{"title":"介绍了详细的语义接口描述,以支持自动驾驶车辆的模块化安全认证- s2i2","authors":"Björn Klamann, Hermann Winner","doi":"10.1080/09617353.2023.2264729","DOIUrl":null,"url":null,"abstract":"AbstractThe concept of a modular safety approval for automated vehicles dispenses with tests on vehicle or system level. Individually approved modules can be updated and reused without requiring new safety approvals. Similar to a system’s operational design domain description, an environmental description is required for a safety approval on module level. This paper presents how the environment of a module can be described at module interfaces. Uncertainty about other modules’ behaviour, dependencies between modules, and impacts of their outputs on the system behaviour are key reasons for missing specifications or tests of existing methods, leading to an erroneous approval of modules. To reduce uncertainties, we expand the state-of-the-art syntactical and semantic interface description and additionally describe dependencies to other modules’ behaviour or conditions and impacts of their outputs. The resulting detailed semantic interface description is categorised into syntax, semantics, influencing factors, and impacts. The novel description structure is a condensed way to consider the behaviour and its impacts on other modules in module development and testing. The description fundamentally supports the modular safety approval by identifying stimuli usually only seen during integration.Keywords: Safety approvalvalidationautomated drivingautonomous vehiclesmodularityinterfaceUNICARagil AcknowledgementThis research is accomplished within the project ‘UNICARagil’ (FKZ 16EMO0286).Disclosure statementNo potential conflict of interest was reported by the author(s).Data availability statementAll data analysed during this study are included in the Appendix of this published article.Additional informationFundingWe acknowledge the financial support for the projects by the Federal Ministry of Education and Research of Germany (BMBF) based on a decision of the Deutsche Bundestag.Notes on contributorsBjörn KlamannBjörn Klamann finished his Master of Science Degree in Mechanical and Process Engineering at Technical University of Darmstadt. Since 2018 he is a research assistant at the Institute of Automotive Engineering at Technical University of Darmstadt. In his main research topic, the safety of automated vehicles, he investigates the approach of a modular safety approval.Hermann WinnerHermann Winner began working at Robert Bosch GmbH in 1987, after receiving his PhD in physics, focusing on the predevelopment of ‘by-wire’ technology and Adaptive Cruise Control (ACC). Beginning in 1995, he led the series development of ACC up to the start of production. Since 2002, he has been pursuing the research of systems engineering topics for driver assistance systems and automated driving as Professor of Automotive Engineering at the Technical University of Darmstadt. He discovered the ‘approval trap’ of autonomous driving, the still unsolved challenge to validate safety of autonomous driving before market introduction.","PeriodicalId":45573,"journal":{"name":"International Journal of Reliability Quality and Safety Engineering","volume":null,"pages":null},"PeriodicalIF":0.9000,"publicationDate":"2023-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Introducing the detailed semantic interface description to support a modular safety approval of automated vehicles – S <sup>2</sup> I <sup>2</sup>\",\"authors\":\"Björn Klamann, Hermann Winner\",\"doi\":\"10.1080/09617353.2023.2264729\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"AbstractThe concept of a modular safety approval for automated vehicles dispenses with tests on vehicle or system level. Individually approved modules can be updated and reused without requiring new safety approvals. Similar to a system’s operational design domain description, an environmental description is required for a safety approval on module level. This paper presents how the environment of a module can be described at module interfaces. Uncertainty about other modules’ behaviour, dependencies between modules, and impacts of their outputs on the system behaviour are key reasons for missing specifications or tests of existing methods, leading to an erroneous approval of modules. To reduce uncertainties, we expand the state-of-the-art syntactical and semantic interface description and additionally describe dependencies to other modules’ behaviour or conditions and impacts of their outputs. The resulting detailed semantic interface description is categorised into syntax, semantics, influencing factors, and impacts. The novel description structure is a condensed way to consider the behaviour and its impacts on other modules in module development and testing. The description fundamentally supports the modular safety approval by identifying stimuli usually only seen during integration.Keywords: Safety approvalvalidationautomated drivingautonomous vehiclesmodularityinterfaceUNICARagil AcknowledgementThis research is accomplished within the project ‘UNICARagil’ (FKZ 16EMO0286).Disclosure statementNo potential conflict of interest was reported by the author(s).Data availability statementAll data analysed during this study are included in the Appendix of this published article.Additional informationFundingWe acknowledge the financial support for the projects by the Federal Ministry of Education and Research of Germany (BMBF) based on a decision of the Deutsche Bundestag.Notes on contributorsBjörn KlamannBjörn Klamann finished his Master of Science Degree in Mechanical and Process Engineering at Technical University of Darmstadt. Since 2018 he is a research assistant at the Institute of Automotive Engineering at Technical University of Darmstadt. In his main research topic, the safety of automated vehicles, he investigates the approach of a modular safety approval.Hermann WinnerHermann Winner began working at Robert Bosch GmbH in 1987, after receiving his PhD in physics, focusing on the predevelopment of ‘by-wire’ technology and Adaptive Cruise Control (ACC). Beginning in 1995, he led the series development of ACC up to the start of production. Since 2002, he has been pursuing the research of systems engineering topics for driver assistance systems and automated driving as Professor of Automotive Engineering at the Technical University of Darmstadt. He discovered the ‘approval trap’ of autonomous driving, the still unsolved challenge to validate safety of autonomous driving before market introduction.\",\"PeriodicalId\":45573,\"journal\":{\"name\":\"International Journal of Reliability Quality and Safety Engineering\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.9000,\"publicationDate\":\"2023-11-13\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"International Journal of Reliability Quality and Safety Engineering\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1080/09617353.2023.2264729\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q3\",\"JCRName\":\"ENGINEERING, MULTIDISCIPLINARY\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"International Journal of Reliability Quality and Safety Engineering","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1080/09617353.2023.2264729","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"ENGINEERING, MULTIDISCIPLINARY","Score":null,"Total":0}
Introducing the detailed semantic interface description to support a modular safety approval of automated vehicles – S 2 I 2
AbstractThe concept of a modular safety approval for automated vehicles dispenses with tests on vehicle or system level. Individually approved modules can be updated and reused without requiring new safety approvals. Similar to a system’s operational design domain description, an environmental description is required for a safety approval on module level. This paper presents how the environment of a module can be described at module interfaces. Uncertainty about other modules’ behaviour, dependencies between modules, and impacts of their outputs on the system behaviour are key reasons for missing specifications or tests of existing methods, leading to an erroneous approval of modules. To reduce uncertainties, we expand the state-of-the-art syntactical and semantic interface description and additionally describe dependencies to other modules’ behaviour or conditions and impacts of their outputs. The resulting detailed semantic interface description is categorised into syntax, semantics, influencing factors, and impacts. The novel description structure is a condensed way to consider the behaviour and its impacts on other modules in module development and testing. The description fundamentally supports the modular safety approval by identifying stimuli usually only seen during integration.Keywords: Safety approvalvalidationautomated drivingautonomous vehiclesmodularityinterfaceUNICARagil AcknowledgementThis research is accomplished within the project ‘UNICARagil’ (FKZ 16EMO0286).Disclosure statementNo potential conflict of interest was reported by the author(s).Data availability statementAll data analysed during this study are included in the Appendix of this published article.Additional informationFundingWe acknowledge the financial support for the projects by the Federal Ministry of Education and Research of Germany (BMBF) based on a decision of the Deutsche Bundestag.Notes on contributorsBjörn KlamannBjörn Klamann finished his Master of Science Degree in Mechanical and Process Engineering at Technical University of Darmstadt. Since 2018 he is a research assistant at the Institute of Automotive Engineering at Technical University of Darmstadt. In his main research topic, the safety of automated vehicles, he investigates the approach of a modular safety approval.Hermann WinnerHermann Winner began working at Robert Bosch GmbH in 1987, after receiving his PhD in physics, focusing on the predevelopment of ‘by-wire’ technology and Adaptive Cruise Control (ACC). Beginning in 1995, he led the series development of ACC up to the start of production. Since 2002, he has been pursuing the research of systems engineering topics for driver assistance systems and automated driving as Professor of Automotive Engineering at the Technical University of Darmstadt. He discovered the ‘approval trap’ of autonomous driving, the still unsolved challenge to validate safety of autonomous driving before market introduction.
期刊介绍:
IJRQSE is a refereed journal focusing on both the theoretical and practical aspects of reliability, quality, and safety in engineering. The journal is intended to cover a broad spectrum of issues in manufacturing, computing, software, aerospace, control, nuclear systems, power systems, communication systems, and electronics. Papers are sought in the theoretical domain as well as in such practical fields as industry and laboratory research. The journal is published quarterly, March, June, September and December. It is intended to bridge the gap between the theoretical experts and practitioners in the academic, scientific, government, and business communities.