A major design goal for the development of advanced automotive systems is to ensure that the intended functionality is free of unreasonable risk. Guidance on how to achieve safety of the intended functionality iso provided by the international standard ISO 21448. If you are keen to get a hands-on introduction to this topic, our “SOTIF for Automotive Professionals” training course is just what you need.
Ensuring the safety of driving automation systems encompasses two aspects, namely the avoidance of unreasonable risk
(1) caused by malfunctioning system behavior as well as
(2) caused by hazards associated with the intended functionality and its implementation, e.g. due to performance limitations.
The first aspect - known as functional safety - has been addressed by the industry for more than a decade and is governed by the well-established ISO 26262 standard. The second aspect - referred to as safety of the intended functionality (SOTIF) - however, is more of an emerging topic and practical guidance is limited.
In this two day SOTIF course, we will
- introduce fundamental concepts terminology,
- review the conceptual framework behind SOTIF,
- provide an overview of the SOTIF lifecycle according to ISO 21448, and
- discuss core activities and methods to achieve SOTIF.
The conveying of theory is supplemented by a wide range of practical examples and hands-on exercises.
Looking for a shorter introduction to SOTIF? Then perhaps our one-day “SOTIF Compact” training course would be a good option?
目标受众
This training class is designed for automotive professionals (development engineers, engineering managers, quality and project managers, safety engineers and managers) involved in the development of driving automation systems or emergency intervention systems, as well as other people interested in SOTIF.
课程亮点
- Systems safety and its aspects SOTIF, functional safety, and cybersecurity
- Application areas for SOTIF and scope of the ISO 21448 standard
- SOTIF terminology (levels of driving automation, ODD, use case, scene, scenario, static and dynamic entities, sense plan act (SPA) model)
- SOTIF conceptual framework (the four scenario categories and their evolution, triggering conditions and functional insufficiencies, the three circle behavioral model)
- Environmental perception
- Scenario description
- SOTIF and V2X
- SOTIF lifecycle overview as per ISO 21448
- Key SOTIF activities and methods
- SOTIF HARA
- SOTIF analysis
- Functional modifications to address SOTIF related risks
- SOTIF verification and validation
- SOTIF release
- Operation phase activities
- Practical examples and hands-on exercises
日程安排
- System safety domains: SOTIF vs. functional safety vs cybersecurity
- What exactly is SOTIF?
- Applicable standards and type approval regulations
- Hands-on: system safety domains
- SAE levels of driving automation
- Environmental perception and the sense plan act (SPA) model
- Introducing SOTIF terminology: use case, scene, scenario, static and dynamic entities, ODD
- SOTIF conceptual framework (SOTIF areas (known/unknown and safe/hazardous scenarios), 4 scenario categories and their evolution, 3 circle behavioral model)
- Hands-on: Scenario description at different levels of abstraction
- SOTIF-related hazardous event model
- Basic concept
- Scope
- SOTIF lifecycle overview
- Identification and evaluation of hazards caused by the intended functionality
- Risk evaluation of the intended function
- Acceptance criteria
- Functional insufficiencies (FIs) and their triggering conditions (TCs)
- Identification and analysis of FIs and TCs
Functional modifications to address SOTIF related risks
- SOTIF V&V strategy
- Validation targets
- Evaluation of known hazardous scenarios
- Evaluation and exploration of unknown scenarios
SOTIF Release
Learning Objectives
By the end of this course, you will have:
- An understanding of the characteristics and benefits of model-based development
- Know-how to apply model-based methods to develop safety-related systems in compliance with ISO 26262
- An understanding of the model-based development process as outlined by ISO 26262
- The ability to assess elements of effective software architecture according to ISO 26262
- An understanding of how to implement software architecture in models
- The skills to analyze and evaluate model structures
- An understanding of how to ensure model quality with effective modeling guidelines
- Ability to recall the approach to tool qualification that aligns with ISO 26262
- Knowledge of how to apply methods to ensure model quality with model testing
- An understanding of the priorities for process adaptation towards ISO 26262 compliance
Certificate of Competency
A fee-based SAE Certificate of Competency can be obtained in this class by passing the evaluation test.
Please contact training@tudoor.com for more information.
我们的培训师