{"title":"Local Verification of Current-State Opacity and Static-State Opacity in Distributed Discrete-Event Systems","authors":"Yin Tong;Kai Cai","doi":"10.1109/TAC.2026.3695799","DOIUrl":null,"url":null,"abstract":"The integration of physical processes and cyber-networks in cyber-physical systems has made information security crucial, particularly in preventing unauthorized access and data leakage. Current-state opacity (CSO) in discrete-event systems (DESs) formalizes the security property that an intruder can never infer secret states based on its observation. This article addresses CSO and its verification in distributed DESs composed of multiple local systems. Existing methods of verifying CSO in distributed DESs either rely on sufficient conditions for local verification or require costly synchronization of local systems and observers. This article first proposes necessary and sufficient conditions for locally verifying CSO of distributed DESs, reducing the time complexity from <inline-formula><tex-math>$\\mathcal {O}(2^{n^{m}})$</tex-math></inline-formula> to <inline-formula><tex-math>$\\mathcal {O}(mn)$</tex-math></inline-formula>, where <inline-formula><tex-math>$m$</tex-math></inline-formula> is the number of local systems and <inline-formula><tex-math>$n$</tex-math></inline-formula> is the largest state number of local systems. We also introduce static-state opacity (SSO), a new information security notion for distributed systems characterizing intruders’ incapability to deduce global secrets from local ones. We show that SSO can be verified (necessarily and sufficiently) through a matrix involving CSO of local systems with a time complexity of <inline-formula><tex-math>$\\mathcal {O}(m2^{n})$</tex-math></inline-formula>. Furthermore, we explore the relationship between CSO and SSO, showing scenarios where they are equivalent.","PeriodicalId":13201,"journal":{"name":"IEEE Transactions on Automatic Control","volume":"71 10","pages":"6990-6997"},"PeriodicalIF":7.0000,"publicationDate":"2026-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Transactions on Automatic Control","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11533438/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"2026/3/21 0:00:00","PubModel":"Epub","JCR":"Q1","JCRName":"AUTOMATION & CONTROL SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
The integration of physical processes and cyber-networks in cyber-physical systems has made information security crucial, particularly in preventing unauthorized access and data leakage. Current-state opacity (CSO) in discrete-event systems (DESs) formalizes the security property that an intruder can never infer secret states based on its observation. This article addresses CSO and its verification in distributed DESs composed of multiple local systems. Existing methods of verifying CSO in distributed DESs either rely on sufficient conditions for local verification or require costly synchronization of local systems and observers. This article first proposes necessary and sufficient conditions for locally verifying CSO of distributed DESs, reducing the time complexity from $\mathcal {O}(2^{n^{m}})$ to $\mathcal {O}(mn)$, where $m$ is the number of local systems and $n$ is the largest state number of local systems. We also introduce static-state opacity (SSO), a new information security notion for distributed systems characterizing intruders’ incapability to deduce global secrets from local ones. We show that SSO can be verified (necessarily and sufficiently) through a matrix involving CSO of local systems with a time complexity of $\mathcal {O}(m2^{n})$. Furthermore, we explore the relationship between CSO and SSO, showing scenarios where they are equivalent.
期刊介绍:
In the IEEE Transactions on Automatic Control, the IEEE Control Systems Society publishes high-quality papers on the theory, design, and applications of control engineering. Two types of contributions are regularly considered:
1) Papers: Presentation of significant research, development, or application of control concepts.
2) Technical Notes and Correspondence: Brief technical notes, comments on published areas or established control topics, corrections to papers and notes published in the Transactions.
In addition, special papers (tutorials, surveys, and perspectives on the theory and applications of control systems topics) are solicited.