Search Results

With its origin in the process industry, the IEC 61508 „Functional safety of electrical/electronic/programmable electronic safety-related systems” is not fully applicable in the automotive industry, forcing the automotive industry to work on an automotive specific adaptation (ISO 26262 “Functional Safety – Road Vehicles”). This ISO 26262 describes an ideal development process that starts from scratch. In reality development activities are often split locally and in time. This can only be handled with a world wide standard as a basis of a common approach, wide enough to give enough freedom to adapt to diverse boundary conditions, but tight enough to hinder local interpretations to be that far, that a complete safety case becomes impossible. Therefore a strict world-wide standard which allows compatible interpretations is mandatory.

The release of ISO 26262 is only about three months after the 2011 World Congress. However, there are still some contentious aspects that can introduce challenges or cause a disproportionate effort. In this paper, we will show how to avoid these problems. ISO 26262 provides a detailed method for classifying the Automotive Safely Integrity Level (ASIL) of in-vehicle electronic systems. However, the ASIL value for a specific function/product can vary significantly across the industry. Applying a lower level than the industry norm can cause substantial liability problems. Applying a higher level can initiate an “arms race” with competitors. This is particularly true if there are no vehicle-related reasons for choosing the higher level or if it doesn't make the product any safer. To encourage international harmonization, this paper will define ASIL classifications for the main automotive components. Most functions/products are currently being developed using parts of existing products.