2023³â 11¿ù 17ÀÏ, MIIT, Ministry of Public Security, Ministry of Housing and Urban-Rural Development, Ministery of Transport´Â °øµ¿À¸·Î 'Notice on the Pilot Program for Access and On-road Passage of Intelligent Connected Vehicles'¸¦ °øÆ÷, L3/L4 ÀÚÀ²ÁÖÇà¿¡ ´ëÇÑ ¾×¼¼½º »ç¾çÀ» Á¤½ÄÀ¸·Î Á¦¾ÈÇØ, °íµµ Áö´ÉÇü µå¶óÀÌºê »ç°í¿¡ ÀÖ¾î¼ÀÇ Ã¥ÀÓÀ» óÀ½À¸·Î ¸íÈ®ÇÏ°Ô Çϰí, µ¿½Ã¿¡ Á¦1ÁøÀÇ ±â¾÷ ¼±Á¤À» °³½ÃÇß½À´Ï´Ù.
As intelligent connected vehicles boom, the change in automotive EEA has been accelerated, and the risks caused by electronic and electrical failures have become ever higher. As a result, functional safety and SOTIF (safety of the intended functionality) have caught more attention, especially in the field of autonomous vehicles.
In 2023, standards and policies have speeded up the development of automotive functional safety and SOTIF in China. In addition to the latest functional safety standard GB_T 34590 2022 officially taking into effect on July 1, 2023, related Chinese departments also issued multiple policies concerning functional safety and SOTIF.
For example, in July 2023, the Ministry of Industry and Information Technology of China (MIIT) issued the "Guidelines for the Construction of National Internet of Vehicles Industry Standard System (Intelligent Connected Vehicles) (2023)", which clearly plans and guides the construction of standards for functional safety and SOTIF. In August 2023, the MIIT and other three departments jointly issued the Notice on the New Industry Standardization Pilot Project Implementation Plan (2023-2035), of which the Intelligent Connection Technologies in the New Energy Vehicle Industry stipulates the terms and definition of intelligent connected vehicles, functional safety and SOTIF processes, audits and evaluations, automotive cyber security, data security, software upgrades and other product and technology application standards.
On November 17, 2023, the MIIT, the Ministry of Public Security, the Ministry of Housing and Urban-Rural Development and the Ministry of Transport jointly issued the Notice on the Pilot Program for Access and On-road Passage of Intelligent Connected Vehicles, which officially suggests access specifications for L3/L4 autonomous driving and clarifies the responsibilities in high-level intelligent driving accidents for the first time, and simultaneously started the selection of the first batch of enterprises.
The Notice specifies the requirements for the access of automotive enterprises and vehicles, especially for their safety guarantee capabilities. Enterprises are required to have the ability to guarantee functional safety, SOTIF, cybersecurity, data security, software upgrade management, and risk and emergency management.
The requirements for process guarantee of intelligent connected vehicle products include the functional safety process guarantee of vehicles (especially autonomous driving systems), the SOTIF process guarantee of autonomous driving systems, and the process guarantee of vehicle cybersecurity and data security.
Therefore functional safety and SOTIF have become the access requirements for L3 autonomous vehicles in China, and the introduction of functional safety and SOTIF standard processes into L3 and higher-level autonomous systems has become the layout focus of OEMs and suppliers.
OEMs and suppliers greatly increase automotive functional safety processes and product certifications, and embark on the layout of SOTIF process certification.
Although ISO 26262 is not a global mandatory standard, it has been widely accepted in the automotive industry and has become the threshold for automotive supply chain players. OEMs and Tier 1 suppliers will have to reject products or vendors that are not ISO 26262-certified. As intelligent vehicles develop, both autonomous driving companies and OEMs attach ever more importance to functional safety and SOTIF.
In recent years, both international mainstream OEMs and Chinese automakers have paid more attention to and invested more heavily in functional safety and SOTIF. In particular, Chinese independent automakers such as Great Wall Motor, SAIC, Geely, GAC, Changan and BYD have all raised the requirements for functional safety development of important systems. Besides setting up functional safety teams, they actively participate in functional safety training, cooperate with third-party institutions, strictly control self-developed products and vehicle functional safety products and processes, and take suppliers' functional safety development capabilities and product functional safety capabilities as the criteria to enter their supply chains.
OEMs or suppliers put ever more emphasis on functional safety certification. According to public statistics, from January to November 2023, Chinese companies passed 114 functional safety certifications, including 41 product certifications and 73 process certifications, far more than in 2022 (about 40).
In addition to functional safety certification, the official implementation of SOTIF standards has spurred many OEMs and suppliers such as Great Wall Motor, FAW Hongqi, Changan Automobile, GAC, Horizon Robotics, Jingwei Hirain, Huawei, Desay SV and SenseAuto to deploy SOTIF processes. They have passed SOTIF process certifications in advance, laying a safety foundation for the further layout of autonomous driving systems.
Functional safety, SOTIF, cybersecurity, etc. tends to be developed in from an independent way to an integrated way.
In addition to functional safety, the development of vehicles will have to face other safety challenges in the future, such as SOTIF and cybersecurity. Functional safety and SOTIF focus on system design and verification to ensure that the system can work safely in all situations. Cybersecurity centers on external threats and attacks. In practical application, functional safety, SOTIF and cybersecurity often cross over. In the future, intelligent connected vehicles should solve all the risks related to vehicle safety before they can be delivered in large quantities. The integrated development of the three safety systems has become a major development trend of vehicle safety in the future. Multiple companies like KOSTAL, Neta, Baolong Technology and Pan-Asia Technical Automotive Center are exploring integrated development of safety.
As vehicles carry more complex embedded electronic systems, the risks incurred by software system damage and random hardware damage are increasing. Integrating the ISO 26262 functional safety standard into the Automotive Software Process Improvement and Capability dEtermination (ASPICE) to guide automotive software development will greatly improve automotive system software development quality, development efficiency and product safety.
Table of Contents
1 Status Quo and Trends of Automotive Functional Safety
1.1 Status Quo of Automotive Functional Safety
1.1.1 Definition of Automotive Functional Safety
1.1.2 Demand for Automotive Functional Safety
1.1.3 Main Features of Automotive Functional Safety
1.1.4 Development History of Automotive Functional Safety
1.1.5 Purposes of Automotive Functional Safety
1.1.6 Basic Design Principle of Automotive Functional Safety
1.1.7 General Automotive Functional Safety Workflow
1.1.8 Example of SEooC Software Development Process
1.1.9 Cost Structure of Automotive Functional Safety
1.1.10 Classification of Automotive Functional Safety Software Tools
1.1.11 Design and Verification Method of Automotive Functional Safety
1.1.12 Basic Analysis Method of Automotive Functional Safety
1.1.13 Basic Definition Related to Automotive Functional Safety
1.2 Development and Evolution of Automotive Functional Safety
1.2.1 Difficulties in Mass Production of Automotive Functional Safety
1.2.2 Evolution of Automotive Functional Safety (1)
1.2.3 Evolution of Automotive Functional Safety (2)
1.2.4 Fail Operational Case:
1.2.5 Integrated Development Trends of Automotive Safety (1)
1.2.6 Integrated Development Trends of Automotive Safety (2)
1.2.7 Integrated Development Trends of Automotive Safety (3)
1.2.8 Integrated Development Trends of Automotive Safety (4)
1.2.9 Integrated Development Trends of Automotive Safety (5)
2 Status Quo and Trends of SOTIF
2.1 Overview of SOTIF
2.1.1 Definition of SOTIF
2.1.2 Why to Propose SOTIF
2.1.3 Scenario Analysis of SOTIF
2.1.4 Purposes of SOTIF
2.1.5 SOTIF Methodology (1)
2.1.6 Analysis Method of SOTIF System
2.1.7 Typical Design Cases of L3 SOTIF
2.2 Development of SOTIF
2.2.1 Automotive Functional Safety VS SOTIF
2.2.2 Integration of Automotive Functional Safety and SOTIF (1)
2.2.3 Integration of Automotive Functional Safety and SOTIF (2)
2.2.4 Integration of Automotive Functional Safety and SOTIF Processes
2.2.5 Integrated Development of Automotive Functional Safety and SOTIF
2.2.6 Verification Management Integration of Automotive Functional Safety and SOTIF
2.2.7 Machine Learning, Automotive Functional Safety and SOTIF
2.2.8 Technical Breakthrough in SOTIF
2.3 Research on SOTIF of Typical ADAS
2.3.1 SOTIF of Lane Keeping System
2.3.2 SOTIF of Automatic Brake Assist System
2.3.3 SOTIF of Adaptive Cruise Control (ACC) System
2.3.4 SOTIF of Traffic Jam Assist (TJA) System
2.3.5 SOTIF of Automated Parking System
2.3.6 SOTIF Design of Automotive AEB Control Strategy
2.4 SOTIF of Autonomous Driving System
2.4.1 Composition of Autonomous Driving System
2.4.2 Perception-related SOTIF
2.4.3 Prediction-related SOTIF
2.4.4 Decision-making-related SOTIF
2.4.5 Control-related SOTIF Technology
2.4.6 HMI-related SOTIF
2.4.7 SOTIF of V2X
3 Standard and Policies for Automotive Functional Safety and SOTIF
3.1 Major National Automotive Functional Safety Standards and Policies
3.1.1 Global Automotive Functional Safety Standards
3.1.2 Development of Foreign Functional Safety and SOTIF Standards
3.1.3 Development of ISO 26262
3.1.4 Automotive Functional Safety in the EU
3.1.5 Development of Automotive Functional Safety in the USA
3.1.6 Development of Automotive Functional Safety Standards in China
3.1.7 Automotive Functional Safety Standards Research Organization in China
3.1.8 Specific Automotive Functional Safety Standards in China
3.1.9 Automotive Functional Safety Standards in China
3.1.10 Test & Evaluation Method of Automotive Functional Safety and SOTIF
3.1.11 Medium and Long-term Automotive Functional Safety and SOTIF Standards Planning in China
3.1.12 Automotive Functional Safety and SOTIF Policies in China
3.1.13 Guidelines for the Construction of the National Internet of Vehicles Industry Standard System (Intelligent Connected Vehicles) (2023)
3.1.14 Notice on the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles: Overall Requirements and Organized Implementation
3.1.15 Notice on the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles: Safety Measures
3.1.16 Notice on the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles: Description
3.1.17 Guide on the Implementation of the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles (Trial): Functional Safety Requirements at Corporate Level
3.1.18 Guide on the Implementation of the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles (Trial): Corporate Requirements for Functional Safety Guarantee
3.1.19 Guide on the Implementation of the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles (Trial): Corporate Requirements for SOTIF Guarantee
3.1.21 Guide on the Implementation of the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles (Trial): Requirements at Product Level
3.1.22 Guide on the Implementation of the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles (Trial): Requirements for Functional Safety of Vehicles and Autonomous Driving Systems
3.1.23 Guide on the Implementation of the Pilot Program for Admittance and Road Access of Intelligent Connected Vehicles (Trial): Requirements for SOTIF of Vehicles and Autonomous Driving Systems
3.2 Functional Safety Standards
3.2.1 Automotive SOTIF Standards
3.2.2 Requirements of Major National Autonomous Driving System Regulations and Standards on SOTIF
3.2.3 Main SOTIF Standards in China
3.2.4 Construction of SOTIF Standards in China
3.6 Introduction to ISO 26262
3.3.1 ISO 26262
3.3.2 ISO 26262:2011 VS ISO 26262:2018
3.3.3 Content of ISO 26262
3.3.4 ISO 26262-2: Functional Safety Management (1)
3.3.5 ISO 26262-2: Functional Safety Management (2)
3.3.6 ISO 26262-3: Concept of Functional Safety
3.3.7 ISO 26262-3: Hazard Analysis and Risk Assessment (HARA) (1)
3.3.8 ISO 26262-3: Hazard Analysis and Risk Assessment (HARA) (2)
3.3.9 ISO 26262-3: Functional Safety Goals and Levels of Safety Requirements
3.3.10 ISO 26262-4: System-level Product Development
3.3.11 ISO 26262-4: Concept of Technical Safety
3.3.12 ISO 26262-4: System Project Integration and Testing
3.3.13 ISO 26262-5: Hardware-level Product Development
3.3.14 ISO 26262-5: Hardware design
3.3.15 ISO 26262-5: Hardware Safety Analysis
3.3.16 ISO 26262-5: Hardware Design Verification
3.3.17 ISO 26262-5: Evaluation of Hardware Architecture Metrics
3.3.18 ISO 26262-5: Violation Evaluation of Safety Goals due to Random Hardware Failure
3.3.19 ISO 26262-5: Hardware Integration and Verification
3.3.20 ISO 26262-6: Software Functional Safety
3.3.21 ISO 26262-6: Overview of Software-level Product Development
3.3.22 ISO 26262-6: Software Development Plan
3.3.23 ISO 26262-6: Software Safety Requirements
3.3.24 ISO 26262-6: Software Architecture Design
3.3.25 ISO 26262-6: Software Architecture Design - Software Safety Mechanism