stpa applied to automotive automated parking …automation” level 2b “partial automation”...
TRANSCRIPT
![Page 1: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/1.jpg)
STPA Applied to Automotive
Automated Parking Assist
APA Collaboration with
General Motors
Charles A. Green
Mark A. Vernacchia
Padma Sundaram
Joseph D’Ambrosio
Massachusetts Institute of
Technology
John Thomas
Megan France
![Page 2: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/2.jpg)
AUTOMATED PARKING ASSIST
ENGINEERING FOR HUMANS - MIT STAMP WORKSHOP 2016 2
![Page 3: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/3.jpg)
CONTROL LOOP
3
Leveson, 2012
![Page 4: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/4.jpg)
CONTROL LOOP
Existing systems-
theoretic controller
model
Generic
Not specific to
humans
4
Leveson, 2012
![Page 5: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/5.jpg)
Human Controller
Control
Actions Inputs
5
HUMAN CONTROL MODEL
![Page 6: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/6.jpg)
Human Controller
PM Update
Process states
Devise
control
actions
Process Model
Control
ActionsProcess behaviors
Environment
Inputs
6
HUMAN CONTROL MODEL
![Page 7: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/7.jpg)
NEW PROCESS
Identify UCAs
Identify Process Model variables
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe decisions (Control Action Selections)
7
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
![Page 8: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/8.jpg)
NEW PROCESS
Identify UCAs
Identify Process Model variables
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe decisions (Control Action Selections)
8
![Page 9: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/9.jpg)
UNSAFE CONTROL ACTIONS
9
Driver
APA
Vehicle
Not Provided Provided Too early, too
late, out of
order
Stopped too
soon, applied
too long
Brake UCA-1: Driver
does not
brake when
auto-parking
and computer
doesn’t react
to an obstacle
![Page 10: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/10.jpg)
Identify UCAs
UCA-1: Driver does not brake when auto-parking
and computer doesn’t react to an obstacle
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe Control Action Selections
NEW PROCESS
11
![Page 11: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/11.jpg)
Identify UCAs
UCA-1: Driver does not brake when auto-parking
and computer doesn’t react to an obstacle
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe Control Action Selections
NEW PROCESS
12
![Page 12: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/12.jpg)
Identify UCAs
UCA-1: Driver does not brake when auto-parking
and computer doesn’t react to an obstacle
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe Control Action Selections
NEW PROCESS
13
![Page 13: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/13.jpg)
Identify UCAs
UCA-1: Driver does not brake when auto-parking
and computer doesn’t react to an obstacle
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe Control Action Selections
NEW PROCESS
14
Human Controller
PM Update
Process states
Process Model
Control Actions InputsProcess
behaviors
Environment
Devise control actions
![Page 14: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/14.jpg)
Identify UCAs
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify unsafe decisions (Control Action Selections)
Identify inadequate Process Model Updates
NEW PROCESS
15
Type of PM flaw Examples
Incorrect beliefs about process
state (including modes)
Incorrect beliefs about process
behaviors
Incorrect beliefs about
environment
Process states
Process Model
Process behaviors
Environment
![Page 15: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/15.jpg)
Identify UCAs
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify unsafe decisions (Control Action Selections)
Identify inadequate Process Model Updates
NEW PROCESS
16
Type of PM flaw Examples
Incorrect beliefs about process
state (including modes)
Driver thinks APA is enabled when APA is really
disabled (PM-1)
Incorrect beliefs about process
behaviors
Incorrect beliefs about
environment
Process states
Process Model
Process behaviors
Environment
![Page 16: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/16.jpg)
Identify UCAs
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify unsafe decisions (Control Action Selections)
Identify inadequate Process Model Updates
NEW PROCESS
17
Type of PM flaw Examples
Incorrect beliefs about process
state (including modes)
Driver thinks APA is enabled when APA is really
disabled
Incorrect beliefs about process
behaviors
Driver thinks APA is reacting properly and will
brake automatically
Incorrect beliefs about
environment
Process states
Process Model
Process behaviors
Environment
![Page 17: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/17.jpg)
Identify UCAs
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify unsafe decisions (Control Action Selections)
Identify inadequate Process Model Updates
NEW PROCESS
18
Type of PM flaw Examples
Incorrect beliefs about process
state (including modes)
Driver thinks APA is enabled when APA is really
disabled
Incorrect beliefs about process
behaviors
Driver thinks APA is reacting properly and will
brake automatically
Incorrect beliefs about
environment
Driver thinks there is no obstacle when there is
one
Driver knows there is an obstacle but doesn’t
know it’s on a collision path
Process states
Process Model
Process behaviors
Environment
![Page 18: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/18.jpg)
NEW PROCESS
Identifying Process Model Flaws
Incorrect beliefs about process state
Automatic mode changes
Previous commands ignored
Phases of operation
Incorrect beliefs about Process behaviors
Consider perceived effect of control actions, behavior in other modes, past experiences, etc.
Incorrect beliefs about environment
Consider changes to environment, similar past environments, etc.
“Known Unknown” and “Unknown Unknowns”
Believes there is a pedestrian in the way
Believes there is no pedestrian
Believes they don’t know if there is a pedestrian (may trigger a check)
Consider inadequate feedback, driver may know something changed but doesn’t know the new state, etc.
19
Providing guidance to ensure coverage
Process states
Process Model
Process behaviors
Environment
![Page 19: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/19.jpg)
Identify UCAs
UCA-1: Driver does not brake when auto-parking
and computer doesn’t react to an obstacle
Identify Process Model variables
PM-1: APA is enabled/disabled
PM-2: APA computer reacting appropriately/inappropriately
PM-3: Obstacle on collision path
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe Control Action Selections
NEW PROCESS
20
Human Controller
PM Update
Process states
Process Model
Control Actions InputsProcess
behaviors
Environment
Devise control actions
![Page 20: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/20.jpg)
Human Controller
PM Update
Process states
Process Model
Control Actions Inputs
Process behaviors
Environment
Devise control actions
21
NEW PROCESS
Driver does not brake when auto-parking and computer doesn’t react to an obstacle (UCA-1)
Driver thinks APA is enabled when APA is really disabled (PM-1)
Consider:1. Automatic mode changes2. Previous cmds ignored3. Phases of operation4. Etc.
![Page 21: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/21.jpg)
Human Controller
PM Update
Process states
Process Model
Control Actions Inputs
Process behaviors
Environment
Devise control actions
22
NEW PROCESS
Driver does not brake when auto-parking and computer doesn’t react to an obstacle (UCA-1)
Driver thinks APA is enabled when APA is really disabled (PM-1)
APA automatically disabled itself but driver didn’t notice the change
![Page 22: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/22.jpg)
Human Controller
PM Update
Process states
Process Model
Control Actions Inputs
Process behaviors
Environment
Devise control actions
23
NEW PROCESS
APA automatically disabled itself, driver noticed the change but didn’t understand it
Driver does not brake when auto-parking and computer doesn’t react to an obstacle (UCA-1)
Driver thinks APA is enabled when APA is really disabled (PM-1)
![Page 23: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/23.jpg)
Identify UCAs
UCA-1: Driver does not brake for an obstacle when
computer does not react appropriately to the obstacle
Identify Process Model variables
PM-1: APA reacting appropriately/inappropriately
PM-2: Obstacle on collision path
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe Control Action Selections
NEW PROCESS
24
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions InputsProcess
behaviors
Environment
![Page 24: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/24.jpg)
Identify unsafe Control Action Selections
NEW PROCESS
25
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
Driver knows APA is on
Driver knows APA hasn’t reacted yet
Driver knows there is an obstacle in the
way
Driver does not
brake when
auto-parking
and computer
doesn’t react to
an obstacle
(UCA-1)
![Page 25: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/25.jpg)
Identify unsafe Control Action Selections
NEW PROCESS
26
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
Driver knows APA is on
Driver knows APA hasn’t reacted yet
Driver knows there is an obstacle in the
way
Maybe driver does
not know they can
control brake with
APA on
Driver does not
brake when
auto-parking
and computer
doesn’t react to
an obstacle
(UCA-1)
![Page 26: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/26.jpg)
Identify unsafe Control Action Selections
NEW PROCESS
27
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
Driver knows APA is on
Driver knows APA hasn’t reacted yet
Driver knows there is an obstacle in the
way
Maybe driver
decides to disable
APA instead
Driver does not
brake when
auto-parking
and computer
doesn’t react to
an obstacle
(UCA-1)
![Page 27: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/27.jpg)
Identify unsafe Control Action Selections
NEW PROCESS
28
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
Driver may still
be waiting for
APA to act
Driver knows APA is on
Driver knows APA hasn’t reacted yet
Driver knows there is an obstacle in the
way
Driver does not
brake when
auto-parking
and computer
doesn’t react to
an obstacle
(UCA-1)
![Page 28: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/28.jpg)
Identify unsafe Control Action Selections
Consider whether the driver is aware they can control X
Consider alternative driver controls/actions
Consider other driver goals
NEW PROCESS
29
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
Driver knows APA is on
Driver knows APA hasn’t reacted yet
Driver knows there is an obstacle in the
way
Goals
Driver does not
brake when
auto-parking
and computer
doesn’t react to
an obstacle
(UCA-1)
![Page 29: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/29.jpg)
NEW PROCESS
Identify UCAs
Identify Process Model variables
Identify Process Model Flaws
Identify flaws in Process Model Updates
Identify unsafe decisions (Control Action Selections)
30
Human Controller
PM Update
Process states
Devise control actions
Process Model
Control Actions Inputs
Process behaviors
Environment
![Page 30: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/30.jpg)
AUTOMATED PARKING
Features of each system considered for this analysis:
31
Level 0*
No Driving Automation
Level 1
“Driver Assistance”
Level 2a
“Partial Automation”
Level 2b
“Partial Automation”
Level 3
“Conditional Automation”
Steering -
Braking - -
Shifting and Acceleration
- - -
Object and Event
Detection and Response
- - - -
*System numbering is consistent with SAE definitions for levels of automation, while “a” and “b” indicate different implementations which are classified within the same SAE level.
![Page 31: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/31.jpg)
Level 1
“Driver Assistance”
Level 2a
“Partial Automation”
Level 2b
“Partial Automation”
Level 3
“Conditional Automation”
Driver UCAs
APA
Computer
UCAs
5 13 28 28
Total
AUTOMATED PARKING
![Page 32: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/32.jpg)
Level 1
“Driver Assistance”
Level 2a
“Partial Automation”
Level 2b
“Partial Automation”
Level 3
“Conditional Automation”
Driver UCAs 42 41 38 44
APA
Computer
UCAs
5 13 28 28
Total
AUTOMATED PARKING
![Page 33: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/33.jpg)
Level 1
“Driver Assistance”
Level 2a
“Partial Automation”
Level 2b
“Partial Automation”
Level 3
“Conditional Automation”
Driver UCAs 42 41 38 44
APA
Computer
UCAs
5 13 28 28
Total 47 54 66 72
35 in common
5 in common
40 in common
32 in common
28 in common
60 in common
30 in common
13 in common
43 in common
AUTOMATED PARKING
![Page 34: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/34.jpg)
Level 1 Level 2a Level 2b Level 3
Driver UCAs 42 41 38 44
APA Computer
UCAs5 13 28 28
Total 47 54 66 72
![Page 35: STPA Applied to Automotive Automated Parking …Automation” Level 2b “Partial Automation” Level 3 “Conditional Automation” Driver UCAs 42 41 38 44 APA Computer UCAs 5 13](https://reader035.vdocuments.net/reader035/viewer/2022071107/5fe120558324e9006a3169f5/html5/thumbnails/35.jpg)
CONCLUSIONS
New human engineering extension strengths:
Provides additional guidance for engineers to understand and anticipate human interactions
Can help suggest solutions, not just problems
Can be used earlier in design process than detailed simulations or prototypes
37