Divide to Conquer: Functional Decomposition to Support Model-Based Engineering of Command and Control of Cyber-Physical Systems

OATAO is an open access repository that collects the work of Toulouse

researchers and makes it freely available over the web where possible

Any correspondence concerning this service should be sent

to the repository administrator:

tech-oatao@listes-diff.inp-toulouse.fr

This is an author’s version published in:

https://oatao.univ-toulouse.fr/26212

To cite this version:

Canny, Alexandre and Fayollas, Camille and Martinie De Almeida,

Célia and Navarre, David and Palanque, Philippe and Gris, Christine

and Deleris, Yannick Divide to Conquer: Functional Decomposition

to Support Model-Based Engineering of Command and Control of

Cyber-Physical Systems. (2019) In: 12th IEEE International

Conference on Cyber Physical and Social Computing

(CPSCom-2019), 14 July 2019 - 17 July 2019 (Atlanta, United States).

Open Archive Toulouse Archive Ouverte

Official URL :

https://doi.org/10.1109/iThings/GreenCom/CPSCom/SmartData.2019.00132

$OH[DQGUH&DQQ\&DPLOOH)D\ROODV&pOLD 0DUWLQLH'DYLG1DYDUUH3KLOLSSH3DODQTXH ,&6,5,78QLYHUVLW\7RXORXVH 7RXORXVH)UDQFH ILUVWQDPHODVWQDPH#LULWIU &KULVWLQH*ULV<DQQLFN'HOHULV $LUEXV 7RXORXVH)UDQFH ILUVWQDPHODVWQDPH#DLUEXVFRP 

Abstract²&\EHUSK\VLFDO V\VWHPV &36 LQWHJUDWH ERWK

SK\VLFDO DQG FRPSXWDWLRQDO HOHPHQWV DQG WKHLU HQJLQHHULQJ UHTXLUHV EULGJLQJ WKH FRQWLQXRXV DQDORJ UHDO ZRUOG DQG WKH GLVFUHWH GLJLWDO ZRUOG 8VHU LQWHUIDFHV RI F\EHUSK\VLFDO V\VWHPV EHORQJ WR WKH FODVV RI FRPPDQG DQG FRQWURO V\VWHPV DQG WKHLU GHVLJQ DQG HQJLQHHULQJ XVXDOO\ IROORZ DGKRF FUDIW SURFHVVHV KLJKO\ SDUDPHWUL]HG E\ WKH YHU\ QDWXUH RI WKH SK\VLFDO FRPSRQHQWV 7KLV SDSHU SURSRVHV D V\VWHPDWLF DSSURDFKIRUHQJLQHHULQJ&36HPSKDVL]LQJWKHSUREOHPVDQG SRVVLEOH VROXWLRQV WR GHVLJQ DQG DVVHVV WKHLU XVHU LQWHUIDFHV ERWK FRQWURO DQG SUHVHQWDWLRQ 7KH SDSHU ILUVW SURSRVHV D JHQHULF DUFKLWHFWXUH IRU &36 JRLQJ IURP WKH SK\VLFDO HOHPHQWV WR WKH XVHU LQWHUIDFH 7KLV DUFKLWHFWXUH LV WKHQ UHILQHG KLJKOLJKWLQJ WKH EHKDYLRU DQG VRIWZDUH LQWHUIDFHV RI HDFK RI LWV FRPSRQHQW DQG VKRZLQJ KRZ LQIRUPDWLRQ DQG FRQWURO IURP WKH SK\VLFDO HOHPHQWV KDYH WR EH SURFHVVHG DQG WUDQVIRUPHGWRPDNHVHQVHWRWKHRSHUDWRU7KHSDSHUSUHVHQWV H[WUDFWV RI WKH DSSOLFDWLRQ RI WKH SURSRVHG DSSURDFK WR WKH FRPPDQG DQG FRQWURO FRFNSLW DSSOLFDWLRQ RI DQ DLUFUDIW V\VWHP

Keywords—CPS, Interactive Systems, Command and Control

, ,1752'8&7,21

:KLOHWRGD\PRVWRI+XPDQ&RPSXWHU,QWHUDFWLRQ+&, UHVHDUFK LV WDUJHWLQJ DW VRIWZDUH V\VWHPV F\EHUSK\VLFDO V\VWHPV&36GHSOR\PHQWKDVLQFUHDVHGLQDQDQDUFKLFZD\ WKDW FRXOG EH VHHQ D &36 VWDPSHGH +RZHYHU UHVHDUFKHUV LQYROYHG LQ WKH GHVLJQ VSHFLILFDWLRQ GHYHORSPHQW YDOLGDWLRQRUPDLQWHQDQFHRI&36KDYHEHHQWU\LQJWRZDUQ DERXW WKH FKDOOHQJHV WKRVH V\VWHPV DUH EULQJLQJ $Q RYHUYLHZ RI WKHVH FKDOOHQJHVFDQ EH IRXQG LQ >@ ZKHUHDQ LQWHUHVWLQJDQGUDWKHUXQLTXHSHUVSHFWLYHLVJLYHQWRZDUGV WKHQHHGRI8VHU&HQWHUHG'HVLJQDSSURDFKHVLQWKDWGRPDLQ

7DNLQJ WKH +XPDQ&RPSXWHU ,QWHUDFWLRQ SRLQW RI YLHZ &36V KDYH D YHU\ VSHFLILF FKDUDFWHULVWLF WKHLU HQWLUH XVHU LQWHUIDFH LV FRPSRVHG RI WZR UHODWLYHO\ LQGHSHQGHQW HOHPHQWV

x 7KHFRPPDQGDQGFRQWUROV\VWHPGHVLJQHGIRUDOORZLQJ RSHUDWRUVXVHUVWRXVHWKH&36

x 7KHSK\VLFDOKDUGZDUHSDUWRI WKH &36 WKDW PLJKW RU PLJKWQRWEHSHUFHLYDEOHRUDFWLRQDEOHE\WKHXVHU :KLOH WKH ILUVW DVSHFW LV XVXDOO\ WKH IRFXV RI GHVLJQHUV DQG GHYHORSHUV WKH VHFRQG DVSHFW LV XVXDOO\ LJQRUHG HYHQ WKRXJK LW PLJKW GHHSO\ LQWHUIHUH ZLWK WKH DFWXDO XVH RI WKH V\VWHP$QH[DPSOHRIVXFK&36V\VWHPLVWKH3KLOLSV+XH

VPDUW ODPS>@ VHHFig. 1ZKLFK LV FRQVLGHUHGRQHRIWKH

W\SLFDO,R7GHYLFHVDQGWKHPRVWSRSXODUVPDUWOLJKWV\VWHP :KLOH WKH FRPPDQG DQG FRQWURO LV ORFDWHG RQ WKH UHPRWH FRQWURO DQGRU RQ WKH PRELOH $SS WKH SK\VLFDO GHYLFH WKH OLJKW EXOE LV SURGXFLQJ ERWK OLJKW DQG KHDW WKDW DUH ERWK SHUFHLYDEOH E\ WKH XVHUV :KHQ XVLQJ WKH UHPRWH FRQWURO ZKLFKLVRQO\DQLQSXWGHYLFHDQGKDVQRGLVSOD\RQLWWKH XVHUKDVWRWDUJHWWKHFRQQHFWLRQEULGJHQRWWKHOLJKWEXOE DQGWKHRQO\ZD\WRNQRZWKHVWDWXVRIWKHGHYLFHLVWRORRN DWLWVKDUGZDUHSK\VLFDOSDUW  )LJ2YHUYLHZRIWKH3KLOLSV+XHDQGLWVFRPPDQGDQGFRQWUROV\VWHPV

7KH DUFKLWHFWXUH SUHVHQWHG LQFig. 1 VKRZV WKDW LQ RUGHU WR

RSHUDWH DSSURSULDWHO\ WKH &36 XVHUV KDYH WR EH SURYLGHG ZLWK D GHWDLOHG DQG FRPSOHWH GHVFULSWLRQ RI ERWK WKH KDUGZDUH DQG VRIWZDUH SDUWV RI WKH &36 EXW DOVR WKH FRQQHFWLRQ LQIUDVWUXFWXUH ,QGHHG XVHUV VKRXOG SRLQW WKH UHPRWHFRQWUROWRZDUGVWKH+XHEULGJHDQGQRWWKHODPSDV PRVWZRXOGGRHYHQWKRXJKQHZSURWRFROVVXFKDV:LEUHH %OXHWRRWKORZHQHUJ\GRQ¶WUHTXLUHGLUHFWSRLQWLQJDWWKH VHQVRU ,W LV DOVR LPSRUWDQW WR QRWH WKDW WKH FRPPDQG DQG FRQWURO V\VWHP SDUW ERWK WKH VPDUWSKRQH DQG WKH UHPRWH FRQWURO LV DOVR D &36 IHDWXULQJ F\EHU DQG SK\VLFDO LQWHJUDWLRQ 7KLV LV WKH FDVH ZLWK WKH PRELOH DSSOLFDWLRQ ZKHQ XVHUV LQWHUDFW ZLWK KDUGZDUH WDFWLOH VFUHHQ IRU FRQWUROOLQJWKHVRIWZDUHSDUWRIWKH$SS

(QJLQHHULQJWKHHQWLUHXVHULQWHUIDFHRID&36WKXVUHTXLUHV WDNLQJ LQWR DFFRXQW DOO &36 HOHPHQWV LQ DQ LQWHJUDWHG IUDPHZRUNWRDGGUHVVXVDELOLW\LVVXHV

7KLVSDSHUSURSRVHVDIUDPHZRUNDGGUHVVLQJYDULRXVDVSHFWV RI &36 ZLWK D VSHFLILF IRFXV RQ WKH KXPDQ LQ WKH ORRS DVSHFW7KLVDVSHFWKDVEHHQH[SOLFLWO\LGHQWLILHGLQWKH&36 FRQFHSW PDS >@ ZKHUH WKLV FKDOOHQJHG LV SKUDVHG DV 0DQ\ F\EHUSK\VLFDO V\VWHPV LQFOXGH KXPDQV DV DQ LQWHJUDOFRPSRQHQWV+XPDQVDUHYHU\GLIILFXOWWRPRGHOVR XQGHUVWDQGLQJ DQG YDOLGDWLQJ VXFK V\VWHPV EHFRPHV SDUWLFXODUO\FKDOOHQJLQJ

Divide to Conquer: Functional Decomposition to Support Model-Based

Engineering of Command and Control of Cyber-Physical Systems

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

,, &+$//(1*(6,1(1*,1((5,1*7+(&200$1'$1'

&21752/2)&<%(53+<6,&$/6<67(06

&36 DUH LQWHQGHG WR EH XVHG E\ KXPDQV >@ YLD GLUHFW LQWHUDFWLRQ>@DQGRUXVLQJDPRQLWRULQJDQGFRQWUROXVHU LQWHUIDFH>@7KLVVHFWLRQSUHVHQWVWKHPDLQSUREOHPVWKDW KDYH WR EH WDNHQ LQWR DFFRXQW ZKHQ HQJLQHHULQJ XVHU LQWHUIDFHVRIWKHFRPPDQGDQGFRQWUROSDUWRID&36,WDOVR KLJKOLJKWV WKH QHHG IRU PRGHOEDVHG DSSURDFKHV WR VXSSRUW WKH HQJLQHHULQJ RI WKLV W\SH RI V\VWHP ,Q SDUWLFXODU LW SUHVHQWV D VHW RI UHTXLUHPHQWV IRU WKH PRGHOLQJ RI WKH FRPPDQGDQGFRQWUROSDUWRID&36

A. Monitoring, Command and Control of CPS

2XUZRUNWDNHVSODFHLQWKHFRQWH[WRIODUJHVFDOH&36WKDW WKH XVHU KDV WR PRQLWRU DQG FRQWURO HJ FRPPDQG DQG FRQWURO URRPV DLUFUDIW FRFNSLW« +RZHYHU VXFK NLQG RI SUREOHPDWLFV LV DOVR VWXGLHG LQ RWKHU DSSOLFDWLRQ GRPDLQV VXFK DV VPDUW KRPH HQYLURQPHQWV >@ 7KH XVHU KDV WR SHUIRUPWDVNVXVLQJWKH&36HJVZLWFKLQJRQWKHOLJKWEXW WKHXVHULVDOVRLQFKDUJHRIPRQLWRULQJWKHVWDWHRIWKH&36 HJFKHFNLQJZKHWKHUWKHOLJKWEXOELVEURNHQRUIDLOLQJWR HQVXUH WKDW VKH ZLOO EH DEOH WR SHUIRUP KHUKLV WDVNV 7KH WZRPDLQW\SHVRIWDVNVDUH

x 0LVVLRQ WDVNV 7KH\ DUH WDVNV WKDW KDYH WR EH DFFRPSOLVKHG E\ WKH XVHU VR WKDW VKH FDQ DFKLHYHG KHUKLVJRDOV

x 3ODWIRUP PRQLWRULQJ DQG FRQWURO WDVNV 7KH\ DUH WKH WDVNV WKDW KDYH WR EH DFFRPSOLVKHG WR HQVXUH WKDW WKH FXUUHQW VWDWH RI WKH &36 SURYLGHV VXSSRUW IRU DFFRPSOLVKLQJ WKH PLVVLRQ WDVNV 7KH\ LQFOXGH PRQLWRULQJ WKH SK\VLFDO 8, RI WKH &36 DV ZHOO DV PRQLWRULQJ DQG FRQWUROOLQJ WKH &36 XVLQJ DGHGLFDWHG XVHULQWHUIDFH

7KHVH WZR W\SHV RI WDVNV DUH WLJKWO\ FRXSOHG DQG PD\ LQWHUIHUHZLWKHDFKRWKHU)RUH[DPSOHLIWKHUHLVDFKDQJHLQ WKH SODWIRUP VWDWXV HJ VRPH HOHPHQWV RI WKH &36 DUH QRW ZRUNLQJSURSHUO\WKHXVHUZLOOKDYHWRNQRZZKHWKHUVKHLV DEOHWRFRQWLQXHKHUKLVPLVVLRQRUZKLFKSDUWRIWKHPLVVLRQ VKHFDQFRQWLQXH6KHZLOODOVRKDYHWRNQRZZKHWKHUVRPH UHFRYHU\ WDVNV KDYH WR EH SHUIRUPHG WR WDNH EDFN WKH SODWIRUP LQ D VWDWH WKDW LV DFFHSWDEOH IRU FRQWLQXLQJ WKH

PLVVLRQ (QJLQHHULQJ &36 WKXV UHTXLUHV WR EH DEOH WR GHVFULEH V\VWHPDWLFDOO\ WKH XVHU WDVN UHODWHG WR WKH PLVVLRQ DQGWKHXVHUWDVNVUHODWHGWRPRQLWRULQJDQGFRQWUROOLQJWKH SODWIRUP

B. The Need for Model-based Approaches

0XOWLSOH W\SHV RI WHFKQLTXHV DQG DVVRFLDWHG WRROV IRU UHSUHVHQWLQJWKH&36HOHPHQWVDUHUHTXLUHG>@>@>@>@ 7KLVPHDQVWKDWDVLQJOHPRGHOLQJWHFKQLTXHLVQRWDEOHWR WDNHLQWRDFFRXQWDOOWKHDVSHFWVRI&36V'XULQJWKHGHVLJQ DQG GHYHORSPHQW SURFHVV LQ RUGHU WR DQDO\]H DQG WR HQJLQHHUD&36GHGLFDWHGW\SHVRIWHFKQLTXHVDQGWRROVDUH XVHG LQ DFFRUGDQFH ZLWK WKH W\SH RI HOHPHQW WKDW LV HQJLQHHUHG >@ 'LIIHUHQW W\SHV RI UHSUHVHQWDWLRQV DQG DUWLIDFWVDUHSURGXFHGWRGHVFULEHDQGDQDO\]HHDFKHOHPHQW FRPSRVLQJ WKH &36 0RUHRYHU DQ RYHUDOO YLHZ RI WKH HOHPHQWV FRPSRVLQJ WKH &36 LV UHTXLUHG WR GHVFULEH WKH UHODWLRQVKLSVEHWZHHQWKHKHWHURJHQHRXVHOHPHQWVRID&36 DQG WKXV EHWZHHQ WKH UHSUHVHQWDWLRQV WKDW KDYH EHHQ SURGXFHGIRUWKHVHHOHPHQWV>@>@

$UHSUHVHQWDWLRQRIWKHLQWHUDFWLRQVEHWZHHQWKHHOHPHQWVRI D F\EHUSK\VLFDO V\VWHP LV UHTXLUHG WR HQVXUH FRQVLVWHQF\ DQGLQWHJUDWLRQRIWKHVHHOHPHQWV>@>@6HUYLFHRULHQWHG DUFKLWHFWXUH LV VXLWDEOH WR UHSUHVHQW WKHVH LQWHUDFWLRQV >@ >@

&XUUHQWOLWHUDWXUHUHSRUWVDERXWPRGHOEDVHGDSSURDFKHVIRU HQJLQHHULQJ WKH V\VWHP DQG VRIWZDUH RI &36 EXW GR QRW H[SOLFLWO\ WDNH LQWR DFFRXQW WKH XVHU LQWHUDFWLRQV ZLWK WKH &36V>@>@,QRUGHUWRH[SOLFLWO\WDNHLQWRDFFRXQWWKLV DVSHFW 8VHU &HQWHUHG 'HVLJQ DSSURDFKHV DUH UHTXLUHG WR GHYHORS F\EHUSK\VLFDO V\VWHPV >@>@ 1RWH WKDW VSHFLILF FKDOOHQJHVLQHQJLQHHULQJ&36VDULVHZKHQH[SOLFLWO\WDNLQJ LQWRDFFRXQWXVHULQWHUDFWLRQVZLWKD&36

x 7KHUH LV D QHHG IRU VWDQGDUGL]DWLRQ RI LQWHUDFWLRQ KDUGZDUH D QHHG IRU WRRONLWV DQG GHYHORSPHQW SURFHVVHVDV ZHOODVDQHHGIRUGHGLFDWHGSURWRW\SLQJ WRROV>@

x 7KH SRVVLEOH FRQWH[WV RI XVH ZLWK WKHLU DVVRFLDWHG UHOHYDQW RU XQGHVLUDEOH LQWHUDFWLRQV KDYH WR EH WDNHQ LQWRDFFRXQWDWGHVLJQWLPH>@

C. Requirements to model user interactions with CPS

:HSURSRVHDVHWRIUHTXLUHPHQWVIRUH[SOLFLWO\WDNLQJLQWR DFFRXQW WKH XVHU LQWHUDFWLRQV ZLWK D &36 GLUHFW XVHU LQWHUDFWLRQ DQGRU XVHU LQWHUDFWLRQV ZLWK D &36 YLD D FRPPDQGDQGFRQWUROV\VWHP(DFKUHTXLUHPHQWLVJLYHQD ODEHO HJ ³5HTBLVP´ PHDQV UHTXLUHPHQW RQH IRU LQWHUDFWLYHV\VWHPPRGHOLQJ

1) Interactive system modelling

7DNLQJLQWRDFFRXQWWKHLQWHUDFWLYHVRIWZDUHSDUWVRID&36 UHTXLUHV D QRQDPELJXRXV GHVFULSWLRQ WHFKQLTXH RI ERWK WKHLULQWHUFRQQHFWLRQDQGWKHLULQQHUEHKDYLRUDQGDQ\VHWRI QRWDWLRQV DEOH WR GHVFULEH WKHVH WZR DVSHFWV FDQ EH XVHG ZKLOHLWUHVSHFWVWKHIROORZLQJVHWRIUHTXLUHPHQWV

5HTXLUHPHQWV IRU WKH GHVFULSWLRQ RI WKH LQWHUFRQQHFWLRQ EHWZHHQVRIWZDUHHOHPHQWVRIWKH&36

x 'HVFULEH WKH LQWHUFRQQHFWLRQ EHWZHHQ WKH DUFKLWHFWXUH FRPSRQHQWVReq_ism1

x 'HVFULEH WKH LQWHUIDFH RI HDFK FRPSRQHQW RI WKH DUFKLWHFWXUH UHTXLUHG PHWKRGVVHUYLFHV DQG SURYLGHG PHWKRGVVHUYLFHV LQFRPLQJ DQG RXWJRLQJ HYHQWV Req_ism2

x 'HVFULEH WKH FRPPXQLFDWLRQ NLQG EHWZHHQ WKHVH FRPSRQHQWVV\QFKURQRXVRUDV\QFKURQRXVXQLFDVWRU PXOWLFDVW«Req_ism3

5HTXLUHPHQWV IRU WKH GHVFULSWLRQ RI WKH LQQHU EHKDYLRU RI VRIWZDUHHOHPHQWVRIWKH&36

x 'HVFULEHWKHVHWRISRVVLEOHDFWLRQVReq_ism4 x 'HVFULEHWKHVHWRIRSHUDWRU¶VDFWLRQVReq_ism5 x 7R VXSSRUW WKH GLYHUVLW\ RI SK\VLFDO GHYLFH WKH

QRWDWLRQV PXVW EH DEOH WR VXSSRUW WKH GHVFULSWLRQ RI FRPSOH[ EHKDYLRU WUXH FRQFXUUHQF\ LQILQLWH VWDWHV ERWKTXDOLWDWLYHDQGTXDQWLWDWLYHWHPSRUDODVSHFWVHWF Req_ism6

x 'HVFULEH KRZ XVHU DFWLRQV RU LQQHU VWDWH FKDQJHV PRGLI\WKHSUHVHQWDWLRQReq_ism7

x 7REHXVHGDVSDUWRIDXVHUFHQWHUHGGHVLJQSURFHVVLW PXVW HDVH SURWRW\SLQJ DQG XVHU WHVWLQJ H[HFXWDELOLW\ PRGLILDELOLW\HWFReq_ism8

2) Operator tasks modeling

7DNLQJ LQWR DFFRXQW XVHU DFWLYLWLHV IRU WKH FRPPDQG DQG FRQWURORID&36DVZHOODVWKHZD\WKH\PD\LQWHUDFWZLWK WKH &36 GLUHFWO\ RU LQGLUHFWO\ UHTXLUHV SUHFLVH DQG FRPSOHWH GHVFULSWLRQ RI WKHLU DFWLYLWLHV )XUWKHUPRUH LQ RUGHU WR EH DEOH WR DQDO\]H SRWHQWLDO XVHU HUURUV WKDW PD\ KDSSHQDWUXQWLPHWKHIROORZLQJVHWRIUHTXLUHPHQWVKDVWR EHPDWFK

x ,GHQWLI\ DQG GHVFULEH LQ D FRPSOHWH DQG XQDPELJXRXV ZD\ WKH XVHU WDVNV ZLWK WKH &36 ZKHWKHU WKH\ LQWHUDFW LQ D GLUHFW ZD\ RU ZLWK WKH &RPPDQGDQG&RQWURORIWKH&36Req_otm1 x ,GHQWLI\ DQG GHVFULEH WKH 'DWD LQIRUPDWLRQ

REMHFWV NQRZOHGJH PDQLSXODWHG E\ D XVHU IRU DFFRPSOLVKLQJKHUKLVWDVNVReq_otm2

,,, $*(1(5,&$5&+,7(&785(723529,'($129(5$//

9,(:217+((/(0(176&20326,1*7+(&36

7KH SURSRVHG DUFKLWHFWXUH HQDEOHV WKH VHSDUDWLRQ RI D FRPSOH[ V\VWHP LQWR VHYHUDO FRPSRQHQWV 7KHVH FRPSRQHQWVDUHWKHQHDVLHUWRDSSUHKHQG%HVLGHWKLVWKHVH FRPSRQHQWVDUHVWURQJO\FRQVLVWHQWDQGGLPO\FRXSOHG7KLV DOORZV WKH VHSDUDWLRQ RI FRQFHUQV IRU LQVWDQFH WKH FRPSRQHQWV UHODWHG WR WKH 8,V DUH VLWXDWHG ZLWKLQ WKH 8, VLGHDQGWKHORFDOLW\RIPRGLILFDWLRQDPRGLILFDWLRQZLWKLQ RQHRIWKHFRPSRQHQWVZLOOQRWQHFHVVDULO\LPSDFWWKHRWKHU FRPSRQHQWV

Fig. 2 SUHVHQWV D JHQHULF DUFKLWHFWXUH PL[LQJ ERWK SK\VLFDO

V\VWHPVDQGVRIWZDUHFRPSRQHQWVLOOXVWUDWLQJKRZWKH&36 PRGHOOLQJFDQEHEURNHQGRZQLQWRJHQHULFFRPSRQHQWVLQ RUGHU WR VXSSRUW WKH PRGHOEDVHG HQJLQHHULQJ RI LWV FRPPDQGDQGFRQWUROV\VWHP,QWKLV)LJXUH ZHLGHQWLILHG WKUHHSDUWVLWKH³0RQLWRUHGDQG&RQWUROOHG&36´LLWKH ³7UDQVGXFLQJ DQG &RQWURO´ DQG LLL WKH ³&RPPDQG DQG &RQWURO6\VWHPRIWKH&36´(DFKRIWKHPLVGLYLGHGLQRQH RU PRUH FRPSRQHQWV HLWKHU EHLQJ KDUGZDUH RU VRIWZDUH FRPSRQHQWVZLWKDSUHFLVHUROH7KHIROORZLQJSDUDJUDSKV GHVFULEHHDFKRQHRIWKHVHFRPSRQHQWVIURPOHIWWRULJKWDQG

H[HPSOLI\ WKHLU XVDJH XVLQJ WKH 3KLOLSV +XH &36Fig. 3

SUHVHQWV WKH LQVWDQWLDWLRQ RI RXU JHQHULF DUFKLWHFWXUH WR WKH 3KLOLSV+XH&36 +XH&36 +XHOLJKWEXOE +XH 38, +XH 6, 7UDQVGXFLQJ DQG&RQWURO +XH%0 6PDUWSKRQH +XH8,%0

6PDUWSKRQH 7RXFKVFUHHQ6PDUWSKRQH

5HPRWH&RQWURO +XH8,%0 5HPRWH &RQWURO 5HPRWH &RQWURO  )LJ$SSOLFDWLRQRIWKHJHQHULFDUFKLWHFWXUHWRWKH3KLOLSV+XH&36 A. The Monitored and Controlled CPS

7KLV SDUW FRUUHVSRQGV WR WKH &36 GHYLFH WKDW LV PRQLWRUHG DQGFRQWUROOHGE\WKHXVHU ,OOXVWUDWLRQZLWKWKH3KLOLSV+XH&36WKH³0RQLWRUHGDQG&RQWUROOHG&36´ Fig. 3FRUUHVSRQGVWRWKH+XHOLJKWEXOE   0RQLWRUHGDQG&RQWUROOHG&36 &363K\VLFDO'HYLFH 3K\VLFDO8VHU ,QWHUIDFH 6RIWZDUH,QWHUIDFH 7UDQVGXFLQJDQG&RQWURO %HKDYLRXUDO0RGHORIWKHPRQLWRUHG DQGFRQWUROOHG&36 &RPPDQGDQG&RQWURO6\VWHPRIWKH&36 8VHU,QWHUIDFH

%HKDYLRXUDO0RGHO 3K\VLFDO8VHU_,QWHUIDFH

<ĞLJ ^LJƐƚĞŵ ZŽůĞ _{+DUGZDUH'HYLFH}0HFKDQLFDODQG _{ŽŵƉŽŶĞŶƚ}^ŽĨƚǁĂƌĞ ŽŵŵƵŶŝĐĂƚŝŽŶ /ŶƉƵƚ KƵƚƉƵƚ )LJ$JHQHULFDUFKLWHFWXUHIRUVXSSRUWLQJWKHHQJLQHHULQJRIFRPPDQGDQGFRQWURO&36V

1) The CPS Physical Device

7KH &36 SK\VLFDO GHYLFH LV WKH FRQFUHWH SK\VLFDO V\VWHP WKDW KDV WR EH RSHUDWHG XVLQJ D FRPPDQG DQG FRQWURO XVHU LQWHUIDFH$GHWDLOHGGHVFULSWLRQRILWVLQQHUEHKDYLRULVQRW DOZD\V NQRZQ DQG QRW DOZD\V PDQGDWRU\ WR DOORZ RSHUDWLRQV 7KH LQQHU VWDWH RI VXFK GHYLFH LV XVXDOO\ GLVFRYHUHG XVLQJ VHQVRUV ZKLOH LW FDQ EH KDQGOHG XVLQJ DFWXDWRUV

,OOXVWUDWLRQ ZLWK WKH 3KLOLSV +XH &36 WKH ³+XH OLJKW EXOE´ LQ Fig. 3 FRUUHVSRQGVWRWKHSK\VLFDOSDUWRIWKH+XH&36LHWKHOLJKWEXOEGHYLFH

2) The Physical User Interface

7KHSK\VLFDOXVHULQWHUIDFH38,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³+XH38,´ LQFig. 3FRUUHVSRQGVWRERWKWKHOLJKWDQGKHDWSURGXFHGE\WKHOLJKWEXOE WKDWDUHGLUHFWO\SHUFHLYDEOHE\WKHXVHU$QRWKHUSRVVLEOHLQWHUDFWLRQWKDW PD\EHGHVFULEHGZLWKLQWKLVFRPSRQHQWLVWKHIDFWWKDWWKHXVHUPD\GHFLGH WRXQSOXJWKHOLJKWEXOE

3) The Software Interface

7KH VRIWZDUH LQWHUIDFH 6, FRPSRQHQW RI WKH ³0RQLWRUHG DQG&RQWUROOHG&36´SDUWSURYLGHVDYLHZRQKRZWRKDQGOH WKH &36 SK\VLFDO GHYLFH DQG KRZ WR DVVHVV LWV LQQHU VWDWH 7KLV FRPSRQHQW SURYLGHV IRU DQ H[WHUQDO XVH D VHW RI REVHUYDEOH SDUDPHWHUV WKDW DUH WKH UHVXOW RI WKH GLVFUHWL]DWLRQ RI SRWHQWLDOO\ FRQWLQXRXV SK\VLFDO SKHQRPHQRQIRULQVWDQFHLWFRXOGSURYLGHDQHQJLQHVSHHG XVLQJ VHQVRUV ,W WKXV SURYLGHV D VHW RI REVHUYDWLRQ PHFKDQLVPVZKRVHNLQGGHSHQGVRIWHFKQRORJLHVXVHGDQGD VHW RI FRPPDQGV WKDW PD\ EH SHUIRUPHG RQ WKH &36 SK\VLFDO GHYLFH IRU LQVWDQFH VWDUWLQJ RU VWRSSLQJ WKH GHYLFH ,W FDQ SXVK YDOXHV RI WKH KDQGOHG SDUDPHWHUV WR VRPH OLVWHQHUV XVLQJ GHGLFDWHG FRPPXQLFDWLRQ PHDQV XQLFDVW RU PXOWLFDVW V\QFKURQRXV RU DV\QFKURQRXV RU LW FDQUHTXLUHOLVWHQHUWRSXOOYDOXHVIURPLW

,OOXVWUDWLRQZLWKWKH3KLOLSV+XH&367KLVFRPSRQHQWQDPHG³+XH6,´LQ

Fig. 3 ILUVW GHVFULEHV WR WKH VHW RI REVHUYDWLRQ PHFKDQLVPV DOORZLQJ WR

NQRZWKDWWKHOLJKWEXOELV212))ZKDWLVLWVFRORUZKDWLVLWVLQWHQVLW\ 7KHQLWDOVRGHVFULEHVWKHIDFWWKDWWKHOLJKWEXOESURYLGHVSRVVLELOLWLHVWR KDQGOHLWVVWDWHWKHSRVVLELOLW\WRWXUQLWRQWRWXUQLWRIIWRFKDQJHLWVFRORU RULWVLQWHQVLW\«

B. The Transducing and Control

7KH WUDQVGXFLQJ DQG FRQWURO SDUW LV FRPSRVHG RI D XQLTXH FRPSRQHQW WKH EHKDYLRUDO PRGHO %0 RI WKH PRQLWRUHG DQG FRQWUROOHG &36 7KLV FRPSRQHQW LV UHVSRQVLEOH IRU WUDQVODWLQJ ERWK ORZOHYHO LQIRUPDWLRQ IURP WKH VRIWZDUH LQWHUIDFH LQWR KLJKHUOHYHO RSHUDWLRQ FHQWULF GDWD IRU LQVWDQFHWKHDYDLODELOLW\RIDQHOHFWULFVHUYLFHGHSHQGVRIDQ HQJLQH VSHHG WKDW PXVW EH DERYH D WKUHVKROG DQG KLJKHU OHYHO FRPPDQGV IURP WKH RSHUDWRUV LQWR ORZOHYHO

FRPPDQGVFRPSDWLEOHZLWKWKHGHYLFH,QRWKHUZRUGVWKLV FRPSRQHQWLVUHVSRQVLEOHIRUGLJLWL]LQJWKHEHKDYLRURIWKH PRQLWRUHG DQG FRQWUROOHG &36 ZKLFK LV E\ GHILQLWLRQ DQDORJ,WLVLPSRUWDQWWRQRWHWKDWWKLVFRPSRQHQWKDVEHHQ GHILQHG ZLWKLQ RXU DUFKLWHFWXUH DV D UROH DQG QRW DV D V\VWHP ,QGHHG IROORZLQJ WKH W\SH RI &36 WKDW ZLOO EH PRQLWRUHG DQG FRQWUROOHG WKLV FRPSRQHQW PD\ EH SODFHV ZLWKLQ WKH PRQLWRUHG DQG FRQWUROOHG &36 V\VWHP LWVHOI ZLWKLQ LWV FRPPDQG DQG FRQWURO V\VWHP RU ZLWKLQ D WKLUG ³LQWHUPHGLDWH´V\VWHP

,OOXVWUDWLRQZLWKWKH3KLOLSV+XH&367KLVFRPSRQHQWQDPHG³+XH%0´ LQFig. 3UHSUHVHQWVWKHGLVFUHWHEHKDYLRURIWKH+XHOLJKWEXOE&RQFUHWHO\ WKHEHKDYLRUDOPRGHOERWKGHVFULEHVWKHGLIIHUHQWGLVFUHWHVWDWHVRIWKHOLJKW EXOE VXFK DV 21 2)) 7XUQLQJ 21 7XUQLQJ 2))« DQG WKH GLIIHUHQW SRVVLELOLWLHV IRU VWDWH FKDQJHV HJ KRZ LV LW SRVVLEOH WR VZLWFK IURPWKH21VWDWHWRWKH2))VWDWHSDVVLQJE\WKH7XUQLQJ2IIVWDWH C. The Command and Control System of the CPS

7KHFRPPDQGDQGFRQWUROV\VWHPRIWKH&36FRUUHVSRQGVWR WKH V\VWHP WKDW HQDEOHV WKH XVHU WR LQWHUDFW ZLWK WKH PRQLWRUHG DQG FRQWUROOHG &36 ,W LV LPSRUWDQW WR QRWH WKDW IRU WKH VDPH PRQLWRUHG DQG FRQWUROOHG &36 WKHUH PD\ EH VHYHUDOFRPPDQGDQGFRQWUROV\VWHPVVHHIRULQVWDQFHWKH H[DPSOHRIWKH3KLOLSV+XH&36

,OOXVWUDWLRQZLWKWKH3KLOLSV+XH&36$VWKH3KLOLSV+XH&36SURYLGHVWZR FRPPDQG DQG FRQWURO V\VWHPV WKH XVHU FDQ FKRRVH WR XVH WKH UHPRWH FRQWURO RU WKH VPDUWSKRQH Fig. 3 SUHVHQWV WZR GLIIHUHQW FRPPDQG DQG FRQWUROV\VWHPVIRUWKH+XH&36UHVSHFWLYHO\QDPHG³5HPRWHFRQWURO´DQG ³6PDUWSKRQH´

7KH FRPPDQG DQG FRQWURO V\VWHP LV GLYLGHG LQ WKH WZR IROORZLQJGLIIHUHQWFRPSRQHQWV

1) The Behavioral Model of the User Interface (UIBM)

7KH EHKDYLRUDO PRGHO RI WKH XVHU LQWHUIDFH 8,%0 8VHU ,QWHUIDFH%HKDYLRUDO0RGHOGHDOVZLWK

x WKH UHQGHULQJ RI SDUDPHWHUV SURYLGHG E\ WKH EHKDYLRUDO PRGHO RI WKH PRQLWRUHG DQG FRQWUROOHG &36

x WKH DFWLYDWLRQ DQG FRQWURO RI WKH XVHU¶V DFWLRQV LQ RUGHU WR SURYLGH FRPPDQGV WR WKH EHKDYLRUDO PRGHORIWKHPRQLWRUHGDQGFRQWUROOHG&36 7KLV FRPSRQHQW PD\ KDYH VRPH ORFDO LQWHUDFWLRQ EHKDYLRU WKDW GRHV QRW GLUHFWO\ DIIHFW WKH GHYLFH IRU LQVWDQFH VRPH WHPSRUDU\ VWDWHV GXULQJ RSHUDWLRQV EHIRUH DFWLQJ RQ WKH V\VWHP$VWKLVEHKDYLRUPD\EHFRPSOH[WKLVFRPSRQHQW LV XVXDOO\ EURNHQ GRZQ LQ VPDOOHU FRPPXQLFDWLQJ VXE FRPSRQHQWV

,OOXVWUDWLRQ ZLWK WKH 3KLOLSV +XH &36 )RU WKH UHPRWH FRQWURO 7KLV FRPSRQHQWQDPHG³+XH8,%05HPRWH&RQWURO´LQFig. 3GHVFULEHVWKH EHKDYLRURIWKHUHPRWHFRQWURO)RULQVWDQFHLWGHVFULEHVWKHIDFWWKDWDNH\ RIWKHUHPRWHFRQWUROFDQKDYHWZRVWDWHV3UHVVHGRU5HOHDVHG)RUWKH VPDUWSKRQH7KLVFRPSRQHQWQDPHG³+XH8,%06PDUWSKRQH´LQFig. 3 GHVFULEHVWKHEHKDYLRURIWKHDSSOLFDWLRQWKDWLVUXQQLQJRQWKHVPDUWSKRQH )RU LQVWDQFH WKLV FRPSRQHQW GHVFULEHV WKH GLIIHUHQW PRGHV RI WKH DSSOLFDWLRQ

2) The User Interface device

7KHXVHULQWHUIDFHGHYLFH8,'LVDVHWRILQSXWDQGRXWSXW GHYLFHV GHGLFDWHG WR LQWHUDFW ZLWK WKH PRQLWRUHG DQG FRQWUROOHG &36 IRU LQVWDQFH LQ DQ DLUFUDIW LW FDQ EH GHGLFDWHG VFUHHQV NH\ERDUGV SK\VLFDO EXWWRQV RU SK\VLFDO URWDWRUV 7KH EHKDYLRUDO PRGHO RI WKH 8VHU ,QWHUIDFH DVNV

WKH 8VHU ,QWHUIDFH GHYLFH IRU UHQGHULQJ DQG DFWLRQV SHUIRUPHG ZLWK WKH LQSXW GHYLFHV DUH WUDQVPLWWHG WR DQG KDQGOHGE\WKHEHKDYLRUDOPRGHORIWKHXVHULQWHUIDFH

,OOXVWUDWLRQ ZLWK WKH 3KLOLSV +XH &36 For the remote control. 7KLV FRPSRQHQWQDPHG³+XH8,'.H\VRIWKHUHPRWHFRQWURO´LQ Fig. 3LV WKH FRQFUHWH UHPRWH FRQWURO GHYLFH LW LV WKXV FRPSRVHG RI WKH GLIIHUHQW NH\VRIWKHUHPRWHFRQWURO For the smartphone.7KLVFRPSRQHQWQDPHG ³+XH 8,'  6PDUWSKRQH WRXFK VFUHHQ´ LQ Fig. 3 LV WKH FRQFUHWH GHYLFH ZLWKZKLFKWKHXVHUFDQLQWHUDFWLWLVWKXVWKHVPDUWSKRQHWRXFKVFUHHQ

,9$08/7,02'(/6%$6('$3352$&+72'(6&5,%(7+( ',))(5(177<3(62)(/(0(176,17+(&36

:H KHUH SURSRVH D VHW RI QRWDWLRQV WKDW IXOILOO WKH UHTXLUHPHQWV WR PRGHO XVHU LQWHUDFWLRQV ZLWK &36 ZKLFK KDYH EHHQ LGHQWLILHG LQ VHFWLRQ ,,& (QJLQHHULQJ ODUJH VFDOHV\VWHPVUHTXLUHVEHLQJDEOHWRGHVFULEHDODUJHDPRXQW RI LQIRUPDWLRQ FRPSXWHUDLGHG VRIWZDUH WRROV DUH WKXV UHTXLUHG

A. Notations and tools

1) Interconnection between software elements (Req_ism1, Req_ism2, Req_ism3)

7KHGHVFULSWLRQRIWKHLQWHUFRQQHFWLRQEHWZHHQFRPSRQHQWV LVSHUIRUPHGXVLQJWKH&25%$&RPSRQHQW0RGHO>@WKDW DOORZVWKHGHVFULSWLRQRIWKHNLQGRIFRPPXQLFDWLRQHYHQW RU PHWKRG FDOO EDVHG DQG WKH REVHUYDEOH SDUDPHWHUV WKURXJKWKHGHILQLWLRQRIDWWULEXWHV

2) Inner behavior of software elements (Req_ism4 to Req_ism8))

,&2,QWHUDFWLYH&RRSHUDWLYH2EMHFWLVDIRUPDOGHVFULSWLRQ WHFKQLTXH EDVHG RQ 3HWUL QHWV DQG GHGLFDWHG WR WKH VSHFLILFDWLRQ RI LQWHUDFWLYH V\VWHPV >@ ,W XVHV FRQFHSWV ERUURZHG IURP WKH REMHFWRULHQWHG DSSURDFK G\QDPLF LQVWDQWLDWLRQ FODVVLILFDWLRQ HQFDSVXODWLRQ LQKHULWDQFH FOLHQWVHUYHUUHODWLRQVKLSWRGHVFULEHWKHVWUXFWXUDORUVWDWLF DVSHFWV RI V\VWHPV DQG XVHV KLJKOHYHO 3HWUL QHWV >@ WR GHVFULEH WKHLU G\QDPLF RU EHKDYLRUDO DVSHFWV ,&2 LV GHGLFDWHGWRWKHPRGHOLQJDQGWKHLPSOHPHQWDWLRQRIHYHQW GULYHQ VRIWZDUH FRPSRQHQWV XVLQJ VHYHUDO FRPPXQLFDWLQJ REMHFWV WR PRGHO WKH V\VWHP ZKHUH ERWK EHKDYLRUV RI REMHFWV DQG FRPPXQLFDWLRQ SURWRFRO EHWZHHQ REMHFWV WKDW DUHGHVFULEHGE\3HWULQHWV

3HW6KRS3HWUL1HWZRUNVKRSLVDWRROIRUFUHDWLQJHGLWLQJ VLPXODWLQJ DQG DQDO\]LQJ V\VWHP PRGHOV XVLQJ WKH ,&2 ,QWHUDFWLYH &RRSHUDWLYH 2EMHFWV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RUH[WHUQDOSURSHUWLHV HJDYDLODELOLW\RIZLGJHWV1RWHWKDWLWLVQRWSRVVLEOHWR

H[SUHVV WKHVH XVHU LQWHUIDFH SURSHUWLHV H[SOLFLWO\ ± WKH DQDO\VW QHHGV WR H[SUHVV WKHVH SURSHUWLHV DV VWUXFWXUDO DQG EHKDYLRUDO 3HWUL QHW SURSHUWLHV WKDW FDQ EH WKHQ DQDO\]HG DXWRPDWLFDOO\LQ3HW6KRS

3) Precise and complete description of user activities (Req_otm1, Req_otm2)

+$067(56 +XPDQ FHQWHUHG $VVHVVPHQW DQG 0RGHOLQJ WR6XSSRUW7DVN(QJLQHHULQJIRU5HVLOLHQW6\VWHPVLVDWDVN PRGHOLQJ QRWDWLRQ ,W SURYLGHV VXSSRUW WR GHVFULEH DQG VWUXFWXUH XVHUV¶ JRDOV DQG VXEJRDOV LQWR KLHUDUFKLFDO WDVN WUHHV 4XDOLWDWLYH WHPSRUDO UHODWLRQVKLSV DPRQJ WDVNV DUH GHVFULEHGE\RSHUDWRUV9DULRXVQRWDWLRQDOHOHPHQWVVXSSRUW PRGHOLQJRIVSHFLDOL]HGWDVN W\SHVH[SOLFLWUHSUHVHQWDWLRQV RIGDWDDQGNQRZOHGJH

+$067(56 LV DOVR WKH QDPH RI WRRO IRU HGLWLQJ DQG VLPXODWLQJ +$067(56 WDVN PRGHOV >@ ,W SURYLGHV VXSSRUWIRUGHVFULELQJDQGVWUXFWXULQJDODUJHDPRXQWRIXVHU WDVNV7KHVHVWUXFWXULQJPHFKDQLVPVHQDEOHWKHEUHDNGRZQ RI D WDVN PRGHO LQ VHYHUDO RQHV WKDW FDQ EH UHXVHG LQ WKH VDPH RU GLIIHUHQW WDVN PRGHOV 7KH +$067(56 WDVN PRGHOLQJ WRRO SURYLGHV VXSSRUW IRU FUHDWLQJ HGLWLQJ DQG VLPXODWLQJWKHH[HFXWLRQRIWDVNPRGHOV

B. Process

7KHUHLVQRXQLTXHSURFHVVWRIROORZLQRUGHUWRPRGHOWKH YDULRXV HOHPHQWV RI WKH SURSRVHG DUFKLWHFWXUH 'HSHQGLQJ RQ WKH SXUSRVH RI WKH HQJLQHHULQJ RI WKH FRPPDQG DQG FRQWURORIWKH&36VRPHDUFKLWHFWXUHFRPSRQHQWVPLJKWEH FRQVLGHUHGILUVW

x :KHQ GHVLJQLQJ WKH HQWLUH &36 IRU LQVWDQFH ZKHQ FUHDWLQJ D QHZ RQH W\SLFDOO\ WKH IORZ RI PRGHOLQJ ZRXOGEHIURPWKHSK\VLFDOV\VWHPWRWKHXVHULQWHUIDFH

SDUW OHIW WR ULJKW RQ WKH DUFKLWHFWXUH LQFig. 3 7KLV

IORZ RI PRGHOLQJ ZDV DSSOLHG LQ WKH FDVH RI WKH DQDO\VLVRIWKHFRPPDQGDQGFRQWURORIWKH$38 x :KHQ GHVLJQLQJ D QHZ 8VHU ,QWHUIDFH 8, RI WKH

FRPPDQGDQGFRQWURORIDQH[LVWLQJ&36WKHIORZRI PRGHOLQJ ZRXOG IRFXV RQ WKH 8, PRGHOV OHDYLQJ XQWRXFKHG WKH RWKHU RQHV ,Q WKLV FDVH WKH OLVW RI VHUYLFHVSURYLGHGE\WKHRWKHUHOHPHQWVRIWKH&36DUH FRQVLGHUHGDVLQSXWIRUWKHGHVLJQRIWKH8,

9 (;75$&76)5207+($33/,&$7,212)7+($3352$&+72

$1$,5&5$)76<67(0

:HKHUHSUHVHQWH[WUDFWVRIPRGHOVWKDWKDYHEHHQSURGXFHG GXULQJWKHDQDO\VLVRIDQH[LVWLQJFRPPDQGDQGFRQWURO8, IRU DLUFUDIW V\VWHPV ,Q WKLV H[DPSOH ZH IRFXV RQ RQH V\VWHPWKH$X[LOLDU\3RZHU8QLW$38

7KH $38 LV D WXUELQH WKDW HQDEOHV DQ DLUFUDIW WR EH DXWRQRPRXV UHJDUGLQJ HOHFWULFDO SRZHU DQG EOHHG DLU 7KH SLORWVFDQLQWHUDFWZLWKLWWKURXJKDXVHULQWHUIDFHPDGHXS RI WZR GLVWLQFW SDUWV WKH RYHUKHDG FRQWURO SDQHO DQG WKH FRQWURODQGGLVSOD\V\VWHP'HSHQGLQJRQWKHIOLJKWSKDVH LIHQDEOHGWKH$38FDQSURYLGH EOHHGDLUIRUHQJLQHVWDUW DQGDLUFRQGLWLRQLQJDQGHOHFWULFDOSRZHUEOHHGDLUWRDVVLVW

HQJLQHVWDUWEOHHGDLUDVDEDFNXSIRUSUHVVXUL]DWLRQDQGDLU FRQGLWLRQLQJDQGEDFNXSIRUHOHFWULFDOSRZHU

$V SUHVHQWHG LQ Fig. 4 WKH $38 QHHGV HOHFWULFDO DQG IXHO UHVRXUFHVDQGGHOLYHUVHOHFWULFLW\DQGEOHHGWRWKHDLUFUDIW



)LJ2YHUYLHZRIWKH$38V\VWHPDQGLWVFRPPDQGDQGFRQWUROV\VWHPV

7KHSLORWVFDQLQWHUDFWZLWKWKH$38WKURXJKWZRGLIIHUHQW XVHU LQWHUIDFHV WKH RYHUKHDG FRQWURO SDQHO DQG WKH GLVSOD\ XQLWVHHFig. 4

Fig. 7SUHVHQWVWKHDSSOLFDWLRQRIWKHJHQHULFDUFKLWHFWXUHWR

WKHFRPPDQGDQGFRQWURORIWKH$38V\VWHP$VPHQWLRQHG LQ WKH LQWURGXFWLRQ XVLQJ 3KLOLS 6PDUW +XH ODPS WKH SK\VLFDO SDUW RI WKH F\EHU SK\VLFDO V\VWHP LV DOVR SHUFHLYDEOH E\ WKH RSHUDWRU ,Q WKH FDVH RI WKH $38 &36 RXWSXWLQIRUPDWLRQVXFKDVYLEUDWLRQVVPRNHDQGQRLVHFDQ EH SHUFHLYHG E\ WKH SLORW DV LOOXVWUDWHG E\ WKH DUURZV EHWZHHQWKHXVHUDQGWKH3K\VLFDO8VHU,QWHUIDFHFRPSRQHQW

RIWKH$38LQFig. 7

A. Extract from the representation of the interconnection between software elements

Fig. 5SUHVHQWV WKH DEVWUDFW FRPSRQHQW EDVHG UHSUHVHQWDWLRQ

RIWKH³$386,´HOHPHQW



)LJ$EVWUDFW&RUEDUHSUHVHQWDWLRQRIWKH$38+:,QWHUIDFH

7KH XSSHU SDUW RI WKH FRPSRQHQW FRUUHVSRQGV WR WKH FRPPDQGIORZIURPWKHXVHULQWHUIDFHWRWKH$38V\VWHP ZKLOH WKH ORZHU SDUWV FRUUHVSRQG WR WKH LQIRUPDWLRQ DERXW

WKH $38 V\VWHP WKDW KDV WR EH SUHVHQWHG RQ WKH XVHU

LQWHUIDFH Fig. 6 SUHVHQWV DQ H[FHUSW RI WKH FRQFUHWH

UHSUHVHQWDWLRQRIWKHHOHPHQW³$386,´



)LJ&RQFUHWHUHSUHVHQWDWLRQRIDVXEVHWRIWKH$38+:,QWHUIDFH

:KHQWKHRSHUDWRUSUHVVHVWKH³6WDUW$38´EXWWRQWKHHYHQW IORZV WKURXJK HDFK HOHPHQW RI WKH DUFKLWHFWXUH DQG LV UHFHLYHG E\ WKH ³$38 6,´ FRPSRQHQW VWDUW IDFHW RQ WRS

ULJKWKDQGVLGHLQFig. 6,QWXUQWKLVFRPSRQHQWWULJJHUVWKH

VWDUWLQJRIWKH$38SK\VLFDOGHYLFHVWDUWUHFHSWDFOHRQWRS

OHIWKDQGVLGHLQFig. 6

B. Extract from the representation of the inner behavior of the software elements

Fig. 8SUHVHQWVDQH[WUDFWRIWKH,&2PRGHORIWKHEHKDYLRUDO

PRGHO RI WKH $38 ³$38 %0´ LQFig. 7 7KH ILUVW ,&2

PRGHORIWKH³$38%0´,&2PRGHOFig. 8DFRUUHVSRQGV

WRWKHVZLWFKLQJIURP$38VWRSSHGWR$38VWDUWHG7KHWZR

SODFHVLQFig. 8DURXQGVKDSHVFRUUHVSRQGWRWZRGLIIHUHQW

VWDWHVRIWKH$38GHYLFHZKHQDWRNHQLVSUHVHQWZLWKLQWKH

)ODS2SHQHGSODFHDVLWLVWKHFDVHLQ)LJXUHFig. 8DWKH

$38GHYLFHLV21:KHQWKH$38GHYLFHVWDUWVWKH³$38 6,´VHQGVWKHVWDUWLQJHYHQW7KLVHYHQWLIWKH³$38%0´ KDVDWRNHQLQWKH)ODS2SHQHGSODFHWULJJHUVWKHILULQJRI WKH VZLWFK7R6WDUWLQJ WUDQVLWLRQ UHFWDQJOH VKDSH 7KH ILULQJRIWKLVWUDQVLWLRQILUVWVHQGVWKHDSX6WDUWLQJKLJKHU OHYHO HYHQW WKDW FDQ EH XVHG E\ WKH ³$38 8,%0V´ DQG VHFRQGFRQVXPHVWKHWRNHQLQWKH)ODS2SHQHGSODFHDQG SXWDQHZWRNHQLQWKH6WDUWLQJB(OHF5HTXLUHGSODFH

7KHVHFRQG,&2PRGHORIWKH³$38%0´,&2PRGHOFig. 8

EFRUUHVSRQGVWRWKHVZLWFKLQJIURP$38VWDUWLQJWR$38

VWDUWHG ,Q Fig. 8 E D WRNHQ LV SUHVHQW LQ WKH

6WDUWLQJB)XHO5HTXLUHG SODFH :KHQ WKH $38 GHYLFH URWDWLRQ VSHHG LQFUHDVHV WKH ³$38 6,´ VHQGV Q6SHHG&KDQJHG HYHQWV 7KHVH HYHQWV DUH FRQWDLQLQJ D SDUDPHWHU QDPHG Q6SHHG FRUUHVSRQGLQJ WR WKH YDOXH RI WKHURWDWLRQVSHHG:KHQWKLVSDUDPHWHULVVXSHULRURUHTXDO WRWKHVZLWFK7R$YDLOWUDQVLWLRQLVILUHGDVVWDWHGE\LWV HYHQWFRQGLWLRQ





)LJ([FHUSWRIWKH³$38%0´,&2PRGHO

Fig. 9SUHVHQWVDQH[WUDFWRIWKH,&2PRGHORIWKHEHKDYLRUDO

PRGHORIWKH8VHU,QWHUIDFH RIWKHRYHUKHDGFRQWUROSDQHO 7KLV H[WUDFW LV WKH PRGHO RI WKH KDQGOLQJ RI XVHU LQSXWV XVLQJ WKH ³67$57´ SXVKEXWWRQ RI WKH RYHUKHDG FRQWURO SDQHO:KHQWKHXVHUSUHVVHVWKLVSXVKEXWWRQWKHRYHUKHDG FRQWURO SDQHO GHYLFH VHQGV WKH 6WDUW3E3UHVVHG HYHQW ZKLFK WULJJHUV WKH ILULQJ RI WKH SUHVV6WDUW3E WUDQVLWLRQ :KHQWKHXVHUUHOHDVHVWKLVSXVKEXWWRQWKHRYHUKHDGFRQWURO SDQHOGHYLFHVHQGVWKH6WDU3E5HOHDVHGHYHQWWKDWWULJJHUV WKH ILULQJ RI WKH DSX6WDUW WUDQVLWLRQ 7KH ILULQJ RI WKLV WUDQVLWLRQ LPSOLHV WKDW WKH VWDUW PHWKRG LV FDOOHG RQ WKH ³$38 %0´ ,&2 PRGHO DSXVWDUW FRPPDQG ZLWKLQ WKH DSX6WDUWWUDQVLWLRQ:KHQWKH³$38%0´PRGHOUHFHLYHV WKLVPHWKRGFDOOLWWUDQVIHUVLWWRWKH³$386,´WKDWZLOODVN WKH$38V\VWHPWRVWDUW  )LJ([FHUSWRIWKH³$388,%0RYHUKHDGFRQWUROSDQHO´,&2PRGHO KDQGOLQJRIXVHULQSXWVZLWKWKH³67$57´3XVK%XWWRQ C. Extract from the representation of the user activities

Fig. 10SUHVHQWVDQH[WUDFWRIWKHWDVNPRGHOGHVFULELQJDVHW RIXVHUDFWLRQVWKDWDUHWKHILUVWVWHSWRVWDUWWKH$38QDPHG ³3HUIRUP0DVWHUVZ´EHFDXVHWKH0DVWHUVZLVDEXWWRQWKDW QHHGVWREHSXVKHGWRHQDEOHWKHVWDUWLQJRIWKH$38  )LJ([WUDFWRIWKH³6WDUW$38´WDVNPRGHO 7KHXVHUILUVWKDVWRSXVKWKH³0DVWHUVZ´EXWWRQWKHQWKH EXWWRQ LOOXPLQDWHV LQWHUDFWLYH RXWSXW WDVN ODEHOHG ³06: LOOXPLQDWH ³21´ 6LPXOWDQHRXVO\ WKH $38 VG SDJH LV GLVSOD\HGLQWKHFRPPDQGDQGFRQWUROLQWHUIDFHLQWHUDFWLYH RXWSXWWDVNODEHOHG³'LVSOD\$38VGSDJH´8OWLPDWHO\WKH XVHU SHUFHLYHV WKDW WKH EXWWRQ LV 21 XVHU SHUFHSWLYH WDVN ODEHOHG ³3HUFHLYH ³21´´ DQG SHUFHLYHV WKH VG SDJH

GLVSOD\HG XVHU SHUFHSWLYH WDVN ODEHOHG ³3HUFHLYH $38 VG SDJH´

9, 5(/$7(':25.

A. Prototyping and Validation Approaches for Engineering Command and Control of CPS

0XHOOHU HW DO >@ KDYH FRLQHG D WRROVHW IRU YLUWXDO SURWRW\SLQJRI&36WKDWSURYLGHVVXSSRUWIRUPRGHOLQJWKH ZKROHVHWRIFRPSRQHQWVFRPSRVLQJD&36IURPSK\VLFDO HQYLURQPHQW WR WKH PRQLWRULQJ DQG FRQWURO XVHU LQWHUIDFH LQFOXGLQJWKHPRGHOLQJRIPHFKDQLFDOKDUGZDUHHOHFWURQLFV DQGVRIWZDUH,WDLPVDWUHDFKLQJDWLPHSHUIRUPDQFHWKDWLV FORVHWRWKHUHDOOLIHXVDJHRIWKHDQDO\]HG&36LQRUGHUWR SURYLGH VXSSRUW IRU YHULILFDWLRQ DQG YDOLGDWLRQ 6FKLUQHU HW DO >@ SURSRVH D SURWRW\SLQJ HQYLURQPHQW IRU H[SORULQJ LQWHUDFWLRQVEHWZHHQ XVHUVDQGDVVLVWLYHURERWVLQRUGHUWR SURYLGH VXSSRUW IRU DXJPHQWLQJ XVHU LQWHUDFWLRQV ZLWK WKH SK\VLFDO ZRUOG 7KHVH NLQG RI DSSURDFKHV DUH QRW PRGHO EDVHGDQGWKHSURGXFHGDUWHIDFWVFDQQRWEHGLUHFWO\UHXVHG LQ D GHYHORSPHQW SURFHVV 7DQ HW DO >@ SUHVHQW WKH SULQFLSOHRIDSURWRW\SHDUFKLWHFWXUHIRU&36VZKLFKFRYHUV VRPH DVSHFWV QRW FRYHUHG LQ WKLV SDSHU IRU LQVWDQFH WKH HOHPHQWV GHDOLQJ ZLWK VHFXULW\ +RZHYHU >@ PLVVHV WKH SRLQWWKDWWKHKXPDQPLJKWEHLQFRQWURORIWKH&36DQGWKDW WKH&36UDLVRQG¶rWUHPLJKWEHWRVXSSRUWRSHUDWRUVLQWKH SHUIRUPDQFHRIWKHLUWDVNV

B. Model-based Engineering the Specification and Development of Command and Control of CPS

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

9,,&21&/86,21$1')8785(:25.

7KH SURSRVHG JHQHULF DUFKLWHFWXUH DQG PRGHOEDVHG DSSURDFKJLYHVDKROLVWLF YLHZRIWKH&36DQGHQDEOHVWKH LQWHJUDWLRQ RI WKH 8, PRGHOV RI WKH &36 HJ WKH ³$38 8,%0V´LQWKHLOOXVWUDWLYHH[DPSOHZLWKWKHV\VWHPPRGHOV RI WKH &36 HJ WKH ³$38 6,´ DQG WKH ³$38 %0´ LQ WKH LOOXVWUDWLYHH[DPSOHDQGWKXVSURYLGHVVXSSRUWIRU x 6SHFLI\LQJWKHFRPSRQHQWVRIWKH$38&36 x (QVXULQJFRQVLVWHQF\EHWZHHQDOORIWKHFRPSRQHQWVRI WKH&36DQGWKHQEHWZHHQWKH8,VRIWKH&36DQGDOO RIWKHRWKHUFRPSRQHQWVRIWKH&36

x 3URGXFLQJ KLJKILGHOLW\ SURWRW\SHV RI WKH &36 DQG RI LWV8,V

x 9DOLGDWLQJWKHEHKDYLRURIHDFKRIWKHFRPSRQHQWVRI WKH&36DVZHOODVLWVEHKDYLRUDVDZKROH

,Q DGGLWLRQ WKH SURSRVHG DUFKLWHFWXUH DQG LWV DVVRFLDWHG PRGHOV SURYLGH VXSSRUW IRU HQVXULQJ FRQVLVWHQF\ EHWZHHQ WKH FRQWH[W RI XVH HJ WKH DFWLYLWLHV WKDW KDYH WR EH SHUIRUPHG E\ WKH SLORWV DQG LQ ZKLFK FRQWH[WV DQG WKH SRVVLEOHLQWHUDFWLRQV

:KLOH WKLV DUWLFOH IRFXVHV RQ SURYLGLQJ VXSSRUW IRU DQDO\]LQJXVDELOLW\RIWKH&36RWKHUSURSHUWLHVUHTXLUHWREH WDNHQ LQWR DFFRXQW )RU H[DPSOH WKH SURSRVHG DSSURDFK VXSSRUWVWKHDVVHVVPHQWRIWKHUHOLDELOLW\RIWKH&36LIXVLQJ D IRUPDO QRWDWLRQ IRU WKH GHVFULSWLRQ RI WKH &36 EHKDYLRU :H DUJXH WKDW WKHUH LV D FOHDU QHHG WR IROORZ D KROLVWLF DSSURDFKEXLOGLQJRQSUHYLRXVZRUNGRQHLQGRPDLQVVXFK DVGHSHQGDELOLW\>@DQGVHFXULW\>@DQGWRLQWHJUDWHWKHP

5()(5(1&(6

>@ 6 $EGHOZDKHG 1 .DQGDVDP\ DQG $ *RNKDOH  +LJK &RQILGHQFH 6RIWZDUH IRU &\EHUSK\VLFDO 6\VWHPV ,Q 3URFHHGLQJV RI WKH  :RUNVKRS RQ $XWRPDWLQJ 6HUYLFH 4XDOLW\ +HOG DW WKH ,QWHUQDWLRQDO&RQIHUHQFHRQ$XWRPDWHG6RIWZDUH(QJLQHHULQJ$6( :5$64¶$&01HZ<RUN1<86$±

>@ 0 %UR\ DQG $ 6FKPLGW  &KDOOHQJHV LQ (QJLQHHULQJ &\EHU 3K\VLFDO6\VWHPV&RPSXWHU)HE±

>@ È $ &iUGHQDV  )URP &5&V WR 5HVLOLHQW &RQWURO 6\VWHPV 'LIIHUHQWLDWLQJ%HWZHHQ5HOLDELOLW\DQG6HFXULW\IRUWKH3URWHFWLRQRI &\EHUSK\VLFDO 6\VWHPV ,Q 3URFHHGLQJV RI WKH UG ,QWHUQDWLRQDO &RQIHUHQFHRQ+LJK&RQILGHQFH1HWZRUNHG6\VWHPV+L&R16¶ $&01HZ<RUN1<86$± >@ &\EHU3K\VLFDO6\VWHPV9LUWXDO2UJDQL]DWLRQ+RPHSDJHKWWSFSV YRRUJ/DVWDFFHVVHGRQ)HEWK_ >@ 0)UDQNH&6HLGODQG76FKOHJHO$VHDPOHVVLQWHJUDWLRQ VHPDQWLFPLGGOHZDUHIRUF\EHUSK\VLFDOV\VWHPV,QWK,((( ,17(51$7,21$/ &21)(5(1&( 21 1(7:25.,1* 6(16,1*$1'&21752/,&16&±

>@ + - *HQULFK  3UHGLFDWH  7UDQVLWLRQ 1HWV 6SULQJHU %HUOLQ +HLGHOEHUJ%HUOLQ+HLGHOEHUJ±

>@ $UQDXG+DPRQ3KLOLSSHSDODQTXH&pOLD0DUWLLQLH(ULF%DUERQL-RVp /XLV 6LOYD &DPLOOH )D\ROODV  $QDO\VLV RI :,03 DQG 3RVW :,03,QWHUDFWLYH6\VWHPVEDVHGRQ)RUPDO6SHFLILFDWLRQ(OHFWURQLF &RPPXQLFDWLRQVRIWKH($667$UWLFOHSDJHV

>@ 5+DUULVRQ'9HUDDQG%$KPDG(QJLQHHULQJ0HWKRGVDQG 7RROV IRU &\EHU3K\VLFDO $XWRPDWLRQ 6\VWHPV 3URF ,(((   0D\±

>@ - & -HQVHQ ' + &KDQJ DQG ( $ /HH  $ PRGHOEDVHG GHVLJQ PHWKRGRORJ\ IRU F\EHUSK\VLFDO V\VWHPV ,Q  WK ,QWHUQDWLRQDO :LUHOHVV &RPPXQLFDWLRQV DQG 0RELOH &RPSXWLQJ &RQIHUHQFH±

>@ 6 . .KDLWDQ DQG - ' 0F&DOOH\  'HVLJQ 7HFKQLTXHV DQG $SSOLFDWLRQV RI &\EHUSK\VLFDO 6\VWHPV $ 6XUYH\ ,((( 6\VWHPV -RXUQDO-XQH±

>@ (GZDUG $ /HH  )XQGDPHQWDO /LPLWV RI &\EHU3K\VLFDO 6\VWHPV 0RGHOLQJ $&0 7UDQV &\EHU3K\V 6\VW   $UWLFOH  1RYSDJHV

>@ (GZDUG$/HH0DUWLQ66K\DP6XQGHU3KLOLS$VDUH'DYLG%URPDQ &\EHU3K\VLFDO6\VWHPVD&RQFHSW0DS,Q:HERQO\ /DVW DFFHVVHGRQ)HEWKKWWSVF\EHUSK\VLFDOV\VWHPVRUJ >@ &KDQJ +RQJ /LQ 0DULO\Q :ROI ;HQHIRQ .RXWVRXNRV 6DQGHHS

1HHPD DQG -DQRV 6]WLSDQRYLWV  6\VWHP DQG 6RIWZDUH $UFKLWHFWXUHV RI 'LVWULEXWHG 6PDUW &DPHUDV $&0 7UDQV (PEHG &RPSXW6\VW$UWLFOH$SULOSDJHV

>@ & 0DUWLQLH 3 3DODQTXH DQG 0 :LQFNOHU ³6WUXFWXULQJ DQG &RPSRVLWLRQ 0HFKDQLVPV WR $GGUHVV 6FDODELOLW\ ,VVXHV LQ 7DVN 0RGHOV´LQ+XPDQ&RPSXWHU,QWHUDFWLRQ±,17(5$&7 SS±

>@ : 0XHOOHU 0 %HFNHU $ (OIHN\ DQG $ 'L3DVTXDOH 9LUWXDO SURWRW\SLQJRI&\EHU3K\VLFDO6\VWHPVWK$VLDDQG6RXWK3DFLILF 'HVLJQ$XWRPDWLRQ&RQIHUHQFH6\GQH\16:SS >@ 'DYLG 1DYDUUH 3KLOLSSH 3DODQTXH -HDQ)UDQFRLV /DGU\ DQG (ULF

%DUERQL  ,&2V $ 0RGHOEDVHG 8VHU ,QWHUIDFH 'HVFULSWLRQ 7HFKQLTXH 'HGLFDWHG WR ,QWHUDFWLYH 6\VWHPV $GGUHVVLQJ 8VDELOLW\ 5HOLDELOLW\DQG6FDODELOLW\$&07UDQV&RPSXW+XP,QWHUDFW $UWLFOH1RYSDJHV

>@ 2EMHFW 0DQDJHPHQW *URXS &25%$ &RPSRQHQWV 20* 'RFXPHQW IRUPDO-XQH

>@ 9RONHU3DHONHDQG&DUVWHQ5RFNHU8VHU,QWHUIDFHVIRU&\EHU 3K\VLFDO 6\VWHPV &KDOOHQJHV DQG 3RVVLEOH $SSURDFKHV 6SULQJHU ,QWHUQDWLRQDO3XEOLVKLQJ&KDP±

>@ -3HWHUVRQ3HWUL1HW7KHRU\DQGWKH0RGHOLQJRI6\VWHPV3UHQWLFH +DOO375

>@ 3KLOLSV +XH ODPSKWWSZZZPHHWKXHFRPHQXVSURGXFWV /DVW DFFHVVHGRQ)HEWK_

>@ *XQDU 6FKLUQHU 'HQL] (UGRJPXV .DXVKLN 5 &KRZGKXU\ DQG 7DVNLQ 3DGLU  7KH )XWXUH RI +XPDQLQWKH/RRS &\EHU 3K\VLFDO6\VWHPV,(((&RPSXWHU±

>@ 5RQQ\ 6HLJHU &KULVWLQH .HOOHU )ORULDQ 1LHEOLQJ DQG 7KRPDV 6FKOHJHO0RGHOOLQJFRPSOH[DQGIOH[LEOHSURFHVVHVIRUVPDUW F\EHUSK\VLFDO HQYLURQPHQWV -RXUQDO RI &RPSXWDWLRQDO 6FLHQFH  ±

>@ 5RQQ\6HLJHU'LDQD/HPPH6XVDQQ6WUXZHDQG7KRPDV6FKOHJHO  $Q ,QWHUDFWLYH 0RELOH &RQWURO &HQWHU IRU &\EHUSK\VLFDO 6\VWHPV ,Q 3URFHHGLQJV RI WKH  $&0 ,QWHUQDWLRQDO -RLQW &RQIHUHQFH RQ 3HUYDVLYH DQG 8ELTXLWRXV &RPSXWLQJ $GMXQFW 8EL&RPS¶$&01HZ<RUN1<86$±

>@ <LQJ 7DQ 6WHYH *RGGDUG DQG /DQFH & 3pUH]  $ 3URWRW\SH $UFKLWHFWXUHIRU&\EHUSK\VLFDO6\VWHPV6,*%('5HY$UWLFOH -DQSDJHV

>@ . <XH /:DQJ 6 5HQ ; 0DR DQG ; /L  $Q DGDSWLYH GLVFUHWHHYHQWPRGHOIRUF\EHUSK\VLFDOV\VWHP,Q3URFRI$QDO\WLF 9LUWXDO ,QWHJUDWLRQ RI &\EHU3K\V 6\VW :RUNVKRS ±