The security alert occurs in two parts. The first is a paddock alert that starts on a single terminal but gets copied to the big shared screen. The second is a security monitor for the visitor center in which the control room sits. Both of these live as part of the larger Jurassic Park.exe, alongside the Explorer Status panel, and take the place of the tour map on the screen automatically.
Paddock Monitor
After Nedry disables security, the central system fires an alert as each of the perimeter fence systems go down. Each section of the fence blinks red, with a large “UNARMED” on top of the section. After blinking, the fence line disappears. To the right is the screen for monitoring vehicles. Continue reading →
Jack lands in a ruined stadium to do some repairs on a fallen drone. After he’s done, the drone takes a while to reboot, so while he waits, Jack’s mind drifts to the stadium and the memories he has of it.
Present information as it might be shared
Vika was in comms with Jack when she notices the alarm signal from the desktop interface. Her screen displays an all-caps red overlay reading ALERT, and a diamond overlaying the unidentified object careening toward him. She yells, “Contact! Left contact!” at Jack.
As Jack hears Vika’s warning, he turns to look drawing his pistol reflexively as he crouches. While the weapon is loading he notices that the cause of the warning was just a small, not-so-hostile dog. Continue reading →
When it refused to give up authority, the Captain wrested control of the Axiom from the artificial intelligence autopilot, Otto. Otto’s body is the helm wheel of the ship and fights back against the Captain. Otto wants to fulfil BNL’s orders to keep the ship in space. As they fight, the Captain dislodges a cover panel for Otto’s off-switch. When the captain sees the switch, he immediately realizes that he can regain control of the ship by deactivating Otto. After fighting his way to the switch and flipping it, Otto deactivates and reverts to a manual control interface for the ship.
The panel of buttons showing Otto’s current status next to the on/off switch deactivates half its lights when the Captain switches over to manual. The dimmed icons are indicating which systems are now offline. Effortlessly, the captain then returns the ship to its proper flight path with a quick turn of the controls.
One interesting note is the similarity between Otto’s stalk control keypad, and the keypad on the Eve Pod. Both have the circular button in the middle, with blue buttons in a semi-radial pattern around it. Given the Eve Pod’s interface, this should also be a series of start-up buttons or option commands. The main difference here is that they are all lit, where the Eve Pod’s buttons were dim until hit. Since every other interface on the Axiom glows when in use, it looks like all of Otto’s commands and autopilot options are active when the Captain deactivates him.
A hint of practicality…
The panel is in a place that is accessible and would be easily located by service crew or trained operators. Given that the Axiom is a spaceship, the systems on board are probably heavily regulated and redundant. However, the panel isn’t easily visible thanks to specific decisions by BNL. This system makes sense for a company that doesn’t think people need or want to deal with this kind of thing on their own.
Once the panel is open, the operator has a clear view of which systems are on, and which are off. The major downside to this keypad (like the Eve Pod) is that the coding of the information is obscure. These cryptic buttons would only be understandable for a highly trained operator/programmer/setup technician for the system. Given the current state of the Axiom, unless the crew were to check the autopilot manual, it is likely that no one on board the ship knows what those buttons mean anymore.
Thankfully, the most important button is in clear English. We know English is important to BNL because it is the language of the ship and the language seen being taught to the new children on board. Anyone who had an issue with the autopilot system and could locate the button, would know which button press would turn Otto off (as we then see the Captain immediately do).
Considering that Buy-N-Large’s mission is to create robots to fill humans’ every need, saving them from every tedious or unenjoyable job (garbage collecting, long-distance transportation, complex integrated systems, sports), it was both interesting and reassuring to see that there are manual over-rides on their mission-critical equipment.
…But hidden
The opposite situation could get a little tricky though. If the ship was in manual mode, with the door closed, and no qualified or trained personnel on the bridge, it would be incredibly difficult for them to figure out how to physically turn the ship back to auto-pilot. A hidden emergency control is useless in an emergency.
Hopefully, considering the heavy use of voice recognition on the ship, there is a way for the ship to recognize an emergency situation and quickly take control. We know this is possible because we see the ship completely take over and run through a Code Green procedure to analyze whether Eve had actually returned a plant from Earth. In that instance, the ship only required a short, confused grunt from the Captain to initiate a very complex procedure.
Security isn’t an issue here because we already know that the Axiom screens visitors to the bridge (the Gatekeeper). By tracking who is entering the bridge using the Axiom’s current systems, the ship would know who is and isn’t allowed to activate certain commands. The Gatekeeper would either already have this information coded in, or be able to activate it when he allowed people into the bridge.
For very critical emergencies, a system that could recognize a spoken ‘off’ command from senior staff or trained technicians on the Axiom would be ideal.
Anti-interaction as Standard Operating Procedure
The hidden door, and the obscure hard-wired off button continue the mission of Buy-N-Large: to encourage citizens to give up control for comfort, and make it difficult to undo that decision. Seeing as how the citizens are more than happy to give up that control at first, it looks like profitable assumption for Buy-N-Large, at least in the short term. In the long term we can take comfort that the human spirit–aided by an adorable little robot–will prevail.
So for BNL’s goals, this interface is fairly well designed. But for the real world, you would want some sort of graceful degradation that would enable qualified people to easily take control in an emergency. Even the most highly trained technicians appreciate clearly labeled controls and overrides so that they can deal directly with the problem at hand rather than fighting with the interface.
After the security ‘bot brings Eve across the ship (with Wall-e in tow), he arrives at the gatekeeper to the bridge. The Gatekeeper has the job of entering information about ‘bots, or activating and deactivating systems (labeled with “1”s and “0”s) into a pedestal keyboard with two small manipulator arms. It’s mounted on a large, suspended shaft, and once it sees the security ‘bot and confirms his clearance, it lets the ‘bot and the pallet through by clicking another, specific button on the keyboard.
The Gatekeeper is large. Larger than most of the other robots we see on the Axiom. It’s casing is a white shell around an inner hardware. This casing looks like it’s meant to protect or shield the internal components from light impacts or basic problems like dust. From the looks of the inner housing, the Gatekeeper should be able to move its ‘head’ up and down to point its eye in different directions, but while Wall-e and the security ‘bot are in the room, we only ever see it rotating around its suspension pole and using the glowing pinpoint in its red eye to track the objects its paying attention to.
When it lets the sled through, it sees Wall-e on the back of the sled, who waves to the Gatekeeper. In response, the Gatekeeper waves back with its jointed manipulator arm. After waving, the Gatekeeper looks at its arm. It looks surprised at the arm movement, as if it hadn’t considered the ability to use those actuators before. There is a pause that gives the distinct impression that the Gatekeeper is thinking hard about this new ability, then we see it waving the arm a couple more times to itself to confirm its new abilities.
The Gatekeeper seems to exist solely to enter information into that pedestal. From what we can see, it doesn’t move and likely (considering the rest of the ship) has been there since the Axiom’s construction. We don’t see any other actions from the pedestal keys, but considering that one of them opens a door temporarily, it’s possible that the other buttons have some other, more permanent functions like deactivating the door security completely, or allowing a non-authorized ‘bot (or even a human) into the space.
An unutilized sentience
The robot is a sentient being, with a tedious and repetitive job, who doesn’t even know he can wave his arm until Wall-e introduces the Gatekeeper to the concept. This fits with the other technology on board the Axiom, with intelligence lacking any correlation to the robot’s function. Thankfully for the robot, he (she?) doesn’t realize their lack of a larger world until that moment.
So what’s the pedestal for?
It still leaves open the question of what the pedestal controls actually do. If they’re all connected to security doors throughout the ship, then the Gatekeeper would have to be tied into the ship’s systems somehow to see who was entering or leaving each secure area.
The pedestal itself acts as a two-stage authentication system. The Gatekeeper has a powerful sentience, and must decide if the people or robots in front of it are allowed to enter the room or rooms it guards. Then, after that decision, it must make a physical action to unlock the door to enter the secure area. This implies a high level of security, which feels appropriate given that the elevator accesses the bridge of the Axiom.
Since we’ve seen the robots have different vision modes, and improvements based on their function, it’s likely that the Gatekeeper can see more into the pedestal interface than the audience can, possibly including which doors each key links to. If not, then as a computer it would have perfect recall on what each button was for. This does not afford a human presence stepping in to take control in case the Gatekeeper has issues (like the robots seen soon after this in the ‘medbay’). But, considering Buy-N-Large’s desire to leave humans out of the loop at each possible point, this seems like a reasonable design direction for the company to take if they wanted to continue that trend.
It’s possible that the pedestal was intended for a human security guard that was replaced after the first generation of spacefarers retired. Another possibility is that Buy-N-Large wanted an obvious sign of security to comfort passengers.
What’s missing?
We learn after this scene that the security ‘bot is Otto’s ‘muscle’ and affords some protection. Given that the Security ‘bot and others might be needed at random times, it feels like he would want a way to gain access to the bridge in an emergency. Something like an integrated biometric scanner on the door that could be manually activated (eye scanner, palm scanner, RFID tags, etc.), or even a physical key device on the door that only someone like the Captain or trusted security officers would be given. Though that assumes there is more than one entrance to the bridge.
This is a great showcase system for tours and commercials of an all-access luxury hotel and lifeboat. It looks impressive, and the Gatekeeper would be an effective way to make sure only people who are really supposed to get into the bridge are allowed past the barriers. But, Buy-N-Large seems to have gone too far in their quest for intelligent robots and has created something that could be easily replaced by a simpler, hard-wired security system.
While preparing for his night cycle, Wall-E is standing at the back of his transport/home. On the back drop door of the transport, he is cleaning out his collection cooler. In the middle of this ritual, an alert sounds from his external speakers. Concerned by the sound, Wall-E looks up to see a dust storm approaching. After seeing this, he hurries to finish cleaning his cooler and seal the door of the transport.
A Well Practiced Design
The Dust Storm Alert appears to override Wall-E’s main window into the world: his eyes. This is done to warn him of a very serious event that could damage him or permanently shut him down. What is interesting is that he doesn’t appear to register a visual response first. Instead, we first hear the audio alert, then Wall-E’s eye-view shows the visual alert afterward.
Given the order of the two parts of the alert, the audible part was considered the most important piece of information by Wall-E’s designers. It comes first, is unidirectional as well as loud enough for everyone to hear, and is followed by more explicit information.
Equal Opportunity Alerts
By having the audible alert first, all Wall-E units, other robots, and people in the area would be alerted of a major event. Then, the Wall-E units would be given the additional information like range and direction that they need to act. Either because of training or pre-programmed instructions, Wall-E’s vision does not actually tell him what the alert is for, or what action he should take to be safe. This could also be similar to tornado sirens, where each individual is expected to know where they are and what the safest nearby location is.
For humans interacting alongside Wall-E units each person should have their own heads-up display, likely similar to a Google-glass device. When a Wall-E unit gets a dust storm alert, the human could then receive a sympathetic alert and guidance to the nearest safe area. Combined with regular training and storm drills, people in the wastelands of Earth would then know exactly what to do.
Why Not Network It?
Whether by luck or proper programming, the alert is triggered with just enough time for Wall-E to get back to his shelter before the worst of the storm hits. Given that the alert didn’t trigger until Wall-E was able to see the dust cloud for himself, this feels like very short notice. Too short notice. A good improvement to the system would be a connection up to a weather satellite in orbit, or a weather broadcast in the city. This would allow him to be pre-warned and take shelter well before any of the storm hits, protecting him and his solar collectors.
Other than this, the alert system is effective. It warns Wall-E of the approaching storm in time to act, and it also warns everyone in the local vicinity of the same issue. While the alert doesn’t inform everyone of what is happening, at least one actor (Wall-E) knows what it means and knows how to react. As with any storm warning system, having a connection that can provide forecasts of potentially dangerous weather would be a huge plus.
Not everyone is comfortable giving over to the flimsy promise of Carrousel [sic]. Some citizens run, and Sandmen find and terminate these cultural heretics.
Sandmen carry a device with them that has many different uses. It goes unnamed in the movie, so let’s just call it the SandPhone. It is a thick black rectangle about 20cm at its long edge, about the size of a very large cell phone. Near the earpiece on one broad side is a small screen for displaying text and images. Below that is a white line. The lower half of this face is metallic grill that covers a microphone. On the left edge is a momentary button that allows talking. Just above this is a small red button. When not in use, the device is holstered on the sandman’s belt.
The SandPhone lets the Sandman receive information through a display that can show both image and text. The Sandman sends back information and requests by voice in a CB radio metaphor.
Notifications
The first time we see the device is when Logan and Francis are attending Carrousel. Somehow, on his belt it catches his attention. With the crowd too loud for sound, and no evidence it’s light, my bet’s on haptics. Realizing he’s got a message, he picks it up, presses the edge button and the screen displays two lines of text:
RUNNER: GREAT HALL ENTRANCE WEST.
He then puts the device to his face as we would a cell phone and shouts, “Affirmative!” as loud as he can.
Perp wayfinding
Running with the device outside the Great Hall, Logan uses the SandPhone as a detector. By holding it flat out in front of him he hears a rhythmic pulse. Turning it this way and that, he listens for the change in pitch. It rises when he is pointing towards the targeted runner.
Bio identification
When he and Francis have terminated the runner, he snaps the device off his belt, and pressing the edge button, he reports back to dispatch, “Runner terminated, 0.31. Ready for cleanup.” Then by placing the device near the head of the dead runner, the device displays on the screen the last photographic image of him on file. Since the face on the SandPhone screen does not match the face he sees before him, Logan lifts the device to his face and, holding the edge button, requests an identity check of dispatch. Instantly he pulls the device away from his face to show the text:
IDENT. AFFIRM NEW YOU #483 FACE CHANGE.
Send backup
Much later in the film we see Logan alert dispatch to the location of the underground hideout by reaching down to the holstered device and pressing the white line button on its face. Its screen pulses green, and his position is highlight on the runner board (see below) at dispatch. Minutes later the location is raided by Sandmen.
Analysis
The first thing to note is that this is pretty close to a modern smart phone. He receives images and text messages, can talk to dispatch, and it has a biometric capability for identifying citizens. It’s tempting to paint this as visionary, but keep in mind that the first mobile phone was demonstrated in 1973, three years earlier, so it’s likely that the film makers were riffing off of the demo technology they’d heard about or maybe even seen in person.
We evaluate an interface’s design by how well it helps its user achieves his goals. (Even if those goals are anethma. That’s how we judge an interface.) In this case, the SandPhone helps Logan get the information he needs, when he needs it, across multiple channels. It doesn’t distract him with other functions. It’s context aware and doesn’t apparently have battery issues.
There are improvements of course.
We should make sure his hands are free by making the information available as an augmented reality display instead of a handheld device. This would also give him the information privately rather than display it for anyone (notably members of the resistance) to see it. Wayfinding would be more sensible as an overlay to his vision through this device.
Some surface tweaks might also be made, such as giving him a means of text input so he wouldn’t have to shout above the roar of Carrousel. Some silent means of input would help for when he needs to provide silent input as well. First I thought optical inputs might be ideal, given the augmented reality, but we don’t want his eyes distracted like that, even for the duration of glances. Instead some other gestural input—perhaps a face twitch or subvocal input—that lets him keep the rest of his body tense and ready for action.
Citizen biometrics should be a background fact, given the penopticon of Dome City. The information would come to him when he gets his assignement. But turn those same biometrics around on Logan, and his body could request reinforcements before he even thought to do so manually. When his heart rate elevates and galvanic skin response lowers, dispatch would know something was up, and route backup immediately.
A strategic interaction designer would even ask why he has to chase runners at all, when predictive algorithms could guess which citizens were likely to run and take action to forestall their rebellion. But then we’re into Minority Report, and this needs to stay Logan’s Run.
In addition to the portable brainwave detector, Dianthus also provides Barbarella with a number of weapons from the Museum of Conflict for her mission. All of these weapons are powered by a single energy box.
We only see it in use after she fires a single shot from the smallest of the weapons. She tries a second shot, but when it doesn’’t work, she glances at a device on the cuff of her boot. The device is designed in a taijitu, a yin-yang set of lights: one red, one white. They are blinking in an alternating pattern, and after viewing it she tells Pygar, ““My energy box is completely dead.””
Though having a visual signal is quite useful to understand the state of an invisible resource like power, the signal would be much more useful if it showed the amount of energy remaining, and gave warnings before the power was completely out. Failing all that, it would be more useful if she just put the device on the glove of her shooting hand so it was in her field of view at all times.
And though Barbarella’s culture doesn’t understand war, even a peaceful person can quickly come to realize the risk in making your available resources—like power for your weapons—wholly visible to your enemies.
Through the atom transmitter Dianthus bestows several gifts on Barbarella to help her with her mission. The first of these is the “portable brainwave detector…to test for Durand-Durand’s presence.” To operate it, Barbarella must press “a contact,” (Dianthus is offscreen when he indicates the contact, but later we see her operating the leaf-like button near the wrist) and if Durand-Durand is around, the ball of lights will glow and an alarm will sound.
The device is wearable, wrapping around Barbarella’s forearm, and held in place by a ring. This aspect of the design is good, since it means the device is ever-present for operation, and the design of it makes it lovely enough to be overlooked as a fashion accessory. In fact many characters see her wearing it and make no mention.
Manual activation is less than ideal, though, since this might tip off the suspect. This is especially true with the blinking, glowing ball of light and audio feedback. And, in fact, this is what happens later in the film when Durand-Durand trips over the device. The blinking light and audio catch his attention, betray the device for what it is, and blow Barbarella’’s cover in the process.
The best feedback would be invisible, like a haptic vibration through the cuff to her skin. Ideally, the device would be constantly on, to detect the subject passively, the moment he came into range. But presuming battery life is the issue, the activation cue should be something much more subtle, like Barbarella’s touching the back of the ring with the thumb of the same hand. Such a gesture would match the existing design of the object, be discreet to an observer, and yet still discrete enough to prevent accidental activation.
As David is walking through a ship’s hallway, a great clanging sounds from deep in the ship, as the colored lights high in the walls change suddenly from a purple to a flashing red, and a slight but urgent beeping begins. He glances at a billiards table in an adjacent room, sees the balls and cue sliding, and understands that it wasn’t just him: gravity has definitely changed.
There are questions about what’s going on with the ship that the gravity changed so fast, but our interest must be in the interfaces.
Why did David not expect this? If they’re heading to a planet and the route is known, David should know well in advance. The ship should have told him, especially if the event is going to be one that could potentially topple him. Presuming the ship has sensors to monitor all of this, it should not have come as a surprise.
The warning itself seems mostly well designed, using multiple modes of signal and clear warning signs:
Change in color from a soft to intense color (They even look like eyes squinting and concentrating in the thumbnails.)
A shift to red, commonly used for warning or crisis
Blinking red is a hugely attention-getting visual signal
Beeping is a auditory signal that is also a common warning signal, and hard to ignore
After David sees these signals, he walks to wall panel and presses a few offscreen buttons which beep back at him and silence the beeping, replacing it with overhead pulses of light that race up and down the hallway. Over the sound system a male voice announces “Attention. Destination threshold.”
Why should David have to go find out what the crisis is at the wall interface? If he had been unable to get to the wall interface, how would he know what happened? Or if it required split-second action, why require of him to waste his time getting there and pressing buttons? In a crisis, the system should let you know what the crisis is quickly and intrusively if it’s a dire crisis in need of remedy. The audio announcement should have happened automatically.
The overhead lights are almost a nice replacement for beeping. It still says, “alert” without the grating annoyance that audio can sometimes be. (There’s still a soft “click” with each shifting light, just not as bad.) But if he’s able to silence the audio at this wall panel, why wasn’t he able to silence the race lights as well? And why do they “race” up and down the hallway rather than just blink? The racing provides an inappropriate sense of motion. Given that this signal is for when the crew is in an unusual and potentially dangerous situation, it would be better to avoid the unhelpful motion cue by simply blinking, or to use the sense of direction they provide to signal to David where he ought to be. A simple option would be to have the hallway lights race continuously in the direction of the bridge, leading the crew to where they would be most effective. Even better is if the ship has locational awareness of individual crew members, then you can cut all overhead illumination by 20% and pulse a light a few feet away in the desired direction between 80 and 100 percent, while darkening the hallway in the opposite direction. Then, as David walks towards the blinking light, the ship can lead him, even around corners, to get him where he needs to be. In a real crisis, this would be an easy and intuitive way to lead people where they’re need to be. It would of course need simple overrides in case the crew knew something about the situation that the ship did not.
After walking through the racing-light hallways, he turns just past the door and into the bridge, where we can see the legend “DESTINATION THRESHOLD” across the pilots HUD. He turns on a light, licks a finger, and presses another button to activate all of the interfaces on the bridge. He walks to the pilot’s panel, presses a button to open the forward viewscreen, observing LV223 with wide-eyed wonder.
This entire sequence seems strange from an interface perspective. We’re going to presume that licking his fingers was just a character tic and not required by the system. But in addition to the fact, raised above, that David seems somewhat surprised by it all, that he should have to open doors and manually turn on lights and interfaces during a crisis seems pointless. It’s either not a crisis and these signals should diminish, or it is a crisis and more of this technology should be automated.
Dr. Morbius creates Robbie after having his intellectual capacity doubled by the Krell machines. The robot is a man-sized, highly capable domestic servant receiving orders aurally, and responding as needed with a synthesized voice of his own.
Robbie exits the cockpit of his vehicle.
Robbie invites the men inside.
Robbie first appears steering a special vehicle to pick up the officers. It is specially built for him, accommodating his inability to sit down. From this position, he can wirelessly maneuver the vehicle, and even turn his head around to address passengers.
Robbie fires Adams’’ sidearm.
Despite his having only two wide, flat fingers on each hand, he is able to grasp and manipulate objects as a human would. To demonstrate this, Morbius has him aim and fire Commander Adams’’ weapon at a nearby tree. How he pulled the trigger is something of an unanswered question since his hands are hidden from view as he fires, but he does so all the same. This makes him quite useful as an interface, since he is able to use any of the devices already in the environment. Additionally, should he become unavailable, humans can carry on in his absence.
Alta thanks Robbie for offering to make her a new dress.
Given that he must interact with humans, who have social needs, his stature helps ingratiate him. In one scene Alta wishes to express her gratitude for his promise of a new dress, and she gives him a hug. Though he does not hug back, she still smiles through and after the expression. Had he been less anthropometric, she would have had to express her thanks in some other way that was less pleasant to her.
Robbie warms the coffee for Alta and Farman.
In addition to being physically suited for human interaction, he is quite socially aware and able to anticipate basic human needs. In one scene, as Lt. Farman walks with Alta towards a cold pot of coffee, without having been asked, Robbie reaches down to press a button that warms the coffee by the time the two of them arrive. He also knows to leave immediately afterwards to give the two some privacy.
Despite these human-like qualities, some of his inhuman qualities make him useful, too. He is shown to be incredibly strong. He is tireless. He can synthesize any material he “tastes.”
With eyes behind his head, Robbie shoos a pesky monkey.
He even has “eyes in the back of his head,” or a 360-degree field of vision for surveillance of his surroundings. In one charming scene he combines this observation with small nonlethal lasers to shoo away a pesky monkey trying to steal fruit behind his back.
Morbius shows Robbie’’s “sub-electronic dilemma” when asked to harm a human.
Addressing safety concerns, Robbie is built to obey Asimov’’s first law of robotics. After having his creator instruct him to point a weapon at Adams, and “aim right between the eyes and fire,” Robbie’’s servos begin to click and whir noisily. His dome glows a pinkish-red as blue sparks leap across it. Morbius explains, ““He’’s helpless. Locked in a sub-electronic dilemma between my direct orders and his basic inhibitions against harming rational beings.”” When the command is canceled, the sparks stop immediately and the red fades over a few seconds.
This failsafe seems quite serious, as Dr. Morbius explains that if he were to allow the state to continue, that Robbie would “blow every circuit in his body.” Since the fault of such a state is with the one issuing the command and not Robbie, it seems a strange design. It would be like having your email server shut down because someone is trying to send an email infected with a virus. It would make much more sense for Robbie to simply disregard the instruction and politely explain why.
