14.08.2013 Views

Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee

Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee

Reactive Systems: Modelling, Specification and Verification - Cs.ioc.ee

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

126 CHAPTER 6. HML WITH RECURSION<br />

transition system. We therefore have that our first approximation to the largest<br />

fixed point is the set<br />

OFX ({s, s1, s2, t, t1}) = (〈·b·〉{s, s1, s2, t, t1}) ∩ [·b·]{s, s1, s2, t, t1}<br />

= {s1, s2, t1} ∩ {s, s1, s2, t, t1}<br />

= {s1, s2, t1} .<br />

Note that our c<strong>and</strong>idate solution to the equation has shrunk in size, since an application<br />

of OFX to the set of all processes has removed the states s <strong>and</strong> t from our<br />

c<strong>and</strong>idate solution. Intuitively, this is because, by applying OFX to the set of all<br />

states, we have found a reason why s <strong>and</strong> t do not afford the property specified by<br />

X max<br />

= 〈b〉tt ∧ [b]X ,<br />

namely that s <strong>and</strong> t do not have a b-labelled outgoing transition, <strong>and</strong> therefore that<br />

neither of them is in the set 〈·b·〉{s, s1, s2, t, t1}.<br />

Following our iterative algorithm for the computation of the largest fixed point,<br />

we now apply the function OFX to the new c<strong>and</strong>idate largest solution, namely<br />

{s1, s2, t1}. We now have that<br />

OFX ({s1, s2, t1}) = (〈·b·〉{s, s1, s2, t, t1}) ∩ [·b·]{s1, s2, t1}<br />

= {s1, s2, t1} ∩ {s, s1, s2, t, t1}<br />

= {s1, s2, t1} .<br />

(You should convince yourselves that the above calculations are correct!) We have<br />

now found that {s1, s2, t1} is a fixed point of the function OFX . By Theorem 6.1,<br />

this is the largest fixed point <strong>and</strong> therefore states s1, s2 <strong>and</strong> t1 are the only states in<br />

our labelled transition system that satisfy the property<br />

X max<br />

= 〈b〉tt ∧ [b]X .<br />

This is in complete agr<strong>ee</strong>ment with our intuition because those are the only states<br />

that can perform a b-action in all states that they can reach by performing sequences<br />

of b-labelled transitions.<br />

Exercise 6.6 Consider the property<br />

Y min<br />

= 〈b〉tt ∨ 〈{a, b}〉Y .<br />

Use Theorem 6.1 to compute the set of processes in the labelled transition system<br />

above that satisfy this property.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!