DESIGN OF FORMAL AIR TRAFFIC

CONTROL SYSTEM THROUGH UML

Shafeeq Ahmad
Azad Institute of Engineering & Technology, INDIA
[email protected]

Vipin Saxena
Dr. B. R. Ambedkar University, INDIA
[email protected]

ABSTRACT
In recent years, UML has become most popular among modeling languages and is
commonly used to drive the design and implementation of system and software
architectures. UML models help to achieve functional and non-functional requirements
of system. Furthermore, UML tools have enabled the creation of source code from
UML diagrams in order to initiate the programming phase of building software.
However, due to lack of clearly defined semantics, it has been challenging to create
source code from UML models. The main objective of the paper is to model Air Traffic
Control system by the use of UML. An activity of Air Traffic Control i.e. departure
process which only covers part of the Air Traffic Control functionality has been
considered in this paper. The UML models created using formal naming semantics help
them to convert into source code and also help to achieve functional and non-functional
requirements. The complexity of Air Traffic Control System is also measured which
makes the design simple and visibly understandable.

Keywords: UML model, formal semantics, source code, Air Traffic Control.

1 INTRODUCTION The first air traffic control (ATC) system was

originally built in the 1960s; since then, air traffic
Nowadays Object Oriented software has increased immensely, and has become
development process is widely used in the Software increasingly more difficult to maintain safety in the
Industry. The emergence of Object-Oriented sky. As air travel has become an essential part of
programming has heavily contributed toward a modern life, the ATC system has become strained
standardized method of modeling known as the and overworked. The ATC system has been in a
Unified Modeling Language (UML). In recent years, process of continuous improvement / change. In the
UML has become synonym for software modeling earliest days of aviation, few aircraft were in the
and is commonly used to model the software skies that there was little need for automated control
architecture problems. Source code can be easily be of aircraft. As the volume of air traffic increased and
generated with the help of different UML diagrams the control was still fully manual; the system was
for building the software. To generate the correct considered unsafe as human error has been cited as a
source code, the main problem is lack of clearly major factor in the majority of aviation accidents and
defined semantics and code generation can only be incidents.
done if the UML specification is standard, complete, In today’s Air Traffic Control system, air traffic
precise, and unambiguous. The present work is based controllers are primarily responsible for maintaining
upon the ATC system which is explained below: aircraft separation. Every aircraft follows several
1.1 ATC System activities during a flight. These activities are shown
below in Fig.1:
ATC system is a service that gives guidance to (i) Preflight -This portion of the flight starts on the
aircraft, prevents collisions and manages safe & ground and includes flight checks, push-back
orderly traffic flow. It is a vast network of people & from the gate and taxi to the runway.
equipment that ensures safe operation of aircrafts.

Ubiquitous Computing and Communication Journal 1

(ii) Takeoff - The pilot powers up the aircraft and (iii) Outdated design/technology – Obsolete software
speeds down the runway. design and programming language [11] are
(iii) Departure - The plane lifts off the ground and major barriers to upgrades and efficient software
climbs to a cruising altitude. maintenance of the currently used ATC systems
(iv) En route - The aircraft travels through one or because of which improved capacity and
more center airspaces and nears the destination efficiency can’t be achieved with the current
airport. system. The current computer software limits the
(v) Descent - The pilot descends and maneuvers the number of aircraft that can be tracked at any
aircraft to the destination airport. given time, and the dated architecture makes
(vi) Approach - The pilot aligns the aircraft with the enhancements, troubleshooting and maintenance
designated landing runway. more difficult. Computer outages, planned or
(vii) Landing - The aircraft lands on the designated unplanned, are covered by a backup system that
runway, taxis to the destination gate and parks at cannot handle the same level of air traffic as the
the terminal. main system. The result is significantly limited
capacity during backup mode.
En Route (iv) Mixed communication – The communication
Departure Descent
between the controllers & pilot currently is a
Takeoff Approach combination of voice & datalink. The results of
Preflight Landing test conducted [18] show that the mixed
communication leads to slow speed which can
be overcome only when the whole
communication takes place in a well defined
manner .

2 RELATED WORK

The ATC system consists of controllers &

Figure 1: Activities of Aircraft [6] technology. The various controllers involved have
different tasks assigned to them which have been
1.2 Drawbacks of Current ATC System very well described in [15], [16], [19], [20]. The
ATC systems are highly complex pieces of ATC real-time system [19] is characterized as
machinery, they employ standard verification and complex, time-driven and potentially distributed. It is
modeling technique to coordinate, distribute and composed from multiple sub-systems, which must
track aircraft as well as weather information. The cooperate in order to complete its real time targets.
currently used systems need to employ procedures ATC employs the approach of Parallel Applications
for improved safety and efficiency which include in which the simultaneous execution of some
flexibility, potential cost savings & reduction in combination of multiple instances of programmed
staffing. This means that there is a lack of advanced instructions and data on multiple processors are
technology and desire to support the controller. Thus performed in order to obtain results faster. Meilander
there is a need to build ATC system based on a [4] has proposed a solution for problems arising due
method which can handle increased air traffic to parallel processing used in ATC but its
capacity/congestion to provide a safety critical implementation needs reliable software. The reason
interactive system. The following are the major for system failure discussed in [8] was found to be
drawbacks of current ATC system: lack of maintenance. For the efficient software
(i) Lack of well-defined human/software interface – maintenance, [11] emphasizes changes particularly
The idea of full automation or minimum human on the technology front which means modernizing
intervention of the ATC system still remains the current air traffic control system by replacing the
unfulfilled. The existing systems do require software used in the current ATC systems. The study
human interaction as the system only guides but done by Verma[18] by implementing changes in the
actual decision is taken by the controllers in- procedures, roles and responsibilities of the
charge (ground, local). controllers for redistribution of workload and
(ii) Need for high maintenance – Maintenance of the communications among them, has also stressed on
system is also an issue which can cause problem the introduction of new automated technologies for
as discussed by Matthew L. Wald [23] about an the controllers.
incidence in which voice communication For a critical system like ATC an extremely low
between the pilot & controllers broke down & probability of failure is needed as if the system fails
the reason behind this was found to be a lack of any related type of hazard can occur. The reports on
maintenance. incidences at non-controlled airports [5] show that

Ubiquitous Computing and Communication Journal 2

pilots can’t entirely rely on vision to avoid collision necessary detail is included in a model, such model
& also it is necessary to get all the air-traffic related can be used to automatically generate complete
information correctly. So it is crucial that in such implementations.
large and extremely complex systems the software is The role of software architecture is similar in
designed with a sound architecture A good nature to the role architecture plays in building
architecture not only simplifies construction of the construction. Building architects look at the building
initial system, but even more importantly, readily from various viewpoints useful for civil engineers,
accommodates changes forced by a steady stream of electricians, plumbers, carpenters and so on. This
new requirements. This architectural construct can be allows the architects to see a complete picture before
derived from modeling concepts by using the construction begins. Similarly, architecture of a
powerful extensibility mechanisms of UML [1]. The software system is described as different viewpoints
UML model-based approach helps to manage critical of the system being built. These viewpoints are
systems, since the model support the necessary captured in different model views. UML provides a
analysis activities in several ways: number of diagram types for creating models. UML
• The formalized structural and behavioral system does not specify what diagrams should be created or
description gives the necessary basis for what they should contain, only what they can contain
criticality analysis. and the rules for connecting the elements. Some
• Providing behavior is expressed in simple state UML diagrams can have different uses and
charts or “English-like” pseudo code, the interpretations. The result of this has been that
behavior should at least be explainable to end- behavioral and/or run-time semantics are not well
users. defined for standard UML modeling elements. The
• The model gives an excellent basis for fault- semantics problems have made it difficult to achieve
tolerance analysis, since the model includes the model-based programming using standard UML.
dependency structure. Hence semantically correct UML models [12], [17]
The size and complexity of the ATC system are needed to achieve code. Also the UML models
demand a considerable initial development effort, enhance communication as they provide a better way
typically involving large development teams, that is to understand and communicate among analysts,
followed by an extended period of evolutionary designers, developers, testers and with domain
growth. During this time new requirements are experts for designing a system. Creating and
identified and the system is modified incrementally debugging software code has been and continues to
to meet them. Under such circumstances an be a very labor-intensive and expensive process but
overriding concern is the architecture of the software. having an accurate UML model can ease the work as
This refers to the essential structural and behavioral if any problem comes and modification is required
framework [1] on which all other aspects of the then instead of modifying the code the models can be
system depend. Any change to this foundation modified, even the extensibility can be done by
necessitates complex and costly changes to adding new constructs to address new development
substantial parts of the system. Therefore, a well- issue.
designed architecture is not only one that simplifies To meet the non-functional requirements [13] such
construction of the initial system, but more as modifiability, testability and reliability, the design
importantly, one that easily accommodates changes and analysis of a system at the architecture design
forced by new system requirements. level must be done. Non-functional requirements
To facilitate the design of good architecture the have a critical role in the development of a software
domain-specific usage can be implemented using the system as they can be used as selection criteria to
UML. Object-oriented requirements analysis using help designers with rational decision-making among
modular and decomposable use cases provide to be competing designs, which in turn affects a system’s
very powerful method for the analysis of large-scale implementation .Thus the ATC system needs to
ATC systems [6]. It is extremely useful to define provide a sufficient amount of dependability and
both the static semantics (i.e., the rules for well- should support a survivability architecture [10].
formedness) and the dynamic (run-time) semantics In this paper we examine the most important
of the ATC system. These semantic rules fully modeling constructs used for representing the ATC
defined and consistent, and in conjunction with an system handling departure and also describe how
action specification language that is also complete they are captured and rendered using UML. The
and consistent can be used to specify the details of models are based on the work presented by Saxena &
state-transition (Activity diagram of UML) actions, Ansari [21].The operations, phases and controllers
Interaction (Sequence diagram of UML) and object involved during departure of an aircraft have been
methods (class diagram of UML) and the resulting described in [2], [3], [7], [9], [10], [14], [15], [19] &
models will be executable. Furthermore, if all the

Ubiquitous Computing and Communication Journal 3

[20] which have been used as base for designing The informal activity diagram for departure of an
various UML models. aircraft is given below in Fig. 2. It simply describes
the main activities performed during departure by the
3 PROPOSED APPROACHED controller and the aircraft object. In this diagram
some semantic problems are present like if any
The existing systems are quite complex and clearance has not been granted then what will be
inefficient. To adapt to the changing demands of done is not clear i.e. use of decision box hasn’t been
speed and efficiency a reliable software system for done. Further all the activities have been shown in a
ATC is required to be developed. Software single step and no refinements have been done to
architecture based on UML models will help in simplify the activities. These loose semantics of the
handling complexities and drawbacks of existing diagram make this model unable to be executable,
ATC systems and also help to better understand the
therefore the formal activity diagram for departure of
domain. UML is the de-facto standard visual
an aircraft is defined and shown in Fig. 3
modeling language which is a general purpose,
broadly-applicable tool supported, industry-
standardized modeling language which offers an Aircraft Controller
extensive set of diagrams for modeling. The
complexity of the problem domain requires extensive
Request pushback
efforts for the clarification of the initial problem clearance
statement. Moreover, due to the extremely long Grant pushback
clearance
lifespan of ATC systems, stable and robust analysis
models enabling the integration of new operational Pushback
from gate
scenarios are needed which can be efficiently
obtained using UML models. In the design of a
departure activity of ATC system UML will help to Leave ramp
meet safety, reliability, availability, and robustness area

demands in an environment of steadily increasing air

traffic density. The code obtained using the UML Request taxi
clearance
models is highly optimized which is one of the main Grant taxi
clearance
requirements for the design of a cooperative ATC Taxiing
system.

4 DESIGN OF ARCHITECTURE Request departure

clearance
Grant departure
System architecture is a set of design decisions. clearance
Depart
These decisions are technical and commercial in
nature. To meet the functional and nonfunctional
requirements of the above said ATC system it is
necessary to model the complete ATC system by the
use of UML. Different types of diagrams are
designed and described below in brief: Figure 2: Informal UML activity diagram of
departure activity of a flight
4.1 UML Activity Diagram
Activity diagram describes the workflow behavior
of a system. It illustrates the dynamic nature of a Formal activity diagram [fig.3] contains five
system by modeling the flow of control from activity objects aircraft, Gate_controller, Local_ controller,
to activity. An activity represents an operation of a Ramp_controller & Ground_controller. It describes
class, resulting in system state change. various activities which are performed by all the
objects. While these activities/operations are being
done, it also shows in which state the system is like
ready for departure, taxiing etc. There is a request by
the pilot of the aircraft to the gate controller to assign

Ubiquitous Computing and Communication Journal 4

Figure 3: Formal UML activity diagram of departure activity of a flight

Ubiquitous Computing and Communication Journal 5

it a gate which is the initial state & the final state is it lacks concrete, well defined semantics which make
named as depart. When the next activity is performed it impossible to help it in bringing to a computational
the system is taken to the next state that means a consistency, therefore formal use case diagram is
transition causes the change of state. Against the drawn for departure activity of a flight and shown
transitions various conditions are listed which below in Fig. 5.
actually cause the transition. Also the use of decision
box is applied which is required to check whether the
various clearances like pushback, taxiing & final
departure clearance has been granted or not. If Ramp_controller Govern ramp area

clearance has been granted then only the aircraft Gate_controller

starts pushing back or departing else if because of clearance to leave ramp
gate freeing

some reason clearance could not be granted then it assign gate

<<extend>> Taxiing
will again go to the request clearance state where it grant pushback from gate
sequencing at ramp
will be seen & tracked until it is safe for pushback or <<include>> Ground_controller

departure. During the whole departure activity the <<extend>>

enter and leave ramp
<<include>>
clearance for taxiing

possibilities of any emergency condition is also taken <<include>>

pushback
into consideration and shown in the diagram. Hence <<extend>>
Tracking
Handle surface movement

the solid and well organized semantics like Taxi-plan

<<include>>
Detect actual runway exit
<<include>>
conditions for transitions, use of swimlanes, fork,
Departure queue sequencing
join, method calls from objects i.e. able to call Aircraft
methods from other objects, decision condition <<extend>>

select for departure

specification etc. have been used in this diagram <<include>> Local_controller
clearance for takeoff
which make this model executable. <<extend>> Maintaining safe distance Sectorization
between planes Information of weather, speed
<<include>> and direction
<<include>>

4.2 UML Use Case Diagram Sequencing at holding points

The use case diagram captures system departure

Departure
Departure
Monitor runway incursions
functionality as seen by users. It shows an outside-in <<include>>

view of the procedures available in the use of the

system i.e. all the available functionality of the
system is represented at a high level. The UML
models can package the most relevant activities in Figure 5: Formal UML use case diagram of
use cases and identify important actors. The UML departure activity of a flight
use case diagram for departure activity of ATC
system is shown in Fig.4. In the above model there are all five actors namely
Aircraft, Ground_controller, Ramp_controller,
Monitoring Gate_controller & Local_ controller which interact
Taxiing
with various use cases. The use cases clearly
Grant Clearances
describe various main functions during departure and
whether they are dependent on each other directly or
Controller
Pushback indirectly denoted by extended or included keywords.
Tracking & Maintaining
Aircraft
safe distance It explains actually which functions are governed by
Departure
which actors. This diagram provides the functional
Handle aircraft
movement
basis for creating the remainder of the diagrams
needed to arrive at an executable diagram as it has
Provide information well defined semantics like identifying every actor
involved during departure of a flight, specifying all
Aircraft sequencing
the functions performed by each actor and use of
extend or include keyword to identify how one
function of an actor is related to another. This formal
use case diagram also drives the design of the class
Figure 4: Informal UML use case diagram of
departure activity of a flight diagram, and sequence diagram.

This diagram consists of two actors namely 4.3 UML Class Diagram
controller and aircraft. The use-cases consists Class diagram identifies & describes the static
represent the functionality of both actors. But this structure of the system i.e. the system architecture.
use case diagram provides an informal viewpoint as

Ubiquitous Computing and Communication Journal 6

The following Fig.6 shows the informal class some distinct attributes (properties) and some
diagram of the departure activity of a flight. operations which are listed in the 2nd and 3rd section
respectively of the class diagram. The type of
Controller
Aircraft attributes and return type of operations have been
controllername
location
aircraftname clearly specified in the diagram. This class diagram
airlinename
area
departuretime has covered almost all the explicitly defined
monitor()
pushback()
semantics like class relationships, multiplicities,
grantclearance()
tracking()
taxi() associations, properly labeled relationships, strict
depart()
movementhandling() naming of classes, attributes, and methods, explicit
parameters/return values which are necessary in
Figure 6: Informal UML class diagram of order to allow the model to be computationally
departure activity of a flight executable.

This diagram gives a general view of the classes 4.4 Sequence Diagram
involved during departure namely the controller and A sequence diagram is an interaction diagram that
the aircraft class. In this diagram only the name of details how operations are carried out, what
the attributes and the operations of the classes have messages are sent and when. Sequence diagrams
been specified. Even the attribute type or the return have a temporal focus so they are organized
type of the methods hasn't been described. These according to time which means what happens when.
loose semantics make this model impossible to The informal sequence diagram of departure
compile and execute. Now let us examine a formal activity of a flight is shown below in Fig 8. It simply
class diagram of departure activity of a flight shown gives a sequence of messages between the controller
below in Fig.7

Gate_controller
gatename : Variant

gateassignment()
makegateavailable()
pushbackclearance() : Boolean
+gate clearance granting 1
controls
+assigned aircraft 0..*
Aircraft
airlinename : String
aircraftnumber : Variant
airplanetype : String
Ground_controller position : Variant
location : Variant altitude : Integer
area : Integer departuretime : Date Local_controller
inactiverunwayname : String departureairport : String sector : String
monitoringdevice : String speed : Integer location : Variant
distance : Integer activerunwayname : String
holdingareas() route : Variant radarcoverage : Long
+taxi clearance granting
controlgroundtraffic() callsign : String +assigned aircraft
1 controls trajeventlist : Variant 0..*
protectcriticalareas() controls givinginformation() : Variant
departurequeuesequencing() 0..* latitude : Integer 1 clearance()
+assigned aircraft longitude : Integer +departure clearance granting
handleemergencies() selectfromqueue()
taxiclearance() : Boolean handleemergencies()
depart() sectorization()
taxiing(taxi-out-plan, assigned-runway) runwayassignment()
+assigned aircraft pushback()
0..* monitorrunwayincursions()
getdeparturetime() holdingpointsequencing()
assignflightcreww()
maneuvering()
delayflight(number of minutes) consists of
controls setcallsign(string callsign value)
1
getcallsign(string callsignvalue) Clearance_delivery_controller
addtrajevent()
1 aircraft : String
+ramp clearance granting clearancelimit : Long
Ramp_controller departurefrequency : Integer
ramparea : Long routeassigned : Variant
altitudeassigned : Double
controlrampoperations()
sequencingatramp() routechecking()
aircraftservicing() finaldepartureclearance() : Boolean
aircraftloading()
rampclearance() : Boolean

Figure 7: Formal UML class diagram of

departure activity of a flight Figure 8: Informal UML sequence
diagram of departure activity of a flight
This class diagram of the departure activity of a
flight described in Fig. 7 focuses on the main objects
and associations (relation) between them. During and the aircraft objects. But this model doesn’t
departure main objects are Gate_controller, include the semantics necessary for making it
Ramp_controller, Ground_controller, executable as no parameter values are specified, no
Local_controller and Aircraft itself. The guards have been used for any decision point, even
Local_controller in turn consists of the the class definition is not necessarily present in the
Clearance_delivery_controller which gives the final called class. Hence this model can not be compiled
departure clearance. Also a controller called and executed, therefore a formal sequence diagram is
Ramp_controller is present which is just a type of defined & shown in Fig.9.
ground controller which is responsible for operations
at ramp (parking) area. All the objects in turn have

Ubiquitous Computing and Communication Journal 7

Figure 9: Formal UML sequence diagram of departure activity of a flight

Ubiquitous Computing and Communication Journal 8

 In Fig.9 complete departure activity of a flight can [5] G. Brown, “Remote Intelligent Air Traffic
be seen at a glance. The messages are communicated Control Systems for Non-controlled Airports”,
between the five main objects; aircraft, Jan. 2003. Available: ww4.gu.edu.au:8080/adt-
Gate_controller, Ramp_controller, Local_controller root/uploads/approved/adt-
and Ground_controller. It clearly describes the QGU20040225.084516/ public/02Whole.pdf,
interaction between the objects and gives the order or [6] J. Whittle, J. Saboo, and R. Kwan, “From
sequence in which the actions take place i.e. in what Scenarios to Code: An Air Traffic Control Case
order messages have been send. The solid lines Study”, 25th International Conference on
represent the call messages while the dotted lines Software Engineering (ICSE'03), pp. 490, 2003
[7] Safety Regulation Group, “Air Traffic Services
represent the messages returned between the objects.
Information Notice”, ATS Standards
The tags are added to clearly specify about the
Department, Civil Aviation Authority, no. 50,
operation. This model consists of all the clear
Aug. 2004.
semantics like use of tags, explicit parameter values, [8] M. L. Wald, “Maintenance Lapse Blamed for
explicit return values, combined Air Traffic Control Problem” The New York
fragments(alternatives and parallel), guards needed Times, Sep 2004. Available:
for decision points and all the class definitions exist http://www.nytimes.com/2004/09/16/politics/16
in the called class. Thus this formal sequence airports.html
diagram with well defined and solid semantics makes [9] M. Axholt, and S. Peterson, “Modelling Traffic
it able to be compiled and computationally scenarios for Realistic Air Traffic Control
executable. Environment Testing”, Linkoping University
Press, Department of Science & Technology,
5 CONCLUDING REMARKS Linkoping University Sweden, Nov. 2004.
[10] R. D. Lemos, C. Gacek, and A. Romanovsky,
From the above work it is concluded that the “Architecting Dependable Systems II”,
described software architecture design process fully Springer-Verlag Berlin Heidelberg, 2004.
covers the departure activity of an aircraft. UML [11] ATCA Air traffic Control Association, “Air
modeling has been used for making the various Traffic Control Computer Modernization is En
models (class, use-case, activity & sequence) using Route”, Feb 2005. Available:
informal and formal semantics. These designed http://www.atca.org/news.asp
models are essential part of architecture of ATC [12] Object management Group, "Unified Modeling
software system and that can help to achieve Language: Superstructure", Version 2.0,
Formal/05-07-04, Aug 2005, Available:
executable code and other functional and non-
http://www.omg.org/docs/formal/05-07-04.pdf
functional requirements of software system.
[13] L. Dai, and K. Cooper, “Modeling and Analysis
of Non-functional Requirements as Aspects in a
6 REFERENCES UML Based Architecture Design”, Proceedings
[1] B. Selic, and J. Rumbaugh, “Using UML for of the Sixth International Conference on
Modeling Complex Real-Time Systems”, March Software Engineering, Artificial Intelligence,
1998. Available: http://www.ibm.com/ Networking and Parallel/Distributed Computing
developerworks/rational/library/content/03July/ and First ACIS International Workshop on Self-
1000/1155/1155_umlmodeling.pdf Assembling Wireless Networks
[2] I. Anagnostakis, H. R. Idris, J. P. Clarke, E. (SNPD/SAWN’05) , IEEE 2005.
Feron, R. J. Hansman, A. R. Odoni, and W. D. [14] European Organisation For The Safety Of Air
Hall, "A Conceptual Design of A Departure Navigation (Eurocontrol), “WP 5.2 – Add NFR
Planner Decision Aid", 3rd USA/Europe Air To Use Cases And Interaction diagrams NFR
Traffic Management R & D Seminar, June 13- Mapping Report”, June 2006.
16, 2000. Available: http://dspace.mit.edu/ [15] P. A. Bonnefoy, "Airport Operations ", MIT, Air
bitstream/1721.1/37321/1/paper68.pdf, Traffic Control, MIT International Center for
[3] H. Idris, J. P. Clarke, R. Bhuva, and L. Kang, Air Transportation, Sep 2006
“Queuing Model for Taxi-Out Time Estimation”, [16] R.J. Hansman, “Air Traffic Control Overview”,
Sep 2001. Available: http://dspace.mit.edu/ MIT Department of Aeronautics and
bitstream/1721.1/37322/1/TaxiOutModel.pdf Astronautics, MIT ICAT, Available:
[4] W. C. Meilander, M. Jin, and J. W. Baker, http://ocw.mit.edu/NR/rdonlyres/Aeronautics-
“Tractable Real-time Air Traffic Control and-Astronautics/16-72Fall-2006/11CD67DE-
Automation”, International Conference on 29C1-4AB9-A7DD-004BB1897CB9/0/ lec1.pdf
Parallel and Distributed Computing Systems, pp. [17] R. Campos," Model Based Programming:
477-483, November 4-6, 2002. Executable UML With Sequence Diagrams ", A
Thesis Presented to The Faculty of the Computer

Ubiquitous Computing and Communication Journal 9

 Science Department, California State University, [20] L. Brim, “ Fundamentals of Air Traffic Control”,
Los Angeles, June 2007 ParaDise Seminar, Feb 2008, Available:
[18] S. Verma, T. Kozon, V. Cheng, and D. Ballinger, http://www.fi.muni.cz/paradise/Seminar/2008-
“Changes In Roles/Responsibilities of Air spring/0225-prezentace.pdf
Traffic Control Under Precision Taxiing”, 26th [21] V.Saxena, and G.A.Ansari, ”UML Models of
IEEE/AIAA Digital Avionics Systems Aircraft System”, ICFAI Journal of Systems
Conference, Oct 2007 management, Vol. 6, No.2, PP. 68-74, May 2008
[19] Wikipedia, “Air traffic control”, October 2007.
Available:
http://en.wikipedia.org/wiki/Air_traffic_control

Ubiquitous Computing and Communication Journal 10