Title :
Dissonance between multiple alerting systems.II. avoidance and mitigation
Author :
Song, Lixia ; Kuchar, James K.
Author_Institution :
Dept. of Aeronaut. & Astronaut., Massachusetts Inst. of Technol., Cambridge, MA, USA
fDate :
5/1/2003 12:00:00 AM
Abstract :
For pt.I. see ibid., p. 366-75. The potential for conflicting information to be transmitted by different automated alerting systems is growing as these systems become more pervasive in process operations. Newly introduced alerting systems must be carefully designed to minimize the potential for and impact of alerting conflicts. A model of alert dissonance, developed in a companion paper (Part I), provides both a theoretical foundation for understanding conflicts and a practical basis from which specific problems can be addressed. Alerting systems are hybrid processes, involving continuous process dynamics and discrete alert level changes in state space. This paper presents a hybrid model to facilitate analysis of dissonance. Using backward reachability analysis, regions of dangerous dissonance space are identified. Then, modifications can be made to the control strategy of the process or to the alerting thresholds to avoid dangerous consequences of dissonance. An example problem is presented to demonstrate the application of the hybrid model to identify dangerous dissonance space and to identify proper actions to avoid dangerous consequences of dissonance.
Keywords :
human factors; reachability analysis; safety systems; safety-critical software; security of data; state-space methods; alert dissonance; backward reachability analysis; multiple alerting systems; process dynamics; Aerodynamics; Aerospace control; Aerospace safety; Hazards; Humans; Power system modeling; Reachability analysis; State-space methods; Uncertainty; Vehicle dynamics;
Journal_Title :
Systems, Man and Cybernetics, Part A: Systems and Humans, IEEE Transactions on
DOI :
10.1109/TSMCA.2003.817046