Safe Composition of Systems of Communicating Finite State Machines
Franco Barbanera, Rolf Hennicker
TL;DR
The paper addresses safe multicomposition of asynchronous CFSM-based systems using the PaI paradigm. It introduces connection models and connection policies to govern dynamic forwarding between interfaces via gateways, enabling multi-system composition with configurable interaction patterns. The authors prove preservation of key communication properties—deadlock-freeness, orphan-message freeness, unspecified-reception freeness, and progress—under PaI multicomposition when both components and the connection policy satisfy the target property, noting necessary conditions like no-mixed-states for several properties and highlighting that lock-freeness is not generally preserved. The work demonstrates how structured connection policies enhance safe modular design and outlines directions for extending the framework to more complex interfacing infrastructures and stronger progress notions.
Abstract
The Participants-as-Interfaces (PaI) approach to system composition suggests that participants of a system may be viewed as interfaces. Given a set of systems,one participant per system is chosen to play the role of an interface. When systems are composed, the interface participants are replaced by gateways which communicate to each other by forwarding messages. The PaI-approach for systems of asynchronous communicating finite state machines (CFSMs) has been exploited in the literature for binary composition only, with a (necessarily) unique forwarding policy. In this paper we consider the case of multiple system composition when forwarding gateways are not uniquely determined and their interactions depend on specific connection policies complying with a connection model. We represent connection policies as CFSM systems and prove that a bunch of relevant communication properties (deadlock-freeness, reception-error-freeness, etc.) are preserved by PaI multicomposition, with the proviso that also the used connection policy does enjoy the communication property taken into account.
