Safety Cases and Their Role in ISO 26262 Functional Safety Assessment

Birch, John; Rivett, Roger; Habli, Ibrahim; Bradshaw, Ben; Botham, John; Higham, Dave; Jesty, P H; Monkhouse, Helen; Palin, Robert

doi:10.1007/978-3-642-40793-2_15

Cited by 56 publications

(19 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several research papers have been published making explicit the rationale of the standard using GSN. For instance, Birch et al (2013) present several GSN diagrams to make explicit the link between high-level safety requirements (safety goals) and low level evidences. In this work, the authors do not address the confidence estimation, but they draw several important conclusions about using GSN in certification argumentation.…”

Section: Related Workmentioning

confidence: 99%

Modelling confidence in railway safety case

et al. 2018

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

Modelling confidence in railway safety case

et al. 2018

View full text Add to dashboard Cite

“…For increased safety, an Inverter Safety Unit following the idea presented in [25] is proposed. In order to perform a functional safety assessment according to ISO 26262 [2], this study concentrates on the event 'Unintended vehicle acceleration during a low speed maneuver amongst pedestrians' as defined in [14]. According to the authors, the event is classified as ASIL B which follows from the assessment shown in Table 1.…”

Section: Functional Safety Requirements To Current Accuracymentioning

confidence: 99%

“…DSon ,assumed I R 1 R     ( 14 ) and therefore: λ=ε. Figure 4 reveals the maximum value for λ and, consequently, also for ε.…”

Section: U Ds -Based Current-sensingmentioning

confidence: 99%

Control Strategies and Functional Safety for the Intelligent Stator Cage Drive (ISCAD)

Bachheibl

Dajaku

Patzak

et al. 2015

WEVJ

View full text Add to dashboard Cite

The novel Stator Cage Drive marks a paradigm shift in electrical machine design by substituting layers of windings with stator bars that are short-circuited on one end of the machine. Those bars are individually fed from the opposite end of the machine, utilizing dedicated power electronic switches. Instead of being limited to one fixed MMF-distribution in the air gap, it is now possible to incorporate new degrees of freedom into the control strategy for such a machine, e.g. pole-switching during operation with an asynchronous rotor and the creation of selected harmonics. Compared to conventional designs of traction drives for HEVs or BEVs, this drive architecture achieves a better efficiency, both in peak operation and using common drive cycles, it is cheaper in manufacturing and it also provides better fail-safety. In order to obtain a high-quality MMF-distribution, a number of individually fed stator bars as high as 60 is preferable, which also implies a higher complexity of the control of this machine than for three-phase counterparts. If for example an induction type rotor is chosen, it is possible to vary the number of poles during operation, thus allowing the machine to always operate in the region of highest efficiency, which usually lies in the field weakening region for induction machines. An overview of the capabilities of the ISCAD-Drive is given, the applicability of well-known control methods is investigated and matters of functional safety in current measurement for a high number of phases are discussed.

show abstract

“…Our standpoint here is somewhat similar: without an explicit and adequate representation of a safety case, its analysis is close to impossible, as is the impact that design changes may have on safety. Works such as [2,3,8,19] also stress the importance of having an explicit representation of a safety case. However, in comparison to ours, these works are focused on what a safety case should look like, not on the problems with an incremental approach to safety assurance.…”

Section: Related Workmentioning

confidence: 99%

Is Current Incremental Safety Assurance Sound?

Cassano

Grigorova

Singh

et al. 2015

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Incremental design is an essential part of engineering. Without it, engineering would not likely be an economic, nor an effective, aid to economic progress. Further, engineering relies on this view of incrementality to retain the reliability attributes of the engineering method. When considering the assurance of safety for such artifacts, it is not surprising that the same economic and reliability arguments are deployed to justify an incremental approach to safety assurance. In a sense, it is possible to argue that, with engineering artifacts becoming more and more complex, it would be economically disastrous to not "do" safety incrementally. Indeed, many enterprises use such an incremental approach, reusing safety artifacts when assuring incremental design changes. In this work, we make some observations about the inadequacy of this trend and suggest that safety practices must be rethought if incremental safety approaches are ever going to be fit for purpose. We present some examples to justify our position and comment on what a more adequate approach to incremental safety assurance may look like.

show abstract

Safety Cases and Their Role in ISO 26262 Functional Safety Assessment

Cited by 56 publications

References 9 publications

Modelling confidence in railway safety case

Modelling confidence in railway safety case

Control Strategies and Functional Safety for the Intelligent Stator Cage Drive (ISCAD)

Is Current Incremental Safety Assurance Sound?

Contact Info

Product

Resources

About