Design theory often stands apart from design practice. Tools offer one means to bridge this divide. Yet how to move from abstract concepts of design theory and principles to specific toolkits that can structure and enable action remains elusive. This pictorial presents a way forward, illustrating the movement from theory to toolkit and concrete action for multi-lifespan design. Our key contributions are three-fold: First, we offer an expansion to an existing design toolkit, the Multi-lifespan Envisioning Cards. We demonstrate the toolkit's use through case studies. Second, we provide insights on the process of constructing a theoretically-informed design toolkit. We pay special attention to the interplay between text, visuals, and embodied actions. Third, we provide a proof-of-concept for how to extend an existing toolkit to account for new theories and perspectives. We reflect on the timeless qualities of the Envisioning Cards and discuss heuristics for designing a robust yet flexible toolkit.

Materials are dynamic-they can be shaped and changed. Often however, our tools and technologies appear to fix materials in place. Disassembly is one practice that provides openings to explore and understand the dynamic nature of material. In this research, we investigate possibilities that emerge from disassembly. Specifically, we studied how novices disassembled a common digital artifact-desktop printers. We worked with 21 young people and family members across two evening workshops at a middle school. We report on the workshop interactions, categories of actions of disassembly, and four in-depth vignettes showcasing disassembly in action. In the discussion, we reflect on disassembly and permission, sustainability, the joy of disassembling, and design considerations in support of disassembly. Our contributions include: (1) extending existing theoretical framings about artifacts and materials; (2) an empirical study documenting the process by which novices disassemble; and (3) preliminary design and policy considerations that enable disassembly.

Whether you aspire to Weiser's [4] disappearing technology of ubiquitous computing or Negroponte's [3] atoms to bits or something in-between, there is something inescapably material about the digital. How much more so when the goal is hybridity: the bridging of atoms with bits. In this keynote, I examine the intersection of this hybridity with human values-in the present and in the longer term. I situate my remarks in the observation that our scientific and technological capacities have and will continue to far surpass our moral ones - that is our ability to use wisely and humanely the knowledge and tools that we develop. My reflections are grounded in the intellectual traditions of value sensitive design [1] and multi-lifespan design [2]. I take up such questions as: What human values and human impacts are implicated by hybridity and, in particular, hybrid materials? From this perspective of human values, are all hybrid materials the same? Is embedding computation in my glove the same as in my finger? Or are some materials deserving of special status? And, if so, in what ways? What cultural considerations come to the fore? What of non-humans? Turning to metaphor and mental models, what metaphors should be developed for hybrid materials? And in what ways will those highlight and hide embedded computation? What mental models should be associated with these materials? How will these models position people to think about their relationship with hybrid materials, including when to use them, how to adapt them, when to dispose of them, and when to eschew them? More generally, what constitutes responsible innovation around hybrid materials and how should we go about pursuing it? To gain purchase on these questions, I use the frame of value scenarios and anticipatory futures. My comments highlight the importance of taking the material impacts of the digital seriously. At stake is nothing less than what sort of society we want to live in and how we experience our humanity.

Generative metaphorical design while rich is possibility, is not easy to do. In response, we have developed Metaphor Cards, a toolkit for supporting metaphorical design thinking. In this pictorial, we introduce Metaphor Cards and provide a how-to-guide for design researchers to make and use their own sets. To demonstrate this process, we provide a case study documenting our development of a set of Metaphor Cards for designing information systems for international justice. We conclude with reflections on the benefits and limitations of the Metaphor Card toolkit and suggestions for how to adapt Metaphor Cards to other domains and technologies.

All too often, research partnerships are project-driven and short-lived. Multi-lifespan design and other longer-term approaches offer alternative models. In this paper, we contribute one alternative model for cross-boundary research partnerships spanning longer timeframes and offer one best practice: collaborative reflection. Specifically, we provide an in-depth case study of a multi-lifespan design partnership (over nine years and ongoing) between a Rwandan NGO focused on peacebuilding and a US university research group focused on information design theory and method. First, we document our process for conducting a collaborative reflection that seeks balance among the contributors while navigating differences in culture, discipline, experience, and skills. Next, we reflect on five themes: (1) common ground: sensibilities and commitments; (2) trust; (3) research landscape: crossing nations and institutions; (4) research as a healing mechanism; and (5) multi-lifespan design partnership. We conclude with a discussion of overarching considerations for design researchers who engage in cross-boundary research partnership.

In this paper, we propose data statements as a design solution and professional practice for natural language processing technologists, in both research and development. Through the adoption and widespread use of data statements, the field can begin to address critical scientific and ethical issues that result from the use of data from certain populations in the development of technology for other populations. We present a form that data statements can take and explore the implications of adopting them as part of regular practice. We argue that data statements will help alleviate issues related to exclusion and bias in language technology, lead to better precision in claims about how natural language processing research can generalize and thus better engineering results, protect companies from public embarrassment, and ultimately lead to language technology that meets its users in their own preferred linguistic style and furthermore does not misrepresent them to others.

At times, inaction may be a wise course of action. This insight lies at the heart of the design mechanism of pause. In this note, we explore the construct of pause, its rhythms, and nuances of enacting pause. Throughout, we draw on our experience engaging with pause in the multi-lifespan design of information systems for transitional justice. Five rhythms are identified: periodic hiatus, pending future event, responding to the socio-political climate, (temporary) closure, and laying fallow. In addition, we provide heuristics for managing pause and then restarting the design process. We then explore the scalability of pause from longer (e.g., multi-lifespan design) to shorter timeframes. We conclude with reflections on the potential benefits and open questions about pause as a design mechanism.

Human societies face some significant problems—such as those tied to limitations of the human psyche, to tears in the social fabric, and to slow-moving natural processes—that defy rapid solution. Correspondingly, information systems that help to address these problems also develop over long(er) periods of time. Yet contemporary research and industry information system design is held to increasingly ambitious project deadlines. Research that engages with long(er) term design processes from diverse perspectives and theoretical orientations is needed. Early efforts of this ilk in the human–computer interaction community can be found around domains such as conflict and post-conflict situations, crisis informatics, collapse informatics, cultural heritage and sustainability. The work reported here joins this literature—in the context of recovering from genocide and the development of systems of transitional justice—and draws from the theoretical framing of multi-lifespan design. Specifically, we report on the first 8 years of a multi-lifespan information system design project—the Voices from the Rwanda Tribunal—to support aspects of transitional justice in Rwanda. We offer a systematic presentation of the project's design principles and explicate the development of those guiding design principles through our engagement with a set of nine design challenges. We provide design reflections that pertain to information systems for transitional justice, conducting multi-lifespan information system design under shifting socio-political and technical conditions, and engaging with value sensitive design. We conclude with our contributions and open questions.

In recent years, the HCI community has recognized the need to address long(er) term information system design around on-going societal problems. Yet how to engage stakeholders effectively in multi-lifespan design thinking remains an open challenge. Toward that end, the work reported here extends an established envisioning method by introducing two new design methods, the multi-lifespan timeline and multi-lifespan co-design, with an emphasis on the element of (long) time. The new methods aim to stimulate participants' visions of future information systems by: (a) enhancing participants' understanding of longer timeframes (e.g., 100 years), and (b) guiding participants to effectively project themselves long into the future in their design thinking. We explored these multi-lifespan design methods in work with 51 Africans from Rwanda and the Great Lakes region living in the USA to understand the challenges and opportunities they envision for designing future information systems for transitional justice in Rwanda. Contributions are two-fold: (1) methodological innovation, and (2) a case study of multi-lifespan design thinking generated by diaspora members of post-conflict societies.

People who are blind or low-vision may have a harder time participating in exercise due to inaccessibility or lack of experience. We employed Value Sensitive Design (VSD) to explore the potential of technology to enhance exercise for people who are blind or low-vision. We conducted 20 semi-structured interviews about exercise and technology with 10 people who are blind or low-vision and 10 people who facilitate fitness for people who are blind or low-vision. We also conducted a survey with 76 people to learn about outsider perceptions of hypothetical exercise with people who are blind or low-vision. Based on our interviews and survey, we found opportunities for technology development in four areas: 1) mainstream exercise classes, 2) exercise with sighted guides, 3) rigorous outdoors activity, and 4) navigation of exercise spaces. Design considerations should include when and how to deliver auditory or haptic information based on exercise and context, and whether it is acceptable to develop less mainstream technologies if they enhance mainstream exercise. The findings of this work seek to inform the design of accessible exercise technologies.

Wireless implantable medical devices (IMDs) are cyber-physical systems that deliver life-saving treatments to cardiac patients with dangerous heart conditions. Current access control models for these systems are insufficient; more security is necessary. In response to this problem, the technical security community has investigated new directions for improving security on these resource-constrained devices. Defenses, however, must not only be technically secure; in order to be deployable, defenses must be designed to work within the needs and constraints of their relevant application spaces. Designing for an application space---particularly a specialized one---requires a deep understanding of the stakeholders, their values, and the contexts of technology usage. Grounding our work in value sensitive design (VSD), we collaborated as an interdisciplinary team to conduct three workshops with medical providers for the purpose of gathering their values and perspectives. The structure of our workshop builds on known workshop structures within the human-computer interaction (HCI) community, and the number of participants in our workshops (N=24) is compatible with current practices for inductive, exploratory studies. We present results on: what the participants find important with respect to providing care and performing their jobs; their reactions to potential security system concepts; and their views on what security system properties should be sought or avoided due to side effects within the context of their work practice. We synthesize these results, use the results to articulate design considerations for future technical security systems, and suggest directions for further research. Our research not only provides a contribution to security research for an important class of cyber-physical systems (IMDs); it also provides an example of leveraging techniques from other communities to better explore the landscape of security designs for technologies.

We introduce a design method for evolving a co-design space to support stakeholders untrained in design. Specifically, the purpose of the method is to expand and shape a co-design space so that stakeholders, acting as designers, focus not only on the form and function of a tool being envisioned but also on the social context of its use and values that lie with individuals, groups, and societies. The method introduces value sensitive stakeholder prompts and designer prompts into a co-design process, creating a particular kind of reflection-on-action cycle. The prompts provide a means for bringing empirical data on values and theoretical perspective into the co-design process. We present the method in terms of a general model, the Value Sensitive Action-Reflection Model; place the model within discourse on co-design spaces; and illustrate the model with a discussion of its application in a lo-fi prototyping activity around safety for homeless young people. We conclude with reflections on the model and method.

With this research we investigate how to account for multi-generational perspectives in the design of multi-lifespan information systems, particularly in support of long-term peace-building and international justice. We do our work in the context of the publicly available Voices from the Rwanda Tribunal testbed, a historically significant collection of video interviews with personnel from the International Criminal Tribunal for Rwanda. In the research reported here, we worked with 109 Rwandan adults and youth from perpetrator and survivor communities in three provincial cities in Rwanda (Byumba, Kibuye, and Gisenyi) to understand the potentials and challenges they envision for the interview collection. Participants envisioned five categories of long-term positive outcomes for individuals and society from a multi-lifespan information system for the interview collection; and eight categories of challenges to realize those potential outcomes. In terms of multi-generational perspectives, while adults and youth tended to share an overall vision for the long-term potential of such a system, adults emphasized actionable tasks while youth educational benefits. Based on the findings, we highlight issues for appropriation of multi-lifespan information systems and reflect on our methods for eliciting multi-generational perspectives on information system design in a post-conflict society.

We introduce the Envisioning Cards - a versatile toolkit for attending to human values during design processes - and discuss their early use. Drawing on almost twenty years of work in value sensitive design, the Envisioning Cards are built upon a set of four envisioning criteria: stakeholders, time, values, and pervasiveness. Each card contains on one side a title and an evocative image related to the card theme; on the flip side, the card shows the envisioning criterion, elaborates on the theme, and provides a focused design activity. Reports from the field demonstrate use in a range of research and design activities including ideation, co-design, heuristic critique, and more.

By their pervasiveness and by being worn on our bodies, mobile phones seem to have become intrinsic to safety. To examine this proposition, 43 participants, from four stakeholder groups (homeless young people, service providers, police officers, and community members), were asked to consider how homeless young people could use mobile phones to keep safe. Participants were asked to express their knowledge for place-based safety and to envision how mobile phones might be used to improve safety. Detailed analysis of the resulting data, which included value sketches, written value scenarios, and semi-structured discussion, led to specific design opportunities, related to values (e.g., supporting trust and desire to help others), function (e.g., documenting harms for future purposes), and form (e.g., leveraging social expectations for how mobile phones can be used to influence behavior). Together, these findings bound a design space for how mobile phones can be used to manage unsafe situations.

Implantable medical devices (IMDs) improve patients' quality of life and help sustain their lives. In this study, we explore patient views and values regarding their devices to inform the design of computer security for wireless IMDs. We interviewed 13 individuals with implanted cardiac devices. Key questions concerned the evaluation of 8 mockups of IMD security systems. Our results suggest that some systems that are technically viable are nonetheless undesirable to patients. Patients called out a number of values that affected their attitudes towards the systems, including perceived security, safety, freedom from unwanted cultural and historical associations, and self-image. In our analysis, we extend the Value Sensitive Design value dams and flows technique in order to suggest multiple, complementary systems; in our discussion, we highlight some of the usability, regulatory, and economic complexities that arise from offering multiple options. We conclude by offering design guidelines for future security systems for IMDs.

This CHI Note proposes a new research initiative for the HCI community: multi-lifespan information system design. The central idea begins with the identification of categories of problems that are unlikely to be solved within a single human lifespan. Three such categories are proposed: limitations of the human psyche, limitations of the structure of society, and slower moving natural time-scales. We then examine possible opportunities and roles for information systems to help construct longer-term solutions to such problems and, in turn, identify key challenges for such systems. Finally, we conclude by discussing significant real world problems that would benefit from a multi-lifespan design approach and point to open questions. This CHI Note's key contribution entails the articulation of a promising new research initiative for the HCI community.

An increasing number of high-tech devices, such as driver monitoring systems and Internet usage monitoring tools, are advertised as useful or even necessary for good parenting of teens. Simultaneously, there is a growing market for mobile personal safety devices. As these trends merge, there will be significant implications for parent-teen relationships, affecting domains such as privacy, trust, and maturation. Not only the teen and his or her parents are affected; other important stakeholders include the teen's friends who may be unwittingly monitored. This problem space, with less clear-cut assets, risks, and affected parties, thus lies well outside of more typical computer security applications.To help understand this problem domain and what, if anything, should be built, we turn to the theory and methods of Value Sensitive Design, a systematic approach to designing for human values in technology. We first develop value scenarios that highlight potential issues, benefits, harms, and challenges. We then conducted semi-structured interviews with 18 participants (9 teens and their parents). Results show significant differences with respect to information about: 1) internal state (e.g., mood) versus external environment (e.g., location) state; 2) situation (e.g., emergency vs. non-emergency); and 3) awareness (e.g., notification vs. non-notification). The value scenario and interview results positioned us to identify key technical challenges -- such as strongly protecting the privacy of a teen's contextual information during ordinary situations but immediately exposing that information to others as appropriate in an emergency -- and corresponding architectural levers for these technologies.In addition to laying a foundation for future work in this area, this research serves as a prototypical example of using Value Sensitive Design to explicate the underlying human values in complex security domains.

Students come to design education with different goals. Some seek to acquire expertise in design, others to learn specialized methods tailored to a research domain. Furthermore, students in the area of information system design confront a large literature of diverse perspectives on design, all of which are potentially useful. To disentangle this literature and to develop students' knowledge and know-how for design, a ten-week course, titled Theories and Practice of Design for Information Systems, was developed. Pedagogically, this introductory course is neither a studio course nor a methods course. Instead, it takes a "design perspectives" approach where students engage a number of substantial perspectives on design through conceptual and experiential study. This paper introduces this pedagogical approach and describes eight design perspectives including readings, key questions, and activities. It concludes with lessons learned for positioning students to engage the interplay between the theory and practice of information system design.

The design, development, and deployment of interactive systems can substantively impact individuals, society, and the natural environment, now and potentially well into the future. Yet, a scarcity of methods exists to support long-term, emergent, systemic thinking in interactive design practice. Toward addressing this gap, we propose four envisioning criteria --- stakeholders, time, values, and pervasiveness -- distilled from prior work in urban planning, design noir, and Value Sensitive Design. We characterize how the criteria can support systemic thinking, illustrate the integration of the envisioning criteria into established design practice (scenariobased design), and provide strategic activities to serve as generative envisioning tools. We conclude with suggestions for use and future work. Key contributions include: 1) four envisioning criteria to support systemic thinking, 2) value scenarios (extending scenario-based design), and 3) strategic activities for engaging the envisioning criteria in interactive system design practice.

We report on the value sensitive design, development, and appropriation of a groupware system to support software engineering knowledge sharing. Usage data (5,965 visitors) and semi-structured interviews (18 individuals) suggest the methods employed were successful in addressing value tensions, particularly with respect to privacy, awareness, and reputation. Key contributions include: (1) "proof-of-concept" that established Value Sensitive Design principles and methods can be used to good effect for the design of groupware in an industry setting, (2) a new design method for addressing value tensions, Value Dams and Flows, and (3) demonstration of the co-evolution of technology and organizational policy.

In this paper, we move toward offering psychological benchmarks by which to measure success in building increasingly human-like robots. By psychological benchmarks we mean categories of interaction that capture conceptually fundamental aspects of human life, specified abstractly enough so as to resist their identity as a mere psychological instrument, but capable of being translated into testable empirical propositions. Six possible benchmarks are considered: autonomy, imitation, intrinsic moral value, moral accountability, privacy, and reciprocity. Finally, we discuss how getting the right group of benchmarks in human-robot interaction will, in future years, help inform on the foundational question of what constitutes essential features of being human

Digitally capturing and displaying real-time images of people in public places raises concerns for individual privacy. Applying principles of Value Sensitive

In this study, we investigated people's relationships with AIBO, a robotic pet, through 6,438 spontaneous postings in online AIBO discussion forums. Results showed that AIBO psychologically engaged this group of participants, particularly by drawing forth conceptions of technological essences (75%), life-like essences (49%), mental states (60%), and social rapport (59%). However, participants seldom attributed moral standing to AIBO (e.g., that AIBO deserves respect, has rights, or can be held morally accountable for action). Our discussion focuses on how robotic pets (now and in the future) may (a) challenge traditional boundaries (e.g. between who or what can possess feelings), (b) extend our conceptions of self, companionship, and community, and (c) begin to replace interactions with live pets. We also discuss a concern that people in general, and children in particular, may fall prey to accepting robotic pets without the moral responsibilities (and moral developmental outcomes) that real, reciprocal companionship and cooperation involves. This research contributes to a growing literature on the human-robotic relationship.

We first provide criteria for assessing informed consent online. Then we examine how cookie technology and Web browser designs have responded to concerns about informed consent. Specifically, we document relevant design changes in Netscape Navigator and Internet Explorer over a 5-year period, starting in 1995. Our retrospective analyses leads us to conclude that while cookie technology has improved over time regarding informed consent, some startling problems remain. We specify six of these problems and offer design remedies. This work fits within the emerging field of Value-Sensitive Design.

From an analysis of actual cases, three categories of bias in computer systems have been developed: preexisting, technical, and emergent. Preexisting bias has its roots in social institutions, practices, and attitudes. Technical bias arises from technical constraints of considerations. Emergent bias arises in a context of use. Although others have pointed to bias inparticular computer systems and have noted the general problem, we know of no comparable work that examines this phenomenon comprehensively and which offers a framework for understanding and remedying it. We conclude by suggesting that freedom from bias should by counted amoung the select set of criteria—including reliability, accuracy, and efficiency—according to which the quality of systems in use in society should be judged.