Revues anglophones

Meshed DC microgrid hierarchical control: A differential flatness approach
Zafeiratou I. and Prodan, I. and Lefèvre, L. and Piétrac, L.
Electric Power Systems Research
2020, vol. 180

In this paper, a meshed DC microgrid control architecture whose goal is to manage load balancing and efficient power distribution is introduced. A novel combination of port-Hamiltonian (PH) modeling with differential flatness and B-splines parametrization is introduced and shown to improve the microgrid's performance. A three layer supervision structure is considered: (i) B-spline parametrized flat output provide continuous profiles for load balancing and price reduction (high level); (ii) the profiles are tracked through a MPC implementation with stability guarantees (medium level); (iii) explicit switching laws applied to the DC/DC converters ensure appropriate power injection. Each level functions at a different time-scale (from slow to fast), and the control laws are chosen appropriately. The effectiveness of the proposed approach is evaluated by simulations over a DC microgrid composed by a collection of solar panels (PV), an energy storage system (ES), a utility grid (UG) and a consumers’ demand.

@Article{Zafeiratou-2020-epsr,
  author    = {Zafeiratou, I. and and Prodan, I. and Lefèvre, L. and Piétrac, L.},
  journal   = {Electric Power Systems Research},
  title     = {Meshed DC microgrid hierarchical control: A differential flatness approach},
  year      = {2020},
  issn      = {0378-7796},
  month     = mar,
  pages     = {106--133},
  volume    = {180},
  abstract  = {In this paper, a meshed DC microgrid control architecture whose goal is to manage load balancing and efficient power distribution is introduced. A novel combination of port-Hamiltonian (PH) modeling with differential flatness and B-splines parametrization is introduced and shown to improve the microgrid's performance. A three layer supervision structure is considered: (i) B-spline parametrized flat output provide continuous profiles for load balancing and price reduction (high level); (ii) the profiles are tracked through a MPC implementation with stability guarantees (medium level); (iii) explicit switching laws applied to the DC/DC converters ensure appropriate power injection. Each level functions at a different time-scale (from slow to fast), and the control laws are chosen appropriately. The effectiveness of the proposed approach is evaluated by simulations over a DC microgrid composed by a collection of solar panels (PV), an energy storage system (ES), a utility grid (UG) and a consumers’ demand.},
  doi       = {10.1016/j.epsr.2019.106133},
  keywords  = {DC microgrid, Meshed topology, Port-Hamiltonian systems, Differential flatness, Hierarchical control, Power balancing, RI, Ref2},
}
An implementation method for the supervisory control of time-driven systems applied to high-voltage direct current transmission grids
Romero Rodriguez, M. and Delpoux, R. and Piétrac, L. and Dai, J. and Benchaib, A. and Niel, É.
Control Engineering Practice
2019, vol. 82

In recent years, the growth of renewable energy production has encouraged the development of new technologies, such as High-Voltage Direct Current (HVDC) networks, that enhance the integration of such energy sources to power transmission grids. However, this type of technology introduces new challenges in the way power transmission systems are controlled and operated, as faster and more complex control strategies will be needed in a domain which nowadays relies heavily on human decisions. In this context, Discrete Event Systems (DES) modeling and Supervisory Control Theory (SCT) are powerful tools for the development of a supervisory control to be deployed in the grid. This paper presents an application of the SCT to HVDC grids and proposes an implementation method for the resulting supervisors. The proposed method is capable of integrating decentralized and discrete-event controllers that interact with the continuous-time physical system. The language chosen for the implementation is C code, as it can be easily incorporated in power system simulation software, such as EMTP-RV. The method is validated by the simulation of the start-up of a point-to-point link in the EMTP-RV software.

@Article{Romero-2019-cep,
  author    = {Romero Rodriguez, M. and Delpoux, R. and Piétrac, L. and Dai, J. and Benchaib, A. and Niel, É.},
  title     = {An implementation method for the supervisory control of time-driven systems applied to high-voltage direct current transmission grids},
  journal   = {Control Engineering Practice},
  year      = {2019},
  volume    = {82},
  pages     = {97--107},
  month     = jan,
  abstract  = {In recent years, the growth of renewable energy production has encouraged the development of new technologies, such as High-Voltage Direct Current (HVDC) networks, that enhance the integration of such energy sources to power transmission grids. However, this type of technology introduces new challenges in the way power transmission systems are controlled and operated, as faster and more complex control strategies will be needed in a domain which nowadays relies heavily on human decisions. In this context, Discrete Event Systems (DES) modeling and Supervisory Control Theory (SCT) are powerful tools for the development of a supervisory control to be deployed in the grid. This paper presents an application of the SCT to HVDC grids and proposes an implementation method for the resulting supervisors. The proposed method is capable of integrating decentralized and discrete-event controllers that interact with the continuous-time physical system. The language chosen for the implementation is C code, as it can be easily incorporated in power system simulation software, such as EMTP-RV. The method is validated by the simulation of the start-up of a point-to-point link in the EMTP-RV software.},
  doi       = {10.1016/j.conengprac.2018.10.002},
  keywords  = {Discrete event systems, Supervisory control theory, Control implementation, HVDC transmission systems, EMTP-RV, Computer programming languages, RI, Ref2},
  publisher = {Elsevier {BV}},
}
Comparing lithium-ion battery architecture performances with {Colored Petri Net}
Savard, C. and Piétrac, L. and Venet, P. and Sari, A. and Niel, É.
SN Applied Sciences
2019, vol. 1, n°12

Conventionally, the basic cells constituting the multicellular energy storage systems are modeled by electrical schemes based on Thevenin’s model. Other, more complex models incorporate the aging phenomena, resulting in a decrease in the State of Health of each cell. All these models remain analytical models and not discrete event systems. In this article, a discrete model is proposed, by detailing how each physical parameter is modeled. It is based on a no-timed Colored High-Level Petri Net. An example of a battery is simulated to validate this theoretical model. Its structure (number of cells) is declined under different architectures (connections between the cells) and is subjected to different resource dynamic allocation strategies. This Petri Net (PN) model makes easy, by adding a sub-network, to simulate different control laws and different resource management algorithms, whether or not allow commutations by forbiding all configurations that do not meet the specification or that will lead to accelerated cell aging. PN is used as a tool for comparing hardware architectures and cell control logic for a battery. Various conventional and innovative architecture are simulate. Different control laws can be compared in terms of performance, as lifespan and use of resources.

@Article{Savard-2019-sn,
  author    = {Savard, C. and Piétrac, L. and Venet, P. and Sari, A. and Niel, É.},
  journal   = {SN Applied Sciences},
  title     = {Comparing lithium-ion battery architecture performances with {Colored Petri Net}},
  year      = {2019},
  issn      = {2523-3971},
  month     = nov,
  number    = {12},
  pages     = {1691},
  volume    = {1},
  abstract  = {Conventionally, the basic cells constituting the multicellular energy storage systems are modeled by electrical schemes based on Thevenin’s model. Other, more complex models incorporate the aging phenomena, resulting in a decrease in the State of Health of each cell. All these models remain analytical models and not discrete event systems. In this article, a discrete model is proposed, by detailing how each physical parameter is modeled. It is based on a no-timed Colored High-Level Petri Net. An example of a battery is simulated to validate this theoretical model. Its structure (number of cells) is declined under different architectures (connections between the cells) and is subjected to different resource dynamic allocation strategies. This Petri Net (PN) model makes easy, by adding a sub-network, to simulate different control laws and different resource management algorithms, whether or not allow commutations by forbiding all configurations that do not meet the specification or that will lead to accelerated cell aging. PN is used as a tool for comparing hardware architectures and cell control logic for a battery. Various conventional and innovative architecture are simulate. Different control laws can be compared in terms of performance, as lifespan and use of resources.},
  doi       = {10.1007/s42452-019-1723-6},
}
A formal framework for the safe design of the autonomous driving supervision
Cuer, R. and Piétrac, L. and Niel, E. and Diallo, S. and Minoiu-Enache, N. and Dang-Van-Nhan, C.
Reliability Engineering and System Safety
2018, vol. 174

The autonomous vehicle is meant to drive by itself, without any driver intervention (for the levels 4 and 5 of automated driving, according to the National Highway Traffic Safety Administration(NHTSA)). This car includes a new function, called Autonomous Driving (AD) function, in charge of driving the vehicle when it is authorized. This function may be in different states (basically active or inactive), that shall be managed by a sub-function, named supervision. The main focus of this work is to ensure that the supervision of a function, performed by a safety critical embedded automotive control system (controlled systems are not considered), respects functional and safety requirements. Usually two processes are involved in the system design: the systems engineering pro- cess and the safety one. The first process defines the functional requirements on the function while the safety one specifies redundant sub-functions (realizing together the function) allowing to ensure a continuous service under failure. Since two different aspects of the system are specified, it is a major challenge to make all requirements consistent, from the outset of the design process. In this paper, a method is precisely proposed to address this issue. A progressive reinforcement of the treated requirements is achieved by means of formal state models. In fact, the proposed approach permits to build state models from requirements initially expressed in natural lan- guage. Potential ambiguities, incompletenesses or undertones in requirements are in this way gradually deleted. The enrichment of conventional formal verification of control properties with safety requirements constitutes the main originality of the deployed method and contributes to solve inconsistencies between functional and safety verification processes. In addition, the application of the method to the design of AD function supervision highlights its efficiency in an industrial context.

@Article{Cuer-2018-ress,
  author        = {Cuer, R. and Pi\'etrac, L. and Niel, E. and Diallo, Saidou and Minoiu-Enache, Nicoleta and Dang-Van-Nhan, Christophe},
  title         = {A formal framework for the safe design of the autonomous driving supervision},
  journal       = {Reliability Engineering and System Safety},
  year          = {2018},
  volume        = {174},
  pages         = {29--40},
  month         = jun,
  abstract      = {The autonomous vehicle is meant to drive by itself, without any driver intervention (for the levels 4 and 5 of automated driving, according to the National Highway Traffic Safety Administration(NHTSA)). This car includes a new function, called Autonomous Driving (AD) function, in charge of driving the vehicle when it is authorized. This function may be in different states (basically active or inactive), that shall be managed by a sub-function, named supervision. The main focus of this work is to ensure that the supervision of a function, performed by a safety critical embedded automotive control system (controlled systems are not considered), respects functional and safety requirements. Usually two processes are involved in the system design: the systems engineering pro- cess and the safety one. The first process defines the functional requirements on the function while the safety one specifies redundant sub-functions (realizing together the function) allowing to ensure a continuous service under failure. Since two different aspects of the system are specified, it is a major challenge to make all requirements consistent, from the outset of the design process. In this paper, a method is precisely proposed to address this issue. A progressive reinforcement of the treated requirements is achieved by means of formal state models. In fact, the proposed approach permits to build state models from requirements initially expressed in natural lan- guage. Potential ambiguities, incompletenesses or undertones in requirements are in this way gradually deleted. The enrichment of conventional formal verification of control properties with safety requirements constitutes the main originality of the deployed method and contributes to solve inconsistencies between functional and safety verification processes. In addition, the application of the method to the design of AD function supervision highlights its efficiency in an industrial context.}
}

Comparison of battery architecture dependability
Savard, C. and Venet, P. and Niel, É. and Piétrac, L. and Sari, A.
SN Applied Sciences
2018, vol. 4, n°3

This paper presents various solutions for organizing an accumulator battery. It examines three different architectures: series-parallel, parallel-series and C3C architecture, which spread the cell output current flux to three other cells. Alternatively, to improve a several cell system reliability, it is possible to insert more cells than necessary and soliciting them less. Classical RAMS (Reliability, Availability, Maintainability, Safety) solutions can be deployed by adding redundant cells or by tolerating some cell failures. With more cells than necessary, it is also possible to choose active cells by a selection algorithm and place the others at rest. Each variant is simulated for the three architectures in order to determine the impact on battery-operative dependability, that is to say the duration of how long the battery complies specifications. To justify that the conventional RAMS solutions are not deployed to date, this article examines the influence on operative dependability. If the conventional variants allow to extend the moment before the battery stops to be operational, using an algorithm with a suitable optimization criterion further extend the battery mission time.

@Article{Savard-2018-batteries,
  author    = {Savard, C. and Venet, P. and Niel, É. and Piétrac, L. and Sari, A.},
  title     = {Comparison of battery architecture dependability},
  journal   = {Batteries},
  year      = {2018},
  volume    = {4},
  number    = {3},
  issn      = {2313-0105},
  abstract  = {This paper presents various solutions for organizing an accumulator battery. It examines three different architectures: series-parallel, parallel-series and C3C architecture, which spread the cell output current flux to three other cells. Alternatively, to improve a several cell system reliability, it is possible to insert more cells than necessary and soliciting them less. Classical RAMS (Reliability, Availability, Maintainability, Safety) solutions can be deployed by adding redundant cells or by tolerating some cell failures. With more cells than necessary, it is also possible to choose active cells by a selection algorithm and place the others at rest. Each variant is simulated for the three architectures in order to determine the impact on battery-operative dependability, that is to say the duration of how long the battery complies specifications. To justify that the conventional RAMS solutions are not deployed to date, this article examines the influence on operative dependability. If the conventional variants allow to extend the moment before the battery stops to be operational, using an algorithm with a suitable optimization criterion further extend the battery mission time.},
  doi       = {10.3390/batteries4030031},
  keywords  = {battery, operative dependability, selection algorithm, RI, Ref2},
}
Synthesizing safe control-command systems out of reusable components
Hajjar, S. and Dumitrescu, E. and Piétrac, L. and Niel, E.
Control Engineering Practice
2015, vol. 44

This paper presents a safe design method for control-command embedded systems. It investigates the problem of building control-command systems out of Commercial off the shelf (COTS) components. The design method proposed uses in synergy the formal verification (FV) and the Discrete Controller Synthesis (DCS) techniques. COTS are formally specified using temporal logic and/or executable observers. New functions are built by assembling COTS together. As the COTS assembly operation is seldom error-free, behavioral incompatibilities may persist between COTS. For these reasons, COTS assemblies need to be formally verified and if errors are found, an automatic correction is attempted using DCS. The control-command code generated by DCS needs hardware specific post-processing: a structural decomposition, followed by a controllability assessment, followed by a dedicated formal verification step, ensuring that no spurious behavior is added by DCS. The resulting system is ready for hardware (e.g. FPGA) implementation.

@Article{Hajjar-2015-cep,
  Title                    = {Synthesizing safe control-command systems out of reusable components},
  Author                   = {Hajjar, S. and Dumitrescu, E. and Pi\'etrac, L. and Niel, E.},
  Journal                  = {Control Engineering Practice},
  Year                     = {2015},
  Month                    = {5},
  Pages                    = {243--259},
  Volume                   = {44},
  Abstract                 = {This paper presents a safe design method for control-command embedded systems. It investigates the problem of building control-command systems out of Commercial off the shelf (COTS) components. The design method proposed uses in synergy the formal verification (FV) and the Discrete Controller Synthesis (DCS) techniques. COTS are formally specified using temporal logic and/or executable observers. New functions are built by assembling COTS together. As the COTS assembly operation is seldom error-free, behavioral incompatibilities may persist between COTS. For these reasons, COTS assemblies need to be formally verified and if errors are found, an automatic correction is attempted using DCS. The control-command code generated by DCS needs hardware specific post-processing: a structural decomposition, followed by a controllability assessment, followed by a dedicated formal verification step, ensuring that no spurious behavior is added by DCS. The resulting system is ready for hardware (e.g. FPGA) implementation.}
}

Scheduling Operations in a Flow Network with Flexible Preventive Maintenance: A (max, +) Approach
Quintero, K. and Niel, E. and Aguilar, J. and Piétrac, L.
Engineering Letters
2014, vol. 22, n°1

The following work proposes a (max,+) optimization model for scheduling operations on an oil seaport considering flexible maintenance activities on valves. The work is based on previous results for the same case study, where fixed maintenance was studied in the framework of scheduling oil transfer operations through a pipeline network. The case study is a Venezuelan seaport for oil export and real operational constraints and goals are modeled. Results corroborate the drawbacks that arise when considering fixed maintenance in the system. Moreover, the adjustments made to obtain a model considering maintenance relaxation are straightforward and intuitive. Some linear representations of the problem are also explored through prioritization of certain tasks.

@Article{Quintero-2014-el,
  Title                    = {Scheduling Operations in a Flow Network with Flexible Preventive Maintenance: A (max, +) Approach},
  Author                   = {Quintero, K. and Niel, E. and Aguilar, J. and Piétrac, L.},
  Journal                  = {Engineering Letters},
  Year                     = {2014},
  Month                    = {2},
  Number                   = {1},
  Volume                   = {22},
  Abstract                 = {The following work proposes a (max,+) optimization model for scheduling operations on an oil seaport considering flexible maintenance activities on valves. The work is based on previous results for the same case study, where fixed maintenance was studied in the framework of scheduling oil transfer operations through a pipeline network. The case study is a Venezuelan seaport for oil export and real operational constraints and goals are modeled. Results corroborate the drawbacks that arise when considering fixed maintenance in the system. Moreover, the adjustments made to obtain a model considering maintenance relaxation are straightforward and intuitive. Some linear representations of the problem are also explored through prioritization of certain tasks.},
  File                     = {Quintero-2014-el.pdf:Quintero-2014-el.pdf:PDF},
  Keywords                 = {algebraic modeling, schedule optimization, pipeline networks, (max,+) algebra.},
  Owner                    = {L. Piétrac},
  Timestamp                = {2014.02.17},
  Url                      = {www.engineeringletters.com/issues_v22/issue_1/index.html}
}

Formal Approach to Multimodal Control Design: Application to Mode Switching
Faraut, G. and Piétrac, L. and Niel, É.
IEEE Transactions on Industrial Informatics
2009, vol. 5, n°4

A framework based on Supervisory Control Theory (SCT) is proposed to assist the design of multi-modal control for discrete-event systems (DESs). Our purpose handled modes which are conceptualized by using multi-model approach. Each mode represents a running part of the system, depending on the requirements to enforce and resources to activate. The resulted framework aims to design each mode independently first, and resolves conflicting connections between them secondly. The proposal carries out a formal way to build the final ready-to-use control laws. A flexible manufacturing system illustrates this approach.

@Article{Faraut-2009-tii,
  Title                    = {Formal Approach to Multimodal Control Design: Application to Mode Switching},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Journal                  = {IEEE Transactions on Industrial Informatics},
  Year                     = {2009},
  Number                   = {4},
  Pages                    = {443--453},
  Volume                   = {5},
  Abstract                 = {A framework based on Supervisory Control Theory (SCT) is proposed to assist the design of multi-modal control for discrete-event systems (DESs). Our purpose handled modes which are conceptualized by using multi-model approach. Each mode represents a running part of the system, depending on the requirements to enforce and resources to activate. The resulted framework aims to design each mode independently first, and resolves conflicting connections between them secondly. The proposal carries out a formal way to build the final ready-to-use control laws. A flexible manufacturing system illustrates this approach.},
  File                     = {Faraut-2009-tii.pdf:Faraut-2009-tii.pdf:PDF},
  Keywords                 = {test, RI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.04}
}

Repulsive/Attractive Discrete State Space Sets for Switching Management
Kamach, O. and Piétrac, L. and Niel, É.
Studies in Informatics and Control Journal
2007, vol. 16, n°1

This paper deals with operating mode management of Discrete Event Systems (DES) and this contribution is based on Supervisory Control Theory (SCT). Our aim is to extend SCT by introducing a mechanism for managing different operating modes for the controlled system. An operating mode corresponds to a specific system structure (engagement or disengagement of different system components) and specified tasks. Mode management will consist in controlling switching between modes with a view to handling models of reasonable size. Our approach is a multi-model one and involves representing a complex system by a set of simple models, each of which describes the system in a given operating mode. The adopted approach assumes that only one attempted operating mode is activated at a time, whilst other modes must be deactivated. The switching problem may be defined as finding compatible states, when controlled system behavior switches from one operating mode to another. The major contribution of this paper is the avoidance of switching from states (called forbidden states) with ghost compatible states in the selected operating mode. These states are called ghost because their existence would potentially violate a defined selected mode specification.

@Article{Kamach-2007-sicj,
  Title                    = {Repulsive/Attractive Discrete State Space Sets for Switching Management},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Journal                  = {Studies in Informatics and Control Journal},
  Year                     = {2007},
  Number                   = {1},
  Volume                   = {16},
  Abstract                 = {This paper deals with operating mode management of Discrete Event Systems (DES) and this contribution is based on Supervisory Control Theory (SCT). Our aim is to extend SCT by introducing a mechanism for managing different operating modes for the controlled system. An operating mode corresponds to a specific system structure (engagement or disengagement of different system components) and specified tasks. Mode management will consist in controlling switching between modes with a view to handling models of reasonable size. Our approach is a multi-model one and involves representing a complex system by a set of simple models, each of which describes the system in a given operating mode. The adopted approach assumes that only one attempted operating mode is activated at a time, whilst other modes must be deactivated. The switching problem may be defined as finding compatible states, when controlled system behavior switches from one operating mode to another. The major contribution of this paper is the avoidance of switching from states (called forbidden states) with ghost compatible states in the selected operating mode. These states are called ghost because their existence would potentially violate a defined selected mode specification.},
  File                     = {Kamach-2007-sicj.pdf:Kamach-2007-sicj.pdf:PDF},
  Keywords                 = {RI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Multi-Model approach to Discrete Events Systems: Application to operating mode management
Kamach, O. and Piétrac, L. and Niel, É.
Mathematics and Computers in Simulation
2005, vol. 70, n°5-6

In this paper, we propose a framework for designing suitable switching control decisions for discrete event systems (DES) whose structures change as they develop in different operating modes. Control decisions consist of either an event in a sequence to occur enabling an event or preventing the event from taking place disabling an event. Our contribution enables to adopt different modeling approaches and ensures switching between all designed process models when there is commutation between the operating modes. Thus, in the context of supervisory control theory (SCT), we propose that each model automaton represents process functionning in a specific operating mode. Specifications imposed on any operating mode could be conflicting. An attractive alternative is switching control, in which a different controller is applied to each operating mode. Control of process functionning means that both process and specification models must be associated with one specific operating mode. Based on supervisory control theory, our work focuses on operating mode management in particular when the process is subject to failure. The adopted approach (multi-model) assumes that only one attempted operating mode is activated at any one time, while the others are considered desactivated. The problem of commutation and tracking between all designed models (process and specification) is formalised by the proposed framework. In this context, several questions are raised. Is the process engaged in a state which is compatible with the atteined mode ? Are the specifications consistant with each starting state ?. Are the specification conflicting ? Can all defined states be reachable ? To answer correctly these questions, a mode switching mechanism must be formalised.

@Article{Kamach-2005-mcs,
  Title                    = {Multi-Model approach to Discrete Events Systems: Application to operating mode management},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Journal                  = {Mathematics and Computers in Simulation},
  Year                     = {2005},
  Number                   = {5--6},
  Pages                    = {394--407},
  Volume                   = {70},
  Abstract                 = {In this paper, we propose a framework for designing suitable switching control decisions for discrete event systems (DES) whose structures change as they develop in different operating modes. Control decisions consist of either an event in a sequence to occur enabling an event or preventing the event from taking place disabling an event. Our contribution enables to adopt different modeling approaches and ensures switching between all designed process models when there is commutation between the operating modes. Thus, in the context of supervisory control theory (SCT), we propose that each model automaton represents process functionning in a specific operating mode. Specifications imposed on any operating mode could be conflicting. An attractive alternative is switching control, in which a different controller is applied to each operating mode. Control of process functionning means that both process and specification models must be associated with one specific operating mode. Based on supervisory control theory, our work focuses on operating mode management in particular when the process is subject to failure. The adopted approach (multi-model) assumes that only one attempted operating mode is activated at any one time, while the others are considered desactivated. The problem of commutation and tracking between all designed models (process and specification) is formalised by the proposed framework. In this context, several questions are raised. Is the process engaged in a state which is compatible with the atteined mode ? Are the specifications consistant with each starting state ?. Are the specification conflicting ? Can all defined states be reachable ? To answer correctly these questions, a mode switching mechanism must be formalised.},
  File                     = {Kamach-2005-mcs.pdf:Kamach-2005-mcs.pdf:PDF},
  Keywords                 = {RI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Ouvrages ou chapitres d'ouvrages

A Cost-Criticality Based (Max,+) Optimization Model for Operations Scheduling
Quintero, K. and Niel, É. and Aguilar, J. and Piétrac, L.
Transactions on Engineering Technologies
2014, p. 645-660

The following work proposes a (max, +) optimization model for scheduling batch transfer operations in a flow network by integrating a cost/criticality criterion to prioritize conflicting operations in terms of resource allocation. The case study is a seaport for oil export where real industrial data has been gathered. The work is extendable to flow networks in general and aims at proposing a general, intuitive algebraic modeling framework through which flow transfer operations can be scheduled based on a criterion that integrates the potential costs due to late client service and critical device reliability in order to satisfy a given set of requests through a set of disjoint alignments in a pipeline network. The research exploits results from previous work and it is suitable for systems handling different client priorities and in which device reliability has an important short-term impact on operations.

@InBook{Quintero-2014-tet,
  chapter   = {A Cost-Criticality Based (Max,+) Optimization Model for Operations Scheduling},
  pages     = {645--660},
  title     = {Transactions on Engineering Technologies},
  publisher = {Springer Netherlands},
  year      = {2014},
  author    = {Quintero, K. and Niel, É. and Aguilar, J. and Piétrac, L.},
  editor    = {Kim, Haeng Kon and Ao, Sio-Iong and Amouzegar, Mahyar A.},
  abstract  = {The following work proposes a (max, +) optimization model for scheduling batch transfer operations in a flow network by integrating a cost/criticality criterion to prioritize conflicting operations in terms of resource allocation. The case study is a seaport for oil export where real industrial data has been gathered. The work is extendable to flow networks in general and aims at proposing a general, intuitive algebraic modeling framework through which flow transfer operations can be scheduled based on a criterion that integrates the potential costs due to late client service and critical device reliability in order to satisfy a given set of requests through a set of disjoint alignments in a pipeline network. The research exploits results from previous work and it is suitable for systems handling different client priorities and in which device reliability has an important short-term impact on operations.},
  comment   = {Special Issue of the World Congress on Engineering and Computer Science 2013},
  doi       = {10.1007/978-94-017-9115-1_47},
  keywords  = {Algebraic modeling; Flow networks; Oil pipeline networks; (max, +) theory; Schedule optimization; System reliability},
}

Section spéciale "Interactions between Discrete-event Control and Computer Science"
Muller, J.-M. and Niel, E. and Piétrac, L. and Rutten, E.
Journal of Universal Computer Science
2009, p. 3231-3304

$Abstract

@InCollection{Muller-2009-jucs2,
  Title                    = {section spéciale "Interactions between Discrete-event Control and Computer Science"},
  Author                   = {Muller, J.-M. and Niel, E. and Piétrac, L. and Rutten, E.},
  Year                     = {2009},
  Number                   = {17},
  Pages                    = {3231--3304},
  Volume                   = {15},
  Journal                  = {Journal of Universal Computer Science},
  Url                      = {http://www.jucs.org/doi?doi=10.3217/jucs-015-17}
}

Actes du congrès Modélisation des systèmes réactifs, MSR
Muller, J.-M. and Niel, É. and Piétrac, L.
2007

MSR est un colloque en langue française qui traite de la modélisation, de l'analyse et de la commande des systèmes réactifs et temps réel. Il concerne plus particulièrement les chercheurs et industriels intéressés par la conception d'applications qui sont basées sur des systèmes de type soit continu, soit discret, soit hybride. MSR est un lieu de rencontre pour les automaticiens et les informaticiens afin de confronter les techniques et les problèmes abordés par les deux communautés. Ainsi, le colloque MSR a pour rôle d'affirmer l'apport des chercheurs francophones dans ces domaines et de favoriser les échanges entre universitaires et industriels.

@Proceedings{msr-2007,
  title     = {Actes du congrès \og{}Modélisation des systèmes réactifs\fg{}, MSR},
  year      = {2007},
  editor    = {Muller, J.-M. and Niel, É. and \textbf{L. Piétrac}},
  address   = {Lyon},
  publisher = {Hermès-Lavoisier},
  month     = {10},
}
Surveillance-supervision dans le contexte de la synthèse de lois de commande sûres
Niel, É. and Piétrac, L. and Khatab, A. and Chafik, S.
Maîtrise des risques et sûreté de fonctionnement des systèmes de production
2002, p. 363-399, Hermès-Lavoisier

$Abstract

@InCollection{Pietrac-2002-hermes,
  Title                    = {Surveillance-supervision dans le contexte de la synthèse de lois de commande sûres},
  Author                   = {Niel, É. and Piétrac, L. and Khatab, A. and Chafik, S.},
  Booktitle                = {Maîtrise des risques et sûreté de fonctionnement des systèmes de production},
  Publisher                = {Hermès-Lavoisier},
  Year                     = {2002},
  Chapter                  = {12},
  Editor                   = {Niel, É. and Craye, E.},
  Pages                    = {363--399},
  Series                   = {Productique, collection Information -- Commande -- Communication}
}

Revues francophones

L'usage des Réseaux de Petri dans la Théorie de Contrôle par Supervision
Boufaden, A. and Piétrac, L. and Ganbouj, S.
Sciences et Technologies de l'Automatique, e-STA
2005, vol. 2, n°4

Dans la littérature, différentes théories basées sur les réseaux de Petri ont été proposées pour la synthèse d'un superviseur qui assure le fonctionnement souhaité d?un procédé perçu comme un système à événements discrets (SED). Cet article présente certaines approches que nous avons retenues afin de définir les critères de comparaison entre ces dernières. Ces critères ainsi établis permettent d'une part, de situer les approches entre elles et d?autre part, offrent un moyen sur lequel il est possible de se baser pour l?élaboration ou le choix d'une nouvelle théorie en retenant le choix des meilleurs critères.

@Article{Pietrac-2005-esta,
  Title                    = {L'usage des Réseaux de Petri dans la Théorie de Contrôle par Supervision},
  Author                   = {Boufaden, A. and Piétrac, L. and Ganbouj, S.},
  Journal                  = {Sciences et Technologies de l'Automatique, e-STA},
  Year                     = {2005},
  Volume                   = {2},
  Abstract                 = {Dans la littérature, différentes théories basées sur les réseaux de Petri ont été proposées pour la synthèse d'un superviseur qui assure le fonctionnement souhaité d?un procédé perçu comme un système à événements discrets (SED). Cet article présente certaines approches que nous avons retenues afin de définir les critères de comparaison entre ces dernières. Ces critères ainsi établis permettent d'une part, de situer les approches entre elles et d?autre part, offrent un moyen sur lequel il est possible de se baser pour l?élaboration ou le choix d'une nouvelle théorie en retenant le choix des meilleurs critères.},
  Keywords                 = {Réseaux de Petri, théorie du contrôle par supervision, systèmes à événements discrets},
  Url                      = {www.e-sta.see.asso.fr}
}

Théorie du contrôle par supervision: un exemple d'application d'une approche modulaire sur un système de production manufacturière
Piétrac, L. and Chafik, S. and Niel, É.
Journal Européen des Systèmes Automatisés, JESA
2004, vol. 38, n°3-4

La théorie du contrôle par supervision, ou théorie de Ramadge et Wonham, repose sur le principe de la synthèse. Elle permet la séparation claire entre le modèle du procédé et le modèle des spécifications. Cette théorie a de nombreuses extensions et applications dans le cadre des Systèmes à Événements Discrets (SED). Néanmoins les problèmes de la taille des modèles et de leur implantation sont toujours évoqués comme frein à son utilisation. Dans cet article nous allons traiter un cas réel avec une approche apportant une solution à ces deux problèmes. Notre premier apport réside dans la méthode de modélisation utilisée qui exploite en profondeur les atouts de l'approche décentralisée. Le second consiste à définir des règles permettant de choisir une trajectoire de commande parmi celles possibles, afin de l'implanter dans un automate programmable.

@Article{Pietrac-2004-jesa,
  Title                    = {Théorie du contrôle par supervision: un exemple d'application d'une approche modulaire sur un système de production manufacturière},
  Author                   = {Piétrac, L. and Chafik, S. and Niel, É.},
  Journal                  = {Journal Européen des Systèmes Automatisés, APII-JESA},
  Year                     = {2004},
  Number                   = {3--4},
  Pages                    = {315--346},
  Volume                   = {38},
  Abstract                 = {La théorie du contrôle par supervision, ou théorie de Ramadge et Wonham, repose sur le principe de la synthèse. Elle permet la séparation claire entre le modèle du procédé et le modèle des spécifications. Cette théorie a de nombreuses extensions et applications dans le cadre des Systèmes à Événements Discrets (SED). Néanmoins les problèmes de la taille des modèles et de leur implantation sont toujours évoqués comme frein à son utilisation. Dans cet article nous allons traiter un cas réel avec une approche apportant une solution à ces deux problèmes. Notre premier apport réside dans la méthode de modélisation utilisée qui exploite en profondeur les atouts de l'approche décentralisée. Le second consiste à définir des règles permettant de choisir une trajectoire de commande parmi celles possibles, afin de l'implanter dans un automate programmable.},
  File                     = {Pietrac-2004-jesa.pdf:Pietrac-2004-jesa.pdf:PDF},
  Keywords                 = {RN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Application de la théorie de la supervision : un exemple de conception de programmes d'API
Piétrac, L. and Chafik, S. and Regimbal, L.
Sciences et Technologies de l'Automatique, e-STA
2003, vol. 0, n°0

Pour assurer le bon fonctionnement d'un système, il est nécessaire de démontrer que les programmes de commande respectent les propriétés de sécurité spécifiées dans le cahier des charges. Cette démonstration peut se faire soit par la validation (ou vérification) soit par la synthèse de trajectoires de commande. L'approche de vérification et de validation a l'inconvénient de nécessiter l'écriture préalable du programme puis de vérifier les propriétés attendues, alors que l'avantage de l'approche de synthèse repose sur la prise en compte des propriétés dès le début de la conception. Dans cet article, nous nous sommes basés sur l'approche de synthèse pour proposer une application du principe de la théorie de supervision à la programmation de la commande des systèmes automatisés de production (SAP). Notre contribution consiste dans un premier lieu à obtenir des modèles corrects (vérifiant les propriétés attendues) et surtout simples à construire et à lire. Dans une seconde étape, nous proposons une méthode de passage de modèles formels vers un programme API.

@Article{Pietrac-2003-esta,
  Title                    = {Application de la théorie de la supervision : un exemple de conception de programmes d'API},
  Author                   = {Piétrac, L. and Chafik, S. and Regimbal, L.},
  Journal                  = {Sciences et Technologies de l'Automatique, e-STA},
  Year                     = {2003},
  Number                   = {0},
  Volume                   = {0},
  Abstract                 = {Pour assurer le bon fonctionnement d'un système, il est nécessaire de démontrer que les programmes de commande respectent les propriétés de sécurité spécifiées dans le cahier des charges. Cette démonstration peut se faire soit par la validation (ou vérification) soit par la synthèse de trajectoires de commande. L'approche de vérification et de validation a l'inconvénient de nécessiter l'écriture préalable du programme puis de vérifier les propriétés attendues, alors que l'avantage de l'approche de synthèse repose sur la prise en compte des propriétés dès le début de la conception. Dans cet article, nous nous sommes basés sur l'approche de synthèse pour proposer une application du principe de la théorie de supervision à la programmation de la commande des systèmes automatisés de production (SAP). Notre contribution consiste dans un premier lieu à obtenir des modèles corrects (vérifiant les propriétés attendues) et surtout simples à construire et à lire. Dans une seconde étape, nous proposons une méthode de passage de modèles formels vers un programme API.},
  File                     = {Pietrac-2003-esta.pdf:Pietrac-2003-esta.pdf:PDF},
  Keywords                 = {théorie du contrôle par supervision, synthèse, programmes API, conception, traduction,RN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Conférences anglophones

Dynamical modelling of a DC microgrid using a port-Hamiltonian formalism
Zafeiratou, I. and Prodan, I. and Lefevre, L. and Piétrac, L.
9th Vienna International Conference on Mathematical Modelling, Mathmod
2018, Vienna, Austria

This paper presents the dynamical model of a DC microgrid, composed by a solar panel, an energy storage system, a utility grid and a group of interconnected loads, such as housing-office equipment and electrical vehicles. The transmission lines connect the energy sources with the loads through the corresponding switching DC/DC converters. The novelty resides in the port-Hamiltonian formulations developed for the physical model which is first described through a Bond Graph. An extended architecture of the system with a meshed topology is presented. The proposed architecture has the ability to reduce the power losses within the DC microgrid system by increasing the different transmission line paths among the sources and the loads. The global dynamical model of the system is finally converted into a statespace representation. Furthermore, in view of system control and optimization we formulate the load balancing problem of the DC microgrid in order to stabilize the power flow within the DC bus. The model is validated with some primary simulations.

@InProceedings{Zafeiratou-2018-mathmod,
  author    = {Zafeiratou, I. and Prodan, I. and Lefevre, L. and Piétrac, L.},
  booktitle = {$9^{th}$ Vienna International Conference on Mathematical Modelling, Mathmod},
  title     = {Dynamical modelling of a DC microgrid using a port-Hamiltonian formalism},
  year      = {2018},
  address   = {Vienna, Austria},
  abstract  = {This paper presents the dynamical model of a DC microgrid, composed by a solar panel, an energy storage system, a utility grid and a group of interconnected loads, such as housing-office equipment and electrical vehicles. The transmission lines connect the energy sources with the loads through the corresponding switching DC/DC converters. The novelty resides in the port-Hamiltonian formulations developed for the physical model which is first described through a Bond Graph. An extended architecture of the system with a meshed topology is presented. The proposed architecture has the ability to reduce the power losses within the DC microgrid system by increasing the different transmission line paths among the sources and the loads. The global dynamical model of the system is finally converted into a statespace representation. Furthermore, in view of system control and optimization we formulate the load balancing problem of the DC microgrid in order to stabilize the power flow within the DC bus. The model is validated with some primary simulations.},
  keywords  = {Bond graph, port-Hamiltonian formulation, meshed DC microgrid, load balancing, CI},
}
Increase lifespan with a cell management algorithm in electric energy storage systems
Savard, C. and Venet, P. and Piétrac, L. and Niel, E. and Sari, A.
19th International Conference on Industrial Technology, ICIT
2018, Lyon, France

This paper presents a different way to manage batteries composed by association of basic and redundancy cells. This is an algorithm adapting the internal configuration according to the state of charge of each cell in order to reduce cycling aging effects that cells undergo during normal operation. The lithium-ion pack reliability is summarized in this article before a presentation of simulation results. It is demonstrated that with the introduced cell management scheme, the useful remaining lifespan of the battery can be increased. As a result, adding redundant cells to increase lifespan becomes economically viable.

@InProceedings{Savard-2018-icit,
  author    = {Savard, C. and Venet, P. and Piétrac, L. and Niel, E. and Sari, A.},
  booktitle = {$19^{th}$ International Conference on Industrial Technology, ICIT},
  title     = {Increase lifespan with a cell management algorithm in electric energy storage systems},
  year      = {2018},
  address   = {Lyon, France},
  month     = feb,
  abstract  = {This paper presents a different way to manage batteries composed by association of basic and redundancy cells. This is an algorithm adapting the internal configuration according to the state of charge of each cell in order to reduce cycling aging effects that cells undergo during normal operation. The lithium-ion pack reliability is summarized in this article before a presentation of simulation results. It is demonstrated that with the introduced cell management scheme, the useful remaining lifespan of the battery can be increased. As a result, adding redundant cells to increase lifespan becomes economically viable.},
  keywords  = {Battery model, aging parameters, lifespan, reconfiguration, CI},
}
Flatness-based hierarchical control of a meshed DC microgrid
Zafeiratou, I. and Nguyen, D.V.A. and Prodan, I. and Lefèvre, L. and Piétrac, L.
6th IFAC Conference on Nonlinear Model Predictive Control, NMPC
2018, Madison, Wisconsin, USA

This paper proposes a meshed DC microgrid architecture supervised by a multilayer optimization based control. Its dynamical analysis is described through the Bond Graph notion and the port-Hamiltonian formalism. A multiscale supervision scheduling is developed to handle the load balancing problem for the proper energy distribution within the transmission network. The control architecture considers three control layers. These are implemented via a combination of differential flatness and MPC (Model Predictive Conctrol).

@InProceedings{Zafeiratou-2018-nmpc,
  author    = {Zafeiratou, I. and Nguyen, D.V.A. and Prodan, I. and Lefèvre, L. and Piétrac, L.},
  title     = {Flatness-based hierarchical control of a meshed DC microgrid},
  booktitle = {$6^{th}$ IFAC Conference on Nonlinear Model Predictive Control, NMPC},
  year      = {2018},
  volume    = {51},
  number    = {20},
  pages     = {222 - 227},
  address   = {Madison, Wisconsin, USA},
  month     = aug,
  abstract  = {This paper proposes a meshed DC microgrid architecture supervised by a multilayer optimization based control. Its dynamical analysis is described through the Bond Graph notion and the port-Hamiltonian formalism. A multiscale supervision scheduling is developed to handle the load balancing problem for the proper energy distribution within the transmission network. The control architecture considers three control layers. These are implemented via a combination of differential flatness and MPC (Model Predictive Conctrol).},
  issn      = {2405-8963},
  journal   = {IFAC-PapersOnLine},
  keywords  = {Meshed DC microgrid, Port-Hamiltonian formalism, Differential flatness, B-splines parametrization, Power balancing, Model Predictive Control, CI},
}
Safe design of the Autonomous Driving control function
Cuer, R. and Piétrac, L. and Niel, É. and Diallo, S. and Minoiu-Enache, N. and Dang-Van-Nhan, C.
IFAC World Congress
2017, Toulouse, France

The autonomous vehicle is meant to drive by itself without any driver intervention. The Autonomous Driving (AD) function is based on the Electric/Electronic architecture of the vehicle constituted of sensors, actuators, ECUs (Electronic Control Units) and communication networks. The focus of this study is on the different states of the AD function, implemented in different ECUs. Traditionally the system design process distinguishes between the systems engineering process and the safety process. In this application, the first process specifies the functional requirements for the AD function while, in the second one, three redundant sub-functions are considered to ensure a continuous service under failure. Each of the two processes might have its own constraints and planning. So, the safety requirements might come often too late to be taken into account in the systems engineering process without major impacts on the design of the vehicle. More than other functions, with respect to its complexity, the AD function imposes to consider the safety requirements at the beginning of the systems engineering process. To achieve this, a state model of the AD function has been built. It allows integrating functional and redundancy aspects, formalizing the approach and formally verifying requirements of interest. The built model will ensure the consistency between the two design processes, functional and safety.

@InProceedings{Cuer-2017-wifac,
  author    = {Cuer, R. and Piétrac, L. and Niel, É. and Diallo, S. and Minoiu-Enache, N. and Dang-Van-Nhan, C.},
  booktitle = {IFAC World Congress},
  title     = {Safe design of the Autonomous Driving control function},
  year      = {2017},
  address   = {Toulouse, France},
  month     = {7},
  abstract  = {The autonomous vehicle is meant to drive by itself without any driver intervention. The Autonomous Driving (AD) function is based on the Electric/Electronic architecture of the vehicle constituted of sensors, actuators, ECUs (Electronic Control Units) and communication networks. The focus of this study is on the different states of the AD function, implemented in different ECUs. Traditionally the system design process distinguishes between the systems engineering process and the safety process. In this application, the first process specifies the functional requirements for the AD function while, in the second one, three redundant sub-functions are considered to ensure a continuous service under failure. Each of the two processes might have its own constraints and planning. So, the safety requirements might come often too late to be taken into account in the systems engineering process without major impacts on the design of the vehicle. More than other functions, with respect to its complexity, the AD function imposes to consider the safety requirements at the beginning of the systems engineering process. To achieve this, a state model of the AD function has been built. It allows integrating functional and redundancy aspects, formalizing the approach and formally verifying requirements of interest. The built model will ensure the consistency between the two design processes, functional and safety.},
}
Supervisory control for high-voltage direct current transmission systems
Romero Rodriguez, M. and Delpoux, R. and Piétrac, L. and Dai, J. and Benchaib, A. and Niel, É.
IFAC World Congress
2017, Toulouse, France

The growth of renewable energy production is changing the future of power transmission systems. In recent years, High-Voltage Direct Current (HVDC) technologies based on Modular Multilevel Converters (MMC) are embraced by industry and academia as a solution for the efficient integration of renewable energies into electrical grids. Faster and more complex control strategies will be needed in this domain which nowadays relies heavily on human decision. This paper proposes a Discrete Event System (DES) approach to manage the control responses to deploy in an HVDC grid. Based on Discrete Event Systems (DES) modelling and Supervisory Control Theory (SCT), this paper proposes a method for synthesizing a supervisory control for HVDC systems, which focuses on local observations and limits the number of events to be communicated. The method is validated by simulation for the start-up of a point-to-point link.

@InProceedings{Romero-2017-wifac,
  author    = {Romero Rodriguez, M. and Delpoux, R. and Piétrac, L. and Dai, J. and Benchaib, A. and Niel, É.},
  booktitle = {IFAC World Congress},
  title     = {Supervisory control for high-voltage direct current transmission systems},
  year      = {2017},
  address   = {Toulouse, France},
  month     = {7},
  abstract  = {The growth of renewable energy production is changing the future of power transmission systems. In recent years, High-Voltage Direct Current (HVDC) technologies based on Modular Multilevel Converters (MMC) are embraced by industry and academia as a solution for the efficient integration of renewable energies into electrical grids. Faster and more complex control strategies will be needed in this domain which nowadays relies heavily on human decision. This paper proposes a Discrete Event System (DES) approach to manage the control responses to deploy in an HVDC grid. Based on Discrete Event Systems (DES) modelling and Supervisory Control Theory (SCT), this paper proposes a method for synthesizing a supervisory control for HVDC systems, which focuses on local observations and limits the number of events to be communicated. The method is validated by simulation for the start-up of a point-to-point link.},
  keywords  = {Discrete-event systems, Supervisory control, HVDC transmission systems, Decentralized control, Control system synthesis, CI},
}
Control and optimization scheduling within a meshed DC microgrid
Zafeiratou, I. and Prodan, I. and Lefevre, L. and Piétrac, L.
IFAC World Congress
2017, Toulouse, France
@InProceedings{Zafeiratou-2017-wifac,
  author    = {Zafeiratou, I. and Prodan, I. and Lefevre, L. and Piétrac, L.},
  title     = {Control and optimization scheduling within a meshed DC microgrid},
  booktitle = {IFAC World Congress},
  year      = {2017},
  address   = {Toulouse},
  month     = jul,
}
A New Approach of Modeling Supervisory Control for Manufacturing Systems Based on SysML
Lu, X. and Piétrac, L. and Niel, É.
22nd IEEE International Conference on Emerging Technologies and Factory Automation, ETFA
2017, Limassol, Cyprus

The supervisory control theory is widely used to deal with problems of controller design in the field of discrete event systems. Despite the academic attention over last several decades, there were few application cases in real industrial systems. Some scientific results have shown the difficulties of implementation of Supervisory Control Theory (SCT) and proposed some possible solutions. On the other hand, the difficulty of using the theory for system engineers should also be taken into consideration. This paper presents a modeling approach of SCT based on SysML. Aimed at typical manufacturing systems, a three-level model template is proposed to bridge the gap between SCT and system design. For each template in the modeling library, there is one equivalent model in three levels: the SCT model level, the interface model level and SCT model level. The construction of modeling template is based on the prototype abstraction of typical manufacturing system elements. The transformation algorithms between each model level are given in the paper. The engineer can design the system by the standardized templates and modeling procedures in system engineering level. The correspondent SCT model will be created according to the transformation algorithm and computed the solution automatically. An example will be posed to validate the modeling methodology application at the end of the paper.

@InProceedings{Lu-2017-etfa,
  author    = {Lu, X. and Piétrac, L. and Niel, É.},
  booktitle = {$22^{nd}$ IEEE International Conference on Emerging Technologies and Factory Automation, ETFA},
  title     = {A New Approach of Modeling Supervisory Control for Manufacturing Systems Based on SysML},
  year      = {2017},
  address   = {Limassol, Cyprus},
  month     = {09},
  abstract  = {The supervisory control theory is widely used to deal with problems of controller design in the field of discrete event systems. Despite the academic attention over last several decades, there were few application cases in real industrial systems. Some scientific results have shown the difficulties of implementation of Supervisory Control Theory (SCT) and proposed some possible solutions. On the other hand, the difficulty of using the theory for system engineers should also be taken into consideration. This paper presents a modeling approach of SCT based on SysML. Aimed at typical manufacturing systems, a three-level model template is proposed to bridge the gap between SCT and system design. For each template in the modeling library, there is one equivalent model in three levels: the SCT model level, the interface model level and SCT model level. The construction of modeling template is based on the prototype abstraction of typical manufacturing system elements. The transformation algorithms between each model level are given in the paper. The engineer can design the system by the standardized templates and modeling procedures in system engineering level. The correspondent SCT model will be created according to the transformation algorithm and computed the solution automatically. An example will be posed to validate the modeling methodology application at the end of the paper.},
  comment   = {paper 103},
  keywords  = {discrete event system, supervisor control theory, SysML, modeling, manufacturing system},
}
C-3C: a structure for high reliability with minimal redundancy for batteries
Savard, C. and Sari, A. and Venet, P. and Piétrac, L. and Niel, É.
International Conference on Industrial Technology, ICIT
2016, Taipai, Taiwan

This paper deals with the structures involving the storage cells of electrical energy and on the reconfiguration of these storage systems. It places the existing structures in a matrix configuration to compare their performances in terms of reliability. Then, a different solution: the C-3C structure, for limiting the redundancy for fault tolerance of the cells is proposed and compared with existing patterns. This new configuration, besides it minimizes redundancy, improves battery reliability and increase reliability of a matrix structure of cells.

@InProceedings{Savard-2016-icit,
  author    = {Savard, C. and Sari, A. and Venet, P. and Piétrac, L. and Niel, É.},
  title     = {C-3C: a structure for high reliability with minimal redundancy for batteries},
  booktitle = {International Conference on Industrial Technology, ICIT},
  year      = {2016},
  editor    = {IEEE},
  address   = {Taipai, Taiwan},
  month     = {3},
  abstract  = {This paper deals with the structures involving the storage cells of electrical energy and on the reconfiguration of these storage systems. It places the existing structures in a matrix configuration to compare their performances in terms of reliability. Then, a different solution: the C-3C structure, for limiting the redundancy for fault tolerance of the cells is proposed and compared with existing patterns. This new configuration, besides it minimizes redundancy, improves battery reliability and increase reliability of a matrix structure of cells.},
  keywords  = {balancing, reconfiguration, redundancy, reliability batteries, CI},
}
Reliability and Safety Monitoring for more Electrical Transportation
Allard, B. and Clerc, G. and Dumitrescu, E. and German, R. and Lievre, A. and Makdessi, M. and Niel, É. and Ouaida, R. and Perrin, R. and Piétrac, L. and Razik, H. and Santini, T. and Sari, A. and Soualhi, A. and Venet, P.
Congress on Automotive Power Electronics
2015, Paris, France

This paper deals with the structures involving the storage cells of electrical energy and on the reconfiguration of these storage systems. It places the existing structures in a matrix configuration to compare their performances in terms of reliability. Then, a different solution: the C-3C structure, for limiting the redundancy for fault tolerance of the cells is proposed and compared with existing patterns. This new configuration, besides it minimizes redundancy, improves battery reliability and increase reliability of a matrix structure of cells.

@InProceedings{Allard-2015-sia,
  author    = {Allard, B. and Clerc, G. and Dumitrescu, E. and German, R. and Lievre, A. and Makdessi, M. and Niel, É. and Ouaida, R. and Perrin, R. and Piétrac, L. and Razik, H. and Santini, T. and Sari, A. and Soualhi, A. and Venet, P.},
  booktitle = {Congress on Automotive Power Electronics},
  title     = {Reliability and Safety Monitoring for more Electrical Transportation},
  year      = {2015},
  address   = {Paris, France},
  editor    = {société des ingénieurs de l'automobile (SIA)},
  abstract  = {Development of hybrid and electrical cars encounters integration of a key enabler. Integration, at the largest meaning, delivers a system that is greater than the sum of its parts. New technologies are considered and tight combinations of existing technologies are experimented. Evaluating the possibilities of failure mechanism, investigation reliability and the way for active safety monitoring are impacted as studies have to be revisited and new approaches are to be delivered. In this context, Ampere-lab is carrying several activities that are summarized here. Activities on high-temperature have led to analyses of failure mechanisms and possibility of reliability evaluation on wide-band-gap semiconductors. Passive devices receive new efforts as temperature ranges are pushed. Storage components become key devices with the idea to bring their lifetime to the limit. Prognostics and diagnostics are renewed issues.},
  keywords  = {high temperature power conversion, wide-band-gap semiconductors, magnetic devices, dielectric devices, super capacitors, batteries, prognostics, diagnostics, and supervision of electrical network, CI},
}
A Design Method for Synthesizing Control-Command Systems out of Reusable Components
Hajjar, S. and Dumitrescu, E. and Piétrac, L. and Niel, É.
12th International Workshop of Discrete Event Systems, WODES
2014, Cachan, France

This paper investigates an industrial design issue related to code reusability: building control-command systems out of Commercial off the shelf (COTS) components. The design method proposed uses in synergy the formal verification (FV) and the discrete controller synthesis (DCS) techniques. COTS are formally specified using temporal logic and/or executable observers, and coded according to their formal specification. New functions are built by assembling COTS together. The COTS assembly operation is not error free: the resulting assembly may not achieve the desired function it is supposed to. For these reasons, COTS assemblies need to be formally verified and if errors are found, they must be corrected using DCS. The resulting system is ready for hardware (e.g. FPGA) implementation.

@InProceedings{Hajjar-2014-wodes,
  author    = {Hajjar, S. and Dumitrescu, E. and Piétrac, L. and Niel, É.},
  booktitle = {$12^{th}$ International Workshop of Discrete Event Systems, WODES},
  title     = {A Design Method for Synthesizing Control-Command Systems out of Reusable Components},
  year      = {2014},
  address   = {Cachan, France},
  month     = {5},
  abstract  = {This paper investigates an industrial design issue related to code reusability: building control-command systems out of Commercial off the shelf (COTS) components. The design method proposed uses in synergy the formal verification (FV) and the discrete controller synthesis (DCS) techniques. COTS are formally specified using temporal logic and/or executable observers, and coded according to their formal specification. New functions are built by assembling COTS together. The COTS assembly operation is not error free: the resulting assembly may not achieve the desired function it is supposed to. For these reasons, COTS assemblies need to be formally verified and if errors are found, they must be corrected using DCS. The resulting system is ready for hardware (e.g. FPGA) implementation.},
  keywords  = {Formal verification, discrete controller synthesis, COTS, simulation, embedded systems, control-command},
}
Determining of critical and dreaded states achieved during metro line supervision
Paquereau, D. and Piétrac, L. and Niel, É. and Bouresche, L.
21th Mediterranean Conference on Control and Automation, MED
2014, Palermo, Italy

The research developed here comes within a global approach of a metro line supervision study. Methodology of supervisory control theory is applied to avoid undesirable behaviors during incident situations management and so enforce passengers safety. In this paper, unlike the forbidden state problem, the set of states not to reach is not a given parameter. This set corresponds to safety and controllability constraints: the sets of critical and dreaded states are defined and determined. An example is presented in transport systems area and the developed algorithm is used to identify potentially unsafe situations which do not ensure passengers safety.

@InProceedings{Paquereau-2014-med,
  author    = {Paquereau, D. and Piétrac, L. and Niel, É. and Bouresche, L.},
  title     = {Determining of critical and dreaded states achieved during metro line supervision},
  booktitle = {$21^{th}$ Mediterranean Conference on Control \& Automation, MED},
  year      = {2014},
  address   = {Palermo, Italy},
  abstract  = {The research developed here comes within a global approach of a metro line supervision study. Methodology of supervisory control theory is applied to avoid undesirable behaviors during incident situations management and so enforce passengers safety. In this paper, unlike the forbidden state problem, the set of states not to reach is not a given parameter. This set corresponds to safety and controllability constraints: the sets of critical and dreaded states are defined and determined. An example is presented in transport systems area and the developed algorithm is used to identify potentially unsafe situations which do not ensure passengers safety.},
  keywords  = {Supervision, Transport system, Process control, Petri nets, Safety, CI},
}
Optimization Model for Scheduling Operations in a Flow Network with Preventive Maintenance Tasks
Quintero, K. and Niel, E. and Piétrac, L.
Proc. of the World Congress on Engineering and Computer Science, WCECS
2013, San Francisco, USA

The aim of this work is to propose a (max, +) optimization model for scheduling transfer operations on a flow network within a given maintenance framework. The case study is a seaport for oil export, and operations to be scheduled are oil batch transfer operations, while preestablished maintenance activities are considered on valves. The optimum schedule is determined through an intuitive, and synthetized mathematical model based on (max,+) algebra with the objective of minimizing financial penalties. Real operational constraints and goals in the seaport are modeled with data from an oil seaport in Venezuela. Results show the optimum schedule obtained from concise and relatively simple optimization model which is the main contribution of this work.

@InProceedings{Quintero-2013-wcecs,
  Title                    = {Optimization Model for Scheduling Operations in a Flow Network with Preventive Maintenance Tasks},
  Author                   = {Quintero, K. and Niel, E. and Piétrac, L.},
  Booktitle                = {Proc. of the World Congress on Engineering and Computer Science, WCECS},
  Year                     = {2013},
  Address                  = {San Francisco, USA},
  Month                    = {10},
  Abstract                 = {The aim of this work is to propose a (max, +) optimization model for scheduling transfer operations on a flow network within a given maintenance framework. The case study is a seaport for oil export, and operations to be scheduled are oil batch transfer operations, while preestablished maintenance activities are considered on valves. The optimum schedule is determined through an intuitive, and synthetized mathematical model based on (max,+) algebra with the objective of minimizing financial penalties. Real operational constraints and goals in the seaport are modeled with data from an oil seaport in Venezuela. Results show the optimum schedule obtained from concise and relatively simple optimization model which is the main contribution of this work.},
  File                     = {Quintero-2013-wcecs.pdf:Quintero-2013-wcecs.pdf:PDF},
  Keywords                 = {system modeling, (max,+) theory, flow networks, schedule optimization.},
  Owner                    = {L. Piétrac},
  Timestamp                = {2014.01.09}
}

Incremental Discrete Controller Synthesis for communicating systems based on modular decomposition
Ren, M. and Dumitrescu, E. and Piétrac, L. and Niel, E.
11th International Workshop on Discrete Event Systems, WODES
2012, Guadalajara, Mexique

The symbolic Discrete Controller Synthesis (DCS) is applied incrementally on successive abstractions of the system to be controlled, which is composed of two or more concurrent communicating components. We keep one component while abstract away all others. DCS is applied on the resulting abstract system and produces an intermediate approximate control solution. We refine the abstract model incrementally by adding concrete model of the abstracted components one by one. At each refinement, the previous intermediate solution is used as a starting point synthesizing a more precise solution until the precise supervisor is reached. The efficiency of the incremental technique is illustrated with performance assessments on several models.

@InProceedings{Ren-2012-wodes,
  Title                    = {Incremental Discrete Controller Synthesis for communicating systems based on modular decomposition},
  Author                   = {Ren, M. and Dumitrescu, E. and Piétrac, L. and Niel, E.},
  Booktitle                = {{11^th} International Workshop on Discrete Event Systems, WODES},
  Year                     = {2012},
  Address                  = {Guadalajara, Mexique},
  Month                    = {10},
  Abstract                 = {The symbolic Discrete Controller Synthesis (DCS) is applied incrementally on successive abstractions of the system to be controlled, which is composed of two or more concurrent communicating components. We keep one component while abstract away all others. DCS is applied on the resulting abstract system and produces an intermediate approximate control solution. We refine the abstract model incrementally by adding concrete model of the abstracted components one by one. At each refinement, the previous intermediate solution is used as a starting point synthesizing a more precise solution until the precise supervisor is reached. The efficiency of the incremental technique is illustrated with performance assessments on several models.},
  File                     = {Ren-2012-wodes.pdf:Ren-2012-wodes.pdf:PDF},
  Owner                    = {L. Piétrac},
  Quality                  = {1},
  Timestamp                = {2013.07.02}
}

A Component-Based Approach for Supervisory Control
Kovács, G. and Piétrac, L. and Kiss, B.
20th Mediterranean Conference on Control and Automation, MED
2012, Barcelone, Espagne

This paper reports a novel approach for the supervisory control of discrete event systems. Based on components, the approach provides principles of object-oriented software design to be used in the framework of Supervisory Control Theory. The concepts of abstract and concrete components allow the modeling of complex systems at a high level of abstraction, making specification and control design easier. Besides aiming modularity and reusability, the proposed framework allows to introduce concepts of composition, polymorphism and inheritance into the design of supervisory controllers.

@InProceedings{Kovacs-2012-med,
  Title                    = {A Component-Based Approach for Supervisory Control},
  Author                   = {Kovács, G. and Piétrac, L. and Kiss, B.},
  Booktitle                = {$20^{th}$ Mediterranean Conference on Control \& Automation, MED},
  Year                     = {2012},
  Address                  = {Barcelone, Espagne},
  Month                    = {7},
  Abstract                 = {This paper reports a novel approach for the supervisory control of discrete event systems. Based on components, the approach provides principles of object-oriented software design to be used in the framework of Supervisory Control Theory. The concepts of abstract and concrete components allow the modeling of complex systems at a high level of abstraction, making specification and control design easier. Besides aiming modularity and reusability, the proposed framework allows to introduce concepts of composition, polymorphism and inheritance into the design of supervisory controllers.},
  File                     = {Kovacs-2012-med.pdf:Kovacs-2012-med.pdf:PDF},
  Owner                    = {L. Piétrac},
  Quality                  = {1},
  Timestamp                = {2013.07.02}
}

A Dashboard to Regulate Project-Based Learning
Michel, Ch. and Lavoué, E. and Piétrac, L.
Proceedings of the 7th European Conference on Technology Enhanced Learning, EC-TEL 2012
2012, Saarbrücken, Allemagne

In this paper, we propose the dashboards of the Pco-Vision platform to support and enhance Project-Based Learning (PBL). Based on the assumption that Self-Regulated Learning (SRL) is a major component of PBL, we have focused our attention in the design of a dashboard to enhance SRL in PBL. We describe the characteristics of PBL and show why a dashboard can help involved SRL processes, more particularly self-monitoring and self-judgment. We provide a categorization of the information to be presented on dashboards to help students involved in a PBL situation; by taking into account both the project and the learning goals. Finally we have conducted an experiment using the Pco-Vision platform with 64 students involved in a 6-months PBL course; results show that, whereas students rather use direct communication for tasks related to the self-monitoring process, the dashboard appears to be of great importance to enhance the self-judgment process, especially by presenting the information about the way of carrying out the activities.

@InProceedings{Michel-2012-ectel,
  Title                    = {A Dashboard to Regulate Project-Based Learning},
  Author                   = {Michel, Ch. and Lavou{\'e}, E. and Pi{\'e}trac, L.},
  Booktitle                = {Proceedings of the {7^th} European Conference on Technology Enhanced Learning, EC-TEL 2012},
  Year                     = {2012},
  Address                  = {Saarbr{\"u}cken, Allemagne},
  Editor                   = {Ravenscroft A. and Lindstaedt S. and Delgado Kloos C. and Hernandez-Leo D.},
  Month                    = {9},
  Pages                    = {250-263},
  Publisher                = {Springer},
  Series                   = {LNCS 7563 },
  Abstract                 = {In this paper, we propose the dashboards of the Pco-Vision platform to support and enhance Project-Based Learning (PBL). Based on the assumption that Self-Regulated Learning (SRL) is a major component of PBL, we have focused our attention in the design of a dashboard to enhance SRL in PBL. We describe the characteristics of PBL and show why a dashboard can help involved SRL processes, more particularly self-monitoring and self-judgment. We provide a categorization of the information to be presented on dashboards to help students involved in a PBL situation; by taking into account both the project and the learning goals. Finally we have conducted an experiment using the Pco-Vision platform with 64 students involved in a 6-months PBL course; results show that, whereas students rather use direct communication for tasks related to the self-monitoring process, the dashboard appears to be of great importance to enhance the self-judgment process, especially by presenting the information about the way of carrying out the activities.},
  Affiliation              = {Laboratoire d'InfoRmatique en Images et Syst{\`e}mes d'Information - LIRIS , Centre de Recherche Magellan , Amp{\`e}re},
  Keywords                 = {Self-Regulated Learning; Project-Based Learning; Dashboard},
}

Equivalence of behaviors between centralized and multi-model approaches
Faraut, G. and Piétrac, L. and Niel, É.
7th International Conference on Automation Science and Engineering, CASE
2011, Trieste, Italie

This paper presents a comparison between centralized approach and multi-model approach based on Supervisory Control Theory (SCT). The centralized approach uses both the whole process and specification to compute the controlled process. The multi-model approach, on the other hand, is used basing on various modal perspectives. This approach allows to build smaller models, which lead to smaller scale and better understanding of the latter. The comparison is made basing on a number of conditions, which all ensure the identical behavior between the controlled processes of each discussed approach. An example of a manufacturing system illustrating the comparison is also presented.

@InProceedings{Faraut-2011-case,
  Title                    = {Equivalence of behaviors between centralized and multi-model approaches},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {7th International Conference on Automation Science and Engineering, CASE},
  Year                     = {2011},
  Address                  = {Trieste, Italie},
  Editor                   = {IEEE},
  Month                    = {8},
  Pages                    = {32--38},
  Abstract                 = {This paper presents a comparison between centralized approach and multi-model approach based on Supervisory Control Theory (SCT). The centralized approach uses both the whole process and specification to compute the controlled process. The multi-model approach, on the other hand, is used basing on various modal perspectives. This approach allows to build smaller models, which lead to smaller scale and better understanding of the latter. The comparison is made basing on a number of conditions, which all ensure the identical behavior between the controlled processes of each discussed approach. An example of a manufacturing system illustrating the comparison is also presented.},
  Doi                      = {10.1109/CASE.2011.6042502},
  File                     = {Faraut-2011-case.pdf:Faraut-2011-case.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2011.09.14}
}

Process Tracking by Equivalent States in Modal Supervisory Control
Faraut, G. and Piétrac, L. and Niel, É.
16th IEEE International Conference on Emerging Technologies and Factory Automation, ETFA
2011, Toulouse, France

This paper proposes an extension of the process tracking in modal supervisory control that takes into account the models of the controlled processes which are not trimmed. Indeed, in Supervisory Control Theory (SCT), when a process is not controllable to respect the specifications, the controlled process is computed by the algorithm of the supremal controllable sublanguage. However, the final step of the algorithm of the supremal controllable sublanguage computes the trim of the model. This is coherent to remove states that are neither accessible nor co-accessible because the process is a unique model. Nevertheless, in the case where the design is done with many models, like in modal approach, some inaccessible states in a mode can be accessible from another one. The proposed framework identifies the accessible states, called equivalent states, by other models. This identification uses the name of states to determine their equivalents among models of modes. The aim is to improve switching modes, not only by using languages, but also the name of states in the automata.

@InProceedings{Faraut-2011-etfa,
  Title                    = {Process Tracking by Equivalent States in Modal Supervisory Control},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {16th IEEE International Conference on Emerging Technologies and Factory Automation, ETFA},
  Year                     = {2011},
  Address                  = {Toulouse, France},
  Month                    = {9},
  Abstract                 = {This paper proposes an extension of the process tracking in modal supervisory control that takes into account the models of the controlled processes which are not trimmed. Indeed, in Supervisory Control Theory (SCT), when a process is not controllable to respect the specifications, the controlled process is computed by the algorithm of the supremal controllable sublanguage. However, the final step of the algorithm of the supremal controllable sublanguage computes the trim of the model. This is coherent to remove states that are neither accessible nor co-accessible because the process is a unique model. Nevertheless, in the case where the design is done with many models, like in modal approach, some inaccessible states in a mode can be accessible from another one. The proposed framework identifies the accessible states, called equivalent states, by other models. This identification uses the name of states to determine their equivalents among models of modes. The aim is to improve switching modes, not only by using languages, but also the name of states in the automata.},
  File                     = {Faraut-2011-etfa.pdf:Faraut-2011-etfa.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2011.09.17}
}

On the use of SysML for Manufacturing Execution System design
Piétrac, L. and Lelevé, A. and Henry, S.
16th IEEE International Conference on Emerging Technologies and Factory Automation, ETFA
2011, Toulouse, France

In this paper, we show that the integration of a new MES within an existing manufacturing system requires to appeal to a method enabling the modeling of interactions between hardware and software components, the modeling of their behavior and their use by production staff. We show how SysML is a language fitting this need and we illustrate this discussion on a real sample.

@InProceedings{Pietrac-2011-etfa,
  Title                    = {On the use of SysML for Manufacturing Execution System design},
  Author                   = {Piétrac, L. and Lelevé, A. and Henry, S.},
  Booktitle                = {16th IEEE International Conference on Emerging Technologies and Factory Automation, ETFA},
  Year                     = {2011},
  Address                  = {Toulouse, France},
  Month                    = {9},
  Abstract                 = {In this paper, we show that the integration of a new MES within an existing manufacturing system requires to appeal to a method enabling the modeling of interactions between hardware and software components, the modeling of their behavior and their use by production staff. We show how SysML is a language fitting this need and we illustrate this discussion on a real sample.},
  File                     = {Pietrac-2011-etfa.pdf:Pietrac-2011-etfa.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2011.09.17}
}

Supervisory control based on multi-face modelling of discrete event systems
Kovács, G. and Piétrac, L. and Niel, É.
10th International Workshop on Discrete Event Systems, WODES
2010, Berlin, Allemagne

This paper reports a supervisory control design methodology based on the multiface modelling of discrete-event systems in order to allow rapid prototyping and flexible implementation of controllers for reactive systems. Although Supervisory Control Theory assures that the closed loop system meets the prescribed requirements, it uses ordinary finite state machines as process models, which results in complicated and large-scale controllers. A new modelling methodology simplifies modelling by introducing functional models based on tasks, which allow the reduction of component models. The paper presents a multi-level supervisory control architecture for systems modelled in the framework and derives the properties of the overall control system. Propositions for the implementation of such supervisory architectures are also made.

@InProceedings{Kovacs-2010-wodes,
  Title                    = {Supervisory control based on multi-face modelling of discrete event systems},
  Author                   = {Kovács, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {{10^th} International Workshop on Discrete Event Systems, WODES},
  Year                     = {2010},
  Address                  = {Berlin, Allemagne},
  Pages                    = {127-132},
  Abstract                 = {This paper reports a supervisory control design methodology based on the multiface modelling of discrete-event systems in order to allow rapid prototyping and flexible implementation of controllers for reactive systems. Although Supervisory Control Theory assures that the closed loop system meets the prescribed requirements, it uses ordinary finite state machines as process models, which results in complicated and large-scale controllers. A new modelling methodology simplifies modelling by introducing functional models based on tasks, which allow the reduction of component models. The paper presents a multi-level supervisory control architecture for systems modelled in the framework and derives the properties of the overall control system. Propositions for the implementation of such supervisory architectures are also made.},
  File                     = {Kovacs-2010-wodes.pdf:Kovacs-2010-wodes.pdf:PDF},
  Keywords                 = {Discrete Event Systems, Supervisory Control, Rapid Control Prototyping, CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2010.07.14}
}

A Framework for Using Formal Methods in Process Control
Kovács, G. and Piétrac, L.
Proceedings of 1st International Scientific Workshop on Distributed Control Systems
2010, Miskolc-Lillafüred, Hongrie

$Abstract

@InProceedings{Kovacs-2010-iswdcs,
  Title                    = {A Framework for Using Formal Methods in Process Control},
  Author                   = {Kovács, G. and Piétrac, L.},
  Booktitle                = {Proceedings of 1st International Scientific Workshop on Distributed Control Systems},
  Year                     = {2010},
  Address                  = {Miskolc-Lillafüred, Hongrie},
  Month                    = {10},
  Pages                    = {66--76},
  Volume                   = {1},
  File                     = {Kovacs-2010-iswdcs.pdf:Kovacs-2010-iswdcs.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2011.12.27},
  Url                      = {http://dcs.akki.hu/DCS16/Document/isw_eloadasok_en.html}
}

Control law synthesis and reconfiguration using SCT
Faraut, G. and Piétrac, L. and Niel, É.
Conference on Control and Fault-Tolerant Systems, SysTol
2010, Nice, France

System evolution, such as addition or replacement of a component, may necessitate complete re-design. Such re-design may be needed to respect new or updated requirements. The models then have to be modified. In this paper, we present a procedure for reconfiguration of a discrete event system (DES) controller. Based on supervisory control theory (SCT), the objective of this work is to show how the SCT is convenient in order to reconfigure the controller to take into account the new and updated requirements without re-verifying the requirements that do not change because they are still respected.

@InProceedings{Faraut-2010-systol,
  Title                    = {Control law synthesis and reconfiguration using SCT},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {Conference on Control and Fault-Tolerant Systems, SysTol},
  Year                     = {2010},
  Address                  = {Nice, France},
  Month                    = {10},
  Abstract                 = {System evolution, such as addition or replacement of a component, may necessitate complete re-design. Such re-design may be needed to respect new or updated requirements. The models then have to be modified. In this paper, we present a procedure for reconfiguration of a discrete event system (DES) controller. Based on supervisory control theory (SCT), the objective of this work is to show how the SCT is convenient in order to reconfigure the controller to take into account the new and updated requirements without re-verifying the requirements that do not change because they are still respected.},
  Comment                  = {6-8 octobre},
  File                     = {Faraut-2010-systol.pdf:Faraut-2010-systol.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2010.09.06}
}

A new framework for mode switching in SCT
Faraut, G. and Piétrac, L. and Niel, É.
European Control Conference, ECC
2009, Budapest, Hongrie

In Discrete Events Systems, a method consists of using a multi-modal approach to decompose the complexity of processes and specifications. We then can prove that the models meet the requirements. Nevertheless, even based on a simple specification about commutations, it is very difficult to prove that the mutual interaction between modes are correct. This paper presents a framework allowing to detect specification incompatibilities by using the Supervisory Control Theory. This method can be used to change specifications or control them to promote correct mode switching.

@InProceedings{Faraut-2009-ecc,
  Title                    = {A new framework for mode switching in SCT},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {European Control Conference, ECC},
  Year                     = {2009},
  Address                  = {Budapest, Hongrie},
  Month                    = {8},
  Abstract                 = {In Discrete Events Systems, a method consists of using a multi-modal approach to decompose the complexity of processes and specifications. We then can prove that the models meet the requirements. Nevertheless, even based on a simple specification about commutations, it is very difficult to prove that the mutual interaction between modes are correct. This paper presents a framework allowing to detect specification incompatibilities by using the Supervisory Control Theory. This method can be used to change specifications or control them to promote correct mode switching.},
  Comment                  = {6 p., 23-26 août},
  File                     = {Faraut-2009-ecc.pdf:Faraut-2009-ecc.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Multi-face modelling for rapid prototyping of discrete event control systems
Kovács, G. and Piétrac, L.
European Control Conference, ECC
2009, Budapest, Hongrie

This paper reports a methodology for the multiface modeling of discrete-event systems to be used in a framework for the rapid prototyping of supervisory controllers. However Supervisory Control Theory provides a possibility for the synthesis of supervisors proven to respect the specifications, it uses ordinary finite state machines and operations resulting in state explosion, so therefore hardly applicable for large-scale systems. The aim of the presented methodology is to simplify and accelerate controller design procedure by model reduction. By the introduction of task philosophy and component-based design, a methodology for obtaining shrinker functional models from technological models is presented. The paper gives definitions for the models serving as different representations of components and for the conversion between them.

@InProceedings{Kovacs-2009-ecc,
  Title                    = {Multi-face modelling for rapid prototyping of discrete event control systems},
  Author                   = {Kovács, G. and Piétrac, L.},
  Booktitle                = {European Control Conference, ECC},
  Year                     = {2009},
  Address                  = {Budapest, Hongrie},
  Month                    = {8},
  Pages                    = {1463--1468},
  Abstract                 = {This paper reports a methodology for the multiface modeling of discrete-event systems to be used in a framework for the rapid prototyping of supervisory controllers. However Supervisory Control Theory provides a possibility for the synthesis of supervisors proven to respect the specifications, it uses ordinary finite state machines and operations resulting in state explosion, so therefore hardly applicable for large-scale systems. The aim of the presented methodology is to simplify and accelerate controller design procedure by model reduction. By the introduction of task philosophy and component-based design, a methodology for obtaining shrinker functional models from technological models is presented. The paper gives definitions for the models serving as different representations of components and for the conversion between them.},
  Comment                  = {23-26 août},
  File                     = {Kovacs-2009-ecc.pdf:Kovacs-2009-ecc.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Global efficiency assessment based on component composition of OEE using AltaRica data-flow language
Kombé, T. and Niel, É. and Piétrac, L. and Rauzy, A.
13th IFAC Symposium on Information Control Problems in Manufacturing, INCOM
2009, Moscou, Russie

We present in this article a method to assess a system efficiency based on modelling of the temporal and stochastic spread of faults. The OEE (Overall Equipment Effectiveness) has become through the NF E60-182 standard one of the major indicators of the effectiveness in piloting production systems. It includes 3 main concepts (Quality, Performance and Availability). If its evaluation can be easy for a single system, the modelling of its components for the global efficiency assessment is much more difficult (taking into account redundancies, temporal scale factors?). In order to take in account the local contribution of each component of a complex system, a notion of OTE (Overall Throughput Effectiveness) is developed. The purpose of OTE is twofold: it measures factory-level performance and factory-level diagnostics such as bottleneck detection. The expected result gives a formal contribution to the establishment a methodology for analysis, design, and decision-making. The results are discussed using a demonstrator based on AltaRica Data-Flow, language in both formal and graphic and real tool modelling / simulation.

@InProceedings{Kombe-2009-incom,
  Title                    = {Global efficiency assessment based on component composition of OEE using AltaRica data-flow language},
  Author                   = {Kombé, T. and Niel, É. and Piétrac, L. and Rauzy, A.},
  Booktitle                = {13th IFAC Symposium on Information Control Problems in Manufacturing, INCOM},
  Year                     = {2009},
  Address                  = {Moscou, Russie},
  Month                    = {6},
  Pages                    = {246--251},
  Abstract                 = {We present in this article a method to assess a system efficiency based on modelling of the temporal and stochastic spread of faults. The OEE (Overall Equipment Effectiveness) has become through the NF E60-182 standard one of the major indicators of the effectiveness in piloting production systems. It includes 3 main concepts (Quality, Performance and Availability). If its evaluation can be easy for a single system, the modelling of its components for the global efficiency assessment is much more difficult (taking into account redundancies, temporal scale factors?). In order to take in account the local contribution of each component of a complex system, a notion of OTE (Overall Throughput Effectiveness) is developed. The purpose of OTE is twofold: it measures factory-level performance and factory-level diagnostics such as bottleneck detection. The expected result gives a formal contribution to the establishment a methodology for analysis, design, and decision-making. The results are discussed using a demonstrator based on AltaRica Data-Flow, language in both formal and graphic and real tool modelling / simulation.},
  File                     = {Kombe-2009-incom.pdf:Kombe-2009-incom.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

A supervisor implementation approach in Discrete Controller Synthesis
Dumitrescu, E. and Ren, M. and Piétrac, L. and Niel, É.mil
13th IEEE international conference on Emerging Technologies and Factory Automation, ETFA
2008, Hamburg, Allemagne

We investigate the implementation of supervisors generated by symbolic BDD-based Discrete Controller Synthesis (DCS). The implementation technique proposed is able to solve both control non-determinism and the structural incompatibility introduced by symbolic DCS. We highlight and illustrate interesting structural properties of the supervisor implementation. Our technique is illustrated on a reallife example modeling a System-on-chip component: a serial to parallel converter.

@InProceedings{Dumitrescu-2008-etfa,
  Title                    = {A supervisor implementation approach in Discrete Controller Synthesis},
  Author                   = {Dumitrescu, E. and Ren, M. and Piétrac, L. and Niel, É.mil},
  Booktitle                = {$13^{th}$ IEEE international conference on Emerging Technologies and Factory Automation, ETFA},
  Year                     = {2008},
  Address                  = {Hamburg, Allemagne},
  Month                    = {9},
  Pages                    = {1433--1440},
  Abstract                 = {We investigate the implementation of supervisors generated by symbolic BDD-based Discrete Controller Synthesis (DCS). The implementation technique proposed is able to solve both control non-determinism and the structural incompatibility introduced by symbolic DCS. We highlight and illustrate interesting structural properties of the supervisor implementation. Our technique is illustrated on a reallife example modeling a System-on-chip component: a serial to parallel converter.},
  Doi                      = {10.1109/ETFA.2008.4638585},
  File                     = {Dumitrescu-2008-etfa.pdf:Dumitrescu-2008-etfa.pdf:PDF},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Identification of Incompatible states in Mode Switching
Faraut, G. and Piétrac, L. and Niel, É.
13th IEEE international conference on Emerging Technologies and Factory Automation, ETFA
2008, Hamburg, Allemagne

Mode management is one of the problems in Discrete Events Systems control design. Even based on a simple specification, it is very difficult to prove that models of each mode and mutual interaction are correct. This paper demonstrates that Supervisory Control Theory is an effective tool for detecting specification incompatibilities because it clearly separates process, models and specifications. We use simple cases to present a method that introduces flexibility into mode specification. This method can be used to adjust or to modify incompatibilities between specifications and thereby promotes correct mode switching.

@InProceedings{Faraut-2008-etfa,
  Title                    = {Identification of Incompatible states in Mode Switching},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {$13^{th}$ IEEE international conference on Emerging Technologies and Factory Automation, ETFA},
  Year                     = {2008},
  Address                  = {Hamburg, Allemagne},
  Month                    = {9},
  Pages                    = {121--128},
  Abstract                 = {Mode management is one of the problems in Discrete Events Systems control design. Even based on a simple specification, it is very difficult to prove that models of each mode and mutual interaction are correct. This paper demonstrates that Supervisory Control Theory is an effective tool for detecting specification incompatibilities because it clearly separates process, models and specifications. We use simple cases to present a method that introduces flexibility into mode specification. This method can be used to adjust or to modify incompatibilities between specifications and thereby promotes correct mode switching.},
  Doi                      = {10.1109/ETFA.2008.4638382},
  File                     = {Faraut-2008-etfa.pdf:Faraut-2008-etfa.pdf:PDF},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

On the formalisation of integrating watchdogs into discrete event controller structures
Kovács, G. and Piétrac, L. and Kiss, B. and Niel, É.
European Control Conference, ECC
2007, Kos, Grèce

This paper reports a low-cost online fault detection approach for supervisory controllers in the framework of Supervisory Control Theory (SCT). For the cases when sensors dedicated to fault detection increase significantly the cost of controllers, or failure events are even impossible to detect by a direct way, methods based on the well-known watchdog structures are proposed. To successfully integrate watchdogs in the SCT framework, their discrete-event model is defined, and fault-detection techniques proposed in this paper are based on the extension of controller models previously designed using conventional supervisory synthesis methods. Fault-detection strategies are presented for centralized and distributed supervisory control environments, in the latter case providing solutions for avoiding problems according to fault propagation. Proposed techniques give full authority to the system designer in defining failure handling procedures and are proved not to influence the operation of the processes when no fault occurs. Since the extension of the controller models is defined by a formal and systematic manner, suitable algorithms based on the presented techniques can be constructed to allow automatic integration of fault-detection capabilities into existing controller structures.

@InProceedings{Kovacs-2007-ecc,
  Title                    = {On the formalisation of integrating watchdogs into discrete event controller structures},
  Author                   = {Kovács, G. and Piétrac, L. and Kiss, B. and Niel, É.},
  Booktitle                = {European Control Conference, ECC},
  Year                     = {2007},
  Address                  = {Kos, Grèce},
  Month                    = {7},
  Abstract                 = {This paper reports a low-cost online fault detection approach for supervisory controllers in the framework of Supervisory Control Theory (SCT). For the cases when sensors dedicated to fault detection increase significantly the cost of controllers, or failure events are even impossible to detect by a direct way, methods based on the well-known watchdog structures are proposed. To successfully integrate watchdogs in the SCT framework, their discrete-event model is defined, and fault-detection techniques proposed in this paper are based on the extension of controller models previously designed using conventional supervisory synthesis methods. Fault-detection strategies are presented for centralized and distributed supervisory control environments, in the latter case providing solutions for avoiding problems according to fault propagation. Proposed techniques give full authority to the system designer in defining failure handling procedures and are proved not to influence the operation of the processes when no fault occurs. Since the extension of the controller models is defined by a formal and systematic manner, suitable algorithms based on the presented techniques can be constructed to allow automatic integration of fault-detection capabilities into existing controller structures.},
  File                     = {Kovacs-2007-ecc.pdf:Kovacs-2007-ecc.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Online Fault Detection in the Modular Supervisory Control of an Experimental Manufacturing Cell
Kovács, G. and Piétrac, L. and Kiss, B. and Niel, É.
15th Mediterranean Conference on Control and Automation, MED
2007, Athènes, Grèce

This paper presents an application of watchdog based fault detection methods to the supervisory control of an experimental manufacturing cell. Fault detection is implemented by carrying out slight modifications on the previously designed, modular supervisory control architecture, without using additional sensor devices. Different strategies for avoiding fault propagation are also presented.

@InProceedings{Kovacs-2007-med,
  Title                    = {Online Fault Detection in the Modular Supervisory Control of an Experimental Manufacturing Cell},
  Author                   = {Kovács, G. and Piétrac, L. and Kiss, B. and Niel, É.},
  Booktitle                = {$15^{th}$ Mediterranean Conference on Control \& Automation, MED},
  Year                     = {2007},
  Address                  = {Athènes, Grèce},
  Month                    = {6},
  Abstract                 = {This paper presents an application of watchdog based fault detection methods to the supervisory control of an experimental manufacturing cell. Fault detection is implemented by carrying out slight modifications on the previously designed, modular supervisory control architecture, without using additional sensor devices. Different strategies for avoiding fault propagation are also presented.},
  File                     = {Kovacs-2007-med.pdf:Kovacs-2007-med.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

A formal approach for the specification, verification and control of Flexible Manufacturing Systems
Zairi, S. and Zouari, B. and Piétrac, L.
IEEE Conference on Emerging Technologies and Factory Automation, ETFA
2007, Patras, Grèce

This paper introduces a formal specification model that covers a large class of real Flexible Manufacturing System (FMS). Using this model, a designer expresses the functional capacities of his system and the products flow. Parallel manufacturing processes, having, transformation, assembly, disassembly, test and storage operations, are considered. FMS specification is automatically transformed into a CP-net model. Hence, the verification and the supervisory control techniques based on CP-nets can be applied to the generated CP-net. Thus, a parameterized solution is defined taking into account the flexibility of the specification model. The present work led to the implementation of a specific tool, called MAC-FMS, allowing graphical specification, supervisory control and verification through its interaction with CPN Tools environment (Jensen's tool).

@InProceedings{Zairi-2007-etfa,
  Title                    = {A formal approach for the specification, verification and control of Flexible Manufacturing Systems},
  Author                   = {Zairi, S. and Zouari, B. and Piétrac, L.},
  Booktitle                = {IEEE Conference on Emerging Technologies and Factory Automation, ETFA},
  Year                     = {2007},
  Address                  = {Patras, Grèce},
  Month                    = {9},
  Pages                    = {1031--1038},
  Abstract                 = {This paper introduces a formal specification model that covers a large class of real Flexible Manufacturing System (FMS). Using this model, a designer expresses the functional capacities of his system and the products flow. Parallel manufacturing processes, having, transformation, assembly, disassembly, test and storage operations, are considered. FMS specification is automatically transformed into a CP-net model. Hence, the verification and the supervisory control techniques based on CP-nets can be applied to the generated CP-net. Thus, a parameterized solution is defined taking into account the flexibility of the specification model. The present work led to the implementation of a specific tool, called MAC-FMS, allowing graphical specification, supervisory control and verification through its interaction with CPN Tools environment (Jensen's tool).},
  Doi                      = {10.1109/EFTA.2007.4416897},
  File                     = {Zairi-2007-etfa.pdf:Zairi-2007-etfa.pdf:PDF},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Forbidden and preforbidden states in the multi-model approach
Kamach, O. and Piétrac, L. and Niel, É.
Multiconference on Computational Engineering in Systems Applications, CESA
2006, Beijing, Chine

This paper deals with operating mode management of Discrete Event Systems (DES) and this contribution is based on Supervisory Control Theory (SCT). Our aim is to extend SCT by introducing a mechanism for managing different operating modes for the controlled system. An operating mode corresponds to a specific system structure (engagement or disengagement of different system components) and specified tasks. Mode management will consist in controlling switching between modes with a view to handling models of reasonable size. Our approach is a multi-model one and involves representing a complex system by a set of simple automata models, each of which describes the system in a given operating mode. The adopted approach assumes that only one attempted operating mode is activated at a time, whilst other modes must be deactivated. The switching problem may be defined as finding compatible states, when controlled system behavior switches from one operating mode to another. The major contribution of this paper is the avoidance of switching from states (called forbidden states) with ghost compatible states in the selected operating mode. These states are called ghost because their existence would potentially violate a defined selected mode specification.

@InProceedings{Kamach-2006-cesa,
  Title                    = {Forbidden and preforbidden states in the multi-model approach},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {Multiconference on Computational Engineering in Systems Applications, CESA},
  Year                     = {2006},
  Address                  = {Beijing, Chine},
  Month                    = {10},
  Pages                    = {1550--1557},
  Abstract                 = {This paper deals with operating mode management of Discrete Event Systems (DES) and this contribution is based on Supervisory Control Theory (SCT). Our aim is to extend SCT by introducing a mechanism for managing different operating modes for the controlled system. An operating mode corresponds to a specific system structure (engagement or disengagement of different system components) and specified tasks. Mode management will consist in controlling switching between modes with a view to handling models of reasonable size. Our approach is a multi-model one and involves representing a complex system by a set of simple automata models, each of which describes the system in a given operating mode. The adopted approach assumes that only one attempted operating mode is activated at a time, whilst other modes must be deactivated. The switching problem may be defined as finding compatible states, when controlled system behavior switches from one operating mode to another. The major contribution of this paper is the avoidance of switching from states (called forbidden states) with ghost compatible states in the selected operating mode. These states are called ghost because their existence would potentially violate a defined selected mode specification.},
  Doi                      = {10.1109/CESA.2006.313561},
  File                     = {Kamach-2006-cesa.pdf:Kamach-2006-cesa.pdf:PDF},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Design of switching supervisors for reactive class discrete event systems
Kamach, O. and Piétrac, L. and Niel, É.
12th IFAC Symposium on Information Control Problems in Manufacturing, INCOM
2006, Saint-Etienne, France

Based on the decentralized supervisory control, the present paper proposes a contribution to the supervisory control of systems with different operating modes (and production objectives) that react to exceptional events (failure events for instance). Our approach propose a procedure which allows to avoid the conflict problem and to manage the commutation (switching) between two operating modes: nominal and degraded modes. The developed control strategy for tackle the conflict problem and for manage the switching between two operating modes will be implemented by automata.

@InProceedings{Kamach-2006-incom,
  Title                    = {Design of switching supervisors for reactive class discrete event systems},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {$12^{th}$ IFAC Symposium on Information Control Problems in Manufacturing, INCOM},
  Year                     = {2006},
  Address                  = {Saint-Etienne, France},
  Month                    = {5},
  Abstract                 = {Based on the decentralized supervisory control, the present paper proposes a contribution to the supervisory control of systems with different operating modes (and production objectives) that react to exceptional events (failure events for instance). Our approach propose a procedure which allows to avoid the conflict problem and to manage the commutation (switching) between two operating modes: nominal and degraded modes. The developed control strategy for tackle the conflict problem and for manage the switching between two operating modes will be implemented by automata.},
  File                     = {Kamach-2006-incom.pdf:Kamach-2006-incom.pdf:PDF},
  Keywords                 = {Supervisory control theory, operating modes management, switching controllers, systems with changing dynamics, decentralized supervisory control, conflict problem, CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Supervisory Uniqueness for Operating Mode Systems
Kamach, O. and Piétrac, L. and Niel, É.
16th IFAC World Congress
2005, Prague, République tchèque

Multi-model approaches to Discrete-Event-Systems (DES) are ideally suited to implementing operating mode management and inter-mode phase alternation (switching) policy. The resulting major problem involves respecting full system evolution tracking (both plant and specifications) when inter-mode switching is evoked. In other words, after jumping from a mode to another, the newly activated mode must be directed to a state (its starting state) corresponding to the full system evolution state. The aim is therefore to determine the possible starting states of each operating mode. This study develops the underlying notion that, whilst the tracking mechanism is required at plant level, it is extended to supervision level in the sense that specification interpretation remains unchanged in relation to the various starting states. This paper attempts to demonstrate formally, using Supervisory Control Theory (SCT), that there is an unique upervisor for each operating mode by proving that all event sets authorized by the supervisor remain independent of the different starting states.

@InProceedings{Kamach-2005-ifac,
  Title                    = {Supervisory Uniqueness for Operating Mode Systems},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {$16^{th}$ IFAC World Congress},
  Year                     = {2005},
  Address                  = {Prague, République tchèque},
  Month                    = {7},
  Abstract                 = {Multi-model approaches to Discrete-Event-Systems (DES) are ideally suited to implementing operating mode management and inter-mode phase alternation (switching) policy. The resulting major problem involves respecting full system evolution tracking (both plant and specifications) when inter-mode switching is evoked. In other words, after jumping from a mode to another, the newly activated mode must be directed to a state (its starting state) corresponding to the full system evolution state. The aim is therefore to determine the possible starting states of each operating mode. This study develops the underlying notion that, whilst the tracking mechanism is required at plant level, it is extended to supervision level in the sense that specification interpretation remains unchanged in relation to the various starting states. This paper attempts to demonstrate formally, using Supervisory Control Theory (SCT), that there is an unique upervisor for each operating mode by proving that all event sets authorized by the supervisor remain independent of the different starting states.},
  File                     = {Kamach-2005-ifac.pdf:Kamach-2005-ifac.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Generalisation of Discrete Event System multi-modelling
Kamach, Oulaïd and Chafik, S. and Piétrac, L. and Niel, É.
11th IFAC Symposium on Information Control Problems in Manufacturing, INCOM
2004, Salvador, Brésil

DES multi-modeling appears to be well adapted to management of production system operating modes. Associating a specific model of the process to be controlled and its specifications is in fact natural. However, conceptual problems involving the control aspect may arise, when an admissible distinctive behavior set is specified without considering the ensuing complexity. The aim of this paper is to specify and validate formally operating mode management under generalized conditions. Basically, the paper extends the model commutation problem (process-limited) from one-to-one to one-to-all. Its main results concern the generalized tracking mechanism for a different process behavior combination.

@InProceedings{Kamach-2004-incom,
  Title                    = {Generalisation of Discrete Event System multi-modelling},
  Author                   = {Kamach, Oulaïd and Chafik, S. and Piétrac, L. and Niel, É.},
  Booktitle                = {$11^{th}$ IFAC Symposium on Information Control Problems in Manufacturing, INCOM},
  Year                     = {2004},
  Address                  = {Salvador, Brésil},
  Month                    = {4},
  Abstract                 = {DES multi-modeling appears to be well adapted to management of production system operating modes. Associating a specific model of the process to be controlled and its specifications is in fact natural. However, conceptual problems involving the control aspect may arise, when an admissible distinctive behavior set is specified without considering the ensuing complexity. The aim of this paper is to specify and validate formally operating mode management under generalized conditions. Basically, the paper extends the model commutation problem (process-limited) from one-to-one to one-to-all. Its main results concern the generalized tracking mechanism for a different process behavior combination.},
  File                     = {Kamach-2004-incom.pdf:Kamach-2004-incom.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Multi-model approach for discrete event systems : application to operating mode management
Kamach, O. and Piétrac, L. and Niel, É.
IMACS Multiconference Computational Engineering in Systems Applications, CESA
2003, Lille, France

$Abstract

@InProceedings{Kamach-2003-cesa,
  Title                    = {Multi-model approach for discrete event systems : application to operating mode management},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {IMACS Multiconference Computational Engineering in Systems Applications, CESA},
  Year                     = {2003},
  Address                  = {Lille, France},
  Month                    = {7},
  File                     = {Kamach-2003-cesa.pdf:Kamach-2003-cesa.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Representation of a reactive system with different models
Kamach, O. and Chafik, S. and Piétrac, L. and Niel, É.
IEEE international conference on Systems, Man and Cybernetics, SMC
2002, Hammamet, Tunisie

In this paper, we propose an approach which considers different models of a process (multi-model approach) based on the supervision theory of Ramadge and Wonham (RW) [1] [2]. Our contribution enables us to take into account various models which represent different operating modes of the process. In this approach only modes that ensure the same operating mode are actives while the others must be put into their respective inactive state. The problem of commutation between all designed models is formalised by a proposed framework which allows to determine each model and the commutation conditions.

@InProceedings{Kamach-2002-smc,
  Title                    = {Representation of a reactive system with different models},
  Author                   = {Kamach, O. and Chafik, S. and Piétrac, L. and Niel, É.},
  Booktitle                = {IEEE international conference on Systems, Man and Cybernetics, SMC},
  Year                     = {2002},
  Address                  = {Hammamet, Tunisie},
  Month                    = {10},
  Abstract                 = {In this paper, we propose an approach which considers different models of a process (multi-model approach) based on the supervision theory of Ramadge and Wonham (RW) [1] [2]. Our contribution enables us to take into account various models which represent different operating modes of the process. In this approach only modes that ensure the same operating mode are actives while the others must be put into their respective inactive state. The problem of commutation between all designed models is formalised by a proposed framework which allows to determine each model and the commutation conditions.},
  File                     = {Kamach-2002-smc.pdf:Kamach-2002-smc.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Advantages and drawbacks of the logic programm synthesis using supervisory theory
Niel, É. and Regimbal, L. and Piétrac, L.
10th IFAC Symposium on Information Control Problems in Manufacturing, INCOM
2001, Vienne, Autriche

Concurrent engineering, re-engineering and reactivity become more and more real in the design concept. Particularly in the design of automatic control efficiency is attempted in terms of quality, quickness, validation and dependability at the different development steps. Nevertheless more an industrial process is automatically controlled and more it is important to manage the performance of the control design. Several investigations are conducted today in the use of assistance tools in the design of proper control laws which will be applied to Programmable Logic Controllers (PLC). In another way, attentions emerged from the synthesis concept using language formalisms. The proposed idea here is to combine these two approaches, i.e. to persuade the designer that synthesis is able to assist the design of logic program. In that way, advantages and drawbacks of the logic program synthesis using supervisory control theory are here discussed. This paper includes two main parts, the first one is devoted to a brief description of the supervisory control particularly described in terms of ability in determining some important properties, the second one based on an applicative example leads to a discussion on the transfer ability of the theory.

@InProceedings{Niel-2001-incom,
  Title                    = {Advantages and drawbacks of the logic programm synthesis using supervisory theory},
  Author                   = {Niel, É. and Regimbal, L. and Piétrac, L.},
  Booktitle                = {$10^{th}$ IFAC Symposium on Information Control Problems in Manufacturing, INCOM},
  Year                     = {2001},
  Address                  = {Vienne, Autriche},
  Month                    = {9},
  Abstract                 = {Concurrent engineering, re-engineering and reactivity become more and more real in the design concept. Particularly in the design of automatic control efficiency is attempted in terms of quality, quickness, validation and dependability at the different development steps. Nevertheless more an industrial process is automatically controlled and more it is important to manage the performance of the control design. Several investigations are conducted today in the use of assistance tools in the design of proper control laws which will be applied to Programmable Logic Controllers (PLC). In another way, attentions emerged from the synthesis concept using language formalisms. The proposed idea here is to combine these two approaches, i.e. to persuade the designer that synthesis is able to assist the design of logic program. In that way, advantages and drawbacks of the logic program synthesis using supervisory control theory are here discussed. This paper includes two main parts, the first one is devoted to a brief description of the supervisory control particularly described in terms of ability in determining some important properties, the second one based on an applicative example leads to a discussion on the transfer ability of the theory.},
  File                     = {Niel-2001-incom.pdf:Niel-2001-incom.pdf:PDF},
  Keywords                 = {supervisory control, logic program, PLC, synthesis, assistance design, CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

A formal meta-modelling approach for the design of automated manufacturing systems
Piétrac, L. and Denis, B. and Lesage, J.-J.
Proceedings of the International Workshop on Formal Methods and Manufacturing, WFMM
1999, Zaragoza, Espagne

The design of Automated Manufacturing Systems (AMS) consists in the construction of many models. The quality of the designed system depends on the quality of the produced models, and also on the quality of the languages and methods used during the design. Some re- cent works aim to improve these languages and these methods by using meta-modeling. The purpose of this paper is to make an inventory of the requirements in meta-modeling and to propose a language of meta-modeling enabling to meet these requirements.

@InProceedings{Pietrac-1999-wfmm,
  Title                    = {A formal meta-modelling approach for the design of automated manufacturing systems},
  Author                   = {Piétrac, L. and Denis, B. and Lesage, J.-J.},
  Booktitle                = {Proceedings of the International Workshop on Formal Methods and Manufacturing, WFMM},
  Year                     = {1999},
  Address                  = {Zaragoza, Espagne},
  Month                    = {9},
  Pages                    = {65--74},
  Abstract                 = {The design of Automated Manufacturing Systems (AMS) consists in the construction of many models. The quality of the designed system depends on the quality of the produced models, and also on the quality of the languages and methods used during the design. Some re-
cent works aim to improve these languages and these methods by using meta-modeling. The purpose of this paper is to make an inventory of the requirements in meta-modeling and to propose a language of meta-modeling enabling to meet these requirements.},
  File                     = {Pietrac-1999-wfmm.pdf:Pietrac-1999-wfmm.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Formalization of the design of control systems
Piétrac, L. and Denis, B. and Lesage, J.-J.
Proceedings of the Sixth International Symposium on Robotics and Manufacturing, ISRAM, Second World Automation Congress, WAC
1996, Montpellier, France

Development of automated manufacturing systems usually consists in varied stages according to different points of view or different subsystems. In each of these stages, different modelling tools are used (often in an integrated manner). Metamodelization give to designers a rigorous way to define modelling tools and their integration. In this paper, we propose a comparative approach between different modelling tools used in the field of metamodelization. In such a context, data modelling tools, algebraic modelling tools, Z language are used to the metamodelization of the Grafcet.

@InProceedings{Pietrac-1996-isram,
  Title                    = {Formalization of the design of control systems},
  Author                   = {Piétrac, L. and Denis, B. and Lesage, J.-J.},
  Booktitle                = {Proceedings of the Sixth International Symposium on Robotics and Manufacturing, ISRAM, Second World Automation Congress, WAC},
  Year                     = {1996},
  Address                  = {Montpellier, France},
  Month                    = {5},
  Abstract                 = {Development of automated manufacturing systems usually consists in varied stages according to different points of view or different subsystems. In each of these stages, different modelling tools are used (often in an integrated manner). Metamodelization give to designers a rigorous way to define modelling tools and their integration. In this paper, we propose a comparative approach between different modelling tools used in the field of metamodelization. In such a context, data modelling tools, algebraic modelling tools, Z language are used to the metamodelization of the Grafcet.},
  File                     = {Pietrac-1996-isram.pdf:Pietrac-1996-isram.pdf:PDF},
  Keywords                 = {CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Conférences francophones

Integrated Modeling Proposal of Supervisory Control Theory and Model-Based System Engineering
Lu, X. and Piétrac, L. and Niel, É.
12e Colloque sur la Modélisation des Systèmes Réactifs, MSR
2019, Angers, France

Supervisory Control Theory (SCT) is one of the most important formal paradigms for developing automatic control for Discrete Event Systems (DESs). From the perspective of engineering practice, however, formal models within SCT paradigm can just be used to describe the behavior of studied system and unable to model the indispensable aspects for engineering development such as requirement traceability, structure and implementation. In order to narrow the gap between formal approach and engineering practice, a modeling framework of integrating SCT and Model-Based System Engineering (MBSE) is proposed. In this study, SysML diagrams are proposed as complementary models which describe the aspects lacked by formal models. Based on the integration of both SysML models and formal models, the indispensible views of the system to be developed from the perspectives of both SCT and MBSE are presented. An energy system is used as case study to illustrate the proposed modeling framework, in which a modular control is synthesized by the given uncontrolled system and requirements. The case study shows that the proposed solution validates the engineering concerns from requirements analysis to implementation as well as traceability.

@InProceedings{Lu-2019-msr,
  author      = {\underline{Lu, X.} and \textbf{L. Piétrac} and Niel, É.},
  booktitle   = {{MSR 2019 - 12{\`e}me Colloque sur la Mod{\'e}lisation des Syst{\`e}mes R{\'e}actifs, Nov 2019, Angers, France}},
  title       = {{Integrated Modeling Proposal of Supervisory Control Theory and Model-Based System Engineering}},
  year        = {2019},
  address     = {Angers, France},
  month       = nov,
  note        = {poster},
  abstract    = {Supervisory Control Theory (SCT) is one of the most important formal paradigms for developing automatic control for Discrete Event Systems (DESs). From the perspective of engineering practice, however, formal models within SCT paradigm can just be used to describe the behavior of studied system and unable to model the indispensable aspects for engineering development such as requirement traceability, structure and implementation. In order to narrow the gap between formal approach and engineering practice, a modeling framework of integrating SCT and Model-Based System Engineering (MBSE) is proposed. In this study, SysML diagrams are proposed as complementary models which describe the aspects lacked by formal models. Based on the integration of both SysML models and formal models, the indispensible views of the system to be developed from the perspectives of both SCT and MBSE are presented. An energy system is used as case study to illustrate the proposed modeling framework, in which a modular control is synthesized by the given uncontrolled system and requirements. The case study shows that the proposed solution validates the engineering concerns from requirements analysis to implementation as well as traceability.},
  hal_id      = {hal-02432707},
  hal_version = {v1},
  keywords    = {Discrete event system, Supervisory Control Theory, Model-Based System Engineering, SysML, Modeling, CN},
  url         = {https://hal.archives-ouvertes.fr/hal-02432707},
}
Pronostic des événements de défaillances basé sur les réseaux de Petri temporels labellisés
Kanazy, R. and Chafik, S. and Niel, É. and Piétrac, L.
12e Colloque sur la Modélisation des Systèmes Réactifs, MSR
2019, Angers, France
@InProceedings{Kanazy-2019-msr,
  author      = {Kanazy, R. and Chafik, S. and Niel, É. and \textbf{L. Piétrac}},
  booktitle   = {{MSR 2019 - 12{\`e}me Colloque sur la Mod{\'e}lisation des Syst{\`e}mes R{\'e}actifs,}},
  title       = {{Pronostic des {\'e}v{\'e}nements de d{\'e}faillances bas{\'e} sur les r{\'e}seaux de Petri temporels labellis{\'e}s}},
  year        = {2019},
  address     = {Angers, France},
  month       = nov,
  note        = {poster},
  hal_id      = {hal-02432716},
  hal_version = {v1},
  url         = {https://hal.archives-ouvertes.fr/hal-02432716},
}
Démarche de conception sure de la supervision de la fonction conduite autonome
Cuer, R. and Piétrac, L. and Niel, É. and Diallo, S. and Minoiu-Enache, N. and Dang-Van-Nhan, C.
11e colloque sur la Modélisation des Systèmes Réactifs, MSR
2017, Marseille, France

Le véhicule autonome est conçu pour se conduire sans aucune intervention du conducteur. Ce véhicule comprend une nouvelle fonction, appelée fonction AD (pour Autonomous Driving), en charge de la conduite lorsque ceci est autorisé. Cette fonction peut se trouver dans différents états (off, disponible par exemple) qui sont gérés par une sous-fonction nommée supervision. Le principal objet de cette étude est de garantir que la supervision d’une fonction, réalisée par un système automobile embarqué critique du point de vue de la sûreté, respecte les exigences fonctionnelles et de sécurité qui lui sont allouées. Puisque deux aspects différents sont étudiés, la mise en cohérence de l’ensemble de ces exigences, dès le début de la conception, est un défi majeur. Dans cet article, une méthode est proposée pour contribuer à résoudre ce problème. Les exigences traitées sont progressivement consolidées en utilisant des modèles comportementaux formels. Les potentielles ambiguïtés, incohérences ou incomplétudes sont ainsi graduellement traitées. De plus, l’application de la méthode à la conception de la fonction AD souligne son efficacité et son intérêt dans un contexte industriel.

@InProceedings{Cuer-2017-msr,
  author    = {Cuer, R. and Piétrac, L. and Niel, É. and Diallo, S. and Minoiu-Enache, N. and Dang-Van-Nhan, C.},
  booktitle = {11{\`e}me Colloque sur la Modélisation des Systèmes Réactifs, MSR},
  title     = {Démarche de conception sure de la supervision de la fonction conduite autonome},
  year      = {2017},
  address   = {Marseille, France},
  abstract  = {Le véhicule autonome est conçu pour se conduire sans aucune intervention du conducteur. Ce véhicule comprend une nouvelle fonction, appelée fonction AD (pour Autonomous Driving), en charge de la conduite lorsque ceci est autorisé. Cette fonction peut se trouver dans différents états (off, disponible par exemple) qui sont gérés par une sous-fonction nommée supervision. Le principal objet de cette étude est de garantir que la supervision d’une fonction, réalisée par un système automobile embarqué critique du point de vue de la sûreté, respecte les exigences fonctionnelles et de sécurité qui lui sont allouées. Puisque deux aspects différents sont étudiés, la mise en cohérence de l’ensemble de ces exigences, dès le début de la conception, est un défi majeur. Dans cet article, une méthode est proposée pour contribuer à résoudre ce problème. Les exigences traitées sont progressivement consolidées en utilisant des modèles comportementaux formels. Les potentielles ambiguïtés, incohérences ou incomplétudes sont ainsi graduellement traitées. De plus, l’application de la méthode à la conception de la fonction AD souligne son efficacité et son intérêt dans un contexte industriel.},
}
Modélisation par un graphe de flots d'une architecture alternative pour les systèmes de stockage multi-cellulaire de l'énergie électrique
Savard, C. and Niel, É. and Venet, P. and Piétrac, L. and Sari, A.
Journées Chercheurs en Génie Electrique
2017, Arras, France

Une architecture alternative pour réaliser des systèmes de stockage de l'énergie électrique multi-cellulaire est présentée ici : le C-3C (pour “une cellule vers trois cellules”). Cette architecture présente la même fiabilité qu'une structure série de cellules associées en parallèle. Avec son grand nombre de commutateurs connectés directement à chaque cellule et sa structure globale particulière, le dispositif C-3C est capable de distribuer le flux de courant indépendamment entre chaque cellule de la batterie, quelles que soient sa position (ligne et colonne). La structure peut être modélisée par un graphe de flux dont les arcs peuvent être pondérés par les paramètres électriques de chaque cellule. La mission peut être assurée par certaines cellules tandis que d'autres sont au repos ou en phase d'équilibrage. Comme le nombre de combinaisons possibles pour associer les cellules devient rapidement gigantesque lorsque le nombre de cellules augmente, en pondérant différemment les arcs du graphe, il est possible de limiter les conséquences du vieillissement des cellules en modifiant la configuration interne. Tout algorithme de recherche de chemin optimal permet d'attribuer les ressources disponibles.

@@InProceedings{Savard-2017-jcge,
  author    = {Savard, C. and Niel, É. and Venet, P. and Piétrac, L. and Sari, A.},
  booktitle = {Journées Chercheurs en Génie Electrique},
  title     = {Modélisation par un graphe de flots d'une architecture alternative pour les systèmes de stockage multi-cellulaire de l'énergie électrique},
  year      = {2017},
  address   = {Arras, France},
  month     = jun,
  abstract  = {Une architecture alternative pour réaliser des systèmes de stockage de l'énergie électrique multi-cellulaire est présentée ici : le C-3C (pour “une cellule vers trois cellules”). Cette architecture présente la même fiabilité qu'une structure série de cellules associées en parallèle. Avec son grand nombre de commutateurs connectés directement à chaque cellule et sa structure globale particulière, le dispositif C-3C est capable de distribuer le flux de courant indépendamment entre chaque cellule de la batterie, quelles que soient sa position (ligne et colonne). La structure peut être modélisée par un graphe de flux dont les arcs peuvent être pondérés par les paramètres électriques de chaque cellule. La mission peut être assurée par certaines cellules tandis que d'autres sont au repos ou en phase d'équilibrage. Comme le nombre de combinaisons possibles pour associer les cellules devient rapidement gigantesque lorsque le nombre de cellules augmente, en pondérant différemment les arcs du graphe, il est possible de limiter les conséquences du vieillissement des cellules en modifiant la configuration interne. Tout algorithme de recherche de chemin optimal permet d'attribuer les ressources disponibles.},
  keywords  = {batteries, graphe de flot, architecture matricielle, systèmes de stockage de l'énergie, matrice latine, CN},
}
Amélioration de la fiabilité des structures matricielles de batteries
Savard, C. and Niel, É. and Piétrac, L. and Venet, P. and Sari, A.
Journées Chercheurs en Génie Electrique
2016, Saint-Malo, France
@InProceedings{Savard-2016-lambdamu,
  author    = {Savard, C. and Niel, É. and Piétrac, L. and Venet, P. and Sari, A.},
  booktitle = {$20^e$ Congrès de maîtrise des risques et de sûreté de fonctionnement},
  title     = {Amélioration de la fiabilité des structures matricielles de batteries},
  year      = {2016},
  address   = {Saint-Malo, France},
  month     = {10},
}
Contribution formelle à l'expression des spécifications pour la conception de contrôleurs discrets
Piétrac, L. and Dumitrescu, E. and Niel, E.
10e Colloque sur la Modélisation des Systèmes Réactifs, MSR
2015, Nancy, France

La théorie du contrôle par supervision fournit un cadre formel pour la modélisation des Systèmes à Evénements Discrets (SED) et la synthèse de contrôleurs en fournissant une distinction explicite entre le système non contrôlé et les spécifications. Elle a de nombreuses extensions et applications et a donné lieu à de nombreux travaux de par le monde. L'utilisation des événements comme élément central de l'étude des systèmes est la clé de ce succès. Elle a cependant l'inconvénient de contraindre le concepteur à étudier la dynamique des systèmes uniquement à travers des successions d'événements. Cela n'est en théorie pas une limite, mais en pratique cela peut rendre difficile l'expression des spécifications. Dans cet article nous proposons un nouveau type d'automate à états facilitant l'expression de ces spécifications tout en restant dans le cadre du contrôle de systèmes modélisés par des automates à états tels qu'utilisés dans la théorie RW.

@@InProceedings{Pietrac-2015-msr,
  author    = {Piétrac, L. and Dumitrescu, E. and Niel, E.},
  title     = {Contribution formelle à l'expression des spécifications pour la conception de contrôleurs discrets},
  booktitle = {$10^e$ Colloque sur la Modélisation des Systèmes Réactifs, MSR},
  year      = {2015},
  address   = {Nancy, France},
  month     = {11},
  abstract  = {La théorie du contrôle par supervision fournit un cadre formel pour la modélisation des Systèmes à Evénements Discrets (SED) et la synthèse de contrôleurs en fournissant une distinction explicite entre le système non contrôlé et les spécifications. Elle a de nombreuses extensions et applications et a donné lieu à de nombreux travaux de par le monde. L'utilisation des événements comme élément central de l'étude des systèmes est la clé de ce succès. Elle a cependant l'inconvénient de contraindre le concepteur à étudier la dynamique des systèmes uniquement à travers des successions d'événements. Cela n'est en théorie pas une limite, mais en pratique cela peut rendre difficile l'expression des spécifications. Dans cet article nous proposons un nouveau type d'automate à états facilitant l'expression de ces spécifications tout en restant dans le cadre du contrôle de systèmes modélisés par des automates à états tels qu'utilisés dans la théorie RW.},
}
Démarche de formalisation et de synthèse de procédures d'exploitation d’une ligne de métro
Paquereau, D. and Piétrac, L. and Niel, É and Bouresche L.
5e Journées Doctorales / Journées Nationales MACS, JD-JN-MACS
2013, Strasbourg, France

L’objectif de cet article est de présenter une d'émarche de modélisation et de synthèse de procédures d’exploitation pour la supervision d’une ligne de métro. Cette démarche s'organise en quatre étapes : tout d’abord la classification des données afin de faire ressortir des caractéristiques et séquences communes, puis la formalisation de ces procédures avec le langage BPMN 2. La démarche propose ensuite de modéliser les procédures avec des réeseaux de Petri et d’appliquer la théeorie du contrôle par supervision afin de garantir que les procédures mises en place respectent les propriétés de vivacité et de sécurité nécessaires dans ce domaine d’application.

@InProceedings{Paquereau-2013-jdmacs,
  Title                    = {Démarche de formalisation et de synthèse de procédures d'exploitation d’une ligne de métro},
  Author                   = {Paquereau, D. and Piétrac, L. and Niel, É and Bouresche L.},
  Booktitle                = {$5^{e}$ Journées Doctorales / Journées Nationales MACS, JD-JN-MACS},
  Year                     = {2013},
  Address                  = {Strasbourg, France},
  Month                    = {7},
  Abstract                 = {L’objectif de cet article est de présenter une d'émarche de modélisation et de synthèse de procédures d’exploitation pour la supervision d’une ligne de métro. Cette démarche s'organise en quatre étapes : tout d’abord la classification des données afin de faire ressortir des caractéristiques et séquences communes, puis la formalisation de ces procédures avec le langage BPMN 2. La démarche propose ensuite de modéliser les procédures avec des réeseaux de Petri et d’appliquer la théeorie du contrôle par supervision afin de garantir que les procédures mises en place respectent les propriétés de vivacité et de sécurité nécessaires dans ce domaine d’application.},
}

Démarche de modélisation et d'évaluation de procédures d'exploitation d'une ligne de métro
Paquereau, D. and Piétrac, L. and Niel, É. and Bouresche, L.
Modélisation des Systèmes Réactifs, MSR
2013, Rennes, France

The research developed here comes within a global approach of a metro line supervision study. Methodology of supervisory control theory is applied to avoid undesirable behaviors during incident situations management and so enforce passengers safety. In this paper, unlike the forbidden state problem, the set of states not to reach is not a given parameter. This set corresponds to safety and controllability constraints: the sets of critical and dreaded states are defined and determined. An example is presented in transport systems area and the developed algorithm is used to identify potentially unsafe situations which do not ensure passengers safety.

@Misc{Paquereau-2013-msr,
  author       = {Paquereau, D. and Piétrac, L. and Niel, É. and Bouresche, L.},
  howpublished = {Modélisation des Systèmes Réactifs, MSR},
  title        = {Démarche de modélisation et d'évaluation de procédures d'exploitation d'une ligne de métro},
  year         = {2013},
  abstract     = {The automatic train supervision system ATS supervises metro lines management but many incidents disrupt their proper operation. The aim of the study is to gain knowledge on the procedures for incident management and to model them to assess dangerous levels achieved. Improvements could be made in the supervision application.},
  address      = {Rennes, France},
  affiliation  = {Amp{\`e}re , Thales Communications [Colombes]},
}
Identification des états équivalents dans l'approche modale
Faraut, G. and Piétrac, L. and Niel, É.
Modélisation des Systèmes Réactifs, MSR
2011, Lille, France

Résumé : Ce papier présente une extension de la fonction de suivi de trajectoire pour identifier les états compatibles entre modes. La fonction de suivi de trajectoire a pour but d’assurer que les commutations entre modes soient sûres. Utilisée dans une démarche d’aide à la conception se basant sur la Théorie de Contrôle par Supervision (TCS), les spécifications sont formellement assurées. Cependant, les modèles manipulés sont des automates à états émondés et il a été mise en évidence que certains états non-accessibles, donc supprimés pour obtenir un automate émondé, étaient accessibles depuis un autre mode par une commutation. L’extension que nous proposons s’appuie sur les automates non-émondés et propose une comparaison formelle sur les noms des états pour déterminer les états accessibles depuis d’autres modes. Abstract : This paper presents an extension of the process tracking in order to identify the compatible states among modes. The aim of the process tracking is to ensure the switching between modes is reliable. Used in a framework based on Supervisory Control Theory (SCT), the specifications then are formally ensured. However, the handle models are trimmed automata and then some inaccessibles states, removed by the trim computing, could be accessible from another mode by a switch event. The proposed extension of the process tracking uses the non-trimmed automata and a formal comparison on the name of states in order to identify the accessible states from other modes.

@InProceedings{Faraut-2011-msr,
  Title                    = {Identification des états équivalents dans l'approche modale},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {Modélisation des Systèmes Réactifs, MSR},
  Year                     = {2011},
  Address                  = {Lille, France},
  Month                    = {11},
  Abstract                 = {Résumé : Ce papier présente une extension de la fonction de suivi de trajectoire pour identifier les états compatibles entre modes. La fonction de suivi de trajectoire a pour but d’assurer que les commutations entre modes soient sûres. Utilisée dans une démarche d’aide à la conception se basant sur la Théorie de Contrôle par Supervision (TCS), les spécifications sont formellement assurées. Cependant, les modèles manipulés sont des automates à états émondés et il a été mise en évidence que certains états non-accessibles, donc supprimés pour obtenir un automate émondé, étaient accessibles depuis un autre mode par une commutation. L’extension que nous proposons s’appuie sur les automates non-émondés et propose une comparaison formelle sur les noms des états pour déterminer les états accessibles depuis d’autres modes.
Abstract : This paper presents an extension of the process tracking in order to identify the compatible states among modes. The aim of the process tracking is to ensure the switching between modes is reliable. Used in a framework based on Supervisory Control Theory (SCT), the specifications then are formally ensured. However, the handle models are trimmed automata and then some inaccessibles states, removed by the trim computing, could be accessible from another mode by a switch event. The proposed extension of the process tracking uses the non-trimmed automata and a formal comparison on the name of states in order to identify the accessible states from other modes.},
}

Démarche d'aide à la conception par approche multimode des SED
Faraut, G. and Piétrac, L. and Niel, E.
Journal Européen des Systèmes Automatisés, JESA
2009, vol. 43, n°7-9

Basé sur la théorie du contrôle par supervision (TCS), nous proposons une démarche d'aide à l'étude de la dynamique des Systèmes à Événements Discrets (SED). Située en amont du cycle de conception des lois de commande des SED, notre proposition concerne la gestion des modes de fonctionnement. L'objectif est de permettre tout d'abord l'étude formelle de la dynamique du système contrôlé dans chaque mode puis celle de la succession de ces dynamiques. Dans cet article nous insisterons particulièrement sur la présentation des différentes étapes de construction et de génération automatique des modèles ainsi que sur les possibilités de validation de ceux-ci. Based on the Supervisory Control Theory, this paper introduces a framework to help study the dynamics of Discrete Event Systems (DES). Upstream of the design process of control law in DES, the proposal focuses on the management modes of operation. The goal is to first allowing a formal study of the controlled system's dynamics in each mode and secondly studying the mode switching. This article is focused on the presentation of the different stages of design, the automatic generation of models and the possibilities of validating them.

@Article{Faraut-2009-msr,
  Title                    = {Démarche d'aide à la conception par approche multimode des SED},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, E.},
  Journal                  = {Journal Européen des Systèmes Automatisés},
  Year                     = {2009},
  Note                     = {Actes du congrès Modélisation des Systèmes Réactifs (MSR)},
  Number                   = {7--9},
  Pages                    = {837--853},
  Volume                   = {43},
  Abstract                 = {Basé sur la théorie du contrôle par supervision (TCS), nous proposons une démarche d'aide à l'étude de la dynamique des Systèmes à Événements Discrets (SED). Située en amont du cycle de conception des lois de commande des SED, notre proposition concerne la gestion des modes de fonctionnement. L'objectif est de permettre tout d'abord l'étude formelle de la dynamique du système contrôlé dans chaque mode puis celle de la succession de ces dynamiques. Dans cet article nous insisterons particulièrement sur la présentation des différentes étapes de construction et de génération automatique des modèles ainsi que sur les possibilités de validation de ceux-ci. 
Based on the Supervisory Control Theory, this paper introduces a framework to help study the dynamics of Discrete Event Systems (DES). Upstream of the design process of control law in DES, the proposal focuses on the management modes of operation. The goal is to first allowing a formal study of the controlled system's dynamics in each mode and secondly studying the mode switching. This article is focused on the presentation of the different stages of design, the automatic generation of models and the possibilities of validating them.},
  Comment                  = {16-18 novembre 2009},
  Keywords                 = {Systèmes à Événements Discrets (SED), Théorie de contrôle par supervision (TCS), approche multimode, aide à la conception, méthode formelle},
}

Identification des états incompatibles lors d'un changement de mode
Faraut, G. and Piétrac, L. and Niel, É.
3e Journées Doctorales / Journées Nationales MACS, JD-JN-MACS
2009, Angers, France

Le changement de mode est un des problèmes que nous pouvons avoir lors de la conception de systèmes à événements discrets (SED). En effet, même basé sur des spécifications triviales, il est difficile de prouver formellement que les modèles de chaque mode et leurs interactions soient sans fautes. Cet article montre que l?utilisation de la théorie de contrôle par supervision est un outil intéressant pour détecter les incompatibilités entre spécifications grâce à une séparation entre le modèle du procédé et le modèle des spécifications. Nous utiliserons un cas simple pour présenter une méthode introduisant de la flexibilité dans les spécifications propres à chaque mode. Cette méthode permet d?ajuster, ou de modifier les incompatibilités entre spécifications afin d?obtenir un changement de mode cohérent.

@InProceedings{Faraut-2009-jdmacs,
  Title                    = {Identification des états incompatibles lors d'un changement de mode},
  Author                   = {Faraut, G. and Piétrac, L. and Niel, É.},
  Booktitle                = {$3^{e}$ Journées Doctorales / Journées Nationales MACS, JD-JN-MACS},
  Year                     = {2009},
  Address                  = {Angers, France},
  Month                    = {3},
  Abstract                 = {Le changement de mode est un des problèmes que nous pouvons avoir lors de la conception de systèmes à événements discrets (SED). En effet, même basé sur des spécifications triviales, il est difficile de prouver formellement que les modèles de chaque mode et leurs interactions soient sans fautes. Cet article montre que l?utilisation de la théorie de contrôle par supervision est un outil intéressant pour détecter les incompatibilités entre spécifications grâce à une séparation entre le modèle du procédé et le modèle des spécifications. Nous utiliserons un cas simple pour présenter une méthode introduisant de la flexibilité dans les spécifications propres à chaque mode. Cette méthode permet d?ajuster, ou de modifier les incompatibilités entre spécifications afin d?obtenir un changement de mode cohérent.},
  Comment                  = {6 p., 17--18 mars},
  File                     = {Faraut-2009-jdmacs.pdf:Faraut-2009-jdmacs.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Modélisation temporelle et stochastique du TRS pour l'évaluation de l'efficience des systèmes de production
Kombé, T. and Niel, É. and Piétrac, L. and Rauzy, A.
3e Journées Doctorales / Journées Nationales MACS, JD-JN-MACS
2009, Angers, France

Nous présentons dans cet article une méthode d'évaluation de l'efficience basée sur la modélisation temporelle et stochastique et de la simulation de la propagation des fautes dans les systèmes industriels. Le TRS (Taux de Rendement Synthétique) est devenu au travers de la norme NF E60-182 l'un des indicateurs majeurs de l'efficience du pilotage des systèmes de production. Il intègre essentiellement 3 notions (qualité, productivité et disponibilité). Si son expression pour un composant est assez simple, sa modélisation pour l'évaluation du comportement fonctionnel et dysfonctionnel l'est beaucoup moins (prise en compte des facteurs d'échelle, des désynchronisations et du facteur humain). Afin de permettre une prise en compte des contributions individuelles de chaque composante du TRS, nous avons utilisé les automates de mode comme haut langage de description. Les attendus débouchent en amont sur un apport formel pour l'établissement d'une méthodologie d'analyse et de conception, et en aval sur une fourniture d'indicateurs décisionnels. Les résultats sont implantés autour d'un démonstrateur basé sur AltaRica DataFlow langage à la fois formel et graphique et véritable outil de modélisation / simulation.

@InProceedings{Kombe-2009-jdmacs,
  Title                    = {Modélisation temporelle et stochastique du TRS pour l'évaluation de l'efficience des systèmes de production},
  Author                   = {Kombé, T. and Niel, É. and Piétrac, L. and Rauzy, A.},
  Booktitle                = {$3^{e}$ Journées Doctorales / Journées Nationales MACS, JD-JN-MACS},
  Year                     = {2009},
  Address                  = {Angers, France},
  Month                    = {3},
  Abstract                 = {Nous présentons dans cet article une méthode d'évaluation de l'efficience basée sur la modélisation temporelle et stochastique et de la simulation de la propagation des fautes dans les systèmes industriels. Le TRS (Taux de Rendement Synthétique) est devenu au travers de la norme NF E60-182 l'un des indicateurs majeurs de l'efficience du pilotage des systèmes de production. Il intègre essentiellement 3 notions (qualité, productivité et disponibilité). Si son expression pour un composant est assez simple, sa modélisation pour l'évaluation du comportement fonctionnel et dysfonctionnel l'est beaucoup moins (prise en compte des facteurs d'échelle, des désynchronisations et du facteur humain). Afin de permettre une prise en compte des contributions individuelles de chaque composante du TRS, nous avons utilisé les automates de mode comme haut langage de description. Les attendus débouchent en amont sur un apport formel pour l'établissement d'une méthodologie d'analyse et de conception, et en aval sur une fourniture d'indicateurs décisionnels. Les résultats sont implantés autour d'un démonstrateur basé sur AltaRica DataFlow langage à la fois formel et graphique et véritable outil de modélisation / simulation.},
  File                     = {Kombe-2009-jdmacs.pdf:Kombe-2009-jdmacs.pdf:PDF},
  Keywords                 = {efficience, TRS, AltaRica Data-Flow, automate de mode, norme NFE 60-182, système de production, CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2010.04.26}
}

Implémentation de superviseurs générés par Synthèse de Contrôleurs Discrets
Dumitrescu, E. and Ren, Mingming and Piétrac, L. and Niel, É.
Conférence Internationale Francophone d'Automatique, CIFA
2008, Bucarest, Roumanie

Nous examinons l'implémentation de superviseurs générés par des techniques symboliques de Synthèse de Contrôleurs Discrets (SCD), basées sur l'utilisation des BDDs. La technique d'implémentation que nous proposons résout l?indéterminisme de contrôle ainsi que l'incompatibilité structurelle introduite par la SCD symbolique. Les propriétés structurelles du contrôleur implémenté démontrent l'intérêt de cette démarche. Notre technique est illustrée sur un exemple réel modélisant un composant d'un \og Système sur une puce \fg{}: un convertisseur série-parallèle.

@InProceedings{Dumitrescu-2008-cifa,
  Title                    = {Implémentation de superviseurs générés par Synthèse de Contrôleurs Discrets},
  Author                   = {Dumitrescu, E. and Ren, Mingming and Piétrac, L. and Niel, É.},
  Booktitle                = {Conférence Internationale Francophone d'Automatique, CIFA},
  Year                     = {2008},
  Address                  = {Bucarest, Roumanie},
  Month                    = {9},
  Abstract                 = {Nous examinons l'implémentation de superviseurs générés par des techniques symboliques de Synthèse de Contrôleurs Discrets (SCD), basées sur l'utilisation des BDDs. La technique d'implémentation que nous proposons résout l?indéterminisme de contrôle ainsi que l'incompatibilité structurelle introduite par la SCD symbolique. Les propriétés structurelles du contrôleur implémenté démontrent l'intérêt de cette démarche. Notre technique est illustrée sur un exemple réel modélisant un composant d'un \og Système sur une puce \fg{}: un convertisseur série-parallèle.},
  Comment                  = {6 p., 3-5 septembre},
  File                     = {Dumitrescu-2008-cifa.pdf:Dumitrescu-2008-cifa.pdf:PDF},
  Keywords                 = {Synthèse de Contrôleurs Discrets, parcours symbolique, Diagrammes de Décision Binaire (BDD), Systèmes à Evénements Discrets (SED), CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Approche formelle pour la spécification, la vérification et le contrôle des systèmes flexibles de production
Zairi, Sajeh and Zouari, Belhassen and Piétrac, Laurent
Ecole d'été temps réel
2007, Nantes, France

Cet article introduit un modèle formel pour la spécification d’une large classe de Systèmes Flexibles de Production (SFP). A l’aide de ce modèle, un concepteur peut exprimer les capacités fonctionnelles de son système (machines, transport, stockage) et le comportement de ses composants en termes de gammes de fabrication. Les opérations de transformation, d’assemblage, de désassemblage et de test sont prises en compte par différentes gammes parallèles. Une interface graphique est fournie à l’utilisateur pour lui permettre une spécification aisée de son système. Une telle spécification est automatiquement transformée en un modèle réseaux de Petri colorés (RdPC) à partir duquel des méthodes de vérification formelle ainsi que des techniques de contrôle de supervision peuvent être appliquées. Ainsi, une solution paramétrée est définie prenant en compte toute la flexibilité du modèle de spécification. Cette démarche a été implémentée au sein d’un outil appelé MAC-FMS qui est interfacé à l’environnement CPN Tools.

@InProceedings{Zairi-2007-eetr,
  Title                    = {Approche formelle pour la spécification, la vérification et le contrôle des systèmes flexibles de production},
  Author                   = {Zairi, Sajeh and Zouari, Belhassen and Piétrac, Laurent},
  Booktitle                = {Ecole d'été temps réel},
  Year                     = {2007},
  Address                  = {Nantes, France},
  Pages                    = {39--43},
  Abstract                 = {Cet article introduit un modèle formel pour la spécification d’une large classe de Systèmes Flexibles de Production (SFP). A l’aide de ce modèle, un concepteur peut exprimer les capacités fonctionnelles de son système (machines, transport, stockage) et le comportement de ses composants en termes de gammes de fabrication. Les opérations de transformation, d’assemblage, de désassemblage et de test sont prises en compte par différentes gammes parallèles. Une interface graphique est fournie à l’utilisateur pour lui permettre une spécification aisée de son système. Une telle spécification est automatiquement transformée en un modèle réseaux de Petri colorés
(RdPC) à partir duquel des méthodes de vérification formelle ainsi que des techniques de contrôle de supervision peuvent être appliquées. Ainsi, une solution paramétrée est définie prenant en compte toute la flexibilité du modèle de spécification. Cette démarche a été implémentée au sein d’un outil appelé MAC-FMS qui est interfacé à l’environnement CPN Tools.},
  File                     = {Zairi-2007-eetr.pdf:Zairi-2007-eetr.pdf:PDF},
  Owner                    = {L. Piétrac},
  Timestamp                = {2011.11.16}
}

Commandes multi-contrôleurs et multi-modèles pour les SED
Kamach, O. and Piétrac, L. and Niel, É.
7e congrès international pluridisciplinaire Qualité et Sûreté de fonctionnement, Qualita
2007, Tanger, Maroc

Les travaux présentés dans cet article portent sur la synthèse de contrôleurs pour la gestion des modes de fonctionnement des Systèmes à Evénements Discrets (SED). Notre contribution se base sur la théorie de contrôle par supervision. Notre objectif est d'enrichir cette théorie par des mécanismes permettant l'étude des modes de fonctionnement tout en gardant des modèles de taille raisonnable. Nous proposons une approche, dite multi-modèle, qui permet de représenter les SED évoluant dans différents modes de fonctionnement par un ensemble de modèles simples décrivant chacun le comportement du système dans un mode donné. L'alternance de modes est assurée par un mécanisme de suivi. Ensuite nous associons à chacun des modèles des procédés un modèle unique de spécification. Comme les modèles des procédés, ces modèles de spécification sont soumis à un mécanisme de commutation : ils doivent être activés depuis un état permettant d'ajuster la nouvelle dynamique du procédé avec les actions de contrôle à mener. Enfin nous présenterons un exemple pour illustrer notre approche.

@InProceedings{Kamach-2007-qualita,
  Title                    = {Commandes multi-contrôleurs et multi-modèles pour les SED},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {$7^e$ congrès international pluridisciplinaire Qualité et Sûreté de fonctionnement, Qualita},
  Year                     = {2007},
  Address                  = {Tanger, Maroc},
  Month                    = {4},
  Pages                    = {7 p.},
  Abstract                 = {Les travaux présentés dans cet article portent sur la synthèse de contrôleurs pour la gestion des modes de fonctionnement des Systèmes à Evénements Discrets (SED). Notre contribution se base sur la théorie de contrôle par supervision. Notre objectif est d'enrichir cette théorie par des mécanismes permettant l'étude des modes de fonctionnement tout en gardant des modèles de taille raisonnable. Nous proposons une approche, dite multi-modèle, qui permet de représenter les SED évoluant dans différents modes de fonctionnement par un ensemble de modèles simples décrivant chacun le comportement du système dans un mode donné. L'alternance de modes est assurée par un mécanisme de suivi. Ensuite nous associons à chacun des modèles des procédés un modèle unique de spécification. Comme les modèles des procédés, ces modèles de spécification sont soumis à un mécanisme de commutation : ils doivent être activés depuis un état permettant d'ajuster la nouvelle dynamique du procédé avec les actions de contrôle à mener. Enfin nous présenterons un exemple pour illustrer notre approche.},
  File                     = {Kamach-2007-qualita.pdf:Kamach-2007-qualita.pdf:PDF},
  Keywords                 = {SED, automates à états, synthèse de contrôleurs, gestion des modes de fonctionnement, CI},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Synthèse de contrôleur pour les systèmes indéterministes
Kamach, O. and Piétrac, L. and Niel, É.
Conférence Internationale Francophone d'Automatique, CIFA
2006, Bordeaux, France

Le travail présenté dans ce papier porte sur la synthèse de contrôleur des systèmes non-déterministes. Notre contribution se base sur la théorie de contrôle par supervision initiée par les travaux de Ramadge et Wonham. Notre objectif est d'enrichir cette théorie par l'étude de la supervision des systèmes non-déterministes. La classe de systèmes non-déterministes que nous considérons sont les systèmes à plusieurs états initiaux. L'ensemble des états initiaux caractérise un ensemble de dynamiques distinctes. Nous proposons une approche permettant de démontrer qu'il existe un superviseur unique permettant d'aboutir au langage désiré, bien que le procédé ait plusieurs états initiaux. Nous formulons ainsi les conditions nécessaires et suffisantes d'existence d'un tel superviseur.

@InProceedings{Kamach-2006-cifa,
  Title                    = {Synthèse de contrôleur pour les systèmes indéterministes},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {Conférence Internationale Francophone d'Automatique, CIFA},
  Year                     = {2006},
  Address                  = {Bordeaux, France},
  Month                    = {5},
  Abstract                 = {Le travail présenté dans ce papier porte sur la synthèse de contrôleur des systèmes non-déterministes. Notre contribution se base sur la théorie de contrôle par supervision initiée par les travaux de Ramadge et Wonham. Notre objectif est d'enrichir cette théorie par l'étude de la supervision des systèmes non-déterministes. La classe de systèmes non-déterministes que nous considérons sont les systèmes à plusieurs états initiaux. L'ensemble des états initiaux caractérise un ensemble de dynamiques distinctes. Nous proposons une approche permettant de démontrer qu'il existe un superviseur unique permettant d'aboutir au langage désiré, bien que le procédé ait plusieurs états initiaux. Nous formulons ainsi les conditions nécessaires et suffisantes d'existence d'un tel superviseur.},
  File                     = {Kamach-2006-cifa.pdf:Kamach-2006-cifa.pdf:PDF},
  Keywords                 = {SED, automates à états finis, synthèse de contrôleurs, systèmes non-déterministes, systèmes déterministes, théorie de contrôle par supervision, CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

L'usage des réseaux de Petri dans la théorie du contrôle par supervision
Boufaden, A. and Piétrac, L. and Gabouj, S.
Journées Doctorales et Nationales du GDR MACS, JD-JN-MACS
2005, Lyon, France

Résumé : Dans la littérature, différentes théories basées sur les réseaux de Petri ont été proposées pour la synthèse d’un superviseur qui assure le fonctionnement souhaité d’un procédé perçu comme un système à événements discrets (SED). Cet article présente certaines approches que nous avons retenues afin de définir les critères de comparaison entre ces dernières. Ces critères ainsi établis permettent d’une part, de situer les approches entre elles et d’autre part, offrent un moyen sur lequel il est possible de se baser pour l’élaboration ou le choix d’une nouvelle théorie en retenant le choix des meilleurs critères. Abstract : Several theories based on Petri nets are proposed in the literature for the synthesis of a supervisor that ensures the desired behaviour of a plant considered as discrete event system (DES). In this paper, we present the approaches we adopted and define comparison criteria between them. The accomplished criteria allow the evaluation of the approaches, the ones compared to the others. Moreover, they offer an effective way to elaborate or to choose a new theory by selecting the best criteria.

@InProceedings{Boufaden-2005-jdmacs,
  Title                    = {L'usage des réseaux de Petri dans la théorie du contrôle par supervision},
  Author                   = {Boufaden, A. and Piétrac, L. and Gabouj, S.},
  Booktitle                = {Journées Doctorales et Nationales du GDR MACS, JD-JN-MACS},
  Year                     = {2005},
  Address                  = {Lyon, France},
  Month                    = {9},
  Abstract                 = {Résumé : Dans la littérature, différentes théories basées sur les réseaux de Petri ont été proposées pour la synthèse d’un superviseur qui assure le fonctionnement souhaité d’un procédé perçu comme un système à événements discrets (SED). Cet article présente certaines approches que nous avons retenues afin de définir les critères de comparaison entre ces dernières. Ces critères ainsi établis permettent d’une part, de situer les approches entre elles et d’autre part, offrent un moyen sur lequel il est possible de se baser pour l’élaboration ou le choix d’une nouvelle théorie en retenant le choix des meilleurs critères.
Abstract : Several theories based on Petri nets are proposed in the literature for the synthesis of a supervisor that ensures the desired behaviour of a plant considered as discrete event system (DES). In this paper, we present the approaches we adopted and define comparison criteria between them. The accomplished criteria allow the evaluation of the approaches, the ones compared to the
others. Moreover, they offer an effective way to elaborate or to choose a new theory by selecting the best criteria.},
  File                     = {Boufaden-2005-jdmacs.pdf:Boufaden-2005-jdmacs.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Synthèse de contrôleurs pour la gestion des modes de fonctionnement
Kamach, O. and Piétrac, L. and Niel, É.
Journées Doctorales et Nationales du GDR MACS, JD-JN-MACS
2005, Lyon, France

Résumé : Les travaux présentés dans cet article portent sur la synthèse de contrôleurs pour la gestion des modes de fonctionnement des SED. Notre contribution se base sur la théorie de contrôle par supervision. Notre objectif est d'enrichir cette théorie par des mécanismes permettant l'étude des modes de fonctionnement tout en gardant des modèles de taille raisonnable. Nous proposons une approche, dite multi-modèle, qui permet de représenter les SED évoluant dans différents modes de fonctionnement par un ensemble de modèles simples décrivant chacun le comportement du système dans un mode donné. L'alternance de modes est assurée par un mécanisme de suivi. Ensuite nous associons à chacun des modèles des procédés un modèle unique de spécification. Comme les modèles des procédés, ces modèles de spécification sont soumis à un mécanisme de commutation : ils doivent être activés depuis un état permettant d'ajuster la nouvelle dynamique du procédé avec les actions de contrôle à mener. Enfin nous présenterons un exemple pour illustrer notre approche. Abstract : This work deals with operating mode management applied to Discrete Event Systems (DES). Our contribution is based on the Supervisory Control Theory (SCT). We aim at extending the SCT by introducing mechanism for studding the different operating modes of the system to be controlled. Our approach is multi-model, involves representing a complex system by a set of simple models, each of which describes the system in a given operating mode. A global monitoring mechanism ensures the correct switching between modes. Then, a unique specification model can be associated to each plant model. Specification models are also subject to switch, according to changes occurring in the plant model dynamics, and the control actions to be taken. After we illustrated our approach on an example.

@InProceedings{Kamach-2005-jdmacs,
  Title                    = {Synthèse de contrôleurs pour la gestion des modes de fonctionnement},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {Journées Doctorales et Nationales du GDR MACS, JD-JN-MACS},
  Year                     = {2005},
  Address                  = {Lyon, France},
  Month                    = {9},
  Abstract                 = {Résumé : Les travaux présentés dans cet article portent sur la synthèse de contrôleurs pour la gestion des modes de fonctionnement des SED. Notre contribution se base sur la théorie de contrôle par supervision. Notre objectif est d'enrichir cette théorie par des mécanismes permettant l'étude des modes de fonctionnement tout en gardant des modèles de taille raisonnable. Nous proposons une approche, dite multi-modèle, qui permet de représenter les SED évoluant dans différents modes de fonctionnement par un ensemble de modèles simples
décrivant chacun le comportement du système dans un mode donné. L'alternance de modes est assurée par un mécanisme de suivi. Ensuite nous associons à chacun des modèles des procédés un modèle unique de spécification. Comme les modèles des procédés, ces
modèles de spécification sont soumis à un mécanisme de commutation : ils doivent être activés depuis un état permettant d'ajuster la nouvelle dynamique du procédé avec les actions de contrôle à mener. Enfin nous présenterons un exemple pour illustrer notre approche.
Abstract : This work deals with operating mode management applied to Discrete Event Systems (DES). Our contribution is based on the Supervisory Control Theory (SCT). We aim at extending the SCT by introducing mechanism for studding the different operating modes of
the system to be controlled. Our approach is multi-model, involves representing a complex system by a set of simple models, each of which describes the system in a given operating mode. A global monitoring mechanism ensures the correct switching between modes. Then, a unique specification model can be associated to each plant model. Specification models are also subject to switch, according to changes occurring in the plant model dynamics, and the control actions to be taken. After we illustrated our approach on an example.},
  File                     = {Kamach-2005-jdmacs.pdf:Kamach-2005-jdmacs.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Approche multi-modèle pour les Systèmes à Événements Discrets: application à un préhenseur pneumatique
Kamach, O. and Piétrac, L. and Niel, É.
Journal Européen des Systèmes Automatisés, JESA
2005, vol. 39, n°1-3

RÉSUMÉ. Le travail présenté dans ce papier porte sur la gestion des modes de fonctionnement des SED. Notre contribution se base sur la théorie de contrôle par supervision initiée par les travaux de Ramadge et Wonham. Notre objectif est d’enrichir cette théorie par des mécanismes permettant l’étude des modes de fonctionnement. Nous proposerons dans un premier temps une approche, dite multi-modèle, qui permet de représenter les SED évoluant dans différents modes de fonctionnement par un ensemble de modèles simples décrivant chacun le comportement du système dans un mode donné. L’alternance de modes est assurée par un mécanisme de suivi. Ensuite, nous associons à chaque modèle du procédé un modèle de spécification, puis dans le même esprit nous aborderons le mécanisme de commutation entre les modèles de spécifications. Dans un second temps, nous montrerons l’application de notre approche sur un exemple de préhenseur pneumatique.

ABSTRACT. This work deals with operating mode management applied to Discrete Event Systems (DES). Our contribution is based on the Supervisory Control Theory (SCT). We aim at extending the SCT by introducing mechanism for studding the different operating modes of the system to be controlled. Our approach is multi-model, involves representing a complex system by a set of simple models, each of which describes the system in a given operating mode. A global monitoring mechanism ensures the correct switching between modes. Then, a unique specification model can be associated to each plant model. Specification models are also subject to switch, according to changes occurring in the plant model dynamics, and the control actions to be taken. After we illustrated our approach on an example.

@Article{Kamach-2005-msr,
  Title                    = {Approche multi-modèle pour les Systèmes à Événements Discrets: application à un préhenseur pneumatique},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Journal                  = {Journal Européen des Systèmes Automatisés},
  Year                     = {2005},
  Month                    = {10},
  Note                     = {Actes du congrès Modélisation des Systèmes Réactifs (MSR)},
  Number                   = {1--3},
  Pages                    = {159--174},
  Volume                   = {39},
  Abstract                 = {RÉSUMÉ. Le travail présenté dans ce papier porte sur la gestion des modes de fonctionnement des SED. Notre contribution se base sur la théorie de contrôle par supervision initiée par les travaux de Ramadge et Wonham. Notre objectif est d’enrichir cette théorie par des mécanismes permettant l’étude des modes de fonctionnement. Nous proposerons dans un premier temps une approche, dite multi-modèle, qui permet de représenter les SED évoluant dans différents modes de fonctionnement par un ensemble de modèles simples décrivant chacun le comportement du système dans un mode donné. L’alternance de modes est assurée par un mécanisme de suivi. Ensuite, nous associons à chaque modèle du procédé un modèle de spécification, puis dans le même esprit nous aborderons le mécanisme de commutation entre les modèles de spécifications. Dans un second temps, nous montrerons l’application de notre approche sur un exemple de préhenseur pneumatique.
ABSTRACT. This work deals with operating mode management applied to Discrete Event Systems (DES). Our contribution is based on the Supervisory Control Theory (SCT). We aim at extending the SCT by introducing mechanism for studding the different operating modes of the system to be controlled. Our approach is multi-model, involves representing a complex system by a set of simple models, each of which describes the system in a given operating mode. A global monitoring mechanism ensures the correct switching between modes. Then, a unique specification model can be associated to each plant model. Specification models are also subject to switch, according to changes occurring in the plant model dynamics, and the control actions to be taken. After we illustrated our approach on an example.},
  Address                  = {Grenoble, France},
  Booktitle                = {Modélisation des Systèmes Réactifs, MSR},
}

Théorie du contrôle par supervision : approche multi-modèle des modes de fonctionnement
Kamach, O. and Piétrac, L. and Niel, É.
Conférence Internationale Francophone d'Automatique, CIFA
2004, Douz, Tunisie

$Abstract

@InProceedings{Kamach-2004-cifa,
  Title                    = {Théorie du contrôle par supervision : approche multi-modèle des modes de fonctionnement},
  Author                   = {Kamach, O. and Piétrac, L. and Niel, É.},
  Booktitle                = {Conférence Internationale Francophone d'Automatique, CIFA},
  Year                     = {2004},
  Address                  = {Douz, Tunisie},
  Month                    = {11},
  File                     = {Kamach-2004-cifa.pdf:Kamach-2004-cifa.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Application de la théorie de la supervision: un exemple de conception de programmes d'API
Piétrac, L. and Chafik, S. and Regimbal, L.
Conférence Internationale Francophone d'Automatique, CIFA
2002, Nantes, France

Pour assurer le bon fonctionnement d’un système, il est nécessaire de démontrer que les programmes de commande respectent les propriétés de sécurité spécifiées dans le cahier des charges. Cette démonstration peut se faire soit par la validation (ou vérification) soit par la synthèse de trajectoires de commande. L’approche de vérification et de validation a l’inconvénient de nécessiter l’écriture préalable du programme puis de vérifier les propriétés attendues, alors que l’avantage de l’approche de synthèse repose sur la prise en compte des propriétés dès le début de la conception. Dans cet article, nous nous sommes basés sur l’approche de synthèse pour proposer une application du principe de la théorie de supervision à la programmation de la commande des systèmes automatisés de production (SAP). Notre contribution consiste dans un premier lieu à obtenir des modèles corrects (vérifiant les propriétés attendues) et surtout simples à construire et à lire. Dans une seconde étape, nous proposons une méthode de passage de modèles formels vers un programme API.

@InProceedings{Pietrac-2002-cifa,
  Title                    = {Application de la théorie de la supervision: un exemple de conception de programmes d'API},
  Author                   = {Piétrac, L. and Chafik, S. and Regimbal, L.},
  Booktitle                = {Conférence Internationale Francophone d'Automatique, CIFA},
  Year                     = {2002},
  Address                  = {Nantes, France},
  Month                    = {7},
  Abstract                 = {Pour assurer le bon fonctionnement d’un système, il est nécessaire de démontrer que les programmes de commande respectent les propriétés de sécurité spécifiées dans le cahier des charges. Cette démonstration peut se faire soit par la validation (ou vérification) soit par la synthèse de trajectoires de commande. L’approche de vérification et de validation a l’inconvénient de nécessiter l’écriture préalable du programme puis de vérifier les propriétés attendues, alors que l’avantage de l’approche de synthèse repose sur la prise en compte des propriétés dès le début de la conception. Dans cet article, nous nous sommes basés sur l’approche de synthèse pour proposer une application du principe de la théorie de supervision à la programmation de la commande des systèmes automatisés de production (SAP).
Notre contribution consiste dans un premier lieu à obtenir des modèles corrects (vérifiant les propriétés attendues) et surtout simples à construire et à lire. Dans une seconde étape, nous proposons une méthode de passage de modèles formels vers un programme API.},
  File                     = {Pietrac-2002-cifa.pdf:Pietrac-2002-cifa.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Techniques de recouvrements de défaillances des systèmes de production
Khatab, A. and Piétrac, L. and Niel, É.
4e congrès international de Génie Industriel, GI
2001, Marseille, France

$Abstract

@InProceedings{Khatab-2001-gi,
  Title                    = {Techniques de recouvrements de défaillances des systèmes de production},
  Author                   = {Khatab, A. and Piétrac, L. and Niel, É.},
  Booktitle                = {$4^e$ congrès international de Génie Industriel, GI},
  Year                     = {2001},
  Address                  = {Marseille, France},
  Month                    = {6},
  Pages                    = {437--445},
  File                     = {Khatab-2001-gi.pdf:Khatab-2001-gi.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Méta-modélisation d'une méthode de conception de systèmes hybrides intégrant une double représentation continue et discrète du temps
Piétrac, L. and Denis, B. and Lesage J.-J.
Conférence Internationale Francophone d'Automatique, CIFA
2000, Lille, France

La conception des systèmes automatisés de production nécessite l'utilisation de langages permettant de modéliser leur évolution temporelle. Lorsque ces systèmes sont hybrides, une approche classique consiste à utiliser conjointement deux langages, dédié pour l'un à la partie discrète et pour l'autre à la partie continue de ce système. Le problème crucial est alors d'intégrer ces deux langages, et donc souvent deux modélisations du temps, au sein d'une méthode cohérente. Cet article présente notre approche de méta-modélisation formelle utilisée pour définir rigoureusement des langages et leur intégration au sein de méthodes multi-langages. Nous y abordons plus spécifiquement les problèmes posés par la double perception, discrète et continue, du temps. Une méthode de conception de la commande des systèmes dynamiques hybrides intégrant une classe particulière de réseaux de Petri et des équations différentielles est utilisée comme exemple illustratif de notre approche.

@InProceedings{Pietrac-2000-cifa,
  Title                    = {Méta-modélisation d'une méthode de conception de systèmes hybrides intégrant une double représentation continue et discrète du temps},
  Author                   = {Piétrac, L. and Denis, B. and Lesage J.-J.},
  Booktitle                = {Conférence Internationale Francophone d'Automatique, CIFA},
  Year                     = {2000},
  Address                  = {Lille, France},
  Month                    = {7},
  Abstract                 = {La conception des systèmes automatisés de production nécessite l'utilisation de langages permettant de modéliser leur évolution temporelle. Lorsque ces systèmes sont hybrides, une approche classique consiste à utiliser conjointement deux langages, dédié pour l'un à la partie discrète et pour l'autre à la partie continue de ce système. Le problème crucial est alors d'intégrer ces deux langages, et
donc souvent deux modélisations du temps, au sein d'une méthode cohérente. Cet article présente notre approche de méta-modélisation
formelle utilisée pour définir rigoureusement des langages et leur intégration au sein de méthodes multi-langages. Nous y abordons plus
spécifiquement les problèmes posés par la double perception, discrète et continue, du temps. Une méthode de conception de la commande des systèmes dynamiques hybrides intégrant une classe particulière de réseaux de Petri et des équations différentielles est utilisée comme exemple illustratif de notre approche.},
  File                     = {Pietrac-2000-cifa.pdf:Pietrac-2000-cifa.pdf:PDF},
  Keywords                 = {CN},
  Owner                    = {L. Piétrac},
  Timestamp                = {2009.09.08}
}

Une approche de méta-modélisation formelle des méthodes de conception des systèmes automatisés de production
Piétrac, L. and Denis, B.
Journées Doctorales d'Automatique du GdR Automatique, JDA
1999, Nancy, France

La conception des systèmes automatisés de production (SAP) passe par la construction de modèles. La qualité du système conçu dépend de la qualité des modèles produits, et donc des langages et méthodes utilisés pour construire ces modèles. De nombreux travaux cherchent à améliorer la qualité de ces langages et de ces méthodes grâce à la méta-modélisation. Cependant, tous ces travaux ne s’intéressent qu’à des aspects particuliers des langages et méthodes. Le travail présenté ici a au contraire pour but de définir rigoureusement et complètement les langages et les méthodes de conception. Pour cela les diff ́erents aspects à méta-modéliser sont définis, permettant ainsi de choisir un langage fomel, le langage Z, couvrant l’ensemble des besoins. Notre approche est validée sur deux exemples types.

@InProceedings{Pietrac-1999-jda,
  Title                    = {Une approche de méta-modélisation formelle des méthodes de conception des systèmes automatisés de production},
  Author                   = {Piétrac, L. and Denis, B.},
  Booktitle                = {Journées Doctorales d'Automatique du GdR Automatique, JDA},
  Year                     = {1999},
  Address                  = {Nancy, France},
  Month                    = {9},
  Pages                    = {285--288},
  Abstract                 = {La conception des systèmes automatisés de production (SAP) passe par la construction de modèles. La qualité du système conçu dépend de la qualité des modèles produits, et donc des langages et méthodes utilisés pour construire ces modèles. De nombreux travaux cherchent à améliorer la qualité de ces langages et de ces méthodes grâce à la méta-modélisation. Cependant, tous ces travaux ne s’intéressent qu’à des aspects particuliers des langages et méthodes. Le travail présenté ici a au contraire pour but de définir rigoureusement et complètement les langages et les méthodes de conception. Pour cela les diff ́erents aspects à méta-modéliser sont définis, permettant ainsi de choisir un langage fomel, le langage Z, couvrant l’ensemble des besoins. Notre approche est validée sur
deux exemples types.}
}

Spécification fonctionnelle du contrôle / commande de tranche nucléaire
Piétrac, L. and Lesage, J.-J. and Timon, G. and Chériaux, F. and Brunet, M.
Symposium sur l'Automatisation Des Processus Mixtes, ADPM
1994, Bruxelles, Belgique

EDF mène actuellement un important programme de restructuration et de formalisation du cycle de développement de la commande de ses installations nucléaires et thermiques classiques. Dans ce cadre, cet article présente la synthèse d’une étude réalisée par le LURPA pour le compte d’EDF portant sur l’analyse fonctionnelle du contrôle-commande de ses installations. Pour mener à bien ce travail, il a été retenu de procéder d’une part à une étude de cas sur un sous-ensemble de tranche nucléaire jugé représentatif - le circuit de contrôle chimique et volumétrique (RCV) - et d’autre part à une recherche bibliographique portant sur quelques techniques de spécification. La représentation fonctionnelle des parties mécaniques et du contrôle-commande du circuit RCV a été réalisée en utilisant les modèles SADT (actigrammes), MERISE (essentiellement MCD et MOT), GEMMA, OBJET (OOA), GRAFCET et SA-RT.

@InProceedings{Pietrac-1994-adpm,
  Title                    = {Spécification fonctionnelle du contrôle / commande de tranche nucléaire},
  Author                   = {Piétrac, L. and Lesage, J.-J. and Timon, G. and Chériaux, F. and Brunet, M.},
  Booktitle                = {symposium sur l'Automatisation Des Processus Mixtes, ADPM},
  Year                     = {1994},
  Address                  = {Bruxelles, Belgique},
  Month                    = {11},
  Pages                    = {83--92},
  Abstract                 = {EDF mène actuellement un important programme de restructuration et de formalisation du cycle de développement de la commande de ses installations nucléaires et thermiques classiques. Dans ce cadre, cet article présente la synthèse d’une étude réalisée par le LURPA pour le compte d’EDF portant sur l’analyse fonctionnelle du contrôle-commande de ses installations. Pour mener à bien ce travail, il a été retenu de procéder d’une part à une étude de cas sur un sous-ensemble de tranche nucléaire jugé représentatif - le circuit de contrôle chimique et volumétrique (RCV) - et d’autre part à une recherche bibliographique portant sur quelques techniques de spécification. La
représentation fonctionnelle des parties mécaniques et du contrôle-commande du circuit RCV a été réalisée en utilisant les modèles SADT (actigrammes), MERISE (essentiellement MCD et MOT), GEMMA, OBJET (OOA), GRAFCET et SA-RT.},
}