Nos travaux se situent au croisement de trois domaines : la sûreté de fonctionnement, l'analysefonctionnelle et l'ingénierie des modèles. Dans l'objectif d'assister les analyses préliminaires desrisques, nous avons proposé d'exploiter les modèles issus de l'analyse fonctionnelle de l'avion. Cesmodèles décrivent les dépendances entre les fonctions qui doivent être réalisées durant une phasede vol. Pour exploiter ces modèles, nous avons introduit la notion d'efficacité qui mesure ledegré de contribution d'une fonction à la réalisation nominale d'une phase de vol. Cette notionest utile pour les analyses de risques car elle permet de formaliser divers cas dedysfonctionnements des fonctions et pour évaluer le niveau de dégradation d'une phase de vol encas de dysfonctionnement d'une ou plusieurs fonctions. Nous avons proposé d'annoter les modèlesissus de l'analyse fonctionnelle avec des informations relatives à l'efficacité des fonctions et à leursdysfonctionnements possibles. En suivant les principes de la transformation de modèles, nousavons étudié les moyens de produire le plus automatiquement possible des modèles utiles auxanalyses de risques à partir des modèles annotés. Les modèles produits sont décrits avec lelangage AltaRica, ils peuvent être analysés avec les outils associés à ce langage afin d'évaluerl'effet du dysfonctionnement de fonctions de l'avion ou de rechercher les combinaisons dedysfonctionnements les plus critiques. L'approche proposée a été appliquée pour analyser lesrisques associés aux fonctions utiles lors du décollage d'un avion. / Our work links three domains: safety, functional analysis and model based engineering. In orderto assist preliminary risk analysis, we have proposed to exploit models developed for functionalanalysis. These models describe dependencies between functions that have to be performed duringa flight phase. To exploit these models, we have introduced the notion of efficiency thatmeasures the degree of contribution of a function to the nominal realisation of a flight phase.This notion is useful for risk analysis because it enables the formalisation of various cases offunction failures and the evaluation of the level of degradation of a flight phase in case offunction failures. We have proposed to annotate functional analysis models with informationrelated with function efficiency and potential function failures. Following the principles of modeltransformation, we have studied the means to produce as automatically as possible models thatcould be used to support risk analysis starting from annotated models. Produced models aredescribed with the AltaRica language, they can be analysed with the tools associated with thislanguage in order to evaluate the effect of function failures or to search for the most criticalcombinations of failures. The approach was applied in order to analyse the risks associated withthe functions used during an aircraft take-off.

Medidas para gerenciamento de saúde e segurança em laboratórios são de extrema importância em laboratórios químicos. As pessoas que realizam qualquer atividade em um ambiente de laboratório estão expostas a diversos perigos e, consequentemente, existe o risco de ocorrência de eventos adversos para a saúde e segurança. Este trabalho foi desenvolvido em um laboratório químico de uma universidade federal tem como principal objetivo o aperfeiçoamento de uma framework que permite a realização de uma análise sistemática qualitativa e quantitativa das folgas presentes em um sistema sócio-técnico complexo. Ferramentas da Engenharia de Resiliência foram utilizadas para estudar o laboratório, o qual foi considerado como um sistema sócio-técnico complexo. Uma das características de um sistema resiliente é a capacidade de lidar com a variabilidade, o que pode ser obtido por meio de recursos de folgas (slack) no sistema. O uso da framework permitiu obter dados importantes para a análise do sistema e sugestões de melhorias. Os aperfeiçoamentos propostos na framework mostraram-se eficazes, principalmente na quantificação das folgas e variabilidades, em função da utilização do método AHP (Analytical Hierarchy Process) para a análise de dados. O método AHP tornou possível substituir o uso de questionários para toda a equipe por uma avaliação direcionada a especialistas. Ao utilizar o AHP, os dados podem ser adquiridos com maior rapidez. Outro ganho obtido com o uso do método AHP foi a possibilidade de redução de uma etapa da framework, tornando-a mais concisa. / Measures for health and safety management are of paramount importance in chemical laboratories. People who perform any activity in a laboratory environment are exposed to a variety of hazards and consequently there is a risk of adverse health and safety events. This work was developed in a chemical laboratory of a federal university, and has as main objective the improvement of a framework that allows the accomplishment of a systematic qualitative and quantitative analysis of the slack present in a complex socio-technical system. Tools of Resilience Engineering were used for studying a chemical laboratory, which was considered as a complex socio-technical system. One of the characteristics of a resilient system is the ability to deal with variability, which can be obtained through slack resources in the system. This work was developed in a chemical laboratory of a federal university and consists in the improvement of a framework that allows the accomplishment of a systematic qualitative and quantitative analysis of the slack present in the system. The use of the framework allowed to obtain data important for the analysis of the system and suggestions for improvements. The improvements proposed in the framework proved to be effective, especially in the quantification of slack and variability, as a function of the AHP (Analytical Hierarchy Process) method for data collection. The AHP method made it possible to replace the use of questionnaires for the entire team by an expert team assessment. By using AHP, data can be acquired more quickly. Another gain obtained with the use of the AHP method was the possibility of reducing one stage of the framework, making it more concise.

付記する学位プログラム名: デザイン学大学院連携プログラム / 京都大学 / 0048 / 新制・課程博士 / 博士(工学) / 甲第22772号 / 工博第4771号 / 新制||工||1746(附属図書館) / 京都大学大学院工学研究科機械理工学専攻 / (主査)教授 椹木 哲夫, 教授 松原 厚, 教授 小森 雅晴 / 学位規則第4条第1項該当 / Doctor of Philosophy (Engineering) / Kyoto University / DFAM

Disruptions severely undermine the reliability of railway systems. Consequently, a lot of investments are made to improve disruption management. Much has already been written about disruption management, often with the purpose of supporting operators in their decision making. However, to the best of our knowledge, this literature doesn't consider the structural differences of disruption management in different countries. An overview of the various ways in which disruptions are solved and conditions under which that happens could help rail infrastructure managers and train operating companies to reconsider the ways in which they operate. This paper takes stock of the similarities and differences in how disruptions are managed in Austria, Belgium, Denmark, Germany and the Netherlands. Of importance is not only how these systems work on paper, but above all what happens in practice, i.e. the habits and routines that operators have developed for solving disruptions.

The level of autonomation and the number situations which an autonomous vehicle can handle continuously increases. However, even fully autonomous vehicles will need human support, especially when system failures occur. Remote operations enables vehicles to operate autonomously when possible and keeps the human in the loop to assist when needed by allocating them to a remote operating center (ROC). It is a new field within autonomous trucks and little research has thus been conducted on the topic. By taking an approach from the fields of aviation and maritime, where remote operations has been researched for longer, the study aims to transfer knowledge to road freight and to enable remote operations at a management mode. The focus of the study is thus to investigate which information is important for the remote operator (RO) when manual procedures are automated, and to define recommendations for how a ROC could be designed from a human-automation teamwork and situational awareness perspective. The results of the conducted interviews find that the RO first and foremost needs information regarding failures of the automation, including how the failures could be solved. However, it also confirms previous research emphasizing interactive interfaces to avoid passive monitoring, as that is likely to cause an out-of-the-loop problem. Furthermore, recommendations which could be defined regarding the design of a ROC include incorporating both verbal and digital communicational abilities, and the possibility to collaborate, both internally and externally. Lastly, the results show an importance to differentiate between different modes of remote operations in the ROC to remain clear of the responsible actor and avoiding automation surprise.

The delegating of thought, memory and action outside of the human body, inseparable from the process of individuation and identity formation, and the following implications for music establish an underlying theme of this text. It is a reflection on the process of "supplementation," of prosthetization or exteriorization in the recent and contemporary milieu of music making, in which nothing is any longer immediately at hand, where everything is found mediated and instrumentalized, technicized, unbalanced.

Este trabalho identifica o Código de Ética e Prática Profissional da engenharia de software como o conjunto de práticas para consideração de fatores humanos na engenharia de software. A seguir, estende o Kernel da especificação Essence, e o utiliza para conduzir a aplicação desse conjunto de práticas. A prova de conceito indica que o conjunto de práticas identificadas não garante a consideração de fatores humanos na engenharia de software. Considerar a ética nas interações existentes na empreitada de engenharia de software não é um simples caso de utilização de checklists como forma de verificar o que deve ser feito para certificar que algo foi realizado. Considerar a ética é mais do que isso. É necessário que todas as pessoas tenham consciência da importância da ética, do respeito de um ao outro e à sociedade. / This text identifies the Software Engineering Code of Ethics and Professional Practice as a set of practices to consider human factors in software engineering. Afterwards, it extends the Kernel of the Essence specification, and applies it to steer the use of this set of practices. The proof of concept indicates that the identified set of practices does not ensure the consideration of human factors in software engineering. Considering ethics, in the interactions that are present in software engineering endeavor, is not a simple case of using checklists to ascertain what must be done to ensure that something was carried out. Taking ethics into consideration is more than that. It is imperative that all the people should become aware of how important ethics is, and so is the respect for each other and for the society. Keywords: This text identifies the Software Engineering Code of Ethics and Professional Practice as a set of practices to consider human factors in software engineering. Afterwards, it extends the Kernel of the Essence specification, and applies it to steer the use of this set of practices. The proof of concept indicates that the identified set of practices does not ensure the consideration of human factors in software engineering. Considering ethics, in the interactions that are present in software engineering endeavor, is not a simple case of using checklists to ascertain what must be done to ensure that something was carried out. Taking ethics into consideration is more than that. It is imperative that all the people should become aware of how important ethics is, and so is the respect for each other and for the society.

Erfahrungsmanagement (EM) ist eine Spezialform des Wissensmanagements, die sich mit aufgabenbezogenem Wissen beschäftigt. Diese Arbeit entwickelt ein Rahmenwerk für Assistenzsysteme, die Menschen bei EM-Aufgaben unterstützen. Es untersucht nicht nur technische Fragen (Erfahrungswissen sammeln, strukturieren, speichern und wiederverwenden) sondern auch organisatorische (Erfahrungswissen evaluieren und pflegen) und psychosoziale Aspekte (ein EM-System integrieren, Barrieren vermeiden, den Systemeinsatz bewerten). Fallbasierte Anwendungsbeispiele für industrielle und experimentelle Szenarien zeigen, welche Prozesse wo unterstützt oder gar teilautomatisiert werden können. Sie dienen der experimentellen Evaluierug der Fragen, die ich zu Beginn jedes Anwendungskapitels formuliert habe. / Experience Management (EM) is a special form of Knowledge Management that deals with task-based knowledge. This thesis provides a framework for assistant systems that support human beings in EM tasks. It deals not only with technical issues (how to collect, structure, store, retrieve, and reuse experiential knowledge), but als with organizational issues (how to evaluate and maintain it) and psychosocial questions (how to integrate an EM system, how to avoid barriers, how to evaluate the success of the whole system). Case-based sample applications from both, industrial and experimental scenarios, show to what extend the particular EM processes can be supported or which sub-processes can even be automated. By means of experiments with these implemented samples, we evaluate the topics that are discussed at the beginning of each application chapter.

Este trabalho identifica o Código de Ética e Prática Profissional da engenharia de software como o conjunto de práticas para consideração de fatores humanos na engenharia de software. A seguir, estende o Kernel da especificação Essence, e o utiliza para conduzir a aplicação desse conjunto de práticas. A prova de conceito indica que o conjunto de práticas identificadas não garante a consideração de fatores humanos na engenharia de software. Considerar a ética nas interações existentes na empreitada de engenharia de software não é um simples caso de utilização de checklists como forma de verificar o que deve ser feito para certificar que algo foi realizado. Considerar a ética é mais do que isso. É necessário que todas as pessoas tenham consciência da importância da ética, do respeito de um ao outro e à sociedade. / This text identifies the Software Engineering Code of Ethics and Professional Practice as a set of practices to consider human factors in software engineering. Afterwards, it extends the Kernel of the Essence specification, and applies it to steer the use of this set of practices. The proof of concept indicates that the identified set of practices does not ensure the consideration of human factors in software engineering. Considering ethics, in the interactions that are present in software engineering endeavor, is not a simple case of using checklists to ascertain what must be done to ensure that something was carried out. Taking ethics into consideration is more than that. It is imperative that all the people should become aware of how important ethics is, and so is the respect for each other and for the society. Keywords: This text identifies the Software Engineering Code of Ethics and Professional Practice as a set of practices to consider human factors in software engineering. Afterwards, it extends the Kernel of the Essence specification, and applies it to steer the use of this set of practices. The proof of concept indicates that the identified set of practices does not ensure the consideration of human factors in software engineering. Considering ethics, in the interactions that are present in software engineering endeavor, is not a simple case of using checklists to ascertain what must be done to ensure that something was carried out. Taking ethics into consideration is more than that. It is imperative that all the people should become aware of how important ethics is, and so is the respect for each other and for the society.

Sveriges ytstridskrafter hade länge en förmåga att hävda sig mot fiendens stridskrafter ute till havs på 1950- och 60-talen. Nedrustningsprogrammet av försvaret på 1960-talet innebar att teknikutvecklingen bromsade upp och flottans större fartyg kryssare, fregatter och jagare skulle bytas ut till en lätt flotta med små snabba enheter. Detta resulterade i att flottans taktik anpassades till ett tillbakadraget uppträdande längs med kustbandet och inom skärgården. Svenska officerare bevittnade på när Sovjetunionen rustade upp och utvecklade nya vapen och fartyg med robotar av högsta kvalité i Östersjöområdet. Detta hot medförde att officerarna i flottan ville satsa på ett långräckviddigt vapen för att bli mer jämbördig mot fiendens styrka ute till havs. Resultatet blev en svenskutvecklad sjömålsrobot, Robotsystem 15 (RBS 15), som infördes i marinen i början av 1980-talet. RBS 15:s höga kvalité och förmåga medförde en satsning på utvecklingen av flera tekniska kringutrustningar som behövdes för att fulländat utföra en sjörobotstrid. Studiens syfte är att studera RBS 15:s införande i den svenska flottan och vilken påverkan detta hade på taktiken. Fallet RBS 15 prövas utifrån hypoteser grundade från teorier om hur tekniken påverkar taktiken. Tekniken påvisas påverka taktiken via de hypoteser som bestyrks i studien. Slutsatser från studien är att RBS 15 påverkade taktiken genom att den: möjliggjorde ett offensivt handlande, initierade utvecklingen av nya tekniska resurser och var den avgörande faktorn för att den marina organisationen medvetet ville utveckla ytstridstaktiken. Den nya förmågan innebar en markant skillnad i det svenska taktiska uppträdandet. Flottans ytstridskrafter tillämpade ett mer framskjutet uppträdande och kunde bestrida fiendens kontroll till sjöss. / During the 1950’s and 1960’sSweden’s surface warships had an ability to match enemy forces at sea. The disarmament of the Swedish Defense in the 1960’s implied a retardation of technique development and major warships like cruisers, frigates and destroyers were planned to be changed to a lighter fleet consisting of small, fast units. The result of this change was that the Navy tactics were adjusted to a retired behavior. Swedish officers witnessed the rearmament of the Soviet Union that developed new weapons and vessels with high class long-range anti-ship missiles in theBaltic Searegion. The consequence of this threat was that the naval officers wanted to develop a long-range weapon to equal enemy forces at sea. The result was a Swedish innovation of an anti-ship missile system (RBS 15) which was introduced in the Swedish Navy in the beginning of the 1980’s. RBS 15’s high quality and ability also implied a development of several peripheral technical equipments that were necessary for perfection in naval missile combat. The aim of the current study is to clarify whether or not the introduction of RBS 15 into the Swedish Navy was affecting tactics. The case RBS 15 is tested by hypotheses outgoing from theories how technologies affect tactics. It is demonstrated that the technologies affect tactics from the hypotheses that are confirmed in the study. Conclusions from the study are that the RBS 15 affected tactics since it: Facilitated to take offensive action, initiated development of new technical resources and was the crucial factor implementing that the naval organization decided to develop the tactics for the new Swedish surface warships. This new capability implicated a marked difference in the Swedish tactical behavior at sea. Naval warships were applying a more offensive tactic and had the ability to fight the enemy’s control of the sea.