HAL Id: hal-01090399
https://hal.archives-ouvertes.fr/hal-01090399
Submitted on 3 Dec 2014
HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub- lished or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.
L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.
Résilience des systèmes interactifs: contribution par une architecture tolérante aux fautes
Fayollas Camille, Philippe Palanque, Jean-Charles Fabre, David Navarre, Eric Barboni, Martin Cronel, Yannick Deleris
To cite this version:
Fayollas Camille, Philippe Palanque, Jean-Charles Fabre, David Navarre, Eric Barboni, et al..
Résilience des systèmes interactifs: contribution par une architecture tolérante aux fautes. IHM’14, 26e conférence francophone sur l’Interaction Homme-Machine, Oct 2014, Lille, France. pp.80-90.
�hal-01090399�
5pVLOLHQFHGHVV\VWqPHVLQWHUDFWLIVFRQWULEXWLRQSDU XQHDUFKLWHFWXUHWROpUDQWHDX[IDXWHV
&DPLOOH)D\ROODV
3KLOLSSH3DODQTXH
-HDQ&KDUOHV)DEUH
'DYLG1DYDUUH
(ULF%DUERQL
0DUWLQ&URQHO
<DQQLFN'HOHULV
$,5%862SHUDWLRQV5RXWHGH%D\RQQH7RXORXVH)UDQFH
<DQQLFN'HOHULV#DLUEXVFRP
&156/$$6$Y'X&RORQHO5RFKH)7RXORXVH)UDQFH -HDQ&KDUOHV)DEUH#ODDVIU
,&6,5,78QLYHUVLW\RI7RXORXVH5RXWHGH1DUERQQH)7RXORXVH)UDQFH
^EDUERQLFURQHOID\ROODVQDYDUUHSDODQTXH`#LULWIU
8QLYGH7RXORXVH,13/$$6)7RXORXVH)UDQFH
5(680(
/D UHFKHUFKH SRXU DPpOLRUHU OD ILDELOLWp GHV V\VWqPHV LQWHUDFWLIV V¶HVW SRXU O¶LQVWDQW SULQFLSDOHPHQW GLULJpH YHUV OD SUpYHQWLRQ G¶LQWURGXFWLRQ GH IDXWHV SDU OD VXSSUHVVLRQGHVEXJVORUVGXGpYHORSSHPHQW&HSHQGDQW ODFRPSOH[LWpGHVV\VWqPHVLQWHUDFWLIVHVWWHOOHTXHTXHOV TXHVRLHQWFHVHIIRUWVGHVGpIDLOODQFHVDSSDUDLVVHQWORUV GH OHXU XWLOLVDWLRQ /HV FDXVHV GH WHOOHV GpIDLOODQFHV SHXYHQWrWUHGXHVjGHVSDQQHVPDWpULHOOHVLQWHUPLWWHQWHV RX TXDQG FHV V\VWqPHV VRQW XWLOLVpV HQ KDXWH DOWLWXGH DYLRQVYpKLFXOHVVSDWLDX[«rWUHGpFOHQFKpHVSDUGHV IDXWHV QDWXUHOOHV GXHV DX[ SDUWLFXOHV DOSKD GDQV OHV SURFHVVHXUV RX DX[ QHXWURQV LVVXV GHV UDGLDWLRQV FRVPLTXHV&HWDUWLFOHSURSRVHO¶LGHQWLILFDWLRQH[KDXVWLYH GHVSUREOpPDWLTXHVVHSRVDQWSRXUDPpOLRUHUODILDELOLWp GHV V\VWqPHV LQWHUDFWLIV HQ SUHQDQW HQ FRPSWH j OD IRLV OHVHUUHXUVIDLWHVGDQVOHVSKDVHVGHGpYHORSSHPHQWHWOHV IDXWHVTXLSHXYHQWVHSURGXLUHORUVGHOHXUXWLOLVDWLRQ'X IDLW TX¶DXFXQH UHFKHUFKH Q¶D pWp PHQpH j FH MRXU SRXU GpWHFWHUHWpOLPLQHUOHVIDXWHVQDWXUHOOHVO¶DUWLFOHSURSRVH DXVVL XQH DUFKLWHFWXUH ORJLFLHOOH SRXU LQWpJUHU GHV PpFDQLVPHV GH WROpUDQFH DX[ IDXWHV GDQV OHV V\VWqPHV LQWHUDFWLIV /¶DUWLFOH SUpVHQWH HQ SDUWLFXOLHU FRPPHQW FHWWHDUFKLWHFWXUHFRXYUHOHVGLIIpUHQWVFRPSRVDQWVG¶XQ V\VWqPHLQWHUDFWLILQFOXDQWOHVZLGJHWVOHJHVWLRQQDLUHGH IHQrWUHV HW O¶DSSOLFDWLRQ LQWHUDFWLYH &HV FRQFHSWV VRQW PLVHQ°XYUHVXUXQHDSSOLFDWLRQLQWHUDFWLYHGHFRFNSLWV G¶DYLRQVFLYLOV
0RWV&OpV
7ROpUDQFHDX[IDXWHV$UFKLWHFWXUHORJLFLHOOH5pVLOLHQFH 6\VWqPHVLQWHUDFWLIVFULWLTXHV
$&0&ODVVLILFDWLRQ.H\ZRUGV
' >6RIWZDUH@ 'HVLJQ 7RROV DQG 7HFKQLTXHV
&RPSXWHUDLGHG VRIWZDUH HQJLQHHULQJ &$6( +
>,QIRUPDWLRQ ,QWHUIDFHV DQG 3UHVHQWDWLRQ@ 8VHU ,QWHUIDFHV,QWHUDFWLRQVW\OHV
,1752'8&7,21
8Q V\VWqPH FULWLTXH HVW XQ V\VWqPH R OH FRW G¶XQH SRWHQWLHOOHGpIDLOODQFHVHUDLWODUJHPHQWVXSpULHXUDXFRW GH GpYHORSSHPHQW ,O SRXUUDLW DLQVL DOOHU MXVTX¶j HQJHQGUHUGHVEOHVVXUHVRXGHVSHUWHVGHYLHVKXPDLQHV
>@LOVVRQWDORUVDSSHOpV©VDIHW\FULWLFDOªHQDQJODLV /HV V\VWqPHV LQWHUDFWLIV FULWLTXHV VRQW PDLQWHQDQW SUpVHQWV GDQV OD SOXSDUW GHV VWDWLRQV GH FRQWU{OH HW FRPPDQGH FRPPH SDU H[HPSOH GDQV OHV VHJPHQWV VRO GHV VDWHOOLWHV OHV FRFNSLWV G¶DpURQHIV FLYLO RX PLOLWDLUH OHV SRVWHV GH FRQWU{OH DpULHQ HWF« /D FRPSOH[LWp HW OD TXDQWLWpGHGRQQpHVPDQLSXOpHVOHQRPEUHGHV\VWqPHV j FRQWU{OHU HW OD JUDQGH GLYHUVLWp GHV FRPPDQGHV j GpFOHQFKHUGDQVGHVSpULRGHVGHWHPSVOLPLWpRQWSRXVVp O¶LQWURGXFWLRQGHWHFKQLTXHVG¶LQWHUDFWLRQpYROXpHVGDQV ODSOXSDUWGHFHVV\VWqPHV
&RQVWUXLUHGHVV\VWqPHVLQWHUDFWLIVILDEOHVHVWXQHWkFKH IDVWLGLHXVH HQ UDLVRQ GH OHXU QDWXUH WUqV VSpFLILTXH /H FRPSRUWHPHQW GH FHV V\VWqPHV UpDFWLIV HVW SLORWp SDU pYpQHPHQWV&RPPHFHVpYpQHPHQWVVRQWGpFOHQFKpVSDU GHV RSpUDWHXUV KXPDLQV FHV V\VWqPHV UpDFWLIV GRLYHQW UpDJLU j GHV pYpQHPHQWV LQDWWHQGXV (Q VRUWLH GHV LQIRUPDWLRQVWHOOHVTXHOpWDWDFWXHOGXV\VWqPHGRLYHQW rWUH SUpVHQWpHV j ORSpUDWHXU GH PDQLqUH j FH TXHOOHV SXLVVHQWrWUHSHUoXHVHWLQWHUSUpWpHVFRUUHFWHPHQW(QILQ OHV V\VWqPHV LQWHUDFWLIV H[LJHQW G¶DERUGHU OHV DVSHFWV PDWpULHOV HW ORJLFLHOV HQVHPEOHV SDU H[HPSOH OHV GLVSRVLWLIVGHQWUpHHWGHVRUWLHDLQVLTXHOHXUVGULYHUV 'DQV OH GRPDLQH GH OD WROpUDQFH DX[ IDXWHV OHV H[SpULHQFHVRQWGpPRQWUpHJ>@TXHOHVGpIDLOODQFHV ORJLFLHOOHVSRXYDLHQWVXUYHQLUPrPHVLOHGpYHORSSHPHQW GXV\VWqPHDYDLWpWpH[WUrPHPHQWULJRXUHX[/¶XQHGHV QRPEUHXVHV VRXUFHV GH GpIDLOODQFH HVW DSSHOpH IDXWH QDWXUHOOH >@ HOOHV VRQW GpFOHQFKpHVSDU OHV SDUWLFXOHV DOSKD RX HQFRUH SDU GHV QHXWURQV SURYHQDQW GHV UD\RQQHPHQWV FRVPLTXHV HW LPSDFWHQW OHV SXFHV /HV V\VWqPHV GpSOR\pV HQ KDXWH DWPRVSKqUH DLQVL TXH FHX[
GpSOR\pV GDQV O¶HVSDFH HJ YRO VSDWLDX[ KDELWpV >@
© ACM, 2014. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in Actes de la 26ième conférence francophone sur l'Interac- tion Homme-Machine, 2014.
http://dx.doi.org/10.1145/2670444.2670462
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
RQWOHVSOXVJUDQGHVSUREDELOLWpVGHGpIDLOODQFH>@HJ DpURQHIV %LHQ TXH GHV PR\HQV H[LVWHQW SRXU VH SUpPXQLUFRQWUHODSOXSDUWGHFHVIDXWHVHOOHVGpPRQWUHQW OHEHVRLQG¶DOOHUSOXVORLQTXHOHVWHFKQLTXHVKDELWXHOOHV GH SUpYHQWLRQ G¶RFFXUUHQFHV GH IDXWHV GXUDQW OH GpYHORSSHPHQWGXV\VWqPHJpQpUDOHPHQWO¶XWLOLVDWLRQGH WHFKQLTXHVIRUPHOOHVHWODYpULILFDWLRQGHSURSULpWpVPDLV DXVVL FHOXL G¶LGHQWLILHU WRXWHV OHV PHQDFHV SRXYDQW LPSDFWHUOHVV\VWqPHVLQWHUDFWLIV
&HW DUWLFOH WUDLWH GDQV OD SUHPLqUH VHFWLRQ GH OLGHQWLILFDWLRQ G¶XQH OLVWH GH SUREOpPDWLTXHV TXL VH SRVHQWSRXUDPpOLRUHUODILDELOLWpGHVV\VWqPHVLQWHUDFWLIV FULWLTXHV/DGHX[LqPHVHFWLRQWUDLWHGHOLGHQWLILFDWLRQGH SOXVLHXUV VROXWLRQV H[LVWDQWHV SRXU UpSRQGUH j FHV SUREOpPDWLTXHV8QHSDUWLHGHFHVSUREOpPDWLTXHVDpWp HQ HIIHW pWXGLpH SUpFpGHPPHQW SDU OD FRPPXQDXWp GH UHFKHUFKH VXU OHV V\VWqPHV LQWHUDFWLIV FRPPH SDU H[HPSOH OHV HUUHXUV SURYHQDQW GHV RSpUDWHXUV /D WURLVLqPH VHFWLRQ SRUWH VXU XQH GHV TXHVWLRQV TXL D UDUHPHQWpWppWXGLpHGDQVFHGRPDLQHGHUHFKHUFKHOHV IDXWHV QDWXUHOOHV TXL VH SURGXLVHQW LQGpSHQGDPPHQW GH OHIIRUWGpSOR\pDXFRXUVGHVSKDVHVGHGpYHORSSHPHQWHW SURSRVH XQH DUFKLWHFWXUH ORJLFLHOOH WROpUDQWH DX[ IDXWHV SRXUUHPpGLHUjFHVGpIDXWV$ILQGLOOXVWUHUOHVFRQFHSWV YHUVLW\3UHVVDSSOLFDELOLWpODTXDWULqPHVHFWLRQGX GX GRFXPHQW SUpVHQWH OHXU XWLOLVDWLRQ GDQV OH FDGUH GH ODSSOLFDWLRQ GH )OLJKW &RQWURO 8QLW SUpVHQWH GDQV OHV FRFNSLWV PRGHUQHV LQWHUDFWLIV GDYLRQV FLYLOV /D FLQTXLqPH VHFWLRQ SHUPHW GH SRVLWLRQQHU O¶DSSURFKH SURSRVpH GDQV FHW DUWLFOH SDU UDSSRUW DX[ FRQWULEXWLRQV SUpFpGHQWHV GHV DXWHXUV (QILQ OD GHUQLqUH VHFWLRQ FRQFOXWOHSDSLHUHWSUpVHQWHOHVSHUVSHFWLYHVGHFHWUDYDLO SDU UDSSRUW DX[ SUREOpPDWLTXHV SUpVHQWpHV GDQV OHV SUHPLqUHVVHFWLRQV
352%/(0$7,48(6 628/(9((6 3$5 /$
),$%,/,6$7,21'(66<67(0(6,17(5$&7,)6 7\SRORJLHGHVIDXWHV
3RXU V¶DVVXUHU TX¶XQ V\VWqPH LQIRUPDWLTXH VRLW ILDEOH
>@ F¶HVWjGLUH TXLO VRLW SURWpJp GH WRXW W\SH GH GpIDLOODQFHVDILQTXHFHOOHVFLQHSXLVVHQWSDVDSSDUDvWUH RX TXH OHXU DSSDULWLRQ QDLW SDV GH FRQVpTXHQFH FDWDVWURSKLTXH VXU OH V\VWqPH HW VRQ HQYLURQQHPHQW OH FRQFHSWHXUGHV\VWqPHGRLWSUHQGUHHQFRPSWHWRXWW\SH GHIDXWHVSRXYDQWLPSDFWHUOHV\VWqPHHWGpFOHQFKHUFHV GpIDLOODQFHV 'DQV OH EXW GH FODVVLILHU LQWpJUDOHPHQW OHV IDXWHV SRXYDQW DIIHFWHU XQ V\VWqPH LQIRUPDWLTXH
$YL]LHQLVHWDORQWGpILQLGDQV>@XQHW\SRORJLH&HWWH W\SRORJLH D SHUPLV G¶LGHQWLILHU FODVVHV GH IDXWHV pOpPHQWDLUHV/DILJXUHSUpVHQWHXQHYXHVLPSOLILpHGH FHWWHW\SRORJLHHWUHQGH[SOLFLWHGHX[JUDQGHVFDWpJRULHV YLVLEOHV HQKDXW GH OD ILJXUH L OHV IDXWHV DSSDUDLVVDQW SHQGDQW OH GpYHORSSHPHQW FH TXL LQFOXW OHV PDXYDLVHV FRQFHSWLRQV HW OHV HUUHXUV GH GpYHORSSHPHQW RX LL OHV IDXWHV DSSDUDLVVDQW SHQGDQW OH IRQFWLRQQHPHQW GX V\VWqPHjGURLWHGHODILJXUHFHTXLLQFOXWOHVHUUHXUV FRPPHOHVUDWpVOHVODSVXVHWOHVIDXWHVGpILQLVGDQV>@
1RXV SURSRVRQV O¶RUJDQLVDWLRQ GHV IHXLOOHV GH OD WD[RQRPLHHQGLIIpUHQWVJURXSHVDPHQDQWFKDFXQXQH SUREOpPDWLTXHGLIIpUHQWH
x Fautes de développement logiciel (problématique 1) LQWURGXLWHV LQYRORQWDLUHPHQW GXUDQW OH GpYHORSSHPHQWGXV\VWqPH
x Fautes malveillantes (problématique 2) LQWURGXLWHV GpOLEpUpPHQW SRXU SURYRTXHU OH G\VIRQFWLRQQHPHQW GX V\VWqPH SULVH GH FRQWU{OH H[WpULHXU GpQL GH VHUYLFHLQRSLQpFUDVKGXV\VWqPH
)LJXUH7\SRORJLHGHVIDXWHVGHVV\VWqPHVLQIRUPDWLTXHVDGDSWpHGH>@HWSUREOpPDWLTXHVDVVRFLpHVjOHXUILDELOLWp
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
81
x Fautes de développement matériel (problématique 3) D\DQWXQHFDXVHQDWXUHOOHRXKXPDLQHHWLPSDFWDQWOH PDWpULHOGXUDQWVDFRQFHSWLRQ
x Fautes naturelles en opération (problématique 4) FDXVpHVSDUXQSKpQRPqQHQDWXUHO(OOHVDIIHFWHQWOH PDWpULHO HW VXUYLHQQHQW SHQGDQW OH IRQFWLRQQHPHQW GX V\VWqPH HOOHV VRQW GRQF VXVFHSWLEOHV G¶DIIHFWHU DXVVLOHORJLFLHO
x Erreurs humaines en opération (problématique 5) UpVXOWDQWHV G¶XQH DFWLRQ KXPDLQH SHQGDQW OH IRQFWLRQQHPHQW GX V\VWqPH (OOHV SHXYHQW rWUH PDWpULHOOHV HW ORJLFLHOOHV HW SHXYHQW rWUH GpOLEpUpHV RX QRQ /H OLHQ HQWUH OD W\SRORJLH HW OHV HUUHXUV KXPDLQHVGLWHV©FODVVLTXHVªGpILQLHVGDQV>@SHXW rWUHIDLWHQDVVRFLDQWOHVIDXWHVGpOLEpUpHVDX[HUUHXUV RXYLRODWLRQV>@HWOHVQRQGpOLEpUpHVDYHFOHVUDWpV HWOHVODSVXV
$SSURFKHVH[LVWDQWHVGHSULVHHQFRPSWHGHVIDXWHV /HVpWXGHVSUpFpGHQWHVHQVUHWpGHIRQFWLRQQHPHQWRQW PHQp j O¶LGHQWLILFDWLRQ GH PR\HQV G¶DPpOLRUHU OD ILDELOLWpG¶XQV\VWqPH>@HW>@
x La prévention des fautesSHUPHWG¶pYLWHUDXWDQWTXH SRVVLEOH O¶LQWURGXFWLRQ GH IDXWHV SHQGDQW OH GpYHORSSHPHQW GX V\VWqPH 2Q HPSORLH JpQpUDOHPHQW GHV WHFKQLTXHV GH GpYHORSSHPHQW ULJRXUHXVHVGHODIRUPDOLVDWLRQGHODPRGpOLVDWLRQ SRXUSURXYHUFHUWDLQHVSURSULpWpV«
x La suppression de fautes SHUPHW GH UpGXLUH OH QRPEUH GH IDXWHV SRXYDQW VXUYHQLU L SHQGDQW OH GpYHORSSHPHQW GX V\VWqPH JpQpUDOHPHQW HQ XWLOLVDQW GHV WHFKQLTXHV GH WHVW HW G¶LQMHFWLRQ GH IDXWHV RX LL SHQGDQW OD SKDVH G¶H[SORLWDWLRQ GX V\VWqPH HQ IDLVDQW SDU H[HPSOH GH OD PDLQWHQDQFH FRUUHFWLYH
x La tolérance aux fautes SHUPHW G¶pYLWHU OD GpIDLOODQFHGHVHUYLFHHQSUpVHQFHGHIDXWHVYLDOHXU GpWHFWLRQHWOHXUUHFRXYUHPHQW/DGpWHFWLRQSHUPHW G¶LGHQWLILHU OD SUpVHQFH GH IDXWHV OHXU W\SH HW OHXU VRXUFH/HUHFRXYUHPHQWHVWJpQpUDOHPHQWUpDOLVpHQ DMRXWDQW GH OD UHGRQGDQFH RX GH OD GLYHUVLILFDWLRQ G¶XQORJLFLHOHWSHUPHWG¶pYLWHUODGpIDLOODQFH x Prévision des fautes FRQVLVWHjHVWLPHUOHQRPEUH
O¶LQFLGHQFHHWOHVFRQVpTXHQFHVSUREDEOHVGHIDXWHV JpQpUDOHPHQW HQ GUHVVDQW XQH pYDOXDWLRQ VWDWLVWLTXH GHODIUpTXHQFHHWGHO¶LPSDFWGHVIDXWHV
$3352&+(6 '( ),$%/,6$7,21 '(6 6<67(0(6 ,17(5$&7,)6
&RPPH YX GDQV OD VHFWLRQ SUpFpGHQWH OD ILDELOLVDWLRQ G¶XQ V\VWqPH LQIRUPDWLTXH SHXW rWUH UpDOLVpH VL HW VHXOHPHQW VL WRXWHV OHV SUREOpPDWLTXHV SUpVHQWpHV FL GHVVXVVRQWFRXYHUWHV/DVXLWHGHFHWWHVHFWLRQSUpVHQWH OHV GLIIpUHQWHV DSSURFKHV H[LVWDQWHV SRXU OHV WUDLWHU WRXW HQ SUHQDQW HQ FRPSWH OHV VSpFLILFLWpV GHV V\VWqPHV LQWHUDFWLIV
3UREOpPDWLTXH 3ULVH HQ FRPSWH GHV IDXWHV GH GpYHORSSHPHQWORJLFLHO
'XIDLWGHVVSpFLILFLWpVGHVV\VWqPHVLQWHUDFWLIV>@OHV DSSURFKHVVWDQGDUGG¶LQJpQLHULHGHVORJLFLHOVQHSHXYHQW SDVrWUHUpXWLOLVpHVWHOOHVTXHOOHVSRXUUHQGUHOHVV\VWqPHV LQWHUDFWLIV ILDEOHV 'H FH IDLW GDQV OD FRPPXQDXWp GH O¶LQJpQLHULH GHV V\VWqPHV LQWHUDFWLIV GH QRPEUHX[
WUDYDX[ GH UHFKHUFKH RQW pWp UpDOLVpV SRXU UDIILQHU HW pWHQGUH FHV DSSURFKHV &HV WUDYDX[ LQFOXHQW OHV DUFKLWHFWXUHVORJLFLHOOHV>@OHVWHFKQLTXHVGHGHVFULSWLRQ IRUPHOOHHWGHYpULILFDWLRQ>@RXOH WHVW > @ /D SOXSDUW GH FHV WUDYDX[ V¶HVW FRQFHQWUpH VXU OD VXSSUHVVLRQ GHV IDXWHV GXUDQW OH GpYHORSSHPHQWGXORJLFLHO
'DQV OH GRPDLQH GHV FRFNSLWV LQWHUDFWLIV TXH QRXV SUpVHQWRQV GDQV O¶pWXGH GH FDV %DUERQL HW DO RQW SURSRVp GDQV >@ GH WHOOHV PpWKRGHV SRXU GpFULUH GH PDQLqUH FRPSOqWH HW QRQ DPELJXs OHV ZLGJHWV OHV JHVWLRQQDLUHVGHIHQrWUHVHWOHVFRQWU{OHXUVGHGLDORJXH FRXYUDQW DLQVL OD SDUWLH ORJLFLHOOH GHV V\VWqPHV LQWHUDFWLIV&HFLHVWpJDOHPHQWHQDFFRUGDYHFOHVWDQGDUG GH GpYHORSSHPHQW '2 %& TXL UHFRPPDQGH O¶XWLOLVDWLRQGHWHFKQLTXHVGHGHVFULSWLRQIRUPHOOH>@
3UREOpPDWLTXH 3ULVH HQ FRPSWH GHV IDXWHV PDOYHLOODQWHV
&HW DVSHFW D pWp WUqV pWXGLp GDQV OH GRPDLQH GHV LQWHUDFWLRQV KRPPHPDFKLQH HW D FRQGXLW j OD FUpDWLRQ G¶XQV\PSRVLXPVXUODSURWHFWLRQGHODYLHSULYpHDSSHOp 62836 6\PSRVLXP RQ8VDEOH 3ULYDF\ DQG 6HFXULW\
R VRQW GLVFXWpHV OHV TXHVWLRQV G¶XWLOLVDELOLWp GHV V\VWqPHV G¶DXWKHQWLILFDWLRQ >@ /HV TXHVWLRQV G¶LQWpJULWpHWGHSURWHFWLRQGHVGRQQpHVVRQWODLVVpHVDX[
GRPDLQHVOLpVjODVpFXULWpLQIRUPDWLTXH>@
&HSHQGDQW OHV SUREOqPHV GH VpFXULWp LQIRUPDWLTXH VSpFLILTXHPHQW OLpV DX[ V\VWqPHV LQWHUDFWLIV FULWLTXHV Q¶RQWSDVHQFRUHpWpWUDLWpV'HSOXVLOVFRPPHQFHQWWRXW MXVWH j rWUH DERUGpV GDQV OH GRPDLQH GHV V\VWqPHV HPEDUTXpVFRPPHSUpVHQWpGDQV>@SRXUOHVV\VWqPHV HPEDUTXpVDYLRQLTXHV
3UREOpPDWLTXH 3ULVH HQ FRPSWH GHV IDXWHV GH GpYHORSSHPHQWPDWpULHO
/HV FRPSRVDQWV PDWpULHOV XWLOLVpV SRXU OHV V\VWqPHV LQWHUDFWLIV VRQW DVVH] VLPLODLUHV j FHX[ XWLOLVpV GDQV OHV V\VWqPHV LQIRUPDWLTXHV FRQYHQWLRQQHOV /D SULVH HQ FRPSWHGHVIDXWHVGHGpYHORSSHPHQWPDWpULHOSHXWGRQF rWUHWUDLWpHDYHFGHVSURFHVVXVGHGpYHORSSHPHQWXVXHOV FRPPH FHX[ GpFULV GDQV OH VWDQGDUG '2 >@ TXL IRXUQLW XQ JXLGH GH GpYHORSSHPHQW GHV FRPSRVDQWV pOHFWURQLTXHVHPEDUTXpV
&HSHQGDQW GDQV OH FDV G¶XQ V\VWqPH LQWHUDFWLI RQ GRLW SUHQGUHHQFRPSWHODILDELOLWpGHO¶LQWHUDFWLRQHQSOXVGH OD ILDELOLWp GX V\VWqPH LQIRUPDWLTXH GH EDVH 3DU H[HPSOH O¶LQWURGXFWLRQ G¶XQH LQWHUDFWLRQ PXOWLWRXFK GDQV XQ FRFNSLW QH SRXUUD rWUH UpDOLVpH TXH V¶LO D pWp SURXYp TXH O¶pFUDQ SRVVqGH XQH IDLEOH SUREDELOLWp GH GpIDLOODQFHHJPRLQVGH
IDXWHVSDUKHXUHGHYRO
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
82
/H FRQFHSWHXU GX V\VWqPH LQWHUDFWLI SRXUUD QpDQPRLQV DXJPHQWHUODILDELOLWpG¶XQV\VWqPHLQWHUDFWLIHQDGDSWDQW O¶LQWHUIDFH RX OH ORJLFLHO VRXVMDFHQW 3DU H[HPSOH XQH LQWHUDFWLRQ WDFWLOH SHXW rWUH ILDELOLVpH HQ UHPSODoDQW XQ JHVWHOLQpDLUHKRUL]RQWDOSDUXQJHVWHREOLTXHDILQGHQH SDVGpSHQGUHXQLTXHPHQWG¶XQHOLJQHGHODJULOOHWDFWLOH 3UREOpPDWLTXH 3ULVH HQ FRPSWH GHV IDXWHV QDWXUHOOHV
&RPPHH[SOLTXpGDQVO¶LQWURGXFWLRQODSULVHHQFRPSWH GHV IDXWHV QDWXUHOOHV Q¶D SUDWLTXHPHQW SDV pWp pWXGLpH GDQVOHGRPDLQHGHO¶LQWHUDFWLRQKRPPHPDFKLQHHWSHX GHFRQWULEXWLRQVVRQWGLVSRQLEOHV/DSURSRVLWLRQGH>@
SUpVHQWH OD UHFRQILJXUDWLRQ G\QDPLTXH GH OD WHFKQLTXH G¶LQWHUDFWLRQ RX OD SRVVLELOLWp GH OD UpRUJDQLVDWLRQ GHV pFUDQVTXDQGOHVGpIDLOODQFHVPDWpULHOOHVOHQpFHVVLWHQW
&HSHQGDQW FHWWH VROXWLRQ Q¶HVW SDV VXIILVDQWH HW FHV DVSHFWVQHSHXYHQWrWUHLJQRUpVORUVTXHO¶RQWUDLWHGHOD ILDELOLWp GH V\VWqPHV LQWHUDFWLIV FULWLTXHV &HFL HVW SDUWLFXOLqUHPHQW YpULILp SRXU OHV V\VWqPHV LQWHUDFWLIV FULWLTXHV WHOV TXH FHX[ SUpVHQWV GDQV OHV V\VWqPHV GpSOR\pV GDQV OD KDXWH DWPRVSKqUH DYLRQV RX GDQV O¶HVSDFH YRO VSDWLDX[ KDELWpV FDU XQH SOXV IRUWH SUREDELOLWpG¶RFFXUUHQFHGHIDXWHVFRQFHUQHFHVV\VWqPHV
>@ &HV IDXWHV QDWXUHOOHV GpPRQWUHQW OD QpFHVVLWp G¶DOOHU SOXV ORLQ TXH OD SUpYHQWLRQ FODVVLTXH GHV IDXWHV GXUDQWOHGpYHORSSHPHQWHQSUHQDQWHQFRPSWHOHVIDXWHV SRXYDQWDSSDUDLWUHHQRSpUDWLRQ
3UREOpPDWLTXH 3ULVH HQ FRPSWH GHV HUUHXUV KXPDLQHV
/HV HUUHXUV KXPDLQHV VRQW pWXGLpHV GHSXLV GH QRPEUHXVHVDQQpHVHWSHXYHQWrWUHSUpYHQXHVRXWROpUpHV
>@ HW GH QRPEUHX[ PR\HQV RQW G¶RUHV HW GpMj pWpV GpYHORSSpV SRXU OD SULVH HQ FRPSWH GH FHWWH SUREOpPDWLTXH 8Q SUHPLHU PR\HQ HVW GH UpDOLVHU GHV EDUULqUHV>@TX¶HOOHVVRLHQWORJLFLHOOHVHJXQERXWRQ GH FRQILUPDWLRQ RX PDWpULHOOHV HJ XQ GpWURPSHXU
%LHQHQWHQGXOHVFRQQDLVVDQFHVDFTXLVHVGHO¶pWXGHGHV DFFLGHQWV HW GHV WHQWDWLYHV GH YLRODWLRQV GH EDUULqUHV GRLYHQW rWUH UpXWLOLVpHV SRXU SUpYHQLU OD UpSpWLWLRQ GHV DFFLGHQWV >@ &HFL SHXWrWUH HIIHFWXp SDU H[HPSOH HQ LQFOXDQW GHV EDUULqUHV VRFLRWHFKQLTXHV TXL SRXUURQW rWUH PRGpOLVpHV SDU GHV WHFKQLTXHV GH GHVFULSWLRQ IRUPHOOH DILQ GH SUpYHQLU OHV IDXWHV GH GpYHORSSHPHQW >@ /HV HUUHXUV KXPDLQHV SHXYHQW DXVVL rWUH pYLWpHV SDU OD IRUPDWLRQVSpFLDOLVpHFRPPHGpFULWGDQV>@DLQVLTXH SDUXQPHLOOHXUGHVLJQGHO¶DLGHFRQWH[WXHOOH>@HWGHV PDQXHOV G¶XWLOLVDWLRQ >@ (QILQ XQ DXWUH PR\HQ GH SUpYHQLU FHV HUUHXUV HVW G¶pWXGLHU OH FRPSRUWHPHQW KXPDLQSRXUPRGLILHUOHGHVLJQGHVV\VWqPHV>@>@
RXHQSURSRVHUGHPHLOOHXUV>@
5HPDUTXHV FRQFOXVLYHV VXU OHV DSSURFKHV GH ILDELOLVDWLRQGHVV\VWqPHVLQWHUDFWLIV
/D W\SRORJLH SUpVHQWpH QRXV SHUPHW G¶LGHQWLILHU WRXWHV OHVIDXWHVSRXYDQWDIIHFWHUXQV\VWqPHLQWHUDFWLIFULWLTXH (OOHSHUPHWOHJURXSHPHQWGHFHUWDLQVW\SHVGHIDXWHVHW PHWGRQFHQH[HUJXHOHVSUREOpPDWLTXHVVSpFLILTXHVjOD
ILDELOLVDWLRQGHVV\VWqPHVLQWHUDFWLIVFULWLTXHV'DQVFHWWH VHFWLRQ QRXV DYRQV SUpVHQWp OHV GLIIpUHQWHV VROXWLRQV H[LVWDQWHVUHODWLYHVDX[SUREOpPDWLTXHVLGHQWLILpHV%LHQ TXH FHUWDLQHV G¶HQWUHHOOHV DLHQW pWp ODUJHPHQW pWXGLpHV G¶DXWUHV HQ UHYDQFKH O¶RQW pWp EHDXFRXS PRLQV HW QpFHVVLWHQW G¶rWUH WUDLWpHV DILQ GH SHUPHWWUH OH GpYHORSSHPHQWGHV\VWqPHVLQWHUDFWLIVILDEOHV
x Problématique 2 : /HV IDXWHV SURYHQDQW G¶DWWDTXHV PDOYHLOODQWHV
x Problématique 3 : /HV IDXWHV PDWpULHOOHV GH GpYHORSSHPHQW
x Problématique 4 : /HVIDXWHVQDWXUHOOHVHQRSpUDWLRQ 'DQV OH GRPDLQH GH OD VUHWp GH IRQFWLRQQHPHQW OD SUREOpPDWLTXH HVW SULQFLSDOHPHQW UpVROXH SDU FRQILQHPHQW LH FRPSOqWH LVRODWLRQ GHV V\VWqPHV HQWUH HX[HWSOXVSDUWLFXOLqUHPHQWLVRODWLRQGXUHVWHGXPRQGH
&HWWHVROXWLRQSHXWV¶DYpUHUSUREOpPDWLTXHFRPSWHWHQX GHV PDLQWHQDQFHV j HIIHFWXHU TXL UHTXHUUDLHQW DORUV XQ DFFqVSK\VLTXHDXV\VWqPH'HSOXVOHVFRPPXQLFDWLRQV VRQWGHSOXVHQSOXVVDQVILOHWRXYUHQWQDWXUHOOHPHQWOHV V\VWqPHVVXUO¶H[WpULHXUpOLPLQDQWDLQVLOHFRQILQHPHQW 3RXU FHV UDLVRQV OD SUREOpPDWLTXH UHVWH j pWXGLHU SULRULWDLUHPHQW /D SUREOpPDWLTXH GpSHQG SULQFLSDOHPHQW GHV FRQVWUXFWHXUV HW GX GRPDLQH GHV FRPSRVDQWV/DSUREOpPDWLTXHDTXDQWjHOOHXQIRUW SRWHQWLHOG¶LPSDFWHUOHVV\VWqPHVLQWHUDFWLIVHQRSpUDWLRQ HWQRXV\FRQVDFUHURQVGRQFOHUHVWHGHFHWDUWLFOH 81( $5&+,7(&785( /2*,&,(//( 3285 '(6
$33/,&$7,216 ,17(5$&7,9(6 72/(5$17(6 $8;
)$87(6
&HWWH VHFWLRQ SUpVHQWH XQH VROXWLRQ SHUPHWWDQW GH FRQVWUXLUH GHV DSSOLFDWLRQV LQWHUDFWLYHV WROpUDQWHV DX[
IDXWHV(OOHSURSRVHDLQVLXQHVROXWLRQjODSUREOpPDWLTXH GHV IDXWHV QDWXUHOOHV HQ RSpUDWLRQ SUREOpPDWLTXH 'DQV FH EXW QRXV SURSRVRQV G¶DSSOLTXHU HQ OHV DGDSWDQW GHV DUFKLWHFWXUHV GH WROpUDQFH DX[ IDXWHV DX[
GLIIpUHQWV pOpPHQWV G¶XQH DSSOLFDWLRQ LQWHUDFWLYH HQ VH EDVDQW VXU OH PRGqOH $5&+ LQWURGXLW FLGHVVRXV FI )LJXUH
8QH DUFKLWHFWXUH JpQpULTXH SRXU OHV V\VWqPHV LQWHUDFWLIV
'DQV OH FDGUH GH FHW DUWLFOH QRXV QRXV LQWpUHVVRQV SDUWLFXOLqUHPHQW DX[ WHFKQLTXHV G¶LQWHUDFWLRQ FODVVLTXHV DSSHOpHV :,03 SRXU OHVTXHOOHV O¶DIILFKDJH HW OD PDQLSXODWLRQVHIRQWDXWUDYHUVG¶XQHQVHPEOHSUpGpILQL GH ZLGJHWV 0rPH VL GH QRPEUHXVHV WHFKQLTXHV G¶LQWHUDFWLRQ ELHQ SOXV VRSKLVWLTXpHV RQW GpMj pWp SURSRVpHV SDU OHV FKHUFKHXUV HW LQGXVWULHOV GX GRPDLQH GHVLQWHUIDFHVKRPPHPDFKLQHODPDQLSXODWLRQLQGLUHFWH UHVWH OD SOXV DGDSWpH DX[ V\VWqPHV FULWLTXHV FDU HOOH FRUUHVSRQG DX[ VWDQGDUGV GHV PLOLHX[ FULWLTXHV FRPPH SDU H[HPSOH OH VWDQGDUG $5,1& TXL GpILQLW OHV LQWHUDFWLRQV GDQV OHV FRFNSLWV G¶DYLRQV FLYLOV >@ 'H SOXVOHVWHFKQLTXHVG¶LQWHUDFWLRQLQGLUHFWHVRQWGpMjpWp pWXGLpHVHWVWDQGDUGLVpHVSDU,%0HQ>@
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
83
'H WHOOHV VWDQGDUGLVDWLRQV SUpVHQWHQW GH QRPEUHX[
DYDQWDJHV DPpOLRUDQW VLJQLILFDWLYHPHQW OD ILDELOLWp OHV FRPSRVDQWVVRQWUpXWLOLVpVHWGRQFWUqVODUJHPHQWWHVWpV OHV FRWV GH GpYHORSSHPHQW OHV FRPSRVDQWV VRQW GpYHORSSpVSDUGHVHQWLWpVWLHUFHVHWVRQWGRQFXWLOLVpVWHO TXHO SDU GH QRPEUHX[ FOLHQW DLQVL TXH OHV WHPSV GH GpYHORSSHPHQW OHV GpYHORSSHXUV VH FRQFHQWUDQW DORUV VXUO¶DVVHPEODJHGHVFRPSRVDQWVHWQRQVXUOHXUGHVLJQ
)LJXUH$UFKLWHFWXUHJpQpULTXHSRXUOHVV\VWqPHV
LQWHUDFWLIVDGDSWpHGXPRGqOH$5&+>@
/D )LJXUH SUpVHQWH XQH YHUVLRQ PRGLILpH GH O¶DUFKLWHFWXUHORJLFLHOOH$5&+SUpVHQWpHGDQV>@&HWWH DUFKLWHFWXUH GpFULW O¶RUJDQLVDWLRQ IRQFWLRQQHOOH GH OD PDMRULWp GHV V\VWqPHV LQWHUDFWLIV (OOH HVW XWLOLVpH SRXU UHSUpVHQWHUGH PDQLqUHH[KDXVWLYHODYDULpWpG¶pOpPHQWV SRXU OHVTXHOV GHV PpFDQLVPHV GH VUHWp GH IRQFWLRQQHPHQWRQWpWpDMRXWpV
x Les périphériques d’entrée et de sortie FH VRQW JpQpUDOHPHQWGHVFODYLHUVVRXULVHWpFUDQ«PDLVLOV SHXYHQW rWUH SOXV FRPSOH[HV HJ SpULSKpULTXH FRPELQp FRPPH OH .&&8 .H\ERDUG &XUVRU
&RQWURO 8QLW GDQV OHV FRFNSLWV ,OV SHUPHWWHQW O¶LQWHUDFWLRQSK\VLTXHHQWUHO¶KXPDLQHWODPDFKLQH x Le gestionnaire de fenêtres LOHQFDSVXOHOHVGULYHUV
GHV SpULSKpULTXHV HW JqUH OH OLHQ HQWUH OHV SpULSKpULTXHV HW OH UHVWH GH O¶DSSOLFDWLRQ 3DU H[HPSOH LO HVW UHVSRQVDEOH GH O¶DIILFKDJH GX FXUVHXU GH O¶LGHQWLILFDWLRQ GX ZLGJHW FLEOp SDU O¶DFWLRQGHO¶XWLOLVDWHXUSLFNLQJODWUDQVPLVVLRQGHV pYpQHPHQWV XWLOLVDWHXUV YHUV FHOXLFL DLQVL TXH GX UHQGXJUDSKLTXHGHO¶LQIRUPDWLRQVXUOHSpULSKpULTXH GHVRUWLH
x Les widgets FH VRQW OHV FRPSRVDQWV GH EDVH GH O¶LQWHUDFWLRQ ,OV VRQW UHSUpVHQWpV GDQV XQH ERvWH VpSDUpH VXU OD )LJXUH FDU QRXV OHV FRQVLGpURQV FRPPH GHV FRPSRVDQWV ORJLFLHOV LQGpSHQGDQWV UHTXpUDQW DLQVL XQ PpFDQLVPH GH WROpUDQFH DX[
IDXWHVGpGLpFRPPHFHOXLLQWURGXLWGDQV>@
'H PrPH TX¶HQ FH TXL FRQFHUQH OHV DVSHFWV WROpUDQFH DX[
IDXWHVQRXVDYRQVGpFLGpGHJDUGHUOHYRFDEXODLUHDQJODLVSRXU OHVILJXUHVGHO¶DUWLFOHGDQVOHEXWG¶pYLWHUOHVFRQIXVLRQVOLpHVj ODWUDGXFWLRQ
x Le contrôleur de dialogue LO GpFULW OHV pWDWV GH O¶DSSOLFDWLRQDLQVLTXHVRQFRPSRUWHPHQW
x L’adaptateur de code fonctionnel HW le noyau fonctionnel LOV HQFDSVXOHQW OHV IRQFWLRQV QRQ LQWHUDFWLYHV GX V\VWqPH 3RXU FHOD QRXV QH QRXV FRQFHQWUHURQV SDV VXU FHV FRPSRVDQWV ELHQ TX¶LOV DSSDUDLWURQWGDQVO¶pWXGHGHFDV
/D VHFWLRQ VXLYDQWH HVW XQH FRXUWH LQWURGXFWLRQ DX[
DUFKLWHFWXUHV WROpUDQWHV DX[ IDXWHV XWLOLVpHV GDQV OH GRPDLQH GH OD VUHWp GH IRQFWLRQQHPHQW 1RXV SUpVHQWHURQV HQVXLWH OHV K\SRWKqVHV VRXVMDFHQWHV DX WUDYDLO SUpVHQWp DLQVL TX¶XQH GHVFULSWLRQ GHV IDXWHV TXH QRXVFKHUFKRQVjpYLWHU
7UDYDX[ FRQQH[HV VXU OHV DUFKLWHFWXUHV WROpUDQWHV DX[IDXWHV
'DQV OH GRPDLQH GH OD VUHWp GH IRQFWLRQQHPHQW GH QRPEUHXVHV DSSURFKHV RQW pWp pWXGLpHV SRXU LQWURGXLUH GHV PpFDQLVPHV GH WROpUDQFH DX[ IDXWHV DX VHLQ GHV V\VWqPHVLQIRUPDWLTXHV/HVWHFKQLTXHVOHVSOXVXWLOLVpHV VRQW OHV FRPSRVDQWV DXWRWHVWDEOHV > @ OD SURJUDPPDWLRQ HQ 19HUVLRQ >@ HW OD SURJUDPPDWLRQ 1DXWRWHVWDEOH >@ TXL HVW XQ K\EULGH HQWUH OD SURJUDPPDWLRQ 19HUVLRQ HW OHV FRPSRVDQWV DXWR WHVWDEOHV /¶DUFKLWHFWXUH SUpVHQWpH GDQV FH SDSLHU HVW EDVpH VXU OHV FRPSRVDQWV DXWRWHVWDEOHV FRPPH GH QRPEUHXVHV VWUDWpJLHV GH VUHWp GH IRQFWLRQQHPHQW HQ GpSHQGHQW(QHIIHWODFRXYHUWXUHGHGpWHFWLRQG¶HUUHXUV G¶XQ FRPSRVDQW DXWRWHVWDEOH HVW WUqV ERQQH HW UHQG OHV VWUDWpJLHVGHUpSOLFDWLRQSRVVLEOHVDILQGHSRXYRLUDVVXUHU XQH FRQWLQXLWp GH VHUYLFH &¶HVW G¶DLOOHXUV GDQV FH EXW TXHQRXVSURSRVRQVpJDOHPHQWXQHDUFKLWHFWXUH1DXWR WHVWDEOHTXLSHUPHWOHUHFRXYUHPHQWGHIDXWHV
6HORQ>@XQHDSSURFKHSDUFRPSRVDQWVDXWRWHVWDEOHV FRQVLVWH j DMRXWHU GH OD UHGRQGDQFH LQWHUQH j XQ SURJUDPPH SRXU TX¶LO SXLVVH YpULILHU VD SURSUH G\QDPLTXH HQ H[pFXWLRQ (OOH HVW DXVVL DSSHOp &20 021>@&20FRUUHVSRQGDQWj&20PDQGHHW021 j021LWHXU&HWWHUHGRQGDQFHSHXWrWUHLPSODQWpHGH PDQLqUHVGLIIpUHQWHV
8Q SURJUDPPH OH &20 DXTXHO RQ DMRXWH XQ SURJUDPPH YpULILDQW VRQ H[pFXWLRQ OH 021 KDELWXHOOHPHQWDSSHOpFKHFNHUGDQVFHFDV
8QSURJUDPPHOH&20±DXVVLDSSHOpIRQFWLRQQHO GDQV FH FDV DXTXHO RQ DGMRLQW XQH YDULDQWH GH FH SURJUDPPH KDELWXHOOHPHQW DSSHOpH FRQWU{OHXU HW XQ PpFDQLVPH GH FRPSDUDLVRQ OH 021 HVW DORUV FRPSRVpGHO¶HQVHPEOHFRQWU{OHXUFRPSDUDWHXU 'DQVOHVGHX[FDVOHVIDXWHVQDWXUHOOHVVRQWGpWHFWpHVSDU OHVPpFDQLVPHVGHUHGRQGDQFHSUpVHQWVGDQVOH021VL OHVGHX[FRPSRVDQWVORJLFLHOVVRQWH[pFXWpVGHPDQLqUH VpJUpJXpH SRXU pYLWHU OHV IDXWHV HQJHQGUpHV SDU OHV GpJkWVFROODWpUDX[XQHIDXWHGDQVOH&20GpFOHQFKDQW XQHIDXWHGDQVOH021HWOHVIDXWHVGHPRGHFRPPXQ XQH IDXWH QDWXUHOOH LPSDFWDQW j OD IRLV OH &20 HW OH 021/¶DSSURFKHSDUFRPSRVDQWVDXWRWHVWDEOHVDGRQF OD FDSDFLWp G¶DVVXUHU OD GpWHFWLRQ GHV IDXWHV HW OD
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
84
QRWLILFDWLRQ G¶HUUHXUV ORUVTXH OHV IDXWHV VRQW GpWHFWpHV HJTXDQGLO\DXQHGLIIpUHQFHGHFRPSRUWHPHQWHQWUH OH&20HWOH021
/HUHFRXYUHPHQWGHIDXWHVQ¶HVWSDVSRVVLEOHDYHFFHWWH DSSURFKHHWLOIDXWGRQFO¶pWHQGUH&HFLSHXWrWUHIDLWHQ XWLOLVDQW OHV FRQFHSWV GHV FRPSRVDQWV 1DXWRWHVWDEOHV TXL SHXYHQW rWUH FRQVLGpUpV FRPPH GH OD UHGRQGDQFH DFWLYHFRPPHH[SOLTXpGDQVODVHFWLRQGH>@
+\SRWKqVHVG¶pWXGHHWSULQFLSDOHVGpIDLOODQFHVSULVHV HQFRPSWH
&HWWH pWXGH SRUWH VXU OD ILDELOLVDWLRQ GX ORJLFLHO SDU UDSSRUW DX[ IDXWHV QDWXUHOOHV QRXV FRQVLGqUHURQV GRQF TXH OHV HUUHXUV KXPDLQHV VRQW KRUV GX FKDPS G¶DSSOLFDWLRQ&HWWHK\SRWKqVHHVWWUqVIRUWHPDLVYLDEOH SXLVTXH O¶RQ SHXW FRQVLGpUHU TXH OHV HUUHXUV KXPDLQHV Q¶LQIOXHQFHQWSDVOHVIDXWHVQDWXUHOOHVGXV\VWqPHHWYLFH YHUVD /D FRQWULEXWLRQ VH FRQFHQWUH GRQF VXU OHV GpIDLOODQFHV IRQFWLRQQHOOHV GHV WURLV SULQFLSDOHV EULTXHV GHO¶DUFKLWHFWXUHORJLFLHOOH$5&+SUpVHQWpHjOD)LJXUH LH O¶DSSOLFDWLRQ OH FRQWU{OHXU GH GLDORJXH OHV ZLGJHWVHWOHJHVWLRQQDLUHGHIHQrWUHV/HVSpULSKpULTXHV G¶HQWUpH HW VRUWLH DLQVL TXH OH QR\DX IRQFWLRQQHO VRQW FRQVLGpUpVFRPPHpWDQWKRUVGXFKDPSG¶DSSOLFDWLRQGH FHWDUWLFOHLOVVRQWWUDLWpVGDQVG¶DXWUHVWUDYDX[FRQQH[HV FRPPH>@
/¶DUFKLWHFWXUH TXH QRXV SURSRVRQV SHUPHW GH V¶DVVXUHU TXH OH V\VWqPH LQWHUDFWLI WUDLWH FRUUHFWHPHQW OHV pYpQHPHQWV G¶HQWUpH YHQDQW GH O¶RSpUDWHXU HW HIIHFWXH FRUUHFWHPHQW OH UHQGX GHV SDUDPqWUHV UHoXV GX QR\DX IRQFWLRQQHO3RXUUHQWUHUGDQVOHVGpWDLOVQRXVFKHUFKRQV jJpUHUOHVWURLVGpIDLOODQFHVIRQFWLRQQHOOHVSRVVLEOHVTXL SRXUUDLHQW PHQHU j XQH FDWDVWURSKH HJ XQ FUDVK G¶DYLRQ
x $IILFKDJH HUURQp DIILFKDJH HUURQp GHV GRQQpHV UHoXHV GX QR\DX IRQFWLRQQHO HJ XQ ZLGJHW UHoRLW HWDIILFKH
x &RQWU{OH HUURQp 7UDQVPLVVLRQ G¶XQH DFWLRQ GLIIpUHQWH GH FHOOH DFFRPSOLH SDU O¶XWLOLVDWHXU HJ O¶XWLOLVDWHXU FOLTXH VXU OH ERXWRQ HW O¶pYpQHPHQW 0RXVH0RYHHVWWUDQVPLVjO¶DSSOLFDWLRQ
x &RQWU{OH DXWRQRPH XQ pYpQHPHQW HVW WUDQVPLV DORUVTXHO¶XWLOLVDWHXUQ¶DSDVDFFRPSOLG¶DFWLRQVXU OH V\VWqPH HJ XQ pYpQHPHQW 0RXVH&OLFN HVW WUDQVPLVVDQVDXFXQHLQWHUYHQWLRQGHO¶XWLOLVDWHXU 'HVFULSWLRQ$$'/GHVDUFKLWHFWXUHV
/HV DUFKLWHFWXUHV SUpVHQWpHV GDQV FH SDSLHU VHURQW GpFULWHV GDQV FHWWH VHFWLRQ HQ XWLOLVDQW OD UHSUpVHQWDWLRQ JUDSKLTXHGXODQJDJH$$'/$UFKLWHFWXUH$QDO\VLVDQG 'HVLJQ /DQJXDJH >@ $$'/ HVW XQ ODQJDJH GH GHVFULSWLRQ WH[WXHO HW JUDSKLTXH VWDQGDUGLVp HQ SDU OD VRFLpWp 6$( 6RFLHW\ RI $XWRPRWLYH (QJLQHHUV SRXUDLGHUjO¶DQDO\VHHWjODFRQFHSWLRQG¶DUFKLWHFWXUHV V\VWqPH/HODQJDJH$$'/DSULQFLSDOHPHQWpWpXWLOLVp SRXUGpFULUHOHVV\VWqPHVWHPSVUpHOVFRPSOH[HVGDQVOHV V\VWqPHVDYLRQLTXHVHWVSDWLDX[PDLVLODDXVVLpWpXWLOLVp
GDQVG¶DXWUHVGRPDLQHV1RXVO¶XWLOLVRQVGDQVFHWDUWLFOH SRXU GpFULUH JUDSKLTXHPHQW OHV DUFKLWHFWXUHV WROpUDQWHV DX[ IDXWHV TXH QRXV SURSRVRQV SRXU HQ pYDOXHU OD ILDELOLWp /D GHVFULSWLRQ HVW DGDSWpH SRXU OH GRPDLQH G¶DSSOLFDWLRQGXFRFNSLWSDUO¶DMRXWG¶XQHUHSUpVHQWDWLRQ GXSLORWHGHVHVLQWHUDFWLRQVDYHFOHV\VWqPHDLQVLTX¶XQ V\PEROH©HQJUHQDJHªSRXUUHSUpVHQWHUOHWUDLWHPHQWGHV GRQQpHV /D )LJXUH LQWURGXLW OHV FRPSRVDQWV HW OHV FRQQH[LRQVHQ$$'/XWLOLVpVGDQVFHSDSLHU
)LJXUH&RPSRVDQWV$$'/XWLOLVpVGDQVO¶DUWLFOH 8QH DUFKLWHFWXUH WROpUDQWH DX[ IDXWHV SRXU OHV FRPSRVDQWVLQWHUDFWLIV
'DQV FHWWH VHFWLRQ QRXV SUpVHQWRQV WRXW G¶DERUG HQ GpWDLOXQHDUFKLWHFWXUHDXWRWHVWDEOHPpFDQLVPHSUpVHQWp UDSLGHPHQWDXGHVVXVTXLSHUPHWG¶DVVXUHUODGpWHFWLRQ GHV IDXWHV SXLV QRXV SUpVHQWRQV GHX[ DUFKLWHFWXUHV SHUPHWWDQW OHXU UHFRXYUHPHQW L XQH DUFKLWHFWXUH 1 DXWRWHVWDEOHROHUHFRXYUHPHQWHVWDVVXUpGHPDQLqUH DXWRQRPH SDU OH V\VWqPH HW LL XQH DUFKLWHFWXUH DYHF UHFRXYUHPHQWLPSOLTXDQWO¶RSpUDWHXU
Une architecture auto-testable pour la détection de fautes appliquée aux composants interactifs
/D)LJXUHSUpVHQWHO¶DUFKLWHFWXUHG¶XQFRPSRVDQWXVXHO )LJXUH D FRPSDUp j XQ FRPSRVDQW DXWRWHVWDEOH )LJXUH E &HWWH ILJXUH UHQG H[SOLFLWH OHV GLIIpUHQFHV HQWUH OHV GHX[ DUFKLWHFWXUHV (OOH HVW XWLOLVpH LFL SRXU SUpVHQWHU OD PDQLqUH G¶LPSODQWHU OHV FRPSRVDQWV DXWR WHVWDEOHVSRXUGHVDSSOLFDWLRQVLQWHUDFWLYHV3RXUFHODLO IDXW VXLYUH GHX[ pWDSHV LPSODQWDWLRQ GX 021 HW VRQ FRQILQHPHQWSDUUDSSRUWDX&20
x 3RXUFKDTXHFRPSRVDQWLQWHUDFWLIRQGRLWGpILQLUXQ 021 HW GH QRPEUHXVHV VROXWLRQV VRQW GLVSRQLEOHV
>@D SURSRVp G¶DSSOLTXHU XQ PpFDQLVPH DXWR WHVWDEOH DX[ ZLGJHWV HQ XWLOLVDQW OD VHFRQGH LPSODQWDWLRQSUpVHQWpHGDQVOHVWUDYDX[FRQQH[HV,O SURSRVH DXVVL O¶XWLOLVDWLRQ G¶XQH VSpFLILFDWLRQ IRUPHOOH >@ SRXU GpFULUH O¶HQVHPEOH GHV FRPSRVDQWV GX ZLGJHW DXWRWHVWDEOH 'LVSDWFKHU
&20021DQG&RPSDUDWHXU&HWWHVROXWLRQSRVH GHV SUREOqPHV G¶LPSODQWDWLRQ WHOV TXH OD
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
85
VSpFLILFDWLRQ G¶XQ FRPSRVDQW TXL DXWRULVH OH GLVSDWFKLQJGHVpYpQHPHQWVG¶HQWUpH>@DSURSRVp G¶DSSOLTXHUODSKLORVRSKLHDXWRWHVWDEOHjXQQLYHDX SOXV pOHYp HQ XWLOLVDQW OD SUHPLqUH LPSODQWDWLRQ SUpVHQWpGDQVOHVWUDYDX[FRQQH[HV/HFKDOOHQJHHVW LFL OD GpILQLWLRQ GX SURJUDPPH 021 YpULILDQW O¶H[pFXWLRQ GX &20 &HWWH VROXWLRQ SHUPHW GH JURXSHUSDUH[HPSOHO¶HQVHPEOHGHVPRQLWHXUVHQ XQVHXOPRQLWHXUSRXUO¶LQWpJUDOLWpGHO¶DSSOLFDWLRQ x 8Q PpFDQLVPH DXWRWHVWDEOH QH VXIILW SDV SRXU
DVVXUHUODGpWHFWLRQGHVIDXWHVLOHVWGRQFQpFHVVDLUH GH FRQILQHU OH &20 GX 021 (Q HIIHW XQH IDXWH LPSDFWDQW XQ FRPSRVDQW HJ OH &20 SHXW pJDOHPHQW DIIHFWHU OH VHFRQG FRPSRVDQW HJ OH 021 &HOD VHUDLW OH FDV VL WRXV OHV FRPSRVDQWV G¶XQH DUFKLWHFWXUH pWDLHQW H[pFXWpV GDQV OD PrPH SDUWLWLRQ /H VWDQGDUG $5,1& >@ GpILQLW XQ SDUWLWLRQQHPHQWTXLDVVXUHODVpJUpJDWLRQVSDWLDOHHW WHPSRUHOOH SRXU OH GRPDLQH GH O¶DYLDWLRQ FLYLOH /¶DUFKLWHFWXUHSURSRVpHGDQVOHSDSLHUUHQGH[SOLFLWH ODVpJUpJDWLRQHQWUHOH&20HWOH021UHSUpVHQWpV LFLSDUGHX[SURFHVVHXUVYLUWXHOVGLIIpUHQWVTXHO¶RQ SHXWFRQVLGpUHUFRPPHGHX[SDUWLWLRQV$5,1&
VpSDUpHV
)LJXUH$UFKLWHFWXUHG¶XQFRPSRVDQWXVXHODFRPSDUpH jFHOOHG¶XQFRPSRVDQWWROpUDQWDX[IDXWHVGpWHFWLRQVHXOH
E
Architectures pour le recouvrement de fautes appliquée aux composants interactifs
/HVFRPSRVDQWVDXWRWHVWDEOHVVRQWFDSDEOHVGHGpWHFWHU OD SUpVHQFH G¶XQH IDXWH HW GH GpFOHQFKHU OD QRWLILFDWLRQ DVVRFLpH3RXUSRXYRLUDMRXWHUGXUHFRXYUHPHQWHWWROpUHU DLQVL OHV IDXWHV SOXVLHXUV VROXWLRQV GH FRQFHSWLRQ VRQW HQYLVDJHDEOHV'DQVFHWDUWLFOHQRXVHQSURSRVRQVGHX[
TXLVHURQWLOOXVWUpHVGDQVO¶pWXGHGHFDV
x L’architecture N-auto-testable (automatique) /¶DUFKLWHFWXUH 1DXWRWHVWDEOH SUpVHQWpH GDQV OD )LJXUHHVWFRPSRVpHGHGHX[RXSOXVFRPSRVDQWV
DXWRWHVWDEOHV QXPpURWpV VpTXHQWLHOOHPHQW /HV pYpQHPHQWV G¶HQWUpH VRQW WUDQVPLV j WRXV OHV FRPSRVDQWVDXWRWHVWDEOHVHWVRQWWUDLWpVHQSDUDOOqOH 7RXWHV OHV VRUWLHV HW QRWLILFDWLRQV G¶HUUHXU VRQW WUDQVPLVHV j XQ PpFDQLVPH GH GpFLVLRQ 6L OH SUHPLHUFRPSRVDQWIRXUQLWXQUpVXOWDWVDQVHUUHXUFH GHUQLHUHVWWUDQVPLVWHOTXHOHQWDQWTXHUpVXOWDWGX FRPSRVDQW1DXWRWHVWDEOH6LQRQOHPpFDQLVPHGH GpFLVLRQQHSUHQGUDSOXVHQFRQVLGpUDWLRQOHUpVXOWDW GXSUHPLHU FRPSRVDQW DXWRWHVWDEOH HW SUHQGUD j OD SODFHOHVUpVXOWDWVGXVXLYDQW&HFLVHUpSqWHMXVTX¶j FHTXHOHGHUQLHUFRPSRVDQWGpIDLOOHFHQ¶HVWTX¶jFH PRPHQWTX¶XQHQRWLILFDWLRQG¶HUUHXUHVWHQYR\pH6L WRXV OHV ZLGJHWV DXWRWHVWDEOHV VRQW GpIDLOODQWV OH ZLGJHW 1DXWRWHVWDEOH QH IDLW SOXV TXH GH OD GpWHFWLRQGHIDXWHVDQVIDLUHGHUHFRXYUHPHQW6LXQ GHV ZLGJHWV DXWRWHVWDEOHV WUDLWH XQH GRQQpH VDQV HUUHXU OD IDXWH SUpFpGHQWH HVW DORUV GpWHFWpH UHFRXYHUWHHWQHVHUDSDVQRWLILpH
&HWWH DUFKLWHFWXUH HVW SDUWLFXOLqUHPHQW HIILFDFH FDU HOOH SHUPHW OD GLYHUVLILFDWLRQ GHV FRPSRVDQWV DXWR WHVWDEOHV FH TXL SRXUUDLW VH IDLUH HQ OHV IDLVDQW GpYHORSSHU SDU GLIIpUHQWHV pTXLSHV DYHF GLIIpUHQWV ODQJDJHV GH SURJUDPPDWLRQ &HWWH SRVVLELOLWp GH GLYHUVLILFDWLRQUHQGFHWWHDUFKLWHFWXUHWUqVSUpFLHXVH PrPHVLHOOHHQGHYLHQWQDWXUHOOHPHQWSOXVFKqUHj UpDOLVHU8QDXWUHDVSHFWLPSRUWDQWUHSRVHVXUOHIDLW TXHOHUHFRXYUHPHQWHVWDXWRPDWLTXHHWQHQpFHVVLWH SDVGHVXSSRUWH[WpULHXU
x L’architecture impliquant l’utilisateur
,OHVWSRVVLEOHGHIDLUHGXUHFRXYUHPHQWG¶XQHDXWUH PDQLqUHHQLQWURGXLVDQWXQPpFDQLVPHVSpFLILTXHGH JHVWLRQ GHV QRWLILFDWLRQV G¶HUUHXU SDU O¶XWLOLVDWHXU 'DQV FH FDV OH SULQFLSH HVW GH QRWLILHU O¶RSpUDWHXU ORUVTX¶XQHIDXWHHVWGpWHFWpHSDUOHV\VWqPHODLVVDQW OH UHFRXYUHPHQW j OD FKDUJH GH O¶RSpUDWHXU &HWWH DSSURFKH SUpVHQWH O¶DYDQWDJH GH JDUGHU O¶RSpUDWHXU GDQV OD ERXFOH GH FRQWU{OH HW OXL SHUPHW GRQF GH JDUGHUXQHPDUJHGHGpFLVLRQSRXUODUpVROXWLRQGHV IDXWHV &HSHQGDQW OD FKDUJH GH WUDYDLO VXSSOpPHQWDLUH UHQG SUREOpPDWLTXH FHWWH DSSURFKH ORUV GH O¶DSSDULWLRQ GH PXOWLSOHV IDXWHV GDQV XQ WHPSV OLPLWp 2Q YRLW DLQVL DSSDUDLWUH XQ SUREOqPH GHFRQIOLWHQWUHXWLOLVDELOLWpHWILDELOLWp,OHVWSRVVLEOH G¶pYDOXHU O¶LPSDFW HQ WHUPHV G¶XWLOLVDELOLWp HW SOXV SUpFLVpPHQWHQWHUPHVG¶HIILFLHQFHHQGpFULYDQWHW HQ DQDO\VDQW OD FRPSOH[LWp GHV WkFKHV OLpHV DX UHFRXYUHPHQW 8QH DSSURFKH V\VWpPDWLTXH SRXU pYDOXHU FH W\SH G¶LPSDFW D pWp WHVWpH VXU DUFKLWHFWXUHV GH WROpUDQFH DX[ IDXWHV GLIIpUHQWHV HW SHXWrWUHWURXYpHGDQV>@
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
86
)LJXUH8QHDUFKLWHFWXUHWROpUDQWHDX[IDXWHVLQFOXDQWOD
GpWHFWLRQHWOHUHFRXYUHPHQWG¶XQFRPSRVDQWLQWHUDFWLI
Une architecture pour des systèmes interactifs tolérants aux fautes/RUVTXH O¶RQ FRQVLGqUH OD ILDELOLWp GHV V\VWqPHV LQIRUPDWLTXHV OD ILDELOLWp GH O¶HQVHPEOH GX V\VWqPH HVW FHOOH GH O¶pOpPHQW OH PRLQV ILDEOH1RXVDYRQVSURSRVp SUpFpGHPPHQW GHV DUFKLWHFWXUHV SRXU OHV FRPSRVDQWV LQWHUDFWLIV FDSDEOHV G¶HIIHFWXHU OD GpWHFWLRQ HW OH UHFRXYUHPHQW GHV IDXWHV 6L O¶RQ VXLW O¶DUFKLWHFWXUH
$5&+GH OD)LJXUHGH WHOV PpFDQLVPHV GRLYHQW rWUH GpILQLV SRXU WRXV OHV FRPSRVDQWV LH OHV SpULSKpULTXHV G¶HQWUpH HW GH VRUWLH OHV GULYHUV OH JHVWLRQQDLUH GH IHQrWUHVOHVZLGJHWVHWO¶DSSOLFDWLRQFjGOHGLDORJXHHW OHQR\DXIRQFWLRQQHO
/¶DMRXW GH PpFDQLVPHV GH WROpUDQFH DX[ IDXWHV j FHV FRPSRVDQWV VRXOqYH GHV SUREOqPHV GX IDLW GHV FRQWUDLQWHV WHPSRUHOOHV LPSRVpHV SDU OD FRXUWH ERXFOH GH IHHGEDFN LPPpGLDW QpFHVVDLUH DX JHVWLRQQDLUH G¶pYpQHPHQWGHVSpULSKpULTXHVG¶HQWUp1RXVWUDYDLOORQV VXUFHVDVSHFWVjODIRLVGDQVOHFRQWH[WHGHVLQWHUDFWLRQV :,03HWGHVLQWHUDFWLRQVGLUHFWHVHWPXOLWRXFK>@
Comportement détaillé d’éléments interactifs tolérants aux fautes
/HV WUDYDX[ FRQQH[HV SURSRVHQW KDELWXHOOHPHQW GHV
VROXWLRQVJpQpULTXHVD\DQWXQKDXWQLYHDXG¶DEVWUDFWLRQ FRPPHFHOOHVTXHQRXVDYRQVSURSRVpHVGDQVODVHFWLRQ SUpFpGHQWH,OIDXWELHQVUUDIILQHUFHVVROXWLRQVORUVGHV SKDVHVG¶LPSODQWDWLRQSRXUSHUPHWWUHGHGpFULUHHQGpWDLO OHVFRQQH[LRQVHQWUHOHVSpULSKpULTXHVG¶HQWUpHVRUWLHHW FKDFXQ GHV FRPSRVDQWV DLQVL TXH OHV FRQQH[LRQV HQWUH FHVFRPSRVDQWVHX[PrPHV,OIDXWHQVXLWHSURGXLUHXQH GHVFULSWLRQ EDV QLYHDX GH OD YDULpWp GHV FRPSRVDQWV GH O¶DUFKLWHFWXUH 'H WHOV FRPSRUWHPHQWV SHXYHQW rWUH UHODWLYHPHQW FRPSOH[HV HW OHXU LQWpJUDWLRQ ELHQ SOXV HQFRUH>@DGpPRQWUpTXHO¶XWLOLVDWLRQGHGHVFULSWLRQV IRUPHOOHVGpGLpHVDX[V\VWqPHVLQWHUDFWLIVFRPPH,&2
>@ SHUPHW GH GpFULUH OH FRPSRUWHPHQW GHV ZLGJHWV DXWRWHVWDEOHV8QHGHVGLIILFXOWpVHVWDORUVODSURGXFWLRQ G¶XQH VHFRQGH YHUVLRQ GX FRPSRUWHPHQW SRXU UHVSHFWHU ODGLYHUVLILFDWLRQGDQVOHEXWG¶pYLWHUOHVIDXWHVGHPRGH FRPPXQHQWUHOH&20HWOH021FRPPHGpWDLOOpGDQV
>@
$33/,&$7,21 '( /¶$5&+,7(&785( '(
72/(5$1&($8;)$87(6$81((78'('(&$6 3RXULOOXVWUHUO¶DSSURFKHSURSRVpHQRXVSUpVHQWRQVXQH PLVH HQ °XYUH GH O¶DUFKLWHFWXUH DXWRWHVWDEOH VXU XQH DSSOLFDWLRQ LQWHUDFWLYH GH FRFNSLW DSSHOpH )&8 %DFNXS )OLJKW&RQWURO8QLW%DFNXS
'HVFULSWLRQLQIRUPHOOH
/¶DSSOLFDWLRQ)&8%DFNXSHVWFRQoXHSRXUSHUPHWWUHj O¶pTXLSDJH WHFKQLTXH SLORWH FRSLORWH G¶LQWHUDJLU DYHF O¶DXWRSLORWH$3HWGHFRQILJXUHUOHVDIILFKDJHVGHYROHW GHQDYLJDWLRQ&HWWHDSSOLFDWLRQHVWDIILFKpHVXUGHX[GHV DIILFKHXUV /&' GX FRFNSLW XQ SRXU FKDTXH SLORWH /¶pTXLSDJH SHXW DLQVL LQWHUDJLU DYHF O¶DSSOLFDWLRQ HQ XWLOLVDQW XQ GLVSRVLWLI DSSHOp .H\ERDUG DQG &XUVRU
&RQWURO8QLW.&&8HQEDVHWjJDXFKHGHOD)LJXUH TXL FRPELQH XQ WUDFNEDOO HW XQ FODYLHU GDQV XQ XQLTXH FRPSRVDQWPDWpULHO
$UFKLWHFWXUHWROpUDQWHDX[IDXWHVSRXUOH)&8%DFNXS /D)LJXUHSUpVHQWHXQHYXHGpWDLOOpHGHO¶DUFKLWHFWXUH VXLYDQW O¶DUFKLWHFWXUH $5&+ ± FI )LJXUH GX )&8
%DFNXS R OH SpULSKpULTXH G¶HQWUpH HVW OH .&&8 HW OH SpULSKpULTXH GH VRUWLH HVW O¶pFUDQ /&' GX FRFNSLW /H JHVWLRQQDLUH GH IHQrWUHV SHUPHW GH OHV FRQQHFWHU DX[
)LJXUH$UFKLWHFWXUHQRQWROpUDQWHDX[IDXWHVGHO¶pWXGHGHFDV
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
87
ZLGJHWVTXLLQWHUDJLVVHQWDYHFOHFRQWU{OHXUGHGLDORJXH YLD OH SURWRFROH GpILQL SDU OH VWDQGDUG $5,1& >@
/H FRQWU{OHXU GH GLDORJXH HVW TXDQW j OXL GLUHFWHPHQW UHOLpDX[V\VWqPHVDYLRQLTXHV
,O HVW LPSRUWDQW GH VRXOLJQHU TXH O¶DUFKLWHFWXUH GRLW UHVSHFWHUOHVWDQGDUG$5,1&>@SXLVTX¶LOHVWOHVHXO VWDQGDUGXWLOLVpGDQVOHGRPDLQHGHVDYLRQVFRPPHUFLDX[
FLYLOV ,O GpILQLW OHV ZLGJHWV HW OHXUV SDUDPqWUHV PDLV DXVVLOHVSURWRFROHVGHFRPPXQLFDWLRQHQWUHOHVZLGJHWV HW O¶DSSOLFDWLRQ j ODTXHOOH LOV DSSDUWLHQQHQW /HV QRPV XWLOLVpVSRXUGpFULUHOHVpYpQHPHQWVHWOHXUVSDUDPqWUHV VRQW$B(YHQWVHW$BVHW3DUDPHWHUVFRPPHGpFULW GDQVOHVWDQGDUG'DQVGHSUpFpGHQWVWUDYDX[>@FKDTXH FRPSRVDQWpWDLWPRGpOLVpHQXWLOLVDQWOHIRUPDOLVPH,&2 H[FHSWp SRXU OH JHVWLRQQDLUH GH IHQrWUHV SRXU OHTXHO FHUWDLQHVSDUWLHVRQWpWpGpFULWHVHQFRGH-$9$GDQVOH EXWGHWUDLWHUODILDELOLWpG¶XQHWHOOHDSSOLFDWLRQ
/D )LJXUH SUpVHQWH O¶H[WHQVLRQ GH FHWWH DUFKLWHFWXUH SRXUODUHQGUHWROpUDQWHDX[IDXWHV&HWWHH[WHQVLRQVXLW SUpFLVpPHQW O¶DUFKLWHFWXUH DXWRWHVWDEOH SUpVHQWpH SUpFpGHPPHQW/HVZLGJHWVHWOHJHVWLRQQDLUHGHIHQrWUHV VRQWLFLLPSODQWpVFRPPHGHVFRPSRVDQWVDXWRWHVWDEOHV DXTXHO RQ D DGMRLQW XQ FRPSRVDQW 021 ,OV VRQW GRQF FDSDEOHV G¶HQYR\HU GHV QRWLILFDWLRQV G¶HUUHXU DX FRQWU{OHXU GH GLDORJXH TXL FRQWLHQW GHV PpFDQLVPHV GH UHFRXYUHPHQW/HFRQWU{OHXUGHGLDORJXHHVWOXLDXVVLXQ FRPSRVDQW DXWRWHVWDEOH FRPSRVp G¶XQ &20 HW G¶XQ 021 'X IDLW GHV FRQWUDLQWHV G¶HVSDFH QRXV QH WUDLWHURQV SDV LFL OH FRQWHQX GX FRPSRVDQW PRQLWHXU ,O SHXWrWUHLPSODQWpFRPPHXQPRQLWHXUXQLTXHRXHQFRUH FRPPH XQH PXOWLWXGH GH PRQLWHXUV DVVHPEOpV SDU H[HPSOH XQ SRXU FKDTXH ZLGJHW HW XQ SRXU OH JHVWLRQQDLUHGHIHQrWUHV6XUQRWUHSURWRW\SHQRXVDYRQV WHVWp OHV GHX[ LPSODQWDWLRQV SUpVHQWpHV GDQV OD VHFWLRQ SUpFpGHQWHVRLWOHPpFDQLVPHDXWRWHVWDEOHDXWRPDWLTXH HW FHOXL PHWWDQW HQ MHX O¶XWLOLVDWHXU 3OXVG¶LQIRUPDWLRQ VXUFHWWHDSSURFKHSHXWrWUHWURXYpHGDQV>@
$YHF O¶DUFKLWHFWXUH PHWWDQW HQ MHX O¶XWLOLVDWHXU ORUVTX¶XQH IDXWH HVW GpWHFWpH OH V\VWqPH DIILFKH XQ PHVVDJH SRXU TXH O¶pTXLSDJH IDVVH XQ UHGpPDUUDJH GH O¶DSSOLFDWLRQ 'DQV FH FDV VL OD IDXWH GpWHFWpH HVW WUDQVLWRLUHHWGRQFQRQSHUPDQHQWHHOOHVHUDVXSSULPpH DYHFOHUHGpPDUUDJHGXV\VWqPH
$YHF O¶DUFKLWHFWXUH 1DXWRWHVWDEOH OHV FRPSRVDQWV ORJLFLHOV GH O¶DYLRQ LQWqJUHQW OD JHVWLRQ GHV HUUHXUV GpFOHQFKpHV SDU OHV FRPSRVDQWV DXWRWHVWDEOHV WHOV TXH OHV ZLGJHWV RX OH JHVWLRQQDLUH GH IHQrWUHV /D )LJXUH UHSUpVHQWHFHFRPSRUWHPHQWSDUOHVOLHQVpWLTXHWWpVError notificationsHQWUHOHVERvWHVGHVZLGJHWVHWGXFRQWU{OHXU GH GLDORJXH DLQVL TX¶HQWUH OH FRPSRVDQW GH WUDLWHPHQW G¶HUUHXUGXV\VWqPHDYLRQLTXHVLWXpGDQVODSDUWLWLRQHW OH021GXFRQWU{OHXUGHGLDORJXHVLWXpGDQVODSDUWLWLRQ /HV DXWUHV FRPSRVDQWV GH O¶DSSOLFDWLRQ LQWHUDFWLYH FRPPH OHV SpULSKpULTXHV G¶HQWUpHVRUWLH OH QR\DX IRQFWLRQQHO HWF GRLYHQW pJDOHPHQW rWUH DGMRLQWV GH PpFDQLVPHV GH WROpUDQFH DX[ IDXWHV SRXU rWUH UpVLOLHQWV IDFHDX[IDXWHVQDWXUHOOHV&HQ¶HVWSDVSUpVHQWpGDQVFH FDV G¶XWLOLVDWLRQ PDLV RQ SHXW OH UpDOLVHU HQ OHXU DSSOLTXDQW OHV DUFKLWHFWXUHV SUpVHQWpHV GDQV FH SDSLHU DUFKLWHFWXUHDXWRWHVWDEOHHW1DXWRWHVWDEOH
326,7,211(0(17'(/¶$3352&+(3$55$33257
$8;&2175,%87,216$17(5,(85(6
/D)LJXUHUHQGH[SOLFLWHODVpSDUDWLRQGHVFRPSRVDQWV GDQV OHV GLIIpUHQWHV SDUWLWLRQV &HWWH VpSDUDWLRQ HVW IRQGDPHQWDOHSRXUDVVXUHUODWROpUDQFHDX[IDXWHVVLO¶RQ YHXW SRXYRLU SUHQGUH HQ FRPSWH OHV IDXWHV FRPPXQHV HQWUH OH &20 HW OH 021 /D PDQLqUH G¶DOORXHU OHV FRPSRVDQWV GDQV OHV SDUWLWLRQV VXLYDQW OH VWDQGDUG
$5,1& >@ D pWp SUpVHQWpH GDQV >@ &HWWH DUFKLWHFWXUHHVWJpQpULTXHHWSHXWrWUHH[SORLWpHSRXUOD FRQFHSWLRQGHWRXWV\VWqPHLQWHUDFWLIVLODWROpUDQFHDX[
IDXWHV IDLW SDUWLH GHV H[LJHQFHV 7RXWHIRLV OH FRPSRUWHPHQWGHVFRPSRVDQWVSHXWrWUHDXVVLXQHVRXUFH G¶HUUHXUV 'DQV GHV WUDYDX[ DQWpULHXUV QRXV DYRQV
)LJXUH$UFKLWHFWXUHWROpUDQWHDX[IDXWHVDSSOLTXpHjO¶pWXGHGHFDV)&8%DFNXS
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
88
SURSRVp XQH WHFKQLTXH GH GHVFULSWLRQ SRXU OH FRPSRUWHPHQW GHV ZLGJHWV >@ GHV ZLGJHWV DXWR WHVWDEOHV>@DLQVLTX¶XQHGHVFULSWLRQGLVVRFLpHGX&20 HW GX 021 FHWWH GHUQLqUH pWDQW j EDVH GH SURSULpWpV
>@ ,O HVW LQWpUHVVDQW GH QRWHU TXH O¶DUFKLWHFWXUH SURSRVpH HVW O¶DERXWLVVHPHQW GH WUDYDX[ GH ORQJXH KDOHLQH DVVXUDQW OD GpWHFWLRQ OH UHFRXYUHPHQW HW OH FRQILQHPHQWGHVIDXWHV
&21&/86,21(73(563(&7,9(6
'DQVFHWDUWLFOHQRXVDYRQVSURSRVpXQHWD[RQRPLHTXL UDVVHPEOH SOXVLHXUV WUDYDX[ GH UHFKHUFKH GDQV OHV GRPDLQHV GH OD VpFXULWp FRPSRUWHPHQWV PDOYHLOODQWV GHODWROpUDQFHDX[IDXWHVGHVPpWKRGHVIRUPHOOHVDLQVL TXH GHV IDFWHXUV KXPDLQV TXL VRQW GRPDLQHV WUDLWpV JpQpUDOHPHQW GH PDQLqUH VpSDUpH 'DQV FH FDGUH QRXV DYRQVLGHQWLILpOHVEHVRLQVSRXUUpVRXGUHOHVSUREOqPHV OLpV j OD ILDELOLWp GHV V\VWqPHV LQWHUDFWLIV HW SOXV SDUWLFXOLqUHPHQW FHX[ VH WURXYDQW GDQV OHV V\VWqPHV FULWLTXHV1RXVDYRQVDLQVLGpILQLOHVFRQWRXUVG¶XQHOLVWH GHSUREOpPDWLTXHVjUpVRXGUHSRXUDXJPHQWHUODILDELOLWp GHVV\VWqPHVLQWHUDFWLIV
/D VHFRQGH SDUWLH GH FH SDSLHU VH FRQFHQWUDLW VXU XQH DUFKLWHFWXUH DXWRWHVWDEOH SRXU OHV V\VWqPHV LQWHUDFWLIV FDSDEOH GH GpWHFWHU OHV IDXWHV QDWXUHOOHV 1RXV DYRQV pJDOHPHQW SURSRVp GHX[ DUFKLWHFWXUHV FDQGLGDWHV SRXU HIIHFWXHUOHUHFRXYUHPHQWGHWHOOHVIDXWHVODSUHPLqUHHVW DXWRPDWLTXH WDQGLV TXH OD VHFRQGH HVW SLORWpH SDU XQ XWLOLVDWHXU FKDFXQH D\DQW VHV DYDQWDJHV HW OLPLWDWLRQV GpWDLOOpVGDQVO¶DUWLFOH
/¶DUWLFOH D HQVXLWH SUpVHQWp FRPPHQW GH WHOOHV DUFKLWHFWXUHV SHXYHQW rWUH DSSOLTXpHV j XQ FDV UpHO G¶XWLOLVDWLRQ O¶DSSOLFDWLRQ )&8 %DFNXS /¶DSSOLFDWLRQ GHWHOOHVDUFKLWHFWXUHVjFHFDVG¶XWLOLVDWLRQSHUPHWDORUV OD GpWHFWLRQ HW OH UHFRXYUHPHQW GHV IDXWHV PDWpULHOOHV SRXYDQW DIIHFWHU O¶DSSOLFDWLRQ &HSHQGDQW O¶DGMRQFWLRQ GHWHOOHVDUFKLWHFWXUHVVRXOqYHHQFRUHG¶DXWUHVSUREOqPHV jLGHQWLILHUHWjUpVRXGUH
3UHPLqUHPHQW FHW DUWLFOH V¶HVW FRQFHQWUp VXU OHV WHFKQLTXHV G¶LQWHUDFWLRQ :,03 O¶DSSOLFDWLRQ GH WHOOHV DUFKLWHFWXUHV ULVTXH G¶rWUH SOXV SUREOpPDWLTXH ORUV GX SDVVDJH DX[ LQWHUDFWLRQV SRVW:,03 FRPPH OD PDQLSXODWLRQGLUHFWHRXOHVLQWHUDFWLRQVPXOWLWRXFKSRXU OHVTXHOOHV OHV HQWUpHV HW OHV VRUWLHV VRQW ELHQ SOXV HQWUHODFpHV
'HX[LqPHPHQW O¶DMRXW GHV FRPSRVDQWVQpFHVVDLUHV j OD WROpUDQFH DX[ IDXWHV PRQLWHXUV GLVSDFKHXU FRPSDUDWHXUV«DX[DSSOLFDWLRQVLQWHUDFWLYHVDXJPHQWH VLJQLILFDWLYHPHQW OHXU WDLOOH DSSUR[LPDWLYHPHQW SDU SRXUOHVZLGJHWVDXWRWHVWDEOHVPrPHVLO¶HQVHPEOHGHV IRQFWLRQQDOLWpV UHVWH FRQVWDQW ,O \ D GRQF XQ EHVRLQ JUDQGLVVDQWGHGpYHORSSHUGHVWHFKQLTXHVGHGHVFULSWLRQ IRUPHOOH FDSDEOH GH SDVVHU j O¶pFKHOOH HW GpGLpHV j OD GHVFULSWLRQGHVV\VWqPHVLQWHUDFWLIV
5(0(5&,(0(176
&HVWUDYDX[RQWpWpILQDQFpVHQSDUWLHSDU$LUEXVYLDOH FRQWUDW 5 7 'LVSOD\ 6\VWHP ;:' HW OHV SURMHWV)(1,&6ILQDQFpVSDU&25$&
5()(5(1&(6
$FFRW-&KDWW\60DXU\6DQG3DODQTXH3)RUPDO7UDQVGXFHUV 0RGHOVRI'HYLFHVDQG%XLOGLQJ%ULFNVIRU+LJKO\,QWHUDFWLYH 6\VWHPVWK(XURJUDSKLFVZRUNVKRSRQGHVLJQVSHFLILFDWLRQDQG YHULILFDWLRQRI,QWHUDFWLYHV\VWHPV6SULQJHU9HUODJ $5,1&$YLRQLFV$SSOLFDWLRQ6RIWZDUH6WDQGDUG,QWHUIDFH
$5,1&6SHFLILFDWLRQ$LUOLQHV(OHFWURQLF(QJ&RPPLWWHH -XO\
$5,1&&RFNSLW'LVSOD\6\VWHP,QWHUIDFHVWR8VHU6\VWHPV
$5,1&6SHFLILFDWLRQ$LUOLQHV(OHFWURQLF(QJ&RPPLWWHH
$YL]LHQLV$/DSULH-&5DQGHOO%/DQGZHKU&%DVLF FRQFHSWVDQGWD[RQRP\RIGHSHQGDEOHDQGVHFXUHFRPSXWLQJ,Q ,(((7UDQVRQ'HSHQGDEOHDQG6HFXUH&RPSXWLQJYROQR SS
%DUERQL(&RQYHUV\61DYDUUH'3DODQTXH30RGHO%DVHG (QJLQHHULQJRI:LGJHWV8VHU$SSOLFDWLRQVDQG6HUYHUV&RPSOLDQW ZLWK$5,1&6SHFLILFDWLRQ'69,6/1&6SS±
%DVQ\DW63DODQTXH36FKXSS%:ULJKW3)RUPDO VRFLRWHFKQLFDOEDUULHUPRGHOOLQJIRUVDIHW\FULWLFDOLQWHUDFWLYH V\VWHPVGHVLJQ6DIHW\6FLHQFH9ROQ-XQH,661
%DVQ\DW6&KR]RV1DQG3DODQTXH30XOWLGLVFLSOLQDU\
SHUVSHFWLYHRQDFFLGHQWLQYHVWLJDWLRQ5HOLDELOLW\(QJLQHHULQJ 6\VWHP6DIHW\9ROXPHQ3DJHV %DVV//LWWOH53HOOHJULQR55HHG66HDFRUG56KHSSDUG
6DQG6]H]XU057KH$UFK0RGHO6HHKHLP5HYLVLWHG8, 'HYHORSSHUV:RUNVKRS
%DVWLGH53DODQTXH31DYDUUH'$7RRO6XSSRUWHG'HVLJQ )UDPHZRUNIRU6DIHW\&ULWLFDO,QWHUDFWLYH6\VWHPV,QWHUDFWLQJZLWK FRPSXWHUVYROSS±
%DVWLGH56\23DODQTXH31DYDUUH')RUPDOVSHFLILFDWLRQ RI&25%$VHUYLFHVH[SHULHQFHDQGOHVVRQVOHDUQHG$&0&RQI RQ2EMHFW2ULHQWHG3URJ6\V/DQJDQG$SSOLFDWLRQV
2236/$$&03UHVVS
%DVV/&OHPHQWV3.D]PDQ56RIWZDUH$UFKLWHFWXUHLQ 3UDFWLFH$GGLVRQ:HVOH\5HDGLQJ0DVV
%RZHQ-DQG5HHYHV68,GULYHQWHVWILUVWGHYHORSPHQWRI LQWHUDFWLYHV\VWHPV,Q3URFHHGLQJVRIWKHUG$&0V\PSRVLXPRQ (QJLQHHULQJLQWHUDFWLYHFRPSXWLQJV\VWHPV(,&6$&01HZ
<RUN1<86$
%RZHQ-DQG5HHYHV60RGHOOLQJXVHUPDQXDOVRIPRGDO PHGLFDOGHYLFHVDQGOHDUQLQJIURPWKHH[SHULHQFH$&0V\PSRQ (QJLQHHULQJLQWHUDFWLYHFRPSXWLQJV\VWHPV(,&6$&0
%RZHQ-DQG5HHYHV60RGHOOLQJVDIHW\SURSHUWLHVRILQWHUDFWLYH PHGLFDOV\VWHPV$&0V\PSRQ(QJLQHHULQJLQWHUDFWLYH FRPSXWLQJV\VWHPV(,&6$&0'/
%RZHQ-DQG6WDYULGRX9)RUPDO0HWKRGV6DIHW\&ULWLFDO 6\VWHPVDQG6WDQGDUGV6RIWZDUH(QJLQHHULQJ-RXUQDO±
-XO\
&DPSRV-DQG+DUULVRQ0')RUPDOO\YHULI\LQJLQWHUDFWLYH V\VWHPV$UHYLHZWK(*ZRUNVKRSRQ'HVLJQ6SHFLILFDWLRQDQG 9HULILFDWLRQRI,QWHUDFWLYH6\VWHPV'69,6 6SULQJHU9HUODJ
'HDUGHQ$0DQG+DUULVRQ0')RUPDOLVLQJKXPDQHUURU UHVLVWDQFHDQGKXPDQHUURUWROHUDQFH3URFRIWK,QW&RQIRQ +XPDQ0DFKLQH,QWHUDFWLRQDQG$UWLILFLDO,QWHOOLJHQFHLQ
$HURVSDFH(85,6&2
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
89
'HVVLDWQLNRII$1LFRPHWWH9$ODWD('HVZDUWH</HFRQWH%
&RPEHV$DQG6LPDFKH&6HFXULQJ,QWHJUDWHG0RGXODU$YLRQLFV FRPSXWHUVQG'LJLWDO$YLRQLFV6\VWHP&RQIHUHQFH'$6&
2FWREHU
'2'HVLJQ$VVXUDQFH*XLGDQFHIRU$LUERUQH(OHFWURQLF +DUGZDUH57&$,QF(852&$($SULO
)D\ROODV&)DEUH-&1DYDUUH'3DODQTXH3DQG'HOHULV<
)DXOW7ROHUDQW,QWHUDFWLYH&RFNSLWVIRU&ULWLFDO$SSOLFDWLRQV 2YHUDOO$SSURDFKWK,QW:RUNVKRSRQ6RIWZDUH(QJLQHHULQJIRU 5HVLOLHQW6\VWHPV6(5(1(/1&66SULQJHU9HUODJSS
)D\ROODV&)DEUH-&3DODQTXH3&URQHO01DYDUUH' 'HOHULV<$VRIWZDUHLPSOHPHQWHGIDXOWWROHUDQFHDSSURDFKIRU FRQWURODQGGLVSOD\V\VWHPVLQDYLRQLFVWK,(((3DFLILF5LP,QW 6\PSRQ'HSHQGDEOH&RPSXWLQJ/1&6
)D\ROODV&0DUWLQH&3DODQTXH3'HOHULV<)DEUH-&
1DYDUUH'$QDSSURDFKIRUDVVHVVLQJWKHLPSDFWRIGHSHQGDELOLW\
RQXVDELOLW\DSSOLFDWLRQWRLQWHUDFWLYHFRFNSLWV(XURSHDQ 'HSHQGDEOH&RPSXWLQJ&RQISS
+DPRQ$3DODQTXH36LOYD-/'HOHULV<DQG%DUERQL(
)RUPDOGHVFULSWLRQRIPXOWLWRXFKLQWHUDFWLRQV6\PSRVLXPRQ (QJLQHHULQJLQWHUDFWLYHFRPSXWLQJV\VWHPV(,&6$&0
+DUULVRQ0 'L[$$VWDWHPRGHORIGLUHFWPDQLSXODWLRQ,Q0 +DUULVRQDQG+7KLPEOHE\HGV)RUPDO0HWKRGVLQ+XPDQ
&RPSXWHU,QWHUDFWLRQS&DPEULGJH8QLYHUVLW\3UHVV
+HFKW+DQG)LRUHQWLQR(5HOLDELOLW\DVVHVVPHQWRIVSDFHFUDIW HOHFWURQLFV,Q$QQXDO5HOLDELOLW\DQG0DLQWDLQDELOLW\6\PSSDJHV
±,(((
+ROOQDJHO(%DUULHUVDQG$FFLGHQW3UHYHQWLRQ$VKJDJH ,%0&RPPRQ8VHU$FFHVV$GYDQFHG,QWHUIDFH'HVLJQ
*XLGH,%06&
/DGU\-)1DYDUUH'3DODQTXH3)RUPDO'HVFULSWLRQ7HFKQLTXHV WR6XSSRUWWKH'HVLJQ&RQVWUXFWLRQDQG(YDOXDWLRQRI)XVLRQ (QJLQHVIRU685(6DIH8VDEOH5HOLDEOHDQG(YROYDEOH 0XOWLPRGDO,QWHUIDFHV,QW&RQIRQ0XOWLPRGDO,QWHUIDFHV,&0,
$&0S
/DSULH-&$UODW-%pRXQHV&.DQRXQ.'HILQLWLRQDQG
$QDO\VLVRIKDUGZDUHDQGVRIWZDUH)DXOW7ROHUDQW$UFKLWHFWXUHV ,(((FRPSXWHUYROQRSS
0DUWLQLH&3DODQTXH31DYDUUH':LQFNOHU0DQG3RXSDUW(
0RGHOEDVHGWUDLQLQJDQDSSURDFKVXSSRUWLQJRSHUDELOLW\RI FULWLFDOLQWHUDFWLYHV\VWHPV3URFRI$&0V\PSRQ(QJLQHHULQJ LQWHUDFWLYHFRPSXWLQJV\VWHPV(,&6$&0'/
0DVFL3$\RXE$&XU]RQ3+DUULVRQ0/HH,DQG 7KLPEOHE\+9HULILFDWLRQRILQWHUDFWLYHVRIWZDUHIRUPHGLFDO GHYLFHV3&$LQIXVLRQSXPSVDQG)'$UHJXODWLRQDVDQH[DPSOH
$&0V\PSRQ(QJLQHHULQJLQWHUDFWLYHFRPSXWLQJV\VWHPV(,&6
$&0'/
1DYDUUH'3DODQTXH3%DVQ\DW68VDELOLW\6HUYLFH
&RQWLQXDWLRQWKURXJK5HFRQILJXUDWLRQRI,QSXWDQG2XWSXW'HYLFHV LQ6DIHW\&ULWLFDO,QWHUDFWLYH6\VWHPVWK,QW&RQIRQ&RPSXWHU 6DIHW\5HOLDELOLW\DQG6HFXULW\6$)(&203/1&6 SS±
1DYDUUH'3DODQTXH3/DGU\-DQG%DUERQL(,&2V$
PRGHOEDVHGXVHULQWHUIDFHGHVFULSWLRQWHFKQLTXHGHGLFDWHGWR LQWHUDFWLYHV\VWHPVDGGUHVVLQJXVDELOLW\UHOLDELOLW\DQGVFDODELOLW\
$&072&+,9SS
1HHPD6%DSW\76KHWW\6 1RUGVWURP6$XWRQRPLF IDXOWPLWLJDWLRQLQHPEHGGHGV\VWHPV(QJ$SSO$UWLI,QWHOO 2FWREHU
1LFROHVFX%3HURQQDUG39HOD]FR5DQG6DYDULD<(IILFLHQF\
RI7UDQVLHQW%LW)OLSV'HWHFWLRQE\6RIWZDUH0HDQV$&RPSOHWH 6WXG\3URFRIWKHWK,(((,QW6\PSRQ'HIHFWDQG)DXOW
7ROHUDQFHLQ9/6,6\VWHPV')7,(((&RPSXWHU6RFLHW\
3DODQTXH3 %DVQ\DW67DVN3DWWHUQVIRU7DNLQJLQWRDFFRXQWLQ DQHIILFLHQWDQGV\VWHPDWLFZD\ERWKVWDQGDUGDQGHUURQHRXVXVHU EHKDYLRXUVWK,QWHUQDWLRQDO&RQIHUHQFHRQ+XPDQ(UURU6DIHW\
DQG6\VWHP'HYHORSPHQW6SULQJHU9HUODJSS 3DODQTXH3%DUERQL(0DUWLQLH&1DYDUUH'DQG:LQFNOHU0
$PRGHOEDVHGDSSURDFKIRUVXSSRUWLQJHQJLQHHULQJXVDELOLW\
HYDOXDWLRQRILQWHUDFWLRQWHFKQLTXHV3URFRI$&0V\PSRQ (QJLQHHULQJ,QWHUDFWLYH&RPSXWLQJV\VWHPV(,&6$&0'/
3DODQTXH3%DVWLGH5'RXUWH/&RQWH[WXDO+HOSIRU)UHHZLWK )RUPDO'LDORJXH'HVLJQ,QSURFHHGLQJVRIWKH)LIWK,QWHUQDWLRQDO
&RQIHUHQFHRQ+XPDQ&RPSXWHU,QWHUDFWLRQ+&,,QWHUQDWLRQDO 9ROXPH
3QXHOL$$SSOLFDWLRQVRI7HPSRUDO/RJLFWRWKH6SHFLILFDWLRQDQG 9HULILFDWLRQRI5HDFWLYH6\VWHPV$6XUYH\RI&XUUHQW7UHQGV /1&6QS6SULQJHU9HUODJ
3ROHW39DQGHUKDHJHQ)DQG:LHULQJD37KHRU\RIVDIHW\
UHODWHGYLRODWLRQRIV\VWHPEDUULHUV&RJQLWLRQ7HFKQRORJ\
:RUN
5DMNRPDU$DQG%ODQGIRUG$$GLVWULEXWHGFRJQLWLRQ PRGHOIRUDQDO\VLQJLQWHUUXSWLRQUHVXPSWLRQGXULQJLQIXVLRQ DGPLQLVWUDWLRQ3URFRIWK(XURSHDQ&RQIRQ&RJQLWLYH (UJRQRPLFV(&&($&0'/
5HDVRQ-+XPDQ(UURU&DPEULGJH8QLYHUVLW\3UHVVHWVD WUDG/¶HUUHXUKXPDLQH38)/HWUDYDLOKXPDLQ
5HLWHU0.DQG6WXEEOHELQH6*$XWKHQWLFDWLRQPHWULFDQDO\VLV DQGGHVLJQ$&07UDQV,QI6\VW6HFXU0D\
57&$(852&$(6RIWZDUH&RQVLGHUDWLRQVLQ$LUERUQH6\VWHPV DQG(TXLSPHQW&HUWLILFDWLRQ'2%('%'HFHPEHU
6$($6%6$($UFKLWHFWXUH$QDO\VLVDQG'HVLJQ/DQJXDJH
$$'/,QWHUDQFWLRQDO6RFLHW\RI$XWRPRWLYH(QJLQHHUV :DUUHQGDOH3$86$6HSWHPEHU
6FKURHGHU%(3LQKHLURDQG:':HEHU'5$0HUURUVLQWKH ZLOGDODUJHVFDOHILHOGVWXG\,Q$&06,*0(75,&6SDJHV±
6HDWWOH:$-XQH
7DQNHX&KRLWDW$1DYDUUH'3DODQTXH3'HOHULV<)DEUH -&)D\ROODV&6HOIFKHFNLQJFRPSRQHQWVIRUGHSHQGDEOH LQWHUDFWLYHFRFNSLWVXVLQJIRUPDOGHVFULSWLRQWHFKQLTXHV,Q3URFRI WK,(((3DFLILF5LP,QW6\PSRQ'HSHQGDEOH&RPSXWLQJ 35'&S
7DQNHX&KRLWDW$)DEUH-&3DODQTXH31DYDUUH''HOHULV<
6HOI&KHFNLQJ&RPSRQHQWVIRU'HSHQGDEOH,QWHUDFWLYH&RFNSLWV :RUNRQ'HSHQGDEOH&RPSXWLQJ(:'&$&0'/S 7KLPEOHE\+*LPEOHWW$'HSHQGDEOHNH\HGGDWDHQWU\IRU
LQWHUDFWLYHV\VWHPV3URFHHGLQJVRIWKHWK,QW:RUNVKRSRQ )RUPDO0HWKRGVIRU,QWHUDFWLYH6\VWHPV)0,6
7UDYHUVH3/DFD]H,DQG6RX\ULV-$LUEXVIO\E\ZLUHDWRWDO DSSURDFKWRGHSHQGDELOLW\3URF,),3:RUOG&RPSXWHU&RQJUHVV SS
:HJQHU3:K\LQWHUDFWLRQLVPRUHSRZHUIXOWKDQ DOJRULWKPV&RPPXQ$&00D\
:ULJKW13DWULFN$6DQG%LGGOH5'R\RXVHH\RXU SDVVZRUG"DSSO\LQJUHFRJQLWLRQWRWH[WXDOSDVVZRUGV3URFRI 6\PSRQ8VDEOH3ULYDF\DQG6HFXULW\62836$&0'/
SDJHV
<DX665&&KHXQJ'HVLJQRIVHOI&KHFNLQJ6RIWZDUHSURF ,QW&RQIRQ5HOLDEOH6RIWZDUH/RV$QJHOHV&$86$,(((
&RPSXWHU6RFLHW\3UHVVSS
<HK<&%RE7ULSOH7ULSOH5HGXQGDQW3ULPDU\)OLJKW
&RPSXWHU,((($HURVSDFH$SSOLFDWLRQV&RQISS
Session 3 : Systèmes critiques IHM'14, Villeneuve d'Ascq, France
