Invariance-preserving abstractions of hybrid systems: Application to user interface design

IEEE Transactions on Control Systems Technology

Volumn 16, Issue 2, 2008, Pages 229-244

  Oishi, Meeko ^a   Mitchell, Ian Mitchell ^a   Bayen, Alexander M ^b   Tomlin, Claire J ^c,d  

^a UNIVERSITY OF BRITISH COLUMBIA   (Canada)

^b Berkeley   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

^d 496 Lomita Mall   (United States)

Author keywords

Autopilot; Discrete abstraction; Hybrid systems; Pilot displays; Reachability; User interface

Indexed keywords

AIRCRAFT; AUTOMATION; COMPUTER SIMULATION; DISCRETE EVENT SIMULATION; DYNAMICS;

CONTINOUS STATE DYNAMICS; DISCRETE ABSTRACTION; HYBRID SYSTEM;

USER INTERFACES;

EID: 40949134286     PISSN: 10636536     EISSN: None     Source Type: Journal    
DOI: 10.1109/TCST.2007.903370     Document Type: Article

References (67)

1. C. Billings, Aviation Automation: The Search for a Human-Centered Approach. Hillsdale, NJ: Erlbaum, 1997.
2. E. Wiener and R. Curry, "Flight-deck automation: Promises and problems," NASA Ames Research Center, Moffett Field, CA, Tech. Memo. 81206, 1980.
3. R. Parasuraman, T. Sheridan, and C. Wickens, "A model for types and levels of human interaction with automation," IEEE Trans. Syst., Man, Cybern. A, Syst. Humans, vol. 30, no. 3, pp. 286-297, May 2000.
4. N. Sarter, D. Woods, and C. Billings, "Automation surprises," in Handbook of Human Factors and Ergonomics. New York: Wiley, 1999, pp. 1295-1327.
5. E. Palmer, "Oops, it didn't arm - A case study of two automation surprises," presented at the 8th Int. Symp. Aviation Psych. Conf., Columbus, OH, 1995.
6. N. Leveson and E. Palmer, "Designing automation to reduce operator errors," in Proc. IEEE Conf. Syst., Man, Cybern., 1997, pp. 1144-1150.
7. A. Degani, M. Shafto, and A. Kirlik, "Modes in human-machine systems: Constructs, representation, and classification," Int. J. Aviation Psych., vol. 9, no. 2, pp. 125-138, 1999.
8. K. Abbott, S. Slone, and D. Stimson, "The interfaces between flightcrews and modern flight deck systems," Federal Aviation Administration, Human Factors Team Report, Washington, DC, 1996.
9. C. Hynes, G. Hardy, and L. Sherry, Synthesis From Design Requirements of a Hybrid System for Transport Aircraft Longitudinal Control. Moffett Field, CA: NASA Ames Research Center, 2001.
10. J. Rushby, "Using model checking to help discover mode confusions and other automation surprises," Reliab. Eng. Syst. Safety, vol. 75, no. 2, pp. 167-177, 1999.
11. R. Butler, S. Miller, J. Potts, and V. Carreno, "A formal methods approach to the analysis of mode confusion," in Proc. AIAA/IEEE Digit. Avionics Syst. Conf., 1998, pp. C41/1-C41/8.
12. A. Degani, M. Heymann, G. Meyer, and M. Shafto, "Some formal aspects of human-automation interaction," NASA Ames Research Center, Moffett Field, CA, Tech. Memo. 209600, 2000.
13. N. Leveson, L. Pinnel, S. Sandys, S. Koga, and J. Reese, C. Johnson, Ed., "Analyzing software specifications for mode confusion potential," in Proc. Workshop Human Error Syst. Develop., 1997, pp. 132-146.
14. S. Vakil, A. Midkiff, T. Vaneck, and R. Hansman, "Mode awareness in advanced autoflight systems," presented at the 6th IFAC/IFIP/IFORS/IEA Symp. Anal., Des., Evaluation Man-Mach. Syst. Conf., Cambridge, MA, 1995.
15. M. Oishi, I. Mitchell, A. Bayen, C. Tomlin, and A. Degani, "Hybrid verification of an interface for an automatic landing," in Proc. IEEE Conf. Dec. Control, 2002, pp. 1607-1613.
16. J. Crow, D. Javaux, and J. Rushby, "Models and mechanized methods that integrate human factors into automation design," presented at the Int. Conf. Human-Comput. Interaction Aeronautics, Toulouse, France, 2000.
17. A. Degani and M. Heymann, "Formal verification of human-automation interaction," Human Factors, vol. 44, no. 1, pp. 28-43, 2002.
18. M. Heymann and A. Degani, "On abstractions and simplifications in the design of human-automation interfaces," NASA Ames Research Center, Moffett Field, CA, Tech. Memo. 211397, 2002.
19. A. Chutinan and B. H. Krogh, "Verification of infinite-state dynamics systems using approximate quotient transition systems," IEEE Trans. Autom. Control, vol. 46, no. 9, pp. 1401-1410, Sep. 2001.
20. G. Frehse, "PHAVer: Algorithmic verification of hybrid systems past HyTech," in Hybrid Systems: Computation and Control, ser. LNCS 34143, M. Morari and L. Thiele, Eds. New York: Springer Verlag, 2005, pp. 258-273.
21. E. Asarin, "Reachability analysis of nonlinear systems using conservative approximation," in Hybrid Systems: Computation and Control, ser. LNCS 2623, T. Dang, A. Girard, O. Maler, and A. Pneuli, Eds. New York: Springer Verlag, 2003, pp. 20-35.
22. A. B. Kurzhanski, "Ellipsoidal techniques for hybrid dynamics: The reachability problem," in New Directions and Applications in Control Theory, ser. Lecture Notes in Control and Information Sciences 321, W. Dayawansa, A. Lindquist, Y. Zhou, and P. Varaiya, Eds. New York: Springer Verlag, 2005, pp. 193-205.
23. M. Kvasnica, P. Grieder, M. Baotic, and M. Morari, "Multi-parametric toolbox (MPT)," in Hybrid Systems: Computation and Control, ser. LNCS 2993, R. Alur and G. Pappas, Eds. New York: Springer Verlag, 2004, pp. 448-462.
24. C. Tomlin, J. Lygeros, and S. Sastry, "A game theoretic approach to controller design for hybrid systems," Proc. IEEE, vol. 88, no. 7, pp. 949-970, Jul. 2000.
25. I. Mitchell, "Application of level set methods to control and reachability problems in continuous and hybrid systems," Ph.D. dissertation, Dept. Scientific Comput. Comput. Math., Stanford Univ., Stanford, CA, 2002.
26. I. Mitchell, A. Bayen, and C. Tomlin, "Validating a Hamilton-Jacobi approximation to hybrid system reachable sets," in Hybrid Systems: Computation and Control, ser. LNCS 2034, M. D. Benedetto and A. Sangiovanni-Vincentelli,Eds. New York: Springer Verlag, 2001, pp. 418-432.
27. I. Mitchell, A "Toolbox of level-set methods, Version 1.1 Beta ed.," University of British Columbia, Vancouver, BC, Canada, 2005 [Online]. Available: http://www.cs.ubc.ca/~mitchell/ToolboxLS/index.html
28. M. Oishi, C. Tomlin, V. Gopal, and D. Godbole, "Addressing multiobjective control: Safety and performance through constrained optimization," in Hybrid Systems: Computation and Control, ser. LNCS 2034, M. Di Benedetto and A. Sangiovanni-Vincentelli, Eds. Philadelphia, PA: Springer-Verlag, 2001, pp. 459-472.
29. A. Bhatia and E. Frazzoli, "Incremental search methods for reachability analysis of continuous and hybrid systems," in Hybrid Systems: Computation and Control, ser. Lecture Notes in Computer Science 2993, R. Alur and G. Pappas, Eds. Philadelphia, PA: Springer-Verlag, 2004, pp. 142-156.
30. A. Tiwari and G. Khanna, "Nonlinear systems: Approximating reach sets," in Hybrid Systems: Computation and Control, ser. Lecture Notes in Computer Science 2993, R. Alur and G. Pappas, Eds. Philadelphia, PA: Springer-Verlag, 2004, pp. 142-156.
31. R. Alur, F. Ivancic, and T. Dang, "Progress on reachability analysis of hybrid systems using predicate abstraction," in Hybrid Systems: Computation and Control, ser. Lecture Notes in Computer Science 2623, F. Wiedijk, O. Maler, and A. Pneuli, Eds. Prague, The Czech Republic: Springer-Verlag, 2003, pp. 4-19.
32. T. J. Koo and S. Sastry, "Bisimulation based hierarchical system architecture for single-agent multi-modal systems," in Hybrid Systems: Computation and Control, ser. Lecture Notes in Computer Science 2623, C. Tomlin and M. Greenstreet, Eds. Stanford, CA: Springer-Verlag, 2002, pp. 281-293.
33. P. Tabuada, G. Pappas, and P. Lima, "Composing abstractions of hybrid systems," in Hybrid Systems: Computation and Control, ser. Lecture Notes in Computer Science 2623, C. Tomlin and M. Greenstreet, Eds. Stanford, CA: Springer-Verlag, 2002, pp. 436-450.
34. G. Pappas and S. Sastry, "Towards continuous abstractions of dynamical and control systems," in Hybrid Systems IV, ser. Lecture Notes in Computer Science 1273, P. Antsaklis, W. Kohn, A. Nerode, and S. Sastry, Eds. New York: Springer-Verlag, 1997, pp. 329-341.
35. A. Puri and P. Varaiya, "Verification of hybrid systems using abstractions," in Hybrid Systems II, ser. LNCS. New York: Springer-Verlag, 1995.
36. A. Crawford, "Driver judgment and error during the amber period at traffic lights," Ergonomics, vol. 5, no. 4, pp. 513-532, Oct. 1962.
37. C. Liu, R. Herman, and D. Gazis, "A review of the yellow interval dilemma," Transportation Res. A, vol. 30, no. 5, pp. 333-348, 1996.
38. D. Gazis, R. Herman, and A. Maradudin, "The problem of the amber signal light in traffic flow," Oper. Res., vol. 8, no. 1, pp. 112-132, Jan./Feb. 1960.
39. S. Hedlund and A. Rantzer, "Optimal control of hybrid systems," in Proc. IEEE Conf. Dec. Control, Phoenix, AZ, 1999, pp. 3972-3977.
40. ITE Technical Council Task Force 4TF-1, Institute of Transportation Engineers, Washington, D.C., "Determining vehicle signal change and clearance intervals," 1994.
41. W. Stimpson, P. Zador, and P. Tarnoff, "The influence of the time duration of yellow traffic signals on driver response," ITE J., pp. 22-29, Nov. 1980.
42. A. Chutinan and B. Krogh, "Computational techniques for hybrid system verification," IEEE Trans. Autom. Control, vol. 48, no. 1, pp. 64-75, Jan. 2003.
43. F. Torrisi and A. Bemporad, "Hysdel - A tool for generating computational hybrid models for analysis and synthesis problems," IEEE Trans. Control Syst. Technol., vol. 12, no. 3, pp. 235-249, Mar. 2004.
44. C. Tomlin, I. Mitchell, A. Bayen, and M. Oishi, "Computational techniques for the verification of hybrid systems," Proc. IEEE, vol. 91, no. 1, pp. 986-1001, Jan. 2003.
45. E. Asarin, T. Dang, and O. Maler, "D/DT: A verification tool for hybrid systems," in Proc. IEEE Conf. Dec. Control, 2001, pp. 2893-2898.
46. T. Henzinger, P. Ho, and H. Wong-Toi, "A user guide to hytech," in TACAS 95: Tools and Algorithms for the Construction and Analysis of Systems, ser. LNCS 1019, E. Brinksma, W. Cleavel, K. Larsen, T. Margaria, and B. Steffen, Eds. New York: Springer-Verlag, 1995, pp. 41-71.
47. S. Prajna, A. Papachristodoulou, P. Seiler, and P. A. Parrilo, "SOSTOOLS: Sum of squares optimization toolbox for MATLAB," 2004 [Online]. Available: http://www.cds.caltech.edu/sostools; http:// www.aut.ee.ethz.ch/~parrilo/sostools
48. Z. Kohavi, Switching and Finite Automata Theory. New York: McGraw-Hill, 1978.
49. M. Paull and S. Unger, "Minimizing the number of states in incompletely specified sequential switching functions," IRE Trans. Electron. Comput., vol. EC-8, pp. 356-367, Sep. 1959.
50. S. Ginsburg, "A technique for the reduction of a given machine to a minimal-state machine," IRE Trans. Electron. Comput., vol. EC-8, pp. 346-355, Sep. 1959.
51. A. Grasselli and F. Luccio, "A method for minimizing the number of internal states in incompletely specified sequential networks," IEEE Trans. Electron. Comput., vol. EC-14, no. 3, pp. 350-359, Jun. 1965.
52. T. Kam, T. Villa, R. Brayton, and A. Sangiovanni-Vincentelli, "Implicit computation of compatible sets for state minimization of ISFSM's," IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst., vol. 16, no. 7, pp. 657-676, Jul. 1997.
53. T. Kam, T. Villa, R. Brayton, and A. Sangiovanni-Vincentelli, "Theory and algorithms for state minimization of nondeterministic FSM's," IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst., vol. 16, no. 11, pp. 1311-1322, Nov. 1997.
54. J. Rho, G. Hachtel, F. Somenzi, and R. Jacoby, "Exact and heuristic algorithms for the minimization of incompletely specified state machines," IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst., vol. 13, no. 2, pp. 167-177, Feb. 1994.
55. R. Puri and J. Gu, "An efficient algorithm to search for minimal closed covers in sequential machines," IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst., vol. 6, no. 6, pp. 737-745, Jun. 1993.
56. J. Pena and A. Oliveira, "A new algorithm for exact reduction of incompletely specified finite state machines," IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst., vol. 18, no. 11, pp. 1619-1632, Nov. 1999.
57. M. Oishi, I. Hwang, and C. Tomlin, "Immediate observability of discrete event systems with application to user-interface design," in Proc. IEEE Conf. Dec. Control, 2003, pp. 2665-2672.
58. Federal Aviation Administration, U.S. Department of Transportation, Washington, DC, "Criteria for approval of category III weather minima for takeoff, landing, and rollout," Advisory Circular 120-28D, 1999.
59. M. Oishi, A. Degani, and C. Tomlin, "Verification of hybrid systems: Application to user-interfaces," NASA Ames Research Center, Moffett Field, CA, Tech. Memo. 212803, 2003.
60. A. Bayen and C. Tomlin, "Nonlinear hybrid automaton model for aircraft landing," Dept. Aeronautics and Astronautics, Stanford Univ., Stanford, CA, SUDAAR 737, 2001.
61. S. Rogers, K. Roth, H. Cao, J. Slotnick, M. Whitlock, S. Nash, and M. Baker, "Computation of viscous flow for a boeing 777 aircraft in landing configuration," presented at the AIAA Conf., Denver, CO, 1992.
62. J. Roskam and C.-T. Lan, Airplane Aerodynamics and Performance. Lawrence, KS: Design, Analysis, and Research Corporation, 1997.
63. A. Flaig and R. Hilbig, "High-lift design for large civil aircraft," in AGARD CP 515, 1992, pp. 31-1-31-12.
64. L. Jenkinson, P. Simpkin, and D. Rhodes, Civil Jet Aircraft Design Reston, VA: American Institute of Aeronautics and Astronautics, Inc., 1999.
65. I. Kroo, "Aircraft Design: Synthesis and Analysis, Version 0.99" Desktop Aeronautics, Stanford, CA, 2001.
66. C. Hynes, Personal communication, Aug. 2001.
67. T. Lambregts, "Automatic flight control: Concepts and methods," FAA National Resource Specialist, Advanced Controls, 1995.