Safe Automotive soFtware architEcture (SAFE) Co-summit 2015, 10-11 - PowerPoint PPT Presentation

Safe Automotive soFtware architEcture (SAFE) Co-summit 2015, 10-11 March 2015, Berlin - Germany Dr. Stefan Voget

Agenda SAFE Motivation makes Functional safety safe SAFE in SAFE and the project standardization landscape 2

SAFE Motivation Recalls for safety-related components October 2013  Toyota recalls 900.000 vehicles  Constructional Water can leak from the air conditioning flaw and drip on control modules for airbags, which can cause airbags to set off or lose their function October 2013 November 2013 July 2014 (Source: Vice Media Inc. 2014) 3

SAFE Motivation Recalls for safety-related components November 2013  VW recalls 800.000 Tiguans  Possible Fuse can melt, dangerous causing safety fuse both lighting circuits to malfunction, leaving the car unlighted October 2013 November 2013 July 2014 (Source: Vice Media Inc. 2014) 4

SAFE Motivation Recalls for safety-related components July 2014  GM recalls 8.4 Mill. vehicles  Faulty ignition Danger of suddenly turning off, switch resulting in loosing most safety features while driving October 2013 November 2013 July 2014 (Source: Vice Media Inc. 2014) 5

SAFE Motivation Scope of SAFE - ISO26262 Development Lifecycle Management and supporting processes Starting situation ISO26262 2011  Automotive Functional Safety norm published November 2011  1st mandatory interpretation of general standard IEC61508 for automotive industry 6

SAFE Motivation Scope of SAFE - ISO26262 Development Lifecycle Management and supporting processes Functional analysis Safety Goals System Safety Analyses Hazard & Risk Analysis Functional Safety System architecture Requirements Component Functional safety concept Safety Analyses Technical Safety Component architecture Requirements Technical safety concept HW/SW Safety Analyses HW/SW Safety Hardware / Software Requirements HW/SW safety reqs. 7

SAFE Motivation Scope of SAFE - ISO26262 Development Lifecycle Management and supporting processes  900.000 vehicles  800.000 vehicles  8.4 Mill. vehicles Functional analysis Safety Goals  Water can drip  Fuse can melt,  Danger of System Safety Analyses Hazard & Risk Analysis on control causing both suddenly turning modules for lighting circuits off, resulting in airbags, which to malfunction, loosing most Functional Safety System architecture Requirements can cause leaving the car safety features Component Functional safety concept airbags to set off unlighted while driving Safety Analyses Technical Safety Component architecture Requirements Technical safety concept HW/SW Safety Analyses HW/SW Safety Hardware / Software Requirements Concept: HW/SW safety reqs. Concept: Concept: Hazard and risk Failure propagation Influence from analysis other technologies 8

SAFE Motivation Scope of SAFE - ISO26262 Development Lifecycle Challenge  ISO26262 defines more than 1000 requirements  Challenge for automotive industry: - Reach acceptable risk level by ensuring process compliance with ISO26262 Approach  Provide model based development process that integrates functional-safety Solution of  Architecture description language  Tools  Methods and application Rules 9

SAFE Motivation Scope of SAFE - ISO26262 Development Lifecycle Challenge  ISO26262 defines more than 1000 requirements  Challenge for automotive industry: - Reach acceptable risk level by ensuring process compliance with ISO26262 Approach  Provide model based development process that integrates functional-safety OEM Developer Solution of ADL  Architecture description language  Tools Supplier Safety  Methods and application Rules Expert 10

Agenda SAFE motivation makes Functional safety safe SAFE in SAFE and the project standardization landscape 11

SAFE in the project landscape Who did it? France Germany Austria 2011 2012 2013 2014 Start: 01.07.2011 End: 31.12.2014 12

SAFE in the project landscape How did we work with others? Input from Align with Output to Products & Standards 13

SAFE in the project landscape How did we work with others? Tooling EDONA CESAR Safety SAFE Timing TIMMO TIMMO2 Input from Align with Output to ADL EAST-EEA ATESST ATESST2 MAENAD Industry AUTOSAR Consortia JASPAR EAST-ADL Association 2001 2005 2010 2015 EAST-ADL EAST-ADL2 EAST-ADL 2.1 EAST-ADL 2.x 14

SAFE in the project landscape How did we work with others? Input from Align with Output to * Source: SafeTRANS News (news.safetrans-de.org) 15

SAFE in the project landscape How did we work with others? Products Input from Align with Output to & S T A N D A R D S 16

Agenda SAFE motivation makes Functional safety safe SAFE in SAFE and the project standardization landscape 17

SAFE and standardization Influence of SAFE Architecture Description Language Industry standard for Industry standard for SW configuration functional architecture Tools Requirements ARTEMIS innovation Cluster on transportation ISO26262 Methodologies and application rules Standardization group for SW engineering 18

SAFE and standardization Summary Made first implementation of the standard ISO 26262 published in 2011  we started in 2011 All partners had the same goal to ensure safety Not only for Europe but for whole world Provided commercial tools and trainings to the market Set standards OEM Developer Exploitation from a 1 st Tier point of view Supplier Safety Expert 19

Thank you for your attention