Source author record

Jean-Yves Le Boudec

Jean-Yves Le Boudec appears in the imported research catalog. Authorship, coauthor and topic links are available while profile ownership is still unclaimed.

ResearcherUnclaimed source record

Catalog footprint

What is connected

24works
14topics
4close collaborators

Actions

Connect this record

Log in to claim

Research graph

See the researcher in context

Open full explorer

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

24 published item(s)

preprint2022arXiv

A Palm Calculus Approach to the Distribution of the Age of Information

A key metric to express the timeliness of status updates in latency-sensitive networked systems is the age of information (AoI), i.e., the time elapsed since the generation of the last received informative status message. This metric allows studying a number of applications including updates of sensory and control information in cyber-physical systems and vehicular networks as well as, job and resource allocation in cloud clusters. State-of-the-art approaches to analyzing the AoI rely on queueing models that are composed of one or many queuing systems endowed with service order, e.g., FIFO, LIFO, or last-generated-first-out order. A major difficulty arising in these analysis methods is capturing the AoI under message reordering when the delivery is non-preemptive and non-FIFO, i.e., when messages can overtake each other and the reception of informative messages may obsolete some messages that are underway. In this paper, we derive an exact formulation for the distribution of AoI in non-preemptive, non-FIFO systems where the main ingredients of our analysis are Palm calculus and time inversion. Owing to the rationality of the Laplace-Stieltjes transforms that are used in our approach, we obtain computable exact expressions for the distribution of AoI.

preprint2022arXiv

Equivalent Versions of Total Flow Analysis

Total Flow Analysis (TFA) is a method for conducting the worst-case analysis of time sensitive networks without cyclic dependencies. In networks with cyclic dependencies, Fixed-Point TFA introduces artificial cuts, analyses the resulting cycle-free network with TFA, and iterates. If it converges, it does provide valid performance bounds. We show that the choice of the specific cuts used by Fixed-Point TFA does not affect its convergence nor the obtained performance bounds, and that it can be replaced by an alternative algorithm that does not use any cut at all, while still applying to cyclic dependencies.

preprint2022arXiv

The Stationary Behaviour of Fluid Limits of Reversible Processes is Concentrated on Stationary Points

Assume that a stochastic processes can be approximated, when some scale parameter gets large, by a fluid limit (also called "mean field limit", or "hydrodynamic limit"). A common practice, often called the "fixed point approximation" consists in approximating the stationary behaviour of the stochastic process by the stationary points of the fluid limit. It is known that this may be incorrect in general, as the stationary behaviour of the fluid limit may not be described by its stationary points. We show however that, if the stochastic process is reversible, the fixed point approximation is indeed valid. More precisely, we assume that the stochastic process converges to the fluid limit in distribution (hence in probability) at every fixed point in time. This assumption is very weak and holds for a large family of processes, among which many mean field and other interaction models. We show that the reversibility of the stochastic process implies that any limit point of its stationary distribution is concentrated on stationary points of the fluid limit. If the fluid limit has a unique stationary point, it is an approximation of the stationary distribution of the stochastic process.

preprint2022arXiv

Worst-case Delay Bounds in Time-Sensitive Networks with Packet Replication and Elimination

Packet replication and elimination functions are used by time-sensitive networks (as in the context of IEEE TSN and IETF DetNet) to increase the reliability of the network. Packets are replicated onto redundant paths by a replication function. Later the paths merge again and an elimination function removes the duplicates. This redundancy scheme has an effect on the timing behavior of time-sensitive networks and many challenges arise from conducting timing analyses. The replication can induce a burstiness increase along the paths of replicates, as well as packet mis-ordering that could increase the delays in the crossed bridges or routers. The induced packet mis-ordering could also negatively affect the interactions between the redundancy and scheduling mechanisms such as traffic regulators (as with per-flow regulators and interleaved regulators, implemented by TSN asynchronous traffic shaping). Using the network calculus framework, we provide a method of worst-case timing analysis for time-sensitive networks that implement redundancy mechanisms in the general use case, i.e., at end-devices and/or intermediate nodes. We first provide a network calculus toolbox for bounding the burstiness increase and the amount of reordering caused by the elimination function of duplicate packets. We then analyze the interactions with traffic regulators and show that their shaping-for-free property does not hold when placed after a packet elimination function. We provide a bound for the delay penalty when using per-flow regulators and prove that the penalty is not bounded with interleaved regulators. Finally, we use an industrial use-case to show the applicability and the benefits of our findings.

preprint2020arXiv

Interleaved Weighted Round-Robin: A Network Calculus Analysis

Weighted Round-Robin (WRR) is often used, due to its simplicity, for scheduling packets or tasks. With WRR, a number of packets equal to the weight allocated to a flow can be served consecutively, which leads to a bursty service. Interleaved Weighted Round-Robin (IWRR) is a variant that mitigates this effect. We are interested in finding bounds on worst-case delay obtained with IWRR. To this end, we use a network calculus approach and find a strict service curve for IWRR. The result is obtained using the pseudo-inverse of a function. We show that the strict service curve is the best obtainable one, and that delay bounds derived from it are tight (i.e., worst-case) for flows of packets of constant size. Furthermore, the IWRR strict service curve dominates the strict service curve for WRR that was previously published. We provide some numerical examples to illustrate the reduction in worst-case delays caused by IWRR compared to WRR.

preprint2020arXiv

On Time Synchronization Issues in Time-Sensitive Networks with Regulators and Nonideal Clocks

Flow reshaping is used in time-sensitive networks (as in the context of IEEE TSN and IETF Detnet) in order to reduce burstiness inside the network and to support the computation of guaranteed latency bounds. This is performed using per-flow regulators (such as the Token Bucket Filter) or interleaved regulators (as with IEEE TSN Asynchronous Traffic Shaping). Both types of regulators are beneficial as they cancel the increase of burstiness due to multiplexing inside the network. It was demonstrated, by using network calculus, that they do not increase the worst-case latency. However, the properties of regulators were established assuming that time is perfect in all network nodes. In reality, nodes use local, imperfect clocks. Time-sensitive networks exist in two flavours: (1) in non-synchronized networks, local clocks run independently at every node and their deviations are not controlled and (2) in synchronized networks, the deviations of local clocks are kept within very small bounds using for example a synchronization protocol (such as PTP) or a satellite based geo-positioning system (such as GPS). We revisit the properties of regulators in both cases. In non-synchronized networks, we show that ignoring the timing inaccuracies can lead to network instability due to unbounded delay in per-flow or interleaved regulators. We propose and analyze two methods (rate and burst cascade, and asynchronous dual arrival-curve method) for avoiding this problem. In synchronized networks, we show that there is no instability with per-flow regulators but, surprisingly, interleaved regulators can lead to instability. To establish these results, we develop a new framework that captures industrial requirements on clocks in both non-synchronized and synchronized networks, and we develop a toolbox that extends network calculus to account for clock imperfections.

preprint2020arXiv

Security Measures for Grids against Rank-1 Undetectable Time-Synchronization Attacks

Time-synchronization attacks on phasor measurement units (PMU) pose a real threat to smart grids; it was shown that they are feasible in practice and that they can have a non-negligible negative impact on the state estimation, without triggering the bad-data detection mechanisms. Previous works identified vulnerability conditions when targeted PMUs measure a single phasor. Yet, PMUs are capable of measuring several quantities. We present novel vulnerability conditions in the general case where PMUs measure any number of phasors and can share the same time reference. One is a sufficient condition that does not depend on the measurement values. We propose a security requirement that prevents it and provide a greedy offline algorithm that enforces it. If this security requirement is satisfied, there is still a possibility that the grid can be attacked, although we conjecture that it is very unlikely. We identify two sufficient and necessary vulnerability conditions which depend on the measurement values. For each, we provide a metric that shows the distance between the observed and vulnerability conditions. We recommend their monitoring for security. Numerical results, on the IEEE-39 bus benchmark with real load profiles, show that the measurements of a grid satisfying our security requirement are far from vulnerable.

preprint2019arXiv

Improved Credit Bounds for the Credit-Based Shaper in Time-Sensitive Networking

In Time-Sensitive Networking (TSN), it is important to formally prove per flow latency and backlog bounds. To this end, recent works apply network calculus and obtain latency bounds from service curves. The latency component of such service curves is directly derived from upper bounds on the values of the credit counters used by the Credit-Based Shaper (CBS), an essential building-block of TSN. In this paper, we derive and formally prove credit upper bounds for CBS, which improve on existing bounds.

preprint2019arXiv

Improved Delay Bound for a Service Curve Element with Known Transmission Rate

Network calculus is often used to prove delay bounds in deterministic networks, using arrival and service curves. We consider a FIFO system that offers a rate-latency service curve and where packet transmission occurs at line rate without pre-emption. The existing network calculus delay bounds take advantage of the service curve guarantee but not of the fact that transmission occurs at full line rate. In this letter, we provide a novel, improved delay bound which takes advantage of these two features. Contrary to existing bounds, ours is per-packet and depends on the packet length. We prove that it is tight.

preprint2019arXiv

TDOA Source-Localization Technique Robust to Timing Attacks

In this paper, we focus on the localization of a passive source from time difference of arrival (TDOA) measurements. TDOA values are computed with respect to pairs of fixed sensors that are required to be accurately time-synchronized. This constitutes a weakness as all synchronization techniques are vulnerable to delay injections. Attackers are able either to spoof the signal or to inject asymmetric delays in the communication channel. By nature, TDOA measurements are highly sensitive to time-synchronization offsets between sensors. Our first contribution is to show that timing attacks can severely affect the localization process. With a delay of a few microseconds injected on one sensor, the resulting estimate might be several kilometers away from the true location of the unknown source. We also show that residual analysis does not enable the detection and identification of timing attacks. Our second contribution is to propose a two-step TDOA-localization technique that is robust against timing attacks. It uses a known source to define a weight for each pair of sensors, reflecting the confidence in their time synchronization. Our solution then uses the weighted least-squares estimator with the newly created weights and the TDOA measurements received from the unknown source. As a result, our method either identifies the network as being too corrupt to localize, or gives a corrected estimate of the unknown position along with a confidence metric. Numerical results illustrate the performance of our technique.

preprint2016arXiv

AC OPF in Radial Distribution Networks - Parts I,II

The optimal power-flow problem (OPF) has played a key role in the planning and operation of power systems. Due to the non-linear nature of the AC power-flow equations, the OPF problem is known to be non-convex, therefore hard to solve. Most proposed methods for solving the OPF rely on approximations that render the problem convex, but that may yield inexact solutions. Recently, Farivar and Low proposed a method that is claimed to be exact for radial distribution systems, despite no apparent approximations. In our work, we show that it is, in fact, not exact. On one hand, there is a misinterpretation of the physical network model related to the ampacity constraint of the lines' current flows. On the other hand, the proof of the exactness of the proposed relaxation requires unrealistic assumptions related to the unboundedness of specific control variables. We also show that the extension of this approach to account for exact line models might provide physically infeasible solutions. Recently, several contributions have proposed OPF algorithms that rely on the use of the alternating-direction method of multipliers (ADMM). However, as we show in this work, there are cases for which the ADMM-based solution of the non-relaxed OPF problem fails to converge. To overcome the aforementioned limitations, we propose an algorithm for the solution of a non-approximated, non-convex OPF problem in radial distribution systems that is based on the method of multipliers, and on a primal decomposition of the OPF. This work is divided in two parts. In Part I, we specifically discuss the limitations of BFM and ADMM to solve the OPF problem. In Part II, we provide a centralized version and a distributed asynchronous version of the proposed OPF algorithm and we evaluate its performances using both small-scale electrical networks, as well as a modified IEEE 13-node test feeder.

preprint2016arXiv

Explicit Conditions on Existence and Uniqueness of Load-Flow Solutions in Distribution Networks

We present explicit sufficient conditions that guarantee the existence and uniqueness of the feasible load-flow solution for distribution networks with a generic topology (radial or meshed) modeled with positive sequence equivalents. In the problem, we also account for the presence of shunt elements. The conditions have low computational complexity and thus can be efficiently verified in a real system. Once the conditions are satisfied, the unique load-flow solution can be reached by a given fixed point iteration method of approximately linear complexity. Therefore, the proposed approach is of particular interest for modern active distribution network (ADN) setup in the context of real-time control. The theory has been confirmed through numerical experiments.

preprint2016arXiv

Real-Time Minimization of Average Error in the Presence of Uncertainty and Convexification of Feasible Sets

We consider a two-level discrete-time control framework with real-time constraints where a central controller issues setpoints to be implemented by local controllers. The local controllers implement the setpoints with some approximation and advertize a prediction of their constraints to the central controller. The local controllers might not be able to implement the setpoint exactly, due to prediction errors or because the central controller convexifies the problem for tractability. In this paper, we propose to compensate for these mismatches at the level of the local controller by using a variant of the error diffusion algorithm. We give conditions under which the minimal (convex) invariant set for the accumulated-error dynamics is bounded, and give a computational method to construct this set. This can be used to compute a bound on the accumulated error and hence establish convergence of the average error to zero. We illustrate the approach in the context of real-time control of electrical grids.

preprint2015arXiv

A Composable Method for Real-Time Control of Active Distribution Networks with Explicit Power Setpoints

The conventional approach for the control of distribution networks, in the presence of active generation and/or controllable loads and storage, involves a combination of both frequency and voltage regulation at different time scales. With the increased penetration of stochastic resources, distributed generation and demand response, this approach shows severe limitations in both the optimal and feasible operation of these networks, as well as in the aggregation of the network resources for upper-layer power systems. An alternative approach is to directly control the targeted grid by defining explicit and real-time setpoints for active/reactive power absorptions/injections defined by a solution of a specific optimization problem; but this quickly becomes intractable when systems get large or diverse. In this paper, we address this problem and propose a method for the explicit control of the grid status, based on a common abstract model characterized by the main property of being composable. That is to say, subsystems can be aggregated into virtual devices that hide their internal complexity. Thus the proposed method can easily cope with systems of any size or complexity. The framework is presented in this Part I, whilst in Part II we illustrate its application to a CIGRÉ low voltage benchmark microgrid. In particular, we provide implementation examples with respect to typical devices connected to distribution networks and evaluate of the performance and benefits of the proposed control framework.

preprint2015arXiv

Design of Resource Agents with Guaranteed Tracking Properties for Real-Time Control of Electrical Grids

We target the problem of controlling electrical microgrids with little inertia in real time. We consider a central controller and a number of resources, where each resource is either a load, a generator, or a combination thereof, like a battery. The controller periodically computes power setpoints for the resources based on the estimated state of the grid and an overall objective, and subject to safety constraints. Each resource is augmented with a resource agent that a) implements the setpoint requests sent by the controller on the resource, and b) translates device-specific information about the resource into a device-independent representation and transmits this to the controller. We focus on the resource agents and their impact on the overall system's behavior. Intuitively, for the system to converge to the objective, the resource agents should be obedient to the requests from the controller, in the sense that the actually implemented setpoint should be close to the requested setpoint, at least on average. This can be important especially when a controller that performs continuous optimization is used (for the sake of performance) to control discrete resources (which have a discrete set of implementable setpoints). We formalize obedience by defining the notion of $c$-bounded accumulated-error. We then demonstrate its usefulness, by presenting theoretical results (for a simple scenario) and simulation results (for a more realistic setting) that indicate that, if all resource agents in the system have bounded accumulated-error, the closed-loop system converges on average to the objective. Finally, we show how to design resource agents that provably have bounded accumulated-error for various types of resources, such as resources with uncertainty (e.g., PV panels) and resources with a discrete set of implementable setpoints (e.g., on-off heating systems).

preprint2014arXiv

Prolonging the Hide-and-Seek Game: Optimal Trajectory Privacy for Location-Based Services

Human mobility is highly predictable. Individuals tend to only visit a few locations with high frequency, and to move among them in a certain sequence reflecting their habits and daily routine. This predictability has to be taken into account in the design of location privacy preserving mechanisms (LPPMs) in order to effectively protect users when they continuously expose their position to location-based services (LBSs). In this paper, we describe a method for creating LPPMs that are customized for a user's mobility profile taking into account privacy and quality of service requirements. By construction, our LPPMs take into account the sequential correlation across the user's exposed locations, providing the maximum possible trajectory privacy, i.e., privacy for the user's present location, as well as past and expected future locations. Moreover, our LPPMs are optimal against a strategic adversary, i.e., an attacker that implements the strongest inference attack knowing both the LPPM operation and the user's mobility profile. The optimality of the LPPMs in the context of trajectory privacy is a novel contribution, and it is achieved by formulating the LPPM design problem as a Bayesian Stackelberg game between the user and the adversary. An additional benefit of our formal approach is that the design parameters of the LPPM are chosen by the optimization algorithm.

preprint2013arXiv

Stability of a Stochastic Model for Demand-Response

We study the stability of a Markovian model of electricity production and consumption that incorporates production volatility due to renewables and uncertainty about actual demand versus planned production. We assume that the energy producer targets a fixed energy reserve, subject to ramp-up and ramp-down constraints, and that appliances are subject to demand-response signals and adjust their consumption to the available production by delaying their demand. When a constant fraction of the delayed demand vanishes over time, we show that the general state Markov chain characterizing the system is positive Harris and ergodic (i.e., delayed demand is bounded with high probability). However, when delayed demand increases by a constant fraction over time, we show that the Markov chain is non-positive (i.e., there exists a non-zero probability that delayed demand becomes unbounded). We exhibit Lyapunov functions to prove our claims. In addition, we provide examples of heating appliances that, when delayed, have energy requirements corresponding to the two considered cases.

preprint2012arXiv

Comment on "Mixing beliefs among interacting agents"

We comment on the derivation of the main equation in the bounded confidence model of opinion dynamics. In the original work, the equation is derived using an ad-hoc counting method. We point that the original derivation does contain some small mistake. The mistake does not have a large qualitative impact, but it reveals the danger of the ad-hoc counting method. We show how a more systematic approach, which we call micro to macro, can avoid such mistakes, without adding any significant complexity.

preprint2012arXiv

Efficient Computation of Sensitivity Coefficients of Node Voltages and Line Currents in Unbalanced Radial Electrical Distribution Networks

The problem of optimal control of power distribution systems is becoming increasingly compelling due to the progressive penetration of distributed energy resources in this specific layer of the electrical infrastructure. Distribution systems are, indeed, experiencing significant changes in terms of operation philosophies that are often based on optimal control strategies relying on the computation of linearized dependencies between controlled (e.g. voltages, frequency in case of islanding operation) and control variables (e.g. power injections, transformers tap positions). As the implementation of these strategies in real-time controllers imposes stringent time constraints, the derivation of analytical dependency between controlled and control variables becomes a non-trivial task to be solved. With reference to optimal voltage and power flow controls, this paper aims at providing an analytical derivation of node voltage and line current flows as a function of the nodal power injections and transformers tap-changers positions. Compared to other approaches presented in the literature, the one proposed here is based on the use of the [Y] compound matrix of a generic multi-phase radial unbalanced network. In order to estimate the computational benefits of the proposed approach, the relevant improvements are also quantified versus traditional methods. The validation of the proposed method is carried out by using both IEEE 13 and 34 node test feeders. The paper finally shows the use of the proposed method for the problem of optimal voltage control applied to the IEEE 34 node test feeder.

preprint2012arXiv

On the Asymptotic Validity of the Decoupling Assumption for Analyzing 802.11 MAC Protocol

Performance evaluation of the 802.11 MAC protocol is classically based on the decoupling assumption, which hypothesizes that the backoff processes at different nodes are independent. This decoupling assumption results from mean field convergence and is generally true in transient regime in the asymptotic sense (when the number of wireless nodes tends to infinity), but, contrary to widespread belief, may not necessarily hold in stationary regime. The issue is often related with the existence and uniqueness of a solution to a fixed point equation; however, it was also recently shown that this condition is not sufficient; in contrast, a sufficient condition is a global stability property of the associated ordinary differential equation. In this paper, we give a simple condition that establishes the asymptotic validity of the decoupling assumption for the homogeneous case. We also discuss the heterogeneous and the differentiated service cases and formulate a new ordinary differential equation. We show that the uniqueness of a solution to the associated fixed point equation is not sufficient; we exhibit one case where the fixed point equation has a unique solution but the decoupling assumption is not valid in the asymptotic sense in stationary regime.

preprint2011arXiv

Mean field for Markov Decision Processes: from Discrete to Continuous Optimization

We study the convergence of Markov Decision Processes made of a large number of objects to optimization problems on ordinary differential equations (ODE). We show that the optimal reward of such a Markov Decision Process, satisfying a Bellman equation, converges to the solution of a continuous Hamilton-Jacobi-Bellman (HJB) equation based on the mean field approximation of the Markov Decision Process. We give bounds on the difference of the rewards, and a constructive algorithm for deriving an approximating solution to the Markov Decision Process from a solution of the HJB equations. We illustrate the method on three examples pertaining respectively to investment strategies, population dynamics control and scheduling in queues are developed. They are used to illustrate and justify the construction of the controlled ODE and to show the gain obtained by solving a continuous HJB equation rather than a large discrete Bellman equation.

preprint2011arXiv

On Mean Field Convergence and Stationary Regime

Assume that a family of stochastic processes on some Polish space $E$ converges to a deterministic process; the convergence is in distribution (hence in probability) at every fixed point in time. This assumption holds for a large family of processes, among which many mean field interaction models and is weaker than previously assumed. We show that any limit point of an invariant probability of the stochastic process is an invariant probability of the deterministic process. The results are valid in discrete and in continuous time.

preprint2011arXiv

The Bounded Confidence Model Of Opinion Dynamics

The bounded confidence model of opinion dynamics, introduced by Deffuant et al, is a stochastic model for the evolution of continuous-valued opinions within a finite group of peers. We prove that, as time goes to infinity, the opinions evolve globally into a random set of clusters too far apart to interact, and thereafter all opinions in every cluster converge to their barycenter. We then prove a mean-field limit result, propagation of chaos: as the number of peers goes to infinity in adequately started systems and time is rescaled accordingly, the opinion processes converge to i.i.d. nonlinear Markov (or McKean-Vlasov) processes; the limit opinion processes evolves as if under the influence of opinions drawn from its own instantaneous law, which are the unique solution of a nonlinear integro-differential equation of Kac type. This implies that the (random) empirical distribution processes converges to this (deterministic) solution. We then prove that, as time goes to infinity, this solution converges to a law concentrated on isolated opinions too far apart to interact, and identify sufficient conditions for the limit not to depend on the initial condition, and to be concentrated at a single opinion. Finally, we prove that if the equation has an initial condition with a density, then its solution has a density at all times, develop a numerical scheme for the corresponding functional equation, and show numerically that bifurcations may occur.

preprint2010arXiv

Selfish Response to Epidemic Propagation

An epidemic spreading in a network calls for a decision on the part of the network members: They should decide whether to protect themselves or not. Their decision depends on the trade-off between their perceived risk of being infected and the cost of being protected. The network members can make decisions repeatedly, based on information that they receive about the changing infection level in the network. We study the equilibrium states reached by a network whose members increase (resp. decrease) their security deployment when learning that the network infection is widespread (resp. limited). Our main finding is that the equilibrium level of infection increases as the learning rate of the members increases. We confirm this result in three scenarios for the behavior of the members: strictly rational cost minimizers, not strictly rational, and strictly rational but split into two response classes. In the first two cases, we completely characterize the stability and the domains of attraction of the equilibrium points, even though the first case leads to a differential inclusion. We validate our conclusions with simulations on human mobility traces.