Designing automation to reduce operator errors

Leveson, Nancy G.; Palmer, Everett

doi:10.1109/icsmc.1997.638104

Cited by 30 publications

(17 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…[14,33,34], for instance). Much of this work has focused on the search for specific topologies in the state diagram of the interface that can indicate the presence of serious faults such as mode confusion [25,29,38]. The problem of characterizing various forms of human error has been studied in detail by cognitive scientists and human factors experts [15,36].…”

Section: Related Work and Conclusionmentioning

confidence: 99%

Model-Based Dependability Analysis of Programmable Drug Infusion Pumps

Sankaranarayanan

Homaei

Lewis

2011

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Infusion pumps are commonly used in home/hospital care to inject drugs into a patient at programmable rates over time. However, in practice, a combination of faults including software errors, mechanical failures and human error can lead to catastrophic situations, causing death or serious harm to the patient. Dependability analysis techniques such as failure mode effect analysis (FMEA) can be used to predict the worst case outcomes of such faults and facilitate the development of remedies against them. In this paper, we present the use of model-checking to automate the dependability analysis of programmable, real-time medical devices. Our approach uses timed and hybrid automata to model the real-time operation of the medical device and its interactions with the care giver and the patient. Common failure modes arising from device failures and human error are modeled in our framework. Specifically, we use "mistake models" derived from human factor studies to model the effects of mistakes committed by the operator. We present a case-study involving an infusion pump used to manage pain through the infusion of analgesic drugs. The dynamics of analgesic drugs are modeled by empirically validated pharmacokinetic models. Using model checking, our technique can systematically explore numerous combinations of failures and characterize the worse case effects of these failures.

show abstract

Section: Related Work and Conclusionmentioning

confidence: 99%

Model-Based Dependability Analysis of Programmable Drug Infusion Pumps

Sankaranarayanan

Homaei

Lewis

2011

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…According to Equation (6) since w = Sel(Q green , W(q green )) andQ yellow = Sel(Q green , W(q yellow ), the transition relation iŝ R(w, δ) ∈ {wb 1 a 1 , wb 1 a 1 , wb 1 a 1 , wb 1 a 1 }. Now consider mode q yellow .…”

Section: Yellow Interval Examplementioning

confidence: 99%

“…2) Consider a generic state q k resultant from a string of k events. a) For any controlled or disturbance input σ for which R i (q k+1 , x, σ) = (q k , x), implementing the control law arising from the reachability calculation assures that (q k , x) ∈ W i −→ (q k+1 , x) ∈ W i , and equation (6) assures that this is reflected in the abstracted system G i , as well. According to the discrete transition function formed in equation (6), q k ∈ Sel(W i (q k ),Q q k ) implies that q k+1 ∈R(q 0 , σ) ∈ Sel(W i (q k+1 ),Q q k+1 ), so that the set of discrete modes corresponding to (q k+1 , x) are contained within the discrete representation of W i .…”

Section: A Appendixmentioning

confidence: 99%

“…Although the engineering psychology community has historically dominated research on humanautomation interaction, there have recently been efforts by the formal methods community [10,11,12,6,13] as well as systems and control communities [14,15] to address these safety-critical problems. Using model checkers, researchers in formal methods have evaluated such interfaces to identify design problems [10,11,16] for discrete state models.…”

Section: Introductionmentioning

confidence: 99%

“…Often complicated by the underlying dynamics of the physical system, human-automation interaction in aviation has been a controversial topic since the advent of computers and their integration into the cockpit [1, 2,3]. The aviation industry has experienced many incidents and some accidents in which the pilot became confused about the current mode or could not anticipate the next mode in the automation [4,5,6,7]. This potentially dangerous problem has been loosely termed mode confusion, and is often addressed in flight when the pilot has the time to devote attention to it, and resolved later with ad-hoc "fixes".…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Invariance-Preserving Abstractions of Hybrid Systems: Application to User Interface Design

Oishi

Mitchell

Bayen

et al. 2008

IEEE Trans. Contr. Syst. Technol.

View full text Add to dashboard Cite

Hybrid systems combine discrete state dynamics which model mode switching, with continuous state dynamics which model physical processes. Hybrid systems can be controlled by affecting both their discrete mode logic and continuous dynamics: in many systems, such as commercial aircraft, these can be controlled both automatically and using manual control. A human interacting with a hybrid system is often presented, through information displays, with a simplified representation of the underlying system. This user interface should not overwhelm the human with unnecessary information, and thus usually contains only a subset of information about the true system model, yet, if properly designed, represents an abstraction of the true system which the human is able to use to safely interact with the system. In safety-critical systems, correct and succinct interfaces are paramount: interfaces must provide adequate information and must not confuse the user. We present an invariance-preserving abstraction which 1 for hybrid human-automation systems. This abstraction is based on hybrid system reachability analysis, in which, through the use of a recently developed computational tool, we find controlled invariant regions satisfying a priori safety constraints for each mode, and the controller that must be applied on the boundaries of the computed sets to render the sets invariant. By assigning a discrete state to each computed invariant set, we create a discrete event system representation which reflects the safety properties of the hybrid system. This abstraction, along with the formulation of an interface model as a discrete event system, allows the use of discrete techniques for interface analysis, including existing interface verification and design methods.We apply the abstraction method to two examples: a car traveling through a yellow light at an intersection, and an aircraft autopilot in a landing/go-around maneuver.

show abstract

Analysing Mode Confusion: An Approach Using FDR2

Buth

2004

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Designing automation to reduce operator errors

Cited by 30 publications

References 9 publications

Model-Based Dependability Analysis of Programmable Drug Infusion Pumps

Model-Based Dependability Analysis of Programmable Drug Infusion Pumps

Invariance-Preserving Abstractions of Hybrid Systems: Application to User Interface Design

Analysing Mode Confusion: An Approach Using FDR2

Contact Info

Product

Resources

About