The ISO 26262 standard, the dedicated functional safety standard for the automotive industry, defines a life-cycle and a set of recommended measures and techniques in order to avoid or mitigate both systematic and random failures which may occur during a vehicle's lifetime. The well-established safety analyses, such as FMEA or FTA are mentioned in the ISO 26262 at different phases of the lifecycle such as concept or development (system, hardware, software) phases. Due to the increasing system complexity (increasing number of distributed functions over different components and different ASIL ratings of different functions implemented on the same component) and due to the explicit requirement of ISO 26262 to carry-out safety analysis at different steps of the project, traditional manual based safety analysis becomes expensive and error prone. A model-based approach supporting automatic safety and reliability analysis of complex systems, such as FMEA and FTA, by augmenting the structure of a design model with information in local failure propagation was presented and use during the development of a battery management system. Such a model-based approach perfectly allows the safety engineer to carryout the necessary analysis at the best suited level of details. This allows to increase the level of confidence of the computation done at the concept stage (low level of detail) or at the development stage (high level of detail). The safety engineer can perform the necessary analysis repeatedly on refined models with minimal effort. This is compliant with the iterative design activities requiring to invoke the analysis after each change in the system design. The use of the model-based approach has also highlighted the possibility to draw the attention of technical experts directly on the most critical part of the design and to offer the possibility to efficiently use the expert's knowledge and intuition to find an optimal solution to reach ISO's targets. This approach has proved to be well suited for concept and system analysis, for example for supporting the ASIL allocation to the different components. For detailed HW analysis, it can sometimes be difficult to represent the needed dependencies between the parts and sub-parts for the analysis (dependency between register bank and CPU failure for example). The higher effort needed to feed the model with the necessary failure modes of the different component can be compensated by the creation of component libraries which can be reused in the different systems where these components are used. Despite this additional initial effort, the model-based approach discussed here has proved efficient to avoid duplicate work caused by possible overlap of traditional FMEA and FTA analysis. It has also proved efficient to address the analysis of dependent failures which is an important aspect of functional safety.


    Access

    Access via TIB

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Model-based safety analysis and ISO26262 - Application to a battery management system


    Contributors:


    Publication date :

    2013


    Size :

    18 Seiten, 11 Bilder, 1 Tabelle, 11 Quellen



    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English




    Managing Functional Safety (ISO26262) in Projects

    George, Agish / Nelson, Jody | SAE Technical Papers | 2017


    Systems safety engineering nach ISO26262

    Sachs,C. / Opel,Ruesselsheim,DE | Automotive engineering | 2013


    10 Steps to ISO26262-compliant Model-based Software Components

    Salecker, Elke / Stürmer, Ingo | SAE Technical Papers | 2015


    Safety Analysis of the Local Interconnect Network Protocol in the Context of ISO26262

    Delorme, Gilles / Fengying, Qiao / Sacco, Vincenzo et al. | SAE Technical Papers | 2016