GB 47955-2026Intelligent and connected vehicles - Safety requirements for combined driver assistance systems (English PDF)

4.1 General Requirements

4.1.1 The system design should enable the driver to continuously perform the corresponding dynamic driving tasks and meet the requirements of 4.8.3.

4.1.2 The system design should be able to effectively address reasonably foreseeable driver misuse.

4.1.3 At all times, the system shall be able to respond to effective motion control interventions or system disengagement actions performed by the driver, and comply with 4.8.1.3. And the requirements of 4.8.2.

4.1.4 The system and its functions should only assist the driver in controlling the vehicle's movement within the designed operating speed range.

4.1.5 When the system is active in a Class A road environment, the maximum speed that the driver can set should not exceed the maximum speed allowed within the corresponding ODC. The maximum speed limit for Class A road environments. Tests should be conducted according to 9.3, and the stable speed of the test vehicle should not exceed the speed specified in the system's ODC. There is a maximum speed limit for Class A road environments.

4.1.6 When the system is active in a Class B road environment, the maximum speed that the driver can set should not exceed the maximum speed allowed within the corresponding ODC. The maximum speed limit for Class B road environments. The test shall be conducted according to 9.3, and the stable speed of the test vehicle should not exceed the speed specified in the system's ODC. There are maximum speed limits for Class B road environments.

4.1.7 The system's objectives should comply with road traffic regulations. Note

1.The "target should" requirements mentioned in this document refer to situations where the test vehicle fails to meet the requirements only during road testing due to external factors. At that time, compliance verification is required based on the documentation provided by the vehicle manufacturer. Note

2.The "target should" requirement in this clause refers to road traffic regulations that the system cannot handle (e.g., regional traffic restrictions, temporary road closures). (e.g., closed), as required by the vehicle manufacturer in the system user manual [7.2e].

4.1.8 The system's objective should be to enable vehicles to adapt to surrounding traffic conditions, thereby avoiding disruption of normal traffic flow, and to meet the following requirements.

a) Adapt to the conditions of other road users and do not stop and wait without a valid reason;

b) Respond promptly to relevant traffic control facilities around the vehicle;

c) Do not perform emergency braking or emergency steering measures without cause.

4.1.9 The system aims to detect and respond to other traffic participants, road infrastructure, and obstacles in the road environment to which it is applicable. The system should alert the driver to collision risks and help avoid collisions. This is especially important if the system is active in Class A or Class B road environments. The system shall be tested according to 9.4.6, 9.4.7, 9.4.10.2.2, and 9.4.11.The vehicle should not collide with the system without intervention from the test personnel. If the system can remain active in a Class B road environment, conduct tests according to 9.5.2, 9.5.4~9.5.8, ensuring the vehicle operates without human intervention. Under normal circumstances, no collision should occur. The system is permitted to comply with the requirements of this clause when interacting with other driver automation systems. Execution The test required by this clause is as follows:

4.2 Interaction between the system and other driving automation systems

4.2.1 Vehicle manufacturers shall provide transition strategies between the system and other driving automation systems (e.g., control optimization) in accordance with the requirements of Appendix C. Explanation of the prior (such as suppression or interruption of other driving automation systems), the switching strategy should ensure the safe operation of the vehicle.

4.2.2 The system shall not suppress or interrupt AEBS that is performing emergency braking.

4.2.3 When the system is active, except as necessary by the vehicle manufacturer as stated in 4.2.1, other driving automation systems shall not be controlled. Except in cases where the driver is in the driver's seat, no other driver automation system should assist the driver in continuously performing lateral and longitudinal motion control.

4.3 Detection and Response of ODC Boundary

4.3.1 Vehicle manufacturers shall specify the ODC elements of the system and functions in accordance with GB/T 45312, and the specified ODC elements shall conform to... Meet the following requirements.

a) If the system can be active in a Class A road environment, the elements must at least include road markings, road signs, and toll collection points. Station, road construction, ramps, tunnels, motor vehicles, pedestrians, obstacles, design operating speed range, lane width, time, weather environment;

b) If the system can be active in a Class B road environment, the elements must include at least road traffic markings, traffic lights, and road intersections. Traffic signs, road construction, intersections, roundabouts, tunnels, motor vehicles, non-motor vehicles, pedestrians, obstacles, design operating speed range, vehicles Road width, time, and weather conditions.

4.3.2 For the elements involved, the vehicle manufacturer shall provide a description of the system and functional ODD boundaries, which shall meet the following requirements.

a) List the system and functional ODD boundaries that the system is capable of detecting, along with the relevant detection methods used;

b) A strategy description to alert the driver when the system detects that it has exceeded, is about to exceed, or is approaching the system or functional ODD boundary;

c) If the system or function can remain active before entering standby mode after detecting that it has exceeded the system or function's ODD boundary. The strategy's rationality and security are demonstrated in a live state.

d) Describe the boundaries of undetectable system and functional ODDs.

4.3.3 Vehicle manufacturers shall at least verify the ODC elements covered in 4.3.1.

4.3.4 The system should continuously probe its applicable ODD boundaries while in an active state, and should meet the following requirements.

a) Issue a warning when the system or functional ODD boundary is detected, or when the system or functional ODD boundary is about to be crossed. Signal;

b) When the system's ODD boundary is exceeded, a DCA (Distribution Control Action) is issued, conforming to

4.8.4.2 and 4.8.4.3, and the system is terminated in a controlled manner. Control assistance provided to the driver.

4.3.5 The vehicle manufacturer shall, in accordance with the requirements of Appendix C, provide the means to terminate the control assistance provided to the driver as specified in 4.3.4b). illustrate. 4.3.6 (Regarding 4.3.2d), the vehicle manufacturer shall provide information that even if the relevant system or functional ODD boundary cannot be detected, it will not affect the system. Explanation of the impact on the safe operation of the function.

4.4 Controllability

4.4.1 The system should be designed to remain controllable for the driver under at least the following conditions, and the driver's risk under each relevant condition should be assessed. Reaction time is designed to allow for safe motor control interventions at any time.

a) System failure;

b) Reaching or about to exceed the system's ODD boundary;

c) The system disables the non-lane cruise control function.

4.4.2 Vehicle manufacturers shall provide controllability design specifications in accordance with the requirements of Appendix C.

4.4.3 When the system is active, in addition to increasing deceleration to ensure driving safety, the vehicle's braking and acceleration behaviors should respond to the driver's... Personnel and other traffic participants are able to respond safely.

4.5 Speed Limiting Assist

4.5.1 The system's objective should be to determine the current speed limit on the road.

4.5.2 The system should continuously display the determined current road speed limit and the system's cruise target speed.

4.5.3 The system's target cruise speed should be determined using one of the following two methods.

a) The speed set by the driver;

b) The current road speed limit determined by the system.

Note. The vehicle speed at the moment the system is activated can be considered as the speed set by the driver.

4.5.4 Except for 4.8.2.2c), when the system achieves stable speed control, the vehicle speed should not exceed the cruise target speed.

4.5.5 The system should provide the driver with a way to adjust the vehicle speed set by the driver.

4.5.6 When the vehicle speed exceeds the current road speed limit determined by the system, the system should issue continuous optical and acoustic warnings. Signal.

4.5.7 If the current road speed limit determined by the system changes, the following requirements shall be met.

a) If the target vehicle speed during cruise was the speed set by the driver before the road speed limit changed, and that speed is lower than the speed set by the system in the previous and current cycles. If the road speed limit is determined this time, the system will not automatically adjust the cruise target speed to the road speed limit determined this time;

b) If the road speed limit determined by the system is lower than the cruise target speed, the cruise target speed will be automatically adjusted or adjusted after the speed limit is set by the driver. The speed limit will be adjusted to the road speed limit determined by the system for this instance.

4.5.8 In addition to 4.5.7, if other circumstances exist, the vehicle manufacturer shall provide the current road restrictions determined by the system, in accordance with the requirements of Appendix C. Explanation of the control strategy after the braking speed changes.

4.5.9 If the system allows the driver to set a default offset, the default offset set by the driver should not cause the cruise target speed to exceed the system's set speed. The current speed limit for the road is determined.

4.6.1 Lane Cruise Control Function

4.6.1.1 The system should have the ability to decelerate and pass through curves, and the system's objective, when activated, should be to keep the vehicle within the lateral range declared by the vehicle manufacturer. Do not deviate from the lane within the acceleration limit.

Note. Curve deceleration capability refers to the ability to reduce vehicle speed in response to road curvature.

4.6.1.2 Vehicle manufacturers shall, in accordance with the requirements of Appendix C, provide a description of the vehicle's lateral acceleration limits and vehicle speed control strategy. The document allows vehicle manufacturers to declare different maximum lateral accelerations for different speed ranges.

4.6.1.3 The system shall provide control assistance in accordance with the safety concept stated by the vehicle manufacturer in Appendix C, provided that all of the following conditions are met. To prevent the vehicle from suddenly losing lateral control, the system alerts the driver to the current situation through continuous optical signals, supplemented by acoustic or tactile signals. state.

a) The vehicle meets the lateral acceleration limits stated by the vehicle manufacturer;

b) The driver did not provide effective input to the steering wheel;

c) Either of the vehicle's front wheels begins to cross the outer edge of the lane line.

4.6.1.4 The maximum lateral acceleration declared by the vehicle manufacturer shall meet the following requirements.

a) For M1 and N1 category vehicles, the maximum lateral acceleration shall not exceed 3 m/s^2;

b) For vehicles of categories M2, M3, N2 and N3, the maximum lateral acceleration shall not exceed

4.6.1.5 Except as provided in

4.6.1.6 and 4.6.1.7, the lateral acceleration of the vehicle when the system is active should not exceed the maximum value declared by the vehicle manufacturer. The lateral acceleration must be greater than

0.3 m/s^2, and the vehicle's lateral acceleration must meet the following requirements.

a) For M1 and N1 category vehicles, the lateral acceleration shall not exceed 3 m/s^2;

b) For vehicles in categories M2, M3, N2 and N3, the lateral acceleration shall not exceed

4.6.1.6 To maintain system controllability, the system is permitted to fail to meet the requirements of

4.6.1.5 for 2 consecutive seconds. However, under this condition, the vehicle... The vehicle's lateral acceleration should not exceed

1.4 times the maximum lateral acceleration declared by the vehicle manufacturer, and should meet the following requirements.

a) For vehicles in categories M1 and N1, the lateral acceleration shall not exceed

b) For vehicles in categories M2, M3, N2 and N3, the lateral acceleration shall not exceed

4.6.1.7 For M1 category vehicles, if the system is designed to maintain controllability, it may not meet the requirements of

4.6.1.6 in certain situations. The requirement is that a vehicle's lateral acceleration is permitted to exceed 3 m/s^2 when all of the following requirements are met.

a) The system issues an optical warning signal when the vehicle's lateral acceleration exceeds 3 m/s^2;

b) The system did not issue a driver disengagement prompt or warning signal;

c) The system is controllable by the driver.