Safety assurance at GM and using model management to support it

通用汽车的安全保证并使用模型管理来支持它

• 批准号: 515486-2017
• 负责人: Lawford, Mark
• 金额: $ 10.05万
• 依托单位: McMaster University
• 依托单位国家: 加拿大
• 项目类别: Collaborative Research and Development Grants
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=695361
• 关键词: Safety; assurance; GM; using; model

When a vehicle is designed, the car maker - the Original Equipment Manufacturer (OEM) - makes every effort to ensure that the vehicle will be safe and reliable. As vehicles have increased in complexity with the addition of software-enabled hybrid powertrains and Advanced Driver Assistance Systems, the system design and safety processes have had a corresponding increase in required effort and difficulty. Recently, seemingly minor incremental changes in the vehicle's software and/or physical design have resulted in safety recalls because of unforeseen subsystem interactions that have reduced vehicle safety and/or reliability to unacceptable levels. To help address these issues, OEMs and their suppliers collaborated to produce the standard ISO 26262 Road Vehicles - Functional Safety, which prescribes processes and their outputs that should be produced as part of the system, software and safety processes for vehicle features that require different Automotive Safety Integrity Levels. As OEMs and suppliers strive to be consistent with ISO 26262, an increasingly important question arises: when can design and safety assurance artefacts be safely reused and when do the processes and the resulting work products have to be redone? Automotive companies must address this key question if they want to remain competitive and be able to deliver ever safer vehicles at a purchase cost that the public is willing to pay. To help the Canadian automotive industry address this issue, this project will model the design and safety artefacts and their relationships with explicit safety assurance arguments known as a (safety) assurance case. We will provide model management processes and tools to analyze the models and determine the impact of a design change on the assurance case. This will help engineers determine which parts of the assurance case can be safely reused and where it requires further engineering effort to demonstrate that the new system is acceptably safe. The work will be extended to manage models of safety assurance for entire product lines to help OEMs deal with the reality of manufacturing for global product development.

在设计车辆时，汽车制造商-原始设备制造商（OEM）-会尽一切努力 以确保车辆安全可靠。随着车辆复杂性的增加， 软件驱动的混合动力系统和高级驾驶员辅助系统，系统设计和安全性 这些过程所需的努力和难度相应增加。最近，看似轻微的 车辆软件和/或物理设计的不断变化导致了安全召回，因为 不可预见的子系统相互作用已将车辆安全性和/或可靠性降低到不可接受的水平。到 为了解决这些问题，OEM及其供应商合作制定了ISO 26262 Road标准 车辆-功能安全，规定了应作为 系统、软件和安全流程，用于要求不同汽车安全完整性的车辆功能 程度.随着OEM和供应商努力与ISO 26262保持一致，一个越来越重要的问题 出现：什么时候可以安全地重复使用设计和安全保证人工制品，什么时候可以安全地重复使用过程和 工作产品是否需要重做？汽车公司必须解决这个关键问题，如果他们想 保持竞争力，并能够以公众愿意购买的价格提供更安全的车辆， 支付为了帮助加拿大汽车工业解决这个问题，该项目将模拟设计和安全 人工制品及其与被称为（安全）保证情况的明确的安全保证论证的关系。 我们将提供模型管理流程和工具，以分析模型并确定 保证案例的设计变更。这将有助于工程师确定保证案例的哪些部分可以 可以安全地重复使用，并且需要进一步的工程努力来证明新系统是 可以接受的安全。这项工作将扩展到管理整个产品线的安全保证模型， 帮助OEM应对全球产品开发的制造现实。