Formal development and quantitative verification of dependable systems

-

Formal development of resilient distributed systems

Resilience is the property of a system to remain trustworthy despite changes. Changes of a different nature, whether due to failures of system components or varying operational conditions, significantly increase the complexity of system development. Therefore, advanced development technologies are required to build robust and flexible system architectures capable of adapting to such changes. Moreover, powerful quantitative techniques are needed to assess the impact of these changes on various system characteristics. Architectural flexibility is achieved by embedding into the system design the mechanisms for identifying changes and reacting on them. Hence a resilient system should have both advanced monitoring and error detection capabilities to recognise changes as well as sophisticated reconfiguration mechanisms to adapt to them. The aim of such reconfiguration is to ensure that the system stays operational, i.e., remains capable of achieving its goals. Design, verification and assessment of the system reconfiguration mechanisms is a challenging and error prone engineering task. In this thesis, we propose and validate a formal framework for development and assessment of resilient systems. Such a framework provides us with the means to specify and verify complex component interactions, model their cooperative behaviour in achieving system goals, and analyse the chosen reconfiguration strategies. Due to the variety of properties to be analysed, such a framework should have an integrated nature. To ensure the system functional correctness, it should rely on formal modelling and verification, while, to assess the impact of changes on such properties as performance and reliability, it should be combined with quantitative analysis. To ensure scalability of the proposed framework, we choose Event-B as the basis for reasoning about functional correctness. Event-B is a statebased formal approach that promotes the correct-by-construction development paradigm and formal verification by theorem proving. Event-B has a mature industrial-strength tool support { the Rodin platform. Proof-based verification as well as the reliance on abstraction and decomposition adopted in Event-B provides the designers with a powerful support for the development of complex systems. Moreover, the top-down system development by refinement allows the developers to explicitly express and verify critical system-level properties. Besides ensuring functional correctness, to achieve resilience we also need to analyse a number of non-functional characteristics, such as reliability and performance. Therefore, in this thesis we also demonstrate how formal development in Event-B can be combined with quantitative analysis. Namely, we experiment with integration of such techniques as probabilistic model checking in PRISM and discrete-event simulation in SimPy with formal development in Event-B. Such an integration allows us to assess how changes and di erent recon guration strategies a ect the overall system resilience. The approach proposed in this thesis is validated by a number of case studies from such areas as robotics, space, healthcare and cloud domain.

Corporate Entrepreneurship in Healthcare Organizations: An explorative study of employees’ corporate entrepreneurial behavior, job satisfaction and turnover intention

The Finnish healthcare industry is currently facing significant challenges due to economic crises, aging population and major structural reforms, which have resulted in decreased job satisfaction and increased levels of turnover. This proposes that healthcare organizations need to come up with new, creative means to tackle these issues. Several researchers have argued that corporate entrepreneurship may be the necessary means to achieve this. As previous research has mainly focused on examining this concept from organizational perspective, this study looks at how it occurs on the level of individual employees. The purpose of this study is to examine how corporate entrepreneurship is manifested in individual behavior, and how this type of behavior is associated with the individual’s job satisfaction and turnover intention. Additionally, this study will examine the differences in corporate entrepreneurial behavior between private and public sector organizations, as previous research suggests that these two may be characterized differently. Data was collected with the help of a literature review as well as a survey study, which was sent out to a number of employees of four different healthcare organizations, out of which three were public and one was a private sector organization. Six distinct behavioral characteristics were recognized in previous research, which make up the measure for corporate entrepreneurial behavior. Principal components were formed from the different areas of the survey (corporate entrepreneurial behavior, job satisfaction, turnover intention), after which the association of these components were examined with linear regression analysis, which proved that corporate entrepreneurial behavior is positively correlated with both job satisfaction and intention to leave the organization. Differences between sectors were analyzed with analysis of variance and cross tabulation analysis, but neither of these suggested that any significant differences would occur. These results suggest that employees who behave entrepreneurially tend to be more satisfied with their jobs, but also consider leaving their current organizations more often than others. This may be due to the fact that healthcare organizations are not fertile for entrepreneurial behavior, which will drive entrepreneurial individuals looking for employers who may be more supportive of this type of behavior. With growing levels of dissatisfaction as well as little room for entrepreneurial behavior, the studied organizations may actually be in the process of losing those employees who have the ability and desire to behave in such manner, and who could very well be those who will eventually come up with solutions for the major challenges that these organizations are facing.

Healthcare Information System Selection Model for Medical Clinics

The issue of selecting an appropriate healthcare information system is a very essential one. If implemented healthcare information system doesn’t fit particular healthcare institution, for example there are unnecessary functions; healthcare institution wastes its resources and its efficiency decreases. The purpose of this research is to develop a healthcare information system selection model to assist the decision-making process of choosing healthcare information system. Appropriate healthcare information system helps healthcare institutions to become more effective and efficient and keep up with the times. The research is based on comparison analysis of 50 healthcare information systems and 6 interviews with experts from St-Petersburg healthcare institutions that already have experience in healthcare information system utilization. 13 characteristics of healthcare information systems: 5 key and 7 additional features are identified and considered in the selection model development. Variables are used in the selection model in order to narrow the decision algorithm and to avoid duplication of brunches. The questions in the healthcare information systems selection model are designed to be easy-to-understand for common a decision-maker in healthcare institution without permanent establishment.

Interoperability for IoT Health Systems Using HL7 Standard

Internet of Things or IoT is revolutionizing the world we are living in, similarly the way Internet and the web did few decades ago. It is changing how we interact with the things surrounding us. Electronic health and remote patient monitoring are the ways of utilizing these technological improvements towards the healthcare. There are many applications of IoT in eHealth such as, it will open the gate to provide healthcare to the remote areas of the world, where healthcare through traditional hospital systems cannot be provided. To connect these new eHealth IoT systems with the existing healthcare information systems, we can use the existing interoperability standards commonly used in healthcare information systems. In this thesis we implemented an eHealth IoT system based on Health Level 7 interoperability standard for continuous data transmission. There is not much previous work done in implementing the HL7 for continuous sensor data transmission. Some of the previous work was limited to sensors which are not continuous in nature and some of it is only theatrical architecture. This thesis aims to prove that it is possible to implement an eHealth IoT system by using sensors which require continues data transmission, such as respiratory sensors, and to connect it with the existing eHealth information system semantically by using HL7 interoperability standard. This system will be beneficial in implementing eHealth IoT systems for those patients, who requires continuous healthcare personal monitoring. This includes elderly people and patients, whose health need to be monitored constantly. To implement the architecture, HL7 v2.5 is selected due to its ease of implementation and low size. We selected some open source technologies because of their open licenses and large developer community. We will also review the most efficient technology available in every layer of eHealth IoT system and will propose an efficient system.

La programmation régionale des services ambulatoires de Laval : une avenue dans la responsabilisation populationnelle des soins de santé

Face aux pressions continues que subissent les systèmes de santé, de nombreuses réformes sont perpétuellement en cours pour améliorer le processus de soins et par conséquent, offrir des soins de qualité et accroître le niveau de santé des populations. Les réformes que connaissent actuellement les systèmes de santé visent à optimiser l’impact des services sur la santé de la population en introduisant le concept de la responsabilité populationnelle. Par ailleurs, il existe de plus en plus un consensus sur la nécessité d’établir une relation directe et durable entre les prestataires et la population des territoires desservies pour être en mesure de tenir compte des contextes personnels et sociaux des patients et de leurs familles et pour assurer la continuité des soins dans le temps et d’un service à l’autre. Cette thèse porte sur la Programmation régionale de services ambulatoires (PRSA) de Laval. Elle analyse cette programmation comme une solution innovatrice dans la mise en œuvre de la responsabilisation populationnelle des soins. La stratégie de recherche combine à la fois une revue intégrative de la littérature qui vise à analyser le bien-fondé de la PRSA; une étude quasi-expérimentale pour examiner ses effets; et enfin, une recherche synthétique de cas pour comprendre l’évolution de la PRSA et analyser l’institutionnalisation du changement dans les organisations de la santé. Dans le premier article, nous nous sommes employés à analyser le bien fondé c’est-à-dire la plausibilité des mécanismes causaux présumés. La PRSA est un modèle d’intégration régionale basée sur une approche populationnelle. La stratégie de réseaux intégrés de soins et de case management combinée avec une approche populationnelle telle que mise de l’avant par le PRSA sont trois éléments essentiels en faveur d’une responsabilité populationnelle des soins. À l’aide d’une revue intégrative de la littérature, nous avons démontré qu’il s’agit d’une programmation capable de consolider une intégration régionale en mettant de l’avant une approche populationnelle permettant de bien cibler les besoins des populations du territoire à desservir. Le deuxième article examine les effets populationnels de la PRSA en termes de réduction de la durée moyenne de séjour et de l’augmentation de la rétention régionale. Une approche quasi expérimentale a été utilisée. En ce qui concerne la durée moyenne de séjour, on n’observe aucune diminution pour l’asthme ni pour la démence. Par contre, il est plausible que l’implantation de la PRSA ait permis une diminution de la durée moyenne de séjour pour les maladies coronariennes, les MPOC, l’embolie pulmonaire et le cancer du sein. Pour la rétention régionale, aucun effet n’a été observé pour les MPOC, l’embolie pulmonaire et la démence. Une augmentation de la rétention régionale a été observée pour les maladies coronariennes, l’asthme et le cancer du sein. Cette augmentation pourrait être attribuée à la PRSA. Dans le troisième article, nous avons examiné les facteurs susceptibles d’expliquer l’évolution de la PRSA. En partant du point de vue des responsables de la programmation de la PRSA et les gestionnaires actuels de la programmation de services de la région de Laval, nous avons tenté de mieux cerner les facteurs qui ont provoqué la suspension du déploiement de la PRSA. Les résultats indiquent que les changements fréquents dans les structures dirigeantes du réseau de la santé ainsi que l’interférence de plusieurs autres réformes ont été un obstacle dans le maintien de la PRSA. Dans le contexte actuel des réformes en santé où l’approche de réseaux intégrés de soins et de responsabilité populationnelle sont mises de l’avant, les résultats de cette thèse apportent un éclairage certain sur l’opérationnalisation de ces orientations.

Social Policy Reforms in Turkey : Uses of Europe

Ce mémoire analyse trois réformes majeures de politique sociale en Turquie, en deux domaines: emploi et sécurité social. En utilisant l'approche "Usage de l'Europe", ce mémoire developpe une analyse empirique et apporte une explication théorique de ces changements qui ont été introduits au cours du processus d'adhésion de la Turquie à l'Union européenne. "Les usages de l'Europe" est une approche d'européanisation qui se concentre sur le rôle des acteurs domestiques, au sein des États membres et candidats, ainsi que de leur utilisation des ressources de l'Union européenne. Les études de cas utilisées dans cette thèse démontrent l'introduction de changements au niveau de l'État-providence; ainsi, l'approche originelle est suppléée par des concepts provenant de la littérature sur la politique partisane, les institutions formelles et l'héritage des politiques. Cette recherche utilise la méthode de l'analyse de processus pour suivre la réforme des règlements du travail par la voie de reconstitution des droits individuels des travailleurs et de l'Agence d'emploi en Turquie jusqu'en 2003, ainsi que la transformation du système de sécurité sociale en 2008. Ces trois réformes représentent des changements majeurs tant sur le plan institutionnel que politique en Turquie depuis 2001. Afin de comprendre "les usages de l'Europe" dans ces réformes politiques, l'analyse empirique questionne, si, quand et comment les acteurs turcs ont utilisé les ressources, les références et les développements politiques de l'Union européenne lors de ce processus dynamique de réforme. Les réformes du système de sécurité sociale, des règlements du travail, en plus de la reconstitution de l'Agence d'emploi étaient à l'ordre du jour en Turquie depuis les années 1990. La réforme des règlements du travail ont entraîné l'introduction des accommodements flexibles au travail et une révision de la Loi du travail permettant l'établissement d'une législation de la sécurité d'emploi. La reconstitution de l'Agence d'emploi visait à remplacer la vieille institution défunte par une institution moderne afin d'introduire des politiques d'activation. La réforme de sécurité sociale comprend les pensions de retraite, le système de santé ainsi que l'administration des institutions de sécurité sociale. Les principaux résultats révèlent que la provision des ressources de l'Union européenne en Turquie a augmenté à partir de la reconnaissance de sa candidature en 1999 et ce, jusqu'au lancement des négociations pour son adhésion en 2005; ce qui fut une occasion favorable pour les acteurs domestiques impliqués dans les processus de réformes. Cependant, à l'encontre de certaines attentes originelles de l'approche de "les usages de l'Europe", les résultats de cette recherche démontrent que le temps et le sort de "les usages de l'Europe" dépendent des intérêts des acteurs domestiques, ainsi de leurs stratégies tout au long de ce processus de réforme, plutôt que des phases du processus ou la quantité des ressources fournies par l'Union européenne.

Reforming Federal Systems: Insights from Australia, Canada, Germany and Switzerland

Série de l'Observatoire des fédérations

Effect of management strategies on the performance of ruminant livestock production systems and the safety of plant and animal products in the city of Sikasso, Mali

The regional population growth in West Africa, and especially its urban centers, will bring about new and critical challenges for urban development policy, especially in terms of ensuring food security and providing employment for the growing population. (Peri-) urban livestock and vegetable production systems, which can contribute significantly to these endeavours, are limited by various constraints, amongst them limited access to expensive production factors and their (in)efficient use. To achieve sustainable production systems with low consumer health risks, that can meet the urban increased demand, this doctoral thesis determined nutrient use efficiencies in representative (peri-) urban livestock production systems in three West African cities, and investigated potential health risks for consumers ensuing from there. The field study, which was conducted during July 2007 to December 2009, undertook a comparative analysis of (peri-) urban livestock production strategies across 210 livestock keeping households (HH) in the three West African cities of Kano/Nigeria (84 HH), Bobo Dioulasso/Burkina Faso (63 HH) and Sikasso/Mali (63 HH). These livestock enterprises were belonging to the following three farm types: commercial gardening plus field crops and livestock (cGCL; 88 HH), commercial livestock plus subsistence field cropping (cLsC; 109 HH) and commercial gardening plus semi-commercial livestock (cGscL; 13 HH) which had been classified in a preceding study; they represented the diversity of (peri-) urban livestock production systems in West Africa. In the study on the efficiency of ruminant livestock production, lactating cowsand sheep herd units were differentiated based on whether feed supplements were offered to the animals at the homestead (Go: grazing only; Gsf: mainly grazing plus some supplement feeding). Inflows and outflows of nutrients were quantified in these herds during 18 months, and the effects of seasonal variations in nutrient availability on animals’ productivity and reproductive performance was determined in Sikasso. To assess the safety of animal products and vegetables, contamination sources of irrigated lettuce and milk with microbiological contaminants, and of tomato and cabbage with pesticide residues in (peri-) urban agriculture systems of Bobo Dioulasso and Sikasso were characterized at three occasions in 2009. Samples of irrigation water, organic fertilizer and ix lettuce were collected in 6 gardens, and samples of cabbage and tomato in 12 gardens; raw and curdled milk were sampled in 6 dairy herds. Information on health risks for consumers of such foodstuffs was obtained from 11 health centers in Sikasso. In (peri-) urban livestock production systems, sheep and goats dominated (P<0.001) in Kano compared to Bobo Dioulasso and Sikasso, while cattle and poultry were more frequent (P<0.001) in Bobo Dioulasso and Sikasso than in Kano. Across cities, ruminant feeding relied on grazing and homestead supplementation with fresh grasses, crop residues, cereal brans and cotton seed cake; cereal grains and brans were the major ingredients of poultry feeds. There was little association of gardens and livestock; likewise field cropping and livestock were rarely integrated. No relation existed between the education of the HH head and the adoption of improved management practices (P>0.05), but the proportion of HH heads with a long-term experience in (peri-) urban agriculture was higher in Kano and in Bobo Dioulasso than in Sikasso (P<0.001). Cattle and sheep fetched highest market prices in Kano; unit prices for goats and chicken were highest in Sikasso. Animal inflow, outflow and dairy herd growth rates were significantly higher (P<0.05) in the Gsf than in the Go cattle herds. Maize bran and cottonseed expeller were the main feeds offered to Gsf cows as dry-season supplement, while Gsf sheep received maize bran, fresh grasses and cowpea pods. The short periodic transhumance of Go dairy cows help them maintaining their live weight, whereas Gsf cows lost weight during the dry season despite supplement feeding at a rate of 1506 g dry matter per cow and day, resulting in low productivity and reproductive performance. The daily live weight gains of calves and lambs, respectively, were low and not significantly different between the Go and the Gsf system. However, the average live weight gains of lambs were significantly higher in the dry season (P<0.05) than in the rainy season because of the high pressure of gastrointestinal parasites and of Trypanosoma sp. In consequence, 47% of the sheep leaving the Go and Gsf herds died due to diseases during the study period. Thermo-tolerant coliforms and Escherichia coli contamination levels of irrigation water significantly exceeded WHO recommendations for the unrestricted irrigation of vegetables consumed raw. Microbial contamination levels of lettuce at the farm gate and the market place in Bobo Dioulasso and at the farm gate in Sikasso were higher than at the market place in Sikasso (P<0.05). Pesticide residues were detected in only one cabbage and one tomato sample and were below the maximum residue limit for consumption. Counts of thermo-tolerant coliforms and Escherichia coli were higher in curdled than in raw milk (P<0.05). From 2006 to x 2009, cases of diarrhea/vomiting and typhoid fever had increased by 11% and 48%, respectively, in Sikasso. For ensuring economically successful and ecologically viable (peri-) urban livestock husbandry and food safety of (peri-) urban foodstuffs of animal and plant origin, the dissemination and adoption of improved feeding practices, livestock healthcare and dung management are key. In addition, measures fostering the safety of animal products and vegetables including the appropriate use of wastewater in (peri-) urban agriculture, restriction to approve vegetable pesticides and the respect of their latency periods, and passing and enforcement of safety laws is required. Finally, the incorporation of environmentally sound (peri-) urban agriculture in urban planning by policy makers, public and private extension agencies and the urban farmers themselves is of utmost importance. To enable an efficient (peri-) urban livestock production in the future, research should concentrate on cost-effective feeding systems that allow meeting the animals’ requirement for production and reproduction. Thereby focus should be laid on the use of crop-residues and leguminous forages. The improvement of the milk production potential through crossbreeding of local cattle breeds with exotic breeds known for their high milk yield might be an accompanying option, but it needs careful supervision to prevent the loss of the local trypanotolerant purebreds.

Health informatics: improving patient-centred healthcare pathway

Nowadays the use of information and communication technology is becoming prevalent in many aspects of healthcare services from patient registration, to consultation, treatment and pathology tests request. Manual interface techniques have dominated data-capture activities in primary care and secondary care settings for decades. Despites the improvements made in IT, usability issues still remain over the use of I/O devices like the computer keyboard, touch-sensitive screens, light pen and barcodes. Furthermore, clinicians have to use several computer applications when providing healthcare services to patients. One of the problems faced by medical professionals is the lack of data integrity between the different software applications which in turn can hinder the provision of healthcare services tailored to the needs of the patients. The use of digital pen and paper technology integrated with legacy medical systems hold the promise of improving healthcare quality. This paper discusses the issue of data integrity in e-health systems and proposes the modelling of "Smart Forms" via semiotics to potentially improve integrity between legacy systems, making the work of medical professionals easier and improve the quality of care in primary care practices and hospitals.

Priority setting in healthcare: from arbitrariness to societal values

This paper develops an account of the normative basis of priority setting in health care as combining the values which a given society holds for the common good of its members, with the universal provided by a principle of common humanity. We discuss national differences in health basket in Europe and argue that health care decision-making in complex social and moral frameworks is best thought of as anchored in such a principle by drawing on the philosophy of need. We show that health care needs are ethically ‘thick’ needs whose psychological and social construction can best be understood in terms of David Wiggins's notion of vital need: a person's need is vital when failure to meet it leads to their harm and suffering. The moral dimension of priority setting which operates across different societies’ health care systems is located in the demands both of and on any society to avoid harm to its members.

Changing building user attitude and organisational policy towards sustainable resource use in healthcare

Health care provision is significantly impacted by the ability of the health providers to engineer a viable healthcare space to support care stakeholders needs. In this paper we discuss and propose use of organisational semiotics as a set of methods to link stakeholders to systems, which allows us to capture clinician activity, information transfer, and building use; which in tern allows us to define the value of specific systems in the care environment to specific stakeholders and the dependence between systems in a care space. We suggest use of a semantically enhanced building information model (BIM) to support the linking of clinician activity to the physical resource objects and space; and facilitate the capture of quantifiable data, over time, concerning resource use by key stakeholders. Finally we argue for the inclusion of appropriate stakeholder feedback and persuasive mechanism, to incentivise building user behaviour to support organisational level sustainability policy.

An organisational semiotics inspired information architecture: pervasive healthcare as a case study

Information architecture (IA) is defined as high level information requirements of an organisation. It is applied in areas such as information systems development, enterprise architecture, business processes management and organisational change management. Still, the lack of methods and theories prevents information architecture becoming a distinct discipline. Healthcare organisation is always seen as information intensive organisation, moreover in a pervasive healthcare environment. Pervasive healthcare aims to provide healthcare services to anyone, anywhere and anytime by incorporating mobile devices and wireless network. Information architecture hence plays an important role in information provisioning within the context of pervasive healthcare in order to support decision making and communication between clinician and patients. Organisational semiotics is one of the social technical approaches that contemplate information through the norms or activities performed within an organisation prior to pervasive healthcare implementation. This paper proposes a conceptual design of information architecture for pervasive healthcare. It is illustrated with a scenario of mental health patient monitoring.

A multi-agent system for pervasive healthcare

Wireless technology based pervasive healthcare has been proposed in many applications such as disease management and accident prevention for cost saving and promoting citizen’s wellbeing. However, the emphasis so far is on the artefacts with limited attentions to guiding the development of an effective and efficient solution for pervasive healthcare. Therefore, this paper aims to propose a framework of multi-agent systems design for pervasive healthcare by adopting the concept of pervasive informatics and using the methods of organisational semiotics. The proposed multi-agent system for pervasive healthcare utilises sensory information to support healthcare professionals for providing appropriate care. The key contributions contain theoretical aspect and practical aspect. In theory, this paper articulates the information interactions between the pervasive healthcare environment and stakeholders by using the methods of organisational semiotics; in practice, the proposed framework improves the healthcare quality by providing appropriate medical attentions when and as needed. In this paper, both systems and functional architecture of the multi-agent system are elaborated with the use of wireless technologies such as RFID and wireless sensor networks. The future study will focus on the implementation of the proposed framework.

A normative method to analyse workarounds in a healthcare environment: motivations, consequences, and constraints

Healthcare information systems have the potential to enhance productivity, lower costs, and reduce medication errors by automating business processes. However, various issues such as system complexity and system abilities in a relation to user requirements as well as rapid changes in business needs have an impact on the use of these systems. In many cases failure of a system to meet business process needs has pushed users to develop alternative work processes (workarounds) to fill this gap. Some research has been undertaken on why users are motivated to perform and create workarounds. However, very little research has assessed the consequences on patient safety. Moreover, the impact of performing these workarounds on the organisation and how to quantify risks and benefits is not well analysed. Generally, there is a lack of rigorous understanding and qualitative and quantitative studies on healthcare IS workarounds and their outcomes. This project applies A Normative Approach for Modelling Workarounds to develop A Model of Motivation, Constraints, and Consequences. It aims to understand the phenomenon in-depth and provide guidelines to organisations on how to deal with workarounds. Finally the method is demonstrated on a case study example and its relative merits discussed.