AnsysSCADE自动驾驶引发的安全要求对汽车软件开发的影响_AubanelMonnier

©2024ANSYS, Inc.Autonomy-induced safety requirements influences on Automotive Software developmentAubanel Monnier2024-09-12©2024 ANSYS, Inc. / Proprietary. Do Not Share.Autonomy-induced safety requirements ?3©2024 ANSYS, Inc. Fail-operationaldemands driven by automotive autonomy (SAE 3+)“A fail-safe system relies on the human as part of the safety concept to maintain a degraded level of control to be able to stop the vehicle in the event of a failure.”“A fail-operational system is designed to maintain normal operation, even in the event of a system fault.”Previous GenCurrent GenNext GenFAIL SAFESAFETY AND AVAILABILITYFAIL OPERATIONALDetect faultIndicate fault to safe state systemDetect faultIndicate fault to safe state system and recoverDetect faultIndicate fault to safe state systemStop operationContinue operationContinue degradedStop operationContinue full operation0 –No Adas1 –Feetoff2 –Hands off3 –Eyesoff4 –Mindoff5 –No driverHuman driver is drivingUpon system requestSystem is driv