论文标题
中庭 - 在ISO 26262合规性的不确定性下进行架构
ATRIUM -- Architecting Under Uncertainty for ISO 26262 compliance
论文作者
论文摘要
ISO 26262目前是确保汽车行业电气和电子系统功能安全性的主要标准。标准中的功能安全概念（FSC）子阶段需要进行功能安全要求（FSR）的初步架构假设（PAA）。本文证明了对PAA的一致设计的需求并定义了过程中庭。随后将心房应用于工业案例研究中，用于在欧洲最大的重型汽车制造商之一Scania CV AB中实现高度自动驾驶的功能。提出了这项研究的发现，该发现促进了心脏在斯堪的尼亚的制度化。拟议过程的好处包括（i）一种快速，灵活的方法来完善PAA，以及（ii）将遗留系统中的信息纳入安全设计中的框架，以及（iii）严格跟踪并记录在不确定信息下建筑决策背后的假设和理由。本文的贡献是对问题的（i）分析（ii）过程中庭和（iii）的发现以及Scania案例研究的讨论。 关键字：ISO 26262，功能安全，自动化，HCV，HGV，建筑，高度自动化的驾驶，中庭，决策，建筑，不确定性管理
The ISO 26262 is currently the dominant standard for assuring functional safety of electrical and electronic systems in the automotive industry. The Functional Safety Concept (FSC) subphase in the standard requires the Preliminary Architectural Assumptions (PAA) for allocation of functional safety requirements (FSRs). This paper justifies the need for, and defines a process ATRIUM, for consistent design of the PAA. ATRIUM is subsequently applied in an industrial case study for a function enabling highly automated driving at one of the largest heavy vehicle manufacturers in Europe, Scania CV AB. The findings from this study, which contributed to ATRIUM's institutionalization at Scania, are presented. The benefits of the proposed process include (i) a fast and flexible way to refine the PAA, and a framework to (ii) incorporate information from legacy systems into safety design and (iii) rigorously track and document the assumptions and rationale behind architectural decisions under uncertain information. The contributions of this paper are the (i) analysis of the problem (ii) the process ATRIUM and (iii) findings and the discussion from the case study at Scania. Keywords: ISO 26262, functional safety, automation, HCV, HGV, architectures, highly automated driving, ATRIUM, decision making, architecting, uncertainty management
