Reexamining automation surprise: a design-driven investigation of flaws

Jury

• James HOLLAN – Professor Emeritus, UC San Diego (Reviewer/Examiner)
• Wendy JU – Associate Professor, Cornell Tech (Reviewer/Examiner)
• Elena MUGELLINI – Professor, Haute école d’ingénierie et d’architecture de Fribourg (Examiner)
• Nicolas SABOURET – Professor, Université Paris-Saclay (Examiner)
• Martine GODFROY-COOPER – PhD, AIRBUS Operations (Invited Member)

Résumé

This thesis investigates how specific design choices in aircraft autopilot systems contribute to automation surprise—when the aircraft behaves differently from the pilot’s expectations. It focuses on two key interfaces: the Flight Mode Annunciator (FMA) and the Flight Control Unit (FCU). The FMA displays autopilot modes in use and has remained unchanged since the 1970s, with most manufacturers adopting the same design despite longstanding concerns raised in the literature. In contrast, the FCU, which allows pilots to select these modes, varies across aircraft manufacturers in both layout and interaction design. While the FMA is difficult to interpret and monitor, the FCU raises concerns because of overloaded controls. Across both interfaces, the industry has historically relied on training and procedural workarounds to address design flaws rather than rethinking interaction design. Grounded in Human-Computer Interaction (HCI) theories, this thesis adopts a mixed-methods, primarily qualitative approach, combining empirical studies with pilots and a participatory design process to explore the roots of automation surprise and propose design alternatives to better support mode awareness. This thesis contributes to ongoing research on automation in safety-critical systems and argues for a shift toward co-designing cockpit interfaces with pilots, rather than merely for them.