ODD description methods for automated driving vehicle and verifiability for safety

Abstract

There is no standard method for describing the Operational Design Domain (ODD) in automated driving vehicles. There are many elements in the operating domain, including the external environment, and it is necessary to connect them with the internal state of the automated driving system. Its content ultimately requires the user's understanding. The description method of this ODD is summarised from the aspect of safety. Consistency with standards and guidelines will also be considered.

Applying the Operational Design Domain Concept to Vehicles Equipped with Advanced Driver Assistance Systems for Enhanced Safety

“…Te analysis of ODD presentation reveals that the presentation of ADAS's ODD is often couched in ambiguous terms regarding limitations and performance, with phrases such as "can be used," "may not operate normally," and "may operate unexpectedly." Furthermore, the inconsistency in ODD presentation and the representation of ODD limitations are likely to cause confusion among ADAS users, as indicated in [1,9].…”

“…In other words, the ODD is an environment where an ADS can be stably used. To standardize the ODD, the Automated Vehicle Safety Consortium (AVSC) of SAE, Public Available Specifcation (PAS) 1883 of the British Standard Institution (BSI), and National Highway Trafc Safety Administration (NHTSA) defned the ODD and classifed its elements [9].…”

“…Ito [9] reported that no standard method exists for describing the ODD of AVs and only a few elements (e.g., the external environment and existing ODDs) should be connected to the ADS. Additionally, as the content must be understood by each user, documents describing sODD should provide appropriate information in terms of safety and maintain consistency with standards and guidelines.…”

Experiences with the automotive SPICE for cybersecurity assessment model and tools

“…25 And users expect a high level of safety [26][27][28][29] and security. [30][31][32][33][34][35][36][37] More functions are added constantly and the level of autonomous drive [38][39][40][41][42] is increasing. Such vehicles need connectivity and software updates and show vulnerabilities toward attackers.…”