// Israeli-Jalfon algorithm // dxp/gxn 10/06/02 // token of size 4 nondeterministic // variables to represent whether a process has a token or not // note they are global because they can be updated by other processes global q1 : [0..1]; global q2 : [0..1]; global q3 : [0..1]; global q4 : [0..1]; // module of process 1 module process1 [] (q1=1) -> 0.5 : (q1'=0) & (q4'=1) + 0.5 : (q1'=0) & (q2'=1); endmodule // add further processes through renaming module process2 =process1[q1=q2 ,q2=q3, q4=q1] endmodule module process3 =process1[q1=q3 ,q2=q4, q4=q2] endmodule module process4 =process1[q1=q4 ,q2=q1, q4=q3] endmodule // cost - 1 in each state (expected steps) rewards true : 1; endrewards // initial states (at least one token) init q1+q2+q3+q4>=1 endinit