GB/T 34590.9-2022Road vehicles - Functional safety - Part 9: Automotive safety integrity level(ASIL)-oriented and safety-oriented analyses (English PDF)

Foreword

This document was drafted in accordance with the rules provided in GB/T 1.1-2020

Directives for Standardization - Part 1.Rules for the Structure and Drafting of

Standardizing Documents.

This document is Part 9 of GB/T 34590 Road Vehicles - Functional Safety. GB/T 34590

has issued the following parts.

-- Part 1.Vocabulary;

-- Part 2.Management of Functional Safety;

-- Part 3.Concept Phase;

-- Part 4.Product Development at the System Level;

-- Part 5.Product Development at the Hardware Level;

-- Part 6.Product Development at the Software Level;

-- Part 7.Production, Operation, Service and Decommissioning;

-- Part 8.Supporting Processes;

-- Part 9.Automotive Safety Integrity Level (ASIL)-oriented and Safety-oriented

Analyses;

-- Part 10.Guideline;

-- Part 11.Guidelines on Applications to Semiconductors;

-- Part 12.Adaptation for Motorcycles.

This document serves as a replacement for GB/T 34590.9-2017 Road Vehicles -

Functional Safety - Part 9.Automotive Safety Integrity Level (ASIL)-oriented and

Safety-oriented Analyses. In comparison with GB/T 34590.9-2017, apart from

structural adjustments and editorial modifications, the main technical changes are as

follows.

-- The scope of application of the standard is revised from "mass-produced

passenger cars" to "mass-produced road vehicles other than mopeds" (see

Chapter 1; see Chapter 1 of the 2017 edition);

-- The adaptation requirements for motorcycles are added (see 4.5);

-- The adaptation requirements for goods vehicles, buses, special vehicles, and

trailers are added (see 4.6);

-- The objectives of requirements decomposition on ASIL tailoring are changed

(see 5.1; see 5.1 of the 2017 edition);

-- The general rules of the requirements decomposition on ASIL tailoring are

changed (see 5.2; see 5.2 of the 2017 edition);

-- The contents that the initial safety requirements shall be decomposed into

redundant safety requirements are changed (see 5.4.3; see 5.4.3 of the 2017

edition);

-- The contents that each decomposed safety requirement shall comply with the

initial safety requirement by itself are changed (see 5.4.4; see 5.4.4 of the 2017

edition);

-- The content "If the violation of an initial safety requirement cannot be prevented

by switching off the element, then adequate availability of the sufficiently

independent elements implementing the decomposed safety requirements shall

be shown" is deleted (see 5.4.8 of the 2017 edition);

-- The general rules of the criteria for the coexistence of elements are changed (see

6.2; see 6.2 of the 2017 edition);

-- The content "the safety requirements shall be assigned to sub-elements of

elements before the application of this chapter" is deleted (see 6.4.2 of the 2017

edition);

-- The contents "If sub-elements implementing requirements with different ASILs

coexist in the same element" are changed (see 6.4.4; see 6.4.5 of the 2017

edition);

-- The objectives of dependent failure analysis are changed (see 7.1; see 7.1 of the

2017 edition);

-- The general rules of dependent failure analysis are changed (see 7.2; see 7.2 of

the 2017 edition);

-- The prerequisites for dependent failure analysis are changed (see 7.3.1; see 7.3.1

of the 2017 edition);

-- The "repair error" is changed to "service failure" [see 7.4.4 e); see 7.4.4 e) of the

2017 edition];

-- The content "ageing and wear" is added [see 7.4.4 i)];

-- The requirement for the level of detail and rigor of dependent failure analysis is

added (see 7.4.8);

-- The verification basis requirements for dependent failure analysis are added (see

7.4.9);

-- The dependent failure analysis verification report is added (see 7.5.2);

-- The objectives of safety analysis are changed (see 8.1; see 8.1 of the 2017

edition);

-- The requirements and recommendations for safety analysis are changed (see

8.4.1; see 8.4.1 of the 2017 edition);

-- The safety analysis verification report is added (see 8.5.2).

This document is modified in relation to ISO 26262-9.2018 Road Vehicles - Functional

safety - Part 9.Automotive Safety Integrity Level (ASIL)-oriented and Safety-oriented

Analyses.

The technical differences between this document and ISO 26262-9.2018, and the causes

for these differences are as follows.

-- The description of T&B vehicles is changed from "trucks, buses, trailers, and

semi-trailers" to "goods vehicles, buses, special vehicles, and trailers" (see 4.6;

see 4.6 of ISO 26262-9.2018), so that the vehicle types are consistent with that

specified in GB/T 3730.1-2022 Terms and Definitions of Motor Vehicles,

Trailers and Combination Vehicle - Part 1.Types.

This document also makes the following editorial modifications.

-- The order of paragraphs in the Scope is adjusted;

-- The normatively referenced GB/T 34590.12-2022 is included in the list in

Chapter 2;

-- The addresses of the terminology database maintained by ISO and IEC for

standardization in Chapter 3 of ISO 26262-9.2018 are deleted;

-- The clause number 6.5.1 in ISO 26262-9.2018 is deleted.

Please be noted that certain content of this document may involve patents. The

institution issuing this document does not undertake the responsibility of identifying

these patents.

This document was proposed by the Ministry of Industry and Information Technology

of the People's Republic of China.

This document shall be under the jurisdiction of the National Technical Committee of

Auto Standardization (SAC/TC114).

The drafting organizations of this document. China Automotive Technology and

Research Center Co., Ltd., Schaeffler (China) Co., Ltd., Xingkedi Technology (Taizhou)

Co., Ltd., Bosch Automotive Products (Suzhou) Co., Ltd., Weilai Automobile (Anhui)

Co., Ltd., Shanghai Volkswagen Co., Ltd., FAW Jiefang Automobile Co., Ltd., Great

Wall Motor Co., Ltd., Pan Asia Technical Automotive Center Co., Ltd., United

Automotive Electronic Systems Co., Ltd., Hella Shanghai Electronics Co., Ltd.,

WATTPACK Technology Co., Ltd., Shanghai Automobile Group Co., Ltd., China FAW

Group Co., Ltd., BYD Auto Industry Co., Ltd., Daimler Greater China Co., Ltd., SAIC

MAXUS Automotive Co., Ltd., Zhuzhou CRRC Times Electric Co., Ltd., CRRC

Electric Vehicle Co., Ltd., Huawei Technologies Co., Ltd., LIGOO (Shandong) New

Energy Technology Co., Ltd., ZF Automotive Technologies (Shanghai) Co., Ltd.,

Beijing Borgward Automotive Co., Ltd., Huating (Hefei) Power Technology Co., Ltd.,

Shanghai G-Pulse Electronics Technology Co., Ltd., BAIC MOTOR Co., Ltd., Beijing

Baidu Zhixing Technology Co., Ltd., Geely Automobile Research Institute (Ningbo)

Co., Ltd., Yutong Bus Co., Ltd., Hefei JEE Power Systems Co., Ltd., Valeo Automotive

Interior Control (Shenzhen) Co., Ltd., Suzhou Inovance Automotive Co., Ltd., Vitesco

Technology Holding (China) Co., Ltd., SAIC-GM-Wuling Automobile Co., Ltd.,

AIWAYS Automobile (Shanghai) Co., Ltd., Dongfeng Motor Group Co., Ltd., SVOLT

Energy Technology Co., Ltd.

1 Scope

This document specifies the requirements for Automotive Safety Integrity Level

(ASIL)-oriented and safety-oriented analyses, including the following.

2 Normative references

The following documents contain the provisions which, through normative reference in

this document, constitute the essential provisions of this document. For the dated

referenced documents, only the versions with the indicated dates are applicable to this

document; for the undated referenced documents, only the latest version (including all

the amendments) is applicable to this document.

GB/T 34590.1-2022 Road Vehicles - Functional Safety - Part 1.Vocabulary (ISO

26262-1.2018, MOD)

3 Terms and definitions

The terms and definitions defined in GB/T 34590.1-2022 apply to this document.

4 Requirements

The results of safety activities are given as work products. "Prerequisites" are

information which shall be available as work products of a previous phase. Given that

certain requirements of a clause are ASIL-dependent or may be tailored, certain work

products may not be needed as prerequisites.

For items or elements of motorcycles for which requirements of GB/T 34590.12-2022

are applicable, the requirements of GB/T 34590.12-2022 supersede the corresponding

requirements in this document and GB/T 34590.2-2022.

5 Requirements decomposition with respect to ASIL tailoring

The requirements specific to the random hardware failures, including the evaluation of

the hardware architectural metrics and the evaluation of safety goal violations due to

random hardware failures (see GB/T 34590.5-2022, Chapter 8 and Chapter 9) remain

unchanged by ASIL decomposition.

6 Criteria for coexistence of elements

In the case of the coexistence of sub-elements that have different or no ASILs assigned,

or the coexistence of non-safety-related sub-elements with safety-related ones, it can be

beneficial to avoid assigning the ASIL of the element to all the sub-elements.

7 Analysis of dependent failures

Independence is threatened by common cause failures and cascading failures, while

freedom from interference is only threatened by cascading failures.

8 Safety analyses

The objective of safety analyses is to ensure that the risk of a safety goal violation due

to systematic faults or random hardware faults is sufficiently low. Depending on the

application, this is achieved by.

......