Formal Verification of Automotive Design in Compliance With ISO 26262 Design Verification Guidelines

Bahig, Ghada; El-Kadi, Amr

doi:10.1109/access.2017.2683508

Cited by 28 publications

(15 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, the authors emphasize the necessity for a tool qualification. Bahig and El-Kadi [4] come to similar conclusions and present a general process based on formal modeling and model checking.…”

Section: Formal Verification Of Automotive Systemsmentioning

confidence: 55%

Formal Verification of a Fail-Operational Automotive Driving System

Schmid,

Schraufstetter,

Fritzsch

et al. 2021

Preprint

View full text Add to dashboard Cite

A fail-operational system for highly automated driving must complete the driving task even in the presence of a failure. This requires redundant architectures and a mechanism to reconfigure the system in case of a failure. Therefore, an arbitration logic is used. For functional safety, the switch-over to a fall-back level must be conducted in the presence of any electric and electronic failure.To provide evidence for a safety argumentation in compliance with ISO 26262, verification of the arbitration logic is necessary. The verification process provides confirmation of the correct failure reactions and that no unintended system states are attainable. Conventional safety analyses, such as the failure mode and effect analysis, have its limits in this regard. We present an analytical approach based on formal verification, in particular model checking, to verify the fail-operational behaviour of a driving system. For that reason, we model the system behaviour and the relevant architecture and formally specify the safety requirements. The scope of the analysis is defined according to the requirements of ISO 26262. We verify a fail-operational arbitration logic for highly automated driving in compliance with the industry standard. Our results show that formal methods for safety evaluation in automotive fail-operational driving systems can be successfully applied. We were able to detect failures, which would have been overlooked by other analyses and thus contribute to the development of safety critical functions.

show abstract

Section: Formal Verification Of Automotive Systemsmentioning

confidence: 55%

Formal Verification of a Fail-Operational Automotive Driving System

Schmid,

Schraufstetter,

Fritzsch

et al. 2021

Preprint

View full text Add to dashboard Cite

show abstract

“…And we propose design guidelines to meet safety requirements. In addition, the EMB system was implemented based on the proposed hardware and software guidelines [1]. The implemented EMB system meets Part5, 6 of ISO26262.…”

Section: Literature Reviewmentioning

confidence: 99%

Implementation of ISO Check For Early Failure Detection in Vehicle Design Using FPGA

Thiyaneswaran¹

2021

TURCOMAT

View full text Add to dashboard Cite

To be more concerned with the fatal cause during the real time experiences in automotive industry in the ECU failures, it shall be a preventive measure to detect the failure of the ECU’s at the probation period of modelling it. MATLAB, the tool used for designing the ECU’s would be useful also to check this with the help of its inbuilt tool called MODEL ADVISOR. With the m-script, we can use to customize the rules for which there might be the reason for failure. Some of the model level failures are detected using this model checker tool. Before we dump the code into FPGA or an ECU, the code level failures can be detected via polyspace, which is also a tool by MATLAB. With this earlier detection of failures before dumping the code into ECU, this saves the lives of many people during the emergency situation when there is a possibility of failure of ECU. Also production loss of the component can be reduced along with this the standardized product can be released, so that it would be the safe for use.

show abstract

“…Recently, a second version of the standard was released in 2018, further refining the guidance to safety activities related to the semiconductor development like fault injection [2]. Although being just a recommendation, the ISO 26262 is implicitly mandatory due to existing regulations that demand "current state of science and technology" when developing safety applications [3,4].…”

Section: Introductionmentioning

confidence: 99%

Enabling ISO 26262 Compliance with Accelerated Diagnostic Coverage Assessment

2020

View full text Add to dashboard Cite

Modern vehicles are integrating a growing number of electronics to provide a safer experience for the driver. Therefore, safety is a non-negotiable requirement that must be considered through the vehicle development process. The ISO 26262 standard provides guidance to ensure that such requirements are implemented. Fault injection is highly recommended for the functional verification of safety mechanisms or to evaluate their diagnostic coverage capability. An exhaustive analysis is not required, but evidence of best effort through the diagnostic coverage assessment needs to be provided when performing quantitative evaluation of hardware architectural metrics. These metrics support that the automotive safety integrity level—ranging from A (lowest) to D (strictest) levels—was obeyed. In this context, this paper proposed a verification solution in order to build an approach that can accelerate the diagnostic coverage assessment via fault injection in the semiconductor level (i.e., hardware description language). The proposed solution does not require any modification of the design model to enable acceleration. Small parts of the OpenRISC architecture (namely a carry adder, the Tick Timer peripheral, and the exception block) were used to illustrate the methodology.

show abstract

Formal Verification of Automotive Design in Compliance With ISO 26262 Design Verification Guidelines

Cited by 28 publications

References 12 publications

Formal Verification of a Fail-Operational Automotive Driving System

Formal Verification of a Fail-Operational Automotive Driving System

Implementation of ISO Check For Early Failure Detection in Vehicle Design Using FPGA

Enabling ISO 26262 Compliance with Accelerated Diagnostic Coverage Assessment

Contact Info

Product

Resources

About