Abstract 1 Introduction 2 Automata and Decision Problems 3 Mixed Integer Bilinear Systems 4 Decidability in the Bounded Case 5 Conclusion References

Reachability for Multi-Priced Timed Automata with Positive and Negative Rates

Andrew Scoones ORCID Department of Computer Science, University of Oxford, UK Mahsa Shirmohammadi ORCID CNRS, IRIF, Université of Paris Cité, France James Worrell ORCID Department of Computer Science, University of Oxford, UK
Abstract

Multi-priced timed automata (MPTA) are timed automata with observer variables whose derivatives can change from one location to another. Observers are read-once variables: they do not affect the control flow of the automaton and their value is output only at the end of a run. Thus MPTA lie between timed and hybrid automata in expressiveness. Previous work considered observers with non-negative slope in every location. In this paper we treat observers that have both positive and negative rates. Our main result is an algorithm to decide a gap version of the reachability problem for this variant of MPTA. We translate the gap reachability problem into a gap satisfiability problem for mixed integer-real systems of nonlinear constraints. Our main technical contribution – a result of independent interest – is a procedure to solve such contraints via a combination of branch-and-bound and relaxation-and-rounding.

Keywords and phrases:
Bilinear constraints, Existential theory of real closed fields, Diophantine approximation, Pareto curve
Funding:
Andrew Scoones: Supported by UKRI Frontier Research Grant EP/X033813/1.
Mahsa Shirmohammadi: Supported by VeSyAM (ANR-22- CE48-0005).
James Worrell: Supported by UKRI Frontier Research Grant EP/X033813/1.
Copyright and License:
[Uncaptioned image] © Andrew Scoones, Mahsa Shirmohammadi, and James Worrell; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation Logic and verification
; Theory of computation Quantitative automata ; Theory of computation Timed and hybrid models ; Theory of computation Verification by model checking
Editors:
Jörg Endrullis and Sylvain Schmitz

1 Introduction

Timed automata [1] are a widely studied model of real-time systems that extend classical finite state-automata with real-valued variables, called clocks, that evolve with derivative one and which can be queried and reset along transitions. Multi-Priced Timed Automata (MPTA) [7, 10, 13, 25] further extend timed automata with variables, called observers, that have a non-negative slope that can change from one location to another. Such variables can model the accumulation of costs or the use of resources along a computation, such as energy and memory consumption in embedded systems, or bandwidth in communication networks. For this reason MPTA are widely used to model multi-objective real-time optimisation problems [9].

While observers exhibit richer dynamics than clocks, they may not be queried while taking edges. Thus MPTA lie between timed automata (for which reachability is decidable) and linear hybrid automata (for which reachability is undecidable [17]). A natural class of verification problems for MPTA concerns reachability subject to constraints on the observers. A simple variant is the Domination Problem, which asks to reach a location subject to upper bounds on each observer. Here one can think of the constraints as representing upper bounds on accumulated costs or resources. The Domination Problem was shown decidable in [21] using well-quasi-orders and was later shown to be PSPACE-complete in [12, Theorem 4].

A more expressive version of the Domination Problem partitions the set of observers into cost variables and reward variables and asks to reach a location subject to upper bounds on costs and lower bounds on rewards. This variant is, unfortunately, undecidable. However it is shown in [12, Theorem 6] that a gap version of the problem – called the Gap Domination Problem – is decidable. In the Gap Domination Problem the input additionally contains a slack ε>0. The objective is to distinguish the case that the constraints on the observers can be satisfied with slack ε from the case in which they cannot be satisfied at all. In general, gap problems are decision versions of approximation problems [3, Chapter 18.2]. Decidability of the Gap Domination Problem implies that the Pareto curve of undominated reachable cost vectors can be computed to arbitrary precision (cf. [11]).

The objective of this paper is to address a more expressive variant of MPTA than hitherto considered: namely those in which observers can have both positive and negative rates. Alternatively, and equivalently, one can consider MPTA with nonnegative rates, but in which one allows reachability specifications to contain constraints on the difference between two observers rather than just threshold constraints that compare observers to constants. Indeed, this extension is motivated by the desire to measure net resource use along computations. In this more general setting, the Domination Problem, of course, remains undecidable; one moreover loses monotonicity properties on which previous positive decidability results rely, including the decision procedure for the Gap Domination Problem given in [12, Theorem 15]. The main result of this paper is to establish decidability (in nondeterministic exponential time) of the Gap Domination Problem in the presence of positive and negative rates via a new decision procedure.

We start by recalling a result of [12] that characterises the set of all reachable observer values for a given MPTA via a system of mixed integer-real nonlinear constraints. Our main technical contribution, which is of independent interest, shows how to solve a gap version of the satisfiability problem for such systems of constraints. Our method involves a combination of relaxation-and-rounding and branch-and-bound that relies on Khinchine’s Flatness Theorem from Diophantine approximation. We formulate a relaxation of the system of constraints such that a solution to the relaxed version can be rounded to a solution of the original problem, while unsolvability of the relaxed version permits a branch-and-bound step that eliminates a variable from the original system of constraints.

Systems of non-linear constraints over integer and real variables appear in many different domains and are widely studied, although typically not from the point of view of decidability since most classes of problems with unbounded integer variables are undecidable [16]. Other than [12], we are not aware of previous work on the gap problem considered here. Kachiyan and Porkolab [19] showed that it is decidable whether a convex semialgebraic set contains an integer point; however we work with non-convex sets.

In this paper we consider MPTA with arbitrarily many observers. There is a significant literature and mature tool support concerning the special case of MPTA with a single observer, which are variously called Priced Timed Automata or Weighted Timed Automata. In this case, the optimal cost to reach a given location is computable [2, 6, 20]. In the case of one cost and one reward observer, one can also compute the optimal reward-to-cost ratio in reaching a given location [7]. The preceding results use the so-called corner-point abstraction, which is insufficient for multi-objective model checking. Instead, the present paper implicitly relies on the simplex-automaton abstraction, introduced in [12], which underlies the non-linear constraint problems that are the subject of our main results. All previously mentioned works involve observers that evolve linearly with time. Observer variables that vary non-linearly with time are considered in [4]. In the non-linear setting the optimal cost reachability problem is undecidable in general. Another variant, this time towards greater simplicity, is to consider observers that are only updated through discrete transitions [26].

2 Automata and Decision Problems

2.1 Multi-Priced Timed Automata

Let 0 denote the set of non-negative real numbers. Given a set 𝒳={x1,,xn} of clocks, the set Φ(𝒳) of clock constraints is generated by the grammar

φ::=truexkxkφφ,

where k is a natural number and x𝒳. A clock valuation is a mapping ν:𝒳0 that assigns to each clock a non-negative real number. We denote by 𝟎 the valuation such that 𝟎(x)=0 for all clocks x𝒳. We write νφ to denote that ν satisfies the constraint φ. Given t0, we let ν+t be the clock valuation such that (ν+t)(x)=ν(x)+t for all clocks x𝒳. Given λ𝒳, let ν[λ0] be the clock valuation such that ν[λ0](x)=0 if xλ, and ν[λ0](x)=ν(x) otherwise.

A multi-priced timed automaton (MPTA) 𝒜=L,0,Lf,𝒳,𝒴,E,R comprises a finite set L of locations, an initial location 0L, a set LfL of accepting locations, a finite set 𝒳 of clock variables, a finite set 𝒴 of observers, a set EL×Φ(𝒳)×2𝒳×L of edges, and a rate function R:L𝒴. Here R()(y) is the derivative of the observer y𝒴 in location . Denote by 𝒜 the length of the description of 𝒜, where all integers are written in binary.

A state of 𝒜 is a triple (,ν,t) where is a location, ν a clock valuation, and t0 is a time stamp. A run of 𝒜 is an alternating sequence of states and edges

ρ=(0,ν0,t0)e1(1,ν1,t1)e2em(m,νm,tm),

where t0=0, ν0=𝟎ti1ti for all i{1,,m}, and ei=i1,φ,λ,iE is such that νi1+(titi1)φ and νi=(νi1+(titi1))[λ0] for i=1,,m. The run is accepting if mLf. The value of such a run is a vector val(ρ)𝒴, defined by val(ρ)=i=0m1(ti+1ti)R(i). We refer to Figure 1 for an example of an MPTA and its operational semantics.

Figure 1: The figure shows an MTPA with three clocks x,y,z and two observer variables o,e, respectively standing for odd and even. The observer variables have slope 0 unless otherwise indicated; thus o aggregates the total dwell time in the odd state and e aggregates the total dwell time in the even state. An accepting run is completely determined by a sequence of nonnegative real numbers d0,,d2k, giving the respective delays between successive transitions. Suppose we wish to reach the accepting state subject to the two objectives e2 and o1. This is achieved, among others, by the run with sequence of time delays 23,13,23,13,23,13,23 and the run with integer sequence of delays 1,0,1,0,1,1,0 (and any convex combination of the two runs). If the inequalities in the guards on x and y are replaced by equalities then the first run is the unique one realising the two given objectives. In the case of so-called pure reachability objectives, i.e., exclusively upper bound constraints or exclusively lower bound constraints on the observers, there is an explicit upper bound on the granularity of the delays in a run witnessing that the objective is realisable (13 in the present example) [12, Section 6]. This no longer holds in the case of reachability objectives that contain both upper and lower bounds on observers.

2.2 The Gap Domination Problem

The Domination Problem is as follows. Given an MPTA 𝒜 with set 𝒴 of observers and a target γ𝒴, decide whether there is an accepting run ρ of 𝒜 such that val(ρ)γ pointwise.

Our formulation of the Domination Problem involves a conjunction of constraints of the form yc, where y𝒴 and c. However such inequalities can encode more general linear constraints of the form a1y1++akykc, where y1,,yk𝒴, a1,,ak,c and {,,=}. To do this one introduces a fresh observer to denote each linear term a1y1++akyk (two fresh observers are needed for an equality constraint). For this reduction it is crucial that we allow observers with negative rates.

The Domination Problem is PSPACE-complete for MPTA with positive rates only [12, Theorem 11], but is undecidable if negative rates are allowed [12, Theorem 3]. This motivates us to consider the Gap Domination Problem – a variant of the above problem in which the input additionally includes a slack parameter ε>0. If there is some run ρ such that val(ρ)γε then the output should be “dominated” and if there is no run ρ such that val(ρ)γ then the output should be “not dominated”. In case neither of these alternatives hold (i.e., γ is dominated but not with slack ε) then there is no requirement on the output. The Gap Domination Problem is the decision version of the task of computing ε-approximate Pareto curve in the sense of [11].

The following proposition and (a generalisation of [12, Propositions 6 and 7]), concerning the structure of the set of reachable vectors of observer values, allows us to reduce the Gap Domination Problem to a Diophantine problem. Geometrically the proposition says that the set of reachable observer vectors consists of a countable union of simplexes, where each simplex is specified by its vertices – a tuple of integer vectors – and the set of such tuples is semilinear. The proposition is based on the fact that if there are d observers then any reachable observer valuation is a convex combination of d+1 valuations that are respectively reached along d+1 runs, all taking the same sequence of edges, in which all transitions occur at integer time points (see [12] for details).

Proposition 1.

Let 𝒜 be an MPTA with set of observers 𝒴 having cardinality d. Then there is a semilinear set 𝒮𝒜(𝒴)d+1 such that for every accepting run ρ of 𝒜 there exists (γ1,,γd+1)𝒮𝒜 for which cost(ρ) lies in the convex hull of {γ1,,γd+1}. Moreover 𝒮𝒜 can be written as a union of a collection of linear sets that can be computed in time exponential in 𝒜 and each of which has a description length polynomial in 𝒜.

Proof.

The proposition was proved in [12] under the assumption that observers have nonnegative slope. The general case follows easily. Indeed, given an arbitrary MPTA 𝒜=L,0,Lf,𝒳,𝒴,E,R, we define a new MPTA 𝒜, differing from 𝒜 only in its set of observers and rate function, such that all observers in 𝒜 have non-negative rates. The set of observers of 𝒜 is 𝒴:={y+,y:y𝒴} and the rate function R is given by

R(y+)():=max(R(y)(),0)andR(y)():=max(R(y)(),0)

for all y𝒴 and all L.

Define Φ:𝒴𝒴 by Φ(γ)(y)=γ(y+)γ(y). If a run ρ of 𝒜 has cost vector γ then ρ has cost vector Φ(γ) considered as a run of 𝒜. Thus if we define 𝒮𝒜:=Φ(𝒮𝒜), where Φ has been lifted pointwise to a linear map Φ:(𝒴)d+1(𝒴)d+1, then 𝒮𝒜 satisfies the requirements of the proposition.

The following is immediate from Proposition 1.

Corollary 2.

Given γ𝒴, there exists a run ρ with val(ρ)γ if and only if the following mixed integer-real system of non-linear inequalities has a solution.

λ1γ1++λd+1γd+1γ1=λ1++λd+1(γ1,,γd+1)𝒮𝒜0λ1,,λd+1γ1,,γd+1𝒴λ1,,λd+1 (1)

In the following two sections we analyse systems of constraints of the above form, obtaining a general result that allows us to solve the Gap Domination Problem.

3 Mixed Integer Bilinear Systems

3.1 The Satisfiability Problem

A mixed-integer bilinear (MIB) system is a collection of constraints in integer variables 𝒙 and real variables 𝒚 of the form:

𝒙Ai𝒚bi(i=1,,)C𝒙𝒅E𝒚𝒇𝒙m,𝒚n. (2)

We assume that all constants in (2) are integer; thus if the system is satisfiable then there is a satisfying assignment in which 𝒚 is a rational vector. We say that a satisfying assignment has slack ε>0 if 𝒙Ai𝒚biε, for i=1,,. Note that the slack requirement refers only to the nonlinear constraints.

We say that the system (2) is bounded if the polyhedron {𝒚n:E𝒚𝒇} is bounded, i.e., is a polytope. Crucially, the MIB systems arising from multi-priced timed automata in Corollary 1 are bounded. Unfortunately, however, the satisfiability problem for MIB systems is undecidable, even in the bounded case.

Proposition 3.

The satisfiability problem for bounded mixed-integer bilinear systems is undecidable.

Proof.

We reduce from the following version of Hilbert’s 10th Problem (see [12, Proposition 1]): given a finite system 𝒮 of equations in variables x1,,xn, with each equation either having the form xi=xj+xk or xi=xjxk, determine whether 𝒮 has a solution in the set of strictly positive integers.

The reduction involves transforming the system 𝒮 into an equisatisfiable MIB system 𝒮 over a set of integer variables x0,,xn0 (i.e, the variables of 𝒮 plus a new variable x0) and real variables y1,,yn0. The construction is such that every solution of 𝒮 extends to a solution of 𝒮 and, conversely, every solution of 𝒮 restricts to a solution of 𝒮.

The system 𝒮 includes equations x0=1 and xiyi=1 for i=1,,n. The linear equations xi=xj+xk from 𝒮 are carried over to 𝒮 and, for each equation xi=xjxk in 𝒮, we include an equation (xj+xk)yi=x0(yj+yk) in 𝒮. The latter is equivalent to xj+xkxi=1xj+1xk in the presence of the equations xiyi=xjyj=xkyk=1 and x0=1, which in turn is clearly equivalent to xi=xjxk. By adding constraints 0yi1 for i=1,,n we furthermore make 𝒮 bounded without affecting the integrity of the reduction.

3.2 The Gap Satisfiability Problem

In light of Proposition 3, we introduce the following gap version of the satisfiability problem for MIB systems. In this variant we seek a procedure that inputs ε>0 and a MIB system 𝒮 in the form (2) and returns either “UNSAT” or “SAT” subject to the following requirements:

  1. 1.

    If 𝒮 has a satisfying assignment with slack ε then the output must be “SAT”.

  2. 2.

    If 𝒮 is not satisfiable then the output must be ”UNSAT”.

Note that we place no restriction on the output in the case that 𝒮 is satisfiable but with no satisfying assignment having slack ε.

In Section 4 we will show that the Gap Satisfiability Problem is decidable for bounded MIB systems. The following proposition shows the necessity of the boundedness hypothesis.

Proposition 4.

The Gap Satisfiability Problem is undecidable for (unbounded) MIB systems.

Proof.

The proof is by reduction from the same variant of Hilbert’s Tenth Problem as in the proof of Proposition 3. Recall that an instance of this problem comprises a system 𝒮 of equations in positive-integer variables x1,,xn, with each equation having the form either xi=xj+xk or xi=xjxk, where i,j,k{1,,n}. Given such a system, we construct an MIB system 𝒮 over integer variables x0,,xn+1 and real variables y0,,yn+1 such that every satisfying assignment of 𝒮 extends to a satisfying assignment of 𝒮 with slack 12 and every satisfying assignment of 𝒮 restricts to a satisfying assignment of 𝒮.

We include the equations x0=1 and y0=1 in 𝒮. Each linear equation xi=xj+xk in 𝒮 is carried over to 𝒮. For each equation xi=xjxk in 𝒮 we include the inequality |xiy0xjyk|12 in 𝒮. We then add the following collection of constraints to 𝒮 for all i{1,,n+1} that intuitively force xi and yi to be very close together:

  1. 1.

    |xiy0x0yi|1;

  2. 2.

    |xn+1yixiyn+1|1;

  3. 3.

    xn+1y04(x0+xi)(y0+yi)+1.

A satisfying valuation of 𝒮 can be extended to a valuation that satisfies 𝒮 with slack 12 by setting x0:=1, xn+1:=4maxi{1,,n}(1+xi)2+1, and yi:=xi for i=0,,n+1.

Conversely, we claim that every satisfying valuation of 𝒮 (with no assumption on the slack) restricts to a satisfying valuation of 𝒮. Indeed, by Item 2, above, for all k{1,,n} we have

|xn+1(xkyk)xk(xn+1yn+1)|=|xn+1ykxkyn+1|(2)1.

By Items 1 and 3, this entails that for all j{1,,n},

|xkyk|xk|xn+1yn+1|+1xn+1(1)xk+1xn+1(3)14(yj+1)(1)14xj

and hence |xjxkxjyk|14. Combined with |xixjyk|12 we conclude that |xixjxk|34 and hence xi=xjxk.

It is shown in [12, Theorem 6] how to solve the Gap Satisfiabililty Problem for a subclass of MIB systems, which we here call positive. A positive MIB system has the form

𝒙Ai𝒚bi(i=1,,1)𝒙Ai𝒚bi(i=1+1,,2)C𝒙𝒇,𝒙𝟎E𝒚𝒇,𝒚𝟎𝒙m,𝒚n.

with all coefficients of Ai being non-negative rational for i=1,,2. This variant can be solved by a naive relaxing and rounding procedure, which does not require the boundedness assumption. However, while suffiicent to handle MPTA with non-negative rates, positive MIB appear insufficient for the case of MPTA with both positive and negative rates.

4 Decidability in the Bounded Case

4.1 Preliminaries

The following proposition on semilinear sets of integers [23, Corollary 1] will be used on several occasions below:

Proposition 5.

Consider a set S:={𝐱m:A𝐱𝐛}, where the entries of A and 𝐛 are integers of absolute value at most H and the affine hull of S has dimension d. Then there exists a finite set Bm and a matrix Pm×d such that

S=L(B,P):={𝒘+P𝒛:𝒘B,𝒛d,𝒛𝟎}

and the entries of P and 𝐰 have absolute value at most (2+(m+1)H)m.

We will also need the following result [24, Corollary 3.1] on semialgebraic sets of real numbers. We assume that polynomials are written as lists of monomials with all integers, including exponents, written in binary.

Proposition 6.

Let {fi}iI be a family of polynomials in n variables whose representation has total bit length at most L. Then the set S:={𝐱n:iIfii0}, where i{<,=}, is either empty or contains a point of distance at most 2L8n to the origin.

For further analysis it will be useful to transform the MIB problem to a standard form, shown in (3) below. In standard form the only linear constraints on the integer variables are that they be nonnegative. Correspondingly we enrich the nonlinear constraints, allowing them to contain an extra linear term in 𝒚.

𝒙Ai𝒚+𝒃i𝒚ci(i=1,,)D𝒚𝒆𝒙𝟎𝒙m,𝒚n. (3)

The transformation of (2) to standard form is based on writing S:={𝒙m:C𝒙𝒅} as a semi-linear set L(B,P), following Proposition 5, where Bm and Pm×d with d the dimension of the affine hull of S. For each vector 𝒘B we can apply the change of variables 𝒙=P𝒛+𝒘 to (2) to obtain a problem in standard form: Thus we obtain a finite collection of problems in standard form, whose solutions are in one-one correspondence with the solutions of the original system (2).

4.2 Relaxation and Rounding

In this section we introduce a relaxed version of a bounded MIB system, in which all variables range over the reals. The relaxation is such that a satisfying assignment to the relaxed problem can be rounded to an integer solution of the original system, while unsatisfiability of the relaxed version permits a branch-and-bound step which leads to an equisatisfiable finite collection of MIB instances in one fewer integer variable.

The rounding is based on an application of the Flatness Theorem in Diophantine approximation – Theorem 7, below. To state this result we first recall some standard terminology related to this. Let Kn be a convex set and let 𝒖n. Define the width of K with respect to 𝐮 to be

width𝒖(K):=sup{𝒖(𝒙𝒚):𝒙,𝒚K}.

The lattice width of K is the minimum width in all directions:

width(K):=min{width𝒖(K):𝒖n{𝟎}}.
Theorem 7 (Flatness Theorem).

There exists a constant ω(n), depending only on n, such that every convex polyhedron Kn with width(K)>ω(n) contains an integer point.

The constant ω(n) in Theorem 7 is called the flatness constant. The best-known upper bound on ω(n)=O(n3/2) [5], although a linear upper bound was conjectured in [18].

We will need the following proposition about definability of lattice width for classes of polyhedral sets.

Proposition 8.

There is a quantifier-free formula in the theory of real closed fields, whose free variables respectively represent a matrix An×m, vector 𝐛n, and scalar c>0, that expresses the property width𝐮(P)c where P:={𝐱m:A𝐱𝐛,𝐱𝟎}.

Proof.

A necessary condition that width𝒖(P)c is that P be non-empty and hence, since it lies in the positive orthant, contain a vertex. Now each vertex of P, being the intersection of n linearly independent bounding hyperplanes, has the form B1𝒃, where B is a non-singular n×n sub-matrix of (AIn), where In denotes the identity matrix of dimension n, and 𝒃 is a corresponding sub-vector of (𝒃𝟎). Hence the vertices of P are definable by quantifier-free formulas.

Assume that P contains a vertex. Then width𝒖(P) is infinite if and only if either 𝒖 or 𝒖 lie in the recession cone of P, for which a sufficient and necessary condition is that A𝒖𝟎 or A𝒖𝟎. If width𝒖(P) is finite then there exist two vertices 𝒙0,𝒙1 of P such that width𝒖(P)=𝒖(𝒙0𝒙1). The proposition follows by combining the above observations.

We now commence the detailed description of the relaxation construction. The input is a bounded MIB program 𝒮 in standard form (3) and a slack ε>0. Assume that 𝒮 has at least one non-linear constraint. We start with the observation that for a given 𝒚n the system (3) admits a solution 𝒙m if and only if the polyhedral set

P(𝒚):={𝒙m:𝒙𝟎,𝒙Ai𝒚+𝒃i𝒚ci,i=1,,}, (4)

contains an integer point.

Let H be an upper bound of the absolute value of the integer constants in the system (3). Since 𝒮 is bounded, by [14, Lemma 3.1.25] the set {𝒚n:D𝒚𝒆} is contained in the ball of radius κ1:=m1/2H(m2+m) centred at the origin.

For a matrix A, let A denote the spectral norm. Recall that if A has entries of absolute value at most H and has m columns then AmH. Now write

δ:=min(δ0,1),where δ0:=min{εAiκ1:i=1,,}εm1/2Hκ1 (5)

and define U:={𝒖m{𝟎}:2δ𝒖<ω(m)}, where ω(m) is as in Theorem 7. Write U={𝒖1,,𝒖s} and consider the following relaxed system 𝒮 of linear and bilinear constraints in exclusively real variables (where the notation P(𝒚) is as in (4) and we use Proposition 8 to formulate the constraint width𝒖j(P(𝒚))ω(m)):

𝒙Ai𝒚+𝒃i𝒚ciε(i=1,,)width𝒖j(P(𝒚))ω(m)(j=1,,s)D𝒚𝒆,𝒙𝟏𝒙m,𝒚n (6)
Proposition 9.

If the relaxed system 𝒮 is satisfiable, then so is the original system 𝒮.

Proof.

Let 𝒙,𝒚 be a solution of the system 𝒮, as shown in (6). Consider the set P(𝒚) as defined in (4). By construction we have

min𝒖Uwidth𝒖(P(𝒚))ω(m). (7)

But from the fact 𝒙 satisfies each constraint 𝒙Ai𝒚+𝒃i𝒚ci with slack ε and that 𝒙𝟏, we see that the ball Bδ(𝒙) is contained in P(𝒚), for δ as defined in (5). It follows that

width𝒖(P(𝒚)) 2δu
ω(m)

for all 𝒖U. Together with (7), we have that width(P(𝒚))ω(m) and hence, by Theorem 7, P(𝒚) contains an integer point. This entails that the original system 𝒮 is satisfiable.

Proposition 10.

If the relaxed system 𝒮 has no solution then every solution 𝐱m of the original system 𝒮 that has slack ε either has some component equal to zero or satisfies |𝐮𝐱|κ2 for some 𝐮U, where κ2 is an explicit constant depending only on 𝒮 and ε.

Proof.

Assume that 𝒮 has no solution. Let 𝒙m and 𝒚n be a solution of 𝒮 with slack ε. If some component of 𝒙 is zero then we are done, so we may suppose that 𝒙𝟏. By assumption, 𝒙,𝒚 is not a solution of 𝒮 and so it must hold that

min𝒖Uwidth𝒖(P(𝒚))<ω(m), (8)

where P(𝒚) is as defined in (4).

Let 𝒖U be the vector achieving the minimum on the left-hand side of (8). We will exhibit an upper bound on |𝒖𝒙| that does not depend on 𝒚.

Assume first that P(𝒚) contains the origin. Then by (8),

|𝒖𝒙|=|𝒖(𝒙𝟎)|ω(m).

Assume now that P(𝒚) does not contain the origin. Let L be the line segment connecting the origin to 𝒙, and denote by 𝒙 the point at which L intersects the boundary of P(𝒚). Then we have 𝒙𝒙=λ𝒙 for some λ>0. Moreover, since 𝒙 lies on the boundary of P(𝒚) there exists i0{1,,} such that

𝒙Ai0𝒚+𝒃i0𝒚=ci0, (9)

i.e., one of inequalities that define P(𝒚) is tight at 𝒙. But since 𝒙,𝒚 satisfies 𝒮 with slack ε, we also have that (𝒙)Ai0𝒚+𝒃i0𝒚ci0ε. Subtracting Equation (9) from the previous inequality gives

ε (𝒙𝒙)Ai0𝒚
= λ(𝒙Ai0𝒚)
= λ(ci0𝒃i0𝒚).

Since ε,λ>0 this entails that ci0𝒃i0𝒚<0 and hence

λ1 ε1|ci0𝒃i0𝒚| (10)
ε1(|ci0|+𝒃i0κ1)

We deduce that

|𝒖𝒙| |𝒖(𝒙𝒙)|+|𝒖𝒙|
= |𝒖(𝒙𝒙)|(1+λ1)
ω(m)(1+ε1(|ci0|+𝒃i0κ1)) by (8) and (10).

Thus, defining

κ2:=ω(m)(1+Hε1(1+m1/2κ1)), (11)

we have |𝒖𝒙|κ2.

In summary, we have that |𝒖𝒙|κ2 for every integer point 𝒙 of P(𝒚), as required in the proposition.

4.3 Decision Procedure

In this section we describe a decision procedure for the Gap Satisfiability Problem for bounded MIB systems. This is a recursive procedure based on the relaxation construction in the preceding section. We first present a conceptually simple version of the procedure, with no complexity bound, and then give a more detailed treatment from which bounds can be extracted.

Theorem 11.

The Gap Satisfiability Problem is decidable for bounded MIB systems.

Proof.

The procedure to solve the Gap Satisfiability Problem is as follows. Consider an instance of the problem, consisting of an MIB system in the form (3) and slack ε>0. If there are no non-linear constraints then the problem instance is just a system of linear inequalities in real and integer variables, whose satisfiability is straightforward to discern. Thus we may assume that there is at least one non-linear constraint. We construct the associated relaxed system 𝒮, which has the form (6). Using a decision procedure for the existential theory of real-closed fields we determine whether the system 𝒮 is satisfiable.

If 𝒮 is satisfiable then Proposition 9 guarantees that the original MIB system 𝒮 is also satisfiable. We can then find a satisfying assignment of 𝒮 by enumerating over all values 𝒙m and solving a linear program to decide whether there exists 𝒚n such that 𝒙,𝒚 satisfies 𝒮.

If the relaxed problem has no satisfying assignment then Proposition 10 furnishes a finite set of linear equations of the form 𝒖𝒙=b, with coefficients 𝒖m and b, such that for any solution 𝒙m,𝒚n of (2) that has slack ε, the integer part 𝒙 satisfies an equation in . We iterate through all such equations 𝒖𝒙=b and in each case we apply Proposition 5 to write

{𝒙m:𝒖𝒙=b,𝒙𝟎}

as a linear set L(B,P) for some finite set Bm and matrix Pm×m1. Then for each vector 𝒘B, we apply the change of variables 𝒙=𝒘+P𝒛 to obtain a MIB system in one fewer integer variable to which we can recursively apply the procedure to determine satisfiability.

In the following result we retrace the proof of Theorem 11, this time keeping track of the size of the integers involved. We thereby obtain an upper bound on the smallest satisfying assignment, showing that the gap satisfiability problem can be solved in nondeterministic exponential time.

Theorem 12.

Consider a MIB system (3) in which the integer constants have absolute value at most H. If such a system is satisfiable with slack ε then there is a satisfying assignment under which the integer variables have absolute value at most 2κ3O(m3(m+n)), where κ3:=(mHm2ε).

Proof.

We first analyse the effect of a single variable-elimination step on the size of the integers in the system (3). Recall that to eliminate an integer variable we assert a linear equation 𝒖𝒙=b, where 𝒖2w(m)δ and |b|κ2. Combining the lower bound δεm1/2Hκ1 from (5), the definition κ1:=m1/2H(m2+m), the definition of κ2 in (11), and the bound ω(m)=O(m3/2), we obtain that 𝒖,|b|=κ3O(1), for κ3:=(mHm2ε).

Employing Proposition 5, the equation 𝒖𝒙=b,𝒙𝟎, determines a substitution 𝒙=P𝒛+𝒘 in which the elements of P and 𝒘 have absolute value at most κ3O(m). Since there are m integer variables, the constants appearing over all MIB instances arising through the process of variable elimination have absolute value at most κ3O(m2).

Consider a version of the relaxed system (6) in which the integer constants have magnitude at most κ3O(m2). For the purposes of our complexity analysis we augment the system with a new variable r and constraints r𝒙+1 and r𝒘±w(m)𝒖 for each vertex 𝒘 of the polyhedron P(𝒚) (as defined in (4)) and 𝒖U. The integer constants in the resulting system have absolute value at most κ3O(m3) by Hadamard’s determinant inequality. By construction, if 𝒙,𝒚 is a satisfying assignment of (6) then the convex set {𝒙P(𝒚):𝒙r} has lattice width at most w(m) and hence contains an integer point. By Proposition 6 an upper bound for r is 2κ3O(m3(m+n)), which concludes the proof.

 Remark 13.

It is evident that the double exponential dependence of the magnitude of the smallest satisfying assignment on the number of variables in Theorem 12 is unavoidable. Indeed, consider the following MIB system:

xiyi1(i=1,,n)
xi+1yixiy0(i=1,,n1)
x1=2,y0=1
x1,,xn0,y0,,yn0

Then any satisfying assignment satisfies xi+1xiyixi2 for I=1,,n1, whence xn22n1. The system moreover has a satisfying assignment with slack ε for any ε>0, obtained by successively setting yi:=1+εxi and xi+1:=xi+εyi for i=1,,n1.

Proposition 1 and Corollary 1 give an exponential-time Turing reduction of the Gap Domination Problem for MPTA to the Gap Satisfiability Problem for bounded MIB systems, such that resulting instances of the Gap Satisfiability Problem have size polynomial in that of the input MPTA. We thus obtain our second main result.

Theorem 14.

The Gap Domination Problem for MPTA is decidable in non-deterministic exponential time.

5 Conclusion

Our main result shows that pareto curve of undominated reachable observer values of a given MPTA can be approximated to arbitrary precision. This is in contrast with the situation for weighted timed games, where it was recently shown that the optimal value of a weighted timed game with positive and negative rates cannot be computed to arbitrary precision [15].

Throughout this paper we have worked with MPTA with clock guards defined by conjunctions of non-strict inequalities. However, we claim that for an MPTA 𝒜 with guards comprising conjunctions of both strict and non-strict inequalities, there exists an MPTA 𝒜 with exclusively closed guards over the same set 𝒴 of observers, such that every observer valuation γ𝒴 reachable in 𝒜 is also reachable in 𝒜 and, conversely, for every valuation γ𝒴 reachable in 𝒜 and every ε>0 there exists a valuation γ𝒴 reachable in 𝒜 such that |γ(c)γ(c)|<ε for all c𝒴. Indeed, such an MPTA 𝒜 is obtained by directly applying the closure construction for timed automata in [22, Section 4] to MPTA. Then the ability to compute the pareto curve of undominated reachable observer values of 𝒜 to arbitrary precision allows one to achieve the same end for 𝒜.

A direction for future work is to consider the feasibility of approximate pareto analysis over infinite runs of MPTA. For double-priced timed automata, that is, MPTA with a single cost and reward observer, it is known how to compute the optimal reward-to-cost ratio over infinite computations using the corner-point abstraction [8]. For more general MPTA it is natural to consider specifications that refer to multiple reward-to-cost ratios.

References

  • [1] R. Alur and D. Dill. A theory of timed automata. TCS, 126(2):183–235, 1994. doi:10.1016/0304-3975(94)90010-8.
  • [2] R. Alur, S. La Torre, and G. J. Pappas. Optimal paths in weighted timed automata. In HSCC, volume 2034 of LNCS, pages 49–62. Springer, 2001. doi:10.1007/3-540-45351-2_8.
  • [3] S. Arora and B. Barak. Computational Complexity: A Modern Approach. Cambridge University Press, 2006.
  • [4] Devendra B., Krishna S., and Trivedi A. On nonlinear prices in timed automata. In Proceedings of the The First Workshop on Verification and Validation of Cyber-Physical Systems, V2CPS@IFM, volume 232 of EPTCS, pages 65–78, 2016. doi:10.4204/EPTCS.232.9.
  • [5] W. Banaszczyk, A. E. Litvak, A. Pajor, and S. J Szarek. The flatness theorem for nonsymmetric convex bodies via the local theory of banach spaces. Mathematics of operations research, 24(3):728–750, 1999. doi:10.1287/MOOR.24.3.728.
  • [6] G. Behrmann, A. Fehnker, T. Hune, K. G. Larsen, P. Pettersson, J. Romijn, and F. W. Vaandrager. Minimum-cost reachability for priced timed automata. In HSCC, volume 2034 of LNCS, pages 147–161. Springer, 2001. doi:10.1007/3-540-45351-2_15.
  • [7] P. Bouyer, E. Brinksma, and K. G. Larsen. Optimal infinite scheduling for multi-priced timed automata. Formal Methods in System Design, 32(1):3–23, 2008. doi:10.1007/S10703-007-0043-4.
  • [8] P. Bouyer, K. G. Larsen, and N. Markey. Model checking one-clock priced timed automata. Logical Methods in Computer Science, 4:1–28, 2008.
  • [9] Patricia Bouyer, Uli Fahrenberg, Kim G. Larsen, and Nicolas Markey. Quantitative analysis of real-time systems using priced timed automata. Commun. ACM, 54(9):78–87, 2011. doi:10.1145/1995376.1995396.
  • [10] T. Brihaye, V. Bruyère, and J.-F. Raskin. On model-checking timed automata with stopwatch observers. Inf. Comput., 204(3):408–433, 2006. doi:10.1016/J.IC.2005.12.001.
  • [11] I. Diakonikolas and M. Yannakakis. Small approximate pareto sets for biobjective shortest paths and other problems. SIAM J. Comput., 39(4):1340–1371, 2009. doi:10.1137/080724514.
  • [12] M Fränzle, M Shirmohammadi, M Swaminathan, and J Worrell. Costs and rewards in priced timed automata. Inf. Comput., 282:104656, 2022. doi:10.1016/J.IC.2020.104656.
  • [13] M. Fränzle and M. Swaminathan. Revisiting decidability and optimum reachability for multi-priced timed automata. In The 7th International Conference on Formal Modelling and Analysis of Timed Systems, pages 149–163. Springer Verlag, September 2009.
  • [14] M. Grötschel, L. Lovász, and A. Schrijver. Geometric algorithms and combinatorial optimization, volume 2. Springer Science & Business Media, 2012.
  • [15] Q. Guilmant and J. Ouaknine. Inapproximability in weighted timed games. In Proceedings of CONCUR 24, volume 311 of LIPIcs, 2024.
  • [16] R. Hemmecke, M. Köppe, J. Lee, and R. Weismantel. Nonlinear integer programming. Springer, 2010.
  • [17] T. A. Henzinger, P. W. Kopke, A. Puri, and P. Varaiya. What’s decidable about hybrid automata? J. Comput. Syst. Sci., 57(1):94–124, 1998. doi:10.1006/JCSS.1998.1581.
  • [18] R. Kannan and L. Lovász. Covering minima and lattice-point-free convex bodies. Annals of Mathematics, pages 577–602, 1988.
  • [19] L. Khachiyan and L. Porkolab. Integer optimization on convex semialgebraic sets. Discrete & Computational Geometry, 23:207–224, 2000. doi:10.1007/PL00009496.
  • [20] K. G. Larsen, G. Behrmann, E. Brinksma, A. Fehnker, T. Hune, P. Pettersson, and J. Romijn. As cheap as possible: Efficient cost-optimal reachability for priced timed automata. In CAV, volume 2102 of LNCS, pages 493–505. Springer, 2001. doi:10.1007/3-540-44585-4_47.
  • [21] K. G. Larsen and J. I. Rasmussen. Optimal reachability for multi-priced timed automata. TCS, 390(2-3):197–213, 2008. doi:10.1016/J.TCS.2007.09.021.
  • [22] J. Ouaknine and J. Worrell. Revisiting digitization, robustness, and decidability for timed automata. In 18th IEEE Symposium on Logic in Computer Science (LICS, Proceedings, pages 198–207. IEEE Computer Society, 2003. doi:10.1109/LICS.2003.1210059.
  • [23] L. Pottier. Minimal solutions of linear diophantine systems: bounds and algorithms. In International Conference on Rewriting Techniques and Applications, pages 162–173. Springer, 1991.
  • [24] M. Schaefer and D. Stefankovic. Fixed points, nash equilibria, and the existential theory of the reals. Theory Comput. Syst., 60(2):172–193, 2017. doi:10.1007/S00224-015-9662-0.
  • [25] R. G. Tollund, N. S. Johansen, K. Ø. Nielsen, A. Torralba, and K. G. Larsen. Optimal infinite temporal planning: Cyclic plans for priced timed automata. In Proceedings of the Thirty-Fourth International Conference on Automated Planning and Scheduling, ICAPS, pages 588–596. AAAI Press, 2024. doi:10.1609/ICAPS.V34I1.31521.
  • [26] Z. Zhang, B. Nielsen, K. G. Larsen, G. Nies, M. Stenger, and H. Hermanns. Pareto optimal reachability analysis for simple priced timed automata. In ICFEM, volume 10610 of LNCS, pages 481–495. Springer, 2017. doi:10.1007/978-3-319-68690-5_29.