Abstract:Safety has become of paramount importance in the development lifecycle of the modern automobile systems. However, the current automotive safety standard ISO 26262 does not specify clearly the methods for safety analysis. Different methods are recommended for this purpose. FTA (Fault Tree Analysis) and FMEA (Failure Mode and Effects Analysis) are used in the most recent ISO 26262 applications to identify component failures, errors and faults that lead to specific hazards (in the presence of faults). However, these methods are based on reliability theory, and they are not adequate to address new hazards caused by dysfunctional component interactions, software failure or human error. A holistic approach was developed called STPA (Systems-Theoretic Process Analysis) which addresses more types of hazards and treats safety as a dynamic control problem rather than an individual component failure. STPA also addresses types of hazardous causes in the absence of failure. Accordingly, there is a need for investigating hazard analysis techniques like STPA. In this paper, we present a concept on how to use STPA to extend the safety scope of ISO 26262 and support the Hazard Analysis and Risk Assessments (HARA) process. We applied the proposed concept to a current project of a fully automated vehicle at Continental. As a result, we identified 24 system- level accidents, 176 hazards, 27 unsafe control actions, and 129 unsafe scenarios. We conclude that STPA is an effective and efficient approach to derive detailed safety constraints. STPA can support the functional safety engineers to evaluate the architectural design of fully automated vehicles and build the functional safety concept.

Functional Safety Assessment for the Carborne ATP of Train Control System

General provisions of the substantiation of functional safety of intelligent systems in railway transportation

Certification of EPA based Functional Safety Communication

Model-based Software Development for Automatic Train Protection System

Risk analysis for the modification in automatic train control systems

Residual risk in Automatic Train Protection systems: evaluation and management

Intelligent quantitative safety monitoring approach for ATP system by neural computing and probabilistic model checking

Design and Evaluation of Universal On-board Train Interface Unit

Safety Analysis of Automatic Crane Trolley Running System Based on STAMP/STPA

A Security Risk Assessment Method Based on Improved FTA-IAHP for Train Position System

Recent Advances and Future Trends for Automotive Functional Safety Design Methodologies

Design of Functional Safety Pressure Transmitter and Safety Assessment

Security Risk Assessment and Weaknesses Identification of the Substation Automation System

Implementation of ATP Algorithm for High Speed Trains

Functional Safety Design of Lidar System for Autonomous Vehicles

Longitudinal Functional Safety Analysis and Algorithm Design of Traffic Jam Pilot

Using STPA in Compliance with ISO 26262 for Developing a Safe Architecture for Fully Automated Vehicles

Architectural Design and Analysis of Electro-Mechanical-Brake System in View of Functional Safety Concept

The Analysis and Design of an ATP Automatic Detective System Based on Distributed Simulation

System Safety Design of an AMT Control Unit

Safety Analysis Method for COTS Software Components in Train Control System