We introduce a subclass of concurrent game structures (CGS) with imperfect information in which agents are endowed with private data-sharing capabilities. Importantly, our CGSs are such that it is still decidable to model-check these CGSs against a relevant fragment of ATL. These systems can be thought as a generalisation of architectures allowing information forks, in the sense that, in the initial states of the system, we allow information forks from agents outside a given set A to agents inside this A. For this reason, together with the fact that the communication in our models underpins a specialised form of broadcast, we call our formalism A-cast systems. To underline, the fragment of ATL for which we show the model-checking problem to be decidable over A-cast is a large and significant one; it expresses coalitions over agents in any subset of the set A. Indeed, as we show, our systems and this ATL fragments can encode security problems that are notoriously hard to express faithfully: terrorist-fraud attacks in identity schemes.
翻译:我们引入了一组并行游戏结构(CGS),其信息不完善,代理商拥有私人数据分享能力。重要的是,我们的CGS仍然可以按ATL的相关碎片来模拟检查这些 CGS。这些系统可以被认为是允许信息叉子的结构的概括,在系统的初始状态中,我们允许A组以外的代理商向A组内的代理商传递信息。为此原因,加上我们的模型中的通信支撑着一种特殊形式的广播,我们称其为A-cast系统。要强调,我们展示模型核对问题可以与A组相比的ATL碎片是一个巨大和重要的碎片;它代表了A组中任何子中的代理商的联盟。事实上,正如我们所显示的那样,我们的系统和ATL碎片可以把安全问题编码成臭名昭著的难以忠实表达的安全问题:身份系统中的恐怖分子欺诈袭击。