Abstract: A method for verifying a property of a complete model of a system under study includes abstracting at least some of the variables from the model so as to produce an abstract model of the system. Beginning with an initial state in a state space of the abstract model, an abstract path is found through the state space of the abstract model in accordance with the transition relation to a target state defined by the property. A subset of the abstracted variables is restored to the abstract model so as to produce an intermediate model of the system, and the property on the complete model is verified based on the intermediate model.

Abstract: A synchronization method including running (10) a system (725) having multiple agents (730) in parallel operation and forcing synchronization order (20, 30, 40, 50) between the multiple agents at at least one intervention juncture. Preferably, the multiple agents (730) include at least two agents (570, 590) accessing a single address at almost the same time. Further preferably, the forcing step includes forcing a predetermined one (570) of said two agents to access said address before the other one (590) of said two agents accesses said address.

Abstract: A method for verifying a property of a complete model of a system under study includes abstracting at least some of the variables from the model so as to produce an abstract model of the system. Beginning with an initial state in a state space of the abstract model, an abstract path is found through the state space of the abstract model in accordance with the transition relation to a target state defined by the property. A subset of the abstracted variables is restored to the abstract model so as to produce an intermediate model of the system, and the property on the complete model is verified based on the intermediate model.