ASIL分解和误区 汽车电子咖啡厅.pdfVIP

莱茵技术（上海）有限公司 边俊/Jemmy Bian 1 ASIL分解是什么 ASIL 分解是什么？ 为什么要做ASIL 分解 不同安全级别所选用的研发、测试的方式方法是不同的 如，在一个实际项目中，每高一级安全等级，仅花费的人力资源就是上一级的1.2-1.5倍左右（仅供参考） 3 29.08.2016 ASIL 分解是什么？ ASIL 分解在标准中的定义  [ISO 26262-9, 5.2] The method of ASIL tailoring during the design process is called ASIL decomposition. During the allocation process, benefit can be obtained from architectural decisions including the existence of sufficiently independent architectural elements. This offers the opportunity: - to implement safety requirements redundantly by these independent architectural elements, and - to assign a potentially lower ASIL to these decomposed safety requirements.  [ISO 26262-9, 5.2] ASIL decomposition is an ASIL tailoring measure that can be applied to the functional, technical, hardware or software safety requirements of the item or element.  [ISO 26262- 10, 11.1] The objective of ASIL decomposition is to apply redundancy in order to comply with the safety goal with respect to systematic failures. 4 29.08.2016 ASIL 分解是什么？ ASIL 分解在概念、系统、软件、硬件阶段的应用 Functional safety requirement / Technical safety requirements T-SR-1 [ASIL D]: A sensor shall detect that a person is sitting on the seat • T-SR-1a [ASIL B (D)]: A pressure sensor … • T-SR-1b [ASIL B (D)]: A camera… Hardware safety requirements HW-SR-1 [ASIL D]: Power supply shall be disabled • HW-SR-1a [ASIL A (D)]: … by MOSFET • HW-SR-1b [ASIL C (D)]: … by bipolar transistors Software safety requirements SW-SR-1 [ASIL C]: Output value shall be calculated by algorithm