wt-avg_{m_{j+1}} N_{M_{j+1}}: j < p\ and\ j\ is\ even\
\end{cases}
where the term
is defined as follows:
where
is the probability taken over the random string
of length
. This expression is the average of
, weighted by the probability that the verifier sent message
.
Take
to be the empty message sequence, here we will show that
can be computed in polynomial space, and that
. First, to compute
, an algorithm can recursively calculate the values
for every j and
.
Since the depth of the recursion is p, only polynomial space is necessary. The second requirement is that we need
, the value needed to determine whether w is in A. We use induction to prove this as follows.
We must show that for every
and every
,
, and we will do this using induction on j. The base case is to prove for
. Then we will use induction to go from p down to 0.
The base case
is fairly simple. Since
is either accept or reject, if
is accept,
is defined to be 1 and Pr
accepts w starting at = 1 since the message stream indicates acceptance, thus the claim is true. If
is reject, the argument is very similar.
For the inductive hypothesis, we assume that for some
and any message sequence
,
and then prove the hypothesis for
and any message sequence
.
because the prover on the right-hand side could send the message
to maximize the expression on the left-hand side. And:
Since the same Prover cannot do any better than send that same message. Thus, this holds whether
is even or odd and the proof that
'''PSPACE''' is complete.
Here we have constructed a polynomial space machine that uses the best prover
for a particular string
in language
. We use this best prover in place of a prover with random input bits because we are able to try every set of random input bits in polynomial space.
Since we have simulated an interactive proof system with a polynomial space machine, we have shown that
'''PSPACE''', as desired.
In order to illustrate the technique that will be used to prove
, we will first prove a weaker theorem, which was proven by Lund, et al.:
. Then using the concepts
from this proof we will extend it to show that
. Since TQBF
PSPACE-Complete, and
then PSPACE
IP.
We begin by showing that
, where:
is a cnf-formula with exactly
satisfying assignments
.
Note that this is different from the normal definition of
#SAT , in that it is a decision problem, rather than a function.
First we use arithmetization to map the boolean formula with
variables,
to a polynomial
, where
mimics
in that
is 1 if
is true and 0 otherwise provided that the variables of
are assigned Boolean values. The Boolean operations
,
, and
used in
are simulated in
by replacing the operators in
as shown in the table below.
As an example,
would be converted into a polynomial as follows:
-
eg c
-
-
-
- b each result in a polynomial with a degree bounded by the sum of the degrees of the polynomials for and and hence, the degree of any variable is at most the length of .
Now let
be a finite field with order
; also demand that q be at least 1000. For each
, define a function
on F, having parameters
, and a single variable
: For
and for
let
. Note that the value of
is the number of satisfying assignments of
.
is a void function, with no variables.
Now the protocol for
works as follows:
- :
The prover choses a prime and computes , it then sends and to the verifier . checks that is a prime greater than and that .
- :
sends the coefficients of as a polynomial in z. verifies that the degree of is less than and that . (If not rejects). now sends a random number from to .
- :
sends the coefficients of as a polynomial in . verifies that the degree of is less than and that . (If not rejects). now sends a random number from to .
- :
evaluates to compare to the value . If they are equal accepts, otherwise rejects.
Note that this is a public-coin algorithm.
If
has
satisfying assignments, clearly
will accept. If
does not have
satisfying assignments we assume there is a prover
that tries to convince
that
does have
satisfying assignments. We show that this can only be done with low probability.