This paper describes the application of the IVY workbench to the formal analysis of a user interface for a safetycritical aerospace system. The operations manual of the system was used as a requirements document and this made it possible to build a reference model of the user interface, focusing on navigation between displays, the information provided by each display and how they are interrelated. Usability related property specification patterns were then used to derive relevant properties for verification. This paper discusses both the modeling strategy and the analytical results found using the IVY workbench. The purpose of the reference model is to provide a standard against which future versions of the interface may be assessed. a senior researcher at HASLab/INESC TEC, in Braga, Portugal. His research focuses on the application of software engineering techniques and tools to the modeling and analysis of interactive systems, aiming at bringing closer the software engineering and human-computer interaction (HCI) fields. Besides leading the development of the IVY workbench, current and recent funded research includes applying model-based testing to user interfaces, prototyping ambience intelligence systems using virtual reality simulations, and reverse engineering user interfaces.