wun¢®o}©¨¢ÁuwvIª<¦eroqd-©£e{q =o &o}dfd'o&zx{qqzo}d ¢¨mY oq un{}
zx¢®o}©32465(798:4<;=7)>Dª¥S-©£¢¨e\ux{d:p©£un¢®me+u@?)AB5DCE5(F#5G#H¢Áu +{qp©®¦-zn{ssp- +eiunbei ¡{q©¨©¨{U¢£erseL psux¢£{I
mne Wpe\- e
2IAB5JFK8LFM>=mn¢£d:p©Áuo}e\{qp-mn©¨v¦¢ÁuxbN2C5G+8POM>9uxbe+N2F5JOK8QCMGB>
a!b-e'Aunzxp- 3uxpzneL1&oqdfdfo ¡{Iznd'o}©¨¢®md 4H 7Y¢¨Wunzx{Ap- eLmuxbe'{qun¢¨{q1{} 8uwvAPe\7d p©£un¢®mneu\ª'avAOeLmo}zxe
Ooqmne\ {qTzne\©¨o}un¢¨{q-mtOe+uwe\e+ uxbe7e\©£e\dfe+Wuxm{} o d p©£un¢®me+u\ª ½¤{qzxe-zneL ¢®me\©£vIÀSo±uwvAOe7¢£dfP{Imne\m
zxe\munzx¢® 3un¢¨{qOm!{qunbeApd:Oe\zS{} {s + +pznzxe+O e\m!{q <§Uoq©£peLmSmxoUun¢®m ¡vW¢¨¦mnOeL ¢£«O &zxe+©®oUun¢¨{qOm+ª8 b-e\ ²A¢£-
oq©£I{qzx¢Áuxbd o}©¨©£{USmun{se+df{qOmwuxzxo}une¦uxb-oUufo7mneu{} i&oqdfdfoznp-©£eLm:mxoUux¢¨m ¡v±omnOeL ¢£«O ¦uwvAPeqª FÇuf¢¨m
¢®mneun{{}ux¢¨ +eunbOoUuuxbefoqs¢£un¢¨{q¤{q 8mpO bofuwvAOefs{Ae\m{}ui¢£A§Uo}©¨¢®oUuxeunb-e ©¨{A \o}©¨¢Áuwvzx{qPe+znuwv{q
&oqdfdfozxp©£eLm+ªF7{Ipz {IIuxerAu\À=&oqdfdfozxp©¨e\m&o}zxe p-mne\un{¤mnOeL ¢£ ¡vo {qb-e+zxe+- +e:zx{}ux{s {q©o}O
o7Wunzxp- 3uxpzxe\ &o}dfd'ouwvAOese«Oe\m ¢£A§Uo}zx¢¨oqWuxm&{} uxb¢®mzx{}ux{A +{q©Dª5uwvAOet b-e\ ²A¢£-¬o}©¨q{qzx¢£unbd
oq©£©¨{USm"p-m"un{'§Ie+zx¢Á ¡v¦unb-o}uo:-zn{qun{s {I©`mxoUux¢¨m ¡vto:uwvAOe¦¾¡unb-o}uS¢¨mun{'mno vo}¢£A§Uo}zx¢¨oqWu¿3ª
L
y8zn{qun{s {I©9&oqdfdfo'jSp©£eLm
5 5 !"$#% &'(*)+
8, - 5 95. *"#/ &'(0)/1 5. *"#/ &'(0)/+
2 5 3#/456(95. *"#/ &'7*)/1
8, - 5 95. *"#/ &'(0)/1 5. *"#/ &'(0)/+
823#/496: 5+ $3;#%49(95 !"$#% &'(*)+
8, 3#/456(+5. *"#/ &'<*)/+
.=>3#/496: 5+ 5. *"#/ &'<*) 5?A@
8,BDC0E FG49H I4GJ!CH(KH L7*)
M2BDC0E F949H I649J*C(KH L6<*) 5 5+ *"$#/ &'<0)
8,BDC0E FG49H I4GJ!CH(KH L7*)
N2BDC0E F949H I649J*C(KH L6<*)OP+5.QR
8, 3#/456(+5. *"#/ &'<*):S 5.?A@
T23#/496: 5+ 5. *"#/ &'<*):. 5?A@
8,BDC0E FG49H I4GJ!CH(KH L7*):U
FA§Uo}zx¢®o}Wuxm
V $3#/49(XWZY A
V [W<\ A] $3#/49(XW(^`_
V 8 $3#/49(XW(^ A] XW(^`_
V = !"$#% &';Wa-^ cb 3#/456
V M b 3;#%49O6+XY A
VDN; BDC0E F949H I649J*C(KH L6;Wdfeg_<] $3#/49(-^`_
V T !"$#% &'(*)c[W7\g_<] *"$#/ &'(0)hXW(^ *"$#/ &'WdXW
VDi; jWb 3#/45<[W<\ A
@<¢¨qpzxe° Aunzxp- 3uxpzneL&oqdd'o §qe+zmn¢£{I¦{} =mn¢£-q©¨eÇzn¢£une\zUd p©£un¢¨©¨eÇzneLoqse\zxm =¢`oq- 1p-oq²-zn{qun{}
+{q©
Gk !"#$%&ml & !Sn !Po qp &+rn ts Ruwv !E! ! %
@<¢¨qpzxe& I¢£§Ie\m8unbe {Idf©£e+uneWuxznp- unpzxe\&o}dfd'o:mnPe\ ¢£«O \oUun¢¨{q{} unbe 0¢9oq- 1p-oq²'zn{qun{s {I©[ª
jSp©£eLmse+«-¢¨'uxbezx{}ux{A +{q©=oqzneApd:Oe\zneLiun{xTqª~{I-mwuxzxoq¢£WumSse«O¢£-'unbe ¢£A§Uo}zx¢¨oqWuo}zxe
©®o}Pe+©¨e\XViux{V i ª &o}dfd'o'znp-©£e e«-eLm°otzx{}un{s +{q©=muxo}une: bOo}IeqªSa!b{Wmezxp©¨e\m°p-mnezne\©¨o}un¢¨{q-m
b-¢¨ b±d'o} un{-bWvsmn¢¨ \o}©Y{Is|we\ uxm¾¡-oqqe'uo}©¨eqÀ-oqqet +{qWune\Wu¿3Àe+rs +e+sux¢£{I-m{Iz dfe\mxmxo}qeLm+ª¬½¬{qzxe
-zneL ¢®me\©£vIÀ1 $3#/49`´zne\©¨o}un¢¨{q mwuoUuxe\mfuxb-oUu¦-oqqeA {q {sse´¢®m'¢£ zxe\oI zx¢£uned{sse
¾-o}Ieuo}©¨e:zx¢¨qbWuxm¿zy [f zxe+©®oUux¢£{I7muxoUuxe\miotzxe\oI¤zx¢£IbIu6y H6:[T¾zneLmPe\ un¢¨§qe\©£v
LALNMPO#QSR!TU
3;#%49O6< =¿&zne\©¨o}un¢¨{q muxo}une\munb-o}uo¤zxe\oI ¾¡zxe\mnOeL 3un¢¨§qe\©£v1zx¢ÁuxeL¿e+r e+un¢¨{q±b-oIm{s + +pzneL
¡{IzS-oqqe+¬{q4{sse(ry*. *"#/ &'Z*)1zne\©¨o}un¢¨{q¤mwuoUuxe\m!uxb-oUu°ofOo}qe& ¡zo}dfe0) ¾[ofbAvAmn¢® +o}©
Oo}qe ¿ {Iznzxe\mnO{I-s¢¨&un{ §W¢¨znunp-oq©--oqqer¦e+rA¢®muxmY{I'{sse.ryBDC0E FG49H I4GJ!CH(KH Lx0)<zxe+©®oUux¢£{I
muxo}uneLm!unb-o}uS-o}Ie+¬¢¨mS¢£4¢¨W§Uoq©£¢®oUux¢£{I4b-oqmne¢¨{Izxe+z!unbOoUu-oqqei ¡zo}dfe*)¬¢£©¨©=Pe oq \ eLmnmn¢£-©£e&¢¨
zxe\oI zx¢£unedf{sse:{I¬{sse ry$?A@-7zne\©¨o}un¢¨{qmuxo}une\munbOoUu°Oo}qe¢®mi{}ui¢£7¢£A§Uo}©¨¢¨-oUun¢¨{q¤-b-oqmneqª
Fdf©¨e+dfe\IuoUux¢£{I4¾¢£¦oqznzo vsm+À P{A{q©¨e\o}Om+ÀWm¢¨q-oq©¨m\Àª¨ª£ª¿ {} Punb{Wmezxe+©®oUux¢£{I-m¢¨m8se«--e\fAvuxbeSoqmnOeL 3um+ª
a{±se+©¨euxe¤{qzun{ oI/o1zxe+©®oUux¢£{I ¢¨ o1zxp©¨e4euxoq¢£©®mfb{U¢¨mfd'oqeuxbe¬ {Iznzxe\mnP{q-s¢¨1mwuoUune
bOo}Ieqª @{IzSeroqd-©£eIÀ 3#/456<1zne\©¨o}un¢¨{q¢£¤©¨e ubOo}-4mn¢¨se-psu{quS¢£4zx¢£IbIuSbOo}-4mn¢¨se
{q <ofzxp©¨e&muxo}uneLm"unb-o}uunbezxe\oI zx¢Áuxe°zx¢¨qbWu"bOoqm!Pe+e+4©¨{Imu ¡{qz-oqqe1¤{q{sse(¥ªYjp©¨e\m(io}O
x&mwuoUuxei \oqmne°be\znei{ssezne Wpe\muxm"zxe\oqoq \ e\mxm8 ¡{qzo-o}Ie°o}O¦uxb¢¨m!Oo}qei¢®m" +pzxzne\Iux©£v'pOmeL
¢¨¦zxe\oI¾G\¿¥{IzYzx¢Áuxe:¾9x\¿Ydf{AeAvoq{}uxbe+z{sseqªjSp©£eLmSx8}À = o}OcT°mwuoUuxe +oImeSb-e+zxe
-{Ae"d'o}²qeLmYo&zx¢Áuxe{q¦o&-oqqeSo}O uxb¢®mY-oqqe¢®mS¾W¿¥e\¢Áuxbe+z"oq + +e\mxmeL ¢£unb'zx¢£une ¾G8L¿{qzYzxe\oI
¾G = ¿<Av o}{qunbe\z¥{sse+!{qzS¾ \¿oI + eLmnmne\ Av¢Áume\©Á ¥¾¡-{Ae¿<¢¨zxe\oIdf{sse¾9xT ¿3ª2@¢¨-oq©£©¨vqÀIznp©¨e\m
M o}OZxNmwuoUuxe"zxe\mnPe\ 3ux¢£§Ie+©¨v&unbe¢¨A§Uo}©¨¢¨o}un¢¨{q©£{A{I:{q O-oqqe {I¢£eLmo}- unbeIzxoqWu<{q Pzxe\oI zx¢Áuxe
oI + +e\mxmYbe\to}©¨©O¢¨A§Uo}©¨¢¨o}un¢¨{q-m"o}zxeSd'oqeqª8¯°e°mnb{Ip©¨¦{}ux¢¨ +eSunbOoUuzxp©¨exN° +{qWuxoq¢£Om8o-e+Io}un¢¨{q0ª
a!b-¢¨m¥ b-oqqeun{&uxbe!pzxe&o}dfd'o° ¡{qzxdfoq©£¢®mnd5¾¡b¢® bf¢¨m¢£unb{IpsuYq©¨{qOo}©s {I-s¢£un¢¨{qO¿<eLoqmnezx{}ux{s {q©
e\mx zx¢£sux¢£{I0ª¥½¤{qzxe+{U§Ie+zunb¢®me+rWuxe+-mn¢¨{q4s{Ae\m!{qu!¢¨df-oq uS§qe\zn¢£«O +o}un¢¨{qo}-unzo}Om©®oUux¢£{I0ª
F¬¢¨A§Uo}zx¢¨oqIuise«--¢Áux¢£{I0À9o}¤{U§qe\zn©¨¢¨qeLzxe+©®oUux¢£{I¤©£¢¨²qe 3#/45ZaW'erszxe\mxmeLm!unb-e {s + +pz
zxe+O eApd:Oe\z°{q 8sÇp©¨euxmimxoUun¢®m ¡vW¢¨¦zxe+©®oUux¢£{I¬¢£unb¬I¢£§Ie+oqznIpdfe+Wuxm¾ W¦ \o}¤Pe:P{qp--¤ux{o}Av
§Uoq©£pe ¿3ªS~{q-munzo}¢¨Wu 3#/457[W Y AmwuoUuxe\m!uxb-oUuS ¡{Izof-oqqe=À-unbe\zne¢®mSo}udf{ImuS{qe{sse
7mp- btunb-o}u 3#/45¬e+rs¢¨muxm\ª ¢Áuxb¢£uxbe&zn{qun{s {I©[ÀW¢£u!¢®m!e Wp¢¨§Uo}©¨e+Wu"un{fmno vfuxb-oUuoUuSo}Av
ux¢£dfeIÀAo}udf{Imu{Ie-{Ae:¾¡-{Ae=¿8 +o}tzn¢£une°{q¦-oqqePª8~{q-munzo}¢¨WuSVmwuoUuneLmYuxb-oUu!oUu"d{Wmwu"{qe
-{Ae +oqbOo §qezxe\oq zx¢Áuxe&oI + +e\mxm{q¬of-oqqeIª1VD:mwuoUuxe\muxb-oUu°¢Á Yo'{sse b-oqmSo¦zneLoq4oq \ e\mxm{I4o
Oo}qeIÀs{f{}uxbe+zS{Ie&b-o §qe&zx¢Áuxeoq \ e\mxmun{'¢£u\ªUV 8mwuoUuxe\m"unb-ezne\§qe+zmnei \oqmneqªPV = ¾[ {Id ¢¨e\¢£unbVD
oq--VD8 ¿Smuxo}uneLmSuxb-oUui ¡{qzie\oI b¤-o}Ie ¢¨zxe\oq4{Iz°zxe\oI zx¢£unedf{sseqÀ9o¦-{Ae:d:p-mwuib-o §qeot +{qAv{q
¢£u'¾o¦Oo}qe ¡zxoqdfeL¿3ªV M beL ²AmSunb-o}u&otzneLoq¬oq-¬otzn¢£une-o}Ie o}p-©Áumi \o}-{}u°Pefm¢¨d p©£uxoqe+{Ip-mn©£v
euneL 3uxe\7{q7o-oqqeqª<V Nmuxo}uneLmuxb-oUu&¢¨7¢¨A§ oq©£¢®o}un¢¨{q-b-oqmneqÀ`uxbe:-{AebOo §W¢¨tunzx¢£Iqe+zxe\¬¢£A§Uo}©¨¢Á
-oUun¢¨{q¬mnb{Ip©¨¬{}ubOo §qezxe\oI zx¢Áuxeoq \ e\mxm!ux{¦unb-¢¨m°-o}IeqªVDTmuxoUuxe\mSunb-o}u°¢£ ¥unbe\zne¢®m°d{Izneunb-oq
{Ie +{qAv{q 8o'-oqqeqÀOunb-e+v4o}zxeunbemnoqdfeqª @<¢¨-o}©¨©£vV i be\ ²smSunb-o}uioUui©£eLoqmu°o¦ +{qAv{q Ye\oI b¤-o}Ie
e+rs¢¨muxm!¢¨unbemnvsmwuxe+d4ª
FA§Uo}zx¢¨oqWu= be\ ²A¢¨!¢¨ms{qe¥Av& {I-m¢®se\zn¢¨"unbe8e³`e\ 3u{} se\oI bizxp©¨e¥{U§qe\z`unbeY{s \ pzxe+- +e¥Apd Pe+z
{q <eLoq b4zxe+©®oUun¢¨{q=ª@{IzSero}df©¨eqÀP {I-m¢®se\zV
ª"a!be mn{q©¨eznp-©£e&uxb-oUuS¢¨df-oq uxm $3;#%497[Wo}zxe
zxp©¨e\mZ o}- N ¾¡Pe\ +oqp-mne¦unb-e+vb-o §qeos¢£³Pe\zne\Wu:{s + +pzne\- etWp-d Pe+z{} . 3#/456¢¨ ©¨e u
oq-¬zx¢¨qbWub-o}-emn¢¨eL¿3ªfjp©¨eh seL zxe\oImeLm $3#/49h'WtWv¬op-¢Áub¢¨©£eh N ¢£O zxe+dfe+Wuxm
¢£u\ª¦a!b-e+zxe ¡{qzxehV ¢®m&unzx¢£§A¢®o}©¨©£v¬mxoUux¢¨m«-eLAv7oq©£©¥zxp©¨e\m&e+rs +e+su7 N ª:>"psu7 N mxoUun¢®m«-e\moV N zxe+df¢®me
¾BDC0E FG49H I4GJ!CH(K LwW`[ e _W¿3ª&a!bWpOm+À`Pe ¡{qzxeZxNo}©¨¢® +oUux¢£{I0À 3#/45 [d^_to}O
$3;#%49(-^ Ao} une+z6yVi¢®m"unbAp-mS§qe+zx¢£«-e\t¢£¤o}Avt \oqmneqª
<%' (1%=< (&%
ef{Umnb{Uoq7{U§Ie+zx§W¢¨e+{q 8uxbeunzo}-mn©¨o}un¢¨{q7zn{s +e\mxmioq-¬¢£uxm o}©¨¢® +oUux¢£{I¬ux{zxp©¨e {} unbe
-zn{qun{s {I©[ª
L
rn ')% E&!Un & 'K 6'
azo}-mn©¨o}un¢¨{q{} Y&o}dfd'ofznp-©£eLm¢£Wux{to}¤o}pun{qd'o}un{q4¢®mPe+zn ¡{qzxdeLp-m¢¨¦ouxe\ b¢% Wpe¢¨-mn¢£zxe\Av
°mPe\ u¯°zn¢¨e+Wuxe\¤yYzx{qIzxoqdfd¢¨ 4K7ǪGFÇuid'oq²qe\m°¢£uiP{Imxm¢¨©¨eux{mne+-oqzxo}une\©£v4se«Oe *noqmnPe\ 3um,uxb-oUu
oqznep-mnp-o}©¨©£vmnzxe\oqunbzx{qpIb{qpu=unb-e"-zn{Iqzo}d ¾©£¢¨²qe!mnvWO bzn{I¢;8\oUux¢£{I0ÀU {Idd:p¢® +o}un¢¨{q{Izdfe+df{Iznv
d'oq-o}Ie+dfe+Wu¿ªmnp-o}©<zx{qqzo}dfdf¢¨'s{Ae\mS-{}u{q³Pe\z°o}Avdfe\o}4ux{¦qzx{qp-4unbe\d ¢¨¬o}pun{q-{qdf{qp-m
e\Wun¢£un¢¨e\mt¾¡ ¡p- un¢¨{q0Àdf{ssp©¨et{qz {qs|weL 3u¿ªmn¢£7mnOeL 3u¯°zx¢£e\Iuxe\1zx{qIzxoqddf¢¨-À<o4zx{qqzo}d ¢¨m
d'oIse4{} o7Ooqmne-zn{Iqzo}d o}O {Ie4{qz'df{qzxe¤oqmnOeL 3uxmuxb-oUutmneut +zn{WmnmÇzn{Iqzo}d zn{IOe\zux¢£eLm+ª^
"e\o §Ie+z¥dfe+zxqeLmYzx{qPe+znun¢¨e\mse\mx zx¢¨OeL'¢£¦unb{WmeoImPe\ uxm¢Áuxb¢¨'unbei-oImeS-zn{Iqzo}d4ªa{unzo}Omw ¡{Iznd
otb¢¨qbsÇ©£e\§qe\©=zx{}ux{A +{q©¢£Wun{o}1o}psux{qd'oUux{q¤"e p-mneuw"{oImPe\ uxmise\mx zx¢£-¢£tzneLmPe\ un¢¨§qe+©¨v !),
oq- )* '& %%))-ª°a!be+v4zx{ssp- e e+©¨e+dfe+Wuxoqznvoq un¢¨{q-mb¢¨ b¤pOme ¡p- 3ux¢£{I-o}©¨¢£un¢¨e\mS{q ¥unbe
zxpWun¢¨dfeSe+A§A¢¨zn{Idfe+Wu\ªT +{qdf¢¨©¨o}un¢¨{q¦mune+fuxzxoq-m ¡{qzxdfm¥unbe\d ¢£Wun{:o}3 C) ) b¢® b¦ +oq¦Oe
©¨{IoIse\¢¨Iux{unbemnvsmwuxe+d4ª
Gk rn ')% E&!Un !Po # %
et-{U mnb{Ub{U znp-©£e {q unbe4&o}dfd'o4 ¡{qzxd'o}©¨¢J8LoUux¢£{I1{q !unbe0¢!o}- 1p-o}²zx{}ux{s {q©8¢¨m
uxzxoq-mn©¨o}une\4¢¨Wun{¦¢£uxm°©¨{U!D©¨e+§Ie+©= +{qpWune\z-oqzuLªa!be «-zxmu°oImPe\ u\ÀP ),ÁÀPI¢£§Ie\mSotb¢¨Iu&o}P{qpsuib{U
uxbezxp©¨e7 \o} Pe¢¨-me\zuxe\ ¢¨ uxbezxpWun¢¨dfee+A§A¢¨zn{Idfe+Wu\ª @-{qz ¢Áu¢¨mzn¢£uuxe+ *
! "B,3ª FÇuimwuoUuneLm!unbOoUu ¢®muxbe&unzx¢£Iqe\zn¢¨fzne\©¨o}un¢¨{q¢£4uxb-oUuSzxp©¨e\m\ÀsunbOoUu¢®m!un{
mxo vSuxb-oUu<¢£Wuxzn{ssp- un¢¨{q{q sunb¢®me+©¨e+dfe+Wu¢¨uxbe8d:p©Áux¢¨mneu<¢£©¨©Amwuo}znu={}uxbe+z<znp-©£eYzxe+©®oUux¢£{I-m+e+§Uoq©£p-o}un¢¨{q0ª
a!be7meL {qO/oImPe\ u\À )* *' SS%))OÀSmwuoUuxe\m'b{Uzne\©¨o}un¢¨{q-m'oqzne4¢¨df©£e\dfe+WuneL ¢Áuxb¢£
uxbe¬zxpWun¢¨dfe¬e+A§A¢£zx{q-de\Wu\ªF er e\znu¦{} &unb¢®mtoImPe\ ute\e\seL un{unzo}Om©®oUuxe-¢®m¦I¢£§Ie+ ¢¨
«Oqpzxe H ª 8oI b4unzo}-mn©¨o}un¢¨{q4zxp©£e ¡{q©¨©£{USm!uxbe OoUuuxe+zx *())*%$##% /?%)$ ):)+ ! ,3ª @{qz
eLoq b -o}uune\zn=Àunbe7oqmnOeL 3umuxo}uneLmtoq un¢¨{q-m'un{/{-ª 3ux¢£{I-m¦pOme¬-zn¢¨df¢Áux¢£§Ie\m' ¡zx{qd unb-ezxpWun¢¨de
e\A§W¢¨zx{qdfe+WuLª *'&)(
*+',+-.0/21 ,-oUunune+zx mwuoUuxe\m'oq un¢¨{q-mux{±erse\ +psune¤¢¨ {qzse+zux{ be\ ²
uxbe4ers¢®mwuxe+- +e{q Sunb¢®mfzxe+©®oUun¢¨{q=ª $*
*',+-3./54'%.-!,+6(
*',+-77/1 ,t-o}uuxe+zx/muxoUuxe\m
oI 3ux¢£{I-miun{4erseL psuxe'¢Á Sozne\©¨o}un¢¨{q1ers¢®mwum&¢£©¨e u b-oq-se'mn¢¨se'-psu {qu&zx¢¨qbWub-o}O7mn¢¨e'{} ozxp©¨eqª
a!b-ezxe+§Ie+zme ¡{qz*8-!,+6(
*',+-.0/134'%
*','-37/ ,3ª@-{qz&e\oI b-o}uuxe+zx0À9unb-e+zxe:¢®momneu
{q Soq 3ux¢£{I-mb-¢¨ b oqzne'{q "uw"{¬²A¢¨-my()*S)¦¾¡zx¢Áunune+*2( !# 91 ,w¿oq-±muxoUuxet b-oqqe¬¾zn¢£uuxe+ *':
!+ <; ,¿3ª¥FuneLmwud'o}²Ie\m!oq un¢¨{q-m ¡{I©£©¨{U¢£- ¢£uSp-se\z"¢£uxm +{q-¢Áux¢£{I0ªY 3ux¢£{I-m! {sse&¢¨m"zx¢Áunune\¢¨o
+©¨oImnmn¢® ©®o}Ip-o}Ie¾¢£4{Ipzero}df©¨e ~=>=&¿3ª
a!beunzo}-mn©®oUun¢¨{q'-zn{s eLmnm¥une\muxm"mnp- + +e\mxm¢¨§qe\©£v:unbe°-oUunune\zn'{q 0e\oq bfuxzxoq-m ¡{qzxdfo}un¢¨{q'oqm8unb-e+v'o}s
Pe\oqz¥¢£:unb-eSoqmnOeL 3u\ª FÇ 9o°d'o}ux b{A \ pzm\ÀUunzo}-m ¡{qzxd'oUux¢£{I:oq un¢¨{q-moqzneoq-se\ un{iunb-ezneLmp©£un¢¨ {sse
¢£unb§Uo}zx¢¨oq©¨e\m!mp--mwux¢ÁuxpsuneL9ªYa!bAp-m"unb-ei{Izxe+z!{} unzo}-m ¡{qzxd'oUun¢¨{qOm8¢£unb¢¨unbeoqmnPe\ 3uSse+une\zndf¢¨e\m
uxbe&me Ip-e+Wun¢®o}©P{qzse+z{} oI 3ux¢£{I-m8¢¨¦uxbe&zneLmp-©Áux¢£ {sseIªa!b-e°©¨¢¨mu!{} oI 3un¢¨{qOmY ¡zx{qdj(!uxzxoq-m©®oUux¢£{I
¢®m!q¢¨§qe\¢¨«-qp-znesª
? @):% BA^.'3 :%
a!b-eizxpWun¢¨dfe&e+A§A¢£zx{qdfe\Iu!¢®m {qdfP{Imne\t{} =uw"{-o}znuxm¥o} C) )5% &'¾[ 3 wª¥«Oqpzxei-À2CEDF¡¿
oq-o ,;!, !%)*GCIH8Fªta!b-e¦o}psux{qd'oUux{qe+I¢£-e¢®m oI 3ux¢£§Ie\7be+±o}e\§qe+Wu¢®mzxe\ e\¢£§Ie\9À¢Áu
eune\zndf¢¨e\moI 3ux¢£{I-m"un{ferseL psuxe¢Áuxb¢¨Wune\zn-oq©0mwuoUuxe\mo}O¦uxbe+4erseL psuxe\m"unb-{Imneoq 3ux¢£{I-m\ª
LALNMPO#QSR!TU
& (
"
-21
##%
($+- (
!*+
-2101
& (
-21
##%
( +,
+++%+6(
- 131
-!,6(
-21
-!,6("!8-*!',"-#!'
-1
'%$
-
##%
:%,
'%
**+,! ( -&
1';(
-!,6(
-21)+%
-
##%
:%,
'%! + ( -&
1';
: +,
+++%++6(
- 1';*
+
-+,+%-+
+
-'.
##%
:%,
'%
+,
# ( -+/
-0.1
1';(
@<¢¨qpzxe H 0ioUuo:zxe+-zneLme\IuoUux¢£{IoqmnPe\ 3ue+rs +e+zxsue+eLse\ ¡{Iz
L
5 5 !"$#% &'(*)+
8, - 5 5. *"#/ &'(0) 5. *"#/ &'(0)
¶ 2¡: º » ¶ 1 ¶
($+- (
+ *'&
-'.101
jeLoq -oqqe o}p©£uzxe\ +e+¢¨§qe\ ¡{IzOo}qeT{I
{sse(
( +,
+++%+6(
-+ 101 Fuxo}-©£e +,
++`À}©¨{A{q²f ¡{Iz!oq{}uxbe+z"{sse
be+zxe4-o}IeZ ¢®m¢£ zxe\oq df{Ae¾
muxoUuxeL¿
(-'.#7-+ 1 ~beL ²'unb-o}u
o}-
o}zxe&s¢Á³`e+zxe+Wu
:%,
'%
**, ( -0.1
1'; y¥o}IeD ¡zxoqdeYoq©£©¨{s +o}un¢¨{qi{q{sseP
¡{qz0Oo}qe
:%,
'%! + (-'.
1'; y¥o}Ief{q:{sse+ Io}¢¨-m &oI + eLmnmzx¢£IbIu
: +,
+++%++6(
-'.1 1'; Wux{qzxe8¢¨ +,
+uxoq©£e!oq \ eLmnm=zn¢¨qbWudf{sA
¢£«O +o}un¢¨{q
:%,
'%
+,
( - + -'.
1' ;
yYbAvsm¢® +oq©= {IAv¦ ¡zx{qd*Oo}qe{q&un{'Oo}qe
¤{q
@¢¨qp-zne YjSp©£e<(io}O¦uxzxoq-m©®oUuxe\ {sse
un¢¨{q-mip-mne'o¦q©¨{qOo}©¥s¢¨zneL 3un{Iznvux{df{ss¢£ ¡vmvsmune\d mwuoUuneLm<C F¾oIszxe\mxm°mn-oq +e\m\À9-o}Ie:oI + eLmnm
zx¢¨qbWuxm\À-e+ux }ª¿4o}O4un{tmun{Izne zn{qun{s {I©0¢¨s ¡{qzxd'oUun¢¨{q C +Fªa!b¢®mI©£{I-o}©=¢£zxe\ un{qzxvt¢®mime\e+¤¢®se+Wun¢® +oq©£©¨v
Av¬eLoq b7{sseqªEFÇuunzx¢£Iqe\zxmi {Idd:p¢® +o}un¢¨{q7oq-1oUuoe+r b-o}Ie\m°Oe+uwe\e+1{sse\m\ªfa!b¢¨m&I©£{I-o}©
¢£zxe\ un{qzxv \o}Pe8¢¨d-©£e\de\Wune\&¢¨§Uo}zx¢£{Ip-m9!o vsm0se+Pe+Os¢£-S{q&uxbe8o §Uo}¢¨©¨oq©¨e¥euw"{qzx²uneL b{I©£{Iqvqª
()=+ T!<=#78%3.
eib-o §qe°¢£Wunzx{ssp- +e\to ¡zo}dfe+"{qzx² ¡{Iz"unbe&se\mx zx¢¨sun¢¨{q{} <A¼i½ -zn{qun{s {I©¨m"o}-¦unbe\¢£z!¢¨df©£e\dfe+s
uoUux¢£{I0ª2FÇu!¢®m"-oqmne\¦pO{ItuxbeWunzxp- 3uxpzxe\4&o}dfd'o ¡{qzxd'o}©¨¢¨mnd ¡{qz!o}OmwuxzxoI 3u!zn{qun{s {I©Pe\mx zx¢£sux¢£{I
oq-1pP{qunb-etmnOeL 3unD{Izn¢¨e+WuneL1¢£-mn¢¨zneL1uneL b¢% Ip-efun{¤uxzxoq-m©®oUuxefunb¢®m oq-munzoq 3ux¢£{I7¢¨Wun{¬o¬ +{qs
+zne+une¦¢¨df©¨e+dfe+Wuxo}un¢¨{q0ªa{oImPe\ uxm\ÀY {IIuxzn{I©oq-±oUuo¬zxe+zxe\mne+WuoUun¢¨{q=À<oqzne¦pOmeLun{1oq b¢¨e+§Ie
uxb¢®m!unzo}-mn©®oUun¢¨{q=ª
a!be'¢¨df©¨e+dfe+Wuxo}un¢¨{q{} unb¢®m& ¡zo}dfe+"{qzx²¤¢®m pzxzxe+Wun©¨v¤¢£zx{qIzneLmnmip-mn¢¨¤o +©£pOmwuxe+z{q !s½¤y
r$KI&{Izn²smuxoUux¢£{I-m<znp-¢¨unb-e)0¢¨Apsr{IOe\zxo}un¢¨mvsmune\doq-f¢£Wuxe+z {q-e\ une\p-mn¢¨&unbe&s +oq©¨oq©¨e
~{Ibe+zxe+Wu FWuxe+zn oq ei¾[-~<F¿ªI¯°unb-e§Ie+zx¢Á«O \oUux¢£{Im¢®seqÀ uxbe! be\ ²A¢¨o}©¨q{Izn¢£unb-d mn²qe+ux beL¢¨ meL 3ux¢£{I
ªD:mnb{qp©®Oee\mx zx¢£Pe\t ¡{qzxd'o}©¨vto}-zx{U§qeL9ª
F unb-e ¡punpzxeqÀ"unb-¢¨mfzx{qIzxoqdfdfoq©¨eA¼i½mnvsmwuxe+d ¢¨©¨©Oe¤p-mne\ un{ +{qdf-oqznezn{qun{s {I©¨m{I
uxbe:mxo}dfeo}z b¢Áuxe\ unpzxeqªSa!b¢®m°{Ip©¨o}©¨©£{U p-mun{¦e+rAunzoq 3uizx{}un{s +{q©0zx{}«O©£eLmS¢¨{qzse\zun{dfoq²qe o
LALNMPO#QSR!TU
Test Action Test Action 1 Action 2
[d]
[c]
[b]
[a]
Automaton Engine Events
Global Directory
Address Space
Protocol Data
R R
Node 1
Node 2
Copy Copy Triggering
Access rights Change
@<¢£Ipzxe& ¥yYzx{}un{s +{q©`erse\ +psun¢¨{q4e\W§A¢¨zn{Idfe+Wu
df{Iznemnvsmwuxe+d'oUux¢¨ ¦¾{qzSe\§qe\¬o}psux{qd'oUux¢¨ L¿! b{q¢® e{q ¥zn{qun{s {I©` ¡{qzio'q¢¨§qe\4-oUuxo'mnb-oqzn¢¨'-o}uune\zn¤{q
o-oqzxoq©£©¨e+©9oq©¨¢¨ \oUun¢¨{q=ª
@ U!"
4£g%7OªDyªC>!o}}unzxe°o}O:0 ª =e°½¤l+uxo vIe+zLª0yYzx{qqzo}dfdf¢¨Av¦½¤p©£un¢®me+u!azxoq-m ¡{qzxdfo}un¢¨{q0ª
!)$=)"@/ ¤À-I-¾wg ¿KPgqgIgqÀIoq0ª9g\Iqª
4D7OªP>iªY~"oqzuxe+zLÀ-ªfª2>e\e+uu\À"o}- ªP"oqe+e\O{Ae\©[ª Fdf©£e\dfe+Wuxo}un¢¨{q/oq-±Pe+zn ¡{qzxd'o}- +e
{q "½¤p-¢£=ªF +! ! )" / '$! A'S) !) &%'&,JS3À
Oo}qeLm&gLDA H ªAmxm{s +¢¨o}un¢¨{q¦ ¡{Iz°~{qdfpsux¢£-¦½¬oq b¢¨e\znvtF¯°y"`ÀP¯i 3uLª9g\Igqª
479ª"~b-o}Oszxo-À<>iªYj¢® b-o}zm\Àoq-Oª8jª o}zxp-m\ª ae\oqO{qu =oqqpOo}qe4ApP{qznu' ¡{qz zx¢Áux¢£
½¬e+df{qzxv ~{qb-e+zxe+- +ey8zn{qun{s {I©¨m\ª F / SS S A %
S! & '&,J %)) "!UÀ½¬o vg\qIª
L
4H 7&yª$@-zxoIseu!o}-:0:ª 0e&½¤luo vqe\z\ª=WuxznpO 3unp-zneLt&o}dfd'oªP S %&! P ' C)*% E qÀ
-gI¾DAW¿-D}I CDKq-À qp-©£v¬gLqKª
47G0:ª >iªipOmwuo §Amn{q=ª1a!be4s +oq©¨oq©¨e4~{qb-e+zxe+WuFWune\z oI eo}- jSe+©®oUuneL/Wuo}--o}zm y8zn{q|we\ 3um+ª
%}À--oqqe\mig+6 CDgqÀC@e\0ª0gLqDª
47 8ªFÇ ux{sseqÀ -ªOyª`A¢¨Ib0ÀPoq- fª 0¢Dªs {IOe~{I-mn¢¨mune\- v ! >"zn¢®sqe Oe+uwe\e+¬je\©£eLoqmne~{qs
mn¢®mwuxe+- +voq- YWunzxv~{q-mn¢¨mune\- vIª F + !! )")" /? , / '
,,JS, /?, )" & 9/?!")!S)CSÀIpe'gLqq-ª
47&yª &e\©£e\be+zLÀ0ª7Yª~{ r9À=`ª0°"oqzn²Uoq-oqm\À0o}- ª P!o}e+-e+P{We\©[ªa=zxe\oI½¬oqzn²sm 0¢®munzx¢£pune\
sb-o}zxe\¤½¤e\df{qzxv{I7Wuxoq-oqzx {qzx²smwuoUun¢¨{qOmSo}-1¯°Oe\zxo}un¢¨tAvsmwuxe+d'm\ª F #!!! E
)"$I) S %% S%%&!+À--oqqe\migIgL`g\-gqÀ Ioq0ª9g\I H ª
4K7ª&¢® S8Lo}©¨e\m\À-ª o}df¢¨-Àq ª}½¤e+Osbe+²Uoqz\ÀI~°ª}½¬oqe\o-ÀI~°ª 0{IOeLm+À OªÇ½±ª ={q¢¨}ux¢£e\z\À}oq- OªFz
¢¨0ªq°mPe\ uÇ{qzx¢£e\Wune\izx{qIzxoqdfd¢¨Oª#F½±ªLS²sm¢£uoq-`ª\½¬o}uxmnp{q²Uo-À\eLs¢Áux{qzm+À
%!S)
S)*! )" C '! S%%&!+ÀU§q{q©¨pdfeSgD H g{q A!S)C )*S
' C) S= S%&!+À-o}Ie\m DD6 $D H DsÀ IvA§qmn²WvA©À@<¢£©®o}O9À- `g\ qp-efg\qAAªAzx¢¨qe\z\ª
47 ª=oqbU|w{qdfzx¢o}-fa&ª}yYzx¢¨{q©Dª ¯ } mnb-oqzneL §A¢¨zuxp-o}©sdfe+df{Iznv ¡{Izunbe¢£yO~ =DbAvAPe+z pPeqª
A!S)C )S= P ' C)*%G S%&!+À-q
H HH
g IÀ-gLqDª
4¨g#67 fª 0¢Dª $"$! 3A),$3 E A#%S, +'&,; C,)'&+!!%!°ªPy8b0ª0:ªAa!be\mn¢¨m\À 8oq©£e
¢¨§qe+zmn¢ÁuwvIÀ-Ae+suLª0g\Kq-ª
4¨gqg%7iyª`a=p-©£©¨d'o}0À -ªPa=pzxe\z\ÀOª-½¬ ~{qz Wp{so}©¨eqÀ Oª 0e\zxe\o}p=À-ª9~b¢Áununpzx¢DÀOo}O4ª&>!oq ²`ª@{Iz
d'oq©¨m½¤e+unb{smY´yYzoq 3ux¢¨ \o}©9a{W{I©` ¡{qz¯& Fd-©£e\de\Wun{qzm\ªAF +! ! =)"!)" "
"$ '9$# )G ' '%) )*ÀO½¬o v¤g\IWAª
4¨g+D7 fª'e+b-oqzxo-Àq`ªF{Ib-o}zoÀ1 ªq½¤¢¨vIo8Lo "o-ÀLoq- fª8o}d'o}df{}ux{-ª @zo}dfe\{Izn²i ¡{qz~pOmwux{qdf¢J8\¢£-
~{Ibe+zxe+O eiyYzn{qun{s {I©¨m"{q 20°¢¨munzx¢¨psuneL @<¢¨©£e:~"oI be\m\ª F #!!! %!)" S)S
) , P S%%&! ) C) P ' C)3)* &%! !UÀ<Oo}qeLmGKqA6-À=½¬o v
gLqIª
LALNMPO#QSR!TU
Unité de recherche INRIA Lorraine, Technopôle de Nancy-Brabois, Campus scientifique, 615 rue du Jardin Botanique, BP 101, 54600 VILLERS LÈS NANCY
Unité de recherche INRIA Rennes, Irisa, Campus universitaire de Beaulieu, 35042 RENNES Cedex Unité de recherche INRIA Rhône-Alpes, 655, avenue de l’Europe, 38330 MONTBONNOT ST MARTIN Unité de recherche INRIA Rocquencourt, Domaine de Voluceau, Rocquencourt, BP 105, 78153 LE CHESNAY Cedex
Unité de recherche INRIA Sophia-Antipolis, 2004 route des Lucioles, BP 93, 06902 SOPHIA-ANTIPOLIS Cedex
Éditeur
INRIA, Domaine de Voluceau, Rocquencourt, BP 105, 78153 LE CHESNAY Cedex (France)
D
ISSN 0249-6399