The design phase should consider the limitations and perception of the driver. The AV’s behaviour therefore should be designed in such a way that it is controllable/foreseeable for this user. (Bolovinou et al. 2019)
Main Question:
Is the vehicle controllable (in the sense defined above) in the event of a system malfunction or limit by overriding or switching off the function?
Note: driver’s actions are always referred to the primary commands (breaking and accelerator pedals, steering wheel).
Sub-Questions:
- Is it possible for the driver to deactivate or take back control of an ADF at any time?
- Is it ensured that driver actions to override the function or take back manual control are intuitive?
- Is the possibility of function activation or deactivation in situations, in which this would lead to potentially hazardous driving conditions, considered in the concept selection?
References
- Bolovinou, A., Atmaca, U., Sheik, A. T., Ur-Rehman, O., Wallraf, G. and Amditis, A. (2019). ‘TARA+: Controllability-aware Threat Analysis and Risk Assessment for L3 Automated Driving Systems’ IEEE Intelligent Vehicles Symposium (IV). doi: https://doi.org/10.1109/ivs.2019.8813999