Failure management development for integrated automotive safety-critical software systems

ABSTRACT

Nowadays the number of vehicles equipped with electronic components is increasing rapidly by replacing mechanical and hydraulic systems. The most advanced cars function appropriately via more than 50 Electronic Control Units (ECUs), sensors and actuators that exchange more than 2500 electronic signals among them. The electronic components are interconnected with automotive bus systems. There are several bus systems that have been developed or improved in automotive bus systems to meet the different requirements for automotive applications: Local Interconnection Network (LIN), Controller Area Network (CAN), FlexRay and Media Oriented System Transport (MOST). However, there are demands to combine these different bus systems to increase the efficiency and safety of the vehicle systems. Failure management is a most challenging problem in car industry since the integrated automotive system needs to communicate with software/hardware components on the different bus systems in a car. The discussion on how to interconnect those automotive bus systems in a safety-critical way is addressed in the paper, where failure management should be applied.

REFERENCES

• 1: AUTOSAR, http://www.autosar.org/.
• 2: IEC 60812: 1985, Analysis techniques for system reliability -- Procedure for failure mode and effects analysis (FMEA).
• 3: IEC 61508: 2005, Function Safety of electrical/electronic/programmable electronic safety-related systems.
• 4: Fussel, J. S. Arend, System Reliability Engineering Methodology: A Discussion of the State of the Art. J. Nuclear Safety 20 (5), 1979.
• 5: E. Green, A. J. Bourne, Reliability Technology. Wiley-Interscience, 1972.
• 6: W. E. Vesely et al, Fault Tree Handbook. NUREG-0942, Division of System Safety Office of Nuclear Reactor Regulation, U.S. Nuclear Regulatory Commission, Washington, DC 20555, 1981.
• 7: Design Analysis Procedure for Failure Modes, Effects and Criticality Analysis (FMECA).Aerospace Recommended Practice (ARP) 926, Society of Automotive Engineers (SAE), USA, 15 September 1967.
• 8: IEC 61025: 1990, Fault tree analysis (FTA).
• 9: B. S. Nielsen, The Cause Consequence Diagram Method as a Basis for Quantitative Accident Analysis, Riso-M-1374, 1971.
• 10: N. Limnious and J. P. Jeannette, Event Trees and their Treatment on PC Computers. Reliability Engineering, Vol. 18, No. 3, 1987.
• 11: William E Howden, Functional program testing and analysis, McGraw-Hill, Inc., New York, NY, 1986
• 12: Glenford J. Myers , Corey Sandler, The Art of Software Testing, John Wiley & Sons, 2004
• 13: P. G. Bishop et al, Dependability of Critical Computer Systems 3. Elsevier Applied Science, 1990.
• 14: R. J. Lasher, Integrity Testing of Process Control Systems, Control Engineering 36 (11), 152--164, October 1989.
• 15: IEC 61069-5: 1994, Industrial-process measurement and control -- Evaluation of system properties for the purpose of system assessment -- Part 5: Assessment of system dependability.
• 16: C. Boran et al, Definition and Failure Management of Highly-Integrated Safety-Critial Systems, Satety-Critical Systems, 2008, SAE International, SP-2173.
• 17: T. Nolte et al, Implementing Next Generation Automotive Communications, Embedded Real-Time Systems Implementation Workshop (ERTSI 2004), Lisbon, Portugal,
• 18: M. Schmid, Automotive Bus Systems, Automotive Applications, December, 2004.
• 19: C. Price and N. Snooke, An Automated Software FMEA, Proceedings of the International System Safety Regional Conference, Singapore, April 2008.
• 20: J. Stroop and R. stolpe, Prototyping of Automotive Control Systems in a Time-triggered Environment Using FlexRay, Precedings of the 2006 IEEE Conference on Computer Aided Control Systems Design, Munich, Germany, October 4--6, 2006.
• 21: G. Teepe and T. Goernig, Automotive Sensor Integration, the proceedings of the 7th International Conference on Advanced Microsystems for Automtive Applications, Berlin, Germany, May 22--23, 2003.