:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions:   
1. Car battery isn't dead
2. Key battery isn't dead
3. Buttons on key are functional
4. Push button to start system is functional
5. Temperature is within operating ambient temperature range
6. Internal components of both the key and the car are not damaged
7. Key is within effective range from car
8. No facilities or electronic devices are generating enough radio interference, electrical noise, or magnetic fields to interrupt signals
9. Key cannot be inside the car to lock doors
10. Physical door locks work
11. Mechanical lever to release the mechanical key is working correctly
12. Mechanical key is not broken and it matches the physical lock
13. Doors aren't damaged (specifically wiring in door panel attached to locks)
14. Hybrid system works (access to electricity, software OK)
15. Battery-saving mode can be unset, so that the key can function normally
16. Key has to be registered with the vehicles on board computer
17. Key isn't touching another car key that's registered to a different system
18. Smart key system is not deactivated
19. Cars detection system is working properly

Exceptions:
1. The logical negations of A1 through A19


Variations:
1. If they key is in battery saving mode press any button to unlock the key
2. Gear needs to be in park
3. Foot needs to be on the brake to actually start the hybrid system
4. Shift the gear to position to P, power switch pushed, for HSON => HSSable
5. Inability to detect key, despite the key being inside the car
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions
1.	The battery has power.
2.	Key is not damaged.
3.	The correct key is used that has been registered to the driver's vehicle.
4.	The key is not near objects or structures that emit strong radio waves, such as TV tower, electric power plant, etc.
5.	The distance between the electronic key and the vehicle is in effective range when locking and unlocking the vehicle.
6.	The mechanical key can be inserted into the door keyhole assuming that it is not frozen shut under cold temperatures and snow. 
7.	The person is able to open the car door within 60 seconds.
8.	The key is not used in the aircraft.
9.	The door handle is dry during unlock operation.
10.	The lock sensor is not covered by ice, snow, mud etc.
11.	The smart key system is active.
12.	Battery-saving mode is not set.
13.	Key is not in contact with, or is not covered by metallic objects such as aluminum foil, metallic wallets/bags, coins, hand warmer, media discs.
14.	Parking brake can be set and brake pedal can be depressed.
15.	Shift position is at P. 
16.	The power switch can be pressed fast enough after stepping on brake and can changing shift position.


Exceptions
1.	The battery is empty. [A1]
2.	Key function deteriorates from being placed near electrical appliances that produce magnetic fields. 
3.	Key is wet and cannot function.
4.	Key is exposed to high temperatures.
5.	Key signals are interfered with by nearby radio signals. [A4]
6.	Keyhole is frozen shut under cold temperatures. [A6]
7.	Keys have been disassembled and non-functional.
8.	Sticker has been placed on the key that weakens radio signal. 
9.	Strong radio signal interfering with the car key signal.
10.	Key is used in the aircraft. [A8]
11.	The door handle is wet causing the door to lock and unlock repeatedly. [A9]
12.	The driver does not carry the key with him/her.
13.	A really strong magnet could erase the electronic car key data.
14.	Key is in battery-saving mode.
15.	Key is in contact with, is covered by metallic objects. [A13]
16.	The brake system is broken. [A14]
17.	The shift is broken and cannot be switched to P. [A15]


Variations

Variation 1: Re-order steps from p. 231
1.	Electronic key is present in car
2.	Depress brake pedal
3.	Set parking brake
4.	Press power switch

Variation 2: 
1.	Use mechanical key to unlock driver-side door
2.	Click unlock on the electronic key to unlock all doors

Variation 3: 
1.	Have two connected radio gadgets, where one is close to the car and the other close to the key (distance apart depend on radio gadgets)
2.	Click unlock on the electronic key
3.	The radio signal is spoofed by the radio gadget and the driver's door unlocks
4.	Click unlock again within 3 seconds to unlock all doors

Variation 4:
1.	Press the brake pedal continually while starting the hybrid system

Variation 5:
1.	Carry the electronic key and grip the driver's door handle to unlock this door.
2.	Hold the driver's door handle for approximately 2 seconds to unlock all the doors.

Variation 6:
1.	Set parking brake
2.	Change Shift position to P
3.	Touch the power switch with the Toyota emblem side of the key
4.	Depress brake pedal
5.	Press power switch
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

A) Assumptions:

	1.	This car/smart key system has been used in at least 14 days so battery-saving functionality is not activate. If this is feature is active, it could affect the functionality/response time of the key.
	2.	Smart key is not malfunctioning, so vehicle can be accessed and started
	3.	The keys battery is not depleted, the LED indicator on the key surface can be turned on.
	4.	The keys that you are using are registered to the vehicle.
	5.	The person carrying the key is standing within the effective area (2.3 ft). Electronic key will not be detected by car and this person will not be able lock/unlock the doors by using smart key system (P182). Serves as an exception as well.
	6.	The Driver does not grip the drivers door handle for at least 2 seconds with the electronic key on their person.
	7.	Driver opens a door within 60 seconds of unlocking the door. Or all doors will be automatically locked (Security Feature section 3.2, P172)
	8.	Keys unlock button is pressed again within 3 seconds of the initial press to unlock all doors (P172). 
	9.	The wireless remote control has not customized at Toyota dealer, such that the electronic key system is disabled altogether. This could be a possible if the vehicles owner has a medical devices that are affected by the key radio waves (pg 189). 
	10.	If a buzzer sounds and emergency flashers flashes twice on the doors, all doors are unlocked. (P172)
	11.	The electronic key cannot be too close to the window or outside door handle, near the ground, or in a high place (P185). In such cases, the electronic key does not work properly even within the effective range (2.3ft).
	12.	The shifters position is at P when pressing the power switch. And hybrid system can be started only if the shift position is at P. (P231)

B) Exceptions:

	1.	If the electronic key is damaged and LED indicator could not be turned on, then hybrid system could not be turned on.
	2.	If the key in use is not successfully registered to the vehicle as stated in point A.4, the user won't be able to access the vehicle, as the doors cannot be unlocked.
	3.	As stated in A.6, if the user grips the drivers door handle for at least 2 seconds when all the doors are locked. All the doors will unlock. On some models this is also true for the passenger door handle.
	4.	When door is not opened within 60s after vehicle is unlocked but the system does not lock the door again, the security features are not operating properly. (P172)
	5.	If battery of electronic key is depleted and the key itself is not detected correctly by car system, the door can be locked using the key when the key is in inside car (P 173)
	6.	If the outside temperature is extremely cold (e.g. under -30°C during Winter) and the outside temperature does not increase in a few days, hybrid system may not be possible to start during these days.(P234)
	7.	If sensor on the back of handle is broken or not working properly, smart key system would not work and drivers cannot unlock the door from outside even if they carry electronic key with them. (P171)
	8.	If the person and key are outside the car, the person can touch the lock sensor to lock all the doors instead of pressing the lock button. Serves as a variation as well.
	9.	Leaving the electronic key on top of the instrument panel or near the door pockets when exiting the vehicle. Depending on the radio wave reception conditions, it may be detected by the antenna outside the cabin and the door will become lockable from the outside, possibly trapping the electronic key inside the vehicle.
C) Variations:

	1.	If set up correctly, the user could press the unlock button on the key to unlock all the doors directly instead of just the drivers door. 
	2.	After unlocking the drivers door, it is possible for the person to unlock all the remaining doors using the door lock switches located on the drivers door (pg 173). Serves as an exception.
	3.	The mode of hybrid system can be switched to "Off" by pressing the power switch with the brake pedal released. Or hybrid system can be changed to "Off" automatically if the vehicle is left in ACCESSORY mode for more than 20 minutes or ON mode for more than an hour with the shift position in P.
	4.	It is possible for the person to lock all the doors by pressing the door lock button on the drivers door while its open, stepping out and closing the door.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

a) Assumption
    1. The vehicle's functionality of the key system works. (i.e. car should be able to identify the correct key)
    2. The key is not damaged (i.e. exposure to high temperature, wet/washed in an ultrasonic washer...) (P 170)
    3. The owner is holding the correct key (P 169)
    4. Vehicle owner has the knowledge to use such electronic key subsystem(owner reads through the manual and knows what steps to do to use the key)
    5. The key's battery is not depleted so that it can perform manual-described operations (P 184)
    6. No snow or rain on door's handle (o/w the smart key system may not work, the sensor cannot detect user's hands) (P 176)
    7. The user has hands so the user is able to grip handle with smart key system sensor. (P 171)
    8. Electronic key is not in contact with, or is covered by metallic objects (P 184)
    9. No other wireless key is being used nearby (P 184)
    10. Near a TV tower, electric power plant, gas station, radio station, large display, airport or other facility that generates strong radio waves or electrical noise (P 184)
    11. The electronic key is not carried together with the following devices that emit radio waves (i.e. portable radio, cellular phone, cordless phone) (P 184)
    12. No window tint with a metallic content or metallic objects are attached to the rear window (P 184)
    13. Electronic key is not placed near a battery charger or electronic devices (P 184)
    14. Electronic key should not be too close to the window. (i.e. difficult for car to detect whether the key is outside or not) (P185, rule1)
    15. Don't touch smart key system sensor on the handle while wearing gloves. (may delay or prevent lock detection P 185)
    16. The key is within the effective range of the vehicle for radio wave to be able to reach
    17. For Smart Key System to work, the key is within the effective range of 0.7m of driver's door handle, front passenger's door handle and back door opener switch (P 171)
    18. Don't leave keys on the instrument panel or near the door pockets when exiting the vehicle. (o/w front door may be lockable from outside, potentially trap the electronic keys indie. P 185)
    19. If the smart key system has been deactivated in a customized setting, we can open the vehicle by touching the door handle. (P 186)

b) Exception 
    1. Plus the logical negation of assumptions: A1, A2, ... A18             
       (We believe the set of exceptions are are identical to the set of negated assumptions since our assumptions cover all pre-conditions for IEKS to work)

c) Variation
    1. Starting the hybrid system
        a) When the electronic key operates
            i. Check that the parking brake is set
            ii. Firmly depress the brake pedal
            iii. Press the power switch shortly and firmly
            iv. Check that the "READY" indicator is illuminated
        b) When the electronic key does not operate
            i. Depress the brake pedal. 
            ii. Touch the Toyota emblem side of the electronic key to the power switch. When the electronic key is detected, a buzzer sounds and the power switch will turn to ON mode. When the smart key system is deactivated in customization setting, the power switch will turn to ACCESSORY mode. 
            iii. Firmly depress the brake pedal and check that is shown on the multi-information display. 
            iv. Press the power switch.
    a) and b) can form a variation. Also, there is another variation inside a). If you reverse step i) and ii) in a), the hybrid system will also start.

    2. Stopping the hybrid system
        a) When the electronic key operates
            i. Stop the vehicle completely
            ii. Set the parking brake
            iii. Shift the shift position to P
            iv. Press the power switch
            v. Slowly release the brake pedal and check that the display on the instrument cluster is off
        b) When the electronic key does not operate
            i. Set the parking brake
            ii. Shift the shift position to P
            iii. Press the power switch as you normally do when stopping the hybrid system
    a) and b) can form a variation. Also, there is another variation inside a). We can also stop the hybrid system by reversing step ii) and iii) in a).

    3. Unlocking/Locking the doors (including the back door) from the outside
        a) Using t he door lock switches (P 173)
            i. Lock all the doors by pressing the door lock switch
            ii. Unlock all the doors by pressing the door unlock switch
            iii. Using the inside lock buttons (P 173)
            iv. Lock all the doors by changing the position of door lock to lock position
            v. Unlock all the doors by changing the position of door lock to unlock position
        b) Using the smart key system (P 172)
            i. Grip the driver's door handle to unlock the door. Holding the driver's door handle for approximately 2 seconds unlocks all the doors. Make sure to touch the sensor on the back of the handle. 
            ii. Touch the lock sensor (the indentation on the surface of the front door handle) to lock the doors.
            iii. Using wireless remote control (P 172)
            iv. Locks all the doors by pressing the lock button 
            v. Unlock all the doors by pressing the unlock button to unlock the driver's door. Pressing the button again within 3 seconds unlocks the other doors. (If a door is not opened within approximately 60 seconds after the vehicle is unlocked, the security feature automatically locks the vehicle again.)
        c) Using the automatic door locking/unlocking system (P 174)
            i. Shifting the shift position to any positions other than P locks all the doors
            ii. Shifting the shift position to P unlocks all the doors
            iii. All the doors are locked when the vehicle speed is approximately 12 mph (20 km/h) or higher 
            iv. All the doors are unlocked when the driver's door is opened within approximately 45 seconds after turning the power switch off
        d) Using mechanical key
            i. Lock the driver's door by inserting the key and rotate 
            ii. Unlock the driver's door by inserting the key and rotate in the opposite direction
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions:
1) The battery of the electronic key has power
2) All of the car doors are locked
3) The car has power
4) The mechanical key can be removed from the holder
5) The mechanical key works correctly to open the door
6) The keys are not lost
7) The inside lock switches are operating correctly
8) The driver is able to contact the Toyota Dealer
9) The hybrid starting system button is working correctly
10) The battery casing in the smart key is not damaged
11) Car antennae are working properly
12) There is no interference in the key signal
13) The key is close enough for the signal to be received by the car

Exceptions:
1) The battery of the electronic key doesn't have power (opposite of assumption 1)
2) The car doesn't have power (opposite of assumption 3)
3) The mechanical key does not work correctly and the door does not open (opposite of assumption 3)
4)  The keys are lost (opposite of assumption 6)
5) Driver is HoH and cannot easily contact the Toyota Dealer
6) The driver side lock is broken and cannot be opened
7) The lock switches are broken and the other doors cannot be locked/unlocked
8) The driver does not have access to a telephone to contact the Toyota Dealer (opposite of assumption 8)
9) Opposite of assumption 9
10) The driver is unable to read the manual
11) The smart key is damaged and the battery cannot be replaced
12) Car antennae are broken (opposite of assumption 11)
13) Being near a facility like an electrical power station, a radio station, or a TV tower that generates strong radio waves or electrical interference (opposite of assumption 12)
14) Electric key is in contact with metal objects, causing signal interference (opposite of assumption 12)
15) Carrying an item like a phone or another key close to the original key can cause signal interference (opposite of assumption 12)
16) Door lock is wet when the key is used (will cause the door to repeatedly unlock and lock) 
17) Door lock is in contact with snow, ice, or mud (opposite of assumption 7)
18) Key is too far away when used or is in a dead zone like too close to the window or door handle, too close to the ground, or too high over the car (opposite of assumption 13) 

Variations:
1) The driver may have to physically go to the Toyota dealer because they cannot call them
2) The car battery may need to be recharged before the smart key will work
3) The hybrid system might need to be started by someone besides the driver
4) The system might need to be started without access to the mechanical key
5) The smart key button might need to be repaired before the key can send a signal
6) Car antennae may need to be repaired before the car can receive the key's signal
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumption:
1. Electronic keys must have the smart key system and wireless remote control function and they work
2. Electronic key battery's life is 1 to 2 years.
3. The number of keys already registered to the vehicle can be confirmed.
4. Wrong mechanical key could not work or damage inside mechanism
5. Key is not damaged or lost
6. People carry the electronic key to unlock and lock the doors from the outside
7. People have the basic knowledge of how to performing common operations with provided interface.
8. Electronic key could be detected within about 2.3 ft of driver's door handle.
9. Electronic key needs to be inside the vehicle to start hybrid system
10. E6: smart key has used within 14 days
11. Battery-saving mode is not set to use smart key system 
12. The communication between the electronic key and the vehicle is not affected.
13. Electronic key battery is not depleted
14. Key is not near any facilities that generate strong radio waves or electrical noise
15. No other wireless key (that emit radio waves) is used nearby
16. Electronic key is not placed near a battery charger or electronic devices
17. Electronic key is not in contact or covered by metallic objects
18. Electronic key is not carried with radio waves emitting devices
19. The lock sensor does not contact with ice, snow, mud, etc.
20.  The immobilizer system is deactivated in order for hybrid system to start 


Exception:
1. Electronic key experience serious deterioration
2. Electronic key is depleted when key is not used
3. A5: Key is damaged or lost.
4. Smart key system or the wireless remote control does not operate properly
5. A6: Key is in the car, then the door cannot be locked
6. If the smart key system has not been used for 14 days of longer, the doors cannot be unlocked at any doors except the driver's door.
7. The electronic key is too close to the window or outside door handle, near the ground, or in a high place when the doors are locked or unlocked.
8. The electronic key is on the instrument panel, floor, or in the door pockets or glove box when the hybrid system is started or power switch modes are changed
9. The lock sensor comes into contact with ice, snow, mud, etc
10. Door handle becomes wet while the electronic key is within the effective range, the door may lock and unlock repeatedly. 


Variation:
1. Stopping the hybrid system: (the step 2 can be swapped with the step 3) (p. 232)
2. Starting the hybrid system with low battery: (step 1 and 2 can be swapped) (p.727)
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions
1. The car's battery is alive
2. The electronic key is in range of the car
3. Car's receiver is working (to be able hear the key)
4. The car has gas
5. The car's engine works
6. The doors can be locked properly
7. The doors are closed properly
8. Key has not been dropped or bent
9. The electronic key has not been attached to anything on the surface
10. The electronic key is not near any objects which produce magnetic fields
11. The smart key system is on (not customized to be off)
12. The battery in the electronic key is alive
13. The electronic key has not been carried together with the devices that emit radio waves
14. The electronic key is not in contact with, or is not covered by metallic or magnetic objects
15. Key has not been disassembled
16. Key has not been exposed to high temperatures for long periods of time
17. Key has not been wet or washed
18. Key is not near medical electrical equipment, such as low frequency therapy equipment


Exceptions
1. The key has been dropped and damaged
2. Something is attached to the key blocking transmissions
3. The key has been demagnetized
4. The key has been exposed to a high amount of heat rendering it unusable
5. The car key has not been programmed to correctly open the car doors
6. Plus the negation of all the assumptions (1-18) listed above


Variations
1. To lock the doors without a key:
   1. Touch the lock sensor (the indentation on the surface of the front door handle) to lock the doors
   2. When the door cannot be locked even if the lock sensor on the surface of the door handle is touched by a finger, touch the lock sensor with the palm.
   3. Move the inside lock button to the lock position and close the door 
2. Unlocks all the doors: Pressing the button within 3 seconds (Manual) vs. pressing the button with 2 seconds (Vision Doc) to unlock all the doors
3. If the car has been customized to do so, only one unlock operation is needed to unlock all the doors.
4. A buzzer sounds for five sounds if the door is not properly closed, and the buzzer would stop once the door is fully closed.
5. Locking the doors while inside the car during stage of the vision document, after the doors have been unlocked. All doors can be locked and the car can be started as long as the key is in the cabin.
6. The doors cannot be unlocked at any doors except the driver's door, if the key has not been used for 14 days or longer. Doors can be unlocked by taking hold of the driver's door handle, or using the wireless remote control or the mechanical key.
7. The brake pedal can be depressed and the electronic key can be held to the power switch to start the vehicle. This can be used in regular situation as well as situations where the key has exhausted its battery.
8. After all doors have been unlocked, pressing the unlock button again will have no additional functions on the car.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions
1. Electronic key battery is not dead
2. The electronic key is within the effective range (detection areas)
3. Electronic key is not near a TV tower, electric power plant, gas station, large display, airport or other facility that generates strong radio waves or electrical noise
4. When the electronic key is not in contact with, or is not covered by the following metallic objects: cards to which aluminum foil is attached, cigarette box that have aluminum foil inside, metallic wallets or bags, coins, hand warmers make of metal, media such as CDs and DVDs
5. When other wireless key (that emit radio waves) is not being used nearby
6. When not carrying the electronic key together with the following devices that emit radio waves: portable radio, cellular phone, cordless phone or other wireless communication devices, another vehicle's electronic key or a wireless key that emits radio waves , personal computer or personal digital assistants(PDAs), digital audio players, portable game systems
7. If window tint with a metallic content or metallic objects are not attached to rear window
8. When the electronic key is not placed near a battery charger or electronic devices
9. The electronic key is not too close to the window or outside door handle, near the ground, or in a high place when the doors are locked or unlocked
10. The electronic key is not on the instrument panel, floor, or in the door pockets or glove box when the hybrid system is started or power switch modes are changed
11. Do not leave the electronic key on top of the instrument panel or near the door pockets when exiting the vehicle
12. NFC still works even when the electronic key battery is completely dead
13. The smart key system has been activated in the settings prior to the the battery failing
14. No sticker is attached to the surface of the key
15. The key has not been exposed to high temperatures for a long period of time 

Exceptions
1. Logical negation of Assumption 1
2. Logical negation of Assumption 2
3. Logical negation of Assumption 3
4. Logical negation of Assumption 4
5. Logical negation of Assumption 5
6. Logical negation of Assumption 6
7. Logical negation of Assumption 7
8. Logical negation of Assumption 8
9. Logical negation of Assumption 9
10. Logical negation of Assumption 10
11. Logical negation of Assumption 11
12. Logical negation of Assumption 12
13. Logical negation of Assumption 13
14. Logical negation of Assumption 14
15. Logical negation of Assumption 15

Variations
1. When the hybrid system is on, JUST pushing the power switch while the car is in park will turn the hybrid system off (no need to check if car hears the key) 
2. Car can be started if the key is not in the cabin, as long as the key is near the window 
3. If the battery of the key is too low, pull out the metal key from the inside of the smart key and insert it into the door to open it. Then, hold the smart key centimeters away from the car's on/off button while pressing it in order to start the car.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

IEKS Domain Assumptions, Exceptions, and Variations
Assumptions
1. The battery in the remote is alive
2. If the battery is dead, NFC is functioning correctly to allow an NFC start
3. The locking mechanism has not physically broken
4. The radio wave receiver on the car has not physically broken
5. There is no interference causing the car to not be able to communicate with the remote
6. The remote is within 2.3ft from the driver side door, passenger side door, or trunk when KULBP
7. Battery saver mode (p. 184) has not been set
8. Not in range of strong radio waves from TV towers, etc.
9. Key is not near or touching any metallic objects
10. Key is not near other wireless keys of similar construction
11. Key is not carried with other radio wave emitters
12. No metal attached or adhered to rear window
13. Electronic key not near other electronic devices
14. KIC is not at the extremities of the car
15. KOC does not have the key in the extremities of the car
16. Driver is not wearing gloves for hand detection entry
17. Driver has not approached car quickly for hand detection entry
18. For HSSable -> HSOn, transmission is in P
19. For HSOn -> HSSable, transmission is in P
20. Immobilizer system (p. 89) has not been activated
21. Smart key system has not been deactivated (p. 774)
Exceptions
1. If battery saver mode has been set, a button must be hit to exit before normal operation
2. HSOn -> HSSable can be accomplished while driving by holding power button for 2 seconds or pressing power button 3 times in quick succession, bypassing A19
3. The battery in the remote is dead, and the local negation of each of A2, A3, A4, A5,...
Variations
1. The user waits more than 60 seconds to open the vehicle, and the door locks itself (p. 172 -> security feature). The user must then unlock the vehicle again to leave state ADL and progress in starting the car.
2. Whether the driver gets to  DDU or ADU, once KIC, HSSable
3. Driver can get to ADL to DDU or ADU by using the remote or the key
   1. Key process is described on p. 726
   2. Remote process is described in Vision Document
1. Once in the car, driver can start car normally with KIC or by placing emblem on remote on to start button until beep is heard.
2. If in battery saver mode, hit any button to exit and follow normal operation
3. HSOn -> HSSable can be accomplished while driving by holding power button for 2 seconds or pressing power button 3 times in quick succession
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumption 1: All four locks of the car are fully functional
Assumption 2: The car battery will always work 
Assumption 3: The hybrid system is startable
Assumption 4: The electronic key cannot be deteriorated by a magnetic field 
Assumption 5: The battery of the electronic key is alive
Assumption 6: Both the sender and receiver are functional
Assumption 7: The battery saving function is switchable (can switch on or off)  
Assumption 8: The system is not in an environment in which the surrounding climate is too extreme as to cause it to fail
Assumption 9: The system is not in range of other electrical devices that would cause the system to fail
Assumption 10: The system is put together properly by the manufacturer 
Exception 1: Both the key and hybrid system are functional but they cannot communicate properly
Exception 2: One of the four locks of the car is not functional
Exception 3: The car battery does not work 
Exception 4: The hybrid system is not startable
Exception 5: The electronic key has been deteriorated by a magnetic field 
Exception 6: The battery of the electronic key is dead
Exception 7: Either the sender or receiver is not working
Exception 8: The battery saving function is not switchable  
Exception 9: The system is in an environment in which the surrounding climate is too extreme as to cause it to fail
Exception 10: The system is in range of other electrical devices that would cause the system to fail
Exception 11: The system was not put together properly by the manufacturer 
Variation 1: The current operation of starting the hybrid system is described in the user manual as follows:  1. Check that the parking brake is set. 2. Firmly depress the brake pedal. 3. Press the power switch shortly and firmly. And 4. Check that the “READY” indicator is illuminated. Instead, a variation of this operation would be to either follow the steps in the order step 3, step 1, step 2, step 4 or to follow the steps in the order step 3, step 2, step 1, step 4.
Variation 2: The current operation of stopping the hybrid system is described in the user manual as follows:  1.Stop the vehicle completely. 2.Set the parking brake. 3.Shift the shift position to P. 4.Press the power switch. And 5.Slowly release the brake pedal and check that the display on the instrument cluster is off. Instead, a variation of this operation would be to either follow the steps in the order step 1, step 3, step 4, step 2, step 5 or to follow the steps in the order step 1, step 3, step 2, step 4, step 5.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions
1. Car keys are provided with the vehicle (page 166).
2. The car battery is not empty, such that an alarm will sound/lights will flash in panic mode (page 167).
3. Users of the car has hands (to grip the handles to unlock doors) (page 171).
4. The user has the mechanical key to get into the car
5. The user has access to the electronic key
6. The power switch is fully functioning (the car is fully functioning in general, everything described in manual exists and not broken)
7. The user understands how everything functions (i.e. read manual)
8. The mechanical key is paired correctly with the vehicle

Exceptions
1. Car keys are lost/forgotten when the car is delivered to the user, so the user cannot unlock the door.
2. The car battery is empty so panic mode will not be activated when the button on the electronic is pressed.
3. The user of the car is an amputee, so he cannot unlock the door by gripping a handle.
4. There is an electrical appliance nearby that is interfering with the communication of the electronic key and the power switch
5. The key ID does not match with what's paired to the car due to a temporary malfunction
6. The electronic key is internally broken (internally damaged)

Variations
1. Instead of holding on to the handle to unlock the doors (page 171), there could be a sensor that detects movement in front of the handle to unlock the doors.
2. The energy needed for panic mode comes from a special supply battery, so draining the car's battery will not prevent panic mode from working.
3. Allow for control from smartphone (BLE of NFC).
4. Incorporate a fingerprint scanner into the handle, and unlock if the fingerprint matches the owner.
5. The trunk door has a sensor built in so that it would not slam on people/fingers/etc.
6. The electronic key will only receive radio waves if a button is pressed, so that the battery life will increase (page 168).

Questions
1. How many spare keys are given per user?
2. Is it possible to start the electrical system of the car when the electronic key is dead?
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Assumptions:
1. Mechanical key opens cabin door (door lock functions correctly)
2. User has access to correct key fob
3. Mechanical key can be accessed
4. Battery-saving mode is not set to "on"
5. Electronic key is not affected by TV tower, electric power plant, gas station, radio station, large display, airport, or other facility generating strong radio waves or electrical noise
6. Key is not in contact with or covered by:
	* Cards to which aluminum foil is attached
	* Cigarette boxes that have aluminum foil inside
	* Metallic wallets or bags
	* Coins
	* Hand warmers made of metal
	* Media such as CDs and DVDs
7. Key is not being interrupted by nearby electronic keys
8. Key is not being interrupted by nearby radio wave-emitting devices
9. Key is not near a battery charger or electronic device
10. The brake pedal depression sensor functions as usual
11. The power switch mode is not set to Off
12. User has the motor skills/physical capability necessary for opening and starting the car
13. Power switch can be pressed and correctly notifies the car system to start
14. Assume car battery is not dead and car can start
15. Necessary mechanical functions of car work
16. Assume the user can access the car
17. Assume you have the correct key for the car you are attempting to open and start
18. Car can "hear" key signal
19. User is capable of calling Toyota

Exceptions:
1. The key fob battery is out of power
2. The NFC system fails
3. Unable to open cabin door because of mechanics of car (overlaps with assumptions)
4. Cannot start engine because of mechanics of car (overlaps with assumptions)
5. Car keys and car do not match (overlaps with assumption)
6. The key fob's signal is disrupted by outside factor (overlaps with assumption)


Variations:
1. Go to the car dealer instead of calling Toyota (when electrical key stops working).
2. Call CAA instead of Toyota (when electrical or mechanical key stops working).
3. Replace the key battery yourself (when electrical key stops working).
4. Get access to the extra key from a friend or family member (when electrical key is out of power).
5. Before unlocking the door(s) with the electronic key, set the key's battery-saving mode to "off" (when battery-saving mode has been turned on previously).
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Some Group
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

A1. The battery of the electronic key is alive
A2. Users are available and have fingers to press the keys
A3. The electronic key interface is always available to users.
A4. The buttons on the key can always be recognized by users
A5. Receiving host of wireless control system will not be influenced by external factors
A6. The car is not moving in a fast speed to engage auto-lock feature 
A7. Physical door locks of the car are not damaged or clogged
A8. The electronic key is not damaged
A9. The electronic key is registered with the car system
A10. The mechanical key is the correctly paired key with the door lock
A11. No magnetic wave interferes with the key and causing it not function properly
A12. Doors are not deformed so that driver can open it after it is unlocked
A13. Vehicle doors/moonroof are not blocked by walls/obstacles
A14. Vehicle mobility is not impaired
A15. Driving functions can be used without problem
A16. The effective range of the electronic key is large enough
A17. The vehicle antenna is not compromised by vicious attack
A18. The backup/secondary key is not near the vehicle
E1. The battery is dead. -- The hybrid system can not start by the key. 
E2. The battery is not paired/registered with the car system. -- The hybrid system can not start by the key.
E3. The pattern on each button become unclear to distinguish. -- The lock and unlock     operations may be doesn't work.
E4. The owner cannot see. -- The owner cannot use the electronic key complete correct
E5. The owner cannot hear. -- The owner cannot hear the feedback or warning alarm
E6. The wireless control signal is being blocked by strong interference. -- The receiving host cannot successfully receive the wireless control signal. 
E7. The receiving host of the wireless control system is blocked or disturbed. -- The receiving host cannot successfully receive the wireless control signal. 
E8. The car system is damaged. -- The car system is not behave correctly for any operation.
E9. The side door lock is damaged. -- The result of Pw2SoA behaviour will be incorrect.
E10. Driver is caught by sudden shut of a vehicle door and is incapacitated
E11. Logical negation of A11, A12, A13, A14, A15, A16, A17, A18
V1. Stopping the hybrid system: Stopping vehicle completely -> shift position to parking -> set parking brake -> press the power switch -> release brake pedal & check display is off
V2. Stopping the hybrid system (2): Stopping vehicle completely ->  shift position to parking -> press the power switch -> release brake pedal & check display is off
V3. Stopping the hybrid system (3): Stopping vehicle completely ->  set parking brake -> press the power switch -> release brake pedal & check display is off
V4. Starting the hybrid system: Firmly press the brake pedal -> Check parking brake -> Press power switch -> Check Ready sign
V5. Starting the hybrid system(2): Check parking brake -> Press power switch -> Check ready sign
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Prof's Solutions
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

"You" is driver

Assumptions: 

1. Electronic key battery is not depleted.

2. Electronic key battery is not completely dead.

3. Entry function works properly.

4. You did not lose your electronic keys.

5. You did not lose your mechanical keys.

6. Electronic key is not within 1 meter of an electrical appliance that produces a magnetic field.

7. The smart key system and the wireless remote control operate.

8. The smart key detection area has not become smaller.

9. The LED indicator on the key surface is on.

10. A message regarding the state of the electronic key or power switch mode, etc. is not shown.

11. After unlock button on electronic key is hit, the doors are unlocked.

12. After lock button on electronic key is hit, the doors are locked.

13. "Smart Key System Malfunction. See Owner's Manual" is not displayed on the multi-information display.

14. The electronic key is not near a facility that generates strong radio waves or electrical noise, e.g., TV tower.

15. The electronic key is not in contact with, or is covered by a metallic object.

16. No wireless key that emits radio waves is being used nearby.

17. The electronic key is not carried together with a device that emits radio waves.

18. Attached to the rear window is window tint with no metallic content and no metallic objects.

19. The electronic key is not near a battery charger or other electronic device.

20. The door handle has not become wet.

21. When inside the vehicle cabin, the electronic key is not too near to a window.

22. The car driver is not wearing gloves.

23. The electronic key is not very close to the driver's door handle, allowing the locking of the door by touching it.

24. The smart key system has not been deactivated in a customized setting.


Exceptions: The logical negation of any assumption makes a good candidate
exception. The actual exceptions are the ones that the system might have to
or be able to deal with.

1. Electronic key battery is depleted. -> Use mechanical key and weak electronic key

2. Electronic key battery is completely dead. -> use mechanical key and backup.

3. Entry function does not work properly. -> use mechanical key

4. You lose your electronic keys.

5. You lose your mechanical keys.

6. Electronic key is within 1 meter of an electrical appliance that produces a magnetic field.

7. The smart key system or the wireless remote control does not operate.

8. The smart key detection area becomes smaller.

9. The LED indicator on the key surface does not turn on.

10. A message regarding the state of the electronic key or power switch mode, etc. is shown.

11. After unlock button on electronic key is hit, the doors are still locked.

12. After lock button on electronic key is hit, the doors are still unlocked.

13. "Smart Key System Malfunction. See Owner's Manual" is displayed on the multi-information display.

14. The door handle becomes wet.

15. When inside the vehicle cabin, the electronic key is too near to a window.

16. The electronic key is very close to the driver's door handle, preventing the locking of the door by touching it.

17. The smart key system has been deactivated in a customized setting.

FYI: Below are exceptions that probably the IEKS will not deal with,
generally, because there is nothing that the IEKS can do about them.

1. The electronic key near a facility that generates strong radio waves or electrical noise, e.g., TV tower.

2. The electronic key is in contact with, or is covered by a metallic object.

3. Another wireless key, that emits radio waves, is being used nearby.

4. The electronic key is carried together with a device that emits radio waves.

5. Attached to the rear window is window tint with a metallic content or a metallic objects.

6. The electronic key is near a battery charger or other electronic device.

7. The car driver is wearing gloves.

Variations (Scenarios that may have variations, some do not)

1. Unlocking and locking the doors from the outside, Page 171, probably not

2. Locking the front doors from the outside without a key, Page 173, probably not

3. Switching the door unlock function, Page 175, each table entry is a variation

4. If the back door opener is inoperative, Page 178, probably not

5. Starting the hybrid system, Page 231, Step 1 can probably be skipped or done in a different order

6. Stopping the hybrid system, Page 232, Each of Steps 2, 3, and 5 can probably be skipped or done in a different order

7. Replacing the battery, Page 646, probably not

8. Starting the hybrid system (with dead battery), Page 727, probably not