15
Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Embed Size (px)

Citation preview

Page 1: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Consistency Checking of RM-ODP Specifications

Kenneth Baclawski

Mieczyslaw Kokar

Jeffrey Smith

Jerzy Letkowski

Page 2: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Themes

Consistency Checking Fundamental requirement Techniques for checking consistency Demonstration of ConsVISor

Category Theory Component framework for logical theories Component composition Refinement for code generation

Page 3: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Logical Consistency

A fundamental requirement of any rigorous formalization

Definition: there exists a non-trivial model of the theory.

If a theory is inconsistent then every logical statement is true.

Inconsistency is dangerous for autonomous agents!

Page 4: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Logical Reasoning

Person Fish

Wanda

type

Wendy

type

owns

Type constraint violation: The range of owns is Fish.

OR There is no inconsistency: Wanda is a fish!

type

Mermaid?

owns

Page 5: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

DepartmentStudent

Cardinality constraint violation: George can’t have two majors

OR There is no inconsistency: Computer Science = Chemistry

type

ChemistryGeorge

type

equivalentTo

Computer Science

typemajor

major

major(0,1)

Page 6: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Checking Consistency

Consistency checking is very hard. Church showed that first-order logic is only

semi-decidable.

ConsVISor uses two concurrent strategies: Warn about possible inconsistencies. This part

is in Prolog and Java. If none, then consistent. Use the SNARK theorem prover to find true

inconsistencies. This need not terminate.

Page 7: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

InconsistenciesManual consistency checking is difficult.

It is very hard to determine the consequences of a set of axioms just by looking at them.

Multiple viewpoints increase the difficulty. Translation may introduce inconsistency.

Inconsistent languages: Resource Description Framework (RDF) DARPA Agent Markup Language (DAML) Knowledge Interchange Format (KIF)

Page 8: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski
Page 9: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski
Page 10: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Category Theory: Specware

Category theory furnishes a formal component framework for logical theories.

Specification morphisms are more powerful than the include mechanism.

Specifications are intensional.Specifications can be refined to be

progressively more detailed.

Page 11: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Category of Specifications

A category consists of objects and morphisms.An object is a formal specification (spec)

consisting of sorts, operations, axioms and theorems. Each spec is a logical theory.

A morphism is a mapping of specs: Sorts are mapped to sorts Operations are mapped to operations. Axioms and theorems map to theorems.

Page 12: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Component Composition

Components can be composed by using the colimit mechanism.

Vehicle Spec Amphibian Spec

One-Sort Spec

Water Craft

Water VehicleOne-Sort Spec

Land VehicleLand Vehicle

Composed Spec

Page 13: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Importing and Templates

Linked List Spec

Vehicle Spec

Linked List and Vehicle

Import specification

One-Sort Spec

Linked List Spec

Vehicle Spec

Linked List of Vehicles

Template instantiation

Page 14: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

Web Links

This presentation is available online at <Baclawski.com/woodpecker.ppt>

Versatile Information Systems (VIS) Web site <vis.home.mindspring.com>

Inconsistent languages (on VIS Web site): RDF <www.w3.org/rdf> DAML <www.daml.org> KIF <logic.stanford.edu/kif>

Page 15: Consistency Checking of RM-ODP Specifications Kenneth Baclawski Mieczyslaw Kokar Jeffrey Smith Jerzy Letkowski

More Web links

Ontology-based computing talk <Baclawski.com/gbctalk.ppt>

Specware and Slang <www.kestrel.edu>SNARK automated theorem prover <www.ai.sri.com/~stickel/snark.html>