: ''This article describes Kripke structures as used in model checking. For a more general description, see
Kripke semantics''.
A Kripke structure is a variation of the
transition system, originally proposed by
Saul Kripke, used in
model checking
In computer science, model checking or property checking is a method for checking whether a finite-state model of a system meets a given specification (also known as correctness). This is typically associated with hardware or software systems ...
to represent the behavior of a system.
It consists of a
graph whose nodes represent the reachable states of the system and whose edges represent state transitions, together with a labelling function which maps each node to a set of properties that hold in the corresponding state.
Temporal logics are traditionally interpreted in terms of Kripke structures.
Formal definition
Let be a set of ''atomic
propositions'', i.e. boolean expressions over variables, constants and predicate symbols. Clarke et al.
define a Kripke structure over as a
4-tuple
In mathematics, a tuple is a finite ordered list (sequence) of elements. An -tuple is a sequence (or ordered list) of elements, where is a non-negative integer. There is only one 0-tuple, referred to as ''the empty tuple''. An -tuple is defi ...
consisting of
* a
finite set of states .
* a set of initial states .
* a transition relation such that is
left-total
In mathematics, a binary relation ''R'' ⊆ ''X''×''Y'' between two sets ''X'' and ''Y'' is total (or left total) if the source set ''X'' equals the domain . Conversely, ''R'' is called right total if ''Y'' equals the range .
When ''f'': ''X'' â ...
, i.e., such that .
* a labeling (or ''interpretation'') function .
Since is
left-total
In mathematics, a binary relation ''R'' ⊆ ''X''×''Y'' between two sets ''X'' and ''Y'' is total (or left total) if the source set ''X'' equals the domain . Conversely, ''R'' is called right total if ''Y'' equals the range .
When ''f'': ''X'' â ...
, it is always possible to construct an infinite path through the Kripke structure. A
deadlock state can be modeled by a single outgoing edge back to itself.
The labeling function defines for each state the set of all atomic propositions that are valid in .
A ''path'' of the structure is a sequence of states such that for each , holds.
The ''word'' on the path is a sequence of sets of the atomic propositions
,
which is an
ω-word over alphabet .
With this definition, a Kripke structure (say, having only one initial state may be identified with a
Moore machine with a singleton input alphabet, and with the output function being its labeling function.
Example
Let the set of atomic propositions .
and can model arbitrary boolean properties of the system that the Kripke structure is
modelling.
The figure at right illustrates a Kripke structure ,
where
* .
* .
* .
* .
may produce a path and is the execution word over the path .
can produce execution words belonging to the language .
Relation to other notions
Although this terminology is widespread in the model checking community, some textbooks on model checking do not define "Kripke structure" in this extended way (or at all in fact), but simply use the concept of a (labelled)
transition system, which additionally has a set of actions, and the transition relation is defined as a subset of , which they additionally extend to include a set of atomic propositions and a labeling function for the states as well ( as defined above.) In this approach, the binary relation obtained by abstracting away the action labels is called a state graph.
Clarke et al. redefine a Kripke structure as a set of transitions (instead of just one), which is equivalent to the labeled transitions above, when they define the semantics of
modal μ-calculus.
[Clarke et al. p. 98]
See also
*
Temporal logic
*
Model checking
In computer science, model checking or property checking is a method for checking whether a finite-state model of a system meets a given specification (also known as correctness). This is typically associated with hardware or software systems ...
*
Kripke semantics
*
Linear temporal logic In logic, linear temporal logic or linear-time temporal logic (LTL) is a modal temporal logic with modalities referring to time. In LTL, one can encode formulae about the future of paths, e.g., a condition will eventually be true, a condition will ...
*
Computation tree logic
References
{{Reflist
Model checking
Temporal logic
Transition systems