Undecidability of the Emptiness Problem for Weak Models of Distributed Computing
Abstract
Esparza and Reiter have recently conducted a systematic comparative study of weak asynchronous models of distributed computing, in which a network of identical finite-state machines acts cooperatively to decide properties of the network’s graph. They introduced a distributed automata framework encompassing many different models, and proved that w.r.t. their expressive power (the graph properties they can decide) distributed automata collapse into seven equivalence classes. In this contribution, we turn our attention to the formal verification problem: Given a distributed automaton, does it decide a given graph property? We consider a fundamental instance of this question – the emptiness problem: Given a distributed automaton, does it accept any graph at all? Our main result is negative: the emptiness problem is undecidable for six of the seven equivalence classes, and trivially decidable for the remaining class.
Keywords and phrases:
Undecidability, Emptiness Problem, distributed AutomataCopyright and License:
![[Uncaptioned image]](x1.png)
2012 ACM Subject Classification:
Theory of computation Formal languages and automata theoryEditors:
Kitty Meeks and Christian ScheidelerSeries and Publisher:

1 Introduction
The concepts of distributed computing can be used to model interactions between a variety of natural or artificial agents, like molecules, cells, microorganisms, or nanorobots. Typical features of these models are that agents do not have identities, and each agent has very limited computational power and restricted communication capabilities. Weak models of distributed computing are hence the appropriate paradigm in this context – in contrast to traditional distributed computing models used to study computer networks. Examples of such models include population protocols [3, 4], chemical reaction networks [13], networked finite-state machines [7], the weak models of distributed computing of [10], and the beeping model [1, 5]. Many of these and other models are discussed in comparative surveys [9, 12].
All these weak models share the following features [7]: the communication network can have arbitrary topology; all agents run the same protocol; each agent has a finite number of states, independent of the network size or topology; state transitions only depend on the agent’s state and the states of a bounded number of neighbours; nodes do not know their neighbours, in the sense of [2]. Nonetheless, they differ in several other aspects. Esparza and Reiter classified them in [8] according to four parameters:
-
Detection. In some models, agents can only detect the existence of neighbours in a given state (), while in others they can count their number up to a fixed threshold ().
-
Acceptance. A given input is accepted or rejected by all agents reaching a respective state. Some models require agents to halt once they reach an accepting or rejecting state (), while others only require stable consensus (), i.e., agents can keep changing their decision, as long as they eventually agree on acceptance or rejection.
-
Selection. In each step of the execution of a model, a certain selection of agents acts. In synchronous models ($), all agents are selected in every step. Models with liberal selection () select an arbitrary subset of agents in each step. Finally, models with exclusive selection () select exactly one agent at a time.
-
Fairness. Different assumptions about the occurrence of the permitted selections can be made. Some models only ensure that every agent will be selected infinitely many times. We call this weak fairness (). Others use stochastic-like selection, which guarantees that any finite sequence of permitted selections will occur infinitely often. We call this strong fairness ().
In [8], Esparza and Reiter studied the expressive power of all possible combinations of these parameters. For this, they introduced a generic model, called distributed automata, which can be equipped with any parameter combination – for example, one can study the class of -distributed automata. The behaviour of a distributed automaton is described by a finite-state machine, inputs are labelled graphs and the output is boolean (acceptance/rejection). Intuitively, each node of the input graph becomes an agent running a copy of the finite-state machine where the initial state depends on the node’s label, and its transitions depend on the agent’s own and the agent’s neighbours’ states. At each step of the execution a subset of the nodes is selected by a scheduler, and each selected agent executes a transition of the finite-state machine, thereby moving into a new state. Note that this adds a component of nondeterminism, such that multiple runs on the same input graph could a priori yield different results. This ambiguity is resolved by requiring the consistency condition, which essentially states that for a given input graph the distributed automaton’s output must always be the same. The set of graphs accepted by a given distributed automaton forms a graph language; we say the automaton decides the graph language. A model’s expressive power is determined by the class of graph languages it can decide.
The main result of [8] is that all the possible combinations of parameters collapse into seven equivalence classes w.r.t. their expressive power. Notably, all proofs of equivalence are constructive. In particular, every class of distributed automata was shown to be equivalent to some class with liberal selection (). For this reason, we can often omit the selection parameter when referring to an equivalence class , implicitly meaning . Furthermore, the classes with were shown to both have trivial expressive power, i.e., every -distributed automaton either accepts all labelled graphs or none. The seven distinct equivalence classes assemble in a hierarchy of expressive power shown in Figure 1.
Finally, we mention that Czerner et al. [6] characterized which labelling properties each class can decide, i.e., properties depending only on the labelling and not on the structure of the graph.
Distributed automata are designed to decide properties of graphs, e.g., whether a given graph is cyclic or whether at least one of its nodes is labelled as red. So, we are interested in the verification problem: Does the graph language of a given distributed automaton satisfy a given property, i.e., does hold, where is the class of graphs with the desired property? This is equivalent to asking if holds, where denotes the complement of . Since distributed automata are closed under intersection (as we show in this paper), verification reduces to the emptiness problem whenever is decidable by distributed automata.
We show that the emptiness problem is undecidable for six of the seven classes, and trivially decidable for the class of -distributed automata111Since a -distributed automaton either accepts all graphs or no graph, emptiness can be decided by checking whether the automaton accepts, e.g., the graph with one node and no edges, which is easy.. We reduce from the halting problem for Turing machines on blank tape. For each class , we define a suitable family of labelled graphs to represent a finite tape section. Then we construct an -distributed automaton that solves two tasks: it decides whether the graph belongs to the suitable family and, if so, simulates the execution of a given Turing machine until either the machine halts, in which case the automaton accepts, or the head exceeds the finite tape section, in which case the automaton rejects. So, we need families of labelled graphs that can be used to represent arbitrarily long finite tape sections, and are decidable by -distributed automata. This is especially difficult for the classes of the form , which have extremely limited expressive power. Identifying a suitable family of labelled graphs for this case is the main contribution of our paper.
Related work.
Kuusisto and Reiter have studied the emptiness problem for a specific class of automata on directed graphs working synchronously [11]. This work predates [8], which considers a large variety of models on undirected graphs222Unfortunately, [11] and [8] use the name distributed automata with different meanings: [11] for a specific automata model, and [8] as a generic name for all the automata classes in their classification..
Structure of the paper.
Section 2 contains preliminaries. Section 3 identifies suitable families of graphs for the more capable classes and , and prepares the ground for Section 4, which introduces a suitable family for . Section 5 presents conclusions. Formal descriptions of the constructions and detailed proofs are given in the appendices, which can be found in the full version.
2 Preliminaries
For sets and , denotes the powerset of and denotes the set of all functions from to . Given a partial function , we write to denote that is not defined for . We use the convention and define for and .
Words.
Given a word over an alphabet , we let denote the length of and the substring of from the to the symbol for , with for and . Note that we use -indexing. For , denotes the infinite repetition of .
Graphs.
We implicitly assume graphs to be non-empty, finite, undirected, unweighted, and connected. A labelled graph over a set of labels is a triple , where and are sets of nodes and edges, and is a labelling function that assigns a label to each node . For , the function denotes the length of the shortest path from any node in to .
Turing machines.
A Turing machine (TM) is a -tuple with a finite set of states , an initial state , a set of accepting states , a tape alphabet , an input alphabet , the blank symbol , and a (partial) transition function with for all . In our model, the TM tape is only unbounded to the right. The TM head starts on the leftmost cell and moves right () or left () in each transition.
2.1 Distributed Machines
A distributed machine operating on a labelling alphabet with counting bound is a -tuple with a finite set of states , an initialization function , a transition function , and disjoint sets of accepting and rejecting states, respectively.
A distributed machine runs on a labelled graph . Intuitively, at each node an agent starts in the state . The machine proceeds in steps, where in each step a set of nodes is selected. Each agent transitions to a new state according to the function , which depends on ’s and ’s neighbours’ current states.
We proceed to formalize this intuition. A configuration of on is a function that assigns a current state to every agent of . For every configuration and agent , we define the function , where is the number of agents neighbouring with . To simplify notation, we define for that . Given two configurations and a selection , we let denote that for all and otherwise, that is, the machine transitions from to by performing state transitions according to for exactly the agents selected by . We write if there exists some selection such that .
2.2 Distributed Automata
In principle, a distributed automaton consists of a distributed machine and a scheduler specifying which sequences of selections are allowed. All schedulers guarantee the minimal assumption that every node is selected infinitely often.
A schedule is a sequence of selections such that for every there exist infinitely many with , i.e., every agent is selected infinitely often. A sequence of configurations with and for all is called a run of on . We say that is induced by iff for all . A configuration is called accepting iff and rejecting iff . A run is called accepting (rejecting) iff there exists an index such that is accepting (rejecting) for all .
A scheduler is a pair . The selection constraint maps any graph to a subset of of permitted selections, such that , i.e., every agent is in at least one permitted selection. The fairness constraint maps to a subset of of fair schedules. For a distributed machine and a scheduler , a run of on a labelled graph is called fair iff it is induced by a fair schedule.
A pair consisting of a distributed machine and a scheduler satisfies the consistency condition on a class of graphs iff for every given graph , either all fair runs of on are accepting or all are rejecting. Intuitively, whether accepts does not depend on which fair run we consider. In this case, we call a -distributed automaton and say that accepts or rejects , respectively. denotes the language of -labelled graphs accepted by . A distributed automaton is a -distributed automaton, where denotes the set of all graphs.
2.3 Classes of Distributed Automata
We formalize the parameters detection, acceptance, selection and fairness mentioned in the introduction. The first two concern the distributed machine , while the other two concern the scheduler . Let be any -labelled graph.
Detection.
A distributed machine with counting bound has existence detection (), while a machine with has counting detection ().
Acceptance.
A distributed machine with halting acceptance () fulfils for all . Otherwise, it accepts by stable consensus ().
Selection.
A synchronous ($) scheduler fulfils , i.e., the only permitted selection is all of . The other extreme, a liberal () scheduler, is characterized by , i.e., any selection is permitted. Lastly, the scheduler is exclusive () iff , i.e., in every step, exactly one agent is selected.
Fairness.
For a weakly fair () scheduler, contains all schedules in .
(Recall that a schedule, by definition, selects every agent infinitely often.)
A schedule is strongly fair iff for every finite sequence of permitted selections , there are infinitely many , such that .
For a strongly fair () scheduler, contains exactly the strongly fair schedules.
The expressive power of all possible combinations of these parameters is analysed in [8]. As mentioned in the introduction, after merging classes with the same expressive power one obtains the hierarchy shown in Figure 1. For the purpose of studying the emptiness problem, we are interested in the six classes with non-trivial expressive power, as the problem is trivially decidable for the class.
Recall that implicitly means . However, [8] also proves the following result:
Proposition 1 ([8, Lemma 3 (5) and Theorem 5]).
For all , the classes and have the same expressive power. Moreover, given a distributed automaton in one of the classes, one can effectively construct an equivalent automaton in the other class.
Therefore, in order to prove the undecidability of the emptiness problem for , , and , it suffices to prove it for , , and . We will make use of this.
3 Simulating Turing Machines with Distributed Automata
The emptiness problem for -distributed automata, where , consists of deciding whether a given -distributed automaton satisfies . We prove undecidability of the emptiness problem for by reduction from the halting problem for Turing machines on blank tape. Formally, we show:
Theorem 2 (Undecidability of the Emptiness Problem for Distributed Automata).
Let with . Given a Turing machine , one can effectively construct an -distributed automaton , such that iff halts on blank tape. The emptiness problem for -distributed automata is thus undecidable.
The proof of the theorem uses the same idea for every class , which we proceed to describe. First, we observe that distributed automata are closed under intersection:
Lemma 3 (Closure under Intersection).
Let . Given two -distributed automata operating on the same labelling alphabet , we can effectively construct an -distributed automaton , such that . Moreover, this result remains valid even when is only an -distributed automaton.
Note that we should not omit the selection parameter here, as the results of [8] (which justified omitting the selection parameter elsewhere) do not necessarily hold for -distributed automata.
Proof sketch. Detailed proof in Appendix A of the full version.
We outline the proof of the first claim. The construction is very similar to the product construction known from DFAs. Intuitively, executes in parallel, transitioning between states in according to . Further, iff and , and iff or .
Given a Turing machine , the proof of Theorem 2 consists of exhibiting a family of labelled graphs together with a distributed automaton and an -distributed automaton satisfying (1) is an -distributed automaton with , and (2) , for a graph , accepts iff halts after visiting at most tape cells, and rejects otherwise; intuitively, a run of on simulates the execution of as long as the TM head never exceeds the first tape cells.
Notice that this implies the existence of the distributed automaton of Theorem 2. For this, let be an automaton deciding the language , which exists by Lemma 3. We show that iff halts: If , let . By (1), for some . By (2), halts visiting at most tape cells. In particular, halts. Conversely, if halts, then it does so after a finite number of steps, visiting a finite number of tape cells. So by (1) and (2) both and accept , yielding . In particular, .
We will construct and for the classes with . By Proposition 1, this implies that we can effectively construct an equivalent automaton for each class , and by the hierarchy of expressive power this can be lifted to the respective class as well. This is thus sufficient to prove Theorem 2 for all classes333In fact, it would even suffice to only construct and for the classes with , omitting . Including the construction for was a didactic choice, as it lays the groundwork and helps motivate the other two constructions..
3.1 Representing the Tape
The simplest possible representation of a finite TM tape section is a linear graph where each node represents a tape cell and the labelling gives rise to a notion of positive/right and negative/left directions. A labelling achieving this is numbering the nodes modulo , starting with ; an agent with numbering can identify its left and right neighbour as the unique neighbour with numbering and , respectively. We call this family of graphs numbered linear graphs (NLGs) and denote it by . Figure 2 shows an example for an NLG. The origin node of an NLG is the unique node that has numbering and no left neighbour, i.e., no neighbour numbered .
Lemma 4 (Decidability of Numbered Linear Graphs).
We can effectively construct a -distributed automaton that decides .
Proof sketch. Detailed proof in Appendix A of the full version.
We sketch the relevant construction. The labelling alphabet is and the agents have states in . The first component of the state is the numbering, which is taken directly from the labelling and stays static, and the second component is the agent’s current guess whether the graph has an origin node. is an error state that, once it occurs, propagates through the graph, that is, if any neighbour of an agent is in state , transitions to as well. The only accepting states are those with guess ; all other states, most notably , are rejecting.
If an agent has the same numbering as one of its neighbours, it transitions to the error state immediately; the same happens if detects two of its neighbours having the same numbering as each other. A graph with faulty numbering or nodes of degree greater than will therefore always produce an error.
Lastly, we have to distinguish numbered linear graphs from circular graphs with correct numbering. This is where the guess component comes in: If an origin node exists, it is the first to change its guess to , which then propagates through the graph to accept. If no origin node exists, no agent will be the first to guess and thus all agents will stay in rejecting states indefinitely.
3.2 Simulating the Head
Given an NLG of length to represent a finite TM tape section, where each agent represents a tape cell, we can simulate the behaviour of the TM head by augmenting the states. Every agent carries a symbol of the tape alphabet in an additional component. Further, exactly one agent indicates that the TM head is currently on its corresponding tape cell and saves the TM state. When the TM head performs a transition, it changes the agent’s tape symbol and the TM state and indicates in which direction it will move next. The agent in the respective direction detects this and takes over as TM head. This clearly mimics the behaviour of an actual Turing machine on a tape of finite length .
Recall that in our model, the TM tape is only unbounded to the right and the TM head starts on the leftmost cell. So, the simulation starts with all agents carrying a blank symbol and the TM head on the unique origin node’s tape cell. The TM head state will move through the NLG until the TM halts, producing an accepting state, or the TM runs out of space in the finite TM tape section, producing a rejecting state. The accepting (rejecting) state then propagates through the graph to accept (reject).
For any given Turing machine , we can construct an equivalent Turing machine that either halts or visits every tape cell; in particular, it can never happen that the TM gets stuck in a loop. By simulating rather than itself, we can be sure that the simulation always either accepts by halting or rejects by running out of space.
Carrying all of this out formally in Appendix A of the full version yields the following result.
Lemma 5 (Simulating the Head).
Given a Turing machine , we can effectively construct an -distributed automaton in the class such that:
-
If does not halt on blank tape, then rejects all numbered linear graphs.
-
If halts on blank tape, then there exists a threshold , such that accepts all numbered linear graphs of length and rejects all numbered linear graphs of length .
The threshold will turn out to be the finite number of tape cells that visits before it halts. We construct in the trivial class , as this enables us to lift the construction to any of the non-trivial classes of distributed automata by the hierarchy of expressive power444Note that Lemma 5 does not constitute a contradiction to -distributed automata having trivial expressive power, as is only an -distributed automaton, not a distributed automaton.. By doing so for the class , we now have all the puzzle pieces to execute the proof of Theorem 2 for -distributed automata, as outlined at the beginning of Section 3. The details can be found in Appendix A of the full version.
3.3 Weakly Representing the Tape
It is easy to see that -automata cannot decide . A formal proof can be given by adapting [6, Proposition D.1], but we sketch the argument.
Take an NLG of length at least and duplicate its origin node into two nodes and , which become identical left neighbours of the second node . The new graph is not a linear graph and should be rejected. Let be a -distributed automaton. The agents at and start in the same state and both have as their only neighbour. As selects all agents in every step ($), and will always have the same state as each other. Since agents of cannot count (), will thus never be able to detect that it has two left neighbours.
We exhibit a new family of suitable graphs for -automata, namely numbered quasi-linear graphs (NQLGs). Intuitively, an NQLG is obtained similarly to the counterexample above: take an NLG and replicate each node an arbitrary number of times where every replica of a node has at least one predecessor (successor) iff the original node had a predecessor (successor). Figure 3 shows an example of an NQLG with two replicas of the first node, three of the second node, etc.
The formal definition takes a bit of a different angle on the same family of graphs:
Definition 6 (Numbered Quasi-Linear Graphs).
Let with . Further, let . We call a numbered quasi-linear graph of length iff is non-empty and
- (QL1)
-
,
- (QL2)
-
, and
- (QL3)
-
for all :
The set is called the origin set; the elements of are called origin nodes. We denote the family of numbered quasi-linear graphs by .
Observe that every NLG is an NQLG, i.e., . Notice also that (QL3) requires every node with a distance to the origin strictly smaller than to have a successor and prohibits nodes with distance to do so. This enables us to unambiguously assign a length to an NQLG.
In the rest of the section, we show that (1) -distributed automata can decide (the counterpart to Lemma 4), and (2) the TM head simulation of Lemma 5 works on NQLGs as well. We start with part (1):
Lemma 7 (Decidability of Numbered Quasi-Linear Graphs).
We can effectively construct a -distributed automaton that decides .
Proof sketch. Detailed proof in Appendix A of the full version.
We sketch the necessary construction. It builds upon the one in Lemma 4, using the same labelling alphabet and states in . The first component of the state and the state work exactly as in Lemma 4. The second component indicates one of three stages: – the initial stage, – origin set detected, or – origin set and end of graph detected. The only accepting states are those in stage , all other states are rejecting.
If the given graph is an NQLG, first, all agents in the origin set transition to stage at the same time. In the subsequent step, all agents at distance from the origin set transition to stage simultaneously, until finally the agents at distance reach stage , which are exactly the agents that do not have a successor. These agents at the end of the graph then continue to stage . Again, in the step after that, all nodes at distance reach stage simultaneously, ultimately accepting the graph.
If, however, the graph is not an NQLG, the automaton can always detect this. As for circular graphs in Lemma 4, if is empty, all agents will passively reject by never leaving stage . If (QL2) is violated, this will be detected and rejected immediately. A violation of (QL1) breaks simultaneity during the stage transitions, while a violation of (QL3) breaks simultaneity during the stage transitions. In the full proof, we show that agents that can detect these faults exist in any non-NQLG.
For part (2), we show that for any -distributed automaton , running on an NLG and running on some NQLG of the same length are equivalent. In particular, this holds if we choose to be equivalent to from Lemma 5, which is possible by the hierarchy of expressive power. Consider the runs of on and . As in the intuitive description of NQLGs, can be seen as arising from by replicating its nodes. Since agents of cannot count (), they can only distinguish between no predecessor (successor) and at least one predecessor (successor). It follows that, in the runs of on and , an agent at a node in and all of its replicas in visit exactly the same sequence of states. The next proposition formalizes this. The proof can be found in Appendix A of the full version.
Proposition 8 (Correspondence of NQLGs and NLGs).
Let be a numbered quasi-line graph with origin set and length , and let be the numbered line graph of the same length . Further, let be a -distributed machine, and let and be the (unique) fair runs of on and , respectively. Then, for every and every , we have .
4 Snowball Fight!
We turn our attention to the class . Like -automata, these cannot decide either, but the reason is more fundamental: Distributed automata with halting acceptance () cannot distinguish between a circular graph with correct numbering modulo (we will call this a numbered circular graph (NCG)), and a sufficiently long NLG. This can be proven analogously to [8, Proposition 12], as we will now sketch.
Let be a distributed automaton with halting acceptance () that rejects an NCG . By the consistency condition, any fair run of on is rejecting. Let be such a fair run, induced by a fair schedule , and such that is rejecting. We construct an NLG by deleting an edge from between a pair of nodes with numbering and , and then concatenate copies of to obtain the NLG . Consider the run of on induced by a schedule that replicates the first selections of on all copies of (note that this can easily be turned into a fair schedule as we only fix finitely many selections). It is easy to see that, for an agent at distance from the two endpoints of , at least the first transitions are exactly those that the agent at the corresponding original node in undergoes. The agents of in the middle copy of will therefore reach rejecting states after at most transitions and halt due to halting acceptance (). By the consistency condition, thus has to reject the NLG too.
This shows that an automaton with halting acceptance () that accepts all NLGs necessarily also accepts NCGs. However, NCGs lack an origin node, which is essential for our TM simulation as that is where the TM head starts. Without an origin node, there is no simulated TM head, breaking the simulation555Requiring that initially exactly one node has a special label, say , modelling the head does not work either. Again, analogously to [8, Proposition 12], one can show that an automaton with halting acceptance () cannot accept all graphs with exactly one -labelled node and reject all graphs with none..
To solve this problem, we observe that for our purpose of representing arbitrarily long TM tape sections, we do not need to accept all NLGs; rather, it suffices to accept infinitely many NLGs. This guarantees that for every TM that halts (after finitely many steps), we accept an NLG that is long enough to simulate this run correctly. We will thus construct a -automaton that accepts infinitely many, but not all, NLGs. For this purpose, we introduce a new family of graphs, which can be seen as a subfamily of NLGs. In the case of NLGs and NQLGs in Sections 3.1 and 3.3, we first defined the families, and then constructed automata recognizing them. In this section, we proceed differently: we construct the automaton first, thereby implicitly defining a family of graphs as the automaton’s accepted language.
Intuitively, the automaton lets the agents engage in a snowball fight! For this, we augment the labelling of all agents with a direction, positive or negative, modelling the direction the agent is facing at the beginning of the fight. Additionally, every other agent initially holds a snowball. The labelling alphabet hence is : the first component is the numbering, the second is the direction, and the third indicates whether the agent starts with a snowball. A snowball fight NLG (SFNLG) is a -labelled that becomes an NLG after projecting all labels onto their first component; SFNCGs are defined analogously. We denote the family of SFNLGs by . For example, the third graph of Figure 5 is an SFNLG of length 7. The agents carry out a snowball fight following a fixed set of rules. Agents can throw snowballs, and catch or get hit by snowballs thrown at them. Throughout the course of the fight, the number of snowballs will decrease. The graph is rejected if an agent gets hit, and is accepted if this does not happen until eventually no snowballs are left. We will show that the former happens for all SFNCGs, while the latter happens in infinitely many SFNLGs. More details follow below. The formal description can be found in Appendix B of the full version.
Construction 9 (Snowball Fight! (sketch)).
We construct a -distributed automaton with the labelling alphabet as described above. The set of states comprises and some auxiliary states: the accepting state , the rejecting error state , and a state to indicate the intention to accept.
We give an informal description of the behaviour of the automaton. First, the automaton uses counting detection () as in Lemma 4 to check that all nodes have at most degree and the numbering is correct, producing a state if the check fails. This already guarantees that the automaton can only accept SFNLGs or SFNCGs. Further, each agent ensures that either itself or both of its neighbours are starting with a snowball. Then, the automaton performs the snowball fight, following four simple rules (and some special rules for the agents at the endpoints of an SFNLG, which we will state separately):
-
(0)
If an agent is holding a snowball, throws the snowball in the direction it is facing.
-
(1)
If exactly one snowball is thrown at an agent and faces towards it, then catches the snowball and turns around.
-
(2)
If exactly one snowball is thrown at an agent and faces away from it, then gets hit and transitions to the state.
-
(3)
If two snowballs are thrown at an agent , then catches both of them, merges them into one, and turns around.
The possible scenarios that can arise from these rules are illustrated in Figure 4.
Lastly, the agents at the endpoints of SFNLGs can throw a snowball into the void (as they only have one neighbour). If this happens at the origin node, it indicates its intention to accept by a state; otherwise, this produces a state. Intuitively, the state means that the agent wants to accept (and thus halt) but cannot do so yet, as it first has to ensure that no other agent has halted in the rejecting state. For this, the state propagates until it either reaches the other end of the SFNLG and turns into an accepting state, or it is intercepted by a rejecting state. Both the and the state propagate unconditionally, ultimately causing acceptance or rejection, respectively.
We show that Construction 9 only accepts SFNLGs, and accepts infinitely many SFNLGs, which is sufficient for our purpose. We split this up into three lemmas:
-
(1)
If at least one rejecting state occurs, the graph is rejected.
-
(2)
If no state occurs, the graph is in and it is accepted.
-
(3)
There are infinitely many SFNLGs that get accepted.
These lemmas are proved as Lemmas 21, 22 and 24, respectively, in Appendix B of the full version. We sketch the proof ideas for the first two and present the relevant graph construction for the third.
Proof sketch of (1).
We have to show that after an error state occurred, no accepting state can arise any more. Notice that for a state to be produced, the state has to propagate from the origin node to the other end of the graph. Further notice that after an agent takes on the state, it cannot be the first to produce an state, it can only adopt a state from neighbouring agents. So, the first time that an error occurs has happen at an agent that has not yet indicated its intention to accept by a state. In that case however, the state would intercept the propagation of the state, preventing it from reaching the other end of the graph to produce an accepting state.
Proof sketch of (2).
For no error to occur the numbering has to be correct, so the given graph can only be an SFNLG or SFNCG. Intuition suggests that on a finite graph, the snowballs should eventually meet and get merged, ultimately decreasing their number to one. This is indeed correct. In an SFNCG, this last snowball inevitably hits an agent, producing an error by rule 2 (at the latest after doing a whole round of the circular graph and turning all agents to face the same direction). As we assumed no errors to occur, the given graph has to be in . The last snowball eventually reaches the origin node, producing a state, which propagates through the graph unhindered and produces an accepting state.
We conclude that Construction 9 accepts or rejects every graph and is therefore indeed a distributed automaton. Moreover, any accepted graph has to be in . Lastly, we construct an infinite (non-exhaustive) family of accepted SFNLGs.
Construction for (3).
We sketch the iterative construction of the direction and snowball labelling (see Figure 5): We start with a single agent facing left and holding a snowball. Clearly, the last (and only) snowball will get thrown into the void to the left. To construct the iteration of the construction, we take two copies of the construction, mirror one of them and connect both to a new right-facing agent such that the last two snowballs, one from each copy of the construction, meet and merge at this new middle agent. From there, the one remaining snowball will be passed to the left until it gets thrown into the void to the left.
By numbering the nodes such that the leftmost node is the origin node, this ultimately causes acceptance for any iteration of the construction. The construction has length , yielding infinitely many accepted SFNLGs.
5 Conclusion
We have initiated the study of verification problems for the classes of distributed automata introduced in [8]. We have shown that the emptiness problem, a fundamental verification problem, is undecidable or trivially decidable for all classes of [8]. Since distributed automata are closed under intersection (Lemma 3), this means that the safety problem – given an automaton and a class of “dangerous” graphs, does the automaton accept some graph of ? – is undecidable whenever is recognized by some automaton.
Our undecidability proofs simulate the execution of a Turing machine on blank tape by means of a distributed automaton running on families of labelled graphs (, , and a subfamily of ) having both a specific structure and a specific labelling. The proofs break down if we restrict ourselves to automata that only allow unlabelled graphs as inputs, so they can only decide purely structural properties of the input graph, or to automata that only decide labelling properties. The decision power of the latter was studied by Czerner et al. in [6]. In future work, we plan to study these two special cases. We conjecture that the emptiness problem for automata deciding structural properties remains undecidable, but becomes decidable for some of the classes of [6].
References
- [1] Yehuda Afek, Noga Alon, Ziv Bar-Joseph, Alejandro Cornejo, Bernhard Haeupler, and Fabian Kuhn. Beeping a maximal independent set. Distributed Comput., 26(4):195–208, 2013. doi:10.1007/S00446-012-0175-7.
- [2] Dana Angluin. Local and global properties in networks of processors (extended abstract). In Raymond E. Miller, Seymour Ginsburg, Walter A. Burkhard, and Richard J. Lipton, editors, Proceedings of the 12th Annual ACM Symposium on Theory of Computing, April 28-30, 1980, Los Angeles, California, USA, pages 82–93. ACM, 1980. doi:10.1145/800141.804655.
- [3] Dana Angluin, James Aspnes, Melody Chan, Michael J. Fischer, Hong Jiang, and René Peralta. Stably computable properties of network graphs. In Viktor K. Prasanna, S. Sitharama Iyengar, Paul G. Spirakis, and Matt Welsh, editors, Distributed Computing in Sensor Systems, First IEEE International Conference, DCOSS 2005, Marina del Rey, CA, USA, June 30 - July 1, 2005, Proceedings, volume 3560 of Lecture Notes in Computer Science, pages 63–74. Springer, 2005. doi:10.1007/11502593_8.
- [4] Dana Angluin, James Aspnes, Zoë Diamadi, Michael J. Fischer, and René Peralta. Computation in networks of passively mobile finite-state sensors. Distributed Comput., 18(4):235–253, 2006. doi:10.1007/S00446-005-0138-3.
- [5] Alejandro Cornejo and Fabian Kuhn. Deploying wireless networks with beeps. In Nancy A. Lynch and Alexander A. Shvartsman, editors, Distributed Computing, 24th International Symposium, DISC 2010, Cambridge, MA, USA, September 13-15, 2010. Proceedings, volume 6343 of Lecture Notes in Computer Science, pages 148–162. Springer, 2010. doi:10.1007/978-3-642-15763-9_15.
- [6] Philipp Czerner, Roland Guttenberg, Martin Helfrich, and Javier Esparza. Decision power of weak asynchronous models of distributed computing. In Avery Miller, Keren Censor-Hillel, and Janne H. Korhonen, editors, PODC ’21: ACM Symposium on Principles of Distributed Computing, Virtual Event, Italy, July 26-30, 2021, pages 115–125. ACM, 2021. doi:10.1145/3465084.3467918.
- [7] Yuval Emek and Roger Wattenhofer. Stone age distributed computing. In Panagiota Fatourou and Gadi Taubenfeld, editors, ACM Symposium on Principles of Distributed Computing, PODC ’13, Montreal, QC, Canada, July 22-24, 2013, pages 137–146. ACM, 2013. doi:10.1145/2484239.2484244.
- [8] Javier Esparza and Fabian Reiter. A classification of weak asynchronous models of distributed computing. In Igor Konnov and Laura Kovács, editors, 31st International Conference on Concurrency Theory, CONCUR 2020, September 1-4, 2020, Vienna, Austria (Virtual Conference), volume 171 of LIPIcs, pages 10:1–10:16. Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2020. doi:10.4230/LIPICS.CONCUR.2020.10.
- [9] Ofer Feinerman and Amos Korman. Theoretical distributed computing meets biology: A review. In Chittaranjan Hota and Pradip K. Srimani, editors, Distributed Computing and Internet Technology, 9th International Conference, ICDCIT 2013, Bhubaneswar, India, February 5-8, 2013. Proceedings, volume 7753 of Lecture Notes in Computer Science, pages 1–18. Springer, 2013. doi:10.1007/978-3-642-36071-8_1.
- [10] Lauri Hella, Matti Järvisalo, Antti Kuusisto, Juhana Laurinharju, Tuomo Lempiäinen, Kerkko Luosto, Jukka Suomela, and Jonni Virtema. Weak models of distributed computing, with connections to modal logic. Distributed Comput., 28(1):31–53, 2015. doi:10.1007/S00446-013-0202-3.
- [11] Antti Kuusisto and Fabian Reiter. Emptiness problems for distributed automata. Inf. Comput., 272:104503, 2020. doi:10.1016/J.IC.2019.104503.
- [12] Saket Navlakha and Ziv Bar-Joseph. Distributed information processing in biological and computational systems. Commun. ACM, 58(1):94–102, 2015. doi:10.1145/2678280.
- [13] David Soloveichik, Matthew Cook, Erik Winfree, and Jehoshua Bruck. Computation with finite stochastic chemical reaction networks. Nat. Comput., 7(4):615–633, 2008. doi:10.1007/S11047-008-9067-Y.