# Bisimulation

Jump to navigation Jump to search

In theoretical computer science a bisimulation is a binary relation between state transition systems, associating systems that behave in the same way in that one system simulates the other and vice versa.

Intuitively two systems are bisimilar if they, assuming we view them as playing a game according to some rules, match each other's moves. In this sense, each of the systems cannot be distinguished from the other by an observer.

## Formal definition

Given a labelled state transition system (${\displaystyle S}$, ${\displaystyle \Lambda }$, →), where ${\displaystyle S}$ is a set of states, ${\displaystyle \Lambda }$ is a set of labels and → is a set of labelled transitions (i.e., a subset of ${\displaystyle S\times \Lambda \times S}$), a bisimulation is a binary relation ${\displaystyle R\subseteq S\times S}$, such that both ${\displaystyle R}$ and its converse ${\displaystyle R^{T}}$ are simulations. From this follows that the symmetric closure of a bisimulation is a bisimulation, and that each symmetric simulation is a bisimulation. Thus some authors define bisimulation as a symmetric simulation.[1]

Equivalently, ${\displaystyle R}$ is a bisimulation iff for every pair of states ${\displaystyle (p,q)}$ in ${\displaystyle R}$ and all labels α in ${\displaystyle \Lambda }$:

• if ${\displaystyle p{\overset {\alpha }{\rightarrow }}p'}$, then there is ${\displaystyle q{\overset {\alpha }{\rightarrow }}q'}$ such that ${\displaystyle (p',q')\in R}$;
• if ${\displaystyle q{\overset {\alpha }{\rightarrow }}q'}$, then there is ${\displaystyle p{\overset {\alpha }{\rightarrow }}p'}$ such that ${\displaystyle (p',q')\in R}$.

Given two states ${\displaystyle p}$ and ${\displaystyle q}$ in ${\displaystyle S}$, ${\displaystyle p}$ is bisimilar to ${\displaystyle q}$, written ${\displaystyle p\,\sim \,q}$, iff there is a bisimulation ${\displaystyle R}$ such that ${\displaystyle (p,q)\in R}$. This means that the bisimilarity relation ${\displaystyle \,\sim \,}$ is the union of all bisimulations: ${\displaystyle (p,q)\in \,\sim \,}$ precisely when ${\displaystyle (p,q)\in R}$ for some bisimulation ${\displaystyle R}$.

The set of bisimulations is closed under union;[Note 1] therefore, the bisimilarity relation is itself a bisimulation. Since it is the union of all bisimulations, it is the unique largest bisimulation. Bisimulations are also closed under reflexive, symmetric, and transitive closure; therefore, the largest bisimulation must be reflexive, symmetric, and transitive. From this follows that the largest bisimulation — bisimilarity — is an equivalence relation.[2]

Note that it is not always the case that if ${\displaystyle p}$ simulates ${\displaystyle q}$ and ${\displaystyle q}$ simulates ${\displaystyle p}$ then they are bisimilar. For ${\displaystyle p}$ and ${\displaystyle q}$ to be bisimilar, the simulation between ${\displaystyle p}$ and ${\displaystyle q}$ must be the converse of the simulation between ${\displaystyle q}$ and ${\displaystyle p}$. Counter-example in CCS: ${\displaystyle \,M=a.b+a\,}$ and ${\displaystyle \,M'=a.b\ }$ simulate each other but are not bisimilar.

1. ^ Meaning the union of two bisimulations is a bisimulation.

## Alternative definitions

### Relational definition

Bisimulation can be defined in terms of composition of relations as follows.

Given a labelled state transition system ${\displaystyle (S,\Lambda ,\rightarrow )}$, a bisimulation relation is a binary relation ${\displaystyle R}$ over ${\displaystyle S}$ (i.e., ${\displaystyle R}$${\displaystyle S}$ × ${\displaystyle S}$) such that ${\displaystyle \forall \alpha \in \Lambda }$

${\displaystyle R\ ;\ {\overset {\alpha }{\rightarrow }}\quad {\subseteq }\quad {\overset {\alpha }{\rightarrow }}\ ;\ R}$
and
${\displaystyle R^{-1}\ ;\ {\overset {\alpha }{\rightarrow }}\quad {\subseteq }\quad {\overset {\alpha }{\rightarrow }}\ ;\ R^{-1}}$

From the monotonicity and continuity of relation composition, it follows immediately that the set of the bisimulations is closed under unions (joins in the poset of relations), and a simple algebraic calculation shows that the relation of bisimilarity—the join of all bisimulations—is an equivalence relation. This definition, and the associated treatment of bisimilarity, can be interpreted in any involutive quantale.

### Fixpoint definition

Bisimilarity can also be defined in order theoretical fashion, in terms of fixpoint theory, more precisely as the greatest fixed point of a certain function defined below.

Given a labelled state transition system (${\displaystyle S}$, Λ, →), define ${\displaystyle F:{\mathcal {P}}(S\times S)\to {\mathcal {P}}(S\times S)}$ to be a function from binary relations over ${\displaystyle S}$ to binary relations over ${\displaystyle S}$, as follows:

Let ${\displaystyle R}$ be any binary relation over ${\displaystyle S}$. ${\displaystyle F(R)}$ is defined to be the set of all pairs ${\displaystyle (p,q)}$ in ${\displaystyle S}$ × ${\displaystyle S}$ such that:

${\displaystyle \forall \alpha \in \Lambda .\,\forall p'\in S.\,p{\overset {\alpha }{\rightarrow }}p'\,\Rightarrow \,\exists q'\in S.\,q{\overset {\alpha }{\rightarrow }}q'\,{\textrm {and}}\,(p',q')\in R}$

and

${\displaystyle \forall \alpha \in \Lambda .\,\forall q'\in S.\,q{\overset {\alpha }{\rightarrow }}q'\,\Rightarrow \,\exists p'\in S.\,p{\overset {\alpha }{\rightarrow }}p'\,{\textrm {and}}\,(p',q')\in R}$

Bisimilarity is then defined to be the greatest fixed point of ${\displaystyle F}$.

### Ehrenfeucht–Fraïssé game definition

Bisimulation can also be thought of in terms of a game between two players: attacker and defender.

"Attacker" goes first and may choose any valid transition, ${\displaystyle \alpha }$, from ${\displaystyle (p,q)}$. I.e.:

${\displaystyle (p,q){\overset {\alpha }{\rightarrow }}(p',q)}$ or ${\displaystyle (p,q){\overset {\alpha }{\rightarrow }}(p,q')}$

The "Defender" must then attempt to match that transition, ${\displaystyle \alpha }$ from either ${\displaystyle (p',q)}$ or ${\displaystyle (p,q')}$ depending on the attacker's move. I.e., they must find an ${\displaystyle \alpha }$ such that:

${\displaystyle (p',q){\overset {\alpha }{\rightarrow }}(p',q')}$ or ${\displaystyle (p,q'){\overset {\alpha }{\rightarrow }}(p',q')}$

Attacker and defender continue to take alternating turns until:

• The defender is unable to find any valid transitions to match the attacker's move. In this case the attacker wins.
• The game reaches states ${\displaystyle (p,q)}$ that are both 'dead' (i.e., there are no transitions from either state) In this case the defender wins
• The game goes on forever, in which case the defender wins.
• The game reaches states ${\displaystyle (p,q)}$, which have already been visited. This is equivalent to an infinite play and counts as a win for the defender.

By the above definition the system is a bisimulation if and only if there exists a winning strategy for the defender.

### Coalgebraic definition

A bisimulation for state transition systems is a special case of coalgebraic bisimulation for the type of covariant powerset functor. Note that every state transition system ${\displaystyle (S,\Lambda ,\rightarrow )}$ is bijectively a function ${\displaystyle \xi _{\rightarrow }}$ from ${\displaystyle S}$ to the powerset of ${\displaystyle S}$ indexed by ${\displaystyle \Lambda }$ written as ${\displaystyle {\mathcal {P}}(\Lambda \times S)}$, defined by

${\displaystyle p\mapsto \{(\alpha ,q)\in \Lambda \times S:p{\overset {\alpha }{\rightarrow }}q\}.}$

Let ${\displaystyle \pi _{i}\colon S\times S\to S}$ be ${\displaystyle i}$-th projection mapping ${\displaystyle (p,q)}$ to ${\displaystyle p}$ and ${\displaystyle q}$ respectively for ${\displaystyle i=1,2}$; and ${\displaystyle {\mathcal {P}}(\Lambda \times \pi _{1})}$ the forward image of ${\displaystyle \pi _{1}}$ defined by dropping the third component

${\displaystyle P\mapsto \{(\alpha ,p)\in \Lambda \times S:\exists q.(\alpha ,p,q)\in P\}}$

where ${\displaystyle P}$ is a subset of ${\displaystyle \Lambda \times S\times S}$. Similarly for ${\displaystyle {\mathcal {P}}(\Lambda \times \pi _{2})}$.

Using the above notations, a relation ${\displaystyle R\subseteq S\times S}$ is a bisimulation on a transition system ${\displaystyle (S,\Lambda ,\rightarrow )}$ if and only if there exists a transition system ${\displaystyle \gamma \colon R\to {\mathcal {P}}(\Lambda \times R)}$ on the relation ${\displaystyle R}$ such that the diagram

commutes, i.e. for ${\displaystyle i=1,2}$, the equations

${\displaystyle \xi _{\rightarrow }\circ \pi _{i}={\mathcal {P}}(\Lambda \times \pi _{i})\circ \gamma }$

hold where ${\displaystyle \xi _{\rightarrow }}$ is the functional representation of ${\displaystyle (S,\Lambda ,\rightarrow )}$.

## Variants of bisimulation

In special contexts the notion of bisimulation is sometimes refined by adding additional requirements or constraints. An example is that of stutter bisimulation, in which one transition of one system may be matched with multiple transitions of the other, provided that the intermediate states are equivalent to the starting state ("stutters").[3]

A different variant applies if the state transition system includes a notion of silent (or internal) action, often denoted with ${\displaystyle \tau }$, i.e. actions that are not visible by external observers, then bisimulation can be relaxed to be weak bisimulation, in which if two states ${\displaystyle p}$ and ${\displaystyle q}$ are bisimilar and there is some number of internal actions leading from ${\displaystyle p}$ to some state ${\displaystyle p'}$ then there must exist state ${\displaystyle q'}$ such that there is some number (possibly zero) of internal actions leading from ${\displaystyle q}$ to ${\displaystyle q'}$. A relation ${\displaystyle {\mathcal {R}}}$ on processes is a weak bisimulation if the following holds (with ${\displaystyle {\mathcal {S}}\in \{{\mathcal {R}},{\mathcal {R}}^{-1}\}}$, and ${\displaystyle a,\tau }$ being an observable and mute transition respectively):

${\displaystyle \forall p,q.\quad (p,q)\in {\mathcal {S}}\Rightarrow p{\stackrel {\tau }{\rightarrow }}p'\Rightarrow \exists q'.\quad q{\stackrel {\tau ^{\ast }}{\rightarrow }}q'\wedge (p',q')\in {\mathcal {S}}}$

${\displaystyle \forall p,q.\quad (p,q)\in {\mathcal {S}}\Rightarrow p{\stackrel {a}{\rightarrow }}p'\Rightarrow \exists q'.\quad q{\stackrel {\tau ^{\ast }a\tau ^{\ast }}{\rightarrow }}q'\wedge (p',q')\in {\mathcal {S}}}$

This is closely related to bisimulation up to a relation.

Typically, if the state transition system gives the operational semantics of a programming language, then the precise definition of bisimulation will be specific to the restrictions of the programming language. Therefore, in general, there may be more than one kind of bisimulation, (bisimilarity resp.) relationship depending on the context.

## Bisimulation and modal logic

Since Kripke models are a special case of (labelled) state transition systems, bisimulation is also a topic in modal logic. In fact, modal logic is the fragment of first-order logic invariant under bisimulation (van Benthem's theorem).

## Algorithm

Checking that two finite transition systems are bisimilar can be done in polynomial time.[4] The fastest algorithms are linear-time using partition refinement through a reduction to the coarsest partition problem.

## References

1. ^ Jančar, Petr and Srba, Jiří (2008). "Undecidability of Bisimilarity by Defender's Forcing". J. ACM. New York, NY, USA: Association for Computing Machinery. 55 (1): 26. doi:10.1145/1326554.1326559. ISSN 0004-5411. S2CID 14878621.CS1 maint: multiple names: authors list (link)
2. ^ Milner, Robin (1989). Communication and Concurrency. USA: Prentice-Hall, Inc. ISBN 0131149849.
3. ^ Baier, Christel; Katoen, Joost-Pieter (2008). Principles of Model Checking. MIT Press. p. 527. ISBN 978-0-262-02649-9.
4. ^ Baier & Katoen (2008), Cor. 7.45, p. 486.