<?xml version="1.0" encoding="ISO-8859-1"?>
<report no="A-1996-1"
  title="Equivalences, preorders and compositional verification for linear time temporal logic and concurrent systems"
  date="March 1996"
  pages="176+9"
  genterms="Theory, Verification"
  keywords="concurrency, equivalences, preorders, specification, temporal logic"
  issn="1238-8645"
  isbn="951-45-7338-2">
<author name="Roope Kaivola"/>
<phd/>
<class name="F.3.1 [Specifying and verifying and reasoning about programs]: logics of programs, mechanical verification, specification techniques,"/>
<class name="F.1.2 [Modes of computation]: concurrency"/>
<class name="D.2.4 [Program verification]"/>
<class name="C.2.2 [Network protocols]: protocol verification"/>
<file url="A-1996-1.ps.gz"/>
<abstract>
<p>
A promising approach to formal specification and verification of
finite-state concurrent systems is using propositional
temporal logic as a specification language and applying automated
model-checking algorithms for the verification task. However, the
so-called state explosion-problem caused by representing concurrency
by interleaving makes model-checking in many cases practically intractable.
One way of attacking this problem is replacing the modules of a system
by smaller ones so that the visible properties of the system are not affected.
This approach leads to notions of compositional
property-preserving equivalences and preorders between modules.
</p>
<p>
This work examines the uses of equivalences and preorders in verifying
nexttime-less linear temporal logic properties. Concurrent systems are
modelled here by labelled transition systems augmented with state information,
and both synchronization and read-shared variables are considered as
methods of communication. We examine a novel equivalence notion, called the
non-divergent failures divergences or NDFD-equivalence.
It is shown that NDFD preserves all nexttime-less linear temporal logic
properties, and that it is compositional with respect to parallel
composition and abstraction by hiding and encapsulation.
Conversely, it is shown that NDFD is the weakest such equivalence,
i.e. that it is fully abstract with respect to preserving nexttime-less
linear temporal logic properties in an arbitrary context.
The computational complexity of determining NDFD-equivalence is also
examined and the problem is shown to be PSPACE-complete.
</p>
<p>
Analogous to NDFD-equivalence, the theory of NDFD-preorder is
developed and the compositionality, full abstractness and
computational complexity results extended to it.
Moreover, it is shown that the verification technique of
modular validity introduced by Manna and Pnueli
corresponds to an extremal case of NDFD-preorder.
As a larger case study illustrating the practical applications of
the results, we use the NDFD-preorder to verify semi-automatically
both safety and liveness properties of
the sliding window communication protocol
for arbitrary channel lengths and realistic parameter values.
In this process we locate
a previously undiscovered fault leading to lack of liveness
in a version of the protocol.
</p>
</abstract>
</report>

