Validating interactive system design through the verification of formal task and system models. - Philippe A. Palanque; Rémi Bastide; V. Sengès (EHCI, 1995)