A formal methods approach to the analysis of mode confusion

Butler, Ricky W.; Miller, Steven P.; Potts, James; Carreno, Victor A.

doi:10.1109/dasc.1998.741497

Cited by 53 publications

(35 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, during the Apollo lunar landings of the late 1960s and early 1970s, astronauts relied on a handcarried laminated paper map and Mission Control to assist them in real-time traverse planning, considerably limiting their ability to cope with unexpected situations during some of the lunar EVAs [25]. In contrast, today's technology has the potential to provide future planetary explorers with far more powerful hardware and software tools for EVA planning and re-planning.…”

Section: Wearable Decision Support Tools and Integrated Displaysmentioning

confidence: 99%

“…In contrast, today's technology has the potential to provide future planetary explorers with far more powerful hardware and software tools for EVA planning and re-planning. For example, Carr et al [25] developed a wearable situational awareness terminal (WearSAT) that provides text, graphics and video to an astronaut via a near-eye display, with the terminal acting as client on an external wireless network away from the astronaut. This provides not only enhanced display capabilities but also access to considerable computational power from the network that would otherwise be difficult to implement on a spacesuit.…”

Section: Wearable Decision Support Tools and Integrated Displaysmentioning

confidence: 99%

See 1 more Smart Citation

Past, present and future implications of human supervisory control in space missions

2008

View full text Add to dashboard Cite

Achieving the United States' Vision for future Space Exploration will necessitate far greater collaboration between humans and automated technology than previous space initiatives. However, the development of methodologies to optimize this collaboration currently lags behind development of the technologies themselves, thus potentially decreasing mission safety, efficiency and probability of success. This paper discusses the human supervisory control (HSC) implications for use in space, and outlines several areas of current automated space technology in which the function allocation between humans and machines/automation is sub-optimal or under dispute, including automated spacecraft landings, Mission Control, and wearable extra-vehicular activity computers. Based on these case studies, we show that a more robust HSC research program will be crucial to achieving the Vision for Space Exploration, especially given the limited resources under which it must be accomplished.

show abstract

Section: Wearable Decision Support Tools and Integrated Displaysmentioning

confidence: 99%

Section: Wearable Decision Support Tools and Integrated Displaysmentioning

confidence: 99%

Past, present and future implications of human supervisory control in space missions

2008

View full text Add to dashboard Cite

show abstract

“…We have used the mode logic of a FGS as an example in several previous studies [7,22,33]. It is an excellent example because it is complex and representative of a class of problems frequently encountered in the design of embedded control systems.…”

Section: Overview Of a Flight Guidance Systemmentioning

confidence: 99%

A Case for Specification Validation

Heimdahl

2008

Verified Software: Theories, Tools, Experiments

View full text Add to dashboard Cite

Abstract. As we are moving from a traditional software development process to a new development paradigm where the process it largely driven by tools and automation, new challenges for verification and validation (V&V) emerge. Productivity improvements will in this new paradigm be achieved through reduced emphasis on testing of implementations, increased reliance on automated analysis tools applied in the specification domain, verifiability correct generation of source-code, and verifiably correct compilation. The V&V effort will now be largely focused on assuring that the formal specifications are correct and that the tools are trustworthy so we can rely on the results of the analysis and code generation without extensive additional testing of the resulting implementation. Most effort has traditionally been devoted to the verification problem. In this position paper we point out the importance of validation and argue that if we fail to adequately address the validation problem problem the impact of verifying code generation and compilation will be limited.

show abstract

“…Although the engineering psychology community has historically dominated research on humanautomation interaction, there have recently been efforts by the formal methods community [10,11,12,6,13] as well as systems and control communities [14,15] to address these safety-critical problems. Using model checkers, researchers in formal methods have evaluated such interfaces to identify design problems [10,11,16] for discrete state models.…”

Section: Introductionmentioning

confidence: 99%

“…Using model checkers, researchers in formal methods have evaluated such interfaces to identify design problems [10,11,16] for discrete state models. In [12,17,18], the authors were not only able to verify interfaces for a given task, but additionally formally determine the minimum set of information that must be displayed in the cockpit interface in order to safely complete a given maneuver.…”

Section: Introductionmentioning

confidence: 99%

Invariance-Preserving Abstractions of Hybrid Systems: Application to User Interface Design

Oishi

Mitchell

Bayen

et al. 2008

IEEE Trans. Contr. Syst. Technol.

View full text Add to dashboard Cite

Hybrid systems combine discrete state dynamics which model mode switching, with continuous state dynamics which model physical processes. Hybrid systems can be controlled by affecting both their discrete mode logic and continuous dynamics: in many systems, such as commercial aircraft, these can be controlled both automatically and using manual control. A human interacting with a hybrid system is often presented, through information displays, with a simplified representation of the underlying system. This user interface should not overwhelm the human with unnecessary information, and thus usually contains only a subset of information about the true system model, yet, if properly designed, represents an abstraction of the true system which the human is able to use to safely interact with the system. In safety-critical systems, correct and succinct interfaces are paramount: interfaces must provide adequate information and must not confuse the user. We present an invariance-preserving abstraction which 1 for hybrid human-automation systems. This abstraction is based on hybrid system reachability analysis, in which, through the use of a recently developed computational tool, we find controlled invariant regions satisfying a priori safety constraints for each mode, and the controller that must be applied on the boundaries of the computed sets to render the sets invariant. By assigning a discrete state to each computed invariant set, we create a discrete event system representation which reflects the safety properties of the hybrid system. This abstraction, along with the formulation of an interface model as a discrete event system, allows the use of discrete techniques for interface analysis, including existing interface verification and design methods.We apply the abstraction method to two examples: a car traveling through a yellow light at an intersection, and an aircraft autopilot in a landing/go-around maneuver.

show abstract

A formal methods approach to the analysis of mode confusion

Cited by 53 publications

References 2 publications

Past, present and future implications of human supervisory control in space missions

Past, present and future implications of human supervisory control in space missions

A Case for Specification Validation

Invariance-Preserving Abstractions of Hybrid Systems: Application to User Interface Design

Contact Info

Product

Resources

About