Symbolic model checking for real-time systems
Thomas Henzinger
Nicollin, Xavier
Sifakis, Joseph
Yovine, Sergio
We describe finite-state programs over real-numbered time in a guarded-command language with real-valued clocks or, equivalently, as finite automata with real-valued clocks. Model checking answers the question which states of a real-time program satisfy a branching-time specification (given in an extension of CTL with clock variables). We develop an algorithm that computes this set of states symbolically as a fixpoint of a functional on state predicates, without constructing the state space. For this purpose, we introduce a μ-calculus on computation trees over real-numbered time. Unfortunately, many standard program properties, such as response for all nonzeno execution sequences (during which time diverges), cannot be characterized by fixpoints: we show that the expressiveness of the timed μ-calculus is incomparable to the expressiveness of timed CTL. Fortunately, this result does not impair the symbolic verification of "implementable" real-time programs-those whose safety constraints are machine-closed with respect to diverging time and whose fairness constraints are restricted to finite upper bounds on clock values. All timed CTL properties of such programs are shown to be computable as finitely approximable fixpoints in a simple decidable theory.
Elsevier
1994
info:eu-repo/semantics/article
doc-type:article
text
http://purl.org/coar/resource_type/c_6501
https://research-explorer.app.ist.ac.at/record/4503
Henzinger TA, Nicollin X, Sifakis J, Yovine S. Symbolic model checking for real-time systems. <i>Information and Computation</i>. 1994;111(2):193-244. doi:<a href="https://doi.org/10.1006/inco.1994.1045">10.1006/inco.1994.1045</a>
info:eu-repo/semantics/altIdentifier/doi/10.1006/inco.1994.1045
info:eu-repo/semantics/closedAccess