融合STPA及有限状态机的ADAS触发条件生成机制

    Generation Mechanism of ADAS System Trigger Conditions Integrating STPA and Finite State Machines

    • 摘要: 现有高级辅助驾驶系统(Advanced Driver Assistance Systems, ADAS)功能不断增多且系统复杂性不断提高,不可避免带来了预期功能安全(Safety of the Intended Functionality, SOTIF)问题。触发条件的识别与生成是预期功能安全活动中重要的一环,然而现有对触发条件识别仅借助系统过程理论分析方法(System Theoretic Process Analysis, STPA)进行分析,未充分考虑系统功能状态转换中存在的问题。本文以知识驱动的方式构建触发条件识别机制,将STPA及有限状态机(Finite State Machine, FSM)理论融合构建拓展型系统控制结构,针对拓展型控制架构及功能状态转换进行安全分析,根据系统存在的功能局限及人为误用,完成触发条件的识别、生成、规范化描述、分类及标签化。最后将本文提出的触发条件生成机制应用于集成式巡航辅助系统(Integrated Cruise Assistance, ICA),得到了该系统的触发条件及其分类,并将本文所提出的生成机制与现有相关触发条件生成方法进行对比分析,证明了本机制的实用性、可行性及有效性。

       

      Abstract: The ever-increasing functionalities and escalating complexity of existing Advanced Driver Assistance Systems inevitably cause the problem of Safety of The Intended Functionality. The identification and generation of trigger conditions play a critical role in SOTIF activities. Most existing trigger condition identification approachesare mainly based on the System-Theoretic Process Analysis method, which however neglect the issues within the system's functional state transitions. This paper adopts a knowledge-driven approach to construct a trigger condition identification mechanism by integrating STPA and Finite State Machine theories to establish an expanded system control structure. Safety analysis is conducted concerning the expanded control architecture and functional state transitions. By considering system limitations and human misuse, trigger conditions are identified, generated, described, classified, and labeled. Finally, the proposed trigger condition generation mechanism is applied to an Integrated Cruise Assistance system, obtaining trigger conditions and their classifications. The generated mechanism is compared with existing trigger condition generation methods, demonstrating its practicality, feasibility, and effectiveness.

       

    /

    返回文章
    返回