GB/T 41630-2022Performance requirements and test methods for intelligent parking assist system (English PDF)

3.1 Intelligent parking assist system; IPAS

A system that automatically detects the parking space and provides the driver with auxiliary functions such as parking instructions and/or directional control when the vehicle is parked.

NOTE 1: Direction control includes lateral control or lateral and longitudinal combined control.

NOTE 2: Parking space may also be referred to as "parking slot".

NOTE 3: The intelligent parking assist system is hereinafter referred to as the "system".

3.2 Vehicle under test

4.2 System status transition and information prompt

4.2.1 System inactive status

The system inactive status includes the off status and the standby status. In this status, the system shall not control the vehicle.

4.2.2 Slot search status

4.2.2.1 The system shall switch from the inactive status to the working status of slot search in at least one of the following ways:

a) Active activation: The driver actively activates the slot search status mode;

b) Automatic activation: When the vehicle speed reaches a certain threshold, it will automatically enter the slot search status mode.

4.2.2.2 The system shall have the ability to search for parking slot and be able to search for at least one of the following types of parking slots:

a) Category 1 IPAS parking slots are parking slots enclosed by bordering vehicles;

b) Category 2 IPAS parking slots are parking slots enclosed by parking slot defining line.

4.2.2.3 The system shall prompt the parking slot information through the driver's active confirmation or automatic display.

4.2.3 Assisted parking status

4.2.3.1 The initial condition for the system to enter the assisted parking status shall be that the vehicle is stationary. When the driver actively confirms the position of the parking slot, the system shall switch to the assisted parking status.

4.2.3.2 The system shall have at least one of the following control modes to assist the driver to park the vehicle in the parking slot:

a) Lateral control mode: The system controls the lateral movement of the vehicle. The driver controls the longitudinal movement of the vehicle;

b) Lateral and longitudinal combined control mode: The system controls the lateral and longitudinal movement of the vehicle.

4.2.3.3 In the assisted parking status, the system shall send out status and operation information prompts and set the maximum running speed not greater than 10km/h.

When the vehicle speed exceeds the maximum driving speed, the system shall send a prompt message to the driver and exit the assisted parking status.

4.2.3.4 After the system completes the assisted parking control, it shall send a prompt message to the driver and exit to the inactive status.

4.2.4 System exit conditions

In the assisted parking status, the system shall have the function of taking over the control of the vehicle at any time and exiting to the inactive status through the driver's active way. The driver's active exit conditions are described in the system manual. Exit conditions may include, but are not limited to, the following:

- Operate the steering wheel;

- Operate the brake pedal;

- Operate the gear;

- Operate the parking brake.

4.2.5 System failure response

If a fault occurs during system self-inspection and operation, the system shall at least optically prompt the driver with fault information. It can exit to the inactive status.

4.3 Functional safety

The system shall comply with the functional safety requirements of Annex A.

4.4 Electromagnetic compatibility

The electromagnetic compatibility of the system shall meet the requirements of GB 34660.

5.1 Slot search

5.1.1 Category 1 IPAS slot search

Test according to 6.2.1. The system shall search for a parking slot in the slot search status.

5.1.2 Category 2 IPAS slot search

Test according to 6.2.2. The system shall search for a parking slot in the slot search status.

5.3 Test criteria

5.3.1 Test of category 1 IPAS parking slots

Repeat the test according to the test group of 6.2.1. Each of the 6 groups of test items shall be repeated 3 times. At least 2 times shall meet the corresponding requirements of 5.1 and 5.2. If a collision occurs during any group of tests, the test is judged to have failed.

5.3.2 Test of category 2 IPAS parking slots

Repeat the test according to the test group of 6.2.2. Each of the 8 groups of test items shall be repeated 3 times. At least 2 times shall meet the corresponding requirements of 5.1 and 5.2. If a collision occurs during any group of tests, the test is judged to have failed.

6.1 Test environment requirements

The test environment shall meet the following requirements:

a) The wind speed does not exceed 7.9m/s. The relative humidity is less than 95%. There is no rain, snow, fog and so on;

b) The test pavement is a level (slope less than 1%), smooth, dry, concrete or asphalt pavement with good adhesion;

c) The ambient illuminance of the target parking slot is not less than 100lx;

d) There are no interferences that affect the sensor's operation.

If category 2 IPAS test is carried out, in addition to meeting the above requirements, the parking slot defining line shall be free of damage and clearly visible.

6.2 Test items

6.2.1 Category 1 IPAS test method

When the parking assist system is activated, according to Table 1, complete 6 groups of test items with different lateral distances and parking slot arrangements. The vehicle undertest drives to the parking slot at a speed of 10km/h. The speed deviation is ±2km/h.

The driving path is straight. The absolute value of the lateral distance deviation of the vehicle undertest shall not be greater than 0.2m. The absolute value of the angle

A.1 General

When the vehicle safety-related electronic and electrical system malfunctions, it will lead to potential hazardous events (for example, during the normal driving process of the vehicle, an unexpected vehicle control system occurs, resulting in an accident risk).

GB/T 34590 (all parts) clarifies the functional safety requirements that vehicle safety-related electrical and electronic systems shall meet during the safety life cycle, so as to avoid or reduce the risk caused by system failure.

This appendix specifies the documentation, failure strategies and special requirements for validation testing of the intelligent parking assist system (IPAS) in terms of functional safety.

This appendix does not address the nominal performance of the intelligent parking assist system (IPAS). Nor does it serve as specific guidance for the development of functional safety of the IPAS system. Rather, it specifies the methods to be followed in the design process and the information that shall be available for system verification and validation, so as to demonstrate that the system can ensure the realization of the functional safety concept under normal operation and fault conditions and meet all applicable performance requirements specified in this document.

A.2 Documentation

A.2.1 Requirements

Corresponding documents shall be available to illustrate the functional concept, functional safety concept of the system and meet the following requirements:

a) Explain the functional concept of the system, internal and external interfaces, potential failure risks and safety measures;

b) Prove that the system design considers potential failure sources, including random hardware failures and systematic failures, and applies engineering practices in related fields;

Example: Annex E of GB/T 34590.5-2017 gives design practices for random hardware failures.

c) To support the confirmation test, describe how to check the normal operation of the system and the working status of the failure mode.

A.2.2 Dependent item definition file

A.2.2.1 The functional concept of the item shall be described. Provide a list of functional descriptions.

NOTE 1: In GB/T 34590.1, the relevant item refers to one or a group of systems that perform functions at the vehicle level. For example, the definition of the relevant item of the (IPAS) system may include surround view cameras, electronic control units (ECU), steering control modules, longitudinal Control module, ultrasonic radar, and so on.

NOTE 2: Describe and refine the perceptible functions at the vehicle level.

A.2.2.2 The scope of related items shall be defined. Define the systems and elements that belong to the related item. Identify external systems or elements with which they interact.

A.2.2.3 The operating conditions and constraints of the item shall be defined. For the corresponding system functions, the boundaries of the effective working range are described.

Example: Common operating conditions include power supply, vehicle speed, and so on. Common constraints are ambient temperature, humidity, vibration, and so on.

A.2.2.4 Provide schematic diagrams (such as block diagrams) to illustrate the architecture of the item and its internal and external interfaces. In the schematic diagram, the related item components, external interface systems, internal and external interface channels are indicated by serial numbers. Provide a detailed list. Briefly describe the function of each component, system, and interface in the list.

NOTE: If a component integrates multiple functions, it can be represented by multiple modules in the schematic diagram for clarity and ease of explanation.

A.2.2.5 Use the identification mark to clearly and unambiguously identify each component (both hardware and software) of the relevant item. Confirm its consistency with the documentation provided. The identification mark shall identify hardware and software versions. If the version change causes the function change described in this document, the identification mark shall be changed accordingly.

A.2.3 Hazard analysis and risk assessment

A.2.3.1 The functional failures of related items shall be analyzed and classified.

Example: Typical analytical methods, for example, hazard and operability studies (HAZOP).

A.2.3.2 A list of potential hazards shall be given according to the target usage scenarios and target users of the vehicle. Define the corresponding automotive safety integrity level (ASIL), see GB/T 34590.3.

A.2.3.3 Safety objectives shall be defined and categorized for potential hazards.

A.2.4 Functional safety concept

A.2.4.1 The safety measures (including external measures) taken during design to ensure that the relevant safety objectives are met in the event of a system failure shall be stated. The following safety measures can be taken.

a) Utilize parts of the system to maintain work. If a mode of operation is selected to maintain partial performance in the event of a specific failure, the conditions shall be stated, and their effects defined.

b) Switch to an independent backup system. If the backup system method is chosen to achieve the safety goal, the principle of the switching mechanism, the logic and level of redundancy and the check characteristics of the backup system shall be explained. The effect of the backup system shall be defined.

c) A safe status is entered by turning off upper layer functions. If it chooses to close the upper layer function, all corresponding output control signals related to this function shall be prohibited to limit transient interference.

d) Reduce risk exposure time to an acceptable time interval through driver warning.

A.2.4.2 When the IPAS system fails, the driver shall be warned by means of warning signals or information prompts.

A.2.4.3 The general structure of the software in the system shall be explained. The design methods and tools used shall be noted.

A.2.5 Security analysis

A safety analysis shall generally demonstrate that failures or groups of failures affecting the safety objectives of the system have been effectively identified and dealt with, so as to support the above documents.

The analysis may use a potential failure mode and effects analysis (FMEA), fault tree analysis (FTA), or other similar methods suitable for system safety analysis.

A.2.6 Confirmation test

In accordance with the description of the relevant documents in A.2, carry out the following tests to confirm the functional concept and safety concept of the system.

a) Confirm the functional concept of the system. Unless a functional test is required […]