TLA \(^+\) Based Specification and Verification of a Team Formation Protocol with Message Loss
摘要
It has recently been proposed to formally specify a team formation protocol (TFP) using TLA \(^+\) where no messages are lost. In this paper, we consider the TFP where some reply messages are either lost in transit or received after a predetermined amount of time. We suggest a TLA \(^+\) specification for the general TFP with message loss. To capture the semantics of loss of messages, we introduce a new action. The TLC model checker has verified the protocol’s correctness for various model sizes.