Abstract
Command and control rooms are socio-technical systems that gather many devices and software of different types and aim at supporting groups of operators to manage missions and systems collaboratively. They include interactive systems, which particularly support operators in controlling the local or remote systems. These interactive systems are the very place where human–system integration can take place. It is thus important to design, develop, test, certify and deploy them very carefully. Moreover, designing these interactive systems requires addressing the needs of the group of users involved in common tasks for which communication, cooperation and production are mediated by computers. This paper proposes a model-based approach for the design and development of usable and reliable socio-technical interactive systems. This approach takes into account the sociotechnical aspects of the interactions between operators and systems in a command and control room. The paper presents the results of the application of the approach to the model-based development of collaborative applications for the management of collision risks between satellites and space objects.
Similar content being viewed by others
Data Availability
The HAMSTERS tool and the CIRCUS tool suite (which integrates the HAMSTERS and Petshop tools) are publicly available on the ICS tools webpage: https://www.irit.fr/ICS/tools/.
References
Albinsson, P.A., Zhai, S. High Precision Touch Screen Interaction. In: Proc. ACM CHI conference, pp. 105–11 (2003)
Arlat, J., Crouzet, Y. (2010). Physical fault models and fault tolerance. In: Wunderlich, H.J. (eds) Models in hardware testing. Frontiers in electronic testing, vol 43. Springer, Dordrecht. https://doi.org/10.1007/978-90-481-3282-9_8
Avizienis, A., Laprie, J.-C., Randell, B., Landwehr, C.: Basic concepts and taxonomy of dependable and secure computing. IEEE Trans. Depend. Secur. Comput. 1(1), 11–33 (2004)
Baarir, S., Braunstein, C., Clavel, R., Encrenaz, E., Ilié, J.-M., Leveugle, R., Mounier, I., Pierre, L., Poitrenaud, D.: Complementary formal approaches for dependability analysis. In: Proc international symposium on defect and fault tolerance in VLSI systems. IEEE Comput Soc, Los Alamitos, pp 331–339 (2009)
Barboni E., Ladry J-F., Navarre D., Palanque P., Winckler M.: Beyond modeling: an integrated environment supporting co-execution of tasks and systems models. EICS'10, 165–174
Basnyat, S., Chozos, N., Palanque, P.: Multidisciplinary perspective on accident investigation. Reliab. Eng. Syst. Saf. 91(12), 1502–1520 (2006)
Basnyat, S., Palanque, P., Schupp, B., Wright, P.: Formal socio-technical barrier modelling for safety-critical interactive systems design. Saf. Sci. 45(5), 545–565 (2007)
Bass, L., Little, R., Pellegrino, R., Reed, S., Seacord, R., Sheppard, S., Szezur, M. R.: The arch model: seeheim revisited. In User interface developpers’ workshop, vol. 15 (1991)
Beck, T., Schmidhuber, M., Scharringhausen, J.: Automation of complex operational scenarios—providing 24/7 inter-satellite links with EDRS, AIAA 2016–2417. In: SpaceOps 2016 Conferences, Daejeon,pp 16–20 (2016)
Bernhaupt, R., Cronel, M., Manciet, F. Martinie, C., Palanque, P.: Transparent automation for assessing and designing better interactions between operators and partly-autonomous interactive systems. In: Proceedings of the 5th International Conference on Application and Theory of Automation in Command and Control Systems (ATACCS '15). Association for Computing Machinery, New York, NY, USA, 129–139 (2015). https://doi.org/10.1145/2899361.2899375
Bouzekri, E., Canny, A., Fayollas, C., Martinie, C., Palanque, P., Barboni, E., Deleris, Y., Gris, C.: Engineering issues related to the development of a recommender system in a critical context: application to interactive cockpits. Int. J. Hum. Comput. Stud. 121, 122–141 (2019). ISSN 1071–5819. https://doi.org/10.1016/j.ijhcs.2018.05.001.
Broders, N., Martinie, C., Palanque, P., Winckler, M., Halunen, K.: A generic multimodels-based approach for the analysis of usability and security of authentication mechanisms. In: Bernhaupt, R., Ardito, C., Sauer, S. (eds) Human-centered software engineering. HCSE 2020. Lecture notes in computer science, 12481. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-64266-2_4
Canny A., Bouzekri E., Martinie C., Palanque P.: Rationalizing the need of architecture-driven testing of interactive systems. In: Bogdan C., Kuusinen K., Lárusdóttir M., Palanque P., Winckler M. (eds) Human-centered software engineering. HCSE 2018. Lecture notes in computer science, vol 11262. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-05909-5_10
Canny, A., Martinie, C., Navarre, D., Palanque, P., Barboni, E., Gris, C.: Engineering model-based software testing of WIMP interactive applications: a process based on formal models and the SQUAMATA tool. In: Proc. ACM Hum.-Comput. Interact. 5, EICS, Article 207, 30 (2021)
Card S., Moran T., Newell A. The psychology of human-computer interaction. Erlbaum, pp. I-XIII, 1–469 (1983). (ISBN 0898598591)
Cortes-Cornax, M., Dupuy-Chessa, D., Rieu, D.: Evaluating the appropriateness of the BPMN 2.0 standard for modeling service choreographies. Using an Extended Quality Framework. Softw. Syst. Model., 219–255
Cronel M., Dumas B., Palanque P., Canny A.: MIODMIT: A Generic Architecture for Dynamic Multimodal Interactive Systems. In: Bogdan C., Kuusinen K., Lárusdóttir M., Palanque P., Winckler M. (eds) Human-centered software engineering. HCSE 2018. Lecture notes in computer science, vol 11262. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-05909-5_7
Dearden, A. M., Harrison, M. D.: Formalising human error resistance and human error tolerance. In: Proceedings of the Fifth International Conference on Human-Machine Interaction and Artificial Intelligence in Aerospace. EURISCO (1995)
Diaper, D.:. Understanding task analysis for human-computer interaction. In: The handbook of task analysis for human-computer interaction. Lawrence Erlbaum Associates (2004)
Diaper, D., Stanton, N.: The handbook of task analysis for human-computer interaction. Lawrence Erlbaum Associates (2003). (ISBN 0-8058-4432-5)
Dix, A.: Formal methods: an introduction to and overview of the use of formal methods within HCI. In: Monk, A., Gilbert, N. (eds.) Perspectives on HCI, pp. 9–43. Academic Press, London (1995)
DO-254 - Design Assurance Guidance for Airborne Electronic Hardware, RTCA Inc.
Dubrova, E.: Fundamentals of dependability. In: Fault-tolerant design. Springer, New York (2013). https://doi.org/10.1007/978-1-4614-2113-9_2
ECSS Secretariat, ESA-ESTEC, Requirements and Standards Division: Space engineering: Ground systems and operations, ECSS-E-ST-70C, Noordwijk, The Netherlands, 31st July 2008.
Ellis, C.A., Gibbs, S.J., Rein, G.: Groupware: some issues and experiences. Comm. ACM 34(1), 39–58 (1991)
ESA Board for Software Standardisation and Control (BSSC): ESA ground segment software engineering and management guide, part B management. Issue 1 (2002)
Fahssi, R., Martinie, C., Palanque, P.: Enhanced task modelling for systematic identifica-tion and explicit representation of human errors. In: IFIP TC 13 INTERACT conference, LNCS 9299, part IV, Springer (2015)
Fayollas, C., Fabre, J.-C., Palanque, P., Cronel, M., Navarre, D., Deleris, Y. A Software-Implemented Fault-Tolerance Approach for Control and Display Systems in Avionics. In: IEEE 20th Pacific Rim International Symposium on Dependable Computing (pp. 21–30). Singapore: IEEE (2014)
Fayollas, C., Martinie, C., Palanque, P., Deleris, Y., Fabre, J.C., Navarre, D.: An approach for assessing the impact of dependability on usability: application to interactive cockpits. In: 2014 Tenth European Dependable Computing Conference, Newcastle, UK, 2014, pp. 198–209.https://doi.org/10.1109/EDCC.2014.17
Fitts, P.: The information capacity of the human motor system in controlling the amplitude of movement. J. Exp. Psychol. 47, 381–391 (1954)
Frard, V., Francillout, L., Galet, G., Michel, S.: ATV-CC vehicle team staffing from jules verne to johannes kepler mission. In: SpaceOps 2010 Confernce, Huntsvillehttps://doi.org/10.2514/6.2010-2165
Hamon, A., Palanque, P., Silva, J. L., Deleris, Y. Barboni, E.: Formal description of multi-touch interactions. In: Proceedings of the 5th ACM SIGCHI symposium on engineering interactive computing systems (EICS '13). Association for Computing Machinery, New York, NY, USA, 207–216 (2013). https://doi.org/10.1145/2494603.2480311
Heer; J., Agrawala, M.: Design considerations for collaborative visual analytics. In: Proc. of IEEE Symp. on Visual Analytics Science and Technology (VAST '07). In: IEEE Computer Society, 171–178 (2007).
Hollnagel, E.: Barriers and accident prevention. Ashgage (2004)
Hollnagel, E.: Cognitive ergonomics: it’s all in the mind. Ergonomics 40(10), 1170–1182 (1997)
IBM (1989) Common user access: advanced interface design guide. IBM, SC26–4582–0
IEEE 828–2012: IEEE standard for configuration management in systems and software engineering. IEEE (2012)
International Atomic Energy Agency: Configuration management in nuclear power plants. In: IAEA-TECDOC-1335, Vienna (2003)
International Standard Organization: ISO 9241–11:2018 Ergonomics of human-system interaction part 11: Usability: Definitions and concepts, ISO (2018)
ISO/IEC/IEEE 24765: 2010 Systems and Software Engineering—Vocabulary, ISO/IEC/IEEE (2010)
Johnson, C.: Using Z to support the design of interactive safety-critical systems. Softw. Eng. J. 10(2), 49–60 (1995)
Johnson, P.: Human-computer interaction: psychology, task analysis and software engineering. McGraw Hill, Maidenhead (1992)
Johnson, C., Harrison, M.: Using temporal logic to support the specification and prototyping of interactive control systems. Int. J. Man Mach. Stud. 37(3), 357–385 (1992)
Jones, M., Merri, M., Diekmann, M., Valera, S., Parkes, A.: Evolution of the ECSS-E-70 ground segment and operations standards. In: Space Ops 2008 Conference
Kitamura, M., Fujita, Y., Yoshikawa, H.: Review of international standards related to the design for control rooms on nuclear power plants. J. Nucl. Sci. Technol. 42(4), 406–417 (2005). https://doi.org/10.1080/18811248.2005.972640
Kuch, T., Sabath, D.: The columbus-CC—operating the European laboratory at ISS. Acta Astronaut. 63(1–4), 204–212 (2008). https://doi.org/10.1016/j.actaastro.2007.12.041. (ISSN 0094-5765)
Lallai, G., Loi, Z.G., Martinie, C., Palanque, P., Pisano, M., Spano, L.D.: Engineering task-based augmented reality guidance: application to the training of aircraft flight procedures. Interact. Comput. 33(1), 17–39 (2021). https://doi.org/10.1093/iwcomp/iwab007
Meshkati, N.: Technology transfer to developing countries: a tripartite micro- and macro ergonomic analysis of human-organization-technology interfaces. Int. J. Ind. Ergon. 4, 101–115 (1989)
Martinie, C., Barboni, E., Navarre, D., Palanque, P., Fahssi, R., Poupart, E., Cubero-Castan, E.: Multi-models-based engineering of collaborative systems: application to collision avoidance operations for spacecraft. In: proc. of ACM Conference on EICS, 85–94 (2014)
Martinie, C., Navarre, D., Palanque, P.: A multi-formalism approach for model-based dynamic distribution of user interfaces of critical interactive systems. Int. J. Hum. Comput. Stud. 72(1), 77–99 (2014). https://doi.org/10.1016/j.ijhcs.2013.08.013. (ISSN 1071-5819)
Martinie, C., Palanque, P., Bouzekri, E., Cockburn, A., Canny, A., Barboni, E.: Analysing and demonstrating tool-supported customizable task notations. PACM Hum Comput Interact 3(EICS), 26 (2019). (Article ID 12)
Martinie, C., Palanque P., Navarre D., Barboni E.: A development process for usable large scale interactive critical systems: application to satellite ground segments. In: Proceedings of the 4th International Conference on Human-Centered Software Engineering. Springer, Berlin, Heidelberg, 72–93 (2012)
Martinie, C., Palanque, P., Navarre, D., Winckler, M. A., Poupart, E.: Model-based training: an approach supporting operability of critical interactive systems: application to satellite ground segment. In: ACM SIGCHI conference Engineering Interactive Computing Systems (EICS 2011), Pise, Italie, 13/06/11–16/06/11 (pp. 589–609)
MIL-HDBK-61B: Department of defense handbook: configuration management guidance, 07-APR-2020
Murre, J.M.J., Dros, J.: Replication and analysis of ebbinghaus’ forgetting curve. PLoS ONE (2015). https://doi.org/10.1371/journal.pone.0120644
Navarre D., Palanque P., Basnyat S.: A formal approach for user interaction reconfiguration of safety critical interactive systems. In: Harrison M.D., Sujan MA. (eds) Computer safety, reliability, and security. SAFECOMP 2008. Lecture notes in computer science, vol 5219. Springer, Berlin, Heidelberg (2008). https://doi.org/10.1007/978-3-540-87698-4_31
Navarre, D., Palanque, P., Ladry, J.-F., Barboni, E.: ICOs: A model-based user interface description technique dedicated to interactive systems addressing usability, reliability and scalability. (ACM, Ed.) ACM Trans. Comput. Hum. Interact. (TOCHI) 16(4), 181–1856 (2009)
Navarre, D., Palanque, P., Barboni, E., Ladry, J.-F., Martinie, C.: Designing for resilience to hardware failures in interactive systems: a model and simulation-based approach. Reliab. Eng. Syst. Saf 96(1): 38–52. (ISSN 0951–8320) https://doi.org/10.1016/j.ress.2010.06.028
Nikula, S., Martinie, C., Palanque, P., Hekkala, J., Latvala, OM., Halunen, K.: Mod-els-based analysis of both user and attacker tasks: application to EEVEHAC. HCSE. LNCS, vol 13482. Springer (2022)
Olwal, A., Feiner, S.: Rubbing the fisheye: precise touch-screen interaction with gestures and fisheye views. In: Conference Supplement of UIST 2003. pp. 83–84
Paine, S., Fuller, D., Sorensen, T., Eller, E., Williams, S., Galal, K., Harvey, R., West, B.: Satellite mission operations best practices. In: AIAA Space Operations and Support Technical Committee, April 20th (2001)
Palanque, P.: POISE: a framework for designing perfect interactive systems with and for imperfect people. In: Ardito C., et al. (eds) Human-computer interaction—INTERACT 2021. INTERACT 2021. Lecture Notes in Computer Science, vol 12932. Springer, Cham (2021). https://doi.org/10.1007/978-3-030-85623-6_5
Palanque P., Basnyat S.: Task patterns for taking into account in an efficient and systematic way both standard and erroneous user behaviours. In: 6th International Conference on Human Error, Safety and System Development, Springer, pp. 123–139
Palanque, P., Bastide, R.: Petri net based design of user-driven interfaces using the interactive cooperative objects formalism. In: Design, Specification and Verification of Interactive Systems DSV-IS'94, (pp. 383–400). Bocca di Magra, Italy (1994)
Palanque, P., Cockburn, A., Gutwin, C.: A Classification of Faults Covering the Human-Computer Interaction Loop. In: Casimiro, A., Ortmeier, F., Bitsch, F., Ferreira, P. (eds) Computer safety, reliability, and security. SAFECOMP 2020. Lecture Notes in Computer Science, vol 12234. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-54549-9_29
Palanque, P., Farenc, C., Bastide, R.: Embedding ergonomic rules as generic requirements in a formal development process of interactive software. In: Proc. of 7th IFIP Conference on Human-Computer Interaction Interact’99 (pp. 408–416). Edinburgh: Chapman & Hall (1999)
Reason, J.: Human error. Cambridge University Press, Cambridge (1990)
Siegel, A.W., Schraagen, J.M.C.: Beyond procedures: team reflection in a rail control centre to enhance resilience. Saf. Sci. 91, 181–191 (2017). https://doi.org/10.1016/j.ssci.2016.08.013. (ISSN 0925-7535)
Soukoreff, W., MacKenzie, S.: Towards a standard for pointing device evaluation, perspectives on 27 years of Fitts’ law research in HCI. IJHCS 61(6), 751–789 (2004)
Stanton, N., Salmon, P., Walker, G.: Systems thinking in practice—applications of the event analysis of systemic teamwork method. CRC Press (2019)
Tankeu-Choitat, A., Navarre, D., Palanque, P., Deleris, Y., Fabre, J.-C., Fayollas, C.: Selfchecking components for dependable interactive cockpits using formal description techniques. In: Proc of 17th IEEE Pacific Rim Int. Symp. on Dependable Computing (PRDC 2011), pp 10
Funding
The research leading to these results was partly sponsored by the CNES R&T MARACCASS.
Author information
Authors and Affiliations
Corresponding author
Ethics declarations
Conflict of interest
The authors declare that they have no conflict of interest.
Additional information
Publisher's Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
Springer Nature or its licensor (e.g. a society or other partner) holds exclusive rights to this article under a publishing agreement with the author(s) or other rightsholder(s); author self-archiving of the accepted manuscript version of this article is solely governed by the terms of such publishing agreement and applicable law.
About this article
Cite this article
Martinie, C., Palanque, P., Navarre, D. et al. Towards MBSE engineering dedicated to socio-technical interactive systems. CEAS Space J 16, 183–202 (2024). https://doi.org/10.1007/s12567-024-00536-0
Received:
Revised:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s12567-024-00536-0