. Bibliographie-[-abg-+-07a-]-y, R. Asnar, P. Bonato, F. Giorgini, V. Massacci et al., Secure and Dependable Patterns in Organizations : An Empirical Approach, 15th IEEE International Requirements Engineering Conference (RE '07), p.15, 2007.

]. Y. Abg07b, V. Asnar, P. Bryl, and . Giorgini, Using Risk Analysis to Evaluate Design Alternatives, Agent-Oriented Software Engineering VII, Post-proceedings, 2007.

P. [. Asnar and . Giorgini, Modelling Risk and Identifying Countermeasure in Organizations, 1st International Workshop on Critical Information Infrastructures Security (CRITIS '06), 2006.
DOI : 10.1007/11962977_5

T. [. Alur, O. Henzinger, and . Kupferman, Alternating-Time Temporal Logic, COMPOS, pp.23-60, 1997.
DOI : 10.1109/sfcs.1997.646098

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.25.5461

T. [. Alur, O. Henzinger, and . Kupferman, Alternating-time temporal logic, Journal of the ACM, vol.49, issue.5, pp.672-713, 2002.
DOI : 10.1145/585265.585270

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.25.5461

A. [. Brihaye, F. Da-costa-lopes, N. Laroussinie, and . Markey, ATL with Strategy Contexts and Bounded Memory, Logical Foundations of Computer Science, vol.164, issue.2, pp.92-106, 2009.
DOI : 10.1007/3-540-59042-0_57

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.151.2173

. Bmm-+-07-]-v, M. Bryl, P. Montali, P. Mello, N. Torroni et al., Agent-oriented requirements engineering meets computational logic for declarative business process modeling and verification, 8th Workshop on Computational Logic in Multi-Agent Systems (CLIMA-VIII), 2007.

P. Bresciani, A. Perini, P. Giorgini, F. Giunchiglia, and J. Mylopoulos, Tropos: An Agent-Oriented Software Development Methodology, Autonomous Agents and Multi-Agent Systems, vol.8, issue.3, pp.203-236, 2004.
DOI : 10.1023/B:AGNT.0000018806.20944.ef

J. [. Chareton, D. Brunel, and . Chemouil, A Formal Treatment of Agents, Goals and Operations Using Alternating-Time Temporal Logic, Brazilian Symposium on Formal Methods (SBMF), pp.188-203, 2011.
DOI : 10.1007/3-540-70657-7_14

URL : https://hal.archives-ouvertes.fr/hal-00783715

J. [. Chareton, D. Brunel, and . Chemouil, Vers une sémantique des jeux pour un langage d'ingénierie des exigences par buts et agents, Approches Formelles dans l'Assistance au Développement de Logiciels (AFADL), 2012.

J. [. Chareton, D. Brunel, and . Chemouil, Towards an Updatable Strategy Logic, Proc. 1st International Workshop on Strategic Reasoning SR, 2013.
DOI : 10.4204/EPTCS.112.14

URL : https://hal.archives-ouvertes.fr/hal-00796962

A. Chopra, F. Dalpiaz, P. Giorgini, and J. Mylopoulos, Modeling and Reasoning about Service-Oriented Applications via Goals and Commitments, Advanced Information Systems Engineering, pp.113-128, 2010.
DOI : 10.1007/978-3-642-13094-6_10

A. Chopra, F. Dalpiaz, P. Giorgini, and J. Mylopoulos, Reasoning about agents and protocols via goals and commitments, Proc. of the 9th Intl Conf. on Autonomous Agents and Multiagent Systems, pp.457-464, 2010.

E. [. Clarke and . Emerson, Design and Synthesis of Synchronization Skeletons Using Branching-Time Temporal Logic, Logic of Programs, pp.52-71, 1982.

T. [. Chatterjee, N. Henzinger, and . Piterman, Strategy logic, Information and Computation, vol.208, issue.6, pp.677-693, 2010.
DOI : 10.1016/j.ic.2009.07.004

M. [. Chopra and . Singh, Multiagent commitment alignment, Proc. of The 8th Intl Conf. on Autonomous Agents and Multiagent Systems, pp.937-944, 2009.

]. A. Cvl13, A. Cailliau, and . Van-lamsweerde, Assessing requirements-related risks through probabilistic goals and obstacles, Requir. Eng, vol.18, issue.2, pp.129-146, 2013.

[. Lopes, Propriétés de jeux multi-agents, 2011.

[. Lopes, F. Laroussinie, and N. Markey, ATL with strategy contexts : Expressiveness and Model Checking, IARCS Annual Conf. on Foundations of Software Technology and Theoretical Computer Science (FSTTCS), pp.120-132, 2010.

C. Eisner, D. Fisman, J. Havlicek, Y. Lustig, A. Mcisaac et al., Reasoning with Temporal Logic on Truncated Paths, Computer Aided Verification, 15th International Conference (CAV), pp.27-39, 2003.
DOI : 10.1007/978-3-540-45069-6_3

]. Gir06 and . Girard, Le point aveugle : cours de logique. Vers la perfection, Le point aveugle : cours de logique, Editions Hermann, 2006.

]. M. Jac01 and . Jackson, Problem frames : analyzing and structuring software development problems, 2001.

M. [. Kupferman and . Vardi, Weak alternating automata and tree automata emptiness, Proceedings of the thirtieth annual ACM symposium on Theory of computing , STOC '98, pp.224-233, 1998.
DOI : 10.1145/276698.276748

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.106.9175

]. E. Let02 and . Letier, Reasoning about Agents in Goal-Oriented Requirements Engineering, 2002.

N. [. Laroussinie and . Markey, Quantified CTL: Expressiveness and Complexity, Logical Methods in Computer Science, vol.10, issue.4, 2013.
DOI : 10.2168/LMCS-10(4:17)2014

URL : http://arxiv.org/abs/1411.4332

A. [. Letier and . Van-lamsweerde, Deriving operational software specifications from system goals, Proc. of the 10th ACM SIGSOFT symposium on Foundations of software engineering, p.128, 2002.
DOI : 10.1145/587051.587070

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.19.7952

F. [. Matoussi, R. Gervais, and . Laleau, Expressing KAOS Goal Refinement Patterns with Event-B, in Rodin User and Developer Workshop 2009 -Extended Abstracts, 2009.

A. Matoussi, F. Gervais, and R. Laleau, A Goal-Based Approach to Guide the Design of an Abstract Event-B Specification, 2011 16th IEEE International Conference on Engineering of Complex Computer Systems, 2011.
DOI : 10.1109/ICECCS.2011.21

URL : https://hal.archives-ouvertes.fr/hal-01224640

A. [. Mogavero, G. Murano, M. Y. Perelli, and . Vardi, Reasoning About Strategies, ACM Transactions on Computational Logic, vol.15, issue.4, p.6275, 1112.
DOI : 10.1145/2631917

A. [. Mogavero, G. Murano, M. Y. Perelli, and . Vardi, What Makes Atl* Decidable? A Decidable Fragment of Strategy Logic, CONCUR, pp.193-208, 2012.
DOI : 10.1007/978-3-642-32940-1_15

A. [. Mogavero, M. Y. Murano, and . Vardi, Reasoning about strategies, IARCS Annual Conf. on Foundations of Software Technology and Theoretical Computer Science (FSTTCS), pp.133-144, 2010.

P. [. Muller and . Schupp, Alternating automata on infinite trees, Theoretical Computer Science, vol.54, issue.2-3, p.54, 1987.
DOI : 10.1016/0304-3975(87)90133-2

URL : http://doi.org/10.1016/0304-3975(87)90133-2

P. [. Muller and . Schupp, Simulating alternating tree automata by nondeterministic automata: New results and new proofs of the theorems of Rabin, McNaughton and Safra, Theoretical Computer Science, vol.141, issue.1-2, pp.69-107, 1995.
DOI : 10.1016/0304-3975(94)00214-4

M. [. Mallya and . Singh, Incorporating commitment protocols into Tropos, Agent- Oriented Software Engineering VI, pp.69-80, 2006.
DOI : 10.1007/11752660_6

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.518.7247

]. S. Pin07 and . Pinchinat, Quantified mu-calculus with decision modalities for concurrent game structures, 2007.

E. [. Sistla and . Clarke, The complexity of propositional linear temporal logics, Journal of the ACM, vol.32, issue.3, pp.733-749, 1985.
DOI : 10.1145/3828.3837

]. A. Sis83 and . Sistla, Theoretical issues in the design and verification of distributed systems, 1983.

]. A. Van-lamsweerde, From System Goals to Software Architecture, in Formal Methods for Software Architectures Elaborating Security Requirements by Construction of Intentional Anti-Models, ICSE, pp.25-43, 2003.

]. A. Van-lamsweerde, Requirements Engineering -From System Goals to UML Models to Software Specifications, 2009.

]. A. Van-lamsweerde and E. Letier, Integrating obstacles in goal-driven requirements engineering, Proceedings of the 20th International Conference on Software Engineering, pp.53-62, 1998.
DOI : 10.1109/ICSE.1998.671102

]. E. Yu96 and . Yu, Modelling strategic relationships for process reengineering, 1996.

]. E. Yu09 and . Yu, Social Modeling and i*, Conceptual Modeling : Foundations and Applications, pp.99-121, 2009.

C. Annexe, Une illustration : le cas d'étude des missions d'observation satellite

C. Modèle-kh, A. , .. Kh, C. , A. Aff-c et al., 187 C.5.1 Affectations, p.187

C. Variantes-du-modèle-kh, A. , and .. , 194 C.6.1 Le modèle Kh S mem : utilisation de satellites à mémoire étendue

. Dans-cette-annexe, On considère deux modèles de buts : celui pour une agence de cartographie (agence cartographique) et celui pour une puissance militaire (armée) Chacun a besoin de se procurer des images satellites de la terre. Pour l'agence cartographique, il s'agit de réaliser une analyse continuelle de l'état du ciel pour tenir à jour ses bases de données. Pour l'armée, il s'agit de mettre en oeuvre un dispositif prêt à répondre rapidement à un besoin éventuel pour une image d'une région de la terre. On analyse d'abord les besoins à remplir pour chacune de ces deux missions, on en dérive les modèles de buts (Section C.1) ainsi qu'une opérationnalisation des exigences (Section C.2), Les capacités des acteurs sont ensuite formalisées (Section C.3) ainsi que les propriétés du domaine (Section C.4). La correction locale du modèle Kh C ,A est prouvée dans la Section C.5. À partir de ce modèle de référence