A mathematical analysis of human-machine interface configurations for a safety monitoring system

Two human-machine interface configurations for safety monitoring systems are discussed: (1) A conventional fault-warning configuration, which gives an alarm message on detecting plant failure and (2) a safety-presentation configuration introduced here, which can give a safety message as well as an alarm message. It is proved mathematically that the safety-presentation configuration is superior to the fault-warning configuration in the well-defined sense of avoiding catastrophic accidents.<
>