Improved Pattern for ISO 26262 ASIL Decomposition with Dependent Requirements

Lidström, Christian; Bondesson, Carl; Nyberg, Mattias; Westman, Jonas

doi:10.1109/qrs-c.2019.00019

Cited by 2 publications

(1 citation statement)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The ISO26262 standard presents an ASIL decomposition technique to reduce the safety requirement of parts of the system into redundant components. The authors of [6] improve the technique by adding additional checking elements to prove that the original Functional Safety Requirements (FSRs) are met. These additional checks can be found also in [3] and [4], where we define splitter and merger functionality to manage the redundant parts of the application.…”

Section: Related Workmentioning

confidence: 99%

Automotive Architecture Topologies: Analysis for Safety-Critical Autonomous Vehicle Applications

2021

View full text Add to dashboard Cite

Safety-critical systems such as Advanced Driving Assistance Systems and Autonomous Vehicles require redundancy to satisfy their safety requirements and to be classified as fail-operational. Introducing redundancy in a system with high data rates and processing requirements also has a great impact on architectural design decisions. The current self-driving vehicle prototypes do not use a standardized system architecture but base their design on existing vehicles and the available components. In this work, we provide a novel analysis framework that allows us to qualitatively and quantitatively evaluate an in-vehicle architecture topology and compare it with others. With this framework, we evaluate different variants of two common topologies: domain and zone-based architectures. Each topology is evaluated in terms of total cost, failure probability, total communication cable length, communication load distribution, and functional load distribution. We introduce redundancy in selected parts of the systems using our automated process provided in the framework, in a safety-oriented design process that enables the ISO26262 Automotive Safety Integrity Level decomposition technique. After every design step, the architecture is re-evaluated. The advantages and disadvantages of the different architecture variants are evaluated to guide the designer towards the choice of correct architecture, with a focus on the introduction of redundancy.

show abstract

Section: Related Workmentioning

confidence: 99%