Commutativity-Based Locking for Nested Transactions

We present a new model for describing and reasoning about transaction-processing algorithms. The model provides a comprehensive, uniform framework for rigorous correctness proofs. The model generalizes previous work on concurrency control to encompass nested transactions and type-specific concurrency control algorithms. Using our model, we describe general conditions for a concurrency control algorithm to be correct—i.e., to ensure that transactions appear to be atomic. We also present a new concurrency control algorithm for abstract data types in a nested transaction system. The algorithm uses commutativity properties of operations to aflow high levels of concurrency. The results of operations, in addition to their names and argunnts, can be used in checking for conflicts, further increasing concurrency. We show, using our general model, that the new algorithm is correct. We also present a read-update locking algorithm due to Moss and prove it correct The correctness proofs for the algorithms are modular, in the sense that we consider a system structure consisting of many objects, with concurrency control and recovery performed independently at each object. We define a condition on individual objects, called dynamic a:omicUy, which has the property that as long as all objects in the system axe dynamic atomic, transactions will appear atomic. We then show that each algorithm, considered at a single object, ensures dynamic atomicity. This means that different algorithms can be used at different objects; as long as each ensures dynamic atomicity, global atomicity of transactions is guaranteed. The work of the first and second authors was supported in part by the Office of Naval Research under Contract N000t4-85-K-OlóS, by the National Science Foundation under Grant CCR-86l1442, and by the Defense Advanced Research Projects Agency (DARPA) under Contract N00014-83-K-0l25. The work of the fourth author was supported in part by the National Science Foundation under Grant CCR8716884, and by the Defense Advanced Research Projects Agency (DARPA) under Contract N000l4-83-K-0125.