Abstract: A model checking device includes a model acquisition unit configured to acquire a state transition model representing state transitions between a plurality of components, a local mathematical feature acquisition unit configured to acquire one or more predetermined local mathematical features associated with each of the plurality of components, a global mathematical feature calculation unit configured to calculate one or more global mathematical features associated with the state transition model based on the local mathematical features associated with the plurality of components, and a checking unit configured to perform model checking on the state transition model based on the one or more global mathematical features.

Abstract: A safety rule capable of coping with a complex scenario is formulated. A safety rule generation device includes an input unit configured to receive an input of scenario information representing a predetermined scenario by chaining subscenarios in which a control strategy and a goal are associated, a precondition calculation unit configured to calculate a precondition for executing the control strategy while achieving the goal for each of the subscenarios, and an output unit configured to output safety rule information obtained by combining the precondition and the control strategy for each of the subscenarios.

Abstract: The present disclosure aims to provide a technique for monitoring the behavior of a control system accurately. One aspect of the present invention relates to a monitoring device having: an acquiring part configured to acquire observed values of a variable that is sampled with respect to a behavior of a control system while the control system is running; and a determining part configured to determine a range of possible observed values that the variable possibly reaches upon a temporal change thereof, based on the acquired observed values, and determine whether a variation range of the acquired observed values satisfies a specification, based on an overlap between the range of the possible observed values and a range not satisfying the specification.

Abstract: An information processing device includes a memory, and a processor configured to execute a process. The process includes acquiring a first controller model, the first controller model including information indicating a control condition based on a measurement value, and information indicating a control action defining an action of a control target when the control condition is satisfied; and outputting a second controller model, the second controller model being capable of tolerating a measurement value including a measurement error, wherein the second controller model includes information indicating a control condition based on the information indicating the control condition included in the first controller model, and information indicating a control action based on the information indicating the control condition and the information indicating the control action included in the first controller model.

Abstract: A control system includes a processor; and a memory storing program instructions that cause the processor to control an operation of an object and output state information indicating a state of the controlled object; perform first control that operates the controlled object according to a first safety rule; perform second control that operates the controlled object according to a second safety rule; and perform the first control in response to determining that the state information satisfies a first switching condition defined based on the first safety rule and the second safety rule, and perform the second control in response to determining that the state information does not satisfy the first switching condition.

Abstract: A safety rule generation device includes: a processor; and a memory connected to the processor, wherein the processor is configured to: receive input of a plurality of control flows indicating state transitions of a plurality of moving bodies, respectively, the moving bodies operating in a predetermined scenario; generate an integrated control flow in which the plurality of control flows are integrated based on transition conditions assigned to the control flows; assign logical expression constraints that guarantee safety, to respective states included in the integrated control flow; and generate a safety rule based on the logical expression constraints.

Abstract: A sampling device includes a memory and a processor configured to execute selecting a control flow corresponding to each branch in a probabilistic program; optimizing the program by applying predetermined transformation rules to the program of the selected control flow by back propagation; and generating samples according to the optimized program.

Abstract: An analysis apparatus includes an inputter configured to receive an input of a first temporal logic formula and an input of a second temporal logic formula, and an outputter configured to output a screen for displaying a first block diagram showing the first temporal logic formula and a second block diagram showing the second temporal logic formula in a comparable manner.

Abstract: A safety rule capable of coping with a complex scenario is formulated. A safety rule generation device includes an input unit configured to receive an input of scenario information representing a predetermined scenario by chaining subscenarios in which a control strategy and a goal are associated, a precondition calculation unit configured to calculate a precondition for executing the control strategy while achieving the goal for each of the subscenarios, and an output unit configured to output safety rule information obtained by combining the precondition and the control strategy for each of the subscenarios.

Abstract: A safety rule generation device includes a memory and a processor coupled to the memory. The memory stores a plurality of general-purpose scenarios for an autonomously-operable moving body to execute a predetermined driving operation, and a plurality of general-purpose safety rules previously calculated so as to complete the general-purpose scenarios while satisfying a predetermined safety condition. The processor receives an input of route information in which a route of travel from a starting position to a target position is divided into a plurality of route segments, assigns the general-purpose scenarios to the respective route segments, and generates an overall safety rule in which the general-purpose safety rules corresponding to the general-purpose scenarios are connected according to an order of the route segments.

Abstract: A system optimal control technique with accuracy guarantee that enables high-speed calculations is provided. One aspect of the present invention is related to a system optimal control device including a graph converting unit configured to convert, based on an upper bound of an probability of arrival from an initial state to a final state of a stochastic game representing system information, the stochastic game into a flow analysis graph, a path selecting unit configured to select a path having a maximum width among paths from each state node to a final state node in the converted flow analysis graph, a width of each of the paths being defined as a minimum weight of edges forming the path, and a convergence determining unit configured to determine convergence of the upper bound and a lower bound of the probability of arrival of the stochastic game based on information about the selected path.

Abstract: An information processing device includes a memory, and a processor configured to execute a process. The process includes acquiring a first controller model, the first controller model including information indicating a control condition based on a measurement value, and information indicating a control action defining an action of a control target when the control condition is satisfied; and outputting a second controller model, the second controller model being capable of tolerating a measurement value including a measurement error, wherein the second controller model includes information indicating a control condition based on the information indicating the control condition included in the first controller model, and information indicating a control action based on the information indicating the control condition and the information indicating the control action included in the first controller model.

Abstract: The present disclosure aims to provide a technique for monitoring the behavior of a control system accurately. One aspect of the present invention relates to a monitoring device having: an acquiring part configured to acquire observed values of a variable that is sampled with respect to a behavior of a control system while the control system is running; and a determining part configured to determine a range of possible observed values that the variable possibly reaches upon a temporal change thereof, based on the acquired observed values, and determine whether a variation range of the acquired observed values satisfies a specification, based on an overlap between the range of the possible observed values and a range not satisfying the specification.

Abstract: A sampling device includes a memory and a processor configured to execute selecting a control flow corresponding to each branch in a probabilistic program; optimizing the program by applying predetermined transformation rules to the program of the selected control flow by back propagation; and generating samples according to the optimized program.

Abstract: A system optimal control technique with accuracy guarantee that enables high-speed calculations is provided. One aspect of the present invention is related to a system optimal control device including a graph converting unit configured to convert, based on an upper bound of an probability of arrival from an initial state to a final state of a stochastic game representing system information, the stochastic game into a flow analysis graph, a path selecting unit configured to select a path having a maximum width among paths from each state node to a final state node in the converted flow analysis graph, a width of each of the paths being defined as a minimum weight of edges forming the path, and a convergence determining unit configured to determine convergence of the upper bound and a lower bound of the probability of arrival of the stochastic game based on information about the selected path.

Abstract: An information processing apparatus according to an aspect of the present invention includes an information processing circuit configured to generate a finite state machine based on a predetermined matching condition with respect to sequence data of an event that is input to the information processing apparatus; to process the sequence data so as to substantially remove data that does not match the matching condition from the sequence data; and to output the processed sequence data.

Abstract: A model verification device includes a memory, and a processor coupled to the memory and configured to extract a sample from a search space, transform the extracted sample into an input on a constrained search space to which a constraint with respect to a model is applied, according to a predetermined transform rule; and determine whether an output of the model for the input satisfies a specification, and determine the input as a counterexample when the output does not satisfy the specification.

Abstract: An information processing apparatus according to an aspect of the present invention includes an information processing circuit configured to generate a finite state machine based on a predetermined matching condition with respect to sequence data of an event that is input to the information processing apparatus; to process the sequence data so as to substantially remove data that does not match the matching condition from the sequence data; and to output the processed sequence data.