Decidability Results for Probabilistic Hybrid Automata

Similar documents
Modeling and Analysis of Hybrid Systems

Automatic Verification of Real-time Systems with Discrete Probability Distributions

The algorithmic analysis of hybrid system

Modeling and Analysis of Hybrid Systems

An Introduction to Hybrid Systems Modeling

Modeling and Analysis of Hybrid Systems


Verifying Quantitative Properties of Continuous Probabilistic Timed Automata

Model Checking Durational Probabilistic Systems

Timed Automata. Chapter Clocks and clock constraints Clock variables and clock constraints

Timed Automata VINO 2011

Reasoning about Time and Reliability

Time(d) Petri Net. Serge Haddad. Petri Nets 2016, June 20th LSV ENS Cachan, Université Paris-Saclay & CNRS & INRIA

An On-the-fly Tableau Construction for a Real-Time Temporal Logic

Alan Bundy. Automated Reasoning LTL Model Checking

Time and Timed Petri Nets

Models for Efficient Timed Verification

Classes and conversions

Probabilistic Model Checking Michaelmas Term Dr. Dave Parker. Department of Computer Science University of Oxford

Lecture 11: Timed Automata

Real-Time Systems. Lecture 10: Timed Automata Dr. Bernd Westphal. Albert-Ludwigs-Universität Freiburg, Germany main

PCTL model checking of symbolic probabilistic systems

Automata on Infinite words and LTL Model Checking

Model Checking Probabilistic Timed Automata with One or Two Clocks

Deciding the weak definability of Büchi definable tree languages

PSL Model Checking and Run-time Verification via Testers

Modal and Temporal Logics

Temporal Logic Model Checking

CS256/Spring 2008 Lecture #11 Zohar Manna. Beyond Temporal Logics

On simulations and bisimulations of general flow systems

Lecture 9 Synthesis of Reactive Control Protocols

Modeling and Analysis of Hybrid Systems

Introduction to Temporal Logic. The purpose of temporal logics is to specify properties of dynamic systems. These can be either

Foundations of Informatics: a Bridging Course

Chapter 5: Linear Temporal Logic

Automata-theoretic Decision of Timed Games

Temporal Logic. M φ. Outline. Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness. Ralf Huuck. Kripke Structure

Automata, Logic and Games: Theory and Application

A Note on the Reduction of Two-Way Automata to One-Way Automata

Complexity Issues in Automated Addition of Time-Bounded Liveness Properties 1

Time-abstracting Bisimulation for Probabilistic Timed Automata

Probabilistic Model Checking Michaelmas Term Dr. Dave Parker. Department of Computer Science University of Oxford

An Introduction to Hybrid Systems Modeling

Probabilistic Model Checking of Deadline Properties in the IEEE 1394 FireWire Root Contention Protocol 1

Quasi-Weak Cost Automata

Topics in Verification AZADEH FARZAN FALL 2017

Discrete Mathematics

Probabilistic Model Checking of Randomised Distributed Protocols using PRISM

Unifying Theories of Programming

From Liveness to Promptness

Visibly Linear Dynamic Logic

Embedded Systems 5. Synchronous Composition. Lee/Seshia Section 6.2

Design of Distributed Systems Melinda Tóth, Zoltán Horváth

Complexity Issues in Automated Addition of Time-Bounded Liveness Properties 1

A Decidable Class of Planar Linear Hybrid Systems

SFM-11:CONNECT Summer School, Bertinoro, June 2011

A Sample State Machine

Lecture 16: Computation Tree Logic (CTL)

Finite Automata. Mahesh Viswanathan

Exact and Approximate Abstraction for Classes of Stochastic Hybrid Systems

On Reachability for Hybrid Automata over Bounded Time

CHURCH SYNTHESIS PROBLEM and GAMES

DES. 4. Petri Nets. Introduction. Different Classes of Petri Net. Petri net properties. Analysis of Petri net models

Chapter 5: Linear Temporal Logic

An Introduction to Temporal Logics

On the Hardness of Analyzing Probabilistic Programs

Lecture 7 Synthesis of Reactive Control Protocols

Unranked Tree Automata with Sibling Equalities and Disequalities

What You Must Remember When Processing Data Words

Verification and Control of Partially Observable Probabilistic Systems

Łukasz Kaiser Joint work with Diana Fischer and Erich Grädel

Completeness Results for Memory Logics

Real-Time Systems. Lecture 15: The Universality Problem for TBA Dr. Bernd Westphal. Albert-Ludwigs-Universität Freiburg, Germany

A Tableau Proof System with Names for Modal Mu-calculus

Undecidable Cases of Model Checking Probabilistic Temporal-Epistemic Logic (Extended Abstract)

Serge Haddad Mathieu Sassolas. Verification on Interrupt Timed Automata. Research Report LSV-09-16

Complexity of infinite tree languages

PSPACE-completeness of LTL/CTL model checking

Automata-based Verification - III

Automata-theoretic analysis of hybrid systems

Uniformization in Automata Theory

Weak Cost Monadic Logic over Infinite Trees

Temporal logics and explicit-state model checking. Pierre Wolper Université de Liège

Sanjit A. Seshia EECS, UC Berkeley

Model Checking LTL with Regular Valuations for Pushdown Systems 1

Computational Theory

Verification of Polynomial Interrupt Timed Automata

Describing Homing and Distinguishing Sequences for Nondeterministic Finite State Machines via Synchronizing Automata

CS243, Logic and Computation Nondeterministic finite automata

Hybrid Automata and ɛ-analysis on a Neural Oscillator

State Explosion in Almost-Sure Probabilistic Reachability

LTL Control in Uncertain Environments with Probabilistic Satisfaction Guarantees

Decision Procedures for CTL

Computation Tree Logic (CTL) & Basic Model Checking Algorithms

(Refer Slide Time: 0:21)

Syntax and Semantics of Propositional Linear Temporal Logic

The State Explosion Problem

Propositional Dynamic Logic

Qualitative Logics and Equivalences for Probabilistic Systems

Robustness and Implementability of Timed Automata

Transcription:

Decidability Results for Probabilistic Hybrid Automata Prof. Dr. Erika Ábrahám Informatik 2 - Theory of Hybrid Systems RWTH Aachen SS09 - Probabilistic hybrid automata 1 / 17

Literatur Jeremy Sproston: Decidable Model Checking of Probabilistic Hybrid Automata FTRTFT 00, LNCS 1926, pp. 31 45, 2000. - Probabilistic hybrid automata 2 / 17

Motivation Which components of a hybrid system could be probabilistic? - Probabilistic hybrid automata 3 / 17

Motivation Which components of a hybrid system could be probabilistic? Example applications? - Probabilistic hybrid automata 3 / 17

Motivation Which components of a hybrid system could be probabilistic? Example applications? What do you expect to be a decidable class? - Probabilistic hybrid automata 3 / 17

Definition (Distribution) For a set Y, a (discrete probability) distribution on Y is a function µ : Y [0,1] such that µ(y) > 0 for at most countably many y Y and y Y µ(y) = 1. - Probabilistic hybrid automata 4 / 17

Definition (Distribution) For a set Y, a (discrete probability) distribution on Y is a function µ : Y [0,1] such that µ(y) > 0 for at most countably many y Y and y Y µ(y) = 1. We use Dist(Y ) to denote the set of all distributions on Y. - Probabilistic hybrid automata 4 / 17

Definition (Distribution) For a set Y, a (discrete probability) distribution on Y is a function µ : Y [0,1] such that µ(y) > 0 for at most countably many y Y and y Y µ(y) = 1. We use Dist(Y ) to denote the set of all distributions on Y. For a distribution µ on a set Y let support(µ) be the set of elements y of Y with µ(y) > 0. - Probabilistic hybrid automata 4 / 17

Questions How can probabilities and conditional jumps with effects be combined? - Probabilistic hybrid automata 5 / 17

Probabilistic hybrid automata (We skip synchronization labels.) Definition (Probabilistic hybrid automaton) A probabilistic hybrid automaton H is a hybrid automaton without the Edge set, and with an additional function prob which maps to each location a finite set of probability distributions on Loc 2 Rn 2 Var, and - Probabilistic hybrid automata 6 / 17

Probabilistic hybrid automata (We skip synchronization labels.) Definition (Probabilistic hybrid automaton) A probabilistic hybrid automaton H is a hybrid automaton without the Edge set, and with an additional function prob which maps to each location a finite set of probability distributions on Loc 2 Rn 2 Var, and a function pre which maps to each location l and each distribution in prob(l) a subset of R n, called the precondition set. - Probabilistic hybrid automata 6 / 17

Probabilistic hybrid automata (We skip synchronization labels.) Definition (Probabilistic hybrid automaton) A probabilistic hybrid automaton H is a hybrid automaton without the Edge set, and with an additional function prob which maps to each location a finite set of probability distributions on Loc 2 Rn 2 Var, and a function pre which maps to each location l and each distribution in prob(l) a subset of R n, called the precondition set. - Probabilistic hybrid automata 6 / 17

Probabilistic hybrid automata (We skip synchronization labels.) Definition (Probabilistic hybrid automaton) A probabilistic hybrid automaton H is a hybrid automaton without the Edge set, and with an additional function prob which maps to each location a finite set of probability distributions on Loc 2 Rn 2 Var, and a function pre which maps to each location l and each distribution in prob(l) a subset of R n, called the precondition set. Definition (Probabilistic rectangular automaton) A probabilistic rectangular automaton is a probabilistic hybrid automaton with only rectangular sets in the definition. - Probabilistic hybrid automata 6 / 17

Semantics Flows as before. - Probabilistic hybrid automata 7 / 17

Semantics Flows as before. A jump can take place from a source state (l,ν) to a target state (l,ν ) iff - Probabilistic hybrid automata 7 / 17

Semantics Flows as before. A jump can take place from a source state (l,ν) to a target state (l,ν ) iff there is a distribution µ prob(l) such that - Probabilistic hybrid automata 7 / 17

Semantics Flows as before. A jump can take place from a source state (l,ν) to a target state (l,ν ) iff there is a distribution µ prob(l) such that the precondition pre(l)(µ) is satisfied by ν, and - Probabilistic hybrid automata 7 / 17

Semantics Flows as before. A jump can take place from a source state (l,ν) to a target state (l,ν ) iff there is a distribution µ prob(l) such that the precondition pre(l)(µ) is satisfied by ν, and µ((l,post, X)) > 0 for some post R n and X Var with - Probabilistic hybrid automata 7 / 17

Semantics Flows as before. A jump can take place from a source state (l,ν) to a target state (l,ν ) iff there is a distribution µ prob(l) such that the precondition pre(l)(µ) is satisfied by ν, and µ((l,post, X)) > 0 for some post R n and X Var with ν post and - Probabilistic hybrid automata 7 / 17

Semantics Flows as before. A jump can take place from a source state (l,ν) to a target state (l,ν ) iff there is a distribution µ prob(l) such that the precondition pre(l)(µ) is satisfied by ν, and µ((l,post, X)) > 0 for some post R n and X Var with ν post and ν(x) = ν (x) for all x Var\X. - Probabilistic hybrid automata 7 / 17

Questions What is the maximal probability of a single path? - Probabilistic hybrid automata 8 / 17

Questions What is the maximal probability of a single path? What is about time divergence? - Probabilistic hybrid automata 8 / 17

Questions What is the maximal probability of a single path? What is about time divergence? What is about zeno behaviour? - Probabilistic hybrid automata 8 / 17

Adversaries Intuitively, an adversary resolves all of the nondeterministic choices of a probabilistic hybrid automaton. - Probabilistic hybrid automata 9 / 17

Adversaries Intuitively, an adversary resolves all of the nondeterministic choices of a probabilistic hybrid automaton. Definition (Adversary) An adversary of a probabilistic hybrid automaton H is a function A mapping each finite path ω with last state (l,ν) of H to a distribution µ prob(l). - Probabilistic hybrid automata 9 / 17

Adversaries Intuitively, an adversary resolves all of the nondeterministic choices of a probabilistic hybrid automaton. Definition (Adversary) An adversary of a probabilistic hybrid automaton H is a function A mapping each finite path ω with last state (l,ν) of H to a distribution µ prob(l). Definition An adversary A of a probabilistic hybrid automaton H is divergent iff for each state of H the total probability of the divergent paths under A is 1. Let A H be the set of divergent adversaries of H. - Probabilistic hybrid automata 9 / 17

Adversaries Intuitively, an adversary resolves all of the nondeterministic choices of a probabilistic hybrid automaton. Definition (Adversary) An adversary of a probabilistic hybrid automaton H is a function A mapping each finite path ω with last state (l,ν) of H to a distribution µ prob(l). Definition An adversary A of a probabilistic hybrid automaton H is divergent iff for each state of H the total probability of the divergent paths under A is 1. Let A H be the set of divergent adversaries of H. Definition A probabilistic hybrid automaton is non-zeno iff it has at least one divergent adversary. - Probabilistic hybrid automata 9 / 17

Question How could a logic arguing about timed and probabilistic behaviour look like? - Probabilistic hybrid automata 10 / 17

Probabilistic Timed Computation Tree Logic Definition (PTCTL Syntax) The abstract syntax of PTCTL is as follows: Φ ::= a g Φ Φ Φ z.φ P λ [ΦUΦ] with a an atomic proposition, g a clock constraint, z a formula clock, {,<,>, }, and λ [0,1]. - Probabilistic hybrid automata 11 / 17

PTCTL Semantics Definition σ, E = z.φ σ, E[z := 0] = Φ - Probabilistic hybrid automata 12 / 17

PTCTL Semantics Definition σ, E = z.φ σ, E[z := 0] = Φ σ, E = P λ [Φ 1 UΦ 2 ] for all divergent adversaries A A H, the total probability of all infinite pathes ω under A with ω, E = Φ 1 UΦ 2 is λ. - Probabilistic hybrid automata 12 / 17

PTCTL Semantics Definition σ, E = z.φ σ, E[z := 0] = Φ σ, E = P λ [Φ 1 UΦ 2 ] for all divergent adversaries A A H, the total probability of all infinite pathes ω under A with ω, E = Φ 1 UΦ 2 is λ. Remember: Φ 1 UΦ 2 in TCTL corresponds to (Φ 1 Φ 2 )UΦ 2 in CTL. - Probabilistic hybrid automata 12 / 17

Decidability results Lemma The PTCTL model checking problem for initialized probabilistic rectangular automata is decidable. - Probabilistic hybrid automata 13 / 17

Decidability results Lemma The PTCTL model checking problem for initialized probabilistic rectangular automata is decidable. Probabilistic timed automaton Probabilistic initialized stopwatch automaton Probabilistic initialized singular automaton Probabilistic initialized rectangular automaton - Probabilistic hybrid automata 13 / 17

A probabilistic timed automaton is a probabilistic rectangular automaton with deterministic jumps such that every variable is a clock, i.e., Act(l)(x) = [1,1] for all locations l and variables x. - Probabilistic hybrid automata 14 / 17

A probabilistic timed automaton is a probabilistic rectangular automaton with deterministic jumps such that every variable is a clock, i.e., Act(l)(x) = [1,1] for all locations l and variables x. Lemma The PTCTL model checking problem for probabilistic timed automata is decidable. - Probabilistic hybrid automata 14 / 17

A probabilistic timed automaton is a probabilistic rectangular automaton with deterministic jumps such that every variable is a clock, i.e., Act(l)(x) = [1,1] for all locations l and variables x. Lemma The PTCTL model checking problem for probabilistic timed automata is decidable. Model checking as for timed automata with summing up probabilities for distibutions, and taking minimum/maximum of all distributions within a location. - Probabilistic hybrid automata 14 / 17

Decidability results A probabilistic stopwatch automaton is a probabilistic rectangular automaton with deterministic jumps and stopwatch variables only. - Probabilistic hybrid automata 15 / 17

Decidability results A probabilistic stopwatch automaton is a probabilistic rectangular automaton with deterministic jumps and stopwatch variables only. Probabilistic timed automaton Probabilistic initialized stopwatch automaton - Probabilistic hybrid automata 15 / 17

Decidability results A probabilistic stopwatch automaton is a probabilistic rectangular automaton with deterministic jumps and stopwatch variables only. Probabilistic timed automaton Probabilistic initialized stopwatch automaton Construction is similar as for non-probabilistic automata (probabilistic setting: adapt preconditions). - Probabilistic hybrid automata 15 / 17

Decidability results A probabilistic singular automaton is a probabilistic rectangular automaton with deterministic jumps such that every variable of the automaton is a finite-slope variable. - Probabilistic hybrid automata 16 / 17

Decidability results A probabilistic singular automaton is a probabilistic rectangular automaton with deterministic jumps such that every variable of the automaton is a finite-slope variable. Probabilistic imed automaton Probabilistic initialized stopwatch automaton Probabilistic initialized singular automaton - Probabilistic hybrid automata 16 / 17

Decidability results A probabilistic singular automaton is a probabilistic rectangular automaton with deterministic jumps such that every variable of the automaton is a finite-slope variable. Probabilistic imed automaton Probabilistic initialized stopwatch automaton Probabilistic initialized singular automaton Construction is similar as for non-probabilistic automata (probabilistic setting: adapt pre- and postconditions). - Probabilistic hybrid automata 16 / 17

Decidability results Probabilistic timed automaton Probabilistic initialized stopwatch automaton Probabilistic initialized singular automaton Probabilistic initialized rectangular automaton - Probabilistic hybrid automata 17 / 17

Decidability results Probabilistic timed automaton Probabilistic initialized stopwatch automaton Probabilistic initialized singular automaton Probabilistic initialized rectangular automaton Construction is similar as for non-probabilistic automata (probabilistic setting: adapt all conditions, copies of distributions). - Probabilistic hybrid automata 17 / 17