AnalysisofSimple CommunicationProtocol(1) ( )

ExercisesonSpecification&Verification

CafeOBJ TeamofJAIST

Roadmap
SimpleCommunicationProtocol(SCP) ModelingSCP SpecificationofDateUsed ExercisesonSpecification&Verification

SinaiaSchool,Mar0311,2008

SimpleCommunicationProtocol ( (SCP) )

SimpleCommunicationu Protocol
bit1 cell1 ll1 <bit1,pac> bit2 cell2 bit2 Receiver Sender

AlthoughABPusesunreliablequeues,SCPusesunreliable cells.Datainthecellscanbelost. Initially,bothcellsareempty&bothbitsarethesame. Sender&Receiverdothefollowing:

Senderputs<bit1,pac> intocell1 repeatedly. Receiverputsbit2 intocell2 repeatedly. WhenSendergetsabitb fromcell2,ifb doesnotequalbit1, Senderselectsthenextpacketandalternatesbit1. WhenReceivergets<b,p> fromcell1,ifb equalsbit2, Receiverreceivesp andalternatesbit2.
SinaiaSchool,Mar0311,2008

Animation
bit1: f t cell1 <t,p1> <f,p0> <t,p1> <f,p0> bit2: f t

Sender next: p1 p0 f t

f t cell2

Receiver list: (p1 (p0)p0) nil

SinaiaSchool,Mar0311,2008

OneDesirableProperty
When h Receiverreceivesthe h nth hpacket, k
Receiverhasreceivedthen+1 packetsp0, , pn inthisorder, eachpi fori = 0,,n hasbeenreceivedonly once,and nootherpacketshavebeenreceived.

Thepropertyiscalled thereliablecommunicationproperty inthistalk.

SinaiaSchool,Mar0311,2008 6

ModelingSCP

Observations
S Sender d to t Receiver R i channel h l bop cell1 : Sys -> PCell ReceivertoSenderchannel bop cell2 : Sys -> BCell Sender'sbit bop bit1 : Sys -> > Bool Receiver'sbit bop bit2 : Sys -> Bool TheordinalofthepacketsentnextbySender bop next : Sys -> Nat ThepacketsreceivedbyReceiver bop list : Sys -> List

SinaiaSchool,Mar0311,2008

Transitions
S Sender's d ' sending di pairs i of fbit bits&packets k t bop send1 : Sys -> Sys Sender'sreceivingbits bop rec1 : Sys -> Sys Receiver'ssendingbits bop send2 : Sys -> > Sys Receiver'sreceivingpairsofbits&packets bop rec2 : Sys -> Sys Droppingthecontentofcell1 bop drop1 : Sys -> Sys Droppingthecontentofcell2 bop drop2 : Sys -> Sys

SinaiaSchool,Mar0311,2008

TransitionDiagramofSender
<*, true> t > <rec1, ow> bit1: f next: 0 <*, true> t > <rec1, ow> bit1: t next: 1 bit1: f next: 2

<rec1, cell2 =/= empty and get(cell2) =/= f>

<rec1, cell2 =/= empty and get(cell2) =/= t>

<trans, cond>

Iftheconditioncond holdsinthestateS,thenthe
transitiontranscanchangeS toS. ow> meansthatifanyotherconditionsfor <trans,ow> trans donothold,trans canchangeS toS. * representsanytransitionexceptthoseexplicitly stated stated.
SinaiaSchool,Mar0311,2008 10

TransitionDiagramofReceiver
<*, true> t > <rec2, ow> bit2: f bit2 list: nil <*, true> t > <rec2, ow> bit2: t bit2 list: p0 bit2: f bit2 list: p1 p0 <rec2, cell1 =/= empty and fst(get(cell1)) =/= t> wheresnd(get(cell1)) = p1

<rec2, cell1 =/= empty and fst(get(cell1)) =/= f> wheresnd(get(cell1)) = p0

fst(< e1,e2>) = e1 snd(<e1,e2>) = e2

SinaiaSchool,Mar0311,2008

11

TransitionDiagramofChannels
<*, true> <*, true> <reci, true> < t > <dropi, true> <sendi, true> celli: z

celli: empty

celli: x celli: y

<sendi, true>

SinaiaSchool,Mar0311,2008

12

SpecificationofDataUsed

DataUsed
Booleanvaluesforbits Naturalnumbersforordinalsofpackets Packets PairsofBooleanvalues&packets Cells(forchannels)ofpairsofBVs&pacs Cells(forchannels)ofBooleanvalues Listofpackets
SinaiaSchool,Mar0311,2008 14

DataModules
M Modules d l EQBOOL,PNAT,PACKET,PAIR,CELL,LIST, PACKET LIST,BOOL-PACKET-PAIR PACKET-LIST BOOL PACKET PAIR, BOOL-CELL,BOOL-PACKET-PAIR-CELL, EQTRIV Views EQTRIV2PACKET,EQTRIV2EQBOOL, EQTRIV2BOOL-PACKET-PAIR Letustakealookatthefilescp.mod.
SinaiaSchool,Mar0311,2008 15

ExercisesonSpecification& Verification

Exercises
1. WritethemoduleSCP inwhichthemodelof SCPisspecified. p 2. Makesomeexperimentsbasedonthe specification. specification 3. VerifythatSCPsatisfiesthereliable communicationpropertybywritingproof scores.

SinaiaSchool,Mar0311,2008

17