<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Requirements engineering for sociotechnical systems: Case study of an Airline Operations Control Center</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Nico Zimmer</string-name>
          <email>nico.zimmer@boeing.com</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Kuldar Taveter</string-name>
          <email>kuldar.taveter@ut.ee</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Institute of Computer Science, University of Tartu</institution>
          ,
          <addr-line>Tartu</addr-line>
          ,
          <country country="EE">Estonia</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>The Boeing Company Inc.</institution>
          ,
          <addr-line>Neu-Isenburg</addr-line>
          ,
          <country country="DE">Germany</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>-This paper is concerned with requirements engineering for sociotechnical systems. The paper describes and analyzes the requirements for the sociotechnical system of the Airline Operations Control Center (AOCC). This is done for studying the social part of the AOCC by means of agent-based simulation of AOCC employees with different personality profiles. The requirements are mapped to the viewpoint framework for holistic requirements elicitation and representation at different abstraction layers and from complementary perspectives. The design of an agent-based simulation system based on the requirements is briefly described. Finally, the benefits of this kind of requirements engineering approach are brought out and the directions for future work are set.</p>
      </abstract>
      <kwd-group>
        <kwd>sociotechnical system</kwd>
        <kwd>requirements engineering</kwd>
        <kwd>model</kwd>
        <kwd>abstraction layer</kwd>
        <kwd>perspective</kwd>
        <kwd>viewpoint</kwd>
        <kwd>agent-based simulation</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>I. INTRODUCTION</title>
      <p>
        This paper is concerned with studying complex
sociotechnical systems. A sociotechnical system consists of
tasks, people, organization, and technology [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. In other
words, sociotechnical systems comprise humans, social,
organizational, and technical factors [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ]. Sociotechnical
system (STS) is defined as a software intensive system that
has defined operational processes followed by human
operators and which operates within an organization and
comprises both social and technical aspects [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ]. STS consists
of humans, software, and hardware [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ].
      </p>
    </sec>
    <sec id="sec-2">
      <title>The aviation domain contains many good examples of</title>
      <p>sociotechnical systems. First, modern aircraft should be
viewed as STS [4]. In our previous work [5-6], we have
studied airports as STS. This paper studies an Airline</p>
    </sec>
    <sec id="sec-3">
      <title>Operations Control Center (AOCC) as STS.</title>
      <p>
        The research literature indicates that the agent-oriented
paradigm is a natural metaphor for studying complex STS
because it enables to elicit and represent requirements for both
the social and technical aspects [6-9]. The purpose of this
paper is to describe and analyze the requirements elicited for
designing and implementing an agent-based simulation
system [
        <xref ref-type="bibr" rid="ref10">10</xref>
        ] for the important social part of the AOCC STS –
      </p>
    </sec>
    <sec id="sec-4">
      <title>AOCC employees responsible for dispatching flights. As we</title>
      <p>have shown in [6], for successful agent-based simulation of
some aspect of STS, the requirements for the greater STS
should be elicited and modelled. Considering this, this paper
describes the requirements elicited for the whole STS of</p>
    </sec>
    <sec id="sec-5">
      <title>AOCC. The requirements described in the paper were elicited</title>
      <p>
        from the AOCC stakeholders by following the elicitation
approach described in [6] and [
        <xref ref-type="bibr" rid="ref11">11</xref>
        ].
      </p>
    </sec>
    <sec id="sec-6">
      <title>The rest of this paper is structured as follows. In Section</title>
    </sec>
    <sec id="sec-7">
      <title>II, the holistic requirements engineering framework for STS</title>
      <p>used in the work is described. In Section III, the framework is
applied to modelling the behavior, organization, and
information perspectives of the AOCC. In Section IV, the
design of the simulation system for the human subsystem of
the AOCC is briefly described, based on the requirements.</p>
    </sec>
    <sec id="sec-8">
      <title>The conclusions are drawn and directions for future work are set in Section V.</title>
    </sec>
    <sec id="sec-9">
      <title>II. REQUIREMENTS ENGINEERING FOR STS</title>
      <p>
        STS should be designed in a holistic fashion [
        <xref ref-type="bibr" rid="ref11">11</xref>
        ]. Holistic
design means, among other things, that the software system to
be designed should be viewed through complementary lenses
of its social, informational, and behavioral context. For this
purpose, we propose to apply a methodology that is centered
on the viewpoint framework defined in [
        <xref ref-type="bibr" rid="ref13">13</xref>
        ]. The viewpoint
framework consists of a matrix with three rows representing
the abstraction layers of problem domain analysis, design, and
implementation and three columns representing the
perspectives of organization, information, and behavior. Each
cell in this matrix represents a specific viewpoint, such as
organization analysis, information design and behavior
implementation. The perspectives of organization,
information and behavior are respectively geared towards
eliciting and representing social, informational, and
behavioral contexts. In this paper, we address the viewpoint
aspects of the system analysis layer because the focus of this
paper is on requirements engineering for STS. Each of these
perspectives – information, interaction, and behavior – can be
represented by appropriate models. The models at the
abstraction layer of system analysis represent the
requirements elicited for the STS. Likewise, the models at the
abstraction layers of design and implementation respectively
represent the design and implementation of the STS. Since this
paper is concerned with requirements engineering, we focus
on the models required for capturing the highest abstraction
layer of problem domain analysis and only marginally treat
the models needed for addressing the abstraction layers of
design and implementation.
      </p>
    </sec>
    <sec id="sec-10">
      <title>The viewpoint framework has been previously applied for</title>
      <p>
        requirements engineering as described in, e.g., [
        <xref ref-type="bibr" rid="ref14 ref15 ref16 ref17">6, 9, 14-17</xref>
        ].
      </p>
    </sec>
    <sec id="sec-11">
      <title>The methodology for filling in the viewpoint framework, including the order of filling, is described in [6]. The advantages of using the methodology based on the viewpoint framework are that it enables to model requirements for STS</title>
      <p>at three abstraction layers and from three complementary
vertical perspectives. Another advantage is that the models
included by the viewpoint framework are rooted in simple
principles, which makes the models palatable for
nontechnical stakeholders. The viewpoint framework is
represented in Table I. This paper is focused on the models of
organization, information, and behavior analysis.</p>
    </sec>
    <sec id="sec-12">
      <title>Requirements models of AOCC of the mentioned viewpoint</title>
      <p>aspects are presented and explained in Section III. Design
considerations of the agent-based simulation system at the
system design layer are presented in Section IV. Finally, the
simulation system is implemented at the layer of system
implementation, which falls outside the scope of this paper.</p>
      <sec id="sec-12-1">
        <title>System design</title>
      </sec>
      <sec id="sec-12-2">
        <title>System implementation</title>
        <sec id="sec-12-2-1">
          <title>Organization</title>
        </sec>
        <sec id="sec-12-2-2">
          <title>Viewpoint aspect</title>
        </sec>
        <sec id="sec-12-2-3">
          <title>Information</title>
        </sec>
        <sec id="sec-12-2-4">
          <title>Behavior</title>
        </sec>
      </sec>
      <sec id="sec-12-3">
        <title>Role models, organization model</title>
      </sec>
      <sec id="sec-12-4">
        <title>Domain model Goal model,</title>
      </sec>
      <sec id="sec-12-5">
        <title>Motivational scenario</title>
      </sec>
      <sec id="sec-12-6">
        <title>Models of platform-independent design</title>
      </sec>
      <sec id="sec-12-7">
        <title>Platform-specific implementation</title>
      </sec>
    </sec>
    <sec id="sec-13">
      <title>III. REQUIREMENTS FOR THE AOCC</title>
      <p>A. Goal Models and Motivational Scenarios</p>
      <p>
        Goal models are relevant for capturing the purpose and
goals of the STS. Goal models belong to the viewpoint aspect
of behavior analysis. According to Sterling and Taveter [
        <xref ref-type="bibr" rid="ref12">12</xref>
        ],
goal models include functional goals denoted by rhomboids
that represent functional requirements of the system, quality
goals (clouds) that model non-functional requirements of the
system, and roles (stick figures) that describe capacities or
positions of the system required to achieve the goals. There
can also be relationships between functional goals (solid
lines), and between goals and quality goals (dashed lines). For
easier reading, we indicate in this paper goals and quality
goals as highlighted in the italic font, and roles in the bold
font.
      </p>
    </sec>
    <sec id="sec-14">
      <title>The overall goal or purpose of airline operations control</title>
      <p>is to Maintain &amp; control the day of operation network
schedule to provide an Efficient, safe, quality &amp; profitable
network operation to the airline’s customers – mainly its
passengers, but potentially also to its cargo customers. The
goal model of airline operations control is shown in Figure 1.
Operations Control
Efficient, safe, quality &amp;
profitable network operation</p>
      <p>On-time and with
minimal
disruptions</p>
      <p>Maintain &amp; control
day of operation
network schedule</p>
      <p>Execute
network schedule
GCoronutrnodl</p>
      <p>Maintenance</p>
      <p>Control</p>
      <p>Flight
Dispatch</p>
      <p>Passenger
Control</p>
      <p>Crew
Control</p>
      <p>Manage
ground operations
Turnaround efficient
and on-time</p>
      <p>Manage
maintenance operations</p>
      <p>Manage
flight operations</p>
      <p>Manage
disruptions</p>
      <p>Manage
passenger &amp;
revenue</p>
      <p>Manage
crew
Aircraft legal and
servicable</p>
      <p>Flight cost-effective,
legal and on-time</p>
      <p>Quality service, cost-effective &amp;
minimal impact on network schedule</p>
      <sec id="sec-14-1">
        <title>Airline Operations Control</title>
      </sec>
      <sec id="sec-14-2">
        <title>The purpose of the airline operations control is to maintain and control the day of operation network schedule. This is</title>
        <p>Customer satisfied &amp;
revenue maximized</p>
        <p>Crew legal, sound and
efficient
done in through collaboration between the AOCC
subroles. The following activities are included:
a)
managing ground operations by preparing the
aircraft on the ground and conducting weight and
balance calculations</p>
      </sec>
      <sec id="sec-14-3">
        <title>Executing and controlling the day of operation network</title>
        <p>schedule should ensure an efficient, safe, and high-quality
service to airline customers – the passengers. The airline’s
day of operation should be at the same time profitable,
solvable, and punctual without large disruptions or delays
to maintain the airline’s reputation.</p>
        <p>Figure 1 reflects that achieving the overall goal of airline
operations control is the responsibility of the duty manager
performing the role Operations Control. To offer a service to
airline customers, Operations Control is also responsible for
achieving the goal Execute network schedule with the quality
goal to deliver the service On time and with minimal
disruptions. The responsibilities for achieving the sub-goals
Manage ground operations, Manage maintenance operations,
Manage flight operations, Manage passenger &amp; revenue, and</p>
      </sec>
    </sec>
    <sec id="sec-15">
      <title>Manage crew are delegated to the respective roles Ground</title>
      <p>
        Control, Maintenance Control, Flight Dispatch, Passenger
Control and Crew Control. Performers of these roles follow
their own quality goals to ensure the entire network operation
flow. All of these quality goals contribute to the achievement
of the quality goal On time and with minimal disruptions. A
more narrative-like way of representing the meaning of a goal
model is motivational scenario [
        <xref ref-type="bibr" rid="ref13">13</xref>
        ]. Motivational scenarios
belong to the viewpoint aspect of behavior analysis. Table II
presents the motivational scenario of airline operations control
and how agents fulfill their corresponding roles to achieve
their goals. Additional goal models and motivational scenarios
for a day of operation are available in [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ].
      </p>
    </sec>
    <sec id="sec-16">
      <title>Since the operational flow is regularly disturbed by</title>
      <p>disruptions which lead to irregular operation, a very important
sub-goal shown in Figure 1 is Manage disruptions.
Disruptions should be managed while they occur, but still
ensuring a Quality service, cost effective, and minimal impact
on flight schedule. The responsibility and final decisions of
disruption management lie with the duty manager performing
the role of Operations Control, but collaborative decision
making is performed amongst all the sub-roles of the AOCC
represented in Figure 2 to find an optimal solution. Figure 2
also shows the sub-goals of Manage disruptions. Different
aspects of managing disruptions are represented by the
subgoals Gain situational awareness, Optimize solution, and</p>
    </sec>
    <sec id="sec-17">
      <title>Execute solution with their respective lower-level sub-goals. Table III shows the motivational scenario of disruption management.</title>
      <p>Maintenance</p>
      <p>Control
Crew
Control</p>
      <p>Flight
Dispatch
Quality service,
costeffective and minimal
impact on flight
schedule
Manage
disruptions
Operations</p>
      <p>Control</p>
      <p>Passenger
Control</p>
      <p>Ground
Control
Easy and fast to
see impact</p>
      <p>Gain
situational
awareness
Easy to
compare
Optimize
solution
Execute solution</p>
      <p>Easy to
disseminate
Identify issue
Gather impact
Develop
solution
Evaluate
solution
Communicate
decision
Apply
decision
Minimize (indirect) cost
associated with disruption
Minimize impact on
passenger convenience</p>
      <sec id="sec-17-1">
        <title>Scenario</title>
        <p>description</p>
      </sec>
      <sec id="sec-17-2">
        <title>Disruptions need to be handled proactively to avoid delays and additional costs. Managing disruptions potentially involves all sub-roles of the AOCC. The responsibility and final decisions lie with the duty manager performing the</title>
      </sec>
      <sec id="sec-17-3">
        <title>Disruption management should allow to gain situation</title>
        <p>awareness, identify, and understand the impact, make fast
decision by the controllers, but still ensure a quality service
for passengers. The solution should be cost-effective and
have a minimal impact on the overall network schedule,
minimizing delays.</p>
        <p>B. Analyzing Quality Goals</p>
      </sec>
    </sec>
    <sec id="sec-18">
      <title>The analysis of quality goals constitutes an important tool</title>
      <p>for STS requirements analysis. According to Sterling and</p>
    </sec>
    <sec id="sec-19">
      <title>Taveter ([13], p. 140), quality goals can contribute positively</title>
      <p>
        or negatively to the achievement of a functional goal. In
Figure 1, the quality goal On-time and with minimal
disruptions is associated with the functional goal Execute
network schedule, representing the positive plan at the
beginning of a day of operation. Figure 1 reflects that in case
of no disruption or minimal disruption, the following quality
goals contribute positively to the quality goal On-time and
with minimal disruptions: Turnaround efficient and on-time;
Aircraft legal and serviceable; Flight cost-effective, legal and
on-time; Quality service, cost effective &amp; minimal impact on
network schedule; Customer satisfied &amp; revenue maximized;
Crew legal, sound and efficient. However, the situation
changes in case of a significant disruption. In such a case, each
of these quality goals can also exert a negative influence on
the achievement of the overall quality goal On-time and with
minimal disruption. The reason is that cost, time, and resource
availability continuously stand in conflict which each other
during a day of operation and such conflicts become critical
during disruption management. Handling conflicts in
goaloriented requirements is a separate issue that we have
addressed more in detail in [
        <xref ref-type="bibr" rid="ref19">19</xref>
        ].
      </p>
    </sec>
    <sec id="sec-20">
      <title>In the socio-technical context, it is interesting to further</title>
      <p>
        analyze how the technical and social dimensions may
influence the achievement of the quality goals. Figure 3
elaborates the social and technical dimensions of the quality
goal Quality service, cost effective, and minimal impact on
flight schedule that is associated with the functional goal
Manage disruptions. Each of the other quality goals could be
elaborated the same way. The technical dimension is rather
easy to grasp. If all technical systems deliver the information
in a timely manner and without failure, the overall impact of
the technical dimension would be positive. The social
dimension is much more complex. This is because the team
effectiveness framework, introduced in Section 2.3.1 of [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ],
includes three factors which may enable or impede the overall
effectiveness: team member characteristics (personality),
team-level factors (team taxonomy, e.g., cohesion), and
organizational or contextual factors (organizational identity,
e.g., organizational structure of an airline). All these factors
influence collaborative team-based decision making. As has
been concluded in Section 2.3.2 of [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ], personality has a
considerable impact on team effectiveness. The Five-Factor
      </p>
    </sec>
    <sec id="sec-21">
      <title>Model (FFM) of personality profiles and particularly the</title>
      <p>
        personality features Conscientiousness (C) and Agreeableness
(A) have been identified as valid occupational performance
predictors [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ]. C and A may have positive or negative
influence (indicated by the ‘+’ or ‘-’ sign) on the collaborative
team-based decision making. At the same time, Openness,
      </p>
    </sec>
    <sec id="sec-22">
      <title>Extraversion and Neuroticism are expected to be neutral (indicated by the ‘n’ sign), based on Peters [20] who compared the personality profiles of an AOCC employee population with a norm population.</title>
      <p>Technical
dimension
OrgaDniNzaAtional
&lt;</p>
      <p>Timely available
information
Quality service,
cost-effective and
minimal impact on
network schedule
Social
dimension
Collaborative
team-based
decision making
Individual
personality
taxToenaommy
n
+/n
Openness
Conscientiousness
Extraversion
+/Agreeableness
Neuroticism
n</p>
    </sec>
    <sec id="sec-23">
      <title>Role models describe each role of STS in terms of its</title>
      <p>responsibilities and constraints required to achieve the goals
of the STS. Role models belong to the viewpoint aspect of
organization analysis. Table IV contains the key
responsibilities and constraints for the roles needed for
achieving the goals of disruption management modelled in
Figure 2.</p>
    </sec>
    <sec id="sec-24">
      <title>Organization model represents relationships between the</title>
      <p>roles. Organization models belong to the viewpoint aspect of
organization analysis. A relationship can be defined as a
control, benevolence, or peer relationship according to</p>
    </sec>
    <sec id="sec-25">
      <title>Sterling and Taveter (([13], p. 75). Figure 4 represents the organization model of the AOCC. The upper part of Figure 4 shows the relevant contextual organizational roles Ground</title>
      <p>Operations, Crew Operations, Flight Operations,
Maintenance &amp; Engineering, and Revenue &amp; Passenger</p>
    </sec>
    <sec id="sec-26">
      <title>Management. These contextual roles represent</title>
      <p>organizational groups. They aggregate the key actors from the</p>
    </sec>
    <sec id="sec-27">
      <title>AOCC and outside actors related to the AOCC. The sub-roles of the AOCC denoted in Figure 4 by dark-filled roles include</title>
      <p>Ground Control, Crew Control, Flight Dispatch,
Maintenance Control, and Passenger Control. All of them
are peers to each other and are controlled by the Operations</p>
    </sec>
    <sec id="sec-28">
      <title>Control to maintain and control the day of operation. Flight</title>
      <p>Dispatch is a special role because it has the peer relationship
with all the other organizational roles. Additional sub-roles
denoted by white-filled figures in the lower part of Figure 4
are involved in a day of operation. They are essential for
achieving the goals of the AOCC and disruption management
modelled in Figures 2 and 3.</p>
      <p>isControlledBy</p>
      <p>Maintenance</p>
      <p>Control</p>
    </sec>
    <sec id="sec-29">
      <title>Domain model represents the domain knowledge to be</title>
      <p>
        stored and handled within STS. Domain models belong to the
viewpoint aspect of information analysis. Domain model
consists of domain entities and relationships between them
([
        <xref ref-type="bibr" rid="ref13">13</xref>
        ], p. 76). The subject of the domain model represented in
Figure 5 is the knowledge shared and handled within the
AOCC. The AOCC domain model also includes the
knowledge about disruptive events, their impact on cost and
time, and the potential solution developed to mitigate the
disruption. Additionally, the AOCC domain model represents
technical systems – information systems – used by the AOCC
as resources, which are denoted in the figure as AOCC
environments by underlying their names. Resources are
controlled by the performers of different roles. For example,
the Maintenance Control System (MCS) is an information
system overseen by Maintenance Control to track aircraft
health status and provide Operations Control with the
information about the aircraft airworthiness and legality. The
      </p>
    </sec>
    <sec id="sec-30">
      <title>MCS also stores aircraft maintenance data, such as Minimum</title>
      <p>Equipment List (MEL) and Configuration Deviation List
(CDL), which are provided by a Crew Member before or
after the flight, or through a Line Mechanic during the line
maintenance checks. Finally, the MCS stores and provides
information about the overall aircraft performance which is
being utilized by the Flight Dispatch during the flight
planning process and is forwarded to another information
system – the Flight Planning System.</p>
      <p>Operations Control recognizes</p>
      <p>monitors
Lies in</p>
      <p>Network Schedule
developes</p>
      <p>Environment
relcaotniotnasinhip
relationship</p>
      <p>
        As was stated in Section I, the requirements described in
this paper serve the purpose of designing and implementing
an agent-based simulation system [
        <xref ref-type="bibr" rid="ref10">10</xref>
        ] for the important social
part of the AOCC STS – AOCC employees responsible for
dispatching flights. As we pointed out in Section III.B, the
technical dimension of STS is rather straightforward, as it is
embodied in the corresponding information systems, such as
various systems represented in Figure 5. Those systems make
recommendations for solving disruptions in one way or
another, effectively acting as decision-support systems. The
social dimension is much more complex because of the
inherent complexity of human decision-making processes.
Considering this, the design stage of our work is concerned
with designing simulation experiments to be performed with
the social part of the AOCC STS. For this purpose,
requirements for the greater STS described in Section III had
to be represented and analyzed. Simulation experiments were
designed as agent-based simulations of the human subsystem
of the AOCC, where software agents performed the AOCC
roles that are usually performed by humans [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ]. Since this
paper is concerned with requirements engineering for STS, we
next just briefly outline the steps of the simulation system
design, leaving treating the simulations for a different paper.
      </p>
    </sec>
    <sec id="sec-31">
      <title>To manage a disruption, there are three basic kinds of</title>
      <p>solutions: passenger option, crew option and aircraft option.</p>
    </sec>
    <sec id="sec-32">
      <title>Those options are captured by the goal model shown in Figure</title>
    </sec>
    <sec id="sec-33">
      <title>6, which elaborates the Develop solution functional goal</title>
      <p>represented in Figure 2. In Figure 6, the three solutions are
modelled by the corresponding subgoals Choose passenger
option, Choose crew option, and Choose aircraft option. The
roles responsible for achieving these goals are respectively
Passenger Control, Crew Control, and Operations
Control. Each of the subgoals is characterized by the
corresponding quality goals that are modelled from the
perspectives of the relevant roles. For example, the quality
goals Minimal passenger compensation, Protected passenger
and Minimal passenger delay capture the decision-making
criteria for choosing the passenger option from the perspective
of Passenger Control. Figure 6 represents more elaborate
options for each of the main solution types as lower-level
subgoals under the second-level goals Choose passenger option,
Choose aircraft option, and Choose crew option.</p>
      <p>Minimal
passenger
compensation
Protected
passenger</p>
      <p>PaCsosnetnrgoelr
Minimal
passenger
delay</p>
      <p>Choose
passenger option
Change pax on
differentflight
same airline
Change pax on
differentflight
other airline
Keep paxon
delayed flight
Cancel flight</p>
      <p>Minimal crew
delay &amp; costs</p>
      <p>Protected
crew
Develop
solution
CCornetwrol
Choose
crew option
Acceptdelay
Cancel flight
Proceedwithout</p>
      <p>crew
Propose aircraft</p>
      <p>change
Usecrew with
free time</p>
      <p>Usecrew
onvacation
Use day off
drew
Exchangewith
crew another
flight
Use nearest
reserve crew
at hub
Usereserve
at airport</p>
      <p>Protected
schedule &amp;
maximizedrevenue
OpCeornattrioolns</p>
      <p>Minimal flight
delay&amp; costs</p>
      <p>Choose
aircraft option
Swap
aircraft
Rerouteflight
Join flights</p>
      <p>Delay flight
Book
wet -lease
Cancel
flight</p>
    </sec>
    <sec id="sec-34">
      <title>The goal model shown in Figure 6 is crucial as the foundation</title>
      <p>to develop the goal-driven behavior models of humans – the
AOCC personnel – for simulating the decision-making
process of disruption management. In Figure 6, some
functional goals, such as Cancel flight, appear under several
second-level functional goals. Since a given functional goal
has the same meaning, no matter where it is in a goal tree, the
decision to pursue one or another lower-level goal denoting a
particular disruption solution is made based on evaluating
how well the associated quality goals are met. By combining
functional goals and quality goals pertaining to some role,
such as Passenger Control, behavior models for agents
playing the corresponding roles were developed which
address the behavior perspective of the system design layer of
the viewpoint framework shown as Table I. For executing the
behavior model, a scenario of disruption management was
defined that offered three different simplified solutions –
cancel, reroute, and delay – to be chosen through collaboration
between the roles Passenger Control, Crew Control, and
Operations Control.</p>
      <p>
        For evaluating the achievement of the quality goals
defined for the corresponding roles, the agent cost function
was derived based on [
        <xref ref-type="bibr" rid="ref21">21</xref>
        ]. The function evaluates each
disruption management solution based on its cost and
probability of success. For choosing one or another solution
based on the return value of the agent cost function, the
agentbased simulation also considers the simulated FFM
personality profile of the AOCC decision-maker simulated by
the agent. For example, whether the simulated decision-maker
accepts the solution such as the passenger solution described
in Table V, also depends on the FFM personality profile of the
decision-maker, considering the goal-oriented planning
process of a human [
        <xref ref-type="bibr" rid="ref22 ref23 ref24">22-24</xref>
        ].
      </p>
    </sec>
    <sec id="sec-35">
      <title>In the simulations, qualitative values ‘low’, ‘high’ and ‘med’ that were used in choosing a disruption solution, such as the passenger solution described by Table V, were interpreted as quantitative values [18].</title>
      <p>Like the agent cost function for a human decision-maker,
the system cost function represents the disruption solution
offered by the information systems of the AOCC. This way,
we put equal weights on the disruption solutions of the STS
generated by (simulated) humans on one hand and (simulated)
information systems on the other. The overall
decisionmaking process is a collaborative majority-based
decisionmaking process by the involved agents. The majority-based
decision is made by applying the agent selection function.
Figure 7 illustrates the decision-making process with the
simplified cancel, delay and reroute options to be chosen
between that are offered by simulated humans and simulated
information systems.</p>
      <p>This work discussed requirements engineering for
sociotechnical systems, using the example of the AOCC. We
specifically applied the viewpoint framework for ensuring
holistic requirements representation from complementary
perspectives and represented the requirements by the models
included by the system analysis layer of the viewpoint
framework. The requirements analysis addressed the
organization, information, and behavior analysis viewpoint
aspects of the AOCC. The application of the goal-oriented
modeling approach allowed to differentiate between
functional goals and quality goals. This is beneficial as
qualitative concerns could be matched to personality-driven
behavioral patterns, which, in turn, could be mimicked by
agent-based simulations. This is the main novelty of our
approach, as this kind of agent-based simulation of a social
part of STS has been done for the first time according to the
best of our knowledge. Importantly, a prerequisite for
adequate simulations of a social part is eliciting and
representing the requirements for the greater STS surrounding
the social part to be simulated. Engineering requirements for
the greater STS is the main topic of this paper. Moreover, our
approach allows to represent technical dimension of STS
equally well. For that matter, in the future work we plan to
model the technical part of the AOCC STS in more detail and
integrate into holistic modelling and simulation of
decisionmaking processes within the AOCC. The result would be a
simulation of the AOCC as a whole which can be used for
exploring and optimizing the existing airline operations
control solutions by means of agent-based and other types of
computer-based simulations.</p>
    </sec>
    <sec id="sec-36">
      <title>ACKNOWLEDGMENT</title>
    </sec>
    <sec id="sec-37">
      <title>The contribution by the second author to this publication</title>
      <p>has been funded by the IT Academy program of the European</p>
    </sec>
    <sec id="sec-38">
      <title>Social Fund.</title>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <surname>M. T. O'Hara</surname>
            ,
            <given-names>R. T.</given-names>
          </string-name>
          <string-name>
            <surname>Watson</surname>
            ,
            <given-names>C. B.</given-names>
          </string-name>
          <string-name>
            <surname>Kavan</surname>
          </string-name>
          , „
          <article-title>Managing the three levels of change,“ Information Systems Management</article-title>
          , vol.
          <volume>16</volume>
          , pp.
          <fpage>63</fpage>
          -
          <lpage>70</lpage>
          ,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>G.</given-names>
            <surname>Baxter</surname>
          </string-name>
          ,
          <string-name>
            <surname>and I. Sommerville</surname>
          </string-name>
          , „
          <article-title>Socio-technical systems: From design methods to systems engineering,“ Interacting with Computers</article-title>
          , vol.
          <volume>23</volume>
          , no.
          <issue>1</issue>
          , 2011 pp.
          <fpage>4</fpage>
          -
          <lpage>17</lpage>
          ,
          <year>2011</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <surname>I. Sommerville</surname>
          </string-name>
          ,
          <source>Software Engineering (Ninth Edition)</source>
          , London, England: Pearson,
          <year>2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          <string-name>
            <surname>P. M. Salmon</surname>
            ,
            <given-names>G. H.</given-names>
          </string-name>
          <string-name>
            <surname>Walker</surname>
            , and
            <given-names>N. A.</given-names>
          </string-name>
          <string-name>
            <surname>Stanton</surname>
          </string-name>
          , „
          <article-title>Pilot error versus sociotechnical systems failure: a distributed situation awareness analysis of Air France 447,“ Theoretical Issues in Ergonomics Science</article-title>
          , vol.
          <volume>17</volume>
          , no.
          <issue>1</issue>
          , pp
          <fpage>64</fpage>
          -
          <lpage>79</lpage>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          <string-name>
            <surname>Paschke</surname>
          </string-name>
          , Eds.,
          <source>2009 AAAI Spring Symposium: Intelligent Event Processing</source>
          , The AAAI Press, pp.
          <fpage>80</fpage>
          -
          <lpage>85</lpage>
          ,
          <year>2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          <string-name>
            <given-names>T.</given-names>
            <surname>Miller</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Lu</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Sterling</surname>
          </string-name>
          , G. Beydoun, and
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          , “
          <article-title>Requirements elicitation and specification using the agent paradigm: the case study of an aircraft turnaround simulator</article-title>
          ,
          <source>” IEEE Transactions on Software Engineering</source>
          , vol.
          <volume>40</volume>
          , no.
          <issue>10</issue>
          , pp.
          <fpage>1007</fpage>
          -
          <lpage>1024</lpage>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          <string-name>
            <given-names>P.</given-names>
            <surname>Bresciani</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Perini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P.</given-names>
            <surname>Giorgini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Giunchiglia</surname>
          </string-name>
          , and
          <string-name>
            <given-names>J.</given-names>
            <surname>Mylopoulos</surname>
          </string-name>
          , “
          <article-title>Tropos: An agent-oriented software development methodology,” Auton. Agents Multi-Agent Syst</article-title>
          ., vol.
          <volume>8</volume>
          , no.
          <issue>3</issue>
          , pp.
          <fpage>203</fpage>
          -
          <lpage>236</lpage>
          ,
          <year>2004</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          <string-name>
            <given-names>E.</given-names>
            <surname>Yu</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P.</given-names>
            <surname>Giorgini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>N.</given-names>
            <surname>Maiden</surname>
          </string-name>
          , and
          <string-name>
            <given-names>J.</given-names>
            <surname>Mylopoulos</surname>
          </string-name>
          ,
          <article-title>Social Modelling for Requirements Engineering</article-title>
          . Cambridge, MA: MIT Press,
          <year>2011</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Meriste</surname>
          </string-name>
          , “
          <article-title>How can agents help in designing complex systems?”</article-title>
          ,
          <source>Journal of Telecommunication, Electronic and Computer Engineering</source>
          , vol.
          <volume>9</volume>
          , no.
          <issue>2-9</issue>
          , pp.
          <fpage>1</fpage>
          -
          <lpage>8</lpage>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10]
          <string-name>
            <surname>C. M. Macal</surname>
          </string-name>
          , “
          <article-title>Everything you need to know about agent-based modelling</article-title>
          and simulation,
          <source>” Journal of Simulation</source>
          , vol.
          <volume>10</volume>
          , no.
          <issue>2</issue>
          ,
          <fpage>144</fpage>
          -
          <lpage>156</lpage>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <given-names>K.</given-names>
            <surname>Mooses</surname>
          </string-name>
          , and
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          , “
          <article-title>Agent-Oriented Goal Models in Developing Information Systems Supporting Physical Activity Among Adolescents: Literature Review and Expert Interviews,”</article-title>
          <source>Journal of Medical Internet Research</source>
          , vol.
          <volume>23</volume>
          , no.
          <issue>5</issue>
          ,
          <year>2021</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <given-names>G. J.</given-names>
            <surname>Read</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P. M.</given-names>
            <surname>Salmon</surname>
          </string-name>
          ,
          <string-name>
            <given-names>N.</given-names>
            <surname>Goode</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M. G.</given-names>
            <surname>Lenné</surname>
          </string-name>
          , „
          <article-title>A sociotechnical design toolkit for bridging the gap between systemsbased analyses and system design,“ Human Factors and Ergonomics in Manufacturing &amp; Service Industries</article-title>
          , vol.
          <volume>28</volume>
          , No.
          <issue>6</issue>
          , pp.
          <fpage>327</fpage>
          -
          <lpage>341</lpage>
          ,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          [13]
          <string-name>
            <given-names>L. S.</given-names>
            <surname>Sterling</surname>
          </string-name>
          and
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          ,
          <article-title>The Art of Agent-Oriented Modeling</article-title>
          . Cambridge, MA: MIT Press,
          <year>2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          [14]
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          ,
          <string-name>
            <given-names>H.</given-names>
            <surname>Du</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M. N.</given-names>
            <surname>Huhns</surname>
          </string-name>
          , “
          <article-title>Engineering societal information systems by agent-oriented modeling</article-title>
          ,
          <source>” Journal of Ambient Intelligence and Smart Environments</source>
          , vol.
          <volume>4</volume>
          , no.
          <issue>3</issue>
          , pp.
          <fpage>227</fpage>
          -
          <lpage>252</lpage>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          [15]
          <string-name>
            <given-names>I.</given-names>
            <surname>Shvartsman</surname>
          </string-name>
          ,
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Parmak</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Meriste</surname>
          </string-name>
          , “
          <article-title>Agentoriented modelling for simulation of complex environments</article-title>
          ,”
          <source>in Proceedings of the International Multiconference on Computer Science and Information Technology (IMCSIT</source>
          <year>2010</year>
          ), pp.
          <fpage>209</fpage>
          -
          <lpage>216</lpage>
          , IEEE,
          <year>2010</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [16]
          <string-name>
            <given-names>I.</given-names>
            <surname>Shvartsman</surname>
          </string-name>
          , and
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          , “
          <article-title>Agent-oriented knowledge elicitation for modeling the winning of “hearts and minds</article-title>
          ”,” in
          <source>2011 Federated Conference on Computer Science and Information Systems (FedCSIS)</source>
          , pp.
          <fpage>605</fpage>
          -
          <lpage>608</lpage>
          . IEEE,
          <year>2011</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          [17]
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          ,
          <article-title>and</article-title>
          <string-name>
            <given-names>A.</given-names>
            <surname>Norta</surname>
          </string-name>
          , “
          <article-title>Agile software engineering methodology for information systems' integration projects,” in Future Data and Security Engineering (FDSE</article-title>
          <year>2017</year>
          ), pp.
          <fpage>215</fpage>
          -
          <lpage>230</lpage>
          . Springer, Cham,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          [18]
          <string-name>
            <given-names>N.</given-names>
            <surname>Zimmer</surname>
          </string-name>
          , “
          <article-title>Socio-technical modeling and simulation of airline operations control,” Doctoral thesis</article-title>
          , Technische Universität Braunschweig, Germany,
          <year>2020</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          [19]
          <string-name>
            <given-names>I.</given-names>
            <surname>Gambo</surname>
          </string-name>
          , and
          <string-name>
            <given-names>K.</given-names>
            <surname>Taveter</surname>
          </string-name>
          , “
          <article-title>A Pragmatic View on Resolving Conflicts in Goal-oriented Requirements Engineering for Socio-technical Systems</article-title>
          ,” in
          <source>Proceedings of the 16th International Conference on Software Technologies (ICSOFT</source>
          <year>2021</year>
          ), SCITEPRESS, pp
          <fpage>333</fpage>
          -
          <lpage>341</lpage>
          ,
          <year>2021</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          [20]
          <string-name>
            <given-names>T.</given-names>
            <surname>Peters</surname>
          </string-name>
          , “
          <article-title>Personality Traits Modeling of Operations Control Center (OCC) Personnel and Vocational Implications,”</article-title>
          <source>Master's Thesis</source>
          . Technical University of Berlin,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          [21]
          <string-name>
            <given-names>T.</given-names>
            <surname>Doce</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Dias</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Prada</surname>
          </string-name>
          ,
          <article-title>and</article-title>
          <string-name>
            <given-names>A.</given-names>
            <surname>Paiva</surname>
          </string-name>
          , “
          <article-title>Creating individual agents through personality traits</article-title>
          ,” in International Conference on Intelligent Virtual Agents, pp.
          <fpage>257</fpage>
          -
          <lpage>264</lpage>
          , Springer,
          <year>2010</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          [22]
          <string-name>
            <given-names>S.</given-names>
            <surname>Ahrndt</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Fähndrich</surname>
          </string-name>
          , and
          <string-name>
            <given-names>S.</given-names>
            <surname>Albayrak</surname>
          </string-name>
          , “
          <article-title>Modelling of personality in agents: From psychology to implementation</article-title>
          ,”
          <source>in Proceedings of the 4th International Workshop on Human-Agent Interaction Design and Models (HAIDM</source>
          <year>2015</year>
          ), pp.
          <fpage>1</fpage>
          -
          <lpage>16</lpage>
          , Smart Society Project,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref23">
        <mixed-citation>
          [23]
          <string-name>
            <given-names>J. K.</given-names>
            <surname>Connor-Smith</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Flachsbart</surname>
          </string-name>
          , “
          <article-title>Relations between personality and coping: A meta-analysis</article-title>
          ,
          <source>” Journal of Personality and Social Psychology</source>
          , vol.
          <volume>93</volume>
          , no.
          <issue>6</issue>
          , pp.
          <fpage>1080</fpage>
          -
          <lpage>1107</lpage>
          ,
          <year>2007</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref24">
        <mixed-citation>
          [24]
          <string-name>
            <given-names>I.</given-names>
            <surname>Robertson</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Bartram</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Callinan</surname>
          </string-name>
          , “
          <article-title>Personnel selection and assessment</article-title>
          ,” in P. Warr, Ed., Psychology at Work, pp.
          <fpage>100</fpage>
          -
          <lpage>152</lpage>
          , Penguin Press,
          <year>2002</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>