|
1 (* Title: HOL/IOA/NTP/Sender.thy |
|
2 ID: $Id$ |
|
3 Author: Tobias Nipkow & Konrad Slind |
|
4 Copyright 1994 TU Muenchen |
|
5 |
|
6 The implementation: sender |
|
7 *) |
|
8 |
|
9 Sender = IOA + Action + Multiset + List + |
|
10 |
|
11 types |
|
12 |
|
13 'm sender_state = "'m list * bool multiset * bool multiset * bool * bool" |
|
14 (* messages #sent #received header mode *) |
|
15 |
|
16 consts |
|
17 |
|
18 sender_asig :: "'m action signature" |
|
19 sender_trans :: "('m action, 'm sender_state)transition set" |
|
20 sender_ioa :: "('m action, 'm sender_state)ioa" |
|
21 sq :: "'m sender_state => 'm list" |
|
22 ssent,srcvd :: "'m sender_state => bool multiset" |
|
23 sbit :: "'m sender_state => bool" |
|
24 ssending :: "'m sender_state => bool" |
|
25 |
|
26 defs |
|
27 |
|
28 sq_def "sq == fst" |
|
29 ssent_def "ssent == fst o snd" |
|
30 srcvd_def "srcvd == fst o snd o snd" |
|
31 sbit_def "sbit == fst o snd o snd o snd" |
|
32 ssending_def "ssending == snd o snd o snd o snd" |
|
33 |
|
34 sender_asig_def |
|
35 "sender_asig == ((UN m. {S_msg(m)}) Un (UN b. {R_ack(b)}), \ |
|
36 \ UN pkt. {S_pkt(pkt)}, \ |
|
37 \ {C_m_s,C_r_s})" |
|
38 |
|
39 sender_trans_def "sender_trans == \ |
|
40 \ {tr. let s = fst(tr); \ |
|
41 \ t = snd(snd(tr)) \ |
|
42 \ in case fst(snd(tr)) \ |
|
43 \ of \ |
|
44 \ S_msg(m) => sq(t)=sq(s)@[m] & \ |
|
45 \ ssent(t)=ssent(s) & \ |
|
46 \ srcvd(t)=srcvd(s) & \ |
|
47 \ sbit(t)=sbit(s) & \ |
|
48 \ ssending(t)=ssending(s) | \ |
|
49 \ R_msg(m) => False | \ |
|
50 \ S_pkt(pkt) => hdr(pkt) = sbit(s) & \ |
|
51 \ (? Q. sq(s) = (msg(pkt)#Q)) & \ |
|
52 \ sq(t) = sq(s) & \ |
|
53 \ ssent(t) = addm (ssent s) (sbit s) & \ |
|
54 \ srcvd(t) = srcvd(s) & \ |
|
55 \ sbit(t) = sbit(s) & \ |
|
56 \ ssending(s) & \ |
|
57 \ ssending(t) | \ |
|
58 \ R_pkt(pkt) => False | \ |
|
59 \ S_ack(b) => False | \ |
|
60 \ R_ack(b) => sq(t)=sq(s) & \ |
|
61 \ ssent(t)=ssent(s) & \ |
|
62 \ srcvd(t) = addm (srcvd s) b & \ |
|
63 \ sbit(t)=sbit(s) & \ |
|
64 \ ssending(t)=ssending(s) | \ |
|
65 \ C_m_s => count (ssent s) (~sbit s) < count (srcvd s) (~sbit s) & \ |
|
66 \ sq(t)=sq(s) & \ |
|
67 \ ssent(t)=ssent(s) & \ |
|
68 \ srcvd(t)=srcvd(s) & \ |
|
69 \ sbit(t)=sbit(s) & \ |
|
70 \ ssending(s) & \ |
|
71 \ ~ssending(t) | \ |
|
72 \ C_m_r => False | \ |
|
73 \ C_r_s => count (ssent s) (sbit s) <= count (srcvd s) (~sbit s) & \ |
|
74 \ sq(t)=tl(sq(s)) & \ |
|
75 \ ssent(t)=ssent(s) & \ |
|
76 \ srcvd(t)=srcvd(s) & \ |
|
77 \ sbit(t) = (~sbit(s)) & \ |
|
78 \ ~ssending(s) & \ |
|
79 \ ssending(t) | \ |
|
80 \ C_r_r(m) => False}" |
|
81 |
|
82 sender_ioa_def "sender_ioa == \ |
|
83 \ (sender_asig, {([],{|},{|},False,True)}, sender_trans)" |
|
84 |
|
85 end |