Metric temporal logic

Metric temporal logic (MTL) is a special case of temporal logic. It is an extension of temporal logic in which temporal operators are replaced by time-constrained versions like until, next, since and previous operators. It is a linear-time logic that assumes both the interleaving and fictitious-clock abstractions. It is defined over a point-based weakly-monotonic integer-time semantics.

MTL has been described as a prominent specification formalism for real-time systems.^[1] Full MTL over infinite timed words is undecidable.^[2]

Syntax

The full metric temporal logic is defined similarly to linear temporal logic, where a set of non-negative real number is added to temporal modal operators U and S. Formally, MTL is built up from:

a finite set of propositional variables AP,
the logical operators ¬ and ∨, and
the temporal modal operator $U I$ (pronounced " $φ$ until in $I$ $ψ$ ."), with $I$ an interval of non-negative numbers.
the temporal modal operator $S I$ (pronounced " $φ$ since in $I$ $ψ$ ."), with $I$ as above.

When the subscript is omitted, it is implicitly equal to $[0,\infty )$ .

Note that the next operator N is not considered to be a part of MTL syntax. It will instead be defined from other operators.

Past and Future

The past fragment of metric temporal logic, denoted as past-MTL is defined as the restriction of the full metric temporal logic without the until operator. Similarly, the future fragment of metric temporal logic, denoted as future-MTL is defined as the restriction of the full metric temporal logic without the since operator.

Depending on the authors, MTL is either defined as the future fragment of MTL, in which case full-MTL is called MTL+Past.^[1]^[3] Or MTL is defined as full-MTL.

In order to avoid ambiguity, this article uses the names full-MTL, past-MTL and future-MTL. When the statements holds for the three logic, MTL will simply be used.

Model

Let $T\subseteq \mathbb {R} _{+}$ intuitively represent a set of points in time. Let $\gamma :T\to A$ a function which associates a letter to each moment $t\in T$ . A model of a MTL formula is such a function $\gamma$ . Usually, $\gamma$ is either a timed word or a signal. In those cases, $T$ is either a discrete subset or an interval containing 0.

Semantics

Let $T$ and $\gamma$ as above and let $t\in T$ some fixed time. We are now going to explain what it means that a MTL formula $\phi$ holds at time $t$ , which is denoted $\gamma ,t\models \phi$ .

Let $I\subseteq \mathbb {R} _{+}$ and $\phi ,\psi \in MTL$ . We first consider the formula $\phi {\mathcal {U}}_{I}\psi$ . We say that $\gamma ,t\models \phi {\mathcal {U}}_{I}\psi$ if and only if there exists some time $t'\in I+t$ such that:

$\gamma ,t'\models \psi$ and
for each $t''\in T$ with $t<t''<t'$ , $\gamma ,t''\models \phi$ .

We now consider the formula $\phi {\mathcal {S}}_{I}\psi$ (pronounced " $\phi$ since in $I$ $\psi$ .") We say that $\gamma ,t\models \phi {\mathcal {S}}_{I}\psi$ if and only if there exists some time $t'\in I-t$ such that:

$\gamma ,t'\models \psi$ and
for each $t''\in T$ with $t'<t''<t$ , $\gamma ,t''\models \phi$ .

The definitions of $\gamma ,t\models \phi$ for the values of $\phi$ not considered above is similar as the definition in the LTL case.

Operators defined from basic MTL operators

Some formulas are so often used that a new operator is introduced for them. These operators are usually not considered to belong to the definition of MTL, but are syntactic sugar which denote more complex MTL formula. We first consider operators which also exists in LTL. In this section, we fix $\phi ,\psi$ MTL formulas and $I\subseteq \mathbb {R} _{+}$ .

Operators similar to the ones of LTL

Release and Back to

We denote by $\phi {\mathcal {R}}_{I}\psi$ (pronounced " $\phi$ release in $I$ , $\psi$ ") the formula $\neg \phi {\mathcal {U}}_{I}\neg \psi$ . This formula holds at time $t$ if either:

there is some time $t'\in t+I$ such that $\phi$ holds, and $\psi$ hold in the interval $(t,t')\cap (t+I)$ .
at each time $t'\in t+I$ , $\phi$ holds.

The name "release" come from the LTL case, where this formula simply means that $\phi$ should always hold, unless $\psi$ releases it.

The past counterpart of release is denote by $\phi {\mathcal {B}}_{I}\psi$ (pronounced " $\phi$ back to in $I$ , $\psi$ ") and is equal to the formula $\neg \phi {\mathcal {S}}_{I}\neg \psi$ .

Finally and Eventually

We denote by $\Diamond _{I}\phi$ or ${\mathcal {F}}_{I}\phi$ (pronounced "Finally in $I$ , $\phi$ ", or "Eventually in $I$ , $\phi$ ") the formula $\top {\mathcal {U}}_{I}\phi$ . Intuitively, this formula holds at time $t$ if there is some time $t'\in t+I$ such that $\phi$ holds.

We denote by $\Box _{I}\phi$ or ${\mathcal {G}}_{I}\phi$ (pronounced "Globally in $I$ , $\phi$ ",) the formula $\neg \Diamond _{I}\neg \phi$ . Intuitively, this formula holds at time $t$ if for all time $t'\in t+I$ , $\phi$ holds.

We denote by ${\overleftarrow {\Box }}_{I}\phi$ and ${\overleftarrow {\Diamond }}_{I}\phi$ the formula similar to $\Box _{I}\phi$ and $\Diamond _{I}\phi$ , where ${\mathcal {U}}$ is replaced by ${\mathcal {S}}$ . Both formula has intuitively the same meaning, but when we consider the past instead of the future.

Next and previous

This case is slightly different from the previous ones, because the intuitive meaning of the "Next" and "Previously" formulas differs depending on the kind of function $\gamma$ considered.

We denote by $\bigcirc _{I}\phi$ or ${\mathcal {N}}_{I}\phi$ (pronounced "Next in $I$ , $\phi$ ") the formula $\bot {\mathcal {U}}_{I}\phi$ . Similarly, we denote by $\ominus _{I}\phi$ ^[4] (pronounced "Previously in $I$ , $\phi$ ) the formula $\bot {\mathcal {S}}_{I}\phi$ . The following discussion about the Next operator also holds for the Previously operator, by reversing the past and the future.

When this formula is evaluated over a timed word $\gamma :T\to A$ , this formula means that both:

at the next time in the domain of definition $T$ , the formula $\phi$ will holds.
furthermore, the distance between this next time and the current time belong to the interval $I$ .
In particular, this next time holds, thus the current time is not the end of the word.

When this formula is evaluated over a signal $\gamma$ , the notion of next time does not makes sense. Instead, "next" means "immediately after". More precisely $\gamma ,t\models \circ \phi$ means:

$I$ contains an interval of the form $(0,\epsilon )$ and
for each $t'\in (t,t+\epsilon )$ , $\gamma ,t'\models \phi$ .

Other operators

We now consider operators which are not similar to any standard LTL operators.

Fall and Rise

We denote by $\uparrow \phi$ (pronounced "rise $\phi$ "), a formula which holds when $\phi$ becomes true. More precisely, either $\phi$ did not hold in the immediate past, and holds at this time, or it does not hold and it holds in the immediate future. Formally $\uparrow \phi$ is defined as $(\phi \land (\neg \phi {\mathcal {S}}\top ))\lor (\neg \phi \land (\phi {\mathcal {U}}\top ))$ .^[5]

Over timed words, this formula always hold. Indeed $\phi {\mathcal {U}}\top$ and $\neg \phi {\mathcal {S}}\top$ always hold. Thus the formula is equivalent to $\phi \lor \neg \phi$ , hence is true.

By symmetry, we denote by $\downarrow \phi$ (pronounced "Fall $\phi$ ), a formula which holds when $\phi$ becomes false. Thus, it is defined as $(\neg \phi \land (\phi {\mathcal {S}}\top ))\land (\phi \land (\neg \phi {\mathcal {U}}\top ))$ .

History and Prophecy

We now introduce the prophecy operator, denoted by $\triangleright$ . We denote by $\triangleright _{I}\phi$ ^[6] the formula $\neg \phi {\mathcal {U}}_{I}\phi$ . This formula asserts that there exists a first moment in the future such that $\phi$ holds, and the time to wait for this first moment belongs to $I$ .

We now consider this formula over timed words and over signals. We consider timed words first. Assume that $I=\mid a,b\mid '$ where $\mid$ and $\mid '$ represents either open or closed bounds. Let $\gamma$ a timed word and $t$ in its domain of definition. Over timed words, the formula $\gamma ,t\models \triangleright _{I}\phi$ holds if and only if $\gamma ,t\models \Box _{]0,b[\setminus I}\neg \phi \land \Diamond _{I}\phi$ also holds. That is, this formula simply assert that, in the future, until the interval $t+I$ is met, $\phi$ should not hold. Furthermore, $\phi$ should hold sometime in the interval $t+I$ . Indeed, given any time $t''\in t+I$ such that $\gamma ,t''\models \phi$ hold, there exists only a finite number of time $t'\in t+I$ with $t'<t''$ and $\gamma ,t'\models \phi$ . Thus, there exists necessarily a smaller such $t''$ .

Let us now consider signal. The equivalence mentioned above does not hold anymore over signal. This is due to the fact that, using the variables introduced above, there may exists an infinite number of correct values for $t'$ , due to the fact that the domain of definition of a signal is continuous. Thus, the formula $\triangleright _{I}\phi$ also ensures that the first interval in which $\phi$ holds is closed on the left.

By temporal symmetry, we define the history operator, denoted by $\triangleleft$ . We define $\triangleleft _{I}\phi$ as $\neg \phi {\mathcal {S}}_{I}\phi$ . This formula asserts that there exists a last moment in the past such that $\phi$ held. And the time since this first moment belongs to $I$ .

Non-strict operator

The semantic of operators until and since introduced do not consider the current time. That is, in order for $\phi _{1}{\mathcal {U}}\phi _{2}$ to holds at some time $t$ , neither $\phi _{1}$ nor $\phi _{2}$ has to hold at time $t$ . This is not always wanted, for example in the sentence "there is no bug until the system is turned-off", it may actually be wanted that there are no bug at current time. Thus, we introduce another until operator, called non-strict until, denoted by ${\overline {\mathcal {U}}}$ , which consider the current time.

We denote by $\phi _{1}{\overline {\mathcal {U}}}_{I}\phi _{2}$ and $\phi _{1}{\overline {\mathcal {S}}}_{I}\phi _{2}$ either:

the formulas $\phi _{2}\lor (\phi _{1}\land (\phi _{1}{\mathcal {U}}_{I}\phi _{2}))$ and $\phi _{2}\lor (\phi _{1}\land (\phi _{1}{\mathcal {S}}_{I}\phi _{2}))$ if $0\in I$ , and
the formulas $\phi _{1}\land (\phi _{1}{\mathcal {U}}_{I}\phi _{2})$ and $\phi _{1}\land (\phi _{1}{\mathcal {S}}_{I}\phi _{2})$ otherwise.

For any of the operators ${\mathcal {O}}$ introduced above, we denote ${\overline {\mathcal {O}}}$ the formula in which non-strict untils and sinces are used. For example ${\overline {\Diamond }}p$ is an abbreviation for $\top {\overline {\mathcal {U}}}p$ .

Strict operator can not be defined using non-strict operator. That is, there is no formula equivalent to $\bigcirc _{I}p$ which uses only non-strict operator. This formula is defined as $\bot {\mathcal {U}}_{I}p$ . This formula can never hold at a time $t$ if it is required that $\bot$ holds at time $t$ .

Example

We now give examples of MTL formulas. Some more example can be found on article of fragments of MITL, such as metric interval temporal logic.

$\Box (p\implies \Diamond _{\{1\}}q)$ states that each letter $p$ is followed exactly one time unit later by a letter $q$ .
$\Box (p\implies \neg \Diamond _{\{1\}}p)$ states that no two successive occurrences of $p$ can occur at exactly one time unit from each other.

Comparison with LTL

A standard (untimed) infinite word $w=a_{0},a_{1},\dots ,$ is a function from $\mathbb {N}$ to $A$ . We can consider such a word using the set of time $T=\mathbb {N}$ , and the function $\gamma (i)=a_{i}$ . In this case, for $\phi$ an arbitrary LTL formula, $w,i\models \phi$ if and only if $\gamma ,i\models \phi$ , where $\phi$ is considered as a MTL formula with non-strict operator and $[0,\infty )$ subscript. In this sense, MTL is an extension of LTL.^{[clarification needed]}

For this reason, a formula using only non-strict operator with $[0,\infty )$ subscript is called an LTL formula. This is because the^{[further explanation needed]}

Algorithmic complexity

The satisfiability of ECL over signals is EXPSPACE-complete.^[6]

Fragments of MTL

We now consider some fragments of MTL.

MITL

An important subset of MTL is the Metric Interval Temporal Logic (MITL). This is defined similarly to MTL, with the restriction that the sets $I$ , used in ${\mathcal {U}}$ and ${\mathcal {S}}$ , are intervals which are not singletons, and whose bounds are natural numbers or infinity.

Some other subsets of MITL are defined in the article MITL.

Future Fragments

Future-MTL was already introduced above. Both over timed-words and over signals, it is less expressive than Full-MTL^[3]^: 3.

Event-Clock Temporal Logic

The fragment Event-Clock Temporal Logic^[6] of MTL, denoted EventClockTL or ECL, allows only the following operators:

the boolean operators, and, or, not
the untimed until and since operators.
The timed prophecy and history operators.

Over signals, ECL is as expressive as MITL and as MITL₀. The equivalence between the two last logics is explained in the article MITL₀. We sketch the equivalence of those logics with ECL.

If $I$ is not a singleton and $\phi$ is a MITL formula, $\triangleright _{I}\phi$ is defined as a MITL formula. If $I=\{i\}$ is a singleton, then $\triangleright _{I}\phi$ is equivalent to $\Box _{]0,i[}\neg \phi \land \Diamond _{]0,i]}\phi$ which is a MITL-formula. Reciprocally, for $\psi$ an ECL-formula, and $I$ an interval whose lower bound is 0, $\Box _{I}\psi$ is equivalent to the ECL-formula $\neg \triangleright _{I}\neg \psi$ .

The satisfiability of ECL over signals is PSPACE-complete.^[6]

Positive normal form

A MTL-formula in positive normal form is defined almost as any MTL formula, with the two following change:

the operators Release and Back are introduced in the logical language and are not considered anymore to be notations for some other formulas.
negations can only be applied to letters.

Any MTL formula is equivalent to formula in normal form. This can be shown by an easy induction on formulas. For example, the formula $\neg (\phi {\mathcal {U}}_{S}\psi )$ is equivalent to the formula $(\neg \phi ){\mathcal {R}}_{S}(\neg \psi )$ . Similarly, conjunctions and disjunctions can be considered using De Morgan's laws.

Strictly speaking, the set of formulas in positive normal form is not a fragment of MTL.

References

^ ^a ^b J. Ouaknine and J. Worrell, "On the decidability of metric temporal logic," 20th Annual IEEE Symposium on Logic in Computer Science (LICS' 05), 2005, pp. 188-197.
^ Ouaknine J., Worrell J. (2006) On Metric Temporal Logic and Faulty Turing Machines. In: Aceto L., Ingólfsdóttir A. (eds) Foundations of Software Science and Computation Structures. FoSSaCS 2006. Lecture Notes in Computer Science, vol 3921. Springer, Berlin, Heidelberg
^ ^a ^b Bouyer, Patricia; Chevalier, Fabrice; Markey, Nicolas (2005). "On the Expressiveness of TPTL and MTL". In Sundar Sarukkai; Sandeep Sen (eds.). FSTTCS 2005: Foundations of Software Technology and Theoretical Computer Science, Proceedings. 25th International Conference, Hyderabad, India, December 15–18, 2005. Lecture Notes in Computer Science. Vol. 3821. p. 436. doi:10.1007/11590156_35. ISBN 978-3-540-32419-5.
^ Maler, Oded; Nickovic, Dejan; Pnueli, Amir (2008). "Checking temporal properties of discrete, timed and continuous behaviors". Pillars of computer science. ACM. p. 478. ISBN 978-3-540-78126-4.
^ Nickovic, Dejan (31 August 2009). "3". Checking Timed and Hybrid Properties: Theory and Applications (Thesis).
^ ^a ^b ^c ^d Henzinger, T.A.; Raskin, J.F.; Schobbens, P.-Y. (1998). "The regular real-time languages". Automata, Languages and Programming. Lecture Notes in Computer Science. Vol. 1443. p. 590. doi:10.1007/BFb0055086. ISBN 978-3-540-64781-2.

[Decidabilty_Of_MITL-1] J. Ouaknine and J. Worrell, "On the decidability of metric temporal logic," 20th Annual IEEE Symposium on Logic in Computer Science (LICS' 05), 2005, pp. 188-197.

[MTL_and_Faulty_Turing_Machine-2] Ouaknine J., Worrell J. (2006) On Metric Temporal Logic and Faulty Turing Machines. In: Aceto L., Ingólfsdóttir A. (eds) Foundations of Software Science and Computation Structures. FoSSaCS 2006. Lecture Notes in Computer Science, vol 3921. Springer, Berlin, Heidelberg

[ExpressivenesOfTPTLAndMtl-3] Bouyer, Patricia; Chevalier, Fabrice; Markey, Nicolas (2005). "On the Expressiveness of TPTL and MTL". In Sundar Sarukkai; Sandeep Sen (eds.). FSTTCS 2005: Foundations of Software Technology and Theoretical Computer Science, Proceedings. 25th International Conference, Hyderabad, India, December 15–18, 2005. Lecture Notes in Computer Science. Vol. 3821. p. 436. doi:10.1007/11590156_35. ISBN 978-3-540-32419-5.

[LTLPlusPast-4] Maler, Oded; Nickovic, Dejan; Pnueli, Amir (2008). "Checking temporal properties of discrete, timed and continuous behaviors". Pillars of computer science. ACM. p. 478. ISBN 978-3-540-78126-4.

[Checking_Timed_and_Hybrid_Properties-5] Nickovic, Dejan (31 August 2009). "3". Checking Timed and Hybrid Properties: Theory and Applications (Thesis).

[RegularRealTime-6] Henzinger, T.A.; Raskin, J.F.; Schobbens, P.-Y. (1998). "The regular real-time languages". Automata, Languages and Programming. Lecture Notes in Computer Science. Vol. 1443. p. 590. doi:10.1007/BFb0055086. ISBN 978-3-540-64781-2.

[1]

[2]

[3]

[4]

[5]

[6]