Informationssysteme verarbeiten Daten, die logisch und physisch über Knoten verteilt sind. Datenobjekte verschiedener Knoten können dabei Bezüge zueinander haben. Beispielsweise kann ein Datenobjekt eine Referenz auf ein Datenobjekt eines anderen Knotens oder eine kritische Information enthalten. Die Semantik der Daten induziert Datenintegrität in Form von Anforderungen: Zum Beispiel sollte keine Referenz verwaist und kritische Informationen nur an einem Knoten verfügbar sein. Datenintegrität unterscheidet gültige von ungültigen Verteilungen der Daten. Ein verteiltes System verändert sich in Schritten, die nebenläufig auftreten können. Jeder Schritt manipuliert Daten. Ein verteiltes System erhält Datenintegrität, wenn alle Schritte in einer Datenverteilung resultieren, die die Anforderungen von Datenintegrität erfüllen. Die Erhaltung von Datenintegrität ist daher ein notwendiges Korrektheitskriterium eines Systems. Der Entwurf und die Analyse von Datenintegrität in verteilten Systemen sind schwierig, weil ein verteiltes System nicht global kontrolliert werden kann. In dieser Arbeit untersuchen wir formale Methoden für die Modellierung und Analyse verteilter Systeme, die mit Daten arbeiten. Wir entwickeln die Grundlagen für die Verifikation von Systemmodellen. Dazu verwenden wir algebraische Petrinetze. Wir zeigen, dass die Schritte verteilter Systeme mit endlichen vielen Transitionen eines algebraischen Petrinetzes beschrieben werden können, genau dann, wenn eine Schranke für die Bedingungen aller Schritte existiert. Wir verwenden algebraische Gleichungen und Ungleichungen, um Datenintegrität zu spezifizieren. Wir zeigen, dass die Erhaltung von Datenintegrität unentscheidbar ist, wenn alle erreichbaren Schritte betrachtet werden. Und wir zeigen, dass die Erhaltung von Datenintegrität entscheidbar ist, wenn auch unerreichbare Schritte berücksichtigt werden. Dies zeigen wir, indem wir die Berechenbarkeit eines nicht-erhaltenden Schrittes als Zeugen zeigen. / Information systems process data that is logically and physically distributed over many locations. Data entities at different locations may be in a specific relationship. For example, a data entity at one location may contain a reference to a data entity at a different location, or a data entity may contain critical information such as a password. The semantics of data entities induce data integrity in the form of requirements. For example, no references should be dangling, and critical information should be available at only one location. Data integrity discriminates between correct and incorrect data distributions. A distributed system progresses in steps, which may occur concurrently. In each step, data is manipulated. Each data manipulation is performed locally and affects a bounded number of data entities. A distributed system preserves data integrity if each step of the system yields a data distribution that satisfies the requirements of data integrity. Preservation of data integrity is a necessary condition for the correctness of a system. Analysis and design are challenging, as distributed systems lack global control, employ different technologies, and data may accumulate unboundedly. In this thesis, we study formal methods to model and analyze distributed data-aware systems. As a result, we provide a technology-independent framework for design-time analysis. To this end, we use algebraic Petri nets. We show that there exists a bound for the conditions of each step of a distributed system if and only if the steps can be described by a finite set of transitions of an algebraic Petri net. We use algebraic equations and inequalities to specify data integrity. We show that preservation of data integrity is undecidable in case we consider all reachable steps. We show that preservation of data integrity is decidable in case we also include unreachable steps. We show the latter by showing computability of a non-preserving step as a witness.

Risk management in software projects involves the definition of actions to prevent risks identified for the project in order to minimize their effects or eliminate them.The definition of preventive actions, and especially to assess their efficacy in eliminating a risk is not a trivial task. The objective of this research is to identify and propose a method for evaluation of preventive actions to mitigate or eliminate risks in software projects. This assessment is based on supporting a quantitative analysis driven Decision Theory and modeled and simulated by means of colored Petri nets. The choice of theme reveals the importance of predicting the impact and efficacy of preventive measures in software projects, anticipating their possible outcomes and enhancing their uses. The development of this research resulted in three distinct stages of study, mutually complementary and performed in different periods: a) define an approach to model and simulate processes that were widely accepted by the scientific community, b) identify a theoretical basis that was able to establish a criterion to support the decision making process and therefore evaluate the impact of preventive risk in software development projects; c) evaluating the results of simulation based on the modeling of preventive risk using the previously established theoretical basis. The study is an exploratory, descriptive and analytical, combined with documentary analysis of literature sources, from documents and information from the literature. The proposed method consists of introducing a formal step in the evaluation process of preventive risk.The simulation with colored Petri nets, aided by the Theory of Decision by the Bayes Theorem, and has made the process more understandable, provided a more effective participation by experts involved, and allow formal mathematical representation coupled to mechanisms analysis to inspect risks adapted processes. / O gerenciamento de riscos em projetos de software envolve a definição de ações para prevenir riscos identificados para o projeto, visando minimizar seus efeitos ou eliminá-los. A definição de ações preventivas e, principalmente, a avaliação da eficácia destas na eliminação de um risco, não é uma tarefa trivial. O objetivo desta pesquisa é identificar e propor um método de avaliação de ações preventivas para mitigar ou eliminar riscos, em projetos de software. Esta avaliação tem como base de sustentação uma análise quantitativa orientada pela Teoria de Decisão e modelada e simulada por meio de redes de Petri coloridas. A opção pelo tema revela a importância de prever o impacto e a eficácia da utilização de ações preventivas em projetos de software, antecipando seus possíveis resultados e potencializando suas utilizações. A elaboração desta pesquisa implicou em três etapas de estudos distintas, complementares entre si e realizadas em períodos distintos: a) definir uma abordagem para modelar e simular processos que fosse amplamente aceito pela comunidade científica; b) identificar uma base teórica que fosse capaz de estabelecer um critério para apoiar o processo decisório e, consequentemente avaliar o impacto de ações preventivas de riscos em projetos de desenvolvimento de software; c) avaliar os resultados da simulação baseados na modelagem de ações preventivas de riscos utilizando a base teórica previamente estabelecida. O estudo realizado é de natureza exploratória, analítica e descritiva, combinado com análise documental em fontes bibliográficas, a partir de documentos e informações extraídas na literatura. O método proposto consiste da introdução de uma etapa formal ao processo de avaliação de ações preventivas de riscos. A simulação com redes de Petri coloridas, auxiliada pela Teoria de Decisão por meio do Teorema de Bayes, além de ter tornado os processos mais compreensíveis, proporcionou uma participação mais efetiva por parte de especialistas envolvidos, além de permitir uma representação matemática formal acoplada a mecanismos de análise para inspecionar riscos em processos adaptados.

Purpose of this master thesis is description of base parts of expert system with using Petri nets. Attention is mainly concentrate to knowledge base, way of storing knowledge. Next parts are describing main different between production base knowledge for planning or diagnostic expert system from Petri nets view. In this thesis conditions of using Petri nets and way of interpretation knowledge for inference mechanism in planning and diagnostic expert system are described. Using of high level Petri nets and language describing Petri nets structure and behaviour are demonstrated in next part of this thesis.

Les Réseaux de Petri (RdP) sont actuellement les approches les plus prometteuses pour modéliser et vérifier les systèmes complexes tels que les Systèmes Multi Agents (SMA). De nombreuses solutions ont été proposées pour remédier aux problèmes de communication, de coordination et d’interaction entre les Agents. Cependant, il n’existe aucune en mesure de traiter, à la fois les aspects structurels et comportementaux, du moins à notre connaissance. La thèse s'intéresse à la problématique de modélisation formelle et de vérification automatique et semi-automatique de propriétés pour les Systèmes Multi Agents. Plus précisément, l'objectif consiste à proposer un nouveau modèle formel original basé sur les réseaux de Petri, les Réseaux de Petri à Agents (RdPA), qui permettent d’exprimer de manière consistante et plus précise les systèmes Multi Agents. Il s’intéresse de plus à l’extension de ce modèle aux fins de modéliser la migration des agents dans le cadre des systèmes à agents mobiles. Cette classe de modèle permet de s’intéresser à la vérification formelle de propriétés classiques comme notamment la vivacité ou l’absence d’interblocage dans le cadre des Systèmes Multi-Agent. / Petri nets (PN) are currently the most promising approaches to model and to verify complex systems such as Multi Agent Systems (MAS). Several solutions have been proposed to solve the problems of communication, coordination and interaction among Agents. However, to best of our knowledge, none of this solution has able to handle both aspects: structural and behavioral. The thesis focuses on the problem of formal modeling and automatic and semi-automatic verification of properties in Multi Agent Systems. More specifically, the objective is to propose a new original formal model based on Petri nets, Agents Petri nets (APN), which express consistently more accurate a Multi Agent Systems. There is growing interest in the extension of this model for modeling the migration of Agents within the mobile Agent systems. This class of model allows focusing on the formal verification of classical properties such as alertness or absence of deadlock in the context of Multi Agent Systems.

Indiana University-Purdue University Indianapolis (IUPUI) / In recent years, there have been a lot of technology innovations to automate the day to day processes done by every person. These days the automobile manufacturers introduce new features in their cars, in order to improve customer experience, like Adaptive cruise control, Parallel park assist, etc. The objective of this thesis is to model an automated parallel parking system and to simulate the system behavior, by taking into account the high level events which happen when a car is parallel parked. The tool used in this thesis to model and simulate the system is Hybrid Petri net (HPN), which is versatile to model the real life systems. Chapter 1 deals with a brief introduction of the related work in Hybrid Petri net modeling of real life systems, automatic parallel parking systems and how the concept for modeling the parallel parking system was developed. Chapter 2 deals with the general introduction about Discrete, Continuous and Hybrid Petri nets and their dynamics which are essential for understanding this thesis. Chapter 3 deals with the development of the model and the various stages in the model development. Errors encountered in each stage is briefly discussed and the improvements are discussed in the next stage of development. This chapter concludes with the final integrated model and operation of the model. Chapter 4 deals with the discussion of results obtained when the model is tested in MATLAB and SIMHPN (which is a Matlab embedded simulation program). The results are compared, the system behavior is observed and the purpose of the thesis is justified. In Chapter 5, a conclusion is provided to summarize the entire thesis.

There are many methods for modelling the reliability of systems based on component failure data. This task becomes more complex as systems increase in size, or undertake missions that comprise multiple discrete modes of operation, or phases. Existing techniques require certain levels of expertise in the model generation and calculation processes, meaning that risk and reliability assessments of systems can often be expensive and time-consuming. This is exacerbated as system complexity increases. This thesis presents a novel method which generates reliability models for phasedmission systems, based on Petri nets, from simple input files. The process has been automated with a piece of software designed for engineers with little or no experience in the field of risk and reliability. The software can generate models for both repairable and non-repairable systems, allowing redundant components and maintenance cycles to be included in the model. Further, the software includes a simulator for the generated models. This allows a user with simple input files to perform automatic model generation and simulation with a single piece of software, yielding detailed failure data on components, phases, missions and the overall system. A system can also be simulated across multiple consecutive missions. To assess performance, the software is compared with an analytical approach and found to match within 5% in both the repairable and non-repairable cases. The software documented in this thesis could serve as an aid to engineers designing new systems to validate the reliability of the system. This would not require specialist consultants or additional software, ensuring that the analysis provides results in a timely and cost-effective manner.

Ces cinquante dernières annéees, les ordinateurs ont occupé une place toujours plus importante dans notre vie quotidienne. On les retrouve aujourd’hui présents dans de nombreuses applications, sous forme de systèmes enfouis. Ces applications sont parfois critiques, dans la mesure où toute défaillance du système informatique peut avoir des conséquences catastrophiques, tant sur le plan humain que sur le plan économique. Nous pensons par exemple aux systèmes informatiques qui contrôlent les appareils médicaux ou certains systèmes vitaux (comme les freins) des véhicules automobiles. Afin d’assurer la correction de ces systèmes informatiques, différentes techniques de vérification Assistée par Ordinateur ont été proposées, durant les trois dernières décennies principalement. Ces techniques reposent sur un principe commun: donner une description formelle tant du système que de la propriété qu’il doit respecter, et appliquer une méthode automatique pour prouver que le système respecte la propriété. Parmi les principaux modèles aptes à décrire formellement des systèmes informatiques, la classe des systèmes de transition bien structurés [ACJT96, FS01] occupe une place importante, et ce, pour deux raisons essentielles. Tout d’abord, cette classe généralise plusieurs autres classes bien étudiées et utiles de modèles à espace d’états infini, comme les réseaux de Petri [Pet62](et leurs extensions monotones [Cia94, FGRVB06]) ou les systèmes communiquant par canaux FIFO avec pertes [AJ93]. Ensuite, des problèmes intéressants peuvent être résolus algorithmiquement sur cette classe. Parmi ces problèmes, on trouve le probléme de couverture, auquel certaines propriétés intéressantes de sûreté peuvent être réduites. Dans la première partie de cette thèse, nous nous intéressons au problème de couverture. Jusqu’à présent, le seul algorithme général (c’est-à-dire applicable à n’importe quel système bien structuré) pour résoudre ce problème était un algorithme dit en arrière [ACJT96] car il calcule itérativement tous les états potentiellement non-sûrs et vérifie si l’état initial du système en fait partie. Nous proposons Expand, Enlarge and Check, le premier algorithme en avant pour résoudre le problème de couverture, qui calcule les états potentiellement accessibles du système et vérifie si certains d’entre eux sont non-sûrs. Cette approche est plus efficace en pratique, comme le montrent nos expériences. Nous présentons également des techniques permettant d’accroître l’efficacité de notre méthode dans le cas où nous analysons des réseaux de Petri (ou une de leurs extensions monotones), ou bien des systèmes communiquant par canaux FIFO avec pertes. Enfin, nous nous intéressons au calcul de l’ensemble de couverture pour les réseaux de Petri, un objet mathématique permettant notamment de résoudre le problème de couverture. Nous étudions l’algorithme de Karp & Miller [KM69], une solution classique pour calculer cet ensemble. Nous montrons qu’une optimisation de cet algorithme présenté dans [Fin91] est fausse, et nous proposons une autre solution totalement neuve, et plus efficace que la solution de Karp & Miller. Dans la seconde partie de la thèse, nous nous intéressons aux pouvoirs d’expression des systèmes bien structurés, tant en terme de mots infinis que de mots finis. Le pouvoir d’expression d’une classe de systèmes est, en quelque sorte, une mesure de la diversité des comportements que les modèles de cette classe peuvent représenter. En ce qui concerne les mots infinis, nous étudions les pouvoirs d’expression des réseaux de Petri et de deux de leurs extensions (les réseaux de Petri avec arcs non-bloquants et les réseaux de Petri avec arcs de transfert). Nous montrons qu’il existe une hiérarchie stricte entre ces différents pouvoirs d’expression. Nous obtenons également des résultats partiels concernant le pouvoir d’expression des réseaux de Petri avec arcs de réinitialisation. En ce qui concerne les mots finis, nous introduisons la classe des langages bien structurés, qui sont des langages acceptés par des systèmes de transition bien structurés étiquettés, où l’ensemble des états accepteurs est clos par le haut. Nous prouvons trois lemmes de pompage concernant ces langages. Ceux-ci nous permettent de réobtenir facilement des résultats classiques de la littérature, ainsi que plusieurs nouveaux résultats. En particulier, nous prouvons, comme dans le cas des mots infinis, qu’il existe une hiérarchie stricte entre les pouvoirs d’expression des extensions des réseaux de Petri considérées.

Nous présentons dans ce travail de thèse des approches pour la spécification et la vérificationdes systèmes temporisés. La première partie concerne une méthode de spécification enutilisant les diagrammes états-transitions pour modéliser un système donné en partant d’unedescription textuelle. Cette méthode guide l’utilisateur pour le développement de la modélisation.Elle comporte plusieurs étapes et utilise des observateurs d’états et des événements afind’engendrer le diagramme états-transitions. Un outil qui implémente les différentes étapes de laméthode de spécification pour une application semi-automatique est présenté. La seconde partieconcerne une traduction des diagrammes états-transitions vers les réseaux de Petri colorés, cequi permet d’utiliser les méthodes de vérification. Nous prenons en considération dans cette traductionun ensemble important des éléments syntaxiques des diagrammes états-transitions, telsque la concurrence, la hiérarchie, etc. Un outil qui implémente la traduction pour un passageautomatique des diagrammes états-transitions vers les réseaux de Petri colorés est en cours de développement.La dernière partie concerne l’intégration des contraintes temporelles dans les deuxapproches précédentes. Nous définissons des annotations pour les diagrammes états-transitionsdont nous fournissons la syntaxe et la sémantique. Ces annotations seront ensuite utilisées dansla méthode de spécification et la traduction. Le but est de proposer des annotations faciles àcomprendre et à utiliser avec une syntaxe qui prend en compte des contraintes parmi les plusutilisées. / In order to specify and verify timed systems, we present in this thesis approaches using UMLstate machines and coloured Petri nets. Our first approach is a specification method that takesinto account a textual description of the system and generates the corresponding state machinediagram. This method helps a non-expert user to model a system in a structural way. We presenta tool that implements the specification method. Our second approach is the translation of UMLstate machine diagrams to coloured Petri nets diagrams. In this approach we take into account animportant set of UML state machine elements that allows the modelling of concurrent systems,etc. A tool that implements the approach and allows us to automate the translation is beingdeveloped. Finally, the last approach is the integration of time constraints in our specificationmethod and in our translation. We propose a set of annotations to model time in state machinediagrams, and we define the corresponding syntax and semantics.

Dentre as tendências de uso racional de recursos, principalmente energia, e da necessidade de assegurar a produtividade e qualidade na execução de atividades produtivas, destaca-se o conceito de edifício inteligente. Este ambiente materializa o conceito de integração dos sistemas prediais potencializando a otimização dos recursos e a eficiência do trabalho humano. Neste contexto, abordagens conceituais baseadas em sistemas a eventos discretos e técnicas derivadas de rede de Petri têm sido introduzidas como uma alternativa eficaz de modelagem e análise das soluções de integração dos sistemas prediais. Um resultado expressivo destas iniciativas são os métodos propostos para a modelagem e análise de estratégias de gerenciamento de sistemas de ar condicionado, utilizando uma abordagem híbrida, onde são considerados os aspectos de sistemas a eventos discretos e as variáveis de dinâmica contínua. Contudo, as abordagens e métodos existentes são limitados a soluções específicas de implementação, como os sistemas de ar condicionado com volume de ar contínuo. Assim, o presente trabalho introduz uma extensão destas abordagens para modelar e analisar soluções de automação predial que incluem sistemas de ar condicionado com volume de ar variável. A eficiência deste método na concepção e validação destas soluções é ilustrada através de um estudo de caso. / Among the trends of rational use of resources, especially energy, and the need to ensure productivity and quality in the implementation of productive activities, there is the concept of intelligent building. This environment materializes the concept of integrating building systems, powering the optimization of resources and the efficiency of human labor. In this context, conceptual approaches that are based on systems of discreet events and techniques, which are derived from the Petri nets, have been introduced as an effective alternative to modeling and analysis of solutions of building systems integration. A significant result of these initiatives are the proposed methods for modeling and the analysis of strategies for air conditioning systems management using a hybrid approach where the aspects of systems of discreet events and the variables of continuing dynamic are considered. However, the existing methods and approaches are limited to their specific implementation solutions, such as air conditioning systems with continuous volume of air. Thus, this work introduces an extension of these approaches to model and analyze the building automation solutions that include air conditioning systems with variable volume of air. The efficiency of this method in the design and validation of these solutions is illustrated through a case study.

A globalização reforça a necessidade das empresas aprimorarem seus processos e produtos continuamente para se manterem competitivas e atenderem às expectativas de um mercado dinâmico e de acionistas cada vez mais exigentes, que buscam maximizar seus lucros. A melhoria contínua acima mencionada não se refere apenas à qualidade percebida pelo consumidor final, mas também à qualidade e confiabilidade dos processos de produção. Desta forma, quando as empresas têm melhores processos, melhores são os produtos originados e também os seus custos. Porém, a questão é como esses processos são modelados na fase de projeto e como ferramentas de qualidade, sobretudo o Seis Sigma metodologia mais em voga na atualidade podem utilizar tais modelos para obter melhores resultados. Essa dissertação propõe a utilização de ferramentas de modelagem e simulação tais como as Redes de Petri para modelagem de processos produtivos fornecem um modelo formal para a representação de sistemas de produção, capturando aspectos inerentes a tais sistemas como concorrência, paralelismo e sincronização suportando a aplicação da metodologia Seis Sigma, a qual geralmente atua somente no nível de melhoria do processo produtivo e não do projeto que o originou. Dessa forma, essa dissertação trás uma proposta de integração entre os times que projetam o processo e os que executam a produção, demonstrando tal viabilidade por meio da análise dos projetos/modelos durante a aplicação da metodologia Seis Sigma. É realizado um estudo de caso na estamparia de uma indústria automotiva que ilustra a aplicação da metodologia proposta. / The globalization strengthens the necessity for companies to improve its processes and products in order to remains competitive and to attend expectations of a dynamic market and shareholders each time more demanding and eager to maximize their profits. The continuous improvement mentioned above, is not related only to the quality perceived by the final consumer, but also to the quality and reliability of the production processes. Therefore, as better processe the company gets, as better would be their final products and as lower would be the costs. However, the question is wheter a continuous improvement using Six Sigma could benefit from the design documentation for the target process returning also an improved documentation after the cycle is completed. This work considers the use of Petri Nets for production processes modeling - even if any other design and modeling representation would return similar results - supporting the Six Sigma methodology application. The main result is a proposition of continuous improvement life cycle that maintains the design documentation consistent and up-to-date. Thus, this work pursuits the integration between the teams that design processes and those who implement them in the manufacturing plant. To show the potential of the models analysis during Six Sigma projects a case study is analyzed for the Press Shop area in an Automotive Industry.