{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T11:56:48Z","timestamp":1773921408875,"version":"3.50.1"},"reference-count":62,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T00:00:00Z","timestamp":1564617600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T00:00:00Z","timestamp":1564617600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T00:00:00Z","timestamp":1564617600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/G059063\/1"],"award-info":[{"award-number":["EP\/G059063\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2019,8,1]]},"DOI":"10.1109\/tse.2018.2804939","type":"journal-article","created":{"date-parts":[[2018,2,12]],"date-time":"2018-02-12T22:50:42Z","timestamp":1518475842000},"page":"802-822","source":"Crossref","is-referenced-by-count":10,"title":["Verification Templates for the Analysis of User Interface Software Design"],"prefix":"10.1109","volume":"45","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5567-9650","authenticated-orcid":false,"given":"Michael D.","family":"Harrison","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0667-7763","authenticated-orcid":false,"given":"Paolo","family":"Masci","sequence":"additional","affiliation":[]},{"given":"Jose C.","family":"Campos","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1023\/A:1018913028597"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-006-7999-y"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45236-2_4"},{"key":"ref32","first-page":"23","article-title":"An overview of regulatory and trust issues for the integrated clinical environment","volume":"2011","author":"hatcliff","year":"2011","journal-title":"Proc HCMDSS"},{"key":"ref31","first-page":"1","article-title":"Evaluation of formal IDEs for human-machine interface design and analysis: The case of CIRCUS and PVSio-web","volume":"240","author":"fayollas","year":"2016","journal-title":"Proc 3rd Workshop Formal Integr Develop Environment (F-IDE 2016) Electron Proc Theoretical Comput Sci (EPTCS)"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-51838-1_14"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/302405.302672"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ASWEC.2015.30"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40793-2_21"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/337180.337234"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3095807"},{"key":"ref62","article-title":"Heuristic Evaluation","author":"nielsen","year":"1994","journal-title":"Usability Inspection Methods"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2305484.2305505"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4612-0931-7"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70569-7_6"},{"key":"ref29","first-page":"22203","article-title":"Medical devices - application of usability engineering to medical devices","year":"2010"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2008.2009190"},{"key":"ref1","article-title":"Generic infusion pump hazard analysis and safety requirements","author":"arney","year":"2009"},{"key":"ref20","first-page":"5","article-title":"Infusing patients safely: Priority issues from the AAMI\/FDA infusion device summit","year":"2010","journal-title":"Proc AAMI\/FDA Infusion Device Summit Proc"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1177\/193229681000400207"},{"key":"ref21","article-title":"AAMI\/FDA summit on ventilation technology","year":"2015","journal-title":"Proc AAMI\/FDA Infusion Device Summit Proc"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/97243.97281"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/S0951-8320(01)00092-8"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2383396"},{"key":"ref25","author":"dix","year":"1998","journal-title":"Human Computer Interaction"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/32.210305"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.21236\/ADA465334"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2494603.2480314"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/2382756.2382797"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2015.7107403"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66854-3_13"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139195881"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2002.1027801"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2005.131"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2013.158"},{"key":"ref10","article-title":"Class 2 device recall ACCUCHEK connect diabetes management app","year":"2015"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2699417"},{"key":"ref40","author":"degani","year":"2003","journal-title":"Taming HAL Designing Interfaces Beyond 2001"},{"key":"ref12","article-title":"Using PVSio-web and SAPERE for rapid prototyping of user interfaces in integrated clinical environments","author":"masci","year":"2015"},{"key":"ref13","first-page":"214","article-title":"Tool demo: Using PVSio-web to demonstrate software issues in medical user interfaces","author":"masci","year":"2017","journal-title":"Proc 4th Int Symp Softw Eng Health Care Proc 6th Int Workshop Softw Eng Health Care"},{"key":"ref14","first-page":"53","article-title":"Extending a user interface prototyping tool with automatic MISRA C code generation","author":"mauro","year":"2016","journal-title":"Proc 3rd Workshop Formal Integr Develop Environ"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54804-8_14"},{"key":"ref16","article-title":"PVS system guide, PVS language reference, PVS prover guide, PVS Prelude library, abstract datatypes in PVS, and theory interpretations in PVS","author":"shankar","year":"1999"},{"key":"ref17","article-title":"Alaris GP volumetric pump: Directions for use","year":"2006"},{"key":"ref18","article-title":"Infusion pump improvement initiative","year":"2010"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1097\/PTS.0b013e3182948a69"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1570433.1570442"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-54415-1_65"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s11334-013-0201-3"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45657-0_29"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-55602-8_217"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11334-010-0129-9"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SEHC.2012.6227013"},{"key":"ref9","first-page":"470","author":"masci","year":"2015","journal-title":"PVSio-web 2 0 Joining PVS to HCI"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2013.50"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/THMS.2017.2717910"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-COMPANION.2009.5070972"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2014.2358224"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68034-7_8"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1061254.1061256"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2494603.2480302"},{"key":"ref43","article-title":"Medical device software - software life cycle processes","year":"2008"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/8812877\/08289349.pdf?arnumber=8289349","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T21:14:28Z","timestamp":1657746868000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8289349\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,1]]},"references-count":62,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tse.2018.2804939","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,8,1]]}}}