Formal methods in Human-Computer Interaction