Alternating-time temporal logic
Top Cited Papers
- 1 September 2002
- journal article
- Published by Association for Computing Machinery (ACM) in Journal of the ACM
- Vol. 49 (5) , 672-713
- https://doi.org/10.1145/585265.585270
Abstract
Temporal logic comes in two varieties: linear-time temporal logic assumes implicit universal quantification over all paths that are generated by the execution of a system; branching-time temporal logic allows explicit existential and universal quantification over all paths. We introduce a third, more general variety of temporal logic: alternating-time temporal logic offers selective quantification over those paths that are possible outcomes of games, such as the game in which the system and the environment alternate moves. While linear-time and branching-time logics are natural specification languages for closed systems, alternating-time logics are natural specification languages for open systems. For example, by preceding the temporal operator "eventually" with a selective path quantifier, we can specify that in the game between the system and the environment, the system has a strategy to reach a certain state. The problems of receptiveness, realizability, and controllability can be formulated as model-checking problems for alternating-time formulas. Depending on whether or not we admit arbitrary nesting of selective path quantifiers and temporal operators, we obtain the two alternating-time temporal logics ATL and ATL*.ATL and ATL* are interpreted over concurrent game structures. Every state transition of a concurrent game structure results from a choice of moves, one for each player. The players represent individual components and the environment of an open system. Concurrent game structures can capture various forms of synchronous composition for open systems, and if augmented with fairness constraints, also asynchronous composition. Over structures without fairness constraints, the model-checking complexity of ATL is linear in the size of the game structure and length of the formula, and the symbolic model-checking algorithm for CTL extends with few modifications to ATL. Over structures with weak-fairness constraints, ATL model checking requires the solution of 1-pair Rabin games, and can be done in polynomial time. Over structures with strong-fairness constraints, ATL model checking requires the solution of games with Boolean combinations of Büchi conditions, and can be done in PSPACE. In the case of ATL*, the model-checking problem is closely related to the synthesis problem for linear-time formulas, and requires doubly exponential time.Keywords
This publication has 32 references indexed in Scilit:
- An automata-theoretic approach to branching-time model checkingJournal of the ACM, 2000
- The model checker SPINIEEE Transactions on Software Engineering, 1997
- CTL∗ and ECTL∗ as fragments of the modal μ-calculusTheoretical Computer Science, 1994
- Symbolic Boolean manipulation with ordered binary-decision diagramsACM Computing Surveys, 1992
- Modelling knowledge and action in distributed systemsDistributed Computing, 1989
- Automatic verification of finite-state concurrent systems using temporal logic specificationsACM Transactions on Programming Languages and Systems, 1986
- The complexity of two-player games of incomplete informationJournal of Computer and System Sciences, 1984
- AlternationJournal of the ACM, 1981
- On the menbership problem for functional and multivalued dependencies in relational databasesACM Transactions on Database Systems, 1980
- Solving sequential conditions by finite-state strategiesTransactions of the American Mathematical Society, 1969