Towards an Operational Design Domain That Supports the Safety Argumentation of an Automated Driving System
Towards an Operational Design Domain That Supports the Safety Argumentation of an Automated Driving System
复制标题
走向支持自动驾驶系统安全论证的操作设计领域
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Stig Ursing
中科院分区：
文献类型：
--
作者：
Magnus Gyllenhammar;Rolf Johansson;Fredrik Warg;Dejiu Chen;Hans;Martin Sanfridson;J. Söderberg;Anders Thorsén;Stig Ursing
自动驾驶汽车面临的最大挑战之一是如何证明它们的安全性是完整的。自动驾驶系统（ADS）的操作设计域（ODD）可以用来限制ADS的有效性，从而限制安全案例和验证的范围。为了完成安全性案例，需要确保ADS不会退出其ODD。我们提出了四个通用战略，以确保这一点。用例（UC）提供了一种方便的方式，为操作条件（OC）的集合提供这样的策略，并进一步确保ODD允许在真实的世界中操作。一个框架，以分类的UC的业主立案法团，它建议，ODD是写在这个结构中，以方便映射到潜在的UC。ODD定义了系统的功能边界，并使用这种结构对其进行建模，使其模块化并可在不同的潜在UC中推广。此外，使用ODD将ADS连接到UC能够持续交付ADS功能。两个例子的尺寸的ODD给出了一个策略，以避免ODD出口提出了在各自的情况下。
One of the biggest challenges for self-driving road vehicles is how to argue that their safety cases are complete. The operational design domain (ODD) of the automated driving system (ADS) can be used to restrict where the ADS is valid and thus confine the scope of the safety case as well as the verification. To complete the safety case there is a need to ensure that the ADS will not exit its ODD. We present four generic strategies to ensure this. Use cases (UCs) provide a convenient way providing such a strategy for a collection of operating conditions (OCs) and further ensures that the ODD allows for operation within the real world. A framework to categorise the OCs of a UC is presented and it is suggested that the ODD is written with this structure in mind to facilitate mapping towards potential UCs. The ODD defines the functional boundary of the system and modelling it with this structure makes it modular and generalisable across different potential UCs. Further, using the ODD to connect the ADS to the UC enables the continuous delivery of the ADS feature. Two examples of dimensions of the ODD are given and a strategy to avoid an ODD exit is proposed in the respective case.