Safety assurance at GM and using model management to support it

通用汽车的安全保证并使用模型管理来支持它

• 批准号: 515486-2017
• 负责人: Lawford, Mark
• 金额: $ 14.49万
• 依托单位: McMaster University
• 依托单位国家: 加拿大
• 项目类别: Collaborative Research and Development Grants
• 财政年份: 2018
• 资助国家: 加拿大
• 起止时间: 2018-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=656841
• 关键词: Safety; assurance; GM; using; model

When a vehicle is designed, the car maker - the Original Equipment Manufacturer (OEM) - makes every effort**to ensure that the vehicle will be safe and reliable. As vehicles have increased in complexity with the addition**of software-enabled hybrid powertrains and Advanced Driver Assistance Systems, the system design and safety**processes have had a corresponding increase in required effort and difficulty. Recently, seemingly minor**incremental changes in the vehicle's software and/or physical design have resulted in safety recalls because of**unforeseen subsystem interactions that have reduced vehicle safety and/or reliability to unacceptable levels. To**help address these issues, OEMs and their suppliers collaborated to produce the standard ISO 26262 Road**Vehicles - Functional Safety, which prescribes processes and their outputs that should be produced as part of**the system, software and safety processes for vehicle features that require different Automotive Safety Integrity**Levels. As OEMs and suppliers strive to be consistent with ISO 26262, an increasingly important question**arises: when can design and safety assurance artefacts be safely reused and when do the processes and the**resulting work products have to be redone? Automotive companies must address this key question if they want**to remain competitive and be able to deliver ever safer vehicles at a purchase cost that the public is willing to**pay. To help the Canadian automotive industry address this issue, this project will model the design and safety**artefacts and their relationships with explicit safety assurance arguments known as a (safety) assurance case.**We will provide model management processes and tools to analyze the models and determine the impact of a**design change on the assurance case. This will help engineers determine which parts of the assurance case can**be safely reused and where it requires further engineering effort to demonstrate that the new system is**acceptably safe. The work will be extended to manage models of safety assurance for entire product lines to**help OEMs deal with the reality of manufacturing for global product development.

在设计车辆时，汽车制造商 - 原始设备制造商 (OEM) - 尽一切努力**确保车辆安全可靠。随着软件驱动的混合动力系统和高级驾驶辅助系统的加入，车辆的复杂性不断增加，系统设计和安全流程所需的工作量和难度也相应增加。最近，车辆软件和/或物理设计中看似微小的**增量变化已导致安全召回，因为**不可预见的子系统相互作用已将车辆安全性和/或可靠性降低到不可接受的水平。为了**帮助解决这些问题，原始设备制造商及其供应商合作制定了标准 ISO 26262 道路**车辆 - 功能安全，其中规定了应作为**系统、软件和安全流程的一部分生成的流程及其输出，用于需要不同汽车安全完整性**级别的车辆功能。随着 OEM 和供应商努力与 ISO 26262 保持一致，一个日益重要的问题**出现了：何时可以安全地重复使用设计和安全保证制品以及何时必须重做流程和**产生的工作产品？汽车公司如果想要保持竞争力并能够以公众愿意支付的购买成本提供更安全的车辆，就必须解决这个关键问题。为了帮助加拿大汽车行业解决这个问题，该项目将通过称为（安全）保证案例的明确安全保证参数对设计和安全**制品及其关系进行建模。**我们将提供模型管理流程和工具来分析模型并确定**设计变更对保证案例的影响。这将帮助工程师确定保证案例的哪些部分可以**安全地重复使用，以及哪些部分需要进一步的工程工作来证明新系统**具有可接受的安全性。这项工作将扩展到管理整个产品线的安全保证模型，以帮助原始设备制造商应对全球产品开发的制造现实。