on the relationship between codiagnosability and ...xiangyin.sjtu.edu.cn/paper/15accdiag.pdfbased...

6
On the Relationship between Codiagnosability and Coobservability under Dynamic Observations Xiang Yin and St´ ephane Lafortune Abstract—We investigate the relationship between the prob- lem of decentralized fault diagnosis and the problem of de- centralized control of discrete event systems under dynamic observations. The key system-theoretic properties that arise in these problems are those of codiagnosability and coobserv- ability, respectively. It was shown by Wang et al. in [1] that coobservability is transformable to codiagnosability; however, the transformation for the other direction has remained an open problem. In this paper, we consider a general language- based dynamic observations setting and show how the notion of K-codiagnosability can be transformed to coobservability. Moreover, we show that, when the observation map is static, the standard notion of centralized diagnosability is transformable to observability. Our results thereby complement those in [1] and provide a better understanding of the relationship between the notions of codiagnosability and coobservability. In particular, our new results allow the leveraging of the large existing literature on decentralized control synthesis to solve problems of decentralized fault diagnosis. I. I NTRODUCTION Control and diagnosis are two important research areas in the study of Discrete Event Systems (DES). In complex auto- mated systems, one is interested in designing a supervisor to restrict the system’s behavior within a desired specification as well as designing a diagnoser in order to detect and isolate potential system’s faults. Due to limited sensing capabilities, both problems involve dealing with partial observation of the system’s behavior. Moreover, many technological systems have decentralized information structures, thereby necessitat- ing the development of decentralized control and diagnosis architectures, where a set of supervisors or diagnosers work as a team to ensure the desired specifications. The property of observability arose in the study of the control of partially observed DES [2], [3]. It is well known that observability together with controllability provide the necessary and sufficient conditions for the existence of a supervisor that achieves a given specification. In [4], this notion was extended to coobservability for decentralized control problems. Problems of centralized fault diagnosis of DES were initially studied in [5], [6] where the notion of diagnosability was introduced and characterized. Several future investigations ensued; see, e.g., the recent survey paper [7] for extensive bibliographies. Problems of decentralized fault diagnosis were considered in [8], where several commu- nication protocols were developed. In particular, in Protocol This work was partially supported by NSF grants CCF-1138860 (Expedi- tions in Computing project ExCAPE: Expeditions in Computer Augmented Program Engineering), CNS-1446298, and CNS-1421122. Xiang Yin and St´ ephane Lafortune are with the Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI 48109, USA. {xiangyin,stephane}@umich.edu. 3 of [8], all the local agents work independently, i.e., there is no communication among them. This protocol was further investigated in several subsequent works and the associated condition of codiagnosability was characterized and studied; see, e.g., [9]–[11]. All of the above-mentioned works are concerned with the case of static observations, i.e., the set of observable events is fixed a priori. In many applications, communication among different agents (see, e.g., [12], [13]) as well as dynamic sensor activation (see, e.g., [14]–[16]) may lead to the case of dynamic observations. In the context of dynamic observations, the observability properties of an event are not fixed but may vary along each system trajectory. In [17], the authors studied the property of coobservability under dynamic observations. The fault diagnosis problem under dynamic observations has also been investigated in several works, such as [14], [15], [18] for the centralized case and [1] for the decentralized case. There is a wide literature on the two properties of coob- servability and codiagnosability, due to their importance in solving decentralized control and diagnosis problems, respectively. However, almost all of the existing literature deals with problems of control and problems of diagnosis separately. An exception of this is the work in [1], where it was shown, for the first time, how to map coobservability to codiagnosability, in the context of a language-based model for dynamic observations. This transformation from coob- servability to codiagnosability makes it possible to leverage the large literature on methodologies to solve (decentralized) diagnosis problems to solve (decentralized) control prob- lems. However, to the best of our knowledge, the reverse transformation, from codiagnosability to coobservability, has remained an open problem, as mentioned in the recent survey [19]. The contribution of this paper is to show, under a general language-based dynamic observations setting, how to transform K-codiagnosability to coobservability. K- codiagnosability is a strong version of codiagnosability where it is required that any failure be diagnosed with- in K steps after its occurrence; in codiagnosability, the detection delay has to be finite but no K is specified. The transformation that we present exploits the fact that both the problem of K-codiagnosability and the problem of coobservability can be reduced to a state disambiguation problem. Moreover, when the observation map is event- based, i.e., the observability properties of events are static, we show that the standard notion of diagnosability from [6] can be transformed to the standard notion of observability 2015 American Control Conference Palmer House Hilton July 1-3, 2015. Chicago, IL, USA 978-1-4799-8686-6/$31.00 ©2015 AACC 390

Upload: others

Post on 21-Jan-2021

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: On the Relationship between Codiagnosability and ...xiangyin.sjtu.edu.cn/Paper/15ACCdiag.pdfbased dynamic observations setting and show how the notion of K -codiagnosability can be

On the Relationship between Codiagnosability and Coobservabilityunder Dynamic Observations

Xiang Yin and Stephane Lafortune

Abstract— We investigate the relationship between the prob-lem of decentralized fault diagnosis and the problem of de-centralized control of discrete event systems under dynamicobservations. The key system-theoretic properties that arisein these problems are those of codiagnosability and coobserv-ability, respectively. It was shown by Wang et al. in [1] thatcoobservability is transformable to codiagnosability; however,the transformation for the other direction has remained anopen problem. In this paper, we consider a general language-based dynamic observations setting and show how the notionof K-codiagnosability can be transformed to coobservability.Moreover, we show that, when the observation map is static, thestandard notion of centralized diagnosability is transformableto observability. Our results thereby complement those in[1] and provide a better understanding of the relationshipbetween the notions of codiagnosability and coobservability. Inparticular, our new results allow the leveraging of the largeexisting literature on decentralized control synthesis to solveproblems of decentralized fault diagnosis.

I. INTRODUCTION

Control and diagnosis are two important research areas inthe study of Discrete Event Systems (DES). In complex auto-mated systems, one is interested in designing a supervisor torestrict the system’s behavior within a desired specificationas well as designing a diagnoser in order to detect and isolatepotential system’s faults. Due to limited sensing capabilities,both problems involve dealing with partial observation of thesystem’s behavior. Moreover, many technological systemshave decentralized information structures, thereby necessitat-ing the development of decentralized control and diagnosisarchitectures, where a set of supervisors or diagnosers workas a team to ensure the desired specifications.

The property of observability arose in the study of thecontrol of partially observed DES [2], [3]. It is well knownthat observability together with controllability provide thenecessary and sufficient conditions for the existence of asupervisor that achieves a given specification. In [4], thisnotion was extended to coobservability for decentralizedcontrol problems. Problems of centralized fault diagnosisof DES were initially studied in [5], [6] where the notionof diagnosability was introduced and characterized. Severalfuture investigations ensued; see, e.g., the recent survey paper[7] for extensive bibliographies. Problems of decentralizedfault diagnosis were considered in [8], where several commu-nication protocols were developed. In particular, in Protocol

This work was partially supported by NSF grants CCF-1138860 (Expedi-tions in Computing project ExCAPE: Expeditions in Computer AugmentedProgram Engineering), CNS-1446298, and CNS-1421122.

Xiang Yin and Stephane Lafortune are with the Department of ElectricalEngineering and Computer Science, University of Michigan, Ann Arbor,MI 48109, USA. {xiangyin,stephane}@umich.edu.

3 of [8], all the local agents work independently, i.e., thereis no communication among them. This protocol was furtherinvestigated in several subsequent works and the associatedcondition of codiagnosability was characterized and studied;see, e.g., [9]–[11].

All of the above-mentioned works are concerned withthe case of static observations, i.e., the set of observableevents is fixed a priori. In many applications, communicationamong different agents (see, e.g., [12], [13]) as well asdynamic sensor activation (see, e.g., [14]–[16]) may lead tothe case of dynamic observations. In the context of dynamicobservations, the observability properties of an event are notfixed but may vary along each system trajectory. In [17],the authors studied the property of coobservability underdynamic observations. The fault diagnosis problem underdynamic observations has also been investigated in severalworks, such as [14], [15], [18] for the centralized case and[1] for the decentralized case.

There is a wide literature on the two properties of coob-servability and codiagnosability, due to their importancein solving decentralized control and diagnosis problems,respectively. However, almost all of the existing literaturedeals with problems of control and problems of diagnosisseparately. An exception of this is the work in [1], where itwas shown, for the first time, how to map coobservability tocodiagnosability, in the context of a language-based modelfor dynamic observations. This transformation from coob-servability to codiagnosability makes it possible to leveragethe large literature on methodologies to solve (decentralized)diagnosis problems to solve (decentralized) control prob-lems. However, to the best of our knowledge, the reversetransformation, from codiagnosability to coobservability, hasremained an open problem, as mentioned in the recent survey[19].

The contribution of this paper is to show, under ageneral language-based dynamic observations setting, howto transform K-codiagnosability to coobservability. K-codiagnosability is a strong version of codiagnosabilitywhere it is required that any failure be diagnosed with-in K steps after its occurrence; in codiagnosability, thedetection delay has to be finite but no K is specified.The transformation that we present exploits the fact thatboth the problem of K-codiagnosability and the problemof coobservability can be reduced to a state disambiguationproblem. Moreover, when the observation map is event-based, i.e., the observability properties of events are static,we show that the standard notion of diagnosability from [6]can be transformed to the standard notion of observability

2015 American Control ConferencePalmer House HiltonJuly 1-3, 2015. Chicago, IL, USA

978-1-4799-8686-6/$31.00 ©2015 AACC 390

Page 2: On the Relationship between Codiagnosability and ...xiangyin.sjtu.edu.cn/Paper/15ACCdiag.pdfbased dynamic observations setting and show how the notion of K -codiagnosability can be

from [2]. Our results thereby complement those in [1] andallow leveraging the large existing literature on problems ofdecentralized control to solve problems of decentralized faultdiagnosis.

The remainder of this paper is organized as follows.Section II presents necessary preliminaries and in particular itreviews the notions of codiagnosability and coobservability.In Section III, the transformation from K-codiagnosabilityto coobservability under language-based observations is p-resented. The case of event-based observations is then con-sidered in Section IV. We illustrate the application of thetransformation algorithm of Section III to sensor activationproblems in Section IV. Finally, we conclude the paper inSection VI. Due to space constraints, all proofs have beenomitted and they are available in [20].

II. PRELIMINARIES

A. System ModelWe assume basic knowledge of DES and common nota-

tions (see, e.g., [21]). A DES is modeled as a deterministicfinite-state automaton

G = (XG, EG, δG, xG0 ) (1)

where XG is the finite set of states, EG is the finite setof events, δG : XG × EG → XG is the partial transitionfunction where δG(x, e) = y means that there is a transitionlabelled by event e from state x to state y, and x0 is the initialstate. δG is extended to XG × EG∗ in the usual way. Thebehavior generated by G is described by L(G) = {s ∈ EG∗ :δG(x0, s)!}, where ! means is defined. The prefix-closure ofa language L is L = {s ∈ EG∗ : (∃t ∈ EG∗)[st ∈ L]}. Weuse notation | · | to denote the length of a string.

In both control and diagnosis problems, there are somelocal agents monitoring the plant based on their own obser-vations. Here, we assume that there are n local agents and wedenote by I = {1, . . . , n} the index set of the local agents.In most of the existing literature, the observation propertiesof events are specified by natural projection operations, i.e.,for each agent i ∈ I, the set of observable events Eo,i ⊆ EG

is fixed a priori. We denote by Eo = ∪i∈IEo,i the total set ofobservable events. However, in many situations, the observ-able events may not be fixed. For instance, communicationbetween agents may lead to different observability propertiesfor the same event in different transitions. Also, under energy,bandwidth, or security constraints, a local agent may chose toenable/disable sensors dynamically based on its observationhistory. This also leads to dynamic observations. Thus, ina more general setting, we specify the observations of eachagent i ∈ I by the mapping ωi : L(G) → 2Eo,i . Givenan observation mapping, ωi, i ∈ I, we define the projectionPωi : L(G)→ E∗o,i recursively as follows:

Pωi(ε) = ε, Pωi

(sσ) =

{Pωi

(s)σ if σ ∈ ωi(s)Pωi

(s) if σ 6∈ ωi(s)(2)

Clearly, if the set of observable events is fixed in the sensethat ∀s ∈ L(G), ωi(s) = Eo, then the projection Pωi reducesto the standard natural projection.

B. Control and Diagnosis under Dynamic Observations

In fault diagnosis problems, EF ⊆ Euo := EG \Eo is theset of fault events whose occurrences must be detected bythe diagnoser. In general, the set of fault events is partitionedinto m disjoint sets, or fault types: EF = EF1

∪ . . . ∪EFm;

we denote by ΠF this partition and by F = {1, . . . ,m} theindex set of the fault types. We define Ψ(EFk

) = {sf ∈L(G) : f ∈ EFk

} to be the set of strings that end with afault event of type Fk. We write EFk

∈ s, if s∩Ψ(EFk) 6= ∅.

We say a language L is live if, for all s ∈ L, there existsan event σ ∈ E, such that sσ ∈ L. Hereafter, we assumethat L(G) is live when [K-][co]diagnosability is considered.We denoted by L/s the post-language of L after s, i.e.,L/s = {t ∈ EG∗ : st ∈ L}. In decentralized problems,in order to identify the fault event after its occurrence, itis required that the type of each such fault occurrence beunambiguously detected by one diagnoser within a finitenumber of steps (event occurrences) after the occurrence.We say that a language is K-codiagnosable if this diagnosisdelay is uniformly bounded by a given number K. We saythat a language is codiagnosable if there exists an integerK such that it is K-codiagnosable. The formal definition of[K-]codiagnosability under dynamic observations is recalledfrom [1].

Definition 1: (Codiagnosability). A live language L(G) issaid to be K-codiagnosable w.r.t. ωi, i ∈ I and ΠF on EF

if

(∀k ∈ F)(∀s ∈ Ψ(EFk))(∀t ∈ L(G)/s)[|t| ≥ K ⇒ CD]

(3)where the codiagnosability condition CD is

(∃i ∈ I)(∀w ∈ L(G))[Pωi(w) = Pωi

(st)⇒ EFk∈ w].

(4)We say that L(G) is codiagnosable if there exists an integerK ∈ N such that it is K-codiagnosable.

Remark 2.1: The above definition of codiagnosability isequivalent to the one in [8]–[10] in the case of regularlanguages, as assumed in this paper. Specifically, the def-inition in [8]–[10] states that for all faulty strings, thereis a finite detection delay. The above definition reversesthe two quantifiers as it states that there is a detectiondelay that works for all faulty strings. However, it wasshown in [22] that in the case of regular languages, the twodefinitions are equivalent in the centralized case for staticobservation mappings. The result in [22] can be extendedto the decentralized case and to language-based observationmappings, although the proof is omitted here.

In decentralized supervisor control problems, each localagent not only monitors the plant, but it can also dynamicallydisable/enable events to actively control the plant based on itsobservations. Formally, for each agent i ∈ I, we denote byEc,i ⊆ E its set of controllable events. A local supervisoris a mapping Si : E∗o,i → Γi, where Γi := {γ ∈ 2E :E \Ec,i ⊆ γ} and ∧i∈ISi/G denotes the controlled systemunder the conjunctive fusion rule for enabled events. Thelegal behavior to be achieved under control is specified by

391

Page 3: On the Relationship between Codiagnosability and ...xiangyin.sjtu.edu.cn/Paper/15ACCdiag.pdfbased dynamic observations setting and show how the notion of K -codiagnosability can be

a prefix-closed (regular) language L(H) ⊆ L(G), whereH = (XH , EH , δH , xH0 ) is the automaton that generates thespecification language. It is well known that coobservabilitytogether with controllability provide the necessary and suf-ficient conditions for the existence of a set of decentralizedsupervisors that together achieve a given language. Formally,we recall the definition of coobservability under dynamicobservations from [1], [17].

Definition 2: (Coobservability). A language L(H) ⊆L(G) is said to be coobservable w.r.t. L(G), ωi and Ec,i, i ∈I if for all s ∈ L(H) and for all σ ∈ Ec := ∪i∈IEc,i,

(sσ∈L(G)\L(H))⇒(∃i∈Ic(σ))[P−1ωi(Pωi(s))σ∩L(H)=∅]

(5)where, Ic(σ) := {i ∈ I : σ ∈ Ec,i}.

Note that in both Definitions 1 and 2, codiagnosabilityand coobsevability are defined in the most general manner,i.e., we consider the case where there are multiple agentsunder language-based dynamic observations. For the sake ofbrevity, we also use the following terminologies hereafter.We refer to [K-]codiagnosability as [K-]diagnosability inthe centralized case, i.e., when |I| = 1; similarly forobservability. Moreover, we say the system is static [K-][co]diagnosable or [K-][co]observable if the observationmappings are specified by natural projections.

III. FROM K-CODIAGNOSABILITY TO COOBSERVABILITY

In this section, we present an algorithm to transform theproblem of K-codiagnosability to the problem of coobserv-ability under general language-based dynamic observations.

The definition of codiagnosability requires that everyoccurrence of the fault events be diagnosed within a finitedelay, without specifying a bound for that delay. In contrast,K-codiagnosability explicitly specifies a uniform detectiondelay bound for all fault event occurrences. Hence, K-codiagnosability is a stronger property than codiagnosabilityin the sense that K-codiagnosability implies codiagnosabil-ity, but the reverse may not hold for some values of K.

First, we show that the notion of K-codiagnosability canbe transformed to coobservability when there is only one typeof fault events. We shall need the notation A v B to denotethat automaton A is a sub-automaton of automaton B, asdefined in [21] (p. 86). Let H = (XH , EH , δH , xH0 ) be theautomaton to be diagnosed with fault events and EFk

, k ∈ Fbe the set of fault events under consideration (i.e., only type kfaults are to be diagnosed). We construct two automata Hk =

(XHk , EHk , δHk , xHk0 ) and Gk = (XGk , EGk , δGk , xGk

0 )with Hk v Gk, as follows.

Algorithm KCOD-COOB-IInput: H = (XH , EH , δH , xH0 ), EFk

and K.Output: Hk = (XHk , EHk , δHk , xHk

0 )

and Gk = (XGk , EGk , δGk , xGk0 ).

Step 1: Build a new automaton Hk =

(XHk , EHk , δHk , xHk0 ), where

XHk⊆XH ×{−1, 0, 1, . . . ,K} is the set of states;EHk = EH is the set of events;

0

1

3

𝑒 𝑒

𝑓

𝑎

2

4

5

𝑜 𝑏

𝑎

𝑒 𝑒

𝑓

𝑎

𝑜 𝑏

𝑎 0,-1

1,-1

2,-1

3,0

4,1

5,1 us s 𝑐1 𝑐1

𝑐1

𝑐1

𝑐1

𝑮 𝑯

𝑯

(a) H

0

1

3

𝑒 𝑒

𝑓

𝑎

2

4

5

𝑜 𝑏

𝑎

𝑒 𝑒

𝑓

𝑎

𝑜 𝑏

𝑎 0,-1

1,-1

2,-1

3,0

4,1

5,1 USF SF 𝑐1 𝑐1

𝑐1

𝑐1

𝑐1

𝑮 𝟏 𝑯 𝟏

𝑯 𝟏

(b) K = 1

Fig. 1. ω(s) = {o, e}, ∀s ∈ L(H)

δHk : XHk × EHk → XHk is the partial transitionfunction where for any x = (x, n) ∈ XHk , δHk isdefined by

δHk(x, σ) =

(δH(x, σ),−1),

if(n = −1 andσ ∈ E \ EFk

)(δH(x, σ), n+ 1),

if(

0 ≤ n < K orn = −1 ∧ σ ∈ EFk

)(δH(x, σ),K), if n = K

(6)xHk0 = (xH0 ,−1) is the initial state.

Step 2: Set Hk ← Hk. Add state XHk ← XHk ∪ {SF}and add event EHk ← EHk ∪ {ck}.

Step 3: For all x = (x, n) ∈ XHk in Hk, if n = −1, thenadd new transition δHk(x, ck) = SF .

Step 4: Set Gk ← Hk. Add state XGk ← XGk ∪ {USF}.Step 5: For all x = (x, n) ∈ XHk in Gk, if n = K, then

add new transition δGk(x, ck) = USF .Step 6: For all i ∈ I, the observation mapping ωi,Gk

forGk is specified as follows. For all s ∈ L(Hk),ωi,Gk

(s) ← ωi(s). For all s = tck ∈ L(Gk) \L(Hk), ωi,Gk

(s)← ωi(t).Step 7: For all i ∈ I, Ec,i ← {ck}.

Example 3.1: Consider the centralized static diagnosisproblem instance shown in Figure 1(a). H is the automatonto be diagnosed with fault events, where EF1

= {f} isthe set of fault events and Eo = {o, e} is the set ofobservable events. The observation mapping ω is given by∀s ∈ L(G), ω(s) = {o, e}. When the desired diagnosis delayis set to K = 1, by applying Algorithm KCOD-COOB-I,the corresponding G1 and H1 can be constructed, as shownin Figure 1(b). The observation mapping is also given by∀s ∈ L(G1), ωG1

(s) = {o, e}. It is clear that L(H1) is notobservable w.r.t. L(G1), ωG1

and {ck}, since for strings faand a with P (fa) = P (a), we have fac1 ∈ L(G1) \L(H1)but ac1 ∈ L(H1). Also, the original system H is not1-diagnosable. However, it can be verified that H is 2-diagnosable. The relationship between H , Hk and Gk willbe formally described in Theorem 1 below.

The following theorem establishes that the above construc-tion procedure transforms the problem of K-codiagnosability

392

Page 4: On the Relationship between Codiagnosability and ...xiangyin.sjtu.edu.cn/Paper/15ACCdiag.pdfbased dynamic observations setting and show how the notion of K -codiagnosability can be

to the problem of coobservability for each type of faultevents.

Theorem 1: Language L(H) is K-coodiagnosable w.r.t.ωi, i ∈ I and fault event set EFk

, if and only if, L(Hk) iscoobservable w.r.t. L(Gk), ωi,Gk

and Ec,i, i ∈ I.The intuition behind the construction procedure in Al-

gorithm KCOD-COOB-I is as follows. The idea of thetransformation is based on the fact that both the problemof K-codiagnosability and the problem of coobservabilitycan be reduced to the problem of state disambiguation; see,e.g., [23]. Clearly, we see that Hk is a finite unfolding of Hand they are language equivalent, i.e., L(H) = L(Hk). Letus define the set of conflicting states pairs

Tconf := {(u, v) ∈ XHk×XHk : [u]n = −1 and [v]n = K}

where [u]n denotes the integer component of u. If L(Hk)is K-codiagnosable, then for any state pair in the set Tconf ,at least one agent should be able to distinguish the statesin it. In the context of supervisory control, by construction,to achieve specification L(Hk) for plant L(Gk), we alwaysneed to enable ck at states labeled with integer −1 anddisable ck at states labeled with integer K. Thus we also needto distinguish the states of any state pair in Tconf ; otherwise,we will not be able to know whether or not we need to disableck. The correctness proof of the transformation algorithmfollows immediately from these results.

The next result gives the worst-case complexity of Algo-rithm KCOD-COOB-I.

Theorem 2: Let H be the automaton to be diagnosedwith fault events. Then the worst-case time complexity ofAlgorithm KCOD-COOB-I is O(K|XH ||EH |).

So far, we have shown that for each individual type offault, the problem of K-codiagnosability can be transformedto the problem of coobservability. However, our objective isto show that the problem of K-codiagnosability with multiplefault types is transformable to the problem of coobservability.For this purpose, we need to transform the problem of K-codiagnosability to the problem of coobservability in a singleautomaton. This is achieved by Algorithm KCOD-COOB-II presented next. The notation A ‖ B denotes the usualparallel composition operation of automata A and B (see,e.g., [21]).

Algorithm KCOD-COOB-IIInput: H = (XH , EH , δH , xH0 ), EF ,ΠF and K.Output: H = (XH , EH , δH , xH0 )

and G = (XG, EG, δG, xG0 ).Step 1: For each type of fault k ∈ F , build an automaton

Hk, as described in Step 1 of Algorithm KCOD-COOB-I.

Step 2: Set H ← H1 ‖ H2 ‖ · · · ‖ H|F|.Step 3: Set H ← H . Add state XH ← XH ∪ {SF} and

add event EH ← EH ∪ {ck : k ∈ F}.Step 4: For all x = (x1, . . . , x|F|) ∈ XH in H , for all

k ∈ F , if [xk]n = −1, then add new transitionδH(x, ck) = SF .

Step 5: Set G← H . Add state XG ← XG ∪ {USF}.Step 6: For all x = (x1, . . . , x|F|) ∈ XH in G, for all

k ∈ F , if [xk]n = K, then add new transitionδG(x, ck) = USF .

Step 7: For all i ∈ I, the observation mapping ωi,G for G isspecified as follows. For all s ∈ L(H), ωi,G(s) ←ωi(s). For all tc ∈ L(G) \ L(H), where c ∈ {ck :k ∈ F}, ωi,G(s)← ωi(t).

Step 8: For all i ∈ I, Ec,i ← {ck : k ∈ F}.

Remark 3.1: Algorithm KCOD-COOB-II essentiallymerges all automata Hk, k ∈ F , constructed by AlgorithmKCOD-COOB-I into a single automaton H . Then singlecopies of the new states s and us are added. Note that,in Step 2 of Algorithm KCOD-COOB-II, the parallelcomposition between Hk, k ∈ F , could have resulted in anautomaton with

∏k∈F |XHk | number of states in general.

However, since for any i ∈ F , Hi is a finite unfolding of H ,then for any state ((x1, n1), (x2, n2), . . . , (xm, nm)) ∈ XH ,we have that x1 = x2 = · · · = xm. The number of statesin the composed system is only exponential in K, i.e.,|XH | ≤ Km|XH |.

The following results show the properties and the correct-ness of the transformation in Algorithm KCOD-COOB.

Lemma 3.1: The following four statements are equivalent.S1 L(H) is K-coodiagnosable w.r.t. ωi, i ∈ I and the fault

event set EF with partition ΠF .S2 For any k ∈ F , L(H) is K-coodiagnosable w.r.t. ωi, i ∈I and the fault event set EFk

.S3 For any k ∈ F , L(Hk) is coobservable w.r.t. L(Gk),

ωi,Gkand Ec,i = {ck},∀i ∈ I.

S4 L(H) is coobservable w.r.t. L(G), ωi,G and Ec,i = {ck :k ∈ F}, i ∈ I.

Follows from Lemma 3.1, we have the following theorems.Theorem 3: Language L(H) is K-coodiagnosable w.r.t.

ωi, i ∈ I and ΠF on EF , if and only if, L(H) is coobserv-able w.r.t. L(G), ωi,G and Ec,i, i ∈ I.

Theorem 4: Let H the automaton to be diagnosed withfault events. Then the worst-case time complexity of Algo-rithm KCOD-COOB-II is O(Km|XH ||EH |).

Example 3.2: Let the automaton H shown in Figure 2(a)be the system to be diagnosed with fault events, whereEF1 = {f1} and EF2 = {f2} are two types of faultevents. When K = 4, by applying Algorithm KCOD-COOB-I and Algorithm KCOD-COOB-II, the correspondingH1, G1, H2, G2, H and G that are obtained are shown inFigures 2(b)-2(d).

Suppose that the observation mapping for H is static, i.e.,the sets of observable for agents 1 and 2 are constant andgiven by Eo,1 = {a, o} and Eo,2 = {b, o}, respectively. Thetransformed observation mappings for G are also specifiedby natural projections P1 : L(G)→ E∗o,1 and P2 : L(G)→E∗o,2. Consider strings s = of2aboo ∈ L(G) and controllableevent c2 ∈ EG such that sc2 ∈ L(G) \ L(H). For agent 1,there exists string s1 = oaoo such that P1(s) = P1(s1)and s1c2 ∈ L(H); and for agent two, there exists string

393

Page 5: On the Relationship between Codiagnosability and ...xiangyin.sjtu.edu.cn/Paper/15ACCdiag.pdfbased dynamic observations setting and show how the notion of K -codiagnosability can be

1

2

3 𝑓1

𝑎, 𝑏 4

6

𝑜, 𝑏 𝑎

5

𝑏

7

8

𝑎

9

𝑓2

0

𝑜 𝑜

𝑜

𝑏

𝑎

𝑓1

𝑎, 𝑏

𝑜, 𝑏 𝑎

𝑏

𝑎

𝑓2

𝑜 𝑜

𝑏

𝑎

0,-1

1,-1

2,-1

7,-1

9,-1

8,-1

4,1

𝑜

3,0

6,3

5,2

𝑎 6,4 s us

𝑯 𝟏 𝑮 𝟏

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

(a) H

1

2

3 𝑓1

𝑎, 𝑏 4

6

𝑜, 𝑏 𝑎

5

𝑏

7

8

𝑎

9

𝑓2

0

𝑜 𝑜

𝑜

𝑏

𝑎

𝑓1

𝑎, 𝑏

𝑜, 𝑏 𝑎

𝑏

𝑎

𝑓2

𝑜 𝑜

𝑏

𝑎

0,-1

1,-1

2,-1

7,-1

9,-1

8,-1

4,1

𝑜

3,0

6,3

5,2

𝑎 6,4 SF USF

𝑯 𝟏 𝑮 𝟏

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

(b) H1, G1

𝑓1

𝑎, 𝑏

𝑜, 𝑏 𝑎

𝑏

𝑎

𝑓2

𝑜 𝑜

𝑏

0,-1

1,-1

2,-1

7,0

9,2

8,1

4,-1

3,-1

6,-1

5,-1

𝑎 SF

USF

𝑯 𝟐

𝑮 𝟐

𝑐2

9,4

9,3

𝑐2

𝑐2

𝑐2

𝑐2

𝑐2

𝑐2

𝑓1

𝑎, 𝑏

𝑜, 𝑏 𝑎

𝑏

𝑎

𝑓2

𝑜 𝑜

𝑏

0,-1

0,-1

1,-1

1,-1

2,-1

2,-1

7,-1

7,0

9,-1

9,2

8,-1

8,1

4,1

4,-1

3,0

3,-1

6,3

6,-1

5,2

5,-1

𝑎 SF

USF

𝑯

𝑮 9,-1

9,4

9,-1

9,3

𝑐1, 𝑐2

𝑐1

6,4

6,-1

𝑐2

𝑐1, 𝑐2

𝑐1, 𝑐2

𝑎

𝑐2

𝑐2

𝑐2

𝑐2

𝑐2

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

𝑜

𝑜

𝑜 𝑜

𝑜

𝑜

(c) H2, G2

𝑓1

𝑎, 𝑏

𝑜, 𝑏 𝑎

𝑏

𝑎

𝑓2

𝑜 𝑜

𝑏

0,-1

1,-1

2,-1

7,0

9,2

8,1

4,-1

3,-1

6,-1

5,-1

𝑎 SF

USF

𝑯 𝟐

𝑮 𝟐

𝑐2

9,4

9,3

𝑐2

𝑐2

𝑐2

𝑐2

𝑐2

𝑐2

𝑓1

𝑎, 𝑏

𝑜, 𝑏 𝑎

𝑏

𝑎

𝑓2

𝑜 𝑜

𝑏

0,-1

0,-1

1,-1

1,-1

2,-1

2,-1

7,-1

7,0

9,-1

9,2

8,-1

8,1

4,1

4,-1

3,0

3,-1

6,3

6,-1

5,2

5,-1

𝑎 SF

USF

𝑯

𝑮 9,-1

9,4

9,-1

9,3

𝑐1, 𝑐2

𝑐1

6,4

6,-1

𝑐2

𝑐1, 𝑐2

𝑐1, 𝑐2

𝑎

𝑐2

𝑐2

𝑐2

𝑐2

𝑐2

𝑐1

𝑐1

𝑐1

𝑐1

𝑐1

𝑜

𝑜

𝑜 𝑜

𝑜

𝑜

(d) H, G

Fig. 2. K = 4 and Eo,1 = {a, o}, Eo,2 = {b, o}

s2 = oboo such that P2(s) = P2(s1) and s2c2 ∈ L(H).By Definition 2, we conclude that L(H) is not coobservablew.r.t. L(G), P1, P2 and Ec,1 = Ec,2 = {c1, c2}. Consequent-ly, the original system H is not 4-codiagnosable.

IV. CASE OF EVENT-BASED OBSERVATION

In this section, we show that in the case of event-basedobservations, i.e., static observability properties of events, thetransformation results in Section III can be extended fromthe notion of K-[co]diagnosability to the stronger notion of[co]diagnosability.

Recall that, in the transformation algorithm in Section III,the desired diagnosis delay K is specified a priori and theobservation is language-based. Let us eliminate that extralevel of generality and assume that, for each agent i ∈ I,the set of observable events Eo,i ⊆ E is fixed a priori. Inthis case, it is possible to relax the pre-information on Kand extend the transformation algorithm of Section III fromK-diagnosability to diagnosability. We now explain how toproceed.

In [24], the authors show that for the centralized staticdiagnosis problem, if H is diagnosable, then any faultoccurrence will be detected within |XH |2 transitions afterthe fault event occurs. Such an upper bound of the diagnosis

0 1 2 𝑐 𝑐 𝑓 𝑎

Fig. 3. Automaton H for Example 4.1

delay is derived from the size of verifier, a special type ofautomaton used for verifying diagnosibility. Therefore, wecan simply use the upper bound |XH |2 to replace the integerK in Theorem 4 and we obtain the following result.

Proposition 4.1: When the observations are event-based,diagnosability can be transformed to observability inO(|XH |2m+1|EH |).

In [9] and [10], the verifier technique was extended tothe decentralized case; the decentralized verifier has sizeproportional to |X|n+1. By using the same argument asabove, we have the following result.

Proposition 4.2: When the observations are event-based,co-diagnosability can be transformed to coobservability inO(|XH |mn+m+1|EH |2).

The question that arises is the following: In the dynamicdecentralized diagnosis problem, can we also find such anupper bound to replace K, where this upper bound wouldwork for any language-based mapping? In general, such anupper bound does not exist, since the observation policyis language-based and K could be arbitrary large. Thisphenomenon is illustrated by the following example.

Example 4.1: Consider the automaton H in Figure 3,where f is the unique fault event. Consider the informationmapping ω : L(G)→ 2Eo defined by:

ω(s) =

{{c}, if s ∈ {f(ac)n, cn}{a, c}, if s ∈ L(G) \ {f(ac)n, cn}

(7)

where n is an arbitrary non-negative integer. Since we areunable to distinguish strings cm and f(ac)m until the firsttime we observe event a, which does not occur until m =n+ 1, we see that under information mapping ω, the systemis (2n+ 3)-diagnosable but not (2n+ 2)-diagnosable. Sincen can be arbitrary large, there is no general upper bound forthe diagnosis delay under language-based observations.

V. APPLICATION TO OPTIMIZATION OF SENSORACTIVATION

In this section, we show how the transformation algorithmfrom Section III can leverage the research on observabilityand coobservability to solve problems related to diagnosabil-ity and codiagnosability.

In sensor activation problems, the sensors can be turnedon/off on-line by the agents based on their observationhistories. In this scenario, one is interested in synthesizinga sensor activation policy that achieves certain observationproperties; see, e.g., [25], [26]. Roughly speaking, sensoractivation policies are a particular class of information map-pings satisfying the property that the sensor activations forany two indistinguishable strings must be the same. Thisproperty is called the feasibility condition in [25], [26]. It isformally defined as follows.

394

Page 6: On the Relationship between Codiagnosability and ...xiangyin.sjtu.edu.cn/Paper/15ACCdiag.pdfbased dynamic observations setting and show how the notion of K -codiagnosability can be

Definition 3: Given a system G, a set of observationmappings ωi : L(G)→ 2Eo,i is said to be a feasible sensoractivation policy if

(∀s, t ∈ L(G))[Pωi(s) = Pωi

(t)⇒ ωi(s) = ωi(t)]

The following theorem reveals that feasibility is preservedunder the transformation algorithm of Section III. In otherwords, any sensor activation policy synthesized for the trans-formed system can be applied back to the original system.

Theorem 5: Let H be the original system and G be thetransformed system. Then, ωi is a feasible sensor activationpolicy for H if and only if ωi,G is a feasible sensor activationpolicy for G.

Unlike the direct approach investigated in [14], [15] forK-diagnosability, the above theorem provides an alternativeapproach for the synthesis of optimal sensor activationpolicies for K-codiagnosability. Suppose H is the systemto be diagnosed with fault events; H and G are the trans-formed systems. We can then apply the algorithm in [25]to obtain the optimal sensor activation policy ωi,G ensuringcoobservability for the transformed systems H and G. Thenan optimal sensor activation policy ωi for K-codiagnosabilitycan be calculated by setting ωi(s) = ωi,G(s) for all s ∈L(H).

Note that the works in [14], [15] only consider thecentralized sensor activation problem and that the algorith-m developed in [26] is for codiagnosability, not for K-codiagnosability. To the best of our knowledge, the problemof synthesizing an optimal sensor activation policy for K-codiagnosability had remained an open problem. It cannow be solved by applying the transformation algorithm ofSection III together with the algorithm in [25].

VI. CONCLUSION

In this paper, we have presented a new transformationalgorithm that shows that the property of language-basedK-codiagnosability can be transformed to the property oflanguage-based coobservability, where the integer K is givena priori. Language-based properties are those where theobservability properties of an event are dynamic, i.e., arehistory-dependent. These results complement those in [1]that pertain to the reverse transformation, from coobserv-ability to codiagnosability. Moreover, we have shown that,when the observation properties are static, referred to as theevent-based case, (static) [co]diagnosability is transformableto (static) [co]observability. These new results allow theleveraging of the large existing literature on solution method-ologies for problems of decentralized control to be appliedto solve problems of decentralized fault diagnosis. Whenthe desired diagnosis delay K is not given, the transforma-tion from language-based codiagnosability to language-basedcoobervability still remains an open problem.

REFERENCES

[1] W. Wang, A. R. Girard, S. Lafortune, and F. Lin, “On codiagnosabilityand coobservability with dynamic observations,” IEEE Transactions onAutomatic Control, vol. 56, no. 7, pp. 1551–1566, 2011.

[2] F. Lin and W. M. Wonham, “On observability of discrete-eventsystems,” Information Sciences, vol. 44, no. 3, pp. 173–198, 1988.

[3] R. Cieslak, C. Desclaux, A. S. Fawaz, and P. Varaiya, “Supervisorycontrol of discrete-event processes with partial observations,” IEEETransactions on Automatic Control, vol. 33, no. 3, pp. 249–260, 1988.

[4] K. Rudie and W. M. Wonham, “Think globally, act locally: Decentral-ized supervisory control,” IEEE Transactions on Automatic Control,vol. 37, no. 11, pp. 1692–1708, 1992.

[5] F. Lin, “Diagnosability of discrete event systems and its applications,”Discrete Event Dynamic Systems: Theory & Appl., vol. 4, no. 2, pp.197–212, 1994.

[6] M. Sampath, R. Sengupta, S. Lafortune, K. Sinnamohideen, andD. Teneketzis, “Diagnosability of discrete-event systems,” IEEE Trans-actions on Automatic Control, vol. 40, no. 9, pp. 1555–1575, 1995.

[7] J. Zaytoon and S. Lafortune, “Overview of fault diagnosis methodsfor discrete event systems,” Annual Reviews in Control, vol. 37, no. 2,pp. 308–320, 2013.

[8] R. Debouk, S. Lafortune, and D. Teneketzis, “Coordinated decentral-ized protocols for failure diagnosis of discrete event systems,” DiscreteEvent Dyn. Sys.: Theory & Appl., vol. 10, no. 1-2, pp. 33–86, 2000.

[9] W. Qiu and R. Kumar, “Decentralized failure diagnosis of discreteevent systems,” IEEE Trans. Systems, Man and Cybernetics, Part A,vol. 36, no. 2, pp. 384–395, 2006.

[10] Y. Wang, T.-S. Yoo, and S. Lafortune, “Diagnosis of discrete eventsystems using decentralized architectures,” Discrete Event DynamicSystems: Theory & Appl., vol. 17, no. 2, pp. 233–263, 2007.

[11] M. V. Moreira, T. C. Jesus, and J. C. Basilio, “Polynomial timeverification of decentralized diagnosability of discrete event systems,”IEEE Trans. Automatic Control, vol. 56, no. 7, pp. 1679–1684, 2011.

[12] K. Rudie, S. Lafortune, and F. Lin, “Minimal communication in adistributed discrete-event system,” IEEE Transactions on AutomaticControl, vol. 48, no. 6, pp. 957–975, 2003.

[13] F. Lin, “Control of networked discrete event systems: dealing withcommunication delays and losses,” SIAM Journal on Control andOptimization, vol. 52, no. 2, pp. 1276–1298, 2014.

[14] D. Thorsley and D. Teneketzis, “Active acquisition of information fordiagnosis and supervisory control of discrete event systems,” DiscreteEvent Dyn. Sys.: Theory & Appl., vol. 17, no. 4, pp. 531–583, 2007.

[15] F. Cassez and S. Tripakis, “Fault diagnosis with static and dynamicobservers,” Fund. Informaticae, vol. 88, no. 4, pp. 497–540, 2008.

[16] D. Sears and K. Rudie, “Efficient computation of sensor activationdecisions in discrete-event systems,” in 52nd IEEE Conference onDecision and Control, 2013, pp. 6966–6971.

[17] Y. Huang, K. Rudie, and F. Lin, “Decentralized control of discrete-event systems when supervisors observe particular event occurrences,”IEEE Trans. Automatic Control, vol. 53, no. 1, pp. 384–388, 2008.

[18] E. Dallal and S. Lafortune, “On most permissive observers in dynamicsensor activation problems,” IEEE Transactions on Automatic Control,vol. 59, no. 4, pp. 966–981, 2014.

[19] D. Sears and K. Rudie, “Sensor activation and communication prob-lems in discrete-event systems,” Tech. Rep., Queens University, 2013.

[20] X. Yin and S. Lafortune, “Codiagnosability and coobservability underdynamic observations: Transformation and verification,” University ofMichigan, Tech. Rep., Dec, 2014.

[21] C. Cassandras and S. Lafortune, Introduction to Discrete Event Sys-tems, 2nd ed. Springer, 2008.

[22] T.-S. Yoo and H. E. Garcia, “Event counting of partially-observeddiscrete-event systems with uniformly and nonuniformly boundeddiagnosis delays,” Discrete Event Dynamic Systems: Theory & Appl.,vol. 19, no. 2, pp. 167–187, 2009.

[23] W. Wang, S. Lafortune, and F. Lin, “An algorithm for calculatingindistinguishable states and clusters in finite-state automata withpartially observable transitions,” Systems & Control Letters, vol. 56,no. 9, pp. 656–661, 2007.

[24] T.-S. Yoo and S. Lafortune, “Polynomial-time verification of diagnos-ability of partially observed discrete-event systems,” IEEE Transac-tions on Automatic Control, vol. 47, no. 9, pp. 1491–1495, 2002.

[25] W. Wang, S. Lafortune, F. Lin, and A. R. Girard, “Minimization ofdynamic sensor activation in discrete event systems for the purposeof control,” IEEE Transactions on Automatic Control, vol. 55, no. 11,pp. 2447–2461, 2010.

[26] W. Wang, S. Lafortune, A. R. Girard, and F. Lin, “Optimal sensoractivation for diagnosing discrete event systems,” Automatica, vol. 46,no. 7, pp. 1165–1175, 2010.

395