Abstract:We study automatic synthesis of systems that interact with their environment and maintain privacy against an observer to the interaction. The system and the environment interact via sets $I$ and $O$ of input and output signals. The input to the synthesis problem contains, in addition to a specification, also a list of secrets, a function $cost: I\cup O\rightarrow\mathbb{N}$, which maps each signal to the cost of hiding it, and a bound $b\in\mathbb{N}$ on the budget that the system may use for hiding of signals. The desired output is an $(I/O)$-transducer $T$ and a set $H\subseteq I\cup O$ of signals that respects the bound on the budget, thus $\sum_{s\in H} cost(s)\leq b$, such that for every possible interaction of $T$, the generated computation satisfies the specification, yet an observer, from whom the signals in $H$ are hidden, cannot evaluate the secrets. We first show that the problem's complexity is 2EXPTIME-complete for specifications and secrets in LTL, making it no harder than synthesis without privacy requirements. We then analyze the complexity further, isolating the two aspects that do not exist in traditional synthesis: the need to hide secret values and the need to choose the set $H$. We do this by studying settings in which traditional synthesis is solvable in polynomial time -- when the specification formalism is deterministic automata and when the system is closed -- and show that each of these aspects adds an exponential blow-up in complexity. We continue and study bounded synthesis with privacy, where the input includes a bound on the synthesized transducer size, as well as a variant of the problem in which the observer has knowledge, either about the specification or about the system, which can be helpful in evaluating the secrets. Additionally, we study certified privacy, where the synthesis algorithm provides certification that the secrets remain hidden.

The Complexity of LTL Rational Synthesis

LTLf Synthesis with Fairness and Stability Assumptions

Reactive Synthesis Modulo Theories Using Abstraction Refinement

Towards Efficient Controller Synthesis Techniques for Logical LTL Games

LTL Reactive Synthesis with a Few Hints

Taming Large Bounds in Synthesis from Bounded-Liveness Specifications (Full Version)

Robustness-by-Construction Synthesis: Adapting to the Environment at Runtime

Synthesis from LTL with Reward Optimization in Sampled Oblivious Environments

Auditor Product and Controller Synthesis for Nondeterministic Transition Systems With Practical LTL Specifications

LTLf Synthesis Under Environment Specifications for Reachability and Safety Properties

Encodings of Bounded Synthesis

Synthesis from Recursive-Components Libraries

Fully Generalized Reactivity(1) Synthesis

Predictable and Performant Reactive Synthesis Modulo Theories via Functional Synthesis

Symbolic Solution of Emerson-Lei Games for Reactive Synthesis

Safraless Synthesis for Epistemic Temporal Specifications

Numerical LTL Synthesis for Cyber-Physical Systems

Translation of Temporal Logic for Efficient Infinite-State Reactive Synthesis (Full Version)

Minimizing Expected Cost Under Hard Boolean Constraints, with Applications to Quantitative Synthesis

Synthesis with Privacy Against an Observer

Synthesis of Distributed Control and Communication Schemes from Global LTL Specifications