<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Fault Diagnosis of P-Time Labeled Petri Net Systems</article-title>
      </title-group>
      <contrib-group>
        <aff id="aff0">
          <label>0</label>
          <institution>Patrice Bonhomme University Franc ̧ois-rabelais CNRS</institution>
          ,
          <addr-line>LI EA 6300, OC ERL CNRS 6305 64 avenue Jean Portalis 37200 Tours</addr-line>
          <country country="FR">France</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>This paper focuses on the fault diagnosis problem of systems modeled with P-time labeled Petri nets with partial information. Indeed, the set of transitions is partitioned into those labeled with the empty string ǫ called silent (as their firin cannot be detected) including the faulty transitions and the observable ones. The proposed approach is based on the synthesis of a function called diagnoser allowing to determine the diagnosis state of the system based on the current observation. The novelty of the developed approach resides in the fact that, although the time factor is considered as intervals, the diagnoser is computed thanks to the underlying untimed Petri net structure of the P-time labeled model considered. Furthermore, the method relies on the schedulability analysis of particular firin sequences exhibited by the analysis of the obtained diagnoser and does not require the building of the state class graph.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. INTRODUCTION</title>
      <p>
        The correct behavior of a real-world application is the
ultimate requirement, particularly for systems such as
communication protocols, manufacturing and real-time
systems. Indeed, a drift from an expected behavior can
be of crucial importance and can even lead, in extreme
cases, to severe consequences including human losses. So,
knowing the current state of a system in order to take the
appropriate decisions and determining the malfunction of
a system component are nowadays fundamental issues.
From a practical point of view, associating a dedicated
sensor to each variable of interest in order to monitor
its internal state is inconceivable. This restriction, due to
economical or physical accessibility reasons leads to a
system analysis in presence of uncertainties as the state
information cannot be directly obtained. This particularity
has gave rise to the introduction of the observers paradigm
in the classical system theory. Indeed, an observer can
be viewed as a mechanism allowing to estimate or
reconstruct the internal state of a system based on some
measurements. From a discrete event dynamic systems
point of view and more precisely from a Petri net (PN on
short) perspective this issue corresponds to the estimation
of a PN marking based on some event observations.
Thus, being given a sequence of observed events (called
word or trace) the challenge consists in determining if a
fault has occurred, eventually or for sure!
It can be noticed that the problems of fault diagnosis
has receive extensive attention these recent years and
particularly in the framework of automata models and
regular languages (
        <xref ref-type="bibr" rid="ref18">Sampath et al. (1995)</xref>
        ,
        <xref ref-type="bibr" rid="ref10">Cassandras and
Lafortune (2008)</xref>
        ,
        <xref ref-type="bibr" rid="ref15">Lin (1994)</xref>
        ,
        <xref ref-type="bibr" rid="ref11">Cassez and Tripakis (2008)</xref>
        )
but there are few studies in the time discrete event systems
context.
      </p>
      <p>
        A preliminary version of this paper was presented in
(
        <xref ref-type="bibr" rid="ref6">Bonhomme (2014)</xref>
        ) where an approach allowing to
estimate the marking of a P-time labeled Petri net
(PTLPN) system based on the observation of particular
labels was presented. The plant observation is given by
a set of labels whose occurrence can be detected/observed
by an external agent (called observer or estimator) - these
particular labels are associated to observable transitions.
The other transitions, the unobservable ones (called silent
transitions) are labeled with the empty string ǫ.
In this extended and enriched version, a fault diagnosis
problem is solved thanks to the introduction of a function
called diagnoser which associates to each observation
a diagnosis state. In the proposed technique the set of
unobservable transitions is further partitioned into the
set of faulty transitions and the set of regular ones. The
regular transitions are unobservable and non faulty.
The proposed approach does not require the state class
graph construction and consequently it is designed to
alleviate the state space explosion problem. Indeed, the
construction of the considered state observer is based on
the analysis of the underlying untimed PN structure of the
P-time labeled PN considered.
      </p>
      <p>
        In particular, the following four assumptions are made:
1. the net structure and the initial marking are known,
2. the fault model is known,
3. the underlying untimed PN, of the P-TLPN
considered is bounded,
4. the Petri net induced by the set of unobservable
transitions does not contain circuit of null length.
Note that this latter assumption is adopted to exclude
the situation where an infinit of actions may take place
in a finit amount of time: it prevents the net induced
by the set of unobservable transitions from being Zeno
(
        <xref ref-type="bibr" rid="ref13">Hadjidj et al. (2007)</xref>
        ) which is in contradiction with a
diagnosability scheme. In addition, there is no assumption
on the backward conflic freeness of the subnet induced
by the set of unobservable transitions as in (
        <xref ref-type="bibr" rid="ref12">Giua et al.
(2007)</xref>
        ).
      </p>
      <p>The paper is organized as follows: after an overview
of the relevant literature in the next section, a brief
reminder of the basics of untimed Petri nets followed by a
formal definitio of P-time labeled Petri nets is realized
in the third section. Section four covers the procedure
of estimation and the construction of the state observer.
The schedulability analysis of the occurrence sequence
highlighted by the state observer and its application to the
estimation problem are studied in the fift section. In the
sixth section the fault diagnosis problem is solved. Section
seven presents an illustration of the developed method and
the last section concludes the paper and gives suggestions
for future research.</p>
    </sec>
    <sec id="sec-2">
      <title>2. LITERATURE REVIEW</title>
      <p>
        For discrete event system (DES) state estimation has
been addressed by several researchers. For instance, in
(
        <xref ref-type="bibr" rid="ref12">Giua et al. (2007)</xref>
        ) the authors deal with the marking
estimation of a labeled Petri net system. Thanks to
structural assumptions on the subnet induced by the set
of unobservable transitions, they propose an algebraic
characterization of the set of consistent markings once a
sequence is observed.
      </p>
      <p>
        In the framework of fault detection or fault diagnosis
several approaches can also be found in the literature
fault diagnosis is closed to the state estimation problem.
Note that a complete survey of fault diagnosis methods
for DES can be found in (
        <xref ref-type="bibr" rid="ref21">Zaytoon and Lafortune (2013)</xref>
        ).
In (
        <xref ref-type="bibr" rid="ref8">Cabasino et al. (2010)</xref>
        ) the authors proposed a
diagnosis approach based on the concept of basis marking
and justificatio under the acyclicity assumption of the
unobservable subnet of the system considered. Intuitively,
for an observed sequence (word) ω, a justificatio can be
thought as the set of minimal (in terms of firin vector)
unobservable transitions interleaved with ω necessary to
complete ω into a fireabl sequence on the net considered,
from the initial marking. They extended their work in
(
        <xref ref-type="bibr" rid="ref9">Cabasino et al. (2014)</xref>
        ) to provide a diagnosability
approach for bounded labeled PN by introducing two
graphs, namely the modifie basis reachability graph
(MBRG) and the basis reachability diagnoser (obtained
from the MBRG). Necessary and sufficien conditions for
diagnosability are given but the construction of the two
graphs is of exponential complexity with respect to the
structure of the PN considered and its initial marking.
There are relatively few works in this topic in the time
discrete event systems scheme where the time factor is
modeled as intervals, so, numerous problems are still
open. Concerning the time Petri net model of Merlin
(
        <xref ref-type="bibr" rid="ref16">Merlin and Faber (1976)</xref>
        ), the authors in (
        <xref ref-type="bibr" rid="ref2">Basile et al.
(2013)</xref>
        ) proposed a procedure for estimating the marking
of the model in presence of unobservable transitions. They
introduced a modifie state class graph which captures
the required information on the possible evolution of the
system starting from a given initial marking. Thanks to
this graph, being given a timed sequence and a time
instant, the set of markings consistent with the current
observation is determined via integer linear programming
techniques. The approach is restricted to bounded time
Petri nets.
      </p>
      <p>
        In a recent paper, the authors in (
        <xref ref-type="bibr" rid="ref1">Basile et al. (2015)</xref>
        )
extend the previously mentioned approach developed in
(
        <xref ref-type="bibr" rid="ref2">Basile et al. (2013)</xref>
        ) to deal with the state estimation and
the fault diagnosis problem for systems modeled by time
PN augmented with labels.
      </p>
      <p>
        The authors in (
        <xref ref-type="bibr" rid="ref19">Wang et al. (2013)</xref>
        ), thanks to a fault
diagnosis graph (FDG) which is a truncation of the
conventional state class graph (SCG) (
        <xref ref-type="bibr" rid="ref3">Berthomieu and
Diaz (1991)</xref>
        ), developed an online technique for the
fault diagnosis of systems modeled by unlabeled time
Petri nets. The FDG is constructed incrementally with
respect to the current observation and its number of states
can be, in the worst case, the same as the one of the
traditional state class graph. Indeed, the FDG is obtained
from the SCG by only keeping the information required
for the evaluation of the fault states and the authors
concentrate on the sequence information and remove the
irrelevant state classes (i.e., which are not used in the fault
diagnosis). Intuitively, the state classes which are obtained
after the firin of an unobservable transition are discarded
as the diagnosis state is updated after an observation.
The acyclicity assumption of the subnet induced by the
unobservable transitions is also considered. The authors
further extend the method in (
        <xref ref-type="bibr" rid="ref20">Wang et al. (2014)</xref>
        ) by using
reduction rules and model checking techniques.
      </p>
    </sec>
    <sec id="sec-3">
      <title>3. PETRI NETS</title>
    </sec>
    <sec id="sec-4">
      <title>3.1. Untimed Petri Nets</title>
      <p>
        The reader unfamiliar with Petri nets can refer to (
        <xref ref-type="bibr" rid="ref17">Murata
(1989)</xref>
        ), in the following only the basic notions are
recalled.
      </p>
      <p>A Place/Transition net (P/T net) is a structure N =
(P, T, P re, P ost), where P is a set of m places; T is a set
of n transitions. P re : P ×T → N and P ost : P ×T → N
are the pre and post incidence functions that specify the
arcs; C = P ost − P re is the incidence matrix. The preset
and postset of a node X ∈ P ∪ T are denoted ◦X and
X◦. A marking is a vector M : P → N that assigns to
each place of a P/T net a non-negative integer number of
tokens, represented by black dots. M (p) is the marking of
place p.</p>
      <p>A net system hN ; M0i is a net N with an initial marking
M0. A transition t is marking enabled at M if M ≥
P re(·, t). A transition t enabled at M may fire yielding
the marking M ′ = M + C(·, t). We write M [σ &gt; to
denote that the sequence of transitions σ is enabled at M ,
and we write M [σ &gt; M ′ to denote that the firin of σ
yields M ′. A marking M is reachable in hN ; M0i iff there
exists a firin sequence σ such that M0[σ &gt; M .
The set of all sequences that are enabled at the initial
marking M0 is denoted L(N, M0) i.e., L(N, M0) =
{σ ∈ T ⋆|M0[σ &gt;} with T ⋆ the Kleene closure of set T
i.e. the set of all firin sequences of elements of T of
arbitrary length, including the empty sequence λ. The
notation σ′σ will correspond to the firin sequence σ′
followed by firin sequence σ, i.e., the concatenation
operation ; σ′ is the prefi of firin sequence σ′σ.
The set of all markings reachable from M0 define the
reachability set of hN ; M0i and is denoted R(N, M0).
Given a net N = (P, T, P re, P ost) and a subset
Ts ⊆ T , the Ts-induced subnet of N is the net Ns =
(P, Ts, P res, P osts) where P res and P osts are the
restrictions of P re and P ost to Ts. So, the net Ns is
obtained from N by removing all transitions in T \ Ts,
it is denoted also by Ns∠Ts N .</p>
    </sec>
    <sec id="sec-5">
      <title>3.2. Labels mapping</title>
      <p>A labels mapping LM is associated to each transition of
the net considered as follows</p>
      <p>LM : T → Ω S {ǫ} ,
with Ω a finit alphabet and ǫ the empty string.
In the proposed approach, the set of transitions is
partitioned into two sets: observable transitions whose
firin can be detected by an external observer, denoted
as To and unobservable transitions whose firin cannot be
detected, denoted as Tu with T = To∪Tu and To∩Tu = ∅.
More precisely, the following stands:
• Tu = {t ∈ T |LM(t) = ǫ}, transitions in Tu are
also called silent,
• To = {t ∈ T |LM(t) 6= ǫ} (i.e., To is the set of
transitions labeled with a symbol in Ω).</p>
      <p>In the proposed approach, the same label ζ ∈ Ω can be
shared by several transitions, i.e., two transitions ti, tj
with ti 6= tj will be called indistinguishable if:</p>
      <p>LM(ti) = LM(tj ) = ζ.</p>
      <p>The extension of the label mapping can be realized over
sequences, LM : T ⋆ → Ω⋆, recursively as follows:
1. LM(ti) = ζ ∈ Ω if ti ∈ To,
2. LM(ti) = ǫ if ti ∈ Tu,
3. let σ ∈ T ⋆ and ti ∈ T then LM(σti) =</p>
      <p>LM(σ)LM(ti),
4. LM(λ) = ǫ where λ is the empty sequence.</p>
    </sec>
    <sec id="sec-6">
      <title>3.3. P-time Petri Nets</title>
      <p>
        Definitio 1 The formal definitio of a P-TPN (
        <xref ref-type="bibr" rid="ref14">Khansa
et al. (1996)</xref>
        ) is given by a pair hN ; Ii where:
• N is a marked Place/Transition net (a P/T net
system augmented with a marking)
• P → (Q+ ∪ {0}) × (Q+ ∪ {∞}),
• pi → I(pi) = [ai, bi] with 0 ≤ ai ≤ bi
With:
• P : the set of places of the net N ,
• Q+: the set of positive rational numbers,
• Ii define the static interval of the operation
duration of a token in a place pi.
      </p>
      <p>A token in place pi will be considered in the enabledness
of the output transitions of this place if it has stayed for
ai time units at least and bi at the most. Consequently,
the token must leave pi, at the latest, when its operation
duration becomes bi. After this duration bi, the token
will be ”dead” and will no longer be considered in the
enabledness of the transitions. According to the strong
firin mode, a transition in a P-TPN, is forced to fir unless
it is disabled by the firin of another conflictin transition.
Let consider αi the clock associated with the token
denoted i ∈ T K of the P-TPN (T K being the set of
tokens of the P-TPN considered). υ is a valuation of the
system, i.e., a mapping associating to each token i of
the P-TPN, an element of (R≥0), υi, representing the
time elapsed since the token i has been created (i.e., the
valuation of the clock αi). So, υ ∈ (R≥0)T K with the
notation AX representing the set of mappings from X to
A. 0 is the initial valuation with ∀i, 0i = 0
The semantics of a P-TPN can be define as a Timed
Transition System (TTS). A state of the TTS is a couple
s = (M, υ) where M is a marking and υ a valuation of
the system.</p>
      <p>Definitio 2 The semantics of a P-TPN hN ; Ii is define
by the Timed Transition System SN = (Q, {q0} , Σ, −→):
1. Q = NP × (Q≥0)T K
2. q0 = (M0, 0)
3. Σ = T
4. −→∈ Q × (Σ ∪ Q≥0) × Q
• The continuous transition is define ∀d ∈ R≥0 by:
υ′ = υ + d.</p>
      <p>∀ token k in ps ⇒ υk′ ≤ bs.
(M, υ) →d (M, υ′) iff
(M, υ) →ti (M ′, υ′) iff:
Finally, given a sequence of labels (a word) ω ∈ Ω⋆, it
is denoted by ωk the kth element in ω and the number
of elements of ω is denoted by |ω|. For a ∈ Ω, we write
a ∈ ω if there exists k ≥ 1 such that ωk = a (i.e., a is an
element of the word ω).</p>
      <p>Furthermore, let ω1, ω2, . . . , ωn be n sequences of labels
(i.e., wi ∈ Ω⋆, 1 ≤ i ≤ n), the notation ω = ω1ω2 . . . ωn
will be the concatenation of ω1, ω2, . . . , ωn.</p>
      <p>
        The next section recalls the procedure (
        <xref ref-type="bibr" rid="ref7">Bonhomme
(2015)</xref>
        ) to construct the state observer.
      </p>
    </sec>
    <sec id="sec-7">
      <title>4. ESTIMATION PROCEDURE</title>
      <p>The goal of the observer is to give the current state
estimate of the system based on the information of the
observed traces. The state of the observer will consist in a
set of states the model can be in after a label observation.
The following set will be associated to any observed word
ω (i.e., the observed labels sequence):
• L(ω) is the set containing all sequences of
transitions that are consistent with ω, i.e., the
set of all possible firin sequences that produce
observation ω.</p>
      <p>In general, if ω is an observed word, the associated firin
sequence σ ∈ LM−1(ω) is not necessarily fireabl on the
net as some unobservable transitions should be interleaved
to obtain a fireabl sequence that produce ω.</p>
      <p>Definitio 4 Let N be a P-TLPN with T = To ∪ Tu. The
following operator is defined
• The projection over To is Po : T ⋆ → To⋆ define as:
– Po(λ) = λ,
– for all σ ∈ T ⋆ and t ∈ T, Po(σt) = Po(σ)t if
t ∈ To and Po(σt) = Po(σ) otherwise (with
λ representing the empty sequence).</p>
      <p>Given a sequence σ ∈ L(N, M0), ω = LM(Po(σ))
denotes the corresponding observed word.</p>
      <p>Definitio 5 Let N be a P-TLPN with T = To ∪ Tu and
ω ∈ Ω⋆ be an observed word. L(ω) is define as:
L(ω) = Po−1(LM−1(ω)) ∩
{σ ∈ L(N, M0)|LM(Po(σ)) = ω},
L(N, M0)
=
i.e., the set of firin sequences consistent with ω ∈ Ω⋆.
Definitio 6 Let N be a P-TLPN with T = To ∪ Tu and
ω ∈ Ω⋆ be an observed word. C(ω) is define as:
C(ω) = {M ∈ R(N, M0)|∃σ ∈ L(ω) : M0[σ &gt; M },
i.e., the set of markings consistent with ω.</p>
      <p>• The discrete transition is define ∀ti ∈ T by:
 M ≥◦ ti.

 ∀ token k in pl, υk ≤ bl.



 ∀ ps ∈◦ ti,∀ token k in ps involved in ti’s firin :


 Tk[max(0, as − υk), (bs − υk)] 6= ∅.
 M ′ = M −◦ ti + ti◦.

 ∀ token r, υr′ = 0 if created by ti.
 υr otherwise.</p>
      <p>The dynamic evolution of a P-TPN depends on the
timing situation of each token. Indeed, each token will
be associated with a potential firin interval (or dynamic
interval) which can be different from its static one. For
instance, consider place pi with static interval [ai, bi],
let a token arrive in place pi at absolute time τ . At τ
its potential firin interval will correspond to [ai, bi]. At
time τ + c with c ≤ bi the dynamic interval of the
considered token will become [max(ai − c, 0), bi − c].
It can be noticed that a token is considered as dead when
its dynamic interval becomes [0, 0].</p>
      <p>Definitio 3 A P-time labeled Petri net (P-TLPN on
short) over an alphabet Ω is a triple hN, I, LMi where
hN, Ii is a P-TPN and LM : T → Ω S {ǫ} is a labeling
function.</p>
      <p>So, being given an observed word ω, L(ω) is the set of
sequences that may have fire while C(ω) is the set of
markings in which the system may actually be.</p>
      <p>Definitio 7 Let N be a P-TLPN with T = To ∪ Tu, the
unobservable reachability mapping U R, which enables
to fin the markings reachable from a given marking
Mi, following the firin of all unobservable sequences is
define as:
U R : Nm → 2Nm ,
Mi → U R(Mi)
{Mj ∈ Nm|∃σu ∈ Tu⋆, Mi[σu &gt; Mj } ,
=
with 2Nm the power set of the markings of the PN
considered.</p>
    </sec>
    <sec id="sec-8">
      <title>4.1. State observer</title>
      <p>Let Ni and Nj be two nodes of the graphical
representation of the state observer (associated respectively to the
states yi and yj of the observer) such that it exists a
directed arc linking Ni to Nj (Ni → Nj , i.e., Ni is
a predecessor of Nj ) labeled with ak with ak ∈ Ω as
illustrated on Figure2.</p>
      <p>Ni
ak</p>
      <p>Nj</p>
      <p>Definitio 8 The state observer for the partially
observable P-TLPN N with initial marking M0 and T = To ∪Tu
is define by the 5-tuple (Yso, Eso, fso, y0, ςso) where:
• Yso is the set of states of the state observer,
• Eso = Ω is the set of labels (associated to the
observable events),
• ςso : Yso → 2R(N,M0) is a function associating to
each state yso ∈ Yso a set of reachable markings,
• y0 is the initial state of the state observer and
ςso(y0) = SEM (N0) ∪ SSM (N0),
• fso : Yso × Es⋆o → Yso is the transition function
define as :
for yl ∈ Yso a state of the observer and
ω ∈ Es⋆o a string of observable labels
fso(y0, ω) = yl if ςso(yl) ∈/ ∅ where ςso(yl) =
nMl : M0 →τ Ml ∧ LM(Po(τ )) = ωo =
SEM (Nl) ∪ SSM (Nl).</p>
      <p>With the two sets SSM and SEM define as follows:</p>
    </sec>
    <sec id="sec-9">
      <title>Definitio 9 Sets SSM and SEM</title>
      <p>• SEM (Nj ), the Set of Entry Markings of Nj ,
SEM (Nj ) = {Ms ∈ Nj |∃Mu ∈ Ni, tk ∈ To,
ak ∈ Ω, LM(tk) = ak : Mu[tk &gt; Ms}
• SSM (Nj ), the Set of Shadow Markings of Nj ,
SSM (Nj ) = {Ms ∈ Nj |∃Mu ∈ SEM (Nj ),
σu ∈ Tu⋆ : Mu[σu &gt; Ms}
or equivalently, SSM (Nj ) = U R(SEM (Nj )).
Intuitively, for a given node Ns of the state observer,
after the observation of the word ω, the set SEM (Ns) ∪
SSM (Ns) represents the set of markings that are
consistent with the current observed word (i.e., C(ω)). The
other nodes can be computed recursively as explained in
the following.</p>
      <p>1. The state observer starts in the initial state y0
and its associated initial node N0 is composed of
SEM (N0) = {M0} and SSM (N0) = U R(M0).
2. as soon as a label ak (associated with an observable
transition tk ∈ To) is observed a new state yl of the
observer is calculated yielding a new node Nl:
• the set of entry markings of node Nl is
obtained by investigating the set of markings
resulting from the firin of transition tk
starting from any marking (SEM ∪ SSM ) of</p>
      <p>N0,
• the set of shadow markings of Nl corresponds
to the set of markings obtained by the firin
of all unobservable sequences of transitions
starting from any entry marking of Nl,
3. return to 2 with the newly calculated state as the
initial state.</p>
      <p>Definitio 10 Let Ni and Nj be two nodes of the state
observer, Ni and Nj are said to be equivalent (Ni ⇔ Nj )
if and only if:
SEM (Ni) = SEM (Nj ) and SSM (Ni) = SSM (Nj ).
Proposition 1 Two nodes Ni and Nj of the state observer
will be equivalent if and only if, the following holds:
SEM (Ni) = SEM (Nj ).</p>
      <p>Definitio 11 Given a marking Mi ∈ R(N, M0) and a
transition tf ∈ To (associated with a label lf ∈ Ω, i.e.,
LM(tf ) = lf ), the set of candidate sequences denoted
CS(Mi, tf ) is the set of firin sequences, composed of
the unique fina observable transition tf , which can occur
from Mi, i.e.:
CS(Mi, tf ) = {s.tf |s ∈ Tu⋆ ∪ λ, tf ∈ To : Mi[s.tf &gt;}.
With respect to the timing constraints to be satisfied
candidate sequences can be in the state possible or
impossible.</p>
      <p>
        As Nu∠Tu N (i.e., the Petri net induced by the set of
unobservable transitions) is not Zeno by assumption, it
is ensured that the time is diverging with regard to the
length of the firin sequences, thus, the set of candidate
sequences from a marking is necessarily finit (at the
instant of observation) and it can be investigated. The
following section addresses the schedulability analysis
(
        <xref ref-type="bibr" rid="ref4 ref5">Bonhomme (2013</xref>
        b)) of an occurrence sequence (i.e., a
procedure verifying if the considered firin sequence can
occur without any violation of timing constraints) and its
application to the estimation problem.
      </p>
    </sec>
    <sec id="sec-10">
      <title>5. SCHEDULABILITY ANALYSIS AND</title>
    </sec>
    <sec id="sec-11">
      <title>ESTIMATION</title>
      <p>
        Let σ = tatbtc . . . tq be a firin sequence of length s
(denoted |σ| = s). The jth fire transition of σ will
be associated with the jth firin instant (
        <xref ref-type="bibr" rid="ref4 ref5">Bonhomme
(2013</xref>
        a)). A variable xi will represent the elapsed time
between the (i − 1)th firin instant and the ith one (with
x0 = 0).
      </p>
      <p>For instance on Figure 3, (x2 + x3) is the time elapsed
between the firs firin instant (associated with transition
ta) and the third one (transition tc).</p>
      <p>firing of ta firing of tb
firing of tc</p>
      <p>firing of tq
x1
x2
x3</p>
      <p>In a P-TPN, the sojourn time (i.e., the amount of time
that a token has been waiting in a place) is counted up
as soon as the token has been dropped in the place as seen
previously. To compute the firin instants, this approach
requires that a token is identifie by three parameters:
the place that contains it, the information of its creation
instant and of its consumption one.</p>
      <p>Function T OK is define with this purpose assuming that
a FIFO queuing policy in the net is used in the sequel:
T OK:N × (N \ {0}) × T ⋆ → ℘(P )),
T OK(j, n, σ) = {p ∈ P |p contains a token created by
the jth firin instant and consumed by the nth one in firin
sequence σ}.</p>
      <p>With ℘(P ) the set of subsets of P (also noted 2P ).
When it is clear from the context σ will be omitted in the
notation of T OK(.).</p>
      <p>When the weight of the P-TPN arcs is element of N,
T OK(j, n) is a multi-set. For the sake of simplicity,
only ordinary P-TPN are considered (the arcs weight are
element of {0, 1}).</p>
      <p>Tokens, with the same creation instant, located in different
places and involved in the same transition firin may
mutually constrained their sojourn time, the following
quantities, Dsmin and Dsmax, are introduced in order
to evaluate the contribution of these tokens. So, Dsmin
represents their availability in order to participate to this
firin and similarly, Dsmax expresses the fact that they
all must be prevented from dying (with [ai, bi] the static
interval associated with the place pi).</p>
      <p>Dsmin(j, n) =
Dsmax(j, n) =
emlsaex0(aifi)T, Oi K|p(ji,n∈)T=OK∅ (j, n) ,
emlsine (+bi)∞, iif|TpOi∈K(TjO,nK)(=j, n∅) .</p>
      <p>The definitio of the following set SEN (q), allowing to
determine the creation instants of tokens involved in the
qth firin instant, is also necessary:</p>
      <p>SEN (q) = {u|T OK(u, q) ⊂ ( °tq)}
To express more simply the obtained results, the definitio
of the following coefficient is required:
cuq =
djk =
0Dsmin(u, q) ieflsue ∈ SEN (q) ,
Dsmax(j, k) if T OK(j, k) 6= ∅
+∞ else
With, ∀(j, k) ∈ [0, q − 1] × [1, q], j ∈/ SEN (q) and k 6=
q, then cjk = 0, and ∀k ∈ [0, q], xk ≥ 0.</p>
      <p>The following proposition is finall obtained:
Proposition 2 A sequence of transitions σ = t1t2....tq
is schedulable (i.e., it may be fi ed respectively at firin
instants 1, 2, . . . , q) if and only if there exist x1 ≥ 0,
x2 ≥ 0,..., xq ≥ 0 such that:
j
q
 c0k ≤ x1 ≤ d0k, k = 1, ..., n
 k=m2,a..x.,n (c0k, c1k + x1) ≤ x1 + x2 ≤ k=m2,i.n..,n (d0k, d1k + x1)
 . . .
In the sequel this system will be denoted as Sσ(q) or
simply Sσ when it is clear from the context.</p>
      <p>Definitio 12 The firin space at the qth firin instant,
associated with a firin sequence σ, denoted by F Sσ(q)
is the set of non negative vectors (x1, ..., xq) such that
the fi st, the second, . . . and the qth firin conditions
are satisfied Thus, a firin sequence σ = t1t2....tq
is schedulable if and only if its associated firin space
F Sσ(q) is non-empty.</p>
      <p>
        Thanks to this characterization of a firin sequence, the
Zenoness property can be checked by evaluating the
minimal duration of the circuit of unobservable transitions
under consideration (for instance, by minimizing the sum
of the xi associated with the considered transitions).
Definitio 13 A P-TLPN Nr firin schedule, will be a
i
sequence of ordered pairs (ti, P xk) ; transition ti
k=0
i
fi able at time ( P xk), obtained from the state reached
k=0
by starting from Nr initial state and firin the transitions
tj , 1 ≤ j &lt; i, in the schedule at the given times.
Finally, as in (
        <xref ref-type="bibr" rid="ref1">Basile et al. (2015)</xref>
        ), let denote:
ωt = ((a1, τ1), (a2, τ2) . . . (an, τn)) ∈ (Ω × Q+)⋆,
a time-label sequence (TLS), i.e., a sequence of pairs
(observed label-time instant).
      </p>
      <p>Indeed, in the considered sequence, label ai is observed at
absolute time τi (i ≥ 1) and τ1 ≤ τ2 . . . ≤ τn.</p>
      <p>Now all the required material for the proposed method is
given, the principle is presented as follows:
• starting from the initial state, once a label af will be
observed at the absolute time τf ,
• the set of associated observable event Taf
{t ∈ To|LM(t) = af } will be evaluated,
=
• then, ∀tf ∈ Taf the set of feasible candidate
sequences CS(M0, tf ) will be computed,
• a switch from node N0 to node Nf (created by
the observation of label af ) is realized in the state
observer,
• for each σf ∈ CS(M0, tf ) (with Po(σf ) = tf ) the
associated linear system Sσf will be constructed,
• and each σf will be checked for schedulability with
the following additional constraint:</p>
      <p>P|iσ=f0| xi = τf .</p>
      <p>Thanks to these considerations it is ensured that sequence
σf is schedulable and the firin of tf occurs at τf . Once a
firin sequence is proved to be possible the set of markings
the system can be in is then determined.</p>
      <p>Let denote by F EAS(N0, tf ) the set of schedulable
firin sequences from node N0 ending with the unique
observable transition tf (it is a subset of the set of
candidate sequences).</p>
      <p>F EAS(N0, tf ) = {σ ∈ CS(M0, tf )|F Sσ(|σ|)
augmented with P|iσ=|0 xi = τf is non-emptyo.
Furthermore, based on the knowledge of the schedulable
candidate firin sequences only a subset of the set of
entry markings of node Nf (resulting from the firin of
transition tf ), denoted SEM ′(Nf ), will be considered for
the next step.</p>
      <p>It holds:
SEM ′(Nf ) = {M ∈ SEM (Nf )|M0[σ &gt; M,
σ ∈ F EAS(N0, tf )}.</p>
      <p>With SEM ′(Nf ) ⊆ SEM (Nf ).</p>
      <p>Afterwards, if another label ax is observed at absolute
time τx then:
• The set of associated observable event Tax =
{t ∈ To|LM(t) = ax} will be evaluated,
• then, ∀tx ∈ Tax the set of feasible candidate
sequences CS(Mi, tx) will be computed with Mi ∈
SEM ′(Nf ),
• a switch from node Nf to node Nx is realized in the
state observer,
• for each feasible firin sequence (on the underlying
untimed PN) σf′ σx (i.e., M0[σf′ σx &gt;) with
σx ∈ CS(Mi, tx) and σf′ ∈ F EAS(N0, tf ) the
associated linear system Sσf′ σx will be constructed.</p>
      <sec id="sec-11-1">
        <title>It is recalled that σf′ is a schedulable firin sequence</title>
        <p>determined in the previous step with label af
observed at τf and Po(σf′ σx) = tf tx.
• each previously determined σf′ σx will be checked
for schedulability with the following additional
constraint:</p>
        <p>P|iσ=f′0|+|σx| xi = τx.
ensuring that the firin of tx occurs at τx.</p>
        <p>And so on, the same method is iteratively applied with
respect to the current observation.</p>
        <p>So, more formally the following principle is obtained:
let ωobs be an observed word (i.e., a sequence of labels
ωobs = a1a2a3 . . . aiai+1 . . . ∈ Ω⋆) and let Ni (i ≥ 1)
be the node of the associated state observer obtained after
the observation of label ai ∈ ωobs detected at absolute
time τi, as illustrated on the following figur (Figure 4).</p>
        <p>N0</p>
        <p>N1</p>
        <p>N2
a1
a2</p>
        <p>Ni
.... ai</p>
        <p>P|k̟=|0 xk = τi+1 is non-emptyo.</p>
        <p>With firin sequence ̟
F EAS(Ns−1, ts), s ∈
t1t2t3 . . . titi+1.</p>
        <p>More precisely:
= σ1σ2 . . . σiσ where σs ∈</p>
        <p>{1, . . . , i} and Po(̟) =
Po(σj ) = tj , j ∈ {1, . . . , i} with LM(tj ) = aj .
SEM ′(Ni+1) = {M ∈ SEM (Ni+1)|Mk[σ &gt; M,
σ ∈ F EAS(Ni, ti+1), Mk ∈ SEM (Ni)}.</p>
        <sec id="sec-11-1-1">
          <title>SEM ′(Ni) is the set of entry markings of node Ni</title>
          <p>resulting from the firin of schedulable firin sequences
with respect to the current observation.</p>
          <p>Roughly speaking, F EAS(Ni, tk) is the set of candidate
sequences of node Ni ending with tk and which
can be completed by schedulable sub-sequences into
a schedulable firin sequence starting from the initial
marking of the P-TLPN considered.</p>
          <p>So, by this way it is ensured that the feasible
firin sequences associated with the observed
timelabel sequence ((a1, τ1), (a2, τ2) . . . (ai+1, τi+1)) are
effectively computed.</p>
          <p>In the next section, addressing the fault diagnosis problem
of a P-TLPN system, this set will be used to evaluate the
state diagnosis associated with an observed TLS.</p>
        </sec>
      </sec>
    </sec>
    <sec id="sec-12">
      <title>6. FAULT DIAGNOSIS</title>
      <p>The set of unobservable transitions is partitioned into two
subsets, Tu = Tf ∪ Treg where the set Tf includes all the
fault transitions (modeling anomalous or faulty behavior)
while Treg includes all unobservable transitions which
correspond to regular events. Furthermore, the set Tf is
partitioned into r different subsets Tfi , where i = 1, . . . , r,
that models the different fault classes.</p>
      <p>Definitio 14 Let hN ; M0i be a net system with labeling
function LM : T → Ω S {ǫ} , where N =
(P, T, P re, P ost) and T = To ∪ Tu. Let consider the TLS
ωt = ((a1, τ1), (a2, τ2) . . . (an, τn)) associated with the
state observer of Figure 4.</p>
      <p>Let define
P(M0, ωt) = {σ ∈ T ⋆|M0[σ &gt;, σ = σ1σ2 . . . σn :
LM(σi) = ai, i = 1, . . . , n, σs ∈ F EAS(Ns−1, ts),
LM(ts) = as, s = 1, . . . , n}
Indeed, σ can be viewed as a concatenation of
subsequences, namely σi, i ≥ 1. Each subsequence σi is
of the form s.ti with s ∈ Tu⋆, LM(ti) = ai and absolute
firin instant of ti is τi.</p>
      <p>So, it holds:
σi ∈ CS(Mb, ti) with Mb ∈ SEM ′(Ni−1).</p>
      <p>Definitio 15 A diagnoser is a function
Γ : [Ω × Q+]⋆ × Tf1, Tf2, . . . , Tfr
→ {N, U, F }
that associates with each observed time-label sequence ωt
and each fault class Tfi , where i = 1, . . . , r, a diagnosis
state.</p>
      <p>• Γ(ωt, Tfi ) = N if ∀σ ∈ P(M0, ωt) and ∀tf ∈ T i ,
f
it is tf ∈/ σ.</p>
      <p>In such a case the ith fault cannot have occurred,
because none of the firin sequences consistent
with the considered observation contains a fault
transition of class i.
• Γ(ωt, Tfi ) = U if:
1. ∃σ ∈
tf ∈ σ,</p>
      <sec id="sec-12-1">
        <title>P(M0, ωt) and tf ∈ Tfi such that</title>
        <p>2. ∃σ′ ∈ P(M0, ωt) such that ∀tf ∈ Tfi , it is
tf ∈/ σ′.</p>
        <p>In such a case a fault transition of class i may
have occurred or not, the diagnosis is in this case,
uncertain.
• Γ(ωt, Tfi ) = F if ∀σ ∈ P(M0, ωt), ∃tf ∈ Tfi such
that tf ∈ σ.</p>
        <p>In such a case the fault of class i must have
occurred, because all firabl sequences consistent
with the considered observation contains at least
one fault transition of class i.</p>
        <p>Let consider the P-TLPN of Figure1 with Tu =
{t4, t5, t6, t7}, To = {t1, t2, t3}, Ω = {a, b}. It holds
LM(t1) = a, LM(t2) = LM(t3) = b (transitions t2
and t3 are indistinguishable). Furthermore, Tf1 = {t5} and
Tf2 = {t7}, i.e., there are two fault classes.</p>
        <p>N0</p>
        <p>SEM
[10000]</p>
        <p>b
P(M0, ωt) = {ω1, ω2} with ω1 = t4t1t2 and ω2 =
t4t1t6t7t3.</p>
        <p>We have (according to the notations of definitio 14):
• ω1 = σ1σ2 with σ1 = t4t1 and σ2 = t2,
• ω2 = σ1σ2 with σ1 = t4t1 and σ2 = t6t7t3.
The two obtained candidate sequences are feasible
with regard to the timing constraints. Indeed, the
two associated firin schedules can be, for instance,
considered respectively for ω1 and ω2:
• ((t4, 1), (t1, 2), (t2, 5)),
• ((t4, 1), (t1, 2), (t6, 2), (t7, 3), (t3, 5)).</p>
        <p>It holds t7 ∈ Tf2 and t7 ∈ ω2 (t7 ∈/ ω1), and t5 ∈ T 1,
f
t5 ∈/ ω1, t5 ∈/ ω2.</p>
        <p>So, Γ(ωt, Tf1) = N and Γ(ωt, Tf2) = U .</p>
        <p>It means, that according to the previous observed time
label sequence ωt, it is known for sure that the fault of
class 1 (corresponding to fault transition t5) cannot have
occurred while fault transition t7 ∈ Tf2 may have occurred
(via ω2).</p>
        <p>If the observed TLS corresponds to ωt = (b, 1), it is
easy to verify that P(M0, ωt) = {ω3} with ω3 = t5t2
(the associated firin schedule is ((t5, 1), (t2, 1))) and
consequently, Γ(ωt, Tf1) = F and Γ(ωt, Tf2) = N (i.e., a
fault of class Tf1 occurs for sure and a fault of the second
class cannot have occurred).</p>
        <p>In the next section an illustrative example is presented
where the Tu-induced subnet is cyclic.</p>
      </sec>
    </sec>
    <sec id="sec-13">
      <title>7. ILLUSTRATIVE EXAMPLE</title>
      <p>Let consider the P-TLPN of Figure 6 with To = {t2, t5},
Tu = {t1, t3, t4, t6, t7}, Tf = {t6} and LM(t2) =
a, LM(t5) = b. The Tu-induced subnet contains the cycle
(p3 − t4 − p4 − t6 − p3).
The state observer is depicted on Figure 7, it consists of
three nodes X0, X1 and X2.
If the observed word is ω = (a, b) then the set of possible
associated firin sequences is of the form t1t2t4(t6t4)⋆t5
with the ⋆ after the subsequence (t6t4) (derived from the
t4
Kleene star operator) indicating that it is allowed to occur
from zero time to infinitel . Thanks to the time instant
of occurrence of each label the set of feasible associated
firin sequences is necessarily finite
For instance if the TLS considered is:
ωt = ((a, 3), (b, 6)) then P(M0, ωt) = {ω1} with
ω1 = t1t2t4t5. The associated firin space F Sω1 (|ω1|)
augmented with the following constraints:
• x1 +x2 = 3 (absolute firin instant of transition t2),
• x1 + x2 + x3 + x4 = 6 (absolute firin instant of
transition t5),
is non-empty.</p>
      <p>It holds:
ω1 = σ1σ2 with σ1 = t1t2 and σ2 = t4t5 and an example
of firin schedule is:
̟ = ((t1, 1), (t2, 3), (t4, 5), (t5, 6)),
and it is unique with respect to the static intervals of the
P-TLPN places. So, it is easy to see that Γ(ωt, Tf ) = N
and the faulty transition t6 cannot have occurred.
If the TLS considered is now: ωt = ((a, 3), (b, 9)) then
Γ(ωt, Tf ) = U , as the computation of the set P(M0, ωt)
leads to the following possible firin schedules (with the
same observable projection), one containing the faulty
transition and the other one not:
• ̟1 = ((t1, 1), (t2, 3), (t4, 5), (t5, 9)),
• ̟2 = ((t1, 1), (t2, 3), (t4, 5), (t6, 6), (t4, 8),
(t5, 9)).</p>
      <p>(t2, 14)).</p>
      <p>If the TLS considered is now: ωt = ((a, 3), (a, 14))
then Γ(ωt, Tf ) = F . Indeed, the computation of the set
P(M0, ωt) leads to the following possible firin schedule
containing the faulty transition:</p>
      <p>• ̟2 = ((t1, 1), (t2, 3), (t4, 5), (t6, 10), (t3, 12),
In this case the faulty transition occurs with certainty
thanks to the timing structure of the P-TLPN considered
and the occurrence date of the observed labels.</p>
    </sec>
    <sec id="sec-14">
      <title>8. CONCLUSION AND PERSPECTIVES</title>
      <p>In this paper, a new methodology allowing to analyze
the fault diagnosis of systems modeled by P-time labeled
Petri nets is developed. It is based on the construction of
a function called diagnoser which associates with each
observation and each fault class a diagnosis state. This
diagnoser is obtained thanks to the synthesis of a state
observer which is an automaton allowing to estimate the
set of markings in which the system may be, being given
a sequence of observed labels.</p>
      <p>Furthermore, the considered state observer is computed
on the basis of the untimed underlying Petri net of the
P-time labeled PN considered. This particularity allows
to avoid the combinatorial state space explosion problem
usually associated with the consideration of the time
factor modeled as time intervals.</p>
      <p>Thanks to a schedulability analysis technique, the
feasibility of the candidate firin sequences associated
with the observed time-label sequence is evaluated via
linear programming techniques.</p>
      <p>An issue currently being investigated is the extension of
the method to test the diagnosability property of P-TLPN
systems, i.e., is the fault can be detected within a finit
number of steps after its occurrence ?</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          <string-name>
            <surname>Basile</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Cabasino</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Seatzu</surname>
          </string-name>
          (
          <year>2015</year>
          , April).
          <article-title>State estimation and fault diagnosis of labeled time petri net systems with unobservable transitions</article-title>
          .
          <source>Automatic Control, IEEE Transactions on 60(4)</source>
          ,
          <fpage>997</fpage>
          -
          <lpage>1009</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          <string-name>
            <surname>Basile</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>M. P.</given-names>
            <surname>Cabasino</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Seatzu</surname>
          </string-name>
          (
          <year>2013</year>
          ).
          <article-title>Marking estimation of time Petri nets with unobservable transitions</article-title>
          .
          <source>In IEEE Emerging Technologies and Factory Automation (ETFA)</source>
          , pp.
          <fpage>1</fpage>
          -
          <lpage>7</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          <string-name>
            <surname>Berthomieu</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          and
          <string-name>
            <surname>M. Diaz</surname>
          </string-name>
          (
          <year>1991</year>
          , March).
          <article-title>Modeling and verificatio of time dependent systems using time petri nets</article-title>
          .
          <source>IEEE Trans. Softw. Eng</source>
          .
          <volume>17</volume>
          (
          <issue>3</issue>
          ),
          <fpage>259</fpage>
          -
          <lpage>273</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          <string-name>
            <surname>Bonhomme</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>2013a</year>
          ).
          <article-title>Scheduling and control of realtime systems based on a token player approach</article-title>
          .
          <source>Journal of Discrete Event Dynamic Systems</source>
          <volume>23</volume>
          (
          <issue>2</issue>
          ),
          <fpage>197</fpage>
          -
          <lpage>209</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          <string-name>
            <surname>Bonhomme</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>2013b</year>
          ).
          <article-title>Towards a new schedulability technique of real-time systems modeled by p-time Petri nets</article-title>
          .
          <source>International Journal of Advanced Manufacturing Technology</source>
          <volume>67</volume>
          (
          <issue>1-4</issue>
          ),
          <fpage>759</fpage>
          -
          <lpage>769</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          <string-name>
            <surname>Bonhomme</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>2014</year>
          ).
          <article-title>Estimation of p-time labeled petri nets with unobservable transitions</article-title>
          .
          <source>In Proceedings of the 2014 IEEE Emerging Technology and Factory Automation</source>
          ,
          <string-name>
            <surname>ETFA</surname>
          </string-name>
          <year>2014</year>
          , Barcelona, Spain,
          <source>September 16-19</source>
          ,
          <year>2014</year>
          , pp.
          <fpage>1</fpage>
          -
          <lpage>8</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          <string-name>
            <surname>Bonhomme</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>2015</year>
          ).
          <article-title>Marking estimation of P-time Petri nets with unobservable transitions</article-title>
          .
          <source>IEEE Transactions on Systems, Man, and Cybernetics: Systems</source>
          <volume>45</volume>
          (
          <issue>3</issue>
          ),
          <fpage>508</fpage>
          -
          <lpage>518</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          <string-name>
            <surname>Cabasino</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Giua</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Seatzu</surname>
          </string-name>
          (
          <year>2010</year>
          ).
          <article-title>Fault detection for discrete event systems using Petri nets with unobservable transitions</article-title>
          .
          <source>Automatica</source>
          <volume>46</volume>
          (
          <issue>9</issue>
          ),
          <fpage>1531</fpage>
          -
          <lpage>1539</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          <string-name>
            <surname>Cabasino</surname>
            ,
            <given-names>M. P.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Giua</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Seatzu</surname>
          </string-name>
          (
          <year>2014</year>
          ).
          <article-title>Diagnosability of discrete event systems using labeled Petri nets</article-title>
          .
          <source>IEEE Transactions on Automation Science and Engineering</source>
          <volume>11</volume>
          (
          <issue>1</issue>
          ),
          <fpage>144</fpage>
          -
          <lpage>153</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          <string-name>
            <surname>Cassandras</surname>
            , C. G. and
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Lafortune</surname>
          </string-name>
          (
          <year>2008</year>
          ).
          <article-title>Introduction to Discrete Event Systems</article-title>
          . Springer-Verlag New York, Inc.
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          <string-name>
            <surname>Cassez</surname>
            , F. and
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Tripakis</surname>
          </string-name>
          (
          <year>2008</year>
          ).
          <article-title>Fault diagnosis with dynamic observers</article-title>
          .
          <source>In Discrete Event Systems</source>
          ,
          <year>2008</year>
          .
          <source>WODES</source>
          <year>2008</year>
          . 9th International Workshop on, pp.
          <fpage>212</fpage>
          -
          <lpage>217</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          <string-name>
            <surname>Giua</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Seatzu</surname>
          </string-name>
          , and
          <string-name>
            <given-names>D.</given-names>
            <surname>Corona</surname>
          </string-name>
          (
          <year>2007</year>
          ).
          <article-title>Marking estimation of Petri nets with silent transitions</article-title>
          .
          <source>IEEE Transactions on Automatic Control</source>
          <volume>52</volume>
          (
          <issue>9</issue>
          ),
          <fpage>1695</fpage>
          -
          <lpage>1699</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          <string-name>
            <surname>Hadjidj</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>H.</given-names>
            <surname>Boucheneb</surname>
          </string-name>
          , and
          <string-name>
            <given-names>D.</given-names>
            <surname>Hadjidj</surname>
          </string-name>
          (
          <year>2007</year>
          ).
          <article-title>Zenoness detection and timed model checking for real time systems</article-title>
          .
          <source>In VECoS'07</source>
          , pp.
          <fpage>120</fpage>
          -
          <lpage>134</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          <string-name>
            <surname>Khansa</surname>
            ,
            <given-names>W.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>J. P.</given-names>
            <surname>Denat</surname>
          </string-name>
          , and
          <string-name>
            <given-names>S.</given-names>
            <surname>Collart-Dutilleul</surname>
          </string-name>
          (
          <year>1996</year>
          ).
          <article-title>P-time Petri nets for manufacturing systems</article-title>
          .
          <source>In WODES'96</source>
          ,
          <string-name>
            <surname>Edinburgh</surname>
            <given-names>UK</given-names>
          </string-name>
          , pp.
          <fpage>94</fpage>
          -
          <lpage>102</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          <string-name>
            <surname>Lin</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          (
          <year>1994</year>
          ).
          <article-title>Diagnosability of discrete event systems and its applications</article-title>
          .
          <source>Discrete Event Dynamic Systems</source>
          <volume>4</volume>
          (
          <issue>2</issue>
          ),
          <fpage>197</fpage>
          -
          <lpage>212</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          <string-name>
            <surname>Merlin</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          and D.
          <string-name>
            <surname>Faber</surname>
          </string-name>
          (
          <year>1976</year>
          ).
          <article-title>Recoverability of communication protocols-implications of a theoretical study</article-title>
          .
          <source>IEEE Trans. Comm</source>
          .
          <volume>24</volume>
          (
          <issue>9</issue>
          ),
          <fpage>381</fpage>
          -
          <lpage>404</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          <string-name>
            <surname>Murata</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          (
          <year>1989</year>
          ).
          <article-title>Petri nets, properties, analysis and applications</article-title>
          .
          <source>Proceedings of the IEEE</source>
          <volume>77</volume>
          ,
          <fpage>541</fpage>
          -
          <lpage>580</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          <string-name>
            <surname>Sampath</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Sengupta</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Lafortune</surname>
          </string-name>
          ,
          <string-name>
            <given-names>K.</given-names>
            <surname>Sinnamohideen</surname>
          </string-name>
          , and
          <string-name>
            <given-names>D.</given-names>
            <surname>Teneketzis</surname>
          </string-name>
          (
          <year>1995</year>
          ).
          <article-title>Diagnosability of discrete-event systems</article-title>
          .
          <source>IEEE Transactions on Automatic Control</source>
          <volume>40</volume>
          (
          <issue>9</issue>
          ),
          <fpage>15551575</fpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          <string-name>
            <surname>Wang</surname>
            ,
            <given-names>X.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Mahulea</surname>
          </string-name>
          , and M.
          <string-name>
            <surname>Silva</surname>
          </string-name>
          (
          <year>2013</year>
          , 07/
          <year>2013</year>
          ).
          <article-title>Fault diagnosis graph of time petri nets</article-title>
          .
          <source>In ECC'13: European Control Conference</source>
          , Zurich, Switzerland.
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          <string-name>
            <surname>Wang</surname>
            ,
            <given-names>X.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Mahulea</surname>
          </string-name>
          , and M.
          <string-name>
            <surname>Silva</surname>
          </string-name>
          (
          <year>2014</year>
          ).
          <article-title>Model checking on fault diagnosis graph</article-title>
          .
          <source>In 12th International Workshop on Discrete Event Systems, WODES</source>
          <year>2014</year>
          , Cachan, France, May
          <volume>14</volume>
          -16,
          <year>2014</year>
          ., pp.
          <fpage>434</fpage>
          -
          <lpage>439</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          <string-name>
            <surname>Zaytoon</surname>
            , J. and
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Lafortune</surname>
          </string-name>
          (
          <year>2013</year>
          ).
          <article-title>Overview of fault diagnosis methods for discrete event systems</article-title>
          .
          <source>Annual Reviews in Control</source>
          <volume>37</volume>
          (
          <issue>2</issue>
          ),
          <fpage>308</fpage>
          -
          <lpage>320</lpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>