Alternating-time temporal logic

TLDR: This work introduces a third, more general variety of temporal logic: alternating-time temporal logic, which offers selective quantification over those paths that are possible outcomes of games, such as the game in which the system and the environment alternate moves.

Abstract: Temporal logic comes in two varieties: linear-time temporal logic assumes implicit universal quantification over all paths that are generated by the execution of a system; branching-time temporal logic allows explicit existential and universal quantification over all paths. We introduce a third, more general variety of temporal logic: alternating-time temporal logic offers selective quantification over those paths that are possible outcomes of games, such as the game in which the system and the environment alternate moves. While linear-time and branching-time logics are natural specification languages for closed systems, alternating-time logics are natural specification languages for open systems. For example, by preceding the temporal operator "eventually" with a selective path quantifier, we can specify that in the game between the system and the environment, the system has a strategy to reach a certain state. The problems of receptiveness, realizability, and controllability can be formulated as model-checking problems for alternating-time formulas. Depending on whether or not we admit arbitrary nesting of selective path quantifiers and temporal operators, we obtain the two alternating-time temporal logics ATL and ATLa.ATL and ATLa are interpreted over concurrent game structures. Every state transition of a concurrent game structure results from a choice of moves, one for each player. The players represent individual components and the environment of an open system. Concurrent game structures can capture various forms of synchronous composition for open systems, and if augmented with fairness constraints, also asynchronous composition. Over structures without fairness constraints, the model-checking complexity of ATL is linear in the size of the game structure and length of the formula, and the symbolic model-checking algorithm for CTL extends with few modifications to ATL. Over structures with weak-fairness constraints, ATL model checking requires the solution of 1-pair Rabin games, and can be done in polynomial time. Over structures with strong-fairness constraints, ATL model checking requires the solution of games with Boolean combinations of Buchi conditions, and can be done in PSPACE. In the case of ATLa, the model-checking problem is closely related to the synthesis problem for linear-time formulas, and requires doubly exponential time.

Full text

*;6C2?@6AF<3&2;;@F9C.;6.*;6C2?@6AF<3&2;;@F9C.;6.
(05<9.?9F<::<;@(05<9.?9F<::<;@
)205;60.9'2=<?A@( 2=.?A:2;A<3<:=BA2?;3<?:.A6<;(062;02
.;B.?F
9A2?;.A6;4)6:2)2:=<?.9"<4609A2?;.A6;4)6:2)2:=<?.9"<460
'.722C9B?
*;6C2?@6AF<3&2;;@F9C.;6.
.9B?06@B=2;;21B
)5<:.@2;G6;42?
*;6C2?@6AF<3.963<?;6.
%?;.!B=32?:.;
*;6C2?@6AF<3.963<?;6.
<99<DA56@.;1.116A6<;.9D<?8@.A5AA=@?2=<@6A<?FB=2;;21B06@-?2=<?A@
'20<::2;1216A.A6<;'20<::2;1216A.A6<;
'.722C9B?)5<:.@2;G6;42?.;1%?;.!B=32?:.;9A2?;.A6;4)6:2)2:=<?.9"<460 .;B.?F

*;6C2?@6AF<3&2;;@F9C.;6.2=.?A:2;A<3<:=BA2?.;1;3<?:.A6<;(062;02)205;60.9'2=<?A$<#((
;.//?2C6.A21C2?@6<;<3A56@=.=2?.==2.?216;A52&?<02216;4@<3A52A5(F:=<@6B:<;<B;1.A6<;@<3
<:=BA2?(062;02%(H==%0A</2?)56@D<?8D.@@B==<?A216;=.?A/FA52%$',&.D.?1
$/FA52$(''.D.?1'/FA52$(4?.;A'/FA52%('
0<;A?.0A/FA52'%#*'4?.;A/FA52'&4?.;A$.;1/FA52
('0<;A?.0A
)56@=.=2?6@=<@A21.A(05<9.?9F<::<;@5AA=@?2=<@6A<?FB=2;;21B06@-?2=<?A@
<?:<?26;3<?:.A6<;=92.@20<;A.0A?2=<@6A<?F=</<EB=2;;21B

9A2?;.A6;4)6:2)2:=<?.9"<4609A2?;.A6;4)6:2)2:=<?.9"<460
/@A?.0A/@A?.0A
)2:=<?.99<4600<:2@6;AD<C.?62A62@96;2.?A6:2A2:=<?.99<460.@@B:2@6:=9606AB;6C2?@.9
>B.;A6I0.A6<;<C2?.99=.A5@A5.A.?242;2?.A21/F@F@A2::<C2@/?.;056;4A6:2A2:=<?.99<460.99<D@
2E=9606A2E6@A2;A6.9.;1B;6C2?@.9>B.;A6I0.A6<;<C2?.99=.A5@+26;A?<1B02.A56?1:<?242;2?.9C.?62AF<3
A2:=<?.99<460
.9A2?;.A6;4A6:2A2:=<?.99<460
<332?@@2920A6C2>B.;A6I0.A6<;<C2?A5<@2=.A5@A5.A.?2
=<@@6/92<BA0<:2@<34.:2@@B05.@A524.:26;D5605A52@F@A2:.;1A522;C6?<;:2;A.9A2?;.A2
:<C2@+569296;2.?A6:2.;1/?.;056;4A6:29<460@.?2;.AB?.9@=206I0.A6<;9.;4B.42@3<?09<@21
@F@A2:@.9A2?;.A6C2A6:29<460@.?2;.AB?.9@=206I0.A6<;9.;4B.42@3<?<=2;@F@A2:@<?2E.:=92/F
=?20216;4A52A2:=<?.9<=2?.A<?2C2;AB.99FD6A5.@2920A6C2=.A5>B.;A6I2?D20.;@=2063FA5.A6;A52
4.:2/2AD22;A52@F@A2:.;1A522;C6?<;:2;AA52@F@A2:5.@.@A?.A24FA<?2.05.02?A.6;@A.A29@<
A52=?</92:@<3?202=A6C2;2@@?2.96G./696AF.;10<;A?<99./696AF0.;/23<?:B9.A21.@:<129052086;4
=?</92:@3<?.9A2?;.A6;4A6:23<?:B9.@
2=2;16;4<;D52A52?D2.1:6A.?/6A?.?F;2@A6;4<3@2920A6C2=.A5>B.;A6I2?@.;1A2:=<?.9<=2?.A<?@D2
</A.6;A52AD<.9A2?;.A6;4A6:2A2:=<?.99<460@)".;1)"+26;A2?=?2AA523<?:B9.@<3)".;1)"
<C2?
.9A2?;.A6;4A?.;@6A6<;@F@A2:@
+56926;<?16;.?FA?.;@6A<?F@F@A2:@2.05A?.;@6A6<;0<??2@=<;1@A<.
=<@@6/92@A2=<3A52@F@A2:6;.9A2?;.A6;4A?.;@6A6<;@F@A2:@2.05A?.;@6A6<;0<??2@=<;1@A<.=<@@6/92
:<C26;A524.:2/2AD22;A52@F@A2:.;1A522;C6?<;:2;A.6?.9A2?;.A6;4A?.;@6A6<;@F@A2:@0.;
0.=AB?2/<A5@F;05?<;<B@.;1.@F;05?<;<B@0<:=<@6A6<;@3<=2;@F@A2:@<?@F;05?<;<B@@F@A2:@
A522E=?2@@6C2=<D2?<3)"/2F<;1)"0<:2@.A;<0<@AA52:<129052086;40<:=92E6AF<3
@F;05?<;<B@)"6@96;2.?6;A52@6G2<3A52@F@A2:.;1A5292;4A5<3A523<?:B9.)52@F:/<960:<129
052086;4.94<?6A5:3<?)"2EA2;1@D6A532D:<16I0.A6<;@A<@F;05?<;<B@)".;1D6A5@<:2D<?8
.9@<A<.@F;05?<;<B@A<)"D5<@2:<129052086;40<:=92E6AF6@>B.1?.A60)56@:.82@)".;</C6<B@
0.;161.A23<?A52.BA<:.A60C2?6I0.A6<;<3<=2;@F@A2:@;A520.@2<3)"A52:<129052086;4
=?</92:6@09<@29F?29.A21A<A52@F;A52@6@=?</92:3<?96;2.?A6:23<?:B9.@.;1?2>B6?2@1<B/9F
2E=<;2;A6.9A6:23<?/<A5@F;05?<;<B@.;1.@F;05?<;<B@@F@A2:@
<::2;A@<::2;A@
*;6C2?@6AF<3&2;;@F9C.;6.2=.?A:2;A<3<:=BA2?.;1;3<?:.A6<;(062;02)205;60.9'2=<?A$<#(
(
;.//?2C6.A21C2?@6<;<3A56@=.=2?.==2.?216;A52&?<02216;4@<3A52A5(F:=<@6B:<;
<B;1.A6<;@<3<:=BA2?(062;02%(H==%0A</2?)56@D<?8D.@@B==<?A216;
=.?A/FA52%$',&.D.?1$/FA52$(''.D.?1'/FA52$(4?.;A
'/FA52%('0<;A?.0A/FA52'%#*'4?.;A/F
A52'&4?.;A$.;1/FA52('0<;A?.0A
)56@A205;60.9?2=<?A6@.C.69./92.A(05<9.?9F<::<;@5AA=@?2=<@6A<?FB=2;;21B06@-?2=<?A@

! "
#%$&(')'*,+.-0/2134$6587:9<;=?>$6@A+BC<'5D)E052FG'1(H$6587,I.1J5K$,L./MONP')1J>$658H
Q,RTSVUOWXZYZ[S(\Y]^`_a]b[UGc?YZSVX<W)\GdeP\6^f]bXZ[gWYihj]b\,klmhjS(\Gl(Sbn
o
\hjpbS(XZqihjYPr:])^`sKS(\G\GqZrbtjpbW\6h0Wnusuvhwt0W)dGSmtxUGvhyWnzsO{}|~6|?n
W)\Gd,_]![UGc?Yihj\Gk6lmhjSV\?l(S4aS(qZSWXZlmv,_aS(\YZS(X(nSmtwtKW)]bXJW)YZ]!XihjS(q(nc?XZXJW(r:ahwtwtyn8%!b~!)?

[gW(hwty8WtjcGXJlmhjq( c?UOSV\?\ SVd?c
o
u?< lJhjq( cGUOS(\G\2 S(dGcOW(tjc?X(

RS(UOWXZYZ[S(\YA])^

tjS(l(YZXihjlW(t

\G)hj\GS(S(Xihj\G,W)\Gd:_a]b[4U?cGYZS(X<klmhjS(\Gl(S(q(n
o
\6hjp!S(XZqihjYir:]^`_TW(twhw^y]bXZ\h0W6nS(XZ!SmtjS(rbn8_a{~)bb

[gWhwtyuVYJW)vn ]!XZ\OWS(SVl(q( S(XZbSmtjSVrb SVd?c
o
u?< SVS(l(q( OS(XZbSJtjS(rb S(d?c6!(YJWv2n ]bXZ\W6!
:¡¢)£!¤¥K¦£¨§
S([U]bXJWttj]!)hjl%l(]b[SVqhj\Yia]%p!W)XihjS(YihjSVq(Otwhj\?SWXi©PYihj[S.YZSV[UO]bXJW(tKtj]!)hjl4W)qZqZcG[S(q
hj[UtwhjlmhjY:cG\6hjp!S(XZqJWt«ªcOW\Yihw¬OlWYihj]b\]pbSVXgWtwtAUW)YZvGqYZvOWYgW)XZSbS(\GS(XJWYZS(dr®qZrqZYZS([¯[4])p!S(q(°
GXJW)\Glmvhj\?©PYihj[S±YZSV[UO]bXJW(tatj]bhjl:W(twtj])qSV²U6twhjlmhjYgS(²bhjqZYZSV\Yih0Wt%W\?dc?\hjpbS(XZqJW(tAªcOW\Yihw¬OlWYihj]b\
]pbS(XzW(twtOUW)YZvGq(!³±Shj\YZXZ]dGcGl(S<WaYZvhjXZd2n[4]bXZSa!S(\?SVXJWtpbWXihjS(Yir<]^YZS([U]bXJWtGtj]bhjlb´bµj¶y·¸m¹´¶»º0¹¼b½
¶yºx¾%·:¶»·¾a¿À¸i´bµaµjÀJ¼ºxÁ])ÂS(XZqgqZSmtjS(l(Yihjp!S±ªcW)\Yihw¬lW)Yihj]!\Ã]p!S(XgYZv?]!qZSUW)YZvGqYZvW)YÄW)XZS:UO]!qZqihj6tjS
]bcGYZl(]![S(qg])^AW[S(q(nzqZcGlmvÅW)q%YZvGSW[Shj\vhjlmvÅYZv?SgqZrqZYZS([ÆW)\GdÇYZvGSSV\pbhjXZ]b\G[S(\Y:W(tw©
YZS(XZ\W)YZS[]pbS(q(u³Åv6hwtjStwhj\GSWXi©iYihj[4S,W)\GdÈGXJW)\GlJv6hj\G)©PYihj[S:tj]bhjl(qW)XZSg\OWYZc?XJW(tqZUOS(lJhw¬OlWYihj]b\
t0W)\GbcW)!S(q^y]!Xulmtj]bqZSVdqZrqZYZS([q(nWtjYZS(XZ\W)Yihj\G)©PYihj[Stj]!)hjl(qW)XZSa\W)YZcGXJWtqZUOS(lmhw¬lWYihj]b\t0W\?!cOWbS(q
^y]!XT]!UOS(\:qZrqZYZS([4q(É?]!XTSV²GW)[UtjSbnrgU?XZSVl(S(dhj\?YZv?S<YZS([4UO]bXJW(tu]bUS(XJW)YZ]!XgÊËSVpbS(\YZcWtwtjrÌ:ahjYZv
WqZSmtjS(lVYihjpbSUW)YZvªcOW\Yihw¬OS(X(naSlW\®qZUOS(lmhw^fr±YZvW)Y<hj\®YZvGSW[SgOS(Yi`S(S(\,YZv?SgqZrqZYZS([ÍW\?d
YZvGSS(\pbhjXZ]!\?[SV\Y(nYZv?SAqZrqZYZS([ÎvW)qW<qZYZXJW)YZSVbrYZ]%XZSW)lJvWlVS(XZYJWhj\qZYJW)YZSb{tjqZ]YZvGSUGXZ]btjS([q
])^zXZSVl(S(UGYihjpbS(\GS(qZq(nXZSW(twhjÏW)hwtÐhjYPrnuW\?dl(]b\YZXZ]twt0W)hwtÐh0Yir:lW\OS^f]bXZ[%c6t0WYZS(d,W)q[]dGSmtw©PlmvGS(lJbhj\?
UGXZ]btjS([q^y]!XW(tjYZS(XZ\W)Yihj\G)©PYihj[S^y]bXZ[%ct0W)q(
RTS(US(\?dhj\G]!\gTvGS(YZvGS(XaaS«W)dG[.hjYWXZ6hjYZXJWXZr\GS(qZYihj\?4])^uqZSJtjS(l(YihjpbS<UW)YZvªcOW\Yihw¬OSVXZqW\?d
YZS([U]bXJWt]bUS(XJW)YZ]!XZq(nbaSz]bGYJWhj\4YZv?SzYia]AW(tjYZS(XZ\OWYihj\?©PYihj[SYZS([4UO]bXJW(t?tj]!)hjl(qz{
§
W\?d%{
§
Ñ
³,Shj\YZSVXZU?XZS(Y`YZv?Sa^y]!XZ[.ct0W)qa]^8{
§
W\?dg{
§

Ñ
]pbS(XA´bµj¶y·)¸J¹O´¶yºx¹¼¶y¸i´¹?ÒVºx¶yºxÀ¹<Ò(ÓÒ(¶y·¾<Òm³Åv6hwtjS
hj\]bXZdhj\OWXZrYZXJW)\GqihjYihj]b\qZrqZYZS([q(nSW)lJvYZXJW)\GqihjYihj]b\ÇlV]bXZXZS(qZUO]!\?dGqgYZ]®WU]bqZqihjtjS:qZYZS(U])^AYZv?S
qZrqZYZS([nzhj\ÔWtjYZS(XZ\W)Yihj\GYZXJW)\GqihjYihj]b\ÔqZrqZYZS([q(n`SW)lJvYZXJW)\GqihjYihj]b\Ôl(]!XZXZS(qZUO]b\GdGq:YZ]W±UO]!qZqihj6tjS
[]pbShj\YZvGSW[SgOS(Yi`S(S(\®YZvGSgqZrqZYZS([ÕW)\Gd®YZv?SgS(\pbhjXZ]!\?[4S(\Y(`ÉOWhjX4WtjYZS(XZ\W)Yihj\G®YZXJW\?qihw©
Yihj]b\ÅqZrqZYZS([qlW)\lW)UGYZcGXZSO]!YZvÇqZr\GlmvGXZ]b\G]bcGqW)\GdW)qZr\GlJv?XZ]!\?]!c?ql(]b[U]bqihjYihj]b\Gq]^A]bUOS(\
qZrqZYZS([q(É?]bX%qZr\?lJvGXZ]b\G]bcGqqZrqZYZS([q(nuYZvGSgS(²UGXZS(qZqihjpbSUO]aS(X%])^{
§
ÈOS(r!]b\GdÅ_
§
l(]b[SVq
W)Y4\?]®lV]bqZY(zYZv?S[]dGSmtw©PlmvGS(lJbhj\?Ål(]b[UtjS(²bhjYPrÇ])^«qZr\?lJvGXZ]b\G]bcGq{
§
Èhjqtwhj\GSW)Xhj\ÅYZv?SqihjÏ(S
])^`YZvGSqZrqZYZS([ÖW)\Gd±YZvGS.tjS(\GbYZv,])^`YZv?S%^y]bXZ[%c6t0W
§
v?SqZr[%O]twhjl[4]d?Smtw©PlJv?SVlmbhj\G®W(tjb]!XihjYZv?[
^y]!Xg_
§
S(²YZS(\Gd?qgahjYZv®^yS(×[]dhw¬OlW)Yihj]b\Gq:YZ]:qZr\GlmvGXZ]b\G]bcGq{
§
nW)\GdÈahjYZvqZ]b[4Sa]!XZOn
WtjqZ]4YZ]WqZr\?lJv?XZ]!\?]!c?q<{
§
nvG]bqZSA[]d?SJtw©ilJvGS(lmbhj\GlV]b[UtjS(²bhjYirghjqªcOWd?XJWYihjlb
§
vhjqT[ÄW)bSVq
{
§
W)\:]bpbhj]!c?q<lW)\Gd6hjdW)YZS^y]!XTYZvGS4W)cGYZ]b[gWYihjl.p!S(Xihw¬OlW)Yihj]b\])^`]bUOS(\:qZrqZYZSV[q(ei\YZv?S%lW)qZS
])^A{
§

Ñ
n8YZv?Sg[]dGSmtw©PlJv?S(lJbhj\GÈUGXZ]btjS([Íhjq.lmtj]!qZSmtjrXZSmt0W)YZSVdÈYZ]:YZvGSgqZr\YZv?SVqihjqU?XZ]!6tjSV[Ø^y]!X
twhj\GSW)Xi©PYihj[Sg^y]bXZ[%c6t0Wq(nuW\?d:XZSVªc6hjXZS(q%dG]bcG6tjr,S(²UO]!\?S(\Yih0W(tYihj[S.^f]bXO]bYZv,qZr\GlmvGXZ]b\G]bcGqW\?d
W)qZr\GlJv?XZ]!\?]!c?q%qZrqZYZS([q(
Ñ.{A\:W?GXZS(pbh0W)YZSVd®pbS(XZqihj]!\:])^zYZvhjq<UOWUOS(X«W)UGUOSW)XZSVdhj\:YZvGSÙa¸PÀÁm·J·mÚº0¹¼bÒÀZÛ.¶jÜO·<ÝÞG¶jÜßmàzàzà
á
Ób¾a¿OÀbÒVºxâG¾À¹ãÀâ?¹OÚ´¶yºxÀ¹GÒaÀZÛ%äuÀ¾¿8âG¶y·¸
á
Á)º0·)¹Ám·<åPÉKæ<_kçw~!bèmnGUGU2|!©J|!~6næl(YZ]bOSVX
|~b~!6
§
v6hjq<`]bXZ:WqqZcGU?UO]!XZYZS(d±hj\,UOWXZYr:YZvGSgæ<ÔéeZsW(WXZd,!b6|V)©ê~bë(©J|m©êbë!b6n
r%YZvGS<kGÉ,_{«

W(W)XZdg__©ê~bëb|!bì6nGr%YZv?S«kGÉ!XJW)\Y__©ê~bëbbíb~6nrYZv?S
{«ÉKæ<kGîlV]b\YZXJW)lVY<ÉK~!íb!©ê~bï(©m|J©êbbë!í6nrYZv?S<{«aæ×
o
aeabXJW\Y<Ra{{«©ê)©ê~bí©J|J©Z!ï)G|bn
rgYZvGS<{<sO{bXJW\YAT{Að<©êìb~!6nW)\Gd:rYZvGS%kGa_îlV]b\YZXJW)lVY<~bë(©êR_©êïb)Gw!ïbí



£!¤

¦£
!
#"$"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (
)

+*
P£
,
O¤

¥2£
-
.0/
¤¥

¢
1
P£
2
4365
¢)£
,87
Ô¢
"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" 9
(
B
;:=<
%'
?>
85E
;@
JEx=G5±=Na+9
A
"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" B
(
B
(
ADC
O5
FE
m;1J=?5=G/@<+T9
A
"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" G
(
B
IH4J
8$6E01+9
A
"$"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:-K
L

+*
P£
,
O¤

¥2£
-
.FM
£
N7O,
/
,87OPQ
8¤¥
*SRQ
.

ê¦
"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:-H
H
B
;:
È+9
TAUC
5
D@
($
V
"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:-H
H
B
(
+9
TA
'>$65
8@
mE
NE
(@
"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:W
H
B
IH4J
8$6E01
YX
ê+T9
T
"$"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:-Z
H
B
W
Ã+9
T[
"&"$"$"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:
G
\]3^5
7
Ç¡
F*!
Z¦
`_,D*ba&c,
¦
d^
e. "&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:-f
W
8B
;:
È+9
TAUC
>
`g
K=G-xE
NESh
®=7O'-
i
;'
-Ekj
OEx5F
"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
:-f
W
8B
(
J
8$6E01
YX
ê+T9
TlADC
O>
`g
8=?-xE
mESh
=7'-
ei
;'
Ej
OEx5F
"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (
:
n
_,D*
M
¦
c,
¦
d^
.
a&o7OP*2,Dp^
i£
5q"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (r(
9
B
;:
È+9
Th
=7'-
sXYE
m;'
-Ekj
OEx5F
ti
=G>±M-x'
uV
E
;@vC
"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (
H
9
B
(
J
8$6E01
YX
ê+T9
Tlh
®=7O'-
sXE
J;2'
-Ekj
Ex5F
ti
=?>,M-x'
uV
E
;@vC
"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (
H
9
B
IH
î+9
T[`h
®=7O'-
sXE
m;'
-Ekj
OE052F
ti
=G>,M2-0'
?V
E
;@vC
"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (
W
wyx
,
5




/
R[
"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (rB
B
B
;:
È9<;'+%-
;@
J'1m58$
@
mEx5F
Xv@
JEx>,'
SzoXi
<$-
NE
(/2-0/2@
"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (rB
B
B
(4{
$>±'
T
u=GF?E
NE
"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%" (
f
|

¦
}F7OP*!,
£
,
1~

K¤
7
¥£
2
"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
H:
Z
B
;:
È+9
A`
<E
;@
J;

Z5
FE
=G>,M2-0'
1@
J'

Z5NP=G1m>$
@
mEx=G5
"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
H:
Z
B
(
+9
Tl
<E
;@
m;

Z5
oE
(=G>±M-x'
@
J'
b
Z5ONP=G1m>$
}@
JEx=G5
"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
H
(
Z
B
IH4A
OEx5FG-x'
uX
J$F?'5
D@
A+9
T
<E
;@
J;

Z5
FE
(=?>,M-x'
@
m'

Z5ONi=G1J>®$
@
mE0=?5
"$"%"$"$"%"$"$"$"%"
HrH

a$

¦
}*2
¢
12

¢
"$"$"%"$"$"%"$"$"&"'"&"$"%"$"$"$"%"$"$"%"$"&"$"%"$"$"%"$"$"$"%"
HW

 
Q



o

k

Z5
: frZrZ

a5O/')-0EaM1m=GMK=G@m'!7
l@
m=,/@m'
 !"#!$%&'()%*+-,/.
T
O9
T
10
@
J=±@JMK'
-E
(EÐN
2C
1m'
uX
2
/Ex1J'>±'5
D@
J@TNP=G11J'b$
rEu@
mE0*?'@
C
O@
@
m'>,@
435
a5O/
FZrZ
76
JB?+ÎNP=G1m>:/-y$<=N
T
O9
T
®Ex@E05
D@
m'1JM1m'
@
J'b7®=*G'1%$
E
(=?>,M/
@
($
@
mE0=?5
8

<;E
NE
J;®Ex@%$5®Ex5
D>
852E
@
m'@J'
2
/'5
oE
(':=Na@
@
V$
}@
J'@bBK+¨1J'!$
Eu@
JEx*G'@
C
O@
@
m'> @V$
}@
JEx@
v>
8')@
$5
=T
O9
T
ÈNP=G1m>:/-y$gEÐNA$-x-E
@
m@
&E
(=?>,M/
@
V$
@
mEx=G5@<7O=8B
^<
./'
%@
m=
t@
m;'gEx>,M-xE
NE
(E
;@
/@m'=6NA/5Ex*?'1J@($-
2
/8$5
D@
mE
>^E
$
@
mE0=?5=*G')1
@
J;2'@m'
@
g=N
E
(=?>,M/
@
V$
@
mEx=G5@
9
FT
O9
T4E
$552=
r@
%'
?V
M21J'@m@'
uV
Ex@
@
m'5
D@
JEy$-

2=G1
MK=G@J@mE
;g
Ex-0E
;@vC
:
OM1J=?M8')1
@
JEx'@bB
(;&<,=::*9 >"#!$%'&'8)%*-,?
g@m/
FE
m;Å$@
$i
9
T
Ô$6587
li
9
T[
<
=G5
O@
m;':=
r@
m;'1g;K$587
@
u7O=ÈM1J=*OEy7O''
uV
M-xE
mE
E
@
2
/8$65
8@
mE
s>6E
$
@
mEx=G5=*?'1
%@
J;2':@J'
@
g=6N
E
=G>,M2/
@
V$
X
@
JEx=?5@
3
Ii
A
G
:
BA
C
G B
6
JB
rJ
2=G1aEx5@
@
($5
FE
('
B
NP=?1$%@
k@
V$
}@
J'%M21J'!7OE
NE
$
}@
J'
4CD
@
J;2'
i
9
T
:Ni=G1J>:/2-f$
FE@GHC
1J'
2
/2E01m'@
`@
J;K$
@
$®@
k@
V$
}@
J',@($
@
mE0@ËN
2C
OEx5F
IC
}E0@*Ex@mE
@
m'!7ÇEx5Ô$-x-
E
(=?>,M/
@
V$
@
mEx=G5@
9
$6587
O@
m;'
ti
9
T
NP=?1J>:/-y$
JGHC
1m'
2
/Ex1J'@
@
J;8$
}@@
J;2'1J'.'
uV
E0@
k@
J@<$
%E
(=?>,M/
@
($
@
mE0=?5
%@
J;K$
@
*OEx@JE
;@
J@$@
@
($
@
J'.@V$
}@
JEx@ZN
2C X
Ex5F
KC
B?9<;'%M1m=
rg
-x'>Ø=N
D %MLB#@,=,N:*
E0@
Q@
J=*G'1mEjN
!C 
<;'
1@
J;'1%$
&>
85E
;@
J'
uX
Z@
@
($
@
m'Ä$
}g
@
@
m1V$
EkX
@
JEx=?5Å=6N$®1m'!$
rE?@
JEx*G':@
kC
@
k@
J'>@V$
@
mEx@
v>
8'@$
@
J'>±M8=?1V$6-
X
Z-x=GF?E
mE
.@mM8'
-E
E
>^E
$
@
mE0=?5
O3
Ii
A
G
:
8P
$A
G
:
6
JB
A1Q
E
(Ex'5
D@
<>±=7'-
E
m;'
-Ekj
G'1m@%'
uV
Ex@
@
Ni=G1
Sg
K=
r@
J;
lT
O9
T
R.
P'?B FKB
S
8A


"TU3
wC<=?-
NfrZ
76-0
A$6587
i
9
T
H.
i'GB F8B
S
Ah
WVX3
IhlEhlf H
96-0#
?$587$1m'%Ex5
FE
(1m'!$@mE052FG-
;C%g
K'Ex5Fg/@m'!7,$6@A7O'
g
/2FGFGEx5Fg$6Ef7@aNP=G1aEx587O/2@
@
J1mEy$-
7O'@mExFG5@bB
9<;'-0=?FGE
NE
(@
T
O9
T
$6587
i
9
T
;8$b*?'
$@
J;'Ex1.58$
@
m/1V$6-`Ex5
D@
J')1JM1m'
@
V$
}@
JEx=G5=*?'1
S@
J;2'
E
(=?>,M/
UX
@
V$
}@
JEx=G52@4=6N
E
(-x=G@J'b7@
kC
@
k@
J'>±@
M
o
<;'1m',$
I,7)%+?7LY?#Z9?[7
Ex@4$@
C
O@
@
m'>

<;=?@J'
g
8');8$b*OE0=?1%Ex@
E
(=?>,M-x'
@
m'-
;C
7'
@
J'1m>,Ex5'!7
0g8C@
m;'@
k@
V$
}@
J':=N
@
J;'@
C
O@
@
m'>ÅBKC<=

'*G')1
M
^@
m;'
E
=G>,MK=G@mE
;@
JEx=G58$6-
>,=7O')-0Ex5F:$5K77'@JExFG5È=N1J'!$
Eu@
JEx*?'g@
C
O@
@
m'>,@.1J'
2
/Ex1m'@'!$
rE
m;
E
(=?>,MK=G5')5
8@S@
m=
`g
8'*Ex'

'!7
$@:$5Ã=GMK'5@
C
O@
@
m'>
I

<;'1m'$5
\%$7]?#Z9?&"7
E0@:$È@
C
O@
@
m'>
@
m;8$
@
Ex5
D@
J'1($
rEu@
m@
`
<E
@
m;E
;@
J@
'5O*OEx1J=G52>,'5
D@
%$5K7
t
<;2=G@J'
g
K';8$b*OEx=G1%7O'MK'587@4=?5
@
J;'@
@
($
@
J'=N
@
J;'@
C
O@
@
m'> $6@
S
A'-x-a$@
@
J;2'
Sg
8';K$b*Ex=?1`=6N
6@
m;'<'5O*OEx1J=G52>,'5
D@
!B
h
®=7O'-x@aNP=?1a=GMK'5:@
C
O@
@
m'>,@
9
@J/
oE
J;,$6@
iSA
O3
wC<=O$
G 9
6"

"^
GI}$/
@
m=G>$
}@
V$
>3
T C
O5
Ff
B
6"
!$6587g#'!$
rEu@
mEx*G'
h
®=7O/2-0')@
_3
+4C
bf
B
6[
b7OEx@
@
mE052FG/Ex@J;
$g
K'
@v
''5
`:"7
'
852=G587O'
1@
J'1m>,Ex5Ex@J>
a
-E
m;=GE
NE
(')@>$?7O'
gDC%@
J;2'<@
C
O@
@
m'>
I
G$6587
Wb9[7#'
K5=G587'
@
J'1m>,Ex5Ex@J>
a
E
m;=GE
NE
(')@4>®$G7O'
$gDCt@
m;'g'5O*OEx1J=?5>,'5
D@
bB
Fi
=G52@J'
2
/'5
D@
m-
C
:
g
K'@mEf7'@/5Ex*G'1m@V$6-
D.
Z7O=,$-x-
E
(=G>
+X
M/
@
($
@
mE0=?5@<@V$
}@
JEx@ZN
!C
$M1m=GMK'1
@vC
c0
<$5K7,'
?V
Ex@
k@
J'5
D@
JEy$6-
d.
ê7=')@%@J=?>,'
$E
(=G>±M/
@
V$
}@
JEx=G5:@($
@
mE0@ËN
2C
$
M1m=GMK'1
@vC
c0
2
/'@
k@
JEx=G52@
M
G$
b@
J;2E01(7
2
/')@
@
JEx=?5 $61JEx@J'@T58$
@
m/1V$6-0-
;C
@e
E
$5
@
J;2'<@
C
O@
@
m'> 1J'@m=G-x*G'E
;@
J@
Ex5
D@
J'1m58$-
E
m;=GE
NE
(')@z@J=
b@
J;8$
}@^@
J;'T@V$
@
mEx@ZNê$
Eu@
JEx=G5=6N2$M1J=?M8')1
@vC
Ex@uFG/8$61V$5
D@
m''!75=<>$
}@@
J')1u;=

@
J;2''5O*OEx1J=?5>,'5
D@
<1m'@J=?-0*?'@
$@
J;''
uV@
J')1J58$6-
E
m;=?E
NE
('@
&c
A
O/
FE
m;Å$65
fg[7#+*
,@V$
}@
JEx@ZNê$
Eu@
JEx=?5
E
$65
g
K'g*OEx'

'!7®$@%$
'
<E0525Ex5F
E
=G587OE
;@
mE0=?5,Ex5$
@v
=
X
ZM-y$
C
G')1AFO$>,'
Sg
K'
@v
''5
l@
m;'@
C
O@
@
m'>
$5K7
l@
m;'')5*OEx1J=?5>,')5
8@
bB+.-
@
m'1J5K$
@
JEx=?5Ex@4$±58$
@
m/1V$6-aFG'5')1V$-xExD!$
}@
JEx=G5®=N'
uV
E0@
k@
J'5
D@
mEf$6-$587
/5Ex*?'1J@($-
g
1V$65
FE
m;Ex5F

z$6587Ç;8$6@
&g
K''5Ã@
@
m/87OEx'!7'
?VU@
m'5@mE0*?'-
;C
ÅEx5
=@
J;')=G1J'
1@
JE
NE
$-
E
=G>,M2/
@
J'1
@
E
E0')5
FE
('
h3
Ii
<L
$A
G
:
i6
JB
<
.E
j
')1J'5
D@
g1m'@J'!$61
E
m;'1m@,;8$b*?',$1mFG/'!7ÈNi=G1gFO$>,'
?X
ê-xE
;j
G'Ex5
D@
J'1mM1J'
@
($
@
mE0=?5@=N
T
O9
T
$587
i
9
T
Ç@JMK'
-E
(E
s>6E
)$
@
JEx=?5@<NP=?1<=GMK'5®@
C
O@
@
m'>,@bB
k
'.-0Ex@
k@
NP=?/1<@J/
oE
J;ÈE052@
@
V$65
FE
('@.;'1m'GB
l
`,
¦
},8P
a£

-m
o,

,
¢b¢
a3
I<
%Ex-
G
f
B
?+
&Tf H
:
{
AATf}W
96"e
{
Ex*G'5,$Ä1J'!$
Eu@
JEx*G'<@
kC
O@
@
J')>
I
?@JMK'
-E
(E
s>
8'!7
gDC
$
@m'
@
=N
?M[nM
E
(=G>±M/
@
V$
}@
JEx=G52@
4.
2@vC
OME
NE
$-x-
;C
:
OFG'5')1V$
@
m'!7
g8C
$
+@
J1V$65@JE
;@
mE0=?51J')-f$
}@
JEx=G5
<0
<$587
$Ç@m'
@
®=N
op
lE
(=?>,M/
@
V$
@
mEx=G5@
W.
!@vC
M2E
mE
)$-x-
;C
q
'
uV
M1J')@J@J'b7
g8C
$5
T
O9
T
}NP=?1J>:/-y$
B0#
@
J;'
1m'
-E
('M
@
JEx*G'52'@J@.M1J=
g
-x'> E0@
@
J=7O'
@
J')1J>,Ex5'
b
<;'
@
m;'1'*G'1
kC`>
852E
@
m'<@V$NP'
&E
(=?>,M/
@
V$
@
mEx=G5
E
)$5
%g
K''
uV@
J')587O'!7
@
m=4$5Ex5
D>
852E
@
m'-xEx*G'
E
(=G>±M/
@
($
@
JEx=?5%Ex1J1m'@JMK'
-Eu@
mE0*?'<=N
@
J;2'
g
8');8$b*OE0=?1z=6N
@
m;'<'5O*OEx1J=G52>,'5
D@
!B
1v@
aE0@a@m'5@JE
;g
-x'
r
O$5K7g5'
E
('@J@($1
kC
NP=G1
E
(=G>±M8=?@JE
;@
JEx=G5K$-xE
;@vC
q
k@
J=1J'
2
/2E01m'
$65$
9Q
,1J>®$
@
mE0*?'«$65@

'1
b@
J=
`@
J;2'41m'
-E
('M
@
JEx*G'52'@J@gM21J=
rg
2-0')>ÅB

Frequently asked questions

Q1. What are the contributions in "Alternating-time temporal logic" ?

The authors introduce a third, more general variety of temporal logic: alternating-time temporal logic offers selective quantification over those paths that are possible outcomes of games, such as the game in which the system and the environment alternate moves. For example, by preceding the temporal operator `` eventually '' with a selective path quantifier, the authors can specify that in the game between the system and the environment, the system has a strategy to reach a certain state.