Abstract

All elements (agents) in the STPA control structure (control algorithm, actuator, sensor system, process model) consist of a set of functions. These can be visualised and analysed using the Functional Analysis System Technique (FAST). The control action is executed by the control algorithm agent. By using FAST we can analyse the sub-functions of the control action and identify scenarios that may cause unsafe control actions. In the same way, the actuator agent, sensor agent and the process model agent can be visualised and analysed through FAST to identify scenarios that may cause unsafe control actions. When identifying scenarios that may lead to unsafe control actions, analysts tacitly create a mental model of these dependencies. One of the strengths of STPA is in agent analysis, by identifying the system agents responsible for enforcing safety constraints as well as other agents whose actions (or lack of them) may cause unsafe control actions. The strength of FAST is function analysis through making the functional dependencies explicit. Small FAST trees within the STPA control structure increase the information density without creating too much clutter. The semantics in FAST are relatively easy and quick to learn for Subject Matter Experts (SMEs) and others. FAST trees can guide refinement of the control structure by identifying functions as new lower-level or higher-level control actions that need further investigation in new control structures. The original purpose of FAST was to spark the creativity to find an alternative solution to a problem, or alternative ways of achieving a function. This is valuable early in the concept and design phase of any system development, including when using STPA in early system safety engineering phases.

Highlights

  • It Identifying scenarios that may lead to unsafe control actions requires profound knowledge about the system under consideration, the technology used and of the intended operation, and the environment of which the operation is conducted

  • This paper suggests augmenting the SystemTheoretic Process Analysis (STPA) introduced by Leveson (2011) by using Functional Analyse System Technique (FAST) to assist in the identification of causal scenarios leading to unsafe control actions

  • An introduction to FAST is given in the Appendix of this paper, and further information can be found in the Society of American Value Engineering (SAFE)†

Read more

Summary

INTRODUCTION

It Identifying scenarios that may lead to unsafe control actions requires profound knowledge about the system under consideration, the technology used and of the intended operation, and the environment of which the operation is conducted. This paper suggests augmenting the SystemTheoretic Process Analysis (STPA) introduced by Leveson (2011) by using Functional Analyse System Technique (FAST) to assist in the identification of causal scenarios leading to unsafe control actions. FAST may be used by the analyst in the refinement of the control structures. FAST is a way of visualising, structuring and analysing the "system functional design", and a help in providing a "best guess" early in the system concept and design phases. If STPA is performed on a "black-box" system, perhaps by a third-party analyst who is not granted access to the internal system design documentation, she/he can use FAST to identify the required generic functions, and perform the analysis

APPLYING FAST IN STPA
FAST Tree and STPA Control Structure
FAST Trees Inside Other Control Structure Agents
Thruster Control System
Sensor System
Controller Process Model
IDENTIFYING AND ANALYSING HIGHER-LEVEL AUTHORITIES
SUMMARY
DISCUSSION AND CONCLUSION
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call