符合ISO 26262和ISO/SAE 21434:智能连接车辆的安全和安全联合分析方法
Yufeng Li1,2, Wenqi Liu1, Qi Liu1
1School of Computer Engineering and Science, Shanghai University, Shanghai 200444, China.
Sensors (Basel, Switzerland)
|March 28, 2024
概括
这项研究通过将系统理论过程分析 (STPA) 与汽车标准相结合,提高智能互联汽车 (ICV) 的安全性和安全性. 这种新的方法改进了组件相互作用分析,从而为自动驾驶系统制定了更强大的安全和保安要求.
科学领域:
- 网络物理系统 (CPS)
- 汽车安全和安全工程 汽车安全和安全工程
背景情况:
- 智能互联汽车 (ICV) 是复杂的网络物理系统 (CPS),容易受到故障和攻击.
- 传统的安全分析缺乏对ICV组件相互作用的全面评估.
研究的目的:
- 开发一种综合方法来分析ICV的安全和保障.
- 解决分析组件相互作用和因果关系情景的现有方法的局限性.
- 确保安全和安全要求的一致性并减少冗余性.
主要方法:
- 系统理论过程分析 (STPA) 与ISO 26262和ISO/SAE 21434概念阶段的整合.
- 增强STPA的物理组件图与接口元素 (STPA-SafeSec).
- 关于损失场景树的建议,以详细说明不安全/不安全的控制行动.
- 开发一个统一的风险评估过程.
主要成果:
- 改善了ICV组件之间的相互作用分析,以提高安全性和安全性.
- 增强的STPA-SafeSec带有界面元素,用于更清晰的因果情景描述.
- 一种用于危险/威胁分析和风险评估的结构化方法.
- 通过对自主紧急制动系统的案例研究来验证拟议的方法.
结论:
- 综合STPA-SafeSec方法为ICV安全和安全分析提供了一个全面的框架.
- 该方法有效地解决了组件相互作用,并简化了要求确定.
- 统一的风险评估确保了评估ICV安全和保障的一致性和效率.
相关概念视频
Design Example: Automobile Ignition System
230
The automobile's ignition system plays a vital role by ensuring the timely ignition of the fuel-air mixture in each cylinder. This ignition is facilitated by a spark plug, which is composed of two electrodes separated by an air gap. A spark forms across this air gap when a substantial voltage is generated between the electrodes, leading to the ignition of the fuel.
One can generate a large voltage using a car battery of 12 volts with the help of inductors. Inductors are known for opposing...
One can generate a large voltage using a car battery of 12 volts with the help of inductors. Inductors are known for opposing...
230
Design of Transmission Shafts - Stress Analysis
353
Designing a transmission shaft requires a thorough understanding of the stresses induced by bending moments and torques, especially in systems where power is transferred through gears. These forces create force-couple systems at the centers of the shaft's cross-sections, leading to both transverse and torsional loading. Although shearing stresses from transverse loads are typically smaller than those from torques and are often overlooked, the significant normal stresses from these loads...
353
Development of Analytical Methods
419
An analytical methodology can be divided into four sequential steps: technique, method, procedure, and protocol. A technique is a scientific principle that rationalizes a specific phenomenon through chemical measurements. Adapting a technique for analyzing a sample of interest is termed a method. The procedure outlines the directions for performing the analysis via an analytical method. The protocol is the detailed guidelines on the procedure, which should be strictly followed to obtain the...
419
Introduction to Test of Independence
2.2K
In statistics, the term independence means that one can directly obtain the probability of any event involving both variables by multiplying their individual probabilities. Tests of independence are chi-square tests involving the use of a contingency table of observed (data) values.
The test statistic for a test of independence is similar to that of a goodness-of-fit test:
The test statistic for a test of independence is similar to that of a goodness-of-fit test:
2.2K
Statistical Analysis System (SAS)
170
SAS, short for Statistical Analysis System, is a powerful data analysis, management, and visualization tool. Developed by the SAS Institute in the early 1970s, SAS has evolved into a comprehensive software suite used across various industries for statistical analysis, business intelligence, and predictive modeling.
Applications: SAS finds applications in numerous fields, including healthcare for clinical trial analysis, finance for risk assessment, marketing for customer data analysis, and...
Applications: SAS finds applications in numerous fields, including healthcare for clinical trial analysis, finance for risk assessment, marketing for customer data analysis, and...
170
Bus Impedance Matrix
120
Calculating subtransient fault currents for three-phase faults in an N-bus power system involves using the positive-sequence network. When a three-phase short circuit occurs at a specific bus, the analysis uses the superposition method to evaluate two separate circuits.
In the first circuit, all machine voltage sources are short-circuited, leaving only the prefault voltage source at the fault location. The positive-sequence bus impedance matrix can be determined by solving the nodal equations,...
In the first circuit, all machine voltage sources are short-circuited, leaving only the prefault voltage source at the fault location. The positive-sequence bus impedance matrix can be determined by solving the nodal equations,...
120


