Automotive Functional Safety
Automotive functional safety focuses on prevention or reduction of severity of a potentially dangerous condition by implementation of automatic protection. The automatic protection system is designed to respond appropriately to hardware and software errors, foreseeable misuse, deal with environmental conditions, technology specific hazards and security attacks.
ISO 26262:2018
ISO 26262 is an international standard for the functional safety of road vehicles. It provides guidelines and requirements for the development of safety-related systems and components in road vehicles. The standard covers the entire safety lifecycle of a vehicle, from the concept and design stages through to production, operation, maintenance, and decommissioning.
​
ISO 26262 ensures that automotive electronic systems are designed and produced to be functionally safe, minimizing the risks of failures or malfunctions that could lead to accidents or injuries.
​
ISO 26262 specifically regulates:
-
Safety Lifecycle Management: ISO 26262 covers the entire lifecycle of automotive safety-related systems, including design, development, production, operation, service, and decommissioning.
-
Risk Management: It provides guidelines for risk assessment and the management of potential hazards associated with malfunctions of electrical and electronic systems.
-
Development Process: The standard outlines requirements for the development process, including system-level, hardware, and software design and development.
-
Validation and Verification: ISO 26262 emphasizes the importance of validation and verification of safety-related systems. This includes testing and analysis methods to ensure that systems meet the necessary safety requirements.
-
Functional Safety Assessment: It defined when a functional safety assessment needs to be carried out.
-
Documentation and Traceability: The standard necessitates comprehensive documentation and traceability throughout the development process.
-
Automotive Safety Integrity Levels (ASILs): ISO 26262 introduces Automotive Safety Integrity Levels, which are used to classify the inherent risk in a system and determine the necessary safety requirements to mitigate these risks.
​
2018 a new version of the ISO 26262 standard has been published.
This version added some topics to the standard which have not been sufficiently considered in the first version from 2011.​
​
Guideline on Application of ISO 26262 to semiconductors
Chapter 11 of the 2nd Edition includes a significant section on managing IP, covering perspectives from IP developers and integrators, with a focus on SEooC integration. The chapter emphasizes the importance of effective communication and collaboration between IP developers and integrators and provides insights into common challenges and best practices.
​
Adaptation of ISO 26262 to motorcycles, busses and trucks
The 2018 ISO 26262 version increases the scope of the standard beyond passenger car applications to include motorcycles, trucks, busses, trailer and semi-trailers. For motorcycles a separate chapter (12) has been introduced.
​
Link to cybersecurity
With cybersecurity for being mandatory for new vehicles sold in Europe starting from M2024, the significance of consideration of cybersecurity for automotive application rises. The new version of ISO 26262 provides recommendations on how to handle cybersecurity in functional safety context.
​
Apart from those major changes, updates on the guidelines for confirmation measures, safety anomalies, dependent failure analysis, fault tolerance have been made. Guidance for model-based development has been introduced.
​
SOTIF - ISO 21448:2022
ISO 26262 defines functional safety as the absence of unreasonable risk due to hazards caused by malfunctioning behavior on an E/E system.
​
However for systems which rely on sensing or which rely on vehicle environment to build situational awareness, also the intended functionality can cause hazardous behavior, even if the systems are free of faults addressed in ISO 26262. Those considerations are especially relevant for systems using machine learning.
​
The problems with the intended functionality can result from mistakes or gaps in specification or from limitations in the technical capabilities of the system or system components.
​
ISO 21448 summarizes such issues under name name "functional insufficiency" and defines safety of the intended functionality as absence of unreasonable risk resulting from hazardous behaviors related to functional insufficiencies. Additionally it provided a standardized process and tools to systematically detect and eliminate functional insuffciencies and achieve SOTIF.
-
Implementation of the system, software and hardware development processes along the V-models of ISO 26262.
-
Packages to kick-start your functional safety activities.
-
Best practices for SoC (system-on-chip) development in FuSa context.
-
We conduct FTAs, FMEAs and FMEDAs.
ISO 26262
Consulting
-
Employee training to support SOTIF introduction.
-
Achieving and maintaining compliance with SOTIF regulations.
-
Assistance is definition of relevant SOTIF scenarios and trigger conditions.
-
Validation and verification support.
ISO 21448 / SOTIF Consulting
-
One safety plan and one safety case to cover ISo 26262 and ISO 21448 requirements.
-
Integration of ISO 21448 processes and work products into an existing process landscape.