asil分解和误区汽车电子咖啡厅.doc

莱茵技术（上海）有限公司 边俊/Jemmy Bian ASIL分解是什么 ASIL 分解是什么？ 为什么要做ASIL 分解 不同安全级别所选用的研发、测试的方式方法是不同的 如，在一个实际项目中，每高一级安全等级，仅花费的人力资源就是上一级的1.2-1.5倍左右（仅供参考） 3 29.08.2016 ASIL 分解是什么？ ASIL 分解在标准中的定义 . [ISO 26262-9, 5.2] The method of ASIL tailoring during the design process is called ASIL decomposition. During the allocation process, benefit can be obtained from architectural decisions including the existence of sufficiently independent architectural elements. This offers the opportunity: - to implement safety requirements redundantly by these independent architectural elements, and - to assign a potentially lower ASIL to these decomposed safety requirements. . [ISO 26262-9, 5.2] ASIL decomposition is an ASIL tailoring measure that can be applied to the functional, technical, hardware or software safety requirements of the item or element. . [ISO 26262-10, 11.1] The objective of ASIL decomposition is to apply redundancy in order to comply with the safety goal with respect to systematic failures. 4 29.08.2016 ASIL 分解是什么？ ASIL 分解在概念、系统、软件、硬件阶段的应用 Functional safety requirement / Technical safety requirements T-SR-1 [ASIL D]: A sensor shall detect that a person is sitting on the seat ? T-SR-1a [ASIL B (D)]: A pressure sensor … ? T-SR-1b [ASIL B (D)]: A camera… Hardware safety requirements HW-SR-1 [ASIL D]: Power supply shall be disabled ? HW-SR-1a [ASIL A (D)]: … by MOSFET ? HW-SR-1b [ASIL C (D)]: … by bipolar transistors Software safety requirements SW-SR-1 [ASIL C]: Output value shall be calculated by algorithm ? SW-SR-1a [ASIL B (C)]: … algorithm a … ? SW-SR-1b [ASIL A (C)]: … algorithm b … 5 29.08.2016 ASIL 分解是什么？ 怎么做ASIL decomposition？ Decomposition of ASIL D Decomposition of ASIL C ASIL D ASIL C ASIL C(D) + ASIL A(D) 5.4.11 ASIL B(C) + ASIL A(C) 5.4.11 Decomposition of ASIL B or ASIL D ASIL B 5.4.11 ASIL B(D) + ASIL B(D) ASIL A(B) + ASIL A(B) 5.4.12 5.4.11 6 29.08.2016 ASIL 分解是什么？ ASIL分解的依据和来源是什么？ [IEC 61508-2010-2, ] For an element of systematic capability SC N (N=1, 2, 3)