Analysis Techniques For Man-Machine Systems Design
Analysis Techniques For Man-Machine Systems Design Analysis Techniques For Man-Machine Systems Design
NATO UNCLASSIFIED EAC/243(Panel 8 TR/7Volume 2- 36 -orderconfirmationmmunication order is processing operator 1 communication order is sent toorder arrives waiting starts is active is terminated complete sendsystem is idle,waiting for ordersr communication order order operator 2 communication order is con tiocommnicaionordeissenttoorder arrives waiting processing is active is terminated complete cstartscommandstartsFigure 2.10:A Petri net model of a communication system in a conflict situationTable 2.4: Some typical interpretations of Transitions and Places (Murata, 1989)Input places Transition Output placesPreconditions Event Post-conditionsInput data Computation step Output dataInput signals Signal processor Output signalsResources needed Task or job Resources releasedConditions Clause in logic ConclusionsBuffers Processor BuffersInputs to the techniqueThe events and the conditions of a system must bedescribed and modelled. The sequencing between theevents must be available, as well as their prioritiesand duration times.Outputs of the techniqueThe execution of the Pctri net results in a sequence ofdiscrete events that can be analysed. Further, severaltechniques have been developed for analyzing Pctri netswithout execution of the neL Some typical questions thatcan be addressed by this type of model are:1. Reachability of certain markings, i.e., unsafe systemstates.2. Resource administration and allocation, i.e., overflowand conflict situations, and deadlock problems and"starvation" of the system.When to usePetri nets can be used in the latter stages of design definition, or when other systems engineering specialities havemade them available.NATO UNCLASSIFIED- 36-
NATO UNCLASSIFIED- 37 - AC/243(Panel-8)TR/ 7Volume 2Related techniquesPetri nets are related to Function Flow Diagrams (2.1), SADTrm/IDEF (2.3), Finite State Machines (see 2.5), DataFlow Diagrams, and Behaviour Graphs (2.7)Resources requiredThe analyst must obtain information concerning the expected behaviour of the system. A user-defined scenario is atypical starting point. A CASE tool is mandatory in order to record different relationships systematically (e.g.,between functions and items, between functions and requirements) and to handle the iterative development of thedescription effectively.DisadvantagesAdvantagesA Petri net model can be considered as an alternative to a Petri nets tends to become too large for analysis of evenstate machine model and is specially suited to modelling modest systems. In applying Petri nets it is oftena-synchronous concurrent systems. Petri nets can be used necessary to add special modifications or restrictionsfor the hierarchical decomposition of systems and for suited to the particular application (Murata. 1989).developing models for SAINT simulation (5.2). Petri netmodels can used by practitioners and analysed formally bytheoreticians. The modeling power of a Petri net can beextended in several ways (Christensen, 1991).Relative contributionNo data available.ApplicationsPetri nets can be used to describe behaviour where ambiguity cannot be tolerated (e.g., a life-critical application) orwhere precise process synchrony is important. Petri nets have bccn used for specifying man-machine dialogues whichinvolve asynchronous events and interleaving (mixed command sequences) (Biljon, 1988). They have been applied todecision making (Perdu & Levis. 1989) and to command and control systems (Wohl, 1987; Wohl & Tenney, 1987).Petri nets have also been proposed as a means of evaluating operator workload (Madni & Lyman. 1983) by defininghuman operator tasks as places, and internal or external forcing events as transitions.Quality assurance considerationsPetri nets check for consistency, completeness. and potential conflicts in concurrent operations. Dynamic consistencycan be checked using simulation techniques.Relationship to system performance requirementsPerformance requirements are specified as an integral part of the model. It is possible to associate deterministic orNATO UNCLASSIFIED- 37 -
- Page 100 and 101: ANNEX Ito6Aca41(Pane}-8)TRn7VolumL
- Page 102 and 103: ANNEX I toAC43(Pane-8TR7 - 8 -Volum
- Page 104 and 105: N1 A l O oJN k-~ L i-* 3 3 1 i- XAN
- Page 106 and 107: NATO UNCLASSIFIED. aNORTH ATLANTIC
- Page 108 and 109: N A T OU N C L A S S I F I E DREPOR
- Page 110 and 111: NATO UNCLASSIFIEDACQ243(Panei-88)TR
- Page 112 and 113: AC243(Panel-8)TR7-Volume 25.6 NASA
- Page 114 and 115: N A T O U N CLASIF l IE DAC/243(Pan
- Page 116 and 117: ACP243(Panel-8)TRn 2.Volume 2INTROD
- Page 118 and 119: N ATO UN CLA .3 -c,,i! EAC/243(Pane
- Page 120 and 121: NATO UNCLASS.IFIED-AC/243(Panel 8)T
- Page 122 and 123: AC/243(Panel 8)TR/7 -8 -Volume 21.2
- Page 124 and 125: AC/243(Panel 8)TR/7 10Volume 2weath
- Page 126 and 127: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 128 and 129: N A I UU N k L A A a Ir I DAC/243(P
- Page 130 and 131: NATO UNCLASSIFIEDMAC/243(Panel 8ITR
- Page 132 and 133: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 134 and 135: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 136 and 137: N ATIO U N C LA . 3 i F L- < D-AC/2
- Page 138 and 139: NATO UNCLAS S I.FIEDAC/243(Panel 8'
- Page 140 and 141: NATO UNCLASSIFIEDAC/243(Panel 8TR/7
- Page 142 and 143: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 144 and 145: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 146 and 147: -NATO UNCLA,)irrILUAC/243(Panel 8)T
- Page 148 and 149: N A T O U N (.LA5\ 1I r i iL-AC/243
- Page 152 and 153: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 154 and 155: NATO UNCLASSIFIEDA-AC/243(Panel 8)T
- Page 156 and 157: NATO UNCI ASSIFIEDC/-43(Panel 8)TR/
- Page 158 and 159: NATO UNCLAS.SIFIEDAC/243(Panel 8)TR
- Page 160 and 161: NATO UNCLASSIFIED 2AC/243(Panei 8)T
- Page 162 and 163: NATO UNCLASSIFIEDAC/243(Panel 8')TR
- Page 164 and 165: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 166 and 167: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 168 and 169: NATO UNCLASSIFTEDAC/243(Panel 8)TR/
- Page 170 and 171: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 172 and 173: NATO UNCLASSIFIEDAC/243(Panel 8 TR/
- Page 174 and 175: NATO UNCLASSIFIEDAC/24 3 (6PanelVol
- Page 176 and 177: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 178 and 179: NATO UNCLASSIFIEDAC/243(Panel 8'tTR
- Page 180 and 181: N ATO UNCLASSIFIEDAC/243(Panel 8')T
- Page 182 and 183: NATO UNCLASShi Ih I t LUAC/243(Pane
- Page 184 and 185: NATO UNCLASSIFIED,AC/243(Panel 8 TR
- Page 186 and 187: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 188 and 189: NATO UNCLASSIFTEDAC/243(Panel 8')TR
- Page 190 and 191: NATO UNCLASSIFIEDAC/243(Panel 8')TR
- Page 192 and 193: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 194 and 195: NATO UNCLASSIFIEDAC/243(Panel 8)TR/
- Page 196 and 197: NATO UNCLASSIFIEDAC/243(Panel 8')TR
- Page 198 and 199: NATO UNCLASSIFIEDAC/243(Panel 8ITR/
NATO UNCLASSIFIED- 37 - AC/243(Panel-8)TR/ 7Volume 2Related techniquesPetri nets are related to Function Flow Diagrams (2.1), SADTrm/IDEF (2.3), Finite State <strong>Machine</strong>s (see 2.5), DataFlow Diagrams, and Behaviour Graphs (2.7)Resources requiredThe analyst must obtain information concerning the expected behaviour of the system. A user-defined scenario is atypical starting point. A CASE tool is mandatory in order to record different relationships systematically (e.g.,between functions and items, between functions and requirements) and to handle the iterative development of thedescription effectively.DisadvantagesAdvantagesA Petri net model can be considered as an alternative to a Petri nets tends to become too large for analysis of evenstate machine model and is specially suited to modelling modest systems. In applying Petri nets it is oftena-synchronous concurrent systems. Petri nets can be used necessary to add special modifications or restrictionsfor the hierarchical decomposition of systems and for suited to the particular application (Murata. 1989).developing models for SAINT simulation (5.2). Petri netmodels can used by practitioners and analysed formally bytheoreticians. The modeling power of a Petri net can beextended in several ways (Christensen, 1991).Relative contributionNo data available.ApplicationsPetri nets can be used to describe behaviour where ambiguity cannot be tolerated (e.g., a life-critical application) orwhere precise process synchrony is important. Petri nets have bccn used for specifying man-machine dialogues whichinvolve asynchronous events and interleaving (mixed command sequences) (Biljon, 1988). They have been applied todecision making (Perdu & Levis. 1989) and to command and control systems (Wohl, 1987; Wohl & Tenney, 1987).Petri nets have also been proposed as a means of evaluating operator workload (Madni & Lyman. 1983) by defininghuman operator tasks as places, and internal or external forcing events as transitions.Quality assurance considerationsPetri nets check for consistency, completeness. and potential conflicts in concurrent operations. Dynamic consistencycan be checked using simulation techniques.Relationship to system performance requirementsPerformance requirements are specified as an integral part of the model. It is possible to associate deterministic orNATO UNCLASSIFIED- 37 -