System reliability analysis of interactions between ETCS, train drivers and dispatchers, demonstrated by STPA