A Novel Hazard Analysis and Risk Assessment Approach for Road Vehicle Functional Safety through Integrating STPA with FMEA

Jian Jiao,Tingdi Zhao,Lei Chen

doi:10.3390/app10217400

Jian Jiao, Tingdi Zhao + Show 1 more

Open Access

https://doi.org/10.3390/app10217400

Copy DOI

Abstract

ISO26262: 2018 is an international functional safety standard for electrical and/or electronic (E/E) systems within road vehicles. It provides appropriate safety requirements for road vehicles to avoid unreasonable residual risk according to automotive safety integrity levels (ASILs) derived from hazard analysis and risk assessment (HARA) required in the ISO26262 concept phase. Systems theoretic process analysis (STPA) seems to be designed specifically to deal with hazard analysis of modern complex systems, but it does not include risk evaluation required by most safety related international standards. So we integrated STPA into Failure Mode and Effect Analysis (FMEA) template to form a new method called system theoretic process analysis based on an FMEA template, STPAFT for shot, which could not only meet all the requirements of the concept phase in ISO26262, but also make full use of the advantages of the two methods. Through the focus of FMEA on low-level components, STPAFT can obtain more detailed causal factors (CFs), which is very helpful for derivation of safety goals (SGs) and the functional safety requirements (FSRs) in the concept phase of ISO26262. The application of STPAFT is described by the case study of fuel level estimation and display system (FLEDS) to show how the concept phase of ISO26262 could be supported by STPAFT.

Highlights

Nowadays, the intensive use of software and the increase in functional requirements have significantly increased the complexity of road vehicle systems
The application of STPAFT is described by the case study of fuel level estimation and display system (FLEDS) to show how the concept phase of ISO26262 could be supported by STPAFT
As for safety goals in ISO26262, they could be equivalent to the system-level safety constraints (SCs) in Systems theoretic process analysis (STPA), because they are similar in definition

Summary

Introduction

The intensive use of software and the increase in functional requirements have significantly increased the complexity of road vehicle systems. Developing safety requirements for road vehicle electrical and/or electronic (E/E) systems is challenging. ISO26262, as a domain-specific standard for functional safety of road vehicles, Appl. We provide a detailed comparative analysis on the theoretical foundations and key terms of STPA and ISO262626 concept phase. ISO26262, published in late 2011, is an international standard concerned with functional safety of safety-related E/E systems within the automotive systems. The purpose of this standard is to constructs a framework to integrate functional safety activities into the development of safety-related. The stipulation of each new product to be state-of-the-art could be helped by putting forward suggestions on specific safety development processes and safety classifications.

Objectives

Results

Discussion

Conclusion