Arrow Research search

Author name cluster

Ron van der Meyden

Possible papers associated with this exact author name in Arrow. This page groups case-insensitive exact name matches and is not a full identity disambiguation profile.

30 papers
2 author rows

Possible papers

30

TARK Conference 2025 Conference Paper

Optimality of Simultaneous Consensus with Limited Information Exchange (Extended Abstract)

  • Kaya Alpturer
  • Ron van der Meyden
  • Sushmita Ruj
  • Godfrey Wong

Work on the development of optimal fault-tolerant Agreement protocols using the logic of knowledge has concentrated on the "full information" approach to information exchange, which is costly with respect to message size. Alpturer, Halpern, and van der Meyden (PODC 2023) introduced the notion of optimality with respect to a limited information exchange, and studied the Eventual Agreement problem in the sending omissions failure model. The present paper studies the Simultaneous Agreement problem for the crash failures model, and a number of limited information exchanges from the literature. In particular, the paper considers information exchanges from a FloodSet protocol (Lynch, Distributed Algorithms 1996), a variant of this in which agents also count the number of failures (Casta\~neda et al, NETYS 2017), and a variant in which agents associate each agent with a value (Raynal, PRDC 2002). A new information exchange is also introduced that enables decisions to be made at worst one round later than the optimal protocol of Dwork and Moses (I&C 88), but with lower computation cost and space requirements. By determining implementations of a knowledge based program, protocols are derived that are optimal amongst protocols for each of these information exchanges.

TARK Conference 2017 Conference Paper

An Epistemic Foundation for Authentication Logics (Extended Abstract)

  • Joseph Y. Halpern
  • Ron van der Meyden
  • Riccardo Pucella

While there have been many attempts, going back to BAN logic, to base reasoning about security protocols on epistemic notions, they have not been all that successful. Arguably, this has been due to the particular logics chosen. We present a simple logic based on the well-understood modal operators of knowledge, time, and probability, and show that it is able to handle issues that have often been swept under the rug by other approaches, while being flexible enough to capture all the higher- level security notions that appear in BAN logic. Moreover, while still assuming that the knowledge operator allows for unbounded computation, it can handle the fact that a computationally bounded agent cannot decrypt messages in a natural way, by distinguishing strings and message terms. We demonstrate that our logic can capture BAN logic notions by providing a translation of the BAN operators into our logic, capturing belief by a form of probabilistic knowledge.

TARK Conference 2017 Conference Paper

Optimizing Epistemic Model Checking Using Conditional Independence (Extended Abstract)

  • Ron van der Meyden

This paper shows that conditional independence reasoning can be applied to optimize epistemic model checking, in which one verifies that a model for a number of agents operating with imperfect information satisfies a formula expressed in a modal multi-agent logic of knowledge. The optimization has been implemented in the epistemic model checker MCK. The paper reports experimental results demonstrating that it can yield multiple orders of magnitude performance improvements.

TCS Journal 2016 Journal Article

The complexity of synchronous notions of information flow security

  • Franck Cassez
  • Ron van der Meyden
  • Chenyi Zhang

The paper considers the complexity of verifying that a finite state system satisfies a number of definitions of information flow security. The systems model considered is one in which agents operate synchronously with awareness of the global clock. This enables timing based attacks to be captured, whereas previous work on this topic has dealt primarily with asynchronous systems. Versions of the notions of nondeducibility on inputs, nondeducibility on strategies, and an unwinding based notion are formulated for this model. All three notions are shown to be decidable, and their computational complexity is characterised.

TARK Conference 2015 Conference Paper

Undecidable Cases of Model Checking Probabilistic Temporal-Epistemic Logic (Extended Abstract)

  • Ron van der Meyden
  • Manas K. Patra

We investigate the decidability of model-checking logics of time, knowledge and probability, with respect to two epistemic semantics: the clock and synchronous perfect recall semantics in partially observed discrete-time Markov chains. Decidability results are known for certain restricted logics with respect to these semantics, subject to a variety of restrictions that are either unexplained or involve a longstanding unsolved mathematical problem. We show that mild generalizations of the known decidable cases suffice to render the model checking problem definitively undecidable. In particular, for a synchronous perfect recall, a generalization from temporal operators with finite reach to operators with infinite reach renders model checking undecidable. The case of the clock semantics is closely related to a monadic second order logic of time and probability that is known to be decidable, except on a set of measure zero. We show that two distinct extensions of this logic make model checking undecidable. One of these involves polynomial combinations of probability terms, the other involves monadic second order quantification into the scope of probability operators. These results explain some of the restrictions in previous work.

KR Conference 2014 Conference Paper

A temporal logic of strategic knowledge

  • Xiaowei Huang
  • Ron van der Meyden

logics. In particular, for dealing with epistemic reasoning in strategic settings, there are multiple proposals, with different semantic and syntactic bases, for how to capture reasoning about the availability to groups of agents of strategies for achieving particular goals (Jonker 2003; Schobbens 2004; van Otterloo and Jonker 2005; Jamroga 2003; Jamroga and Ågotnes 2007). We argue in this paper that this proliferation is unnecessary, and that an appropriate application of temporal epistemic logic, with a minor innovation, already has the power to deal with many issues of concern when dealing with epistemic reasoning in strategic settings. In particular, whereas logics in this area frequently leave strategies implicit in the semantic modelling, we propose to work in an instance of a standard semantic framework for temporal epistemic logic, but with strategies explicitly represented in the semantic model. In fact, we are not the first to have applied this instance of the standard temporalepistemic model (Halpern and O’Neill 2008). Our main innovation is small but, we claim, powerful: we introduce new agent names that refer to the strategies being used by the main players, and allow these new agent names to be included in (otherwise standard) operators for group knowledge. We argue that this gives a logical approach with broad applicability. In particular, it can express many of the subtly different notions that have been the subject of proposals for alternating temporal epistemic logics. We demonstrate this by results that show how such logics can be translated into our setting. We also present a number of other examples including reasoning about possible implementations of knowledge-based programs, game theoretic solution concepts, and issues of concern in computer security. Moreover, as we show, our approach retains from alternating temporal epistemic logic the desirable property that model checking is decidable, in the case of an imperfect recall semantics for knowledge. We show that it is in fact PSPACE-complete, no more than the complexity of model checking the temporal logic LTL, on which we build, although we have a much richer expressiveness. The structure of the paper is as follows. We first recall some standard definitions from temporal epistemic logic. We then present a semantic model (also standard) for the environments in which agents choose their actions. Build- The paper presents an extension of temporal epistemic logic that adds “strategic” agents in a way that allows standard epistemic operators to capture what agents could deduce from knowledge of the strategies of some subset of the set of agents. A number of examples are presented to demonstrate the broad applicability of the framework, including reasoning about implementations of knowledge-based programs, game theoretic solution concepts and notions from computer security. It is shown that notions from several variants of alternating temporal epistemic logic can be expressed. The framework is shown to have a decidable model checking problem.

AAAI Conference 2014 Conference Paper

Symbolic Model Checking Epistemic Strategy Logic

  • Xiaowei Huang
  • Ron van der Meyden

This paper presents a symbolic BDD-based model checking algorithm for an epistemic strategy logic with observational semantics. The logic has been shown to be more expressive than several variants of ATEL and therefore the algorithm can also be used for ATEL model checking. We implement the algorithm in a model checker and apply it to an application on train control system. The performance of the algorithm is also reported, with a comparison showing improved results over a previous partially symbolic approach for ATEL model checking.

TCS Journal 2013 Journal Article

Information flow in systems with schedulers, Part I: Definitions

  • Ron van der Meyden
  • Chenyi Zhang

This paper studies information flow security in a synchronous state machine model, in which agents share a global clock and can make observations at all times, but in which an agent’s ability to perform actions is subject to a scheduler. A number of definitions of security for this setting are proposed, depending on whether the attacker is active or passive, whether the security should be robust to discovery of the schedule by the attacker, and on whether the definition is trace-based or bisimulation-based. In particular, the paper studies the dependence of these definitions of security on implementation details of the scheduler. Such independence is shown to hold for the trace-based definitions, but not for bisimulation-based definitions. Stronger versions of the bisimulation-based definitions are proposed that recover implementation-independence. A complete characterization of relationships between the definitions of security introduced in the paper is derived.

TCS Journal 2013 Journal Article

Information flow in systems with schedulers, Part II: Refinement

  • Ron van der Meyden
  • Chenyi Zhang

Refinement is a relation on system models: a concrete model is a refinement of a more abstract model if it has fewer behaviors. When properties of the abstract model are guaranteed to be preserved in the concrete model, refinement supports a top-down development process. This paper considers preservation of a range of information flow security properties in synchronous systems with schedulers, when these schedulers are refined. Notions of refinement are defined for both an abstract notion of scheduler as well as for their concrete representation as automata. The security properties that are preserved by refinement over schedulers are then characterized. The results are applied to characterize a number of scheduler independent security properties, which state that a system is secure with respect to all schedulers.

TARK Conference 2013 Conference Paper

Symbolic Synthesis of Knowledge-based Program Implementations with Synchronous Semantics

  • Xiaowei Huang 0001
  • Ron van der Meyden

This paper deals with the automated synthesis of implementations of knowledge-based programs with respect to two synchronous semantics (clock and synchronous perfect recall). An approach to the synthesis problem based on the use of symbolic representations is described. The method has been implemented as an extension to the model checker MCK. Two applications of the implemented synthesis system are presented: the muddy children puzzle (where performance is compared to an explicit state method for a related problem implemented in the model checker DEMO), and a knowledge-based program for a dynamic leader election problem in a ring of processes.

AAAI Conference 2012 Conference Paper

Synthesizing Strategies for Epistemic Goals by Epistemic Model Checking: An Application to Pursuit Evasion Games

  • Xiaowei Huang
  • Ron van der Meyden

The paper identifies a special case in which the complex problem of synthesis from specifications in temporal-epistemic logic can be reduced to the simpler problem of model checking such specifications. An application is given of strategy synthesis in pursuit-evasion games, where one or more pursuers with incomplete information aim to discover the existence of an evader. Experimental results are provided to evaluate the feasibility of the approach.

TARK Conference 2011 Conference Paper

Abstraction for epistemic model checking of dining cryptographers-based protocols

  • Omar I. Al-Bataineh
  • Ron van der Meyden

The paper describes an abstraction for protocols that are based on multiple rounds of Chaum’s Dining Cryptographers protocol. It is proved that the abstraction preserves a rich class of specifications in the logic of knowledge. This result is applied to optimize model checking of implementations of a knowledge-based program that uses the Dining Cryptographers protocol as a primitive in an anonymous broadcast system. Performance results are given for model checking knowledge-based specifications in the concrete and abstract models of this protocol, and some new conclusions about the protocol are derived.

IJCAI Conference 2011 Conference Paper

Model Checking Knowledge in Pursuit Evasion Games

  • Xiaowei Huang
  • Patrick Maupin
  • Ron van der Meyden

In a pursuit-evasion game, one or more pursuers aim to discover the existence of, and then capture, an evader. The paper studies pursuit-evasion games in which players may have incomplete information concerning the game state. A methodology is presented for the application of a model checker for the logic of knowledge and time to verify epistemic properties in such games. Experimental results are provided from a number of case studies that validate the feasibility of the approach.

TARK Conference 2011 Conference Paper

Symbolic model checking of probabilistic knowledge

  • Xiaowei Huang 0001
  • Cheng Luo 0003
  • Ron van der Meyden

This paper describes an algorithm for model checking a fragment of the logic of knowledge and probability in multi-agent systems, with respect to a perfect recall interpretation of knowledge and agents’ subjective probability. The algorithm has been implemented in the epistemic model checker MCK. Some experiments with the implemented algorithm are reported, in which some properties of agents’ probabilistic knowledge are verified in two security protocols: Chaum’s Dining Cryptographers protocol, and a protocol for Oblivious Transfer due to Rivest.

TCS Journal 2010 Journal Article

A comparison of semantic models for noninterference

  • Ron van der Meyden
  • Chenyi Zhang

The literature on definitions of security based on causality-like notions such as noninterference has used several distinct semantic models for systems. Early work was based on state machine and trace-set definitions; more recent work has dealt with definitions of security in two distinct process algebraic settings. Comparisons between the definitions has been carried out mainly within semantic frameworks. This paper studies the relationship between semantic frameworks, by defining mappings between a number of semantic models and studying the relationship between notions of noninterference under these mappings.

ECAI Conference 2010 Conference Paper

The Complexity of Epistemic Model Checking: Clock Semantics and Branching Time

  • Xiaowei Huang 0001
  • Ron van der Meyden

In the clock semantics for epistemic logic, two situations are indistinguishable for an agent when it makes the same observation and the time in the situations is the same. The paper characterizes the complexity of model checking branching time logics of knowledge in finite state systems with respect to the clock semantics.

KR Conference 2008 Conference Paper

On Notions of Causality and Distributed Knowledge

  • Ron van der Meyden

The notion of distributed knowledge is used to express what a group of agents would know if they were to combine their information. The paper considers the application of this notion to systems in which there are constraints on how an agent's actions may cause changes to another agent's observations. Intuitively, in such a setting, one would like that anything an agent knows about other agents must be distributed knowledge to the agents that can causally affect it. In prior work, we have argued that the definition of intransitive noninterference --- a notion of causality used in the literature on computer security --- is flawed because it fails to satisfy this property, and have proposed alternate definitions of causality that we have shown to be better behaved with respect to the theory of intransitive noninterference. In this paper we refine this understanding, and show that in order for the converse of the property to hold, one also needs a novel notion of distributed knowledge, as well as a new notion of what it means for a proposition to be ``about" other agents.

TARK Conference 2007 Conference Paper

Preservation of epistemic properties in security protocol implementations

  • Ron van der Meyden
  • Thomas Wilke

We introduce (i) a general class of security protocols with private channel as cryptographic primitive and (ii) a probabilistic epistemic logic to express properties of security protocols. Our main theorem says that when a property expressed in our logic holds for an ideal protocol (where “ideal” means that the private channel hides everything), then it also holds when the private channel is implemented using an encryption scheme that guarantees perfect secrecy (in the sense of Shannon). Our class of protocols contains, for instance, an oblivious transfer protocol by Rivest and Chaum’s solution to the dining cryptographers problem. In our logic we can express fundamental security properties of these protocols. The proof of the main theorem is based on a notion of refinement for probabilistic Kripke structures.

CSL Conference 2003 Conference Paper

A Logic for Probability in Quantum Systems

  • Ron van der Meyden
  • Manas K. Patra

Abstract Quantum computation deals with projective measurements and unitary transformations in finite dimensional Hilbert spaces. The paper presents a propositional logic designed to describe quantum computation at an operational level by supporting reasoning about the probabilities associated to such measurements: measurement probabilities, and transition probabilities (a quantum analogue of conditional probabilities). We present two axiomatizations, one for the logic as a whole and one for the fragment dealing just with measurement probabilities. These axiomatizations are proved to be sound and complete. The logic is also shown to be decidable, and we provide results characterizing its complexity in a number of cases.

TARK Conference 2003 Conference Paper

Knowledge in quantum systems

  • Ron van der Meyden
  • Manas K. Patra

This paper applies to quantum systems a modelling for the logic of knowledge, originally developed for reasoning about distributed systems, but since then applied to game theory, computer security and artificial intelligence. A formal model of quantum message passing systems is developed and the question of how one might define the semantics of a modal operator for knowledge in this model is considered. It is argued that there are at least two plausible semantics, depending on whether the agents are permitted to make use of their quantum state in determining what they know, and on whether one is dealing with single instances of quantum systems, or ensembles. The framework is illustrated using a number of examples from the quantum computing literature, including protocols for quantum key distribution and teleportation.

TIME Conference 2003 Invited Paper

Modal Logics of Knowledge and Tim

  • Ron van der Meyden

Summary form only given, as follows. The paper gives a "stat of the art" overview of modal logics of knowledge and time, covering both axiomatizations and model checking. In the temporal dimension, we consider both linear and branching time logics. The semantics of knowledge can be defined in a variety of ways, reflecting differing assumptions about the resources available to the agent in determining what it knows: from its current observation only, to synchrony (observation plus clock) to perfect recall. We discuss the impact of these assumptions on the axiomatizations and on the complexity of model checking of the combined logics. We also describe some initial experiments with a model checker based on these results.

LPAR Conference 2001 Conference Paper

A Refinement Theory that Supports Reasoning About Knowledge and Time

  • Kai Engelhardt
  • Ron van der Meyden
  • Yoram Moses

Abstract An expressive semantic framework for program refinement that supports both temporal reasoning and reasoning about the knowledge of multiple agents is developed. The refinement calculus owes the cleanliness of its decomposition rules for all programming language constructs and the relative simplicity of its semantic model to a rigid synchrony assumption which requires all agents and the environment to proceed in lockstep. The new features of the calculus are illustrated in a derivation of the two-phase-commit protocol.

I&C Journal 1998 Journal Article

Common Knowledge and Update in Finite Environments

  • Ron van der Meyden

Logics of knowledge have been shown to provide a useful approach to the high level specification and analysis of distributed systems. It has been proposed that such systems can be developed using knowledge- based protocols, in which agents' actions have preconditions that test their state of knowledge. Both computer-assisted analysis of the knowledge properties of systems and automated compilation of knowledge-based protocols require the development of algorithms for the computation of states of knowledge. This paper studies one of the computational problems of interest, the model checking problem for knowledge formulae in the S5 n Kripke structures generated by finite state environments in which states determine an observation for each agent. Agents are assumed to have perfect recall and may operate synchronously or asynchronously. It is shown that, in this setting, model checking of common knowledge formulae is intractable, but efficient incremental algorithms are developed for formulae containing only knowledge operators. Connections to knowledge updates and compilation of knowledge-based protocols are discussed.

TARK Conference 1998 Conference Paper

Knowledge and the Logic of Local Propositions

  • Kai Engelhardt
  • Ron van der Meyden
  • Yoram Moses

An agent's limited view of the state of a distributed system may render globally different situations indistinguishable. A proposition is local for this agent whenever his view suffices to decide this proposition. Motivated by a framework for the development of distributed programs from knowledge-based specifications, we introduce a modal logic of local propositions, in which it is possible to quantify over such propositions. We show that this logic is able to represent a rich set of epistemic notions. Under the usual strong semantics, this logic is not recursively axiomatizable, however. We show that by weakening the semantics of quantification, it is possible to obtain a logic that is axiomatizable and is still able to express interesting epistemic notions.

TARK Conference 1996 Conference Paper

Knowledge Based Programs: On the Complexity of Perfect Recall in Finite Environments

  • Ron van der Meyden

Knowledge based programs have been proposed as an abstract formalism for the design of multi-agent protocols, based on the idea that an agent's actions are a function of its state of knowledge. The key questions in this approach concern the relationship between knowledge based programs and their concrete implementations. We present a variant of the framework of Fagin et al. that facilitates the study of a certain sort of optimization of these implementations. Within this framework, we investigate the inherent complexity of the implementations of atemporal knowledge based programs under the assumptions that the environment is finite state, and that agents operate synchronously and with perfect recall. We provide a simple example showing that one cannot expect to always obtain finite state implementations under this assumption. In fact, we show there exist environments in which knowledge based programs may generate behaviour of PSPACE-complete complexity. This is the most complex behaviour possible given our assumptions.

TARK Conference 1994 Conference Paper

Common Knowledge and Update in Finite Enviromnents I

  • Ron van der Meyden

This paper studies the model checking problem for knowledge formulae in the S5n Kripke structures generated by finite state environments in which states determine an observation for each agent. Agents have perfect recall, and may operate synchronously or asynchronously. Common knowledge formulae are shown to be be intractable, but efficient incremental algorithms are developed for formulae containing only knowledge operators. Connections to knowledge updates and compilation of knowledge based protocols are discussed.

TCS Journal 1993 Journal Article

Recursively indefinite databases

  • Ron van der Meyden

We define recursively indefinite databases, a new type of logical database in which indefinite information arises from partial knowledge of the fixpoint of a Datalog program. Although, in general, query answering is undecidable, we show that queries containing only basic predicates and monadic defined predicates are decidable. The main contribution of the paper is an analysis of the complexity of query answering for this class of queries. We demonstrate a class of databases which generalizes disjunctive databases, but without increasing data complexity. We also establish connections with the theory of hypergraph edge replacement graph grammars.

v2026.09.13