Formal Methods in Human-Computer Interaction