07.01.2013 Views

Lecture Notes in Computer Science 3472

Lecture Notes in Computer Science 3472

Lecture Notes in Computer Science 3472

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

s0<br />

on, true, {c}<br />

off , c =5, ∅<br />

8 Test Derivation from Timed Automata 203<br />

s1<br />

c ≤ 5<br />

on, c < 5,<br />

{c}<br />

Fig. 8.1. A timed automaton specification of an automatic Light Switch<br />

Remark 8.3. Timed automata were <strong>in</strong>troduced by Alur and Dill [AD94] as a generalization<br />

of f<strong>in</strong>ite-state mach<strong>in</strong>es over <strong>in</strong>f<strong>in</strong>ite words [Tho90]. We only consider<br />

timed automata without acceptance conditions which are usually referred to as<br />

timed safety automata [HNSY92]. An <strong>in</strong>troduction to acceptance is given <strong>in</strong><br />

Section 19.2, whereas a discussion of acceptance conditions <strong>in</strong> the context of<br />

timed automata can be found elsewhere [HKWT95].<br />

The behavior of a timed automaton A depends on both its current location<br />

and the actual values of all its clocks.<br />

Def<strong>in</strong>ition 8.4. A clock valuation over a set of clocks C is a map ν that<br />

assigns to each clock c ∈ C avalue<strong>in</strong>R ≥0 .WithV (C )wedenotethesetof<br />

clock valuations over C .Ford ∈ R ≥0 , ν + d denotes the clock <strong>in</strong>terpretation<br />

which maps every clock c to the value ν(c) +d. Forλ ⊆ C , ν[λ := 0] denotes<br />

the clock <strong>in</strong>terpretation for C which assigns 0 to each c ∈ λ, and agrees with ν<br />

over the rest of the clocks.<br />

A labeled transition system M with uncountably many states can be used<br />

to def<strong>in</strong>e the possible behavior of a timed automata A .AstateofM has to<br />

be a pair 〈s,ν〉 such that s is a location of A and ν is a clock valuation for C<br />

satisfy<strong>in</strong>g <strong>in</strong>variant InvA (s). Transitions of M represent either an elapse of time<br />

or a transition of A .<br />

Def<strong>in</strong>ition 8.5. The semantics of a timed automaton A is given by the LTS<br />

M = 〈Q, Q0, L, →〉, where<br />

• Q = {〈s,ν〉∈SA × V (CA ) | ν |= InvA (s)}<br />

• Q0 ⊆ Q with 〈s,ν〉∈Q0 iff s ∈ S0A and ν(c) = 0 for all clocks c ∈ CA<br />

• L = ΣA ∪ R≥0 •→⊆Q × L × Q, which could be either<br />

– (〈s,ν〉, d, 〈s,ν+ d〉) iffd ∈ R≥0 and for all 0 ≤ d ′ ≤ d, ν + d ′ |= InvA (s)<br />

– (〈s,ν〉, a, 〈s ′ ,ν[λ := 0]〉) iff(s, a,ϕ,λ,s ′ ) ∈ EA and ν |= ϕ<br />

Due to dense-time clocks, the transition system M for a timed automaton A<br />

has <strong>in</strong>f<strong>in</strong>itely many states and operates on <strong>in</strong>f<strong>in</strong>itely many symbols. Analysis of

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!