CN112287466A - ADAS display function safety design method in all-liquid-crystal instrument - Google Patents

ADAS display function safety design method in all-liquid-crystal instrument Download PDF

Info

Publication number
CN112287466A
CN112287466A CN202011522908.0A CN202011522908A CN112287466A CN 112287466 A CN112287466 A CN 112287466A CN 202011522908 A CN202011522908 A CN 202011522908A CN 112287466 A CN112287466 A CN 112287466A
Authority
CN
China
Prior art keywords
safety
software
design
hardware
architecture
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011522908.0A
Other languages
Chinese (zh)
Inventor
刘永学
孙江燕
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Yanfeng Visteon Electronic Technology Nanjing Co Ltd
Original Assignee
Yanfeng Visteon Electronic Technology Nanjing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Yanfeng Visteon Electronic Technology Nanjing Co Ltd filed Critical Yanfeng Visteon Electronic Technology Nanjing Co Ltd
Priority to CN202011522908.0A priority Critical patent/CN112287466A/en
Publication of CN112287466A publication Critical patent/CN112287466A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F30/00Computer-aided design [CAD]
    • G06F30/10Geometric CAD
    • G06F30/15Vehicle, aircraft or watercraft design
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F30/00Computer-aided design [CAD]
    • G06F30/20Design optimisation, verification or simulation

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Geometry (AREA)
  • General Physics & Mathematics (AREA)
  • Evolutionary Computation (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Automation & Control Theory (AREA)
  • Aviation & Aerospace Engineering (AREA)
  • Computational Mathematics (AREA)
  • Mathematical Analysis (AREA)
  • Mathematical Optimization (AREA)
  • Pure & Applied Mathematics (AREA)
  • Test And Diagnosis Of Digital Computers (AREA)

Abstract

The invention discloses a function safety design method for ADAS display in an all-liquid-crystal instrument, which relates to the technical field of vehicle-mounted information systems, and the scheme provided by the invention can overcome the defect that the existing technology can not meet the requirement of a function safety target provided by the ADAS of a whole vehicle.

Description

ADAS display function safety design method in all-liquid-crystal instrument
Technical Field
The invention relates to the technical field of vehicle-mounted information systems, in particular to a safety design method for an ADAS display function in a full liquid crystal instrument.
Background
Along with the continuous improvement of the safety culture cognition of the automobile industry and the continuous release of international and domestic related standards, the requirement on the functional safety of the automobile also provides a great challenge, along with the increasing of electronic parts related to the functional safety of the whole automobile, the instrument is used as a display window of the whole automobile and interacts with a plurality of electronic parts related to the safety of the whole automobile, and related functional safety requirements are also provided for an instrument system, but the current full-liquid crystal instrument display technology is still based on a development mode of a quality system, only the normal interactive display with other modules of the whole automobile is considered, and the system is not subjected to systematic safety analysis so as to carry out related safety design. In the face of the requirement of functional safety, the existing technical means can not meet the functional safety requirement of the whole vehicle.
Disclosure of Invention
The invention aims to overcome the defect that the prior art can not meet the functional safety target requirement proposed by the ADAS of the whole vehicle, and the full liquid crystal instrument system can meet the requirement of the related functional safety target proposed by the whole vehicle level by carrying out related safety analysis and design verification from the system level, the software level, the hardware level, the test level and the process system level,
the invention provides a method for designing the safety of an ADAS display function in a full liquid crystal instrument, which comprises the following steps:
step 1), firstly, designing a system level:
i. the design part of the system functional safety requirement defines the requirements of detecting the internal and external detection requirements, the constraint conditions and the target values of the system, according to the requirements of the functional safety target distributed by ADAS, combines the requirements of the design of the instrument system, the main consideration point of the requirements is the identification of the safety path of the whole functional safety, analyzes the failure existing inside the system and provides the corresponding detection requirement, analyzes the failure existing outside the system and provides the corresponding detection requirement, defines the entry of failure detection processing, the requirement definition of system state processing and how to exit the safety state in the requirements, needs the detection requirement of multipoint errors inside the system, defines the relevant requirements of system interfaces in the requirements, defines the system constraint conditions, includes the constraints of the environment and the functions of the system, and also needs to provide the requirements of laws and regulations related to the system, the related requirements of the production, use, maintenance and scrapping stages are required, and the target value requirements of a single-point failure rate index, a multi-point failure rate index and a random hardware failure rate index are required;
the system function safety system architecture part comprises a power supply unit, a main control chip unit, a graphic processor unit, an alarm sound prompt module and a signal transceiving module, wherein the main control chip unit comprises a CAN signal processing unit, an analog signal output unit, a RAM processing unit, a ROM processing unit, a CPU unit, a Clock unit, a power supply processing unit, a CAN signal output unit, an internal communication processing unit and an analog signal processing unit;
performing safety analysis on the functional safety system level, performing FMEA (failure mode and effects analysis) and DFA (design and optimization) analysis on components defined in the system, adding related safety mechanisms after analyzing modules related to each safety path in the system to perfect a system functional safety architecture, and adding related safety mechanisms after performing safety analysis on an IPC-MCU (IPC-microprogrammed control Unit) and an IPC-MPU (IPC-MPU) in a functional safety critical path;
the FMEA analysis is performed according to a physical architecture and a functional architecture in a system architecture, and the principle of the analysis is to analyze a related failure mode in each system component equally, and check whether a related safety mechanism is performed on the analyzed failure, if the related failure is not covered by the safety mechanism, the related safety mechanism needs to be added in the system architecture, so that a single point failure in the system is avoided, the DFA analysis performs the analysis of the system independence according to the components in the system and the result of the FMEA analysis, and the DFA analysis mainly considers the following three aspects: firstly, ASLL decomposition exists in the system, the decomposed components are subjected to independence analysis, secondly, whether related redundant designs exist in the system during design, the redundant components need to be subjected to independence consideration, thirdly, whether the same components in the system are allocated with different ASLL grade requirements or not is subjected to analysis from the three aspects, association items are found out, then, analysis is carried out according to seven dimensions of the independence, whether related association items fail or not exists in the analysis system, so that the functional safety objective is violated, and therefore, the analyzed failure needs to be subjected to design consideration of a safety mechanism.
Step 2), the design part for the hardware level according to the design output of the system level comprises the following steps: designing hardware function safety requirements, designing a hardware function safety architecture, analyzing hardware safety and designing hardware function safety in detail;
step 3), designing a software layer according to the design of the system layer:
i. designing software function safety requirements, including refining the function safety design of a software layer required by the software function safety requirements, defining the software performance and meeting the safety requirements from a hardware layer according to the function safety requirements released by a system;
designing a software function safety architecture, and designing the software architecture according to the software function safety requirement;
software security analysis, namely performing functional security analysis and DFA analysis on software aiming at the output of the architecture level;
designing a software function safety unit, namely refining components, interfaces and functions defined by a software structure level and realizing a software unit corresponding to a framework;
and 4), verifying the design of the system level, the hardware level and the software level, and defining and executing the verification criterion according to the related criterion when the function safety is considered.
As an improvement of the present invention, in step 1) iii, the master chip unit adds E2E protection of CAN signals, output monitoring of the sound module, self test for CPU Core, ECC protection of the ROM processing unit and the RAM processing unit, clock protection during program operation, and protection by a watchdog with independent event reference, output monitoring of the power module, signal value range verification of analog signal output, and E2E protection of digital signals.
As an improvement of the present invention, in step 1) iii, the graphics processor unit adds E2E protection of digital signals, ECC protection for CPU Core self-test, ROM processing unit and RAM processing unit, clock protection during program operation, and cyclic redundancy check protection for digital image output.
As an improvement of the present invention, the hardware functional safety requirement design in step 2) includes functional safety requirements released according to the system, wherein functional safety design refinement is performed on the functional safety requirements allocated to the hardware, refinement on fault tolerance in the system, protection against common cause failure, special requirements on the function and performance of the hardware, and non-functional requirements are performed.
As an improvement of the present invention, the hardware function security architecture design in step 2) is to design a hardware component level according to the hardware security requirement output, and further refine the system architecture unit into each component of the hardware, where the architecture design should include security-related and non-security-related information, and be embodied in the same architecture.
As an improvement of the present invention, in the step 2), the hardware security analysis is performed on a hardware level according to an initial architecture of hardware, and FMEA and DFA analysis are performed on an ASILA system, where the FMEA and DFA analysis methods are similar to the functional security analysis on the system level.
As an improvement of the invention, the hardware function safety detailed design in the step 2) is a design on a component level, and the component unit generally embodied by the framework unit is further refined into various parts, wherein the parts comprise a schematic diagram, WCCA calculation, BOM and PCB constraints and PCB Layout.
As an improvement of the present invention, in the step 3) ii, the software functional security architecture is designed by considering a layer structure to define the software architecture, defining all software components at an architecture level, listing all software units, defining the interaction between each piece of software in detail, and embodying static design and dynamic design in the software functional security architecture.
As an improvement of the invention, the static design in step 3) ii includes software hierarchy, data processing logic order, data type and characteristic internal and external structure and constraint, and the dynamic design includes function and behavior, control flow, data flow, time constraint, running state and communication relation.
As an improvement of the present invention, in step 3) iii, the object of the software security analysis is static design and dynamic design at an architecture level and analysis of failure modes of data and time transmission before data flow and control flow, and after the failure modes are analyzed, the failure of the analysis is detected and processed by considering a security mechanism added at a software level.
The invention has the beneficial effects that: the invention designs the indicator lamp system of the full liquid crystal instrument which meets the safety requirement, can meet the functional safety requirement of the whole vehicle, and improves the research and development quality of products, thereby achieving the purpose of avoiding the systematic failure of the ADAS function of the whole vehicle and reducing the random hardware failure at the level of the whole vehicle, and ensuring the personal safety of drivers and traffic participants.
Drawings
FIG. 1 is a functional safety design model of the present invention.
Fig. 2 is a schematic diagram of an internal structure of a main control chip unit according to the present invention.
FIG. 3 is a diagram of the internal structure of a graphics processor unit according to the present invention.
Fig. 4 is a diagram of the functional safety architecture of the system of the present invention.
Fig. 5 is a diagram illustrating a security architecture of a main control chip unit according to the present invention.
FIG. 6 is a diagram of the graphics processor unit security architecture of the present invention.
Detailed Description
The present invention will be further described with reference to fig. 1 to 6, but the scope of the present invention should not be limited thereto, and for convenience of explanation and understanding of the technical solutions of the present invention, the following description is based on the drawings.
The invention aims to overcome the defect that the existing technology can not meet the functional safety target requirement proposed by the ADAS of the whole vehicle, and the whole liquid crystal instrument system can meet the requirement of the relevant functional safety target proposed by the whole vehicle by carrying out relevant safety analysis and design verification from a system level, a software level, a hardware level, a test level and a process system level, carrying out hazard analysis and risk assessment on the whole vehicle level, identifying possible hazards by using a HAZOP method, further evaluating and grading the severity (S), the exposure rate (E) and the controllability (C) of a hazard event, and determining the grade of the ASIL and determining and describing the functional safety target of a project based on the grading of S/E/C parameters. The invention provides an ADAS display function safety design method in a full liquid crystal instrument, which is shown in figure 1 and comprises the following steps: step 1), firstly, designing a system level: i. the design part of the system function safety requirement defines the requirements of detecting the internal and external detection requirements, the constraint conditions and the target values of the system; a system function safety system architecture part, which comprises a power supply unit, a main control chip unit, a graphic processor unit, an alarm sound prompt module and a signal transceiving module, wherein as shown in fig. 2, the main control chip unit comprises a CAN signal processing unit, an analog signal output unit, a RAM processing unit, a ROM processing unit, a CPU unit, a Clock unit, a power supply processing unit, a CAN signal output unit, an internal communication processing unit and an analog signal processing unit, as shown in fig. 3, the graphic processor unit comprises a digital signal processing unit, a RAM processing unit, a ROM processing unit, a CPU unit, a Clock unit, a power supply processing unit and a digital signal output unit, the main control chip unit is connected with the power supply unit, the graphic processor unit and the alarm sound prompt, and an ADAS signal is transmitted to the main control chip unit through the CAN signal; the safety analysis of the system function safety system layer, performing FMEA analysis and DFA analysis on the components defined in the system, and adding related safety mechanisms to improve the system function safety architecture after analyzing the modules related to each safety path in the system, as shown in FIG. 4, adding related safety mechanisms to an IPC-MCU and an IPC-MPU in a function safety critical path after safety analysis, wherein a main control chip unit comprises input signal monitoring, power supply monitoring, buzzer monitoring and main control chip monitoring, and a graphic processor unit comprises input alarm state signal monitoring, graphic processor monitoring and graphic processing unit output monitoring; step 2), the design part for the hardware level according to the design output of the system level comprises the following steps: designing hardware function safety requirements, designing a hardware function safety architecture, analyzing hardware safety and designing hardware function safety in detail; step 3), designing a software layer according to the design of the system layer: i. designing software function safety requirements, including refining the function safety design of a software layer required by the software function safety requirements, defining the software performance and meeting the safety requirements from a hardware layer according to the function safety requirements released by a system; designing a software function safety architecture, and designing the software architecture according to the software function safety requirement; software security analysis, namely performing functional security analysis and DFA analysis on software aiming at the output of the architecture level; designing a software function safety unit, namely refining components, interfaces and functions defined by a software structure level and realizing a software unit corresponding to a framework; and 4), verifying the design of a system level, a hardware level and a software level. As shown in fig. 5, the master chip unit in step 1) iii adds E2E protection of CAN signal, output monitoring of sound module, ECC protection for CPU Core self-test, ROM processing unit and RAM processing unit, clock protection during program operation by watchdog with independent event reference, output monitoring of power module, signal value range check of analog signal output and E2E protection of digital signal, as shown in fig. 6, the graphics processor unit in step 1) iii adds E2E protection of digital signal, E2E protection for CPU Core self-test, ECC protection for ROM processing unit and RAM processing unit, clock protection during program operation by watchdog with independent event reference, output monitoring of power module and cyclic code check protection of digital image output, the hardware function safety requirement design in step 2) includes function safety requirement released according to system, wherein, functional safety design refinement is carried out on functional safety requirements allocated to hardware, refinement is carried out on fault tolerance in a system, protection is carried out on common cause failure, special requirements on functions and performances of the hardware and non-functional requirements are carried out, the hardware functional safety architecture design in the step 2) is designed on a hardware component level according to the output of the hardware safety requirements, the hardware safety analysis in the step 2) is carried out on the safety analysis on a hardware level according to an initial architecture of the hardware, FMEA and DFA analysis are carried out on an ASILA system, the hardware functional safety detailed design in the step 2) is designed on a component level, a component unit totally embodied by an architecture unit is further refined into each part, the software functional safety architecture design in the step 3) ii considers the definition of a software architecture by using a layer structure, and the definition of all software components on the architecture level, Listing all software units, defining the interaction among the software in detail, embodying static design and dynamic design in a software function safety architecture, wherein the static design in the step 3) ii comprises a software hierarchical structure, a data processing logic sequence, a data type and characteristic internal and external structures and constraints, the dynamic design comprises functions and behaviors, a control flow, a data flow, a time constraint, an operation state and a communication relation, and in the step 3) iii, the object of software safety analysis is static design and dynamic design at an architecture level and analysis of failure modes of data and time transmission before the data flow and the control flow, and after the failure modes are analyzed, the analyzed fault is detected and processed by considering a safety mechanism added at a software level.
Finally, it should be noted that: although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that various modifications can be made to the embodiments described in the foregoing embodiments, or some or all of the technical features of the embodiments can be equivalently replaced, and the modifications or the replacements do not make the essence of the corresponding technical solutions depart from the scope of the embodiments of the present invention.

Claims (10)

1. A safety design method for an ADAS display function in a full liquid crystal instrument is characterized by comprising the following steps:
step 1), firstly, designing a system level:
the design part of the system function safety requirement defines the inherited requirement, and identifies the requirements of the internal and external detection requirements, the constraint conditions and the target value of the detection system;
the system function safety system architecture part comprises a power supply unit, a main control chip unit, a graphic processor unit, an alarm sound prompt module and a signal transceiving module, wherein the main control chip unit comprises a CAN signal processing unit, an analog signal output unit, a RAM processing unit, a ROM processing unit, a CPU unit, a Clock unit, a power supply processing unit, a CAN signal output unit, an internal communication processing unit and an analog signal processing unit;
safety analysis of a system function safety system level, wherein FMEA analysis and DFA analysis are carried out on components defined in the system;
step 2), the design part for the hardware level according to the design output of the system level comprises the following steps: designing hardware function safety requirements, designing a hardware function safety architecture, analyzing hardware safety and designing hardware function safety in detail;
step 3), designing a software layer according to the design of the system layer:
designing software function safety requirements, including refining the function safety design of a software layer required by the software function safety requirements, defining the software performance and meeting the safety requirements from a hardware layer according to the function safety requirements released by a system;
designing a software function safety architecture, and designing the software architecture according to the software function safety requirement;
software safety analysis, namely performing functional safety analysis and DFA analysis on software aiming at the output of the architecture level;
the software function safety unit design is to refine the components, interfaces and functions defined by the software structure level and realize the software unit corresponding to the architecture;
and 4), verifying the design of a system level, a hardware level and a software level.
2. The ADAS display function safety design method in full liquid crystal instrument as claimed in claim 1, wherein the main control chip unit in step 1) iii adds E2E protection of CAN signal, output monitoring of sound module, self test for CPU Core, ECC protection for ROM processing unit and RAM processing unit, clock protection during program operation through watchdog with independent event reference, output monitoring of power module, signal value range check of analog signal output and E2E protection of digital signal.
3. The ADAS display function security design method for all-liquid-crystal instrument as claimed in claim 2, wherein the graphics processor unit in step 1) in iii adds E2E protection for digital signals, self-test for CPU Core, ECC protection for ROM processing unit and RAM processing unit, clock protection during program operation through watchdog with independent event reference, output monitoring of power module and CRC protection for digital image output.
4. The ADAS display functional safety design method in full liquid crystal instrument of claim 1, wherein the hardware functional safety requirement design in step 2) includes functional safety requirements released according to the system, wherein the functional safety requirements assigned to the hardware are refined in functional safety design, fault tolerance in the system, common cause failure protection, special requirements on the function and performance of the hardware, and non-functional requirements.
5. The ADAS display function safety design method for all-liquid-crystal instruments according to claim 4, wherein the hardware function safety architecture design in step 2) is a hardware component level design based on hardware safety requirement output.
6. The ADAS display function safety design method for full liquid crystal instrument of claim 5, wherein the hardware safety analysis in step 2) is a safety analysis on hardware level according to the initial architecture of hardware, and FMEA and DFA analysis are performed for ASIL A system.
7. The ADAS display function safety design method in full liquid crystal instrument according to claim 6, wherein the detailed hardware function safety design in step 2) is a design on the component level, and the assembly unit embodied by the architecture unit is further refined into each part.
8. The ADAS display function safety design method for all-liquid-crystal instrument according to claim 1, wherein the software function safety architecture design in step 3) ii considers the use of a layer structure to define the software architecture, define all software components at the architecture level, list all software units, define the interaction between each software in detail, and embody static design and dynamic design in the software function safety architecture.
9. The ADAS display function safety design method in full liquid crystal instrument as claimed in claim 8, wherein the static design in step 3) ii includes software hierarchy, data processing logic sequence, data type and feature internal and external structure and constraints, and the dynamic design includes function and behavior, control flow, data flow, time constraint, operation status and communication relationship.
10. The ADAS display function safety design method for all-liquid-crystal instruments according to claim 1, wherein in step 3) iii, the objects of software safety analysis are static design and dynamic design at architecture level and analysis of failure modes of data and time transmission between data flow and control flow, and after the failure modes are analyzed, the analyzed faults are detected and processed by considering the safety mechanism added at software level.
CN202011522908.0A 2020-12-22 2020-12-22 ADAS display function safety design method in all-liquid-crystal instrument Pending CN112287466A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011522908.0A CN112287466A (en) 2020-12-22 2020-12-22 ADAS display function safety design method in all-liquid-crystal instrument

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011522908.0A CN112287466A (en) 2020-12-22 2020-12-22 ADAS display function safety design method in all-liquid-crystal instrument

Publications (1)

Publication Number Publication Date
CN112287466A true CN112287466A (en) 2021-01-29

Family

ID=74425942

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011522908.0A Pending CN112287466A (en) 2020-12-22 2020-12-22 ADAS display function safety design method in all-liquid-crystal instrument

Country Status (1)

Country Link
CN (1) CN112287466A (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105216649A (en) * 2015-11-03 2016-01-06 成都雅骏新能源汽车科技股份有限公司 A kind of novel entire car controller being applicable to pure electric automobile
CN109389407A (en) * 2017-08-09 2019-02-26 华东师范大学 A kind of guarantee of automobile electronics functional safety and verification method
CN209305503U (en) * 2018-11-23 2019-08-27 常州市武进区半导体照明应用技术研究院 A kind of automobile instrument system based on can bus
CN110254512B (en) * 2019-06-24 2020-10-20 清华大学 Design method for functional safety architecture of steering system of distributed intelligent electric vehicle

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105216649A (en) * 2015-11-03 2016-01-06 成都雅骏新能源汽车科技股份有限公司 A kind of novel entire car controller being applicable to pure electric automobile
CN109389407A (en) * 2017-08-09 2019-02-26 华东师范大学 A kind of guarantee of automobile electronics functional safety and verification method
CN209305503U (en) * 2018-11-23 2019-08-27 常州市武进区半导体照明应用技术研究院 A kind of automobile instrument system based on can bus
CN110254512B (en) * 2019-06-24 2020-10-20 清华大学 Design method for functional safety architecture of steering system of distributed intelligent electric vehicle

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
ISO26262标准: "《道路车辆功能安全-ISO26262标准》", 14 July 2016 *
代政: "电动汽车全液晶仪表***的硬件设计", 《电子设计工程》 *

Similar Documents

Publication Publication Date Title
US8473330B2 (en) Software-centric methodology for verification and validation of fault models
JP5096352B2 (en) A method for modeling the effects of failures in system behavior.
US10539955B2 (en) Failure analysis validation and visualization
Srivastava et al. The case for software health management
US20150121148A1 (en) Malfunction influence evaluation system and evaluation method
Kumar et al. Reliability analysis of safety‐critical and control systems: a state‐of‐the‐art review
Nggada Software failure analysis at architecture level using FMEA
Munir Safety Assessment and Design of Dependable Cybercars: For today and the future
CN110175359B (en) Method and device for modeling security of complex system based on business process
JP5680514B2 (en) Computer having self-diagnosis function, software creation method, and software creation device
CN111639872B (en) Method for selecting and verifying civil aircraft failure mode and impact analysis test method
Dajsuren et al. Safety analysis method for cooperative driving systems
CN112287466A (en) ADAS display function safety design method in all-liquid-crystal instrument
CN110531608B (en) High-reliability electronic equipment quantitative FMECA analysis method and system based on redundancy design
Liu et al. Defect prediction of radar system software based on bug repositories and behavior models
Zeller et al. Combination of component fault trees and Markov chains to analyze complex, software-controlled systems
CN106650945B (en) A kind of software architecture security assessment method based on evidence combining theory
Walker et al. Semi-automatic fmea supporting complex systems with combinations and sequences of failures
Karanikas Documentation of assumptions and system vulnerability monitoring: the case of system theoretic process analysis (stpa)
Wijayarathna et al. Extending fault trees with an AND-THEN gate
Menon et al. Optimization of PHM system for electronic assemblies using maintenance aware design environment software
CN117350705B (en) Method, system, storage medium and electronic device for equipment health management
Hewett et al. A risk assessment model of embedded software systems
de Matos et al. Using design patterns for safety assessment of integrated modular avionics
CN110223416B (en) Raw data analysis method of electric vehicle and electric vehicle

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20210129