Guideline summary

Formal specification

The system states should be designed based on specification.

  If the states are not specified in the machine documentation, the system may not be able to track the situation changes, and identify exceptions .

  The state machines should be specified in the requirement documentation, to enable representing them in the model of the system behavior .

Modeling the machine situations

A model of the operational behavior enables detection of exceptional situations.

  If a model of the machine operation is not available, there is no way to decide if the active states should be expected, if they are normal, exceptional ...

  The state machines should be part of a knowledge base describing the system behavior in routine and and exceptional situation .

Publishing the active state

Identification of risky situation is possible by verification of the situation by the model of situations stored in the knowledge base.

  If the active state is not known to the Situation analyzer, the machine cannot identify deviations from the operational rules .

The machine (functional unit) should publish its active state regularly to the analyzers.

  The rules about state transitions should be stored in the situation database in the Situation analyzer

Related topic


13 Jul 2016.