Many automotive systems are real-time systems, which means that not only correct operationsbut also appropriate timings are their main requirements. Considering the in uence that end-to-end delay might have on the performance of the systems, the calculation of it is of necessity.Abundant techniques have actually been proposed, and some of them have already been applied intopractical systems. In spite of this, some further work still needs to be done. The target of thisthesis is to evaluate and compare two end-to-end timing analysis methods from dierent aspectssuch as data age, consumption time, and then decide which method is a prior choice for end-to-end timing analysis. The experiments can be divided into three blocks, system generation andend-to-end delay calculation by two methods respectively. The experiments focus on two kinds ofperformance parameters, data age and the consumption time that these two methods cost duringtheir execution. By changing the system generating parameters like task number and periods, thechanges of performances of the two methods are analyzed. The performances of the two dierentmethods are also compared when they are applied into the same automotive systems. According tothe results of the experiments, the second method can calculate more accurate data age and consumeless time than the rst method does.

L’importance des systèmes temps-réels embarqués dans les sociétés industrialisées modernes en font un terrain d’application privilégié pour les méthodes formelles. La prépondérance des contraintes temporelles dans les spécifications de ces systèmes motive la mise au point de solutions spécifiques. Cette thèse s’intéresse à une classe de systèmes temps-réels incluant ceux développés avec la chaîne d’outils OASIS, développée au CEA LIST. Nos travaux portent sur la notion de délai de bout-en-bout, que nous proposons de modéliser comme une contrainte temporelle concernant l’influence du flot d’informations des entrées sur celui des sorties. Afin de répondre à la complexité croissante des systèmes temps-réels, nous étudions l’applicabilité de cette notion nouvelle au développement incrémental par raffinement et par composition. Le raffinement est abordé sous l’angle de la conservation de propriétés garantes de la correction du système au cours du processus de développement. Nous délimitons les conditions nécessaires et suffisantes à la conservation du délai de bout-en-bout lors d’un tel processus. De même, nous donnons des conditions suffisantes pour permettre le calcul du délai de bout-en-bout de manière compositionnelle. Combinés, ces résultats permettent d’établir un formalisme permettant la preuve du délai de bout-en-bout lors d’une démarche de développement incrémentale. / Real-time embedded systems are at the core of modern industrialized societies. They are a privileged target for the application of formal methods. The importance of real-time constraints in the specification of these systems requires the design of ad-hoc solutions. This work considers a class of real-time systems including those developed using OASIS, a tool-chain targeting hard real-time embedded systems developed at CEA LIST. We study the notion of end-to-end delay, which we propose to model as a constraint bearing directly on the influence of the input information flow over the output information flow . In order to cope with the growing complexity of real-time embedded systems, we study the possibility to apply this new notion of delay to the incremental development of such systems, by using both stepwise refinement and composition operators. We define the necessary and sufficient conditions to the preservation of the end-to-end delay by stepwise refinement. Similarly, we give sufficient conditions to compute the end-to-end delay in a compositional fashion. Together, these results permit to establish a formalism allowing to prove end-to-end delay properties in stepwise development methodologies.

Assembling components in a production line could potentially be a tedious task, if performed stepwise by the book. However, an employee who is assembling many different products may not know all the steps by heart. As such they will be reliant on an instruction manual. However, an instruction manual must be carried around and, while assembling components, placed in the assembler's line of sight. Instead new technology could make the process more efficient. Google Glass places a display slightly above the user's line of sight and can be controlled via voice commands, and as such solves many of the problems associated with carrying around instruction manuals. This dissertation is an evaluation of Google Glass and describes the design, implementation and evaluation of an product assembly application for both Google Glass and smartphones. The smartphone version was implemented in order to provide a reference point as well as means of comparison with the Google Glass application. The test application used in the study was to read a QR code and download a set of assembly instructions. Testing was carried out on the different steps of the application, from when the QR code had been scanned until the information was displayed to the user. The results show that Google Glass is almost always slower, in all steps, compared to the smartphone equivalents. The conclusion is that Google must upgrade and improve on Google Glass and in particular the hardware. Google Glass overheats easily and the camera is of inferior quality. Google's implementation restrictions also limits what developers might be able to do with the device. However, Google Glass is easy to use and has potential to become a more useful device in the future. / Montering av komponenter i en produktionslinje kan potentiellt vara en tradig och mekanisk uppgift, om det utförs stegvis enligt instruktioner. En anställd som bygger många olika produkter kan dock eventuellt inte samtliga steg utantill, utan blir beroende av en bruksanvisning. En bruksanvisning måste dock bäras runt och, vid montering av komponenter, lämnad i monterarens siktlinje. Ny teknik skulle kunna göra processen mer effektiv. Google Glass heter den enhet som placerar en display något över användarens siktlinje och kan styras via röstkommandon, och löser således många av de problem som är förknippade med att bära runt en bruksanvisning. Denna uppsats är en utvärdering av Google Glass och beskriver utformning, implementering och utvärdering av en produktsammansättningsapplikation för både Google Glass och smarttelefoner. Smarttelefon-versionen implementerades i syfte att ge en referenspunkt samt medel för jämförelse med Google Glass applikationen. Test-applikationen som används i studien kan skanna en QR-kod och ladda ner en uppsättning monteringsanvisningar. Testning utfördes på de olika stegen i applikationen, från när QR-koden har skannats tills informationen visas för användaren. Resultaten visar att Google Glass nästan alltid är långsammare, i alla steg, jämfört med smarttelefon-ekvivalenter. Slutsatsen är att Google måste uppgradera och förbättra Google Glass, och särskilt hårdvaran. Google Glass överhettas lätt och kameran är av sämre kvalitet. Googles implementationsbegränsningar begränsar också vad utvecklarna skulle kunna göra med enheten. Google Glass är dock lätt att använda och har potential att bli en mer användbar enhet i framtiden.

Les systèmes avioniques sont soumis à de fortes contraintes de criticité et de temps réel. Pour certifier de telssystèmes, il est nécessaire de calculer une borne supérieure du délai de bout en bout de chaque message transmisdans le réseau. Cette thèse se focalise principalement sur l'étude des systèmes avioniques civils utilisant le réseauAFDX (Avionics Full Duplex Switched Ethernet), qui a été par exemple introduit dans l'architecture de l'AirbusA380.Dans ce contexte, nous nous sommes focalisés sur le calcul des délais de bout en bout des messages circulant dansle réseau. Parmi les méthodes existantes, nous nous sommes intéressés à la méthode des trajectoires proposéedans la littérature. Cette méthode permet de calculer des bornes supérieures du temps de traversée des messagesdans les noeuds d'un réseau AFDX. Notre première contribution a été de démontrer que cette méthode peutcalculer des délais bout en bout optimistes. Cette méthode ne peut donc pas sans modification être utilisée pourvalider les délais de bout en bout des messages transmis dans l'AFDX. Malgré l'identification des problèmes ausein de la méthode des trajectoires, il ne nous apparaît pas simple d'apporter une correction aux problèmes misen évidence. Dans un deuxième temps, nous avons proposé une nouvelle approche pour calculer ces délais quirepose sur la caractérisation pire cas du trafic que peut rencontrer un paquet, sur chaque noeud. / Avionics systems are subject to hard real-time constrainst and criticality. To certify these systems, it is neccessaryto compute the upper bound of the end-to-end delay of each message transmitted in the network. In this thesis,we mainly focus on civils avionics systems that use AFDX (Avionics Full Duplex Switched Ethernet) networkand that has been introduced in the Airbus A380 architecture.In this context, we focus in the computation of the end-to-end delays of messages crossing the network. Amongthe existing methods, we interested in the trajectory approach precedently proposed by researchers. The goal ofthis method is to compute end-to-end delay upper bounds of messages in the nodes of AFDX network. As a firstcontribution, we prove that the end-to-end delays computed by this method can be optimistic. This means thatwithout any modification, it cannot be used to validate transmission end-to-end delays for the AFDX. Despitethe identification of these optimistic problems in the trajectory approach, a solution to remove them seems notto be simple from our point of view. Hence, as a second contribution, we propose a new approach to computethese delays based on the characterization of the worst-case traffic encountered by a packet on each crossednode.

Pour survivre sur le long terme, les entreprises dépendent des innovations discontinues. Ce type d’innovation est nourri dès le début du processus d’innovation (fuzzy front-end) par la créativité collective des employés répartis sur les entités internationales de l’entreprise. Le management se voit confronté à un défi important : comment faire innover des employés qui ne sont pas physiquement localisés au même endroit ? La présente recherche propose un levier novateur pour substituer l’espace physique entre les collaborateurs lors du fuzzy front-end. Le ProxIS-Télescope est une solution compacte pour les entreprises afin de rapprocher leurs salariés dans l’optique de générer des combinaisons inattendues de leurs connaissances. De plus, cette recherche montre que le véritable défi des entreprises n’est pas seulement l’extension internationale au niveau du fuzzy front-end, mais également le management d’une équipe croissante en termes de masse salariale. L’extension dynamique du ProxIS-modèle permet de l’adapter à tout type d’entreprise en fonction du nombre de personnes ainsi que du degré d’internationalisation de l’entreprise. / To assure their long term survival, organizations depend on discontinuous innovations. This type of innovation is nurtured by collective creativity between employees of an organization’s subsidiaries starting from the early phase of the innovation process (fuzzy front-end). Management faces an important challenge here: how to innovate if employees are not physically located at the same place? This research proposes an innovative approach to compensate geographic space at the fuzzy front-end. The resulting ProxIS-Telescope represents a compact solution for organizations in order to enhance the collaboration between employees independently of their location and to create unexpected combinations of knowledge. Furthermore, this research reveals that a crucial challenge for companies is not only the international expansion during the fuzzy front-end, but also the management of a growing workforce. The dynamic extension of the ProxIS-model proposes thus appropriate solutions for each organizational type depending on the number of actors and the international dimension during the fuzzy front-end.

Many automotive systems are real-time systems, which means that not only correct operationsbut also appropriate timings are their main requirements. Considering the in uence that end-to-end delay might have on the performance of the systems, the calculation of it is of necessity.Abundant techniques have actually been proposed, and some of them have already been applied intopractical systems. In spite of this, some further work still needs to be done. The target of thisthesis is to evaluate and compare two end-to-end timing analysis methods from dierent aspectssuch as data age, consumption time, and then decide which method is a prior choice for end-to-end timing analysis. The experiments can be divided into three blocks, system generation andend-to-end delay calculation by two methods respectively. The experiments focus on two kinds ofperformance parameters, data age and the consumption time that these two methods cost duringtheir execution. By changing the system generating parameters like task number and periods, thechanges of performances of the two methods are analyzed. The performances of the two dierentmethods are also compared when they are applied into the same automotive systems. According tothe results of the experiments, the second method can calculate more accurate data age and consumeless time than the rst method does.

The aim of the thesis is to create a comprehensive material that covers the basic knowledge of theory and practices necessary to understand the whole complexity of the Responsive Web Design (RWD). This thesis first focuses on the RWD origin and its two approaches. Furthermore, the work deals with technical solutions of the RWD and technologies that enabled its creation or were found useful for it. This part also mentions tools which simplify the work with given technologies. The next part is devoted to Responsive CSS Frameworks as being the base for creating responsive websites and shows layout examples where two different approaches and frameworks were used. At last an issue of testing responsive websites is discussed.

Bakgrund: Cancer kan uppstå i diverse delar av kroppen. Cancervården använder sig av två faser. Den kurativa fasen där målet är att patienten ska bli botad samt den palliativa fasen där vårdinriktningen är palliativ och sjukdomen inte längre går att bota. Patienter med cancer kan leva flera år i en tidig palliativ fas där behandlings målet är att fördröja sjukdomsförloppet. Därefter träder den sena palliativa fasen in där fokusering på välbefinnande och smärtlindring är huvudändamål. Det är i skiftet mellan de olika faserna som brytpunktssamtalet främst äger rum. Sjuksköterskor kan ha en betydande roll i processen kring brytpunktssamtal. Syfte: Syftet med denna litteraturstudie var att undersöka och sammanställa sjuksköterskors upplevelser och erfarenheter av brytpunktsamtal hos patienter med cancer Metod: En litteraturstudie med systematisk översikt. Tio artiklar med kvalitativ ansats kvalitégranskades och sammanställdes genom innehållsanalys. Resultat: Resultatet identifierades till tre huvudteman; Upplevelser och erfarenheter kring samverkan med patient och läkare, relationer i anknytning till brytpunktssamtal och sjuksköterskans upplevelser av hopp. Sjuksköterskor upplevde att samverkan med läkare samt tydlig kommunikation med patient var av vikt. Relationen till patienter och närstående var en faktor som sjuksköterskor upplevde fanns med i brytpunktssamtalet. Hopp var en känsla som identifierades hos sjuksköterskor under brytpunktssamtal. Konklusion: Sjuksköterskor kan i samband med brytpunktssamtal med både för och nackdelar hamna i kläm mellan patienter och läkare. Sjuksköterskor är i behov av tydlig information i anknytning till brytpunktssamtal för att kunna bistå patienter och samverka inom det multidisciplinära teamet runt patienten. Sjuksköterskor oroar sig över att beröva hopp från patienter genom att diskutera och besvara frågor kring sämre prognoser. / Background: Cancer can occur in different areas of the human body. Cancer care consists of two different phases. The curative phase when the goal is to cure the patient and the palliative phase when cure is no longer possible and the goal changes to comfort care. Patients with cancer can live for several years in the early stages of palliative care when the goal is to prolong the patient’s life and slow down the progression of the disease. When prolonging life is no longer possible the late palliative phase sets in and the goal of care is to make the patient comfortable and to manage symptoms of the disease. It is in between these phases the discussion called breaking point takes place. Nurses have a meaningful role in the process around breaking point. Purpose: The purpose of this study is to explore and compile nurses’ experiences of discussion around breaking point with patients with cancer. Method: A systematic literature review. Ten articles with qualitative approach were graded and compiled through content analysis. Result: The results was identified into three main themes; Nurses experience of cooperation between physicians and patients, relationship within breaking point and the nurses experience of hope. Nurses experienced that cooperation with doctors and evident communication with patients was important. The relationship with patients and relatives was an element that was present during breaking point conversation according to nurses. Hope was an emotion that was identified among nurses during breaking point conversations. Conclusion: Nurses can in relation to the discussion around breaking point get stuck in the middle between patients and the physicians which has both advantages and disadvantages. Nurses can through their work with the patient establish a relationship that involves confidence between the patient and the nurse. This relationship can benefit everyone involved in the breaking point discussion. Nurses are concerned about depriving their patients of hope when talking about their worsening prognosis.

京都大学 / 0048 / 新制・課程博士 / 博士(情報学) / 甲第22799号 / 情博第729号 / 新制||情||125(附属図書館) / 京都大学大学院情報学研究科知能情報学専攻 / (主査)教授 河原 達也, 教授 黒橋 禎夫, 教授 森 信介 / 学位規則第4条第1項該当 / Doctor of Informatics / Kyoto University / DFAM

Participants from recent secure email user studies have expressed a need to use secure email tools only a few times a year. At the same time, Internet users are expressing concerns over the permanence of personal information on the Internet. Support for short-lived keys has the potential to address both of these problems. However, the short-lived keys usability and security space is underdeveloped and unexplored. In this thesis, we present an exploration of the short-lived keys usability and security design space. We implement both a short-lived keys and a long-term keys secure email prototype. With these two prototypes, we conduct a within-subjects user study. Results from our study show that participants believe the short-lived keys prototype is more secure and more trusted. Participants also provide feedback on what they want in a system supporting short-lived keys. They also discuss how concerned they are about the permanence of their information on the Internet and on their devices.