<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta>
      <journal-title-group>
        <journal-title>P. (2014). A multi-formalism approach for model-based
dynamic distribution of user interfaces of critical interactive systems. International journal of
human</journal-title>
      </journal-title-group>
    </journal-meta>
    <article-meta>
      <title-group>
        <article-title>A Groupware and Automation Design Perspective on HumanS-AutomationS Teaming</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Philippe Palanque</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>ICS-IRIT, Université de Toulouse</institution>
          ,
          <addr-line>31042 Toulouse Cedex</addr-line>
          ,
          <country country="FR">France</country>
        </aff>
      </contrib-group>
      <pub-date>
        <year>2002</year>
      </pub-date>
      <volume>2905</volume>
      <fpage>3</fpage>
      <lpage>18</lpage>
      <abstract>
        <p>Human Machine Teaming or Human Automation Teaming has mainly considered one automation interacting with one operator. The field of Computer Supported Cooperative Work has been studying for decades how groups of users can collaborate to reach objectives out of reach of an individual. This position paper proposes a generic framework for designing and assessing collaboration between a group of users/operators and a set of interactive systems partly autonomous. This framework exploits frameworks both from automation research and CSCW. The paper embeds those frameworks to discuss potential issues in hybrid automation such as transparency, controllability and situation awareness.</p>
      </abstract>
      <kwd-group>
        <kwd>eol&gt;Human-Automation Teaming</kwd>
        <kwd>Groupware</kwd>
        <kwd>CSCW</kwd>
        <kwd>Automation1</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. Introduction</title>
      <p>The field of Computer Supported Cooperative Work has been studying for more than forty years
how humans may collaborate to carry out work. Recent work focus in this area has in last decades
moved away from the notion of work to the notion of entertainment with the advent of social media
and more globally social computing. In that context early work on human-human collaboration is
relevant when studying how humans collaborate together.</p>
      <p>This position paper presents two frameworks which have been widely used in the area of CSCW to
better understand and characterize human-human collaborations. We also present the GUSPATO
model which provides a scale of collaboration types between humans and automation. This
framework makes it possible to define or assess how collaboration may take place and how
automation may be intertwined with the collaboration. This paper builds on a previous paper [13]
providing more details on the intersection between collaboration and automation. In the context of
safety critical systems where various users with various qualifications working both synchronously
and asynchronously (possibly with high time difference) these issues should be addressed as first
class citizens as demonstrated for satellites collision avoidance systems [12] and satellites ground
segments [14].</p>
      <p>The rest of the position presents how these models are useful and can be applied to hybrid
automations.</p>
    </sec>
    <sec id="sec-2">
      <title>2. CSCW/Groupware frameworks</title>
      <p>The description of human-human collaboration requires the explicit identification of the tasks that
each human has to perform, in order to understand and allocate the work between them. It also
requires the identification of specific aspects of the collaboration which will take place between users
but also between users and the interactive system functionalities.</p>
      <p>Cooperative work may be dedicated to one or more of the following types of collaborative
activities: production, coordination, communication. To make these three facets more explicit, let’s
use the example of a collaborative text editing tool. In that context, a coordination tasks (and its
associated tool) would allow users to coordinate their collaboration by making explicit which user is
allowed to work on the document at what time of day, as well as making explicit the sequencing of
these activities performed the users. A communication task (and its associated tool) would allow
users to communicate by voice while working on the document. A production task (and its associated
tool) would allow users to input text in the document. This means that collaborative application
should provide functions triggerable by the users in order to collaborate effectively. It is then possible
to associate one or more facet amongst this set. For example, Figure 1 a) shows that one task is
dedicated to coordination whereas Figure 1 b) shows that the task is dedicated to both coordination
and communication.</p>
      <p>a)
x²
b)</p>
      <p>
        Collaborative tasks may be performed within various space-time constraints (local/distant,
synchronous/asynchronous) [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ]. Table 1 presents these different space-time constraints and
illustrates the different possibilities with an example.
      </p>
      <p>Different Times
Asynchronous interaction
Ex: one user edits the document during on a
computer in the morning and another user edits
the document in the afternoon. They could use
the automatic formatting of text (based on
styles) as an automation to support consistency
in the formatting of the document. This
automation will be used in sequence (when one
user is editing the document).</p>
      <p>Asynchronous distributed interaction
Ex: two users are working at different times
from different places on the same document.</p>
      <p>They could use a spellchecker embedded in the
text editor as an automation to support the
identification of spelling mistakes. This
automation may be used in sequence (when
each user is editing the document).</p>
      <p>These frameworks are also useful when describing collaborations with hybrid groups (i.e.
including automated agents and humans). For instance, the fact that</p>
      <p>The functional clover framework can thus be integrated with the time/space matrix of Table 1.
The Place and Time aspects will impact the three aspects of the functional clover adding their own
perspectives on the work to be performed by the group of users.</p>
      <p>As we address here collaboration with multiple entities, the basic mechanisms such as
collaborative undo, semaphores, locking mechanisms, concurrent interactions will be needed in most
of the possible configurations.</p>
      <p>Different Times
Asynchronous interaction</p>
      <p>Communication: By definition only asynchronous
communication in the same place. This can be
implemented by shared boards.</p>
      <p>Same Coordination: Requires dedicated tool support to
Place provide coordination means among entities that
are not synchronously present and active.</p>
      <p>Production: Any tool or no tool would fit. In case of
fully asynchronous not semaphores-based locking
mechanisms are needed.</p>
      <p>Asynchronous distributed interaction</p>
      <p>Communication: As entities are fully remote
multiple types of asynchronous communications
need to be fully supported.</p>
      <p>Coordination: Coordination tools are required for
Different supporting both asynchronous and distant
Places coordination.</p>
      <p>Production: Production tools not necessarily
require synchronous management of input and
accesses, but versions and revisions management
are critical as these problems cannot be solved by
means of synchronous interactions.</p>
      <p>
        The integration of Functional Clover and Time/Space matrix highlights the relevance of both
aspects together when discussing and trying to understand collaborations. What is interesting is that
the fact that a participating entity is a human or a software/system does not interfere with the
description. Indeed, the tools and interaction means on these tools might differ but the concepts and
their interactions remain. However, interactions between (partly-) autonomous entities bring
specific challenges very well highlighted in the intrinsic behavior of humans as presented in the
theory of mind principle [19]. In psychology, the theory of mind (ToM) refers to the inner
functioning of a person when it attributes mental states to other people. These mental states of other
people are then exploited by the person to predict/infer the behavior of the other people and thus to
plan its own behavior [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ].
      </p>
      <p>People utilize a theory of mind when analyzing, judging, and inferring other people's behaviors.
When interacting with partly-autonomous systems additional specific information about the
behavior and the state of the entity should be shared with the humans so that they can apply their
inner ToM behavior (as they do with other humans). Figure 2 give a concrete example of ToM on
the driving tasks for an autonomous versus a human-performed activity.</p>
      <p>a)</p>
      <p>b)</p>
    </sec>
    <sec id="sec-3">
      <title>3. The RCRAFT Framework for human-automation collaboration description</title>
      <p>Whatever the design objectives are [17], the automation design requires the identification of specific
elements which describe how this automation behaves. This section presents the RCRAFT
conceptual framework, which provides a means to characterize the automation elements.</p>
      <sec id="sec-3-1">
        <title>3.1. RCRAFT - Allocation of Functions and Tasks (FT)</title>
        <p>The FT part of the RCRAFT conceptual framework deals with the issue of Allocation of Functions
and Tasks. The generic term is usually function allocation [21] but RCRAFT differentiates the term
function according to the entity that per-forms it. Activities performed by human operators are called
“tasks” while the ones performed by the interactive system are called “functions”. Automation
designs will thus result in the identification of which activities are carried out by which entity (user
or system or both). RCRAFT-based design of automation is thus based on the identification and the
complete description of the human-system cooperative work as tasks and functions.</p>
      </sec>
      <sec id="sec-3-2">
        <title>3.2. RCRAFT - Allocation of Resources (R)</title>
        <p>The “R” part of RCRAFT deals with the identification and representation of re-sources used by the
entities. “Resource” is a generic term used to cover data, information (in the head of the user),
physical objects (e.g. a credit card), soft-ware objects (information manipulated by the system) and
devices (input, output and input/output) required to perform the system functions and the human
tasks. As for the “FT” part, automation designs will allocate resources to entities, which may or may
not be shared it with other entities. In [15], the authors have shown that, in order to describe
operators’ tasks precisely, identification and representation of data related to those tasks are crucial.
For instance, an automation not sharing information related to its state may result in automation
surprises [18] on the users’ side.</p>
      </sec>
      <sec id="sec-3-3">
        <title>3.3. RCRAFT - Allocation of Authority (A)</title>
        <p>The “A” part of RCRAFT is concerned with identifying the controlling entity (i.e. which entity can
influence the situation so that it develops or continues in a way which satisfies its requirements [9]).
The entity with authority performs or de-fines constraints on the tasks and functions that modify
the state of a system, an object or the environment to reach a goal. These constraints, tasks or
functions affect the resources needed by the user or the system. Automation designs may allocate
authority globally (i.e. one entity is a considered as master and the other as slave [23]). This allocation
may be static or dynamic/adaptive [22] i.e. changing over time to adapt to changes (context,
workload …).</p>
      </sec>
      <sec id="sec-3-4">
        <title>3.4. RCRAFT - Allocation of Control Transition (CT)</title>
        <p>The “C” part of RCRAFT deals with the issue of Control Transition, which de-fines how an entity
may takeover control, hand it over or share it with another entity [20]. Automation designs will
identify Control Transitions, which describe who can modify the allocation of control. As discussed
above, it is possible that the entity that performs a task or a function that initiates a control transition
may not have authority. An entity may release control without defining how control is to be allocated
going forward, leaving that task to another entity with authority. This justifies the conceptual
separation of the two entities.</p>
      </sec>
      <sec id="sec-3-5">
        <title>3.5. RCRAFT - Allocation of Responsibility(R)</title>
        <p>The second “R” in RCRAFT deals with the issue of Responsibility, which defines which entity can
derive a specific outcome on which the user goal depends. This outcome is called the ‘result’.
Automation designs will identify the list of expected results for the work, and will indicate which
activity of which entity in-fluences one of the expected results of the work carried out jointly by the
system and the user. The entity that influences one of the expected results will be said to be (at least
partly) accountable for the outcome.</p>
        <p>
          The RCRAFT framework introduced in [
          <xref ref-type="bibr" rid="ref3">3</xref>
          ] provides and comprehensive way of describing the
relationships and the abstract behaviour of hybrid entities involved in a collaboration. More detailed
low level descriptions are also needed but they will then correspond to a concrete solution to a given
problem and this goes beyond this position paper.
        </p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>4. The GUSPATO framework</title>
      <p>The way humans can collaborate with automation is presented using the GUSPATO model in Figure
3. GUSPATO is the acronym composed with the first letter of the seven types of collaboration where
control, authority and responsibility (according to the terminology of the RCRAFT framework for
automation) migrate between the technical system embedding automation and the human.</p>
      <sec id="sec-4-1">
        <title>4.1. Description of GUSPATO framework</title>
        <p>
          The second line represents the classical use of computers where the system is seen as a tool used
by the user or operator. The tool may embed some automation but the control, the authority and the
responsibility remain with the user/operator. The human is, here, inside the interaction loop
perceiving information provided by the system, cognitively processing it and triggering system
functions when appropriate. A concrete example of this layer is the one of editing tools supporting
the authors to produce an artefact such as a visual program [
          <xref ref-type="bibr" rid="ref7">7</xref>
          ].
        </p>
        <p>Line three shows an unbalanced sharing of control, authority and responsibility between the
system (as assistant) and the human (as supervisor). Automation is more complex and more complex
tasks are performed by the system, following a delegation of tasks by the human. The human still
holds control, authority and responsibility but positioned over the interaction loop (monitoring the
partly autonomous behaviour of the system). A concrete example of this layer would be the addition
of a spell checker in the editing tool mentioned above, as, for instance, in Microsoft Word text editor.
In that case the spell checker allows the user to perceive potential spelling mistakes and decide or
not to select one of the offered correction options (see Figure 4).</p>
        <p>Line four in the middle of the figure corresponds to a symmetric relationship for control, authority
and responsibility for the collaboration between the system and the human. In this type of
collaboration, both entities can delegate tasks to the other entity and monitor their performance.
Authority and responsibility are shared, and the human can be considered as outside of the
interaction loop when the systems perform tasks autonomously.</p>
        <p>The fifth line corresponds a reversal of the collaboration presented in line three but now the
human is an assistant to the system. In that context the system might require the human to perform
tasks and will monitor the performance of the human. Such reversal of roles in the collaboration is
similar for the last two lines of the figure. A concrete example can also be drawn from Microsoft
Word text editor. If one types the text “hsi” (as in Human-System Integration) it is automatically
changed to “his” by MS Word. The user cannot avoid this change (in a given configuration of MS
word) and must edit again the text.</p>
        <p>The last line corresponds, for instance, to generative AI where objects are created by the system
where the human is considered as an object amongst many other ones. In that context users are
mainly ignored and the system could be setup in a way that it generated an infinite number of images
that no user will see.</p>
      </sec>
      <sec id="sec-4-2">
        <title>4.2. Robust Automation in Safety-Critical Contexts</title>
        <p>
          One key issue in the use of GUSPATO model is that the lower lines require more complex algorithms
and, in some cases, might require the exploitation of AI technologies. While this might be acceptable
for entertainment or mass-market systems like translation, complexity in computer systems is a
precursor for failures (at least in the area of software where “Complexity metrics are better predictors
than simple size metrics of fault and failure-prone” [
          <xref ref-type="bibr" rid="ref8">8</xref>
          ].
        </p>
        <p>
          modules.). When new technologies for producing computing systems appear (a new
programming language for instance) significant efforts are required to harden the technology
making it suitable for deployment in critical contexts. This is the reason why it is wiser and safer to
keep older technology in use and to refrain from being an early adopter in order to avoid disillusion,
as is the case with the fantasy of fully autonomous driving [
          <xref ref-type="bibr" rid="ref5">5</xref>
          ].
        </p>
      </sec>
    </sec>
    <sec id="sec-5">
      <title>5. Conclusion and Application Example</title>
      <p>
        This position paper has presented different frameworks for the domain of CSCW and from the
domain of automation design. These frameworks have demonstrated being useful when designing
hybrid automations, especially in the large civil aircraft cockpits. For instance, the Flight Warning
System (FWS) [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ] and the Autopilot (AP) could be seen as two automations interaction jointly with
the flying crew (i.e. the captain and the first officer). In the AP and the FWS automations are very
different (in terms of level according to the GUSPATO model). According to the Ellis’s framework
for groupware, all the interactions take place in same place same time and the four entities provide
function for cooperation, production and communication (according to the clover model). One of the
key issues is to implement and verify such systems where collaborative and automated aspects add
significant complexity to the software architecture and the code. As demonstrated in [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ] formal
methods and more precisely high-level Petri nets can support this difficult and often overlooked
software engineering task while generic structuring mechanisms support maintainability and
management of large quantities of code [16]
      </p>
    </sec>
    <sec id="sec-6">
      <title>Acknowledgements</title>
      <p>This work was partly funded by the project of the French Space Agency - CNES 21055/00.</p>
    </sec>
    <sec id="sec-7">
      <title>Declaration on Generative AI</title>
      <p>The author(s) have not employed any Generative AI tools.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <surname>Baron-Cohen S</surname>
          </string-name>
          .
          <article-title>Precursors to a theory of mind: Understanding attention in others</article-title>
          . In Whiten A (ed.).
          <article-title>Natural theories of mind: evolution, development, and simulation of everyday mindreading</article-title>
          . Oxford, UK Cambridge, Massachusetts:
          <string-name>
            <given-names>B.</given-names>
            <surname>Blackwell</surname>
          </string-name>
          . pp.
          <fpage>233</fpage>
          -
          <lpage>251</lpage>
          (
          <year>1991</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <surname>Bastide</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Palanque</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>2001</year>
          ).
          <article-title>Modeling a groupware editing tool with cooperative objects</article-title>
          .
          <source>In Concurrent Object-Oriented Programming and Petri Nets: Advances in Petri Nets</source>
          (pp.
          <fpage>305</fpage>
          -
          <lpage>318</lpage>
          ). Berlin, Heidelberg: Springer Berlin Heidelberg.
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <surname>Bouzekri</surname>
            <given-names>E.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Martinie</surname>
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Palanque</surname>
            <given-names>P.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Atwood</surname>
            <given-names>K.</given-names>
          </string-name>
          , and
          <string-name>
            <surname>Gris C. Should I Add</surname>
          </string-name>
          <article-title>Recommendations to My Warning System? The RCRAFT Framework Can Answer This and Other Questions About Supporting the Assessment of Automation Designs</article-title>
          .
          <source>In 18th IFIP TC 13 International Conference on Human-Computer Interaction - INTERACT</source>
          . Springer-Verlag, Berlin, Heidelberg,
          <fpage>405</fpage>
          -
          <lpage>429</lpage>
          (
          <year>2021</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <surname>Bouzekri</surname>
            ,
            <given-names>E.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Martinie</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Palanque</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Atwood</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Gris</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          (
          <year>2021</year>
          ).
          <article-title>Should I add recommendations to my warning system? The RCRAFT framework can answer this and other questions about supporting the assessment of automation designs</article-title>
          .
          <source>In Human-Computer Interaction-INTERACT 2021: 18th IFIP TC 13 International Conference</source>
          ,
          <year>2021</year>
          , Proceedings,
          <string-name>
            <surname>Part IV</surname>
          </string-name>
          18 (pp.
          <fpage>405</fpage>
          -
          <lpage>429</lpage>
          ). Springer International Publishing.
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <surname>Cusumano</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <article-title>Self-driving vehicle technology: progress and promises</article-title>
          .
          <source>Communication of the ACM</source>
          <volume>63</volume>
          ,
          <issue>10</issue>
          ,
          <fpage>20</fpage>
          -
          <lpage>22</lpage>
          , (
          <year>2020</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <surname>Ellis</surname>
            ,
            <given-names>C. A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Gibbs</surname>
            ,
            <given-names>S. J.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Rein</surname>
            ,
            <given-names>G.</given-names>
          </string-name>
          (
          <year>1991</year>
          ).
          <article-title>Groupware: Some issues and experiences</article-title>
          .
          <source>Communications of the ACM</source>
          ,
          <volume>34</volume>
          (
          <issue>1</issue>
          ),
          <fpage>39</fpage>
          -
          <lpage>58</lpage>
          , (
          <year>1991</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <surname>Esteban</surname>
            ,
            <given-names>O.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Chatty</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Palanque</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>1995</year>
          ).
          <article-title>Whizz'ed: A Visual Environment for Building Highly Interactive Software</article-title>
          . In: Nordby,
          <string-name>
            <given-names>K.</given-names>
            ,
            <surname>Helmersen</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P.</given-names>
            ,
            <surname>Gilmore</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.J.</given-names>
            ,
            <surname>Arnesen</surname>
          </string-name>
          ,
          <string-name>
            <surname>S.A</surname>
          </string-name>
          . (
          <article-title>eds) HumanComputer Interaction</article-title>
          .
          <source>IFIP Advances in Information and Communication Technology</source>
          . Springer, Boston, MA.
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <surname>Fenton</surname>
            <given-names>N. E.</given-names>
          </string-name>
          and
          <string-name>
            <surname>Ohlsson</surname>
            <given-names>N.</given-names>
          </string-name>
          <article-title>"Quantitative analysis of faults and failures in a complex software system,"</article-title>
          <source>in IEEE Transactions on Software Engineering</source>
          , vol.
          <volume>26</volume>
          , no.
          <issue>8</issue>
          , pp.
          <fpage>797</fpage>
          -
          <lpage>814</lpage>
          , Aug. (
          <year>2000</year>
          ).
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>