1

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Safety-critical psychology

Part 1

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Safety Critical Psychology

What information goes where when and in what form?

Measurement Trajectories/pathways Timing Representation

A key question for Human-Tech system design

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

The three mile island nuclear plant

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Nuclear Power Plant Basics

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

TMI Control Room

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

TMI core damage

2

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Nuclear Power plant survey (pre-TMI)

Desk placement Gauge placement (12’ high) Alarms always on Controls difficult to distinguish Related controls not near

Inadvertent movement of controls Labels hide readouts

Access Access

Management of attention Invite slips

Physical tasks and memory Diagnosis difficulties

Access

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Customized nuclear control panel (from Norman, 1988)

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Human Factors problems at the Three Mile Island Nuclear Plant 1.  Accident occurred after maintenance operations 2.  When reactor went out of control, more than 100

alarms activated – visual and auditory overload 3.  Operator installed paper labels blocked the view

of important displays 4.  An important display was located behind a panel 5.  Some displays showed what should happen rather

than what was actually happening. 6.  It was difficult to infer the steam state from the

available information. What information goes where when in what form?

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Comparison of human factors situations TMI and Commercial Aviation

Short history of flight deck instrumentation

Human factors problems and solutions

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

McDonnell Douglas DC-8 Flight Deck (1958)

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Norman’s Action Cycle = “the loop”

3

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Boeing 727 (1964)

Three-crew

Simple Autopilot Heading Hold Altitude Hold

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

McDonnell Douglas DC-10 (1971)

Performance Calculations

3 Member Crew Autopilot Heading Select Altitude Capture Speed

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Concorde (1500 gauges and indicators!)

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Boeing 757/767 (1982)

2 Member Crew Heavy Partial EFIS CRT Displays Moving Map Category III - Autoland Autothrottles FMCS - Performance & Navigation Crew Alerting

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Airbus A320 (1988)

Full EFIS FMCS ECAM FBW - Autotrim Autopilot: primary means of flying the airplane “Hard” Envelope Protections

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Boeing 747-400 (1989)

2 Member Crew Jumbo Full EFIS

4

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Boeing 777 (1995)

FBW LCD Displays Enhanced EICAS

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Some problems and state-of-the-art solutions

Hard technology

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Engine Instruments and Crew Alerting System EICAS

“Need to know concept” –  AIRBUS (electronic centralized aircraft monitor)

ECAM Artificial Intelligence program determines priority of alerts. Central display Alert inhibitions during critical phases of flight Coordination with electronic checklists

What information goes where when in what form?

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

EICAS

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Crew installed paper labels

What information goes where when in what form?

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

DC-8 Flight Deck (wet compass seen in a mirror)

5

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

EICAS message content: what should be or what is?

AILERON LOCKOUT What does it mean? If flaps are extended, it means that the outboard ailerons should not be locked out, but they are. If flaps are retracted, it means that the outboard ailerons should be locked out, but they are not.

What information goes where when in what form?

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Some problems and state-of-the-art solutions

Soft technology

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

A small change in procedure changes the cognitive properties of the flight deck system

What information goes where when in what form?

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Captain attempts to monitor FO actions

What information goes where when in what form?

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Information flow in evaluating a descent clearance

What information goes where when in what form?

6

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Using perceptual processes to do conceptual work: Boeing’s Green Arc

Except where otherwise noted, these slides are licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 license

Descending to the Green Arc

What information goes where when in what form?