HAL Id: hal-00383062
https://hal.archives-ouvertes.fr/hal-00383062
Preprint submitted on 12 May 2009
HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub- lished or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.
L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.
The Logic WT_mu
Omer Landry Nguena Timo
To cite this version:
Omer Landry Nguena Timo. The Logic WT_mu. 2009. �hal-00383062�
The Logi WT
µ
Omer-Landry Nguena-Timo
Université Bordeaux 1,LaBRI, CNRS
351 ours de laLibération, 33400Talene-FRANCE
omer-landry.nguena-timolabri.fr
Abstrat
Thepowerof Model-hekingdepends ontheexpressivepowerofmodelsof systems
andmodelsofspeiations.ThepaperintroduesWT
µ
, areal-timelogiwith theleastand thegreatestxpointoperators.WT
µ
isaweaktimed extensionoftheµ
-alulus;itis losed to L
ν
. As Event-reordinglogi, WTµ
desribes properties onEvent-reording automata.WeshowthatWT
µ
ismoreexpressivethanEevent-reordinglogi.Inpartiular,withWT
µ
formulas, one an require ourrenes of an event at all the time instants thatsatises atiming onstraint.We providean exponential-time deisionproedure forthe
model-hekingofWT
µ
.1 Introdution
ThepowerofModel-hekingdepends ontheexpressivepowerofmodelsof systemsand
modelsofspeiations.Ourgoalistopresentanewexpressivexpointlogifordesribing
propertiesonalassofreal-timesystems.Asigniantpropertythatourlogiisableto
desribethe requirement of the ourrenean event in all the time satisfying a timing
onstraint(neessity modaloperator). Wearguethat suh akindofpropertyannotbe
desribedwithEvent-reordinglogi(ERL)[Sor02℄thathasbeenintroduedbySoreafor
desribingpropertythesamelassofreal-time systems.
Real-timesystemsaremodeledwithtimedproesses.Timedproessesarenothingelse
butevent-reordingautomata[AFH99℄withoutanaeptaneondition.Timedproesses
have loalloks eah assoiatedto anevent andsuh alokgathers thetime elapsed
sine the last ourrene of the orresponding event. A timed proess is a nite state
labelled transition systemwhose transitions (
p −→ g,a p ′
)are labelledwith onstraintsonloks and events. A onstraint onloks isjust aonjuntionof omparisons of values
ofalokwithanintegeronstant.Clokareinterpretedoverrealnumbers.Thevalueof
eahlokgrowsontinuouslyandwiththesamerateasthetimeunlessitisreset.When
theproessisin somestate,thetimeelapses ontinuously(the valuesofthelokstoo)
untilaneventours.Then,theproessinstantaneouslyseletsatransitionlabelledwith
that eventandhekswhethertheonstraint(
g
)onthe hosentransitionis satisedbythe values of loks before it resets the lok assoiated to the eventand movesto the
targetstateofthetransition.Iftheonstraintisnotsatised,theproessdoesnothange
thestate.
The logi that we introdue in this paperis alled WT
µ
. The logi WTµ
is a weaktimed extensionofthestandard
µ
-alulus.FormulasofWTµ
areinterpretedovertimed proesses. Timed proesses are nothing else but event-reording automata without anevents,whilemodalitiesofERLareindexedwithpairsmadeofaonstraintandanevent.
They are of WT
µ
are of theformhgi
and[g]
in addition to the lassial modalities ofthe
µ
-alulus indexed with event (hai
and[a]
). Intuitively, a state of a timed proessp
satiseshgiϕ
from a given time-ontext desribed by avaluationv
if by letting timeelapse in it,itis possibleto reah amomentwhen thevaluesofthelokssatisfy
g
andinthatmoment,theformula
ϕ
issatised.Astatep
ofatimedproesssatises[g]ϕ
froma time-ontext
v
ifwhenever startingfromv
welet thetime pass and reah amomentwhen
g
is satisedthenϕ
is satisedin that moment. We onsider themodel-heking problem forWTµ
;that is: Doesatimed proess satisfyaWTµ
formula.We provideanexponential-timedeisionproedureforthat problem.
Weompare WT
µ
with ERL.ERL is also presented[Sor02℄ asatimed extension ofthe
µ
-alulus;andmodelsofERL formulasaretimedproesses.InERL,modalitiesareindexed bothwith aneventand aonstraint(
[g, a]
,hg, ai
).A stateofatimedproessp
satises
hg, aiϕ
from a given time-ontext desribed by avaluationv
if by letting timeelapseinit,itispossiblethattheevent
a
oursinamomentwhenthevaluesofthelokssatisfy
g
andaftertheourreneofa
,theproessgoestoastatethatsatisesϕ
.Astateofatimedproess
p
satises[g, a]ϕ
fromagiventime-ontextdesribedbyavaluationv
ifaftertheourreneof
a
inamomentwhenthevaluesoftheloks(obtainedbylettingtime elapses in
v
) satisfyg
the proess always goes to a statethat satisesϕ
. We willshowthat WT
µ
ismoreexpressivethanERL aseveryformulaofERL anbetranslatedinto an equivalent WT
µ
formula;and there are someformulasof WTµ
that annot betranslated into formulas of ERL. In partiular with WT
µ
, it is possible to requiretheourreneaneventinallthetimesatisfyingatimingonstraint;butitisnotwithERL.
Related results:Logis (TML[HLY91℄,
L t µ
[SS95℄ Lν
[LLW95℄)that enableto de-sribethethe neessity modal operator hasbeenonsidered fordesribing propertieson
timedautomatabutthedeidabilityofthesatisabilityproblemhasnotbeenestablished.
Laroussinieetal.[LLW95℄haveintroduedthelogi
L ν
asamorepowerfullogithantheonein[HLY91,SS95℄butitssatisabilityproblemisstillopenandnodisjuntivenormal
form hasbeenprovided [BCL05℄. Thelogis
L ν
and WTµ
are inomparableastheyare not interpretedoverthe samemodel andL ν
doesnotallowthe least xpoint operator.But, if we restritthe interpretation of
L ν
on timed proesses, we laim thathgiϕ
willhavethesamemeaningasthe
L ν
formulahδi(g ∧ ϕ)
and[g]ϕ
willhavethesamemeaningasthe
L ν
formula[δ](g → ϕ)
.This paper is organisedasfollows:We presentresults forthe model-hekingof the
µ
-alulus in the next setion. We present time proesses in Setion 3. In that setionwealsopresentwellknownoneptsandresultsonerningregion,onstraint,andtimed
abstrat bisimulation.In Setion 4we presentWT
µ
and itssemantis.Weonsider themodel-hekingproblemforWT
µ
inSetion5.InSetion6,wepresentERLandweshowthat WT
µ
is more expressive than ERL. We onlude the paper with future works onWT
µ
.2 Two Player Parity Game and
µ
-alulus Results2.1 Two Player Parity Games and Multi-Parity Games
We present a omplexity result for heking a winning strategy in a twoplayer games
withparityondition.Wealsopresentthenotionoftwomulti-paritygame.
Denition 1 A two player parity game(see [Zie98℄) is a tuple
G = hN E , N A , T ⊆ N 2 , Acc G i
wherehN, T i
is a graph with the nodes (or positions)N = N A ∪ N E
par-titionedinto
N E
andN A
.N E
denotesthesetofnodesoftheplayerEve
andN A
denotesthe set of nodes of the player
Adam
. The winning onditionAcc G ⊆ N ω
, is a parityonditiononthenodes.Thegameisnite if
N
isnite.Aplay between
Eve
andAdam
fromsomenoden ∈ N
proeedsasfollows:ifn ∈ N E
then
Eve
makesahoie of asuessorotherwiseAdam
hooses asuessor; from thissuessor the samerule applies and the play goes on foreverunless one of the parties
annotmakeamove.Aplayisniteifaplayerannotmakeamoveandthenheloosethe
play.Intheasethattheplayisaninnitepath
π = n 0 n 1 n 2 · · ·
,Eve
winsifπ ∈ Acc G
.Otherwise
Adam
isthe winner.Among winning onditionsintrodued in theliterature, we onsider the parity ondition. A strategyσ
forEve
is afuntion assigning to everysequeneofnodes
~n
endinginanoden
fromN E
avertexσ(~n)
whihisasuessorofn
.A play from
n
onsistent withσ
is anite orinnitesequenen 0 n 1 n 2 · · ·
suh thatn i+1 = σ(n i )
foralli
withn i ∈ N E
. Thestrategyσ
iswinning forEve
from thenoden
ifandonlyifalltheplaysstartingin
n
andonsistentwithσ
arewinning.Thestrategiesfor
Adam
is are dened similarly. A node is winning ifthere exists a strategy winningfrom it.A gameis determined ifeverynodeis winning foroneof theplayer.Astrategy
is positional if itdoesnot depend on the sequenesof nodes that were played till now,
butonlyonthepresentnode.Sosuhastrategyfor
Eve
anberepresentedasafuntionσ : N E → N
andidentiedwithahoieofedgesinthegraphof thegame.Now we state the following results on two player games (see [GH82, EJ91, Jur00,
VJ00℄).
Theorem2 Every paritygame isdetermined. Ina twoplayer parity game aplayer has
a winningpositional strategyfrom eahof his nodes.Thereis aneetive proedurethat
deides whois awinner fromagiven node ina nitegame, andthat proedure worksin
time
O |T | ×
2 × |N | d
⌈d/2⌉ !
where,
d
isthe maximalparityindex.2.2 The
µ
-CalulusThe
µ
-alulusintroduedbyKozen[Koz82℄(seealso[AN01℄) isanexpressivetemporallogithat extendsmodallogiwiththegreatest(
ν
)andleast(µ
)xpointoperators.Wepresentthesyntaxand thesemantisof the
µ
-alulus.Thenwestatesomewell knownresultsthatinludetheomplexityofthemodel-hekingproblem,theomplexityofthe
satisabilityproblem andadisjuntivenormalform theorem. The omplexityresultfor
themodel-hekingisobtainedbyredutiontohekingifthere isawinning strategyin
atwoplayerparitygame.
2.2.1 Denitionsand Semantis
Denition 3 The syntax of the
µ
-alulus is dened over a setVar = {X, Y, . . .}
ofvariables, aset
Σ
ofevents.Itisgivenbythefollowinggrammar:ϕ ::= tt |
| X | ϕ ∨ ψ | ϕ ∧ ψ | haiϕ | [a]ϕ | µX.ϕ(X) | νX.ϕ(X )
In theabove,
X ∈ Var
,a ∈ Σ
;andtt
and denote theformula that are alwaystrueand false respetively;
hai
and[a]
denote the existential and the universal modalities indexedwiththeeventa
;theyrepresentexistsa
-suessorandalla
-suessormodalitiesrespetively.Theformulas
µX.ϕ(X )
andνX.ϕ(X )
representrespetivelytheleastandthe greatestxpointformula.Foraformula
ϕ
,thelosure[Koz82℄ofϕ
,sub(ϕ)
isdened asfollows:Denition 4 Thelosure
sub(ϕ)
ofϕ
isthesmallestset offormulassuhthat:• ϕ ∈ sub(ϕ)
•
ifψ 1 ∨ ψ 2 ∈ sub(ϕ)
thebothψ 1 , ψ 2 ∈ sub(ϕ)
•
ifψ 1 ∧ ψ 2 ∈ sub(ϕ)
thebothψ 1 , ψ 2 ∈ sub(ϕ)
•
ifhaiψ ∈ sub(ϕ)
thenψ ∈ sub(ϕ)
•
if[a]ψ ∈ sub(ϕ)
thenψ ∈ sub(ϕ)
•
ifσX.ψ(X ) ∈ sub(ϕ)
thenψ(X ) ∈ sub(ϕ)
,whereσ ∈ {ν, µ}
The formulasin
sub(ϕ)
are alled the subformulas ofϕ
. Fora formulaϕ
,sub(ϕ)
isnite and,bydenition,itisnotlargerthatthenumberofsymbolsusedin
ϕ
.Denition 5 Theset
f ree(ϕ)
offreevariableofaµ
-alulusformulaϕ
isdenedindu-tivelyasfollows:
• f ree(tt ) = f ree(
) = ∅
• f ree(X ) = {X }
• f ree(ϕ ∨ ψ) = f ree(ϕ) ∪ f ree(ψ)
• f ree([a]ϕ) = f ree(haiϕ) = f ree(ϕ)
• f ree(µX.ϕ(X)) = f ree(νX.ϕ(X )) = f ree(ϕ) \ {X}
A variable
X
isfree in aformulaϕ
ifX ∈ f ree(ϕ)
.Denition 6 Avariable
X
isbound inaformulaϕ
ifthereisasubformulaσX.ψ(X)
ofϕ
withσ ∈ {µ, ν}
.Denition 7(Wellnamed) Weallaformulawell named iftheexpression
µX.ϕ(X)
(or
νX.ϕ(X )
)ours atmostoneforeahvariableX
.Byrenamingvariablesifneessary,everyformulaanbetranslatedintoanequivalent
wellnamedformula.Inwhatfollows,withoutlossofgenerality,weassumethatformulas
arewellnamed.
Denition 8(Binding) Thebinding denition ofaboundvariable
X
inawellnamedformula
ϕ
,D ϕ (X )
is the unique subformula ofϕ
of the formσX.ψ(X)
. We will omitsubsript
ϕ
whenitausesnoambiguity. WeallX
aµ
-variable whenσ = µ
, otherwisewe all
X
aν
-variable. The funtionD ϕ
assigning to every bound variable its bindingdenition in
ϕ
willbealledthebindingfuntion assoiatedwithϕ
.Denition 9 A sentene isawellnamedformulawithoutfreevariables.
Denition 10 Thedependenyorder
≤ ϕ
overtheboundvariablesofaformulaϕ
,istheleastpartialordersuhthatif
X
oursinD ϕ (Y )
(andD ϕ (Y )
isasubformulaofD ϕ (X )
)then
X ≤ ϕ Y
. WhenX ≤ ϕ Y
,itisalsosaidthatY
dependsonX
orX
isolderthanY
.Denition 11 Variable
X
inµX.ϕ(X)
isguarded ifeveryourreneofXinϕ(X)
isinthe sopeof somemodalityoperator
hi
or[]
. Wesay thata formula isguarded if everyboundvariable intheformulaisguarded.
Alternation depth desribes the number of alternations between least and greatest
xpointoperators.
Denition 12 The alternation depth of a formula denoted by
alt(ϕ)
is the numberofnestingbetween
µ
andν
inϕ
;itisreursivelydenedasfollows:• alt(tt ) = alt(
) = alt(X ) = 0
• alt(ϕ ∧ ψ) = alt(ϕ ∨ ψ) = max(alt(ϕ), alt(ψ))
• alt(haiϕ) = alt([a]ϕ) = alt(ϕ)
• alt(µX.ϕ(X)) = max({1, alt(ϕ(X )} ∪ {1 + alt(νY.ψ(Y )) | νY.ψ(Y ) ∈ sub(ϕ); X ≤ ϕ
Y })
• alt(νX.ϕ(X )) = max({1, alt(ϕ(X )} ∪ {1 + alt(µY.ψ(Y )) | µY.ψ(Y ) ∈ sub(ϕ); X ≤ ϕ
Y })
Formulas of the
µ
-alulus are interpreted overΣ
-labelled transition systems. Thesemantis of a
µ
-alulusformulaϕ
is aset of states of aΣ
-labelled transition systemS = hS, Σ, s 0 , ∆ S i
where the formula holds under a given valuation of variablesVal : Var → 2 S
, and itis denoted by[[ϕ]] Val S
. Givena valuation of variablesVal
and aset ofstates
T ⊆ S
, the valuationVal [X/T ]
is the valuationVal
with the substitution that assoiatesthestatesofT
withthevariableX
.Formally,forY ∈ Var
,Val [X/T ](Y ) = T
if
Y = X
andVal(Y )
otherwise.Wedenetherelationbetweenastates
ofatransitionsystem
S
, avaluationVal
and aformulaϕ
. WewriteS, s, Val ϕ
when theformulaϕ
holdsin
s
orequivalentlys
satisesϕ
.Therelationisdenedasfollows:• S, s, Val X
ifs ∈ Val (X )
• S, s, Val ϕ 1 ∨ ϕ 2
ifS, s, Val ϕ 1
orS, s, Val ϕ 2
• S, s, Val ϕ 1 ∧ ϕ 2
ifS, s, Val ϕ 1
andS, s, Val ϕ 2
• S, s, Val haiϕ
ifthereiss −→ a s ′
suhthatS, s ′ , Val ϕ
• S, s, Val [a]ϕ
ifforalls −→ a s ′
wehaveS, s ′ , Val ϕ
• S, s, Val µX.ϕ(X)
ifs ∈ ∩{T ⊆ S | [[ϕ(X)]] S Val [X/T] ⊆ T }
.• S, s, Val νX.ϕ(X )
ifs, ∈ ∪{T ⊆ S | T ⊆ [[ϕ(X )]] S Val [X/T] }
Thenwedene
[[ϕ]] S Val = {s ∈ S | S, s, Val ϕ}
.It issaidthataΣ
-labelledtransitionsystem
S
is amodel ofaformulaϕ
whens 0 ∈ [[ϕ]] S Val
;in this ase wewriteS, Val ϕ
.Thevaluation
Val
isomittediftheformuladoesnotontainsfreevariables.It is known (see [Eme90℄ for a survey) that properties expressed in temporal logis
LTL,CTL,andCTL
∗
anbeenodedas
µ
-alulusformulasandthatthereareformulasofthe
µ
-alulus(forinstaneνX.haihaiX
)thatannotbewritteninCTL∗
.Given twoformulas
ϕ 1
andϕ 2
, we oftenusethe notationϕ 1 ≡ ϕ 2
to saythatϕ 1
isequivalent to
ϕ 2
,meaningthat foreverylabelledtransition systemS
andvaluationVal
,[[ϕ 1 ]] S Val = [[ϕ 2 ]] S Val
.It is standard to onsider the negation operator (
¬
) onµ
-alulus sentenes. Thisoperatorisdenedasfollows:
• ¬tt ≡
• ¬
≡ tt
• ¬(ϕ 1 ∧ ϕ 2 ) ≡ ¬ϕ 1 ∨ ¬ϕ 2
• ¬(ϕ 1 ∨ ϕ 2 ) ≡ ¬ϕ 1 ∧ ¬ϕ 2
• ¬haiϕ ≡ [a]¬ϕ
• ¬[a]ϕ ≡ hai¬ϕ
• ¬µX.ϕ(X) ≡ νX.¬ϕ(¬X)
• ¬νX.ϕ(X ) ≡ µX.¬ϕ(¬X)
Thefollowingpropositionisstandard.
Proposition13 Given asentene
ϕ
, aΣ
-labelledtransition systemS
and avaluationVal
,[[¬ϕ]] S Val = S \ [[ϕ]] S Val
Thanks to the proposition just above, we anuse the negation operator anappear in
µ
-alulussentenes.Letuspresentsomeresultsonthe
µ
-alulus.Proposition14 ([Koz82℄) Everyformulaisequivalentto someguardedformula.
2.2.2 Model-Cheking Results
Informally,thetaskofhekingwhetheranitestatetransitionsystem,
S = hS, Σ, s 0 , ∆ S i
is amodelofasentene
ϕ
anbeseenastwoplayerparitygamewhosenodesare setoftuples oftheform
(s, ψ)
wheres ∈ S
andψ
isasubformulaofϕ
. Positions oftheplayerEve
onstainsubformulasofoneoftheformstt , ϕ 1 ∨ϕ 2 , haiψ
.Theotherpositionsbelongto the player
Adam
.The initialposition of thegame is(s 0 , ϕ)
. Theset of movesofthegamesaresuhthat:
•
There isnomovefromeither(s, tt)
or(s,
)
.•
From(s, ϕ ∧ ψ)
aswellas from(s, ϕ ∨ ψ)
therearemovesto(s, ϕ)
andto(s, ψ)
.•
From(s, [a]ϕ)
and from(s, haiϕ)
there are moves to(s ′ , ϕ,
for everys ′
suh thats −→ a s ′
.•
There isamovefrom(s, σX.ϕ(X ))
to(s, ϕ(X ))
•
There isamovefromX
to(s, ϕ(X))
whereD(X) = σX.ϕ(X)
Theaeptaneonditionisgivenbytheparityfuntion
rank : Q → N
dened by:rank(ψ) =
0
ifψ
isnotavariable2 × alt(D(X ))
whereϕ = X
andX
isaν
-variable2 × alt(D(X )) + 1
whereϕ = X
andX
isaµ
-variableOneanshowthat
S
isamodelofaformulaifplayerEve
hasawinning strategyinthethegame.Thisgivesanintuitiveideabehindthefollowingresults.
Theorem15 ([EJ91, Tho97,Jur00℄) Let
S = hS, Σ, s 0 , ∆ S i
beaΣ
-labelledtransitionsystem and let
ϕ
be aµ
-alulus formula. The model-heking problem forϕ
andS
issolvable in time
O |∆ S | × |sub(ϕ)| × |S| × |sub(ϕ)|
⌊alt(ϕ)/2⌋
⌈alt(ϕ)/2⌉ !!
3 Timed Proesses
We present timed proesses as event-reording automata without aeptane [AFH99℄.
Werstlypresentthenotionsofregion[ACD
+
92,LY97,AFH99,AD94℄anditsproperty.
All theresultspresentedin thissetionarewell-known.
3.1 Cloks and Valuations
Cloksarevariablesevaluatedoverreal numbers.Therearetwooperationsontime,the
timeelapseoperationthatgivesthevalueofthelokafteradelayandtheresetoperation
that setsthevalueofaloksto
0
.Let
R +
bethesetof nonnegativereal numbers.WeonsiderH = {h 1 , h 2 , . . . }
asetofloksvariables(orloksforsimpliity).
Denition 16 Avaluation onasetoflok
H
isatotalfuntionv : H → R +
.The symbol
V
represents the set of valuations. Given a valuationv ∈ V
, and a lokh ∈ H
,thevaluationv + t
isdened by[v + t](h) = v(h) + t
and,thevaluationv[h := 0]
isdenedby
v[h := 0](h ′ ) = 0
ifh = h ′
elsev[h := 0](h ′ ) = v(h ′ )
.Wesaythatavaluationv
isasuessor ofavaluationv ′
ifv = v ′ + t
forsomet ∈ R +
.Example:Let
H = {h 1 , h 2 }
beasetoftwoloks.InTable1,wepresentsomevaluationson
h
aresomevaluationonH
.v 0 (h 1 ) = 0 v 0 (h 2 ) = 0
v 1 (h 1 ) = 0.35 v 1 (h 2 ) = 0.35
v 2 (h 1 ) = 0.35 v 2 (h 2 ) = 0
v 3 (h 1 ) = 0.85 v 3 (h 2 ) = 0.50
v 4 (h 1 ) = 0
v 4 (h 2 ) = 0.50
v 5 (h 1 ) = 0.35 v 5 (h 2 ) = 0.85
Table1:Examplesof valuations.
These valuations are suh that
v 1 = v 0 + 0.35
,v 2 = v 1 [h 2 := 0]
,v 3 = v 2 + 0.50
,v 4 = v 3 [h 1 := 0]
,v 5 = v 4 + 0.35
andv 2 = v 5 [h 2 := 0]
. In Figure 1 we give anotherrepresentationsofthesevaluationsin Cartesianreferene.
0 1
0 1 h 1
h 2
v 0 v 4
v 3
v 2
v 1 v 5
Figure1:RepresentationofvaluationsinCartesianreferene.
3.2 Constraints
Constraintsareonjuntions ofsimpleonstraints;andasimpleonstraintisaompar-
ison of alok with aninteger (diagonalfree simpleonstraint)ora omparisonof the
dierenebetweentwolokswithandinteger.Diagonalfreeonstraintsuseonlydiagonal
free simple onstraints.Constraintsare interpreted over valuations. The semantis of a
onstraintisthesetofvaluationssatisfyingit.Wewillalsoonsidertwotypesofatomi
onstraints :retangular onstraints andtriangularonstraints.
Denition 17 A simple onstraint dened on aset of loks
H
is an equation of theform
h − h ′ ⊲⊳ n
orh ⊲⊳ n
wheren ∈ N
,⊲⊳
isoneof{<, ≤, ≥, >}
andh, h ′ ∈ H
.A diagonalfree simpleonstraint isasimpleonstraintoftheform
h ⊲⊳ n
.Denition 18 A lokonstraint overaset ofloks
H
isaonjuntionof simpleon-straints.
Φ H
,denotesthesetoflokonstraintsoverH
.Adiagonal-free lokonstraint isalokonstraintthatusesonlydiagonalfreesimpleonstraints.Gds H
denotesthesetofdiagonal-freelokonstraintsover
H
.Wewill oftenwrite
h = n
orh − h ′ = n
asanabbreviationofh ≤ n ∧ h ≥ n
.Wealsowrite
h − h ′ = n
torepresenttheonstrainth − h ′ ≤ n ∧ h − h ′ ≥ n
.Laterweonsidertwospeial lokonstraints
tt
and denedby:tt = V
h∈H h ≥ 0
and
= V
h∈H h < 0
.The notion of a onstraint satised in a given valuation denoted
v g
is denedindutivelyasfollows:
• v h ⊲⊳ n
ifandonlyifv(h) ⊲⊳ n
• v h − h ′ ⊲⊳ n
ifandonlyifv(h) − v(h ′ ) ⊲⊳ n
• v g 1 ∧ g 2
ifandonlyifv g 1
andv g 2
The meaning of a onstraint
g
, denoted[[g]]
, is the set of valuations in whih it issatised.Clearly,
[[g]] = {v : v g}
.Itbeomesobviousthat[[tt]] = H → R +
and[[
]] = ∅
.Denition 19 Aonstraint
g
isinonsistentif[[g]] = ∅
.Denition 20 The bound of aonstraint
g
, denoted byM g
, is the maximal onstantthat appears in it. The bound of a set of onstraintsis the maximal value among the
bounds ofonstraintit ontains.A setof onstraintsis
M
-bounded ifeveryonstantinitissmallerthan
M
.Nowweonsideratomionstraintsandweshowhowtodeomposeaonstraintinto
anequivalentset ofatomionstraints.
Denition 21 Forainteger
M ∈ N
,aM
-retangular onstraint isaonjuntionofthe formV
h∈H g h
whereg h
isaonstraintoftheformc < h < c + 1
orh = c
orh > M
withc ∈ N ∩ [0..M [
.Thesetofall
M
-retangularonstraintsisdenotedbyAgds H (M )
.ThesymbolAgds H
will denotetheset
S
M ∈ N Agds H (M )
Denition 22 A
M
-triangularonstraintisaonjuntionoftheformV
h∈H g h ∧ V
(h,h ′ )∈H 2 g h,h ′
where
g h,h ′
isaonstraintofthe formsc < h − h ′ < c + 1
orh − h ′ = c
orh − h ′ > M
and
g h
isoftheformc < h < c + 1
orh = c
orh > M
withc ∈ N ∩ [0..M[
.Thesymbol
T gds H (M )
denotesthesetofallofM
-triangularonstraints.ThesymbolT gds H
denotesthesetS
M ∈ N T gds H (M )
.Notation:Weoftenusethesymbol
g ˆ
todenoteaonstraintinAgds H (M )
orT gds H (M )
forsome
M
.Laterthetermsatomionstraintswilloftenbeusedinplaeofretangularonstraintsortriangularonstraints.
Letus rstreallthefollowingfat resultingfrom denitionsofatomionstraints.
Fat23 (atomiity) Let
M ∈ N
beaonstant.• ∀ˆ g, g ˆ ′ ∈ T gds H (M )
,if[[ˆ g]] 6= [[ˆ g ′ ]]
then[[ˆ g]] ∩ [[ˆ g ′ ]] = ∅
• ∀ˆ g, g ˆ ′ ∈ Agds H (M )
, if[[ˆ g]] 6= [[ˆ g ′ ]]
then[[ˆ g]] ∩ [[ˆ g ′ ]] = ∅
• ∀(ˆ g, ˆ g ′ ) ∈ Agds H (M ) × T gds H (M )
, either[[ˆ g ′ ]] ∩ [[ˆ g]] = ∅
or[[ˆ g ′ ]] ⊆ [[ˆ g]]
The rsttwo items statethat either the semantis of twoatomi onstraintsof the
samenatureareequal,ortheyaredisjoint.Thelastitemoftheabovefatstatesthatthe
semantisof atriangular onstraintis either inluded in thesemantisof aretangular
onstraints,orthetwosemantisaredisjoint.
Example: In Figure 2,we illustrate the onepts of onstraints and diagonal free on-
straints. The onstraints
g 1
andg 3
are general onstraints while the onstraintg 2
isdiagonal free.Moreover
[[g 3 ]] = [[g 1 ]] ∧ [[g 2 ]]
.The onstraintg 2
isaretangular onstraint0 1 2
0 1 2 h a
h b
g 1 = 0 ≤ h a ≤ 3 ∧ 0 ≤ h b ≤ 2 ∧ −1 ≤ h a − h b ≤ 1
g 2 = 1 < h a < 2 ∧ 0 < h b < 1
g 3 = 1 < h a < 2 ∧ 0 < h b ≤ 1 ∧ −1 ≤ h a − h b ≤ 1
Figure2:Illustrationof onstraintsanddiagonalfreeonstraints.
in
Agds H (2)
andtheonstraintg 3
is atriangularonstraint.Normalization andRetangularisation Untiltheendofthissubsetionweon-
siderthedeompositionofdiagonalfreeonstraintintosetofretangularonstraints.We
willneedtoonsideronstraintsthatdonotinvolveonstantsgreaterthanaxedbound.
For that purpose, we present the normalisation operation
norm N
that we use later todeomposeonstraints.
Denition 24 The
N
-normalizationofasimpleonstraintC
istheonstraintnorm N (C)
dened by:
• norm N (h ⊲⊳ n) = tt
if⊲⊳∈ {<, ≤}
andn > N
.• norm N (h − h ′ ⊲⊳ n) = tt
if⊲⊳∈ {<, ≤}
andn > N
.• norm N (h ⊲⊳ n) = h > N
if⊲⊳∈ {>, ≥}
andn > N
.• norm N (h − h ′ ⊲⊳ n) = h − h ′ > N
if⊲⊳∈ {>, ≥}
andn > N
.•
Intheotherasesnorm N
doesnotmodifytheonstraint.Givenaonstraint
g
andanintegerN
,theN
-normalizationofg
,norm N (g)
isobtainedbynormalizingeahsimpleonstraintourringin
g
.Lemma25 Let
C
,adiagonal-freesimpleonstraint,thereisaonstantM
suhthat:•
foreveryN ≥ M
,[[norm M (C)]] = [[norm N (C)]] = [[C]]
•
foreveryN < M
,[[norm M (C)]] ( [[norm N (C)]]
Proof
1. When
C
hastheformh ⊲⊳ n
with⊲⊳∈ {<, ≤}
andonsiderM = n
,(a) Let
N ≥ M
,norm N (h ⊲⊳ n)
isequaltonorm M (h ⊲⊳ n)
and theyareequaltoh ⊲⊳ n
andwegettheresultthat[[norm M (C)]] = [[norm N (C)]] = [[C]]
.(b) Let
N < M
,norm N (h ⊲⊳ n) = h ≥ 0
.Clearly[[norm M (C)]] ( [[norm N (C)]]
.2. When
C
hastheformh ⊲⊳ n
with⊲⊳∈ {>, ≥}
andonsiderM = n
,(a) Let
N ≥ M
,norm N (h ⊲⊳ n)
isequaltonorm M (h ⊲⊳ n)
and theyareequaltoh ⊲⊳ n
andwegettheresultthat[[norm M (C)]] = [[norm N (C)]] = [[C]]
.(b) Let
N < M
, thennorm N (h ⊲⊳ n) = h ⊲⊳ N
and[[norm M (C)]] = h ⊲⊳ M
.Clearly,
[[norm M (C)]] ( [[norm N (C)]]
.Letusreallthatforaonstraint
g
,M g
denotesthemaximalonstantourringing
.Weuse thelemmaabovetoshowthat the
M
-normalisationofaonstraintdoesmodify itssemantiswhenM
isgreaterorequaltoM g
.Proposition26 Let
g ∈ Gds H
,•
foreveryM ≥ M g
,[[norm M (g)]] = [[norm N (g)]] = [[g]]
•
foreveryM < M g
,[[norm M (g)]] ( [[norm N (g)]]
Proof
Bydenitions
g = V
i=1..n C i
and,[[norm M (g)]] = T
i=1..n [[N orm M (C i )]]
.AsM g
isgreaterthat theonstant usedin every
C i
, we get, using 25 that forM ≥ M g
,[[norm M (g)]] = [[norm N (g)]] = [[g]]
andforM < M g
,[[norm M (g)]] ( [[norm N (g)]]
Example:Consideringtheonstraint
g = 0 ≤ h a ≤ 3 ∧ 0 ≤ h b ≤ 2
,wepresentinTable2theresultsof
M
-normalisationoperationsdepending onthevalueofM
.It iseasytoseeM
norm M (g)
0
tt
1
tt
2
0 ≤ h b ≤ 2
3
0 ≤ h a ≤ 3 ∧ 0 ≤ h b ≤ 2
Table2:Illustrationofthenormalisationoperation.
that forevery
M < 2
,[[g]] ⊆ [[norm M (g)]]
andforeveryM ≥ 2
,[[g]] = [[norm M (g)]]
To obtain the deomposition of diagonal onstraints,we rstly deompose diagonal
freeonstraintsintoaset(possiblyinnite)ofunboundedretangularonstraints.Then,
weusethenormalisation proedureaboveoneah atomionstraintinthat set to have
anite set of bounded retangular onstraints.The deomposition ofdiagonalfree on-
straints into a set of unbounded retangular onstraints is performed in two steps: in
Lemma27wedeomposesimplediagonalfreeonstraintsandweusethatdeomposition
in Proposition28todeomposediagonalfreeonstraints.
Lemma27 Foreverydiagonalfreesimpleonstraint
C
,thereisasetRect(C)
ofatomidiagonalfreesimpleonstraintssuhthat
[[C]] = S
C ′ ∈Rect(C) [[C ′ ]]
.Proof
Let
C
beadiagonalfreeonstraintC
.WeonstrutasetRect(C)
dependingontheformof
C
; andweshowthatfor everyv ∈ V
,v C
ifand onlyifthereisC ′ ∈ Rect(C)
suhthat
v C ′
.1. if
C
isoftheformh < n
then setRect(C) = {i < h < i + 1, h = i | i = 0..n − 1}
2. if
C
isoftheformh ≤ n
thensetRect(C) = {i < h < i+1, h = i | i = 0..n−1}∪{h = n}
3. if
C
isoftheformh > n
then setRect(C) = {i < h < i + 1, h = i + 1 | i = n..∞}
4. if
C
is of the formh ≥ n
then setRect(C) = {i < h < i + 1, h = i + 1 | i = n..∞} ∪ {h = n}
Theproofthat ineahase,
[[C]] = ∪ C ′ ∈Rect(C) [[C ′ ]]
,isobvious.Weobservethatsimpleonstraintsofthe form
h > n
toh ≥ n
aredeomposed intoinnitesetofonstraints.
Proposition28 Foreverydiagonal-freeonstraint
g
,thereisasetRect(g)
ofretangularonstraintssuhthat
[[g]] = S
ˆ
g∈Rect(g) [[ˆ g]]
.Proof
The resultis aonsequeneofthe Lemma27 aboveasaonstraintsisa onjuntionof
simpleonstraints.
Wesaythat
Rect(g)
istheunboundedretangulardeomposition ofg
.Now that wehavedeomposed diagonal freeonstraintsinto sets (possibly innite)
ofunbounded retangularonstraints,wewillapply thenormalisationoperationoneah
retangular onstraint in these sets; the result of the appliation of the normalisation
operationwithrespettoaonstant
M
willbenitesetofM
-retangularonstraints.But weneedtoshowthatthesemantisoftheonstraintresultingfromtheappliationoftheM
-normalisationoperationonasimplediagonalfreeonstraintisthesameastheunion ofthesemantisofretangularonstraintsinitsunbounded retangulardeomposition.Lemma29 Foreverydiagonalfreesimpleonstraint
C
oftheformh ≤ n
orh ≥ n
,forevery
M ∈ N
,[[norm M (C)]] = ∪ C ′ ∈Rect(C) [[norm M (C ′ )]]
.Proof
If
C
isoftheform:• h ≤ n
,If
M ≥ n
thennorm M (C) = C
andforeveryC ′ ∈ Rect(C)
,norm M (C ′ ) = C ′
.Thenwegettheresult.
If
M < n
thennorm M (C) = tt
.LetC ′ h = n
.FromLemma27C ′ ∈ Rect(C)
andnorm M (C ′ ) = tt
then∪ C ′ ∈Rect(C) [[norm M (C ′ )]] = tt
and[[norm M (C)]] =
∪ C ′ ∈Rect(C) [[norm M (C ′ )]]
.• h ≥ n
,Theasewhen
M ≥ n
isobviousbeauseeveryonstraintinRect(C) ∪ {C}
isnotmodiedby
norm M
.The ase when
M < n
is also obvious beausenorm(C) = h > M
andnorm M (C ′ ) = h > M
foreveryC ′ ∈ Rect(C)
Nowweaneasilyextendresultsinthelemmaabovetodiagonalfreeonstraints.
Proposition30 Foreverydiagonal-freeonstraint
g
, foreveryM ∈ N
,[[norm M (g)]] = S
ˆ
g∈Rect(g) [[norm M (ˆ g)]]
.Proof
It isaonsequeneofLemma 29aboveandProposition28
Denition 31 Givena
g ∈ Gds
,andandintegerM ∈ N
wedenethesetRect M (g) = {norm M (ˆ g) | g ˆ ∈ Rect(g)}
.
FromProposition26,wegetthateverydiagonal-freeonstraintusingonstantsmaller
thananinteger
M
anbedeomposed intoanitesetofM
-retangularonstraints.Proposition32 Foreveryonstraint
g ∈ Gds
,foreveryM ≥ M g
,[[g]] = S
ˆ
g∈Rect M (g) [[ˆ g]]
.Proof
FromProposition30
[[norm M (g)]] = S
ˆ
g∈Rect(g) [[norm M (ˆ g)]]
orequivalently[[norm M (g)]] = S
ˆ
g∈Rect M (g) [[ˆ g]]
. From Proposition 26 forM ≥ M g
,[[g]] = [[norm M (g)]]
and weget theresult.
Remark:Thesamekindof propertyanbeestablishedforgeneralonstraintsandtri-
angular onstraints. As retangular onstraintsontain triangularonstraints every
M
-bounded diagonal free atomi onstraint an be deomposed into a nite union of
M
-boundedtriangularonstraints.
Fromtheremarkabovewehavethefollowingorollary.
Corollary 33 Every onstraint or diagonal free onstraint an be deomposed into a
nite equivalentsetoftriangularonstraints.
3.3 Regions
We present a partitioning of the valuations into a nite number of equivalene lasses
alled regions. Valuations in the same region must satisfy the same lok onstraints,
theirtime suessorsmustalso satisfythesamelokonstraints,andtheymustsatisfy
thesamelokonstraintsafter alokisreset.
ThedenitionofaregionwepresentherehasbeenintroduedbyAlurandDill[AD94℄
for analysing timed automata using onlydiagonal -freeonstraints.The equivalene re-
lation between valuations is dened with respet to some integer
M
representing the maximal valueusedin onstraints.Thedenition ofthat relationis somehowrelatedtothe denition of atomi onstraintsas atomi onstraints an not be deomposed into
smaller onstraints. Thus, twoequivalent valuations agree on the integral part of eah
lokwhosevaluesaresmallerthan
M
andtheyalsoagreeontheorderonthefrationalpartofthevaluesoftheloks.
Forarealnumber
n
let⌊n⌋
denotetheintegralpartofn
and{n}
denotethefrationalpartof
n
.Let
M
beanaturalnumber.Considertheparametrisedbinaryrelation∼ M ⊆ V H × V H
overvaluationsdened by,
v ∼ M v ′
if:1.
v(h) > M
ifandonlyifv ′ (h) > M
foreahh ∈ H
;2. if
v(h) ≤ M
,then⌊v(h)⌋ = ⌊v ′ (h)⌋
foreveryh ∈ H
;3. if
v(h) ≤ M
,then{v(h)} = 0
ifandonlyif{v ′ (h)} = 0
foreveryh ∈ H
,and;4. if
v(h) ≤ M
andv(h ′ ) ≤ M
,then{v(h)} ≤ {v(h ′ )}
ifandonlyif{v ′ (h)} ≤ {v ′ (h ′ )}
forevery
h, h ′ ∈ H
.Proposition34 ([AD94℄) Therelation
∼ M
is an equivalenerelation over the set ofvaluationswithat most
2 3|H|−1 × |H|! × (M + 1) |H|
equivalenelasses.Therelation
∼ M
isdened asaonjuntionoffour properties.Eahpropertydenesan equivalene relation;letus denote them by∼ M 1 , . . . , ∼ M 4
, respetively. Foreahof these four relationswewillgiveanupperbound onthenumberofits equivalenelasses.Theprodutoftheseboundswill giveanupperbound on
∼ M
asthelateristheintersetion ofthefourequivalenerelations.The relation dened by the rst ondition has
2 |H|
equivalene lasses, as the onlything that ountsis whetherthe valueofalok isbiggerthan
M
ornot.Similarlythethird relationhas
2 |H|
equivalenelasses. Thenumberof lassesof theseond relationis
(M + 1) |H|
as thereareM + 1
possibleintegervaluesofinterest.Finally, thenumberof lassesof thefourth relationis bounded by thenumberofpermutationsof theset of
loksmultipliedby
2 |H|−1
asforeverytwoloksonseutiveinapermutationweneed to deideiftheyareequaloriftheseondisstritlybiggerthantherst.Summarizing,weget
2 3|H|−1 |H!|(M + 1) |H|
.Weuse
Reg(M )
(orReg
forshort) to representtheset of equivalene lassesoftherelation
∼ M
.Denition 35 A region [AD94℄ is an equivalene lass of the relation
∼ M ⊆ V H × V H
dened above.
InFigure3weillustrateregionfordiagonalfreeonstraintsforthemaximalonstant
M = 2
.InFigure3valuationsearlierpresentedinTable1arenotequivalent.Aregionin thegureiseitheraornerpoint(forexample(0, 2)
),anopenlinesegment(forexample0 < h 1 = h 2 < 1
)or anopenbox(forexample0 < h 1 < h 2 < 1
).0 1 2
0 1 2 h 1
h 2
v 0
v 4
v 3
v 2
v 1
v 5
Figure3:Regionillustration.
Fromthedenitionof
∼ M
,itomesthatanequivalenelassanberepresentedusing atriangularonstrainting
.Aordingtothedenitionof∼ M
,twovaluationsthatbelongto thesameequivalenelasssatisfyonstraintoftheform:
• h = i h
ori h < h < i h + 1
foreahh ∈ H
wherei h ∈ {0, 1, . . . , M }
andweassumeM + 1 = ∞
.Thisisaonsequeneof∼ M 1
,∼ M 2
,∼ M 3
.• h − h ′ = i hh ′
ori hh ′ < h − h ′ < i hh ′ + 1
for eah ouple(h, h ′ ) ∈ H 2
suh thath ⊲⊳ M
andh ′ ⊲⊳ M
with⊲⊳∈ {=, <}
.Thisisaonsequeneof∼ M 4
.Given avaluation
v
,[v]
denotesthe equivalene lass (region)ofv
. We also usetheletter
r
to represent a region. Given a regionr
, we dener + t = {[v + t] | v ∈ r}
,r↑ = {r + t | t ∈ R ≥0 }
,andr[h := 0] = {v[h := 0] : v ∈ r}
. Wewriter ⊆ g
forr ⊆ [[g]]
.Proposition36 Let
G
beasetofM
-boundedonstraintsthenReg(M )
satises:P1
∀g ∈ G, r ∈ Reg
,eitherr ⊆ [[g]]
or[[g]] ∩ r = ∅
.P2
∀r, r ′ ∈ Reg
, ifthere exists somev ∈ r
andt ∈ R ≥0
suhthatv + t ∈ r ′
, thenforevery
v ′ ∈ r
thereis somet ′ ∈ R ≥0
suhthatv ′ + t ′ ∈ r ′
.P3
∀r, r ′ ∈ Reg, ∀h ∈ H
,ifr[h := 0] ∩ r ′ 6= ∅
,thenr[h := 0] ⊆ r ′
.Proof
WeshowP1intherstitem,P2in theseonditemandP3inthelastitem.
1. Let
g ∈ G
,fromProposition 32let[[g]] = S
g i ∈Rect M (g) [[ˆ g i ]]
. Eahˆ g i
isaretangularonstraint.
[[g]] ∩ r = S
g i ∈Rect M (g) [[ˆ g i ]] ∩ r)
.FromFat23thereisatmostonei
suhthat
r
intersetsˆ g i
. It followsthatr
intersets a onstraintˆ g i
ofRect M (g)
if andonlyif
ˆ g i
ontainsr
.Wehavethatifv r
thenv g
.2. Let
v, v ′ ∈ r
,addingt
tov
maymodifytheintegerpartofthevalue(withrespettov
)ofsomeloksormaymodifytheorderonthefrationalpartofthevalue(withrespetto
v
)ofloks.Weaimatndatimet ′
suhthat:- Theintegerpartof thevalueof eah lokwithrespetto
v ′ + t ′
is equaltotheintegerpartofthevalueofeahlokwithrespetto
v + t
-Theorderofthefrationalpartsofloksin
v ′ + t ′
isthesameinv + t
.-Thesetoflokswithzerofrationalpartin
v + t
isthesameinv ′ + t ′
.Let
|H| = n
andassumeapermutationπ
of{1, . . . , n}
suhthat{v(h π 1 )} ⊲⊳ 1 {v(h π 2 )} ⊲⊳ 2 , . . . , ⊲⊳ n−1 {v(h π n )}(∗)
with
⊲⊳ i ∈ {<, =}
.Let
t ∈ R ≥0
. Itis learthat{v(h) + t} = {v(h) + {t}}
. Onlythefrationalpartoft
mayaettheorderin(∗)
.There maybealargestindex
j
suhthat{v(h π j ) + {t}} = {v(h π j )} + {t}
.Inase,nosuhj
exists, takej = n
.Clearly,
{v(h π j ) + {t}} ≥ {v(h π j )}
and;∀k > j
wehave:{v(h π k ) + {t}} < {v(h π k )}
and{v(h π k ) + {t}} < {v(h π j ) + {t}}
.Wegetthat:
{v(h π j+1 ) + {t}} ⊲⊳ j . . . ⊲⊳ n−1 {v(h π n ) + {t}} < {v(h π j ) + {t}}
Similarly,weestablishthat
{v(h π j ) + {t}} < {v(h π j− 1 ) + {t}}⊲⊳ j−2 . . . ⊲⊳ 1 {v(h π 1 ) + {t}}
where