This article takes the current autonomous driving technology as the research background and studies the collaborative protection mechanism between its system-on-chip(SoC)functional safety and information security.It i...This article takes the current autonomous driving technology as the research background and studies the collaborative protection mechanism between its system-on-chip(SoC)functional safety and information security.It includes an introduction to the functions and information security of autonomous driving SoCs,as well as the main design strategies for the collaborative prevention and control mechanism of SoC functional safety and information security in autonomous driving.The research shows that in the field of autonomous driving,there is a close connection between the functional safety of SoCs and their information security.In the design of the safety collaborative protection mechanism,the overall collaborative protection architecture,SoC functional safety protection mechanism,information security protection mechanism,the workflow of the collaborative protection mechanism,and its strategies are all key design elements.It is hoped that this analysis can provide some references for the collaborative protection of SoC functional safety and information security in the field of autonomous driving,so as to improve the safety of autonomous driving technology and meet its practical application requirements.展开更多
This study aims to construct a virtual twin testing framework for the safety of the intended functionality of intelligent connected vehicles to address the safety requirements of intelligent driving and transportation...This study aims to construct a virtual twin testing framework for the safety of the intended functionality of intelligent connected vehicles to address the safety requirements of intelligent driving and transportation systems.The research methods include the construction of a theoretical model of safety for intelligent connected vehicles based on the concept of virtual twins,the correlation study between key concepts and functional safety,and the application research of virtual twin technology in the safety testing of intelligent connected vehicles.The results reveal that the virtual twin testing framework can effectively enhance the functional safety of intelligent connected vehicles,reduce development costs,and shorten the product launch cycle.The conclusion suggests that this framework provides strong support for the healthy development of the intelligent connected vehicle industry and has a positive impact on the safety and efficiency of intelligent transportation systems.展开更多
As the complexity of autonomous vehicles(AVs)continues to increase and artificial intelligence algorithms are becoming increasingly ubiquitous,a novel safety concern known as the safety of the intended functionality(S...As the complexity of autonomous vehicles(AVs)continues to increase and artificial intelligence algorithms are becoming increasingly ubiquitous,a novel safety concern known as the safety of the intended functionality(SOTIF)has emerged,presenting significant challenges to the widespread deployment of AVs.SOTIF focuses on issues arising from the functional insufficiencies of the AVs’intended functionality or its implementation,apart from conventional safety considerations.From the systems engineering standpoint,this study offers a comprehensive exploration of the SOTIF landscape by reviewing academic research,practical activities,challenges,and perspectives across the development,verification,validation,and operation phases.Academic research encompasses system-level SOTIF studies and algorithm-related SOTIF issues and solutions.Moreover,it encapsulates practical SOTIF activities undertaken by corporations,government entities,and academic institutions spanning international and Chinese contexts,focusing on the overarching methodologies and practices in different phases.Finally,the paper presents future challenges and outlook pertaining to the development,verification,validation,and operation phases,motivating stakeholders to address the remaining obstacles and challenges.展开更多
This paper focuses on the high-voltage safety of drive motor systems in new energy vehicles and conducts standardized research on functional safety design in the concept phase. In view of the lack of high-voltage haza...This paper focuses on the high-voltage safety of drive motor systems in new energy vehicles and conducts standardized research on functional safety design in the concept phase. In view of the lack of high-voltage hazard analysis for drive motor systems in existing standards, based on theories such as GB/T 34590 and ISO 26262, the safety levels are deeply analyzed. The HAZOP method is innovatively used, and 16 types of guidewords are combined to comprehensively analyze the system functions, identifying vehicle hazards such as high-voltage electric shock caused by functional abnormalities, including high-voltage interlock function failure and abnormal active discharge. Subsequently, safety goals such as preventing high-voltage electric shock are set, functional safety requirements such as accurately obtaining collision signals and timely discharging high-voltage electricity are formulated, and requirements for external signal sources and other technologies are clearly defined, constructing a complete high-voltage safety protection system. The research results provide important technical support and standardized references for the high-voltage safety functional design of drive motor systems in new energy vehicles, and are of great significance for improving the high-voltage safety level of the new energy vehicle industry, expecting to play a key role in subsequent product development and standard improvement.展开更多
The information security and functional safety are fundamental issues of wireless communications sytems.The endogenous security principle based on Dynamic Heterogeneous Redundancy provides a direction for the developm...The information security and functional safety are fundamental issues of wireless communications sytems.The endogenous security principle based on Dynamic Heterogeneous Redundancy provides a direction for the development of wireless communication security and safety technology.This paper introduces the concept of wireless endogenous security from the following four aspects.First,we sorts out the endogenous security problems faced by the current wireless communications system,and then analyzes the endogenous security and safety attributes of the wireless channel.After that,the endogenous security and safety structure of the wireless communications system is given,and finally the applications of the existing wireless communication endogenous security and safety functions are listed.展开更多
The battery management system(BMS)is the main safeguard of a battery system for electric propulsion and machine electrifcation.It is tasked to ensure reliable and safe operation of battery cells connected to provide h...The battery management system(BMS)is the main safeguard of a battery system for electric propulsion and machine electrifcation.It is tasked to ensure reliable and safe operation of battery cells connected to provide high currents at high voltage levels.In addition to efectively monitoring all the electrical parameters of a battery pack system,such as the voltage,current,and temperature,the BMS is also used to improve the battery performance with proper safety measures within the system.With growing acceptance of lithium-ion batteries,major industry sectors such as the automotive,renewable energy,manufacturing,construction,and even some in the mining industry have brought forward the mass transition from fossil fuel dependency to electric powered machinery and redefned the world of energy storage.Hence,the functional safety considerations,which are those relating to automatic protection,in battery management for battery pack technologies are particularly important to ensure that the overall electrical system,regardless of whether it is for electric transportation or stationary energy storage,is in accordance with high standards of safety,reliability,and quality.If the system or product fails to meet functional and other safety requirements on account of faulty design or a sequence of failure events,then the environment,people,and property could be endangered.This paper analyzed the details of BMS for electric transportation and large-scale energy storage systems,particularly in areas concerned with hazardous environment.The analysis covers the aspect of functional safety that applies to BMS and is in accordance with the relevant industrial standards.A comprehensive evaluation of the components,architecture,risk reduction techniques,and failure mode analysis applicable to BMS operation was also presented.The article further provided recommendations on safety design and performance optimization in relation to the overall BMS integration.展开更多
The short-range wireless communication technology has advanced considerably and provides the feasibility of train-train(T2T)communication link in the communication-based train control system.The introduction of the T2...The short-range wireless communication technology has advanced considerably and provides the feasibility of train-train(T2T)communication link in the communication-based train control system.The introduction of the T2T link would reduce the headway and improve operational efficiency.Formal methods are system design techniques that use rigorously specified mathematical models to ensure all behaviors work as expected.And it is exactly the functional safety verification needed.Therefore,to deal with the functional safety verification of the T2T link,an untimed colored petri net model is first constructed.Secondly,the verification process is performed.Conclusions can be drawn from the state space report and the computation tree logic queries.Lastly,the model is parameterized,and then data log files are obtained for further performance measurement.Results show that the proposed criteria are satisfied and there are no defects in the basic design requirements.The transmission delay has considered the reconnection,transmission errors and the interruption.The probability of the delay lower than 150 ms accounts for 98.106%,which meets the specification and the previous field test.展开更多
[Objective] This study aimed to evaluate tbe healthy risk of genetically modified （ GM ） soybeans by using a novel approach for functions and safety of food. [ Me^od] Different from traditional evaluation of substan...[Objective] This study aimed to evaluate tbe healthy risk of genetically modified （ GM ） soybeans by using a novel approach for functions and safety of food. [ Me^od] Different from traditional evaluation of substantial equivalence, three great innovations were performed in this study, involving in basic diet, evalu- ation approaches and principle, as well as the clarification of connotation differences between absolute and relative mass of organs. Hence a novel BDI-GS （Bendib Damage Index and General Score） evaluation approach was established and applied in comparative evaluation between RR GM and natural soybeans. Healthy male ICR mice during linear growth were selected; experimental mice were fed with 15% RR GM soybeans and 15% natural soybeans blending maize meal diets, and control mice were fed with single maize meal diet for 13 d; the mice were dissected after collecting blood samples and perfectly obtained nine organs or tissues to re- cord their masses and conduct statistical analyses. [Result] Plenty of matching information was obtained through simple design. The growth performance of treated mice was markedly of individual differences, some mice were thwarted due to regular intake of RR soybeans. Meanwhile, the functions and safety of RR soybeans were markedly lowered in overall nutritional and healthy effects than those of natural soybeans expressed in GS values, and presents some declines in nutrition and health of thymus, pancreas and spermary; especially, it can make thymus immune （P 〈0.05） in markedly lower level than that of natural soybeans. [ Conclusion] Therefore, major troubles and risks of RR soybeans intake are of personal risks in different degrees, in addition, it may increase sub-health and related chronic epi- demics risks, and herein it will presents certain safety issues. The creation of this novel evaluation system provides a simple and available evaluation approach for functions and potential risks revelation of food effects, and will yield far-reaching influences to safety evaluation and healthy development of GM foods, as well as public health.展开更多
A significant proportion of urban crashes,especially serious and fatal crashes,occur at traffic signals.Many of the black-spots in both Australia and New Zealand cities occur at high volume and/or high-speed traffic s...A significant proportion of urban crashes,especially serious and fatal crashes,occur at traffic signals.Many of the black-spots in both Australia and New Zealand cities occur at high volume and/or high-speed traffic signals.Given this,crash reduction studies often focus on the major signalised intersections.However,there is limited information that links the phasing configuration,degree of saturation and overall cycle time to crashes.While a number of analysis tools are available for assessing the efficiency of intersections,there are very few tools that can assist engineers in assessing the safety effects of intersection upgrades and new intersections.Safety performance functions have been developed to help quantify the safety impact of various traffic signal phasing configurations and level of intersection congestion at low and high-speed traffic signals in New Zealand and Australia.Data from 238 signalised intersection sites in Auckland,Wellington,Christchurch,Hamilton,Dunedin and Melbourne was used to develop crash prediction models for key crash-causing movements at traffic signals.Different variables(road features)effect each crash type.The models indicate that the safety of intersections can be improved by longer cycle times and longer lost inter-green times,especially all-red time,using fully protected right turns and by extending the length of right turn bays.The exception is at intersections with lots of pedestrians where shorter cycle times are preferred as pedestrian crashes increase with longer wait times.A number of factors have a negative impact on safety including,free left turns,more approach lanes,intersection arms operating near or over capacity in peak periods and higher speed limits.展开更多
The mission of nuclear safety authorities in national radioactive waste disposal programmes is to ensure that people and the environment are protected against the hazards of ionising radiations emitted by the waste.It...The mission of nuclear safety authorities in national radioactive waste disposal programmes is to ensure that people and the environment are protected against the hazards of ionising radiations emitted by the waste.It implies the establishment of safety requirements and the oversight of the activities of the waste management organisation in charge of implementing the programme.In Belgium,the safety requirements for geological disposal rest on the following principles:defence-in-depth,demonstrability and the radiation protection principles elaborated by the International Commission on Radiological Protection(ICRP).Applying these principles requires notably an appropriate identification and characterisation of the processes upon which the safety functions fulfilled by the disposal system rely and of the processes that may affect the system performance.Therefore,research and development(R&D)on safety-relevant thermo-hydro-mechanical-chemical(THMC)issues is important to build confidence in the safety assessment.This paper points out the key THMC processes that might influence radionuclide transport in a disposal system and its surrounding environment,considering the dynamic nature of these processes.Their nature and significance are expected to change according to prevailing internal and external conditions,which evolve from the repository construction phase to the whole heatingecooling cycle of decaying waste after closure.As these processes have a potential impact on safety,it is essential to identify and to understand them properly when developing a disposal concept to ensure compliance with relevant safety requirements.In particular,the investigation of THMC processes is needed to manage uncertainties.This includes the identification and characterisation of uncertainties as well as for the understanding of their safety-relevance.R&D may also be necessary to reduce uncertainties of which the magnitude does not allow demonstrating the safety of the disposal system.展开更多
Industry 5.0 blows the whistle on a new industrial revolution,aiming to refocus industrial development by reintegrating the human factor into the technological equation.On the eve of the revolution,the comprehensive s...Industry 5.0 blows the whistle on a new industrial revolution,aiming to refocus industrial development by reintegrating the human factor into the technological equation.On the eve of the revolution,the comprehensive surveys for Industry 5.0 would provide important support for future development.However,current surveys for Industry 5.0 are still in their infancy and some gaps remain.(ⅰ)Current work lacks a comprehensive technical architecture for Industry 5.0 and an in-depth analysis of the enabling technologies that will drive Industry 5.0;(ⅱ)There is no comprehensive survey on security issues of Industry 5.0,which will directly hinder its development;(ⅲ)As Industry 5.0 introduces people into the technological equation,then it will also further consider the broader human interests in its security equation.It is an open issue that traditional security classifications cannot summarize these new security threats in Industry 5.0.Therefore,this survey starts by reviewing the latest key enabling technologies and proposing an overall technology hierarchical structure for Industry 5.0.Second,we investigate the triad of security issues in Industry 5.0,which includes threats and countermeasures for functional safety,information security,and humanized security.Among them,we define the third security issue in Industry 5.0,humanized security,which includes safeguarding the broader interests and rights of individuals,machines,and society.Finally,we summarize future challenges and research trends.To the best of our knowledge,this is the first comprehensive overview of security in Industry 5.0,in which humanized security is defined for the first time.展开更多
A safety management system was established to provide for continuously improved safety levels of the non-urban roads in Israel. One of the main functions of the system lies in the identification and treatment of HL （...A safety management system was established to provide for continuously improved safety levels of the non-urban roads in Israel. One of the main functions of the system lies in the identification and treatment of HL （hazardous locations） on existing roads. In line with the state-of-the art in road safety, the HL identification is based on an empirical Bayes evaluation, where an HL is recognized using a high positive difference between the number of accidents expected at the site and that predicted for similar sites. The latter is estimated using safety performance functions that were developed for local conditions, including single- and dual-carriageway road sections, and various types of intersections： signalized/non-signalized, three- and four-legged. The procedure of HL identification is applied annually, serving as a basis for the working programs on road infrastructure improvements. Positive safety effects of such improvements were recently reported in the country. These activities comply with the Road Infrastructure Safety Directive that was recently introduced in the European Union.展开更多
The requirements for ensuring functional safety have always been very high.Modern safety-related systems are becoming increasingly complex, making also the safety integrity assessment more complex and time-consuming. ...The requirements for ensuring functional safety have always been very high.Modern safety-related systems are becoming increasingly complex, making also the safety integrity assessment more complex and time-consuming. This trend is further intensified by the fact that AI-based algorithms are finding their way into safety-related systems or will do so in the future. However, existing and expected standards and regulations for the use of AI methods pose significant challenges for the development of embedded AI software in functional safety-related systems. The consideration of essential requirements from various perspectives necessitates an intensive examination of the subject matter, especially as diferent standards have to be taken into account depending on the final application. There are also diferent targets for the “safe behavior” of a system depending on the target application. While stopping all movements of a machine in industrial production plants is likely to be considered a “safe state”, the same condition might not be considered as safe in flying aircraft, driving cars or medicine equipment like heart pacemaker. This overall complexity is operationalized in our approach in such a way that it is straightforward to monitor conformity with the requirements. To support safety integrity assessments and reduce the required efort, a Self-Enforcing Network(SEN) model is presented in which developers or safety experts can indicate the degree of fulfillment of certain requirements with possible impact on the safety integrity of a safety-related system. The result evaluated by the SEN model indicates the achievable safety integrity level of the assessed system, which is additionally provided by an explanatory component.展开更多
In order to improve the prediction precision of the safety performance function （SPF） of freeway basic segments, design and crash data of 640 segments are collected from different institutions. Three negative binomi...In order to improve the prediction precision of the safety performance function （SPF） of freeway basic segments, design and crash data of 640 segments are collected from different institutions. Three negative binomial （NB） regression models and three generalized negative binomial （GNB） regression models are built to prove that the interactive influence of explanatory variables plays an important role in fitting goodness. The effective use of the GNB model in analyzing the interactive influence of explanatory variables and predicting freeway basic segments is demonstrated. Among six models, the two models （one is the NB model and the other is the GNB model. ） which consider the interactive influence of the annual average daily traffic （AADT） and length are more reasonable for predicting results. Furthermore, a comprehensive study is carried out to prove that when considering the interactive influence, the NB and GNB models have almost the same fitting performance in estimating the crashes, among which the GNB model is slightly better for prediction performance.展开更多
A medical device is an instrument that includes components,parts,or accessories to diagnose or treat patients.Since the complexity of medical devices has increased in recent years,functional safety and basic safety ar...A medical device is an instrument that includes components,parts,or accessories to diagnose or treat patients.Since the complexity of medical devices has increased in recent years,functional safety and basic safety are required to ensure the overall device safety.Functional safety is part of the overall safety that relates to the equipment under control(EUC)and to the EUC control system that depends on the correct functionality of the electrical/electronic/programmable electronic(E/E/PE)safety-related systems.This study proposes approach methods to functional safety of medical devices for which it is important to correctly identify the safety functions and the safety integrity level(SIL).The relationship between the functional safety and essential performance is identified focusing on the safety function.The essential performance of E/E/PE systems is defined as the safety function of the functional safety.The target SIL of the essential performance is determined according to the potential risk levels,based on the classification rules of medical devices.This approach is applied to the pulse oximeter as a case study.The target SIL for the functionality of the power-failure alarm condition is determined to be SIL1.The target SILs of other functions are determined as SIL2.展开更多
The common endogenous security problems in cyberspace and related attack threats have posed subversive challenges to conventional theories and methods of functional safety.In the current design of the cyber physical s...The common endogenous security problems in cyberspace and related attack threats have posed subversive challenges to conventional theories and methods of functional safety.In the current design of the cyber physical system(CPS),functional safety and cyber security are increasingly intertwined and inseparable,which evolve into the generalized functional safety(S&S)problem.The conventional reliability and cybersecurity technologies are unable to provide security assurance with quanti able design and veri cation metrics in response to the cyberattacks in hardware and software with common endogenous security problems,and the functional safety of CPS facilities or device has become a frightening ghost.The dynamic heterogeneity redundancy(DHR)architecture and coding channel theory(CCT)proposed by the cyberspace endogenous security paradigm could handle random failures and uncertain network attacks in an integrated manner,and its generalized robust control mechanism can solve the universal problem of quantitative design for functional safety under probability or improbability perturbation.As a generalized functional safety enabling structure,DHR opens up a new direction to solve the common endogenous security problems in the cross-disciplinary elds of cyberspace.展开更多
Safety performance functions（SPFs） are crucial to science-based road safety management.Success in developing and applying SPFs, apart data quality and availability, depends fundamentally on two key factors： the val...Safety performance functions（SPFs） are crucial to science-based road safety management.Success in developing and applying SPFs, apart data quality and availability, depends fundamentally on two key factors： the validity of the statistical inferences for the available data and on how well the data can be organized into distinct homogeneous entities. The latter aspect plays a key role in the identification and treatment of road sections or corridors with problems related to safety. Indeed, the segmentation of a road network could be especially critical in the development of SPFs that could be used in safety management for roadway types, such as motorways（freeways in North America）, which have a large number of variables that could result in very short segments if these are desired to be homogeneous. This consequence, from an analytical point of view, can be a problem when the location of crashes is not precise and when there is an overabundance of segments with zero crashes. Lengthening the segments for developing and applying SPFs can mitigate this problem, but at a sacrifice of homogeneity. This paper seeks to address this dilemma by investigating four approaches for segmentation for motorways, using sample data from Italy. The best results were obtained for the segmentation based on two curves and two tangents within a segment and with fixed length segments. The segmentation characterized by a constant value of all original variables inside each segment was the poorest approach by all measures.展开更多
The shape and size optimization of brackets in hull structures was conducted to achieve the simultaneous reduction of mass and high stress,where the parametric finite element model was built based on Patran Command La...The shape and size optimization of brackets in hull structures was conducted to achieve the simultaneous reduction of mass and high stress,where the parametric finite element model was built based on Patran Command Language codes.The optimization procedure was executed on Isight platform,on which the linear dimensionless method was introduced to establish the weighted multi-objective function.The extreme processing method was applied and proved effective to normalize the objectives.The bracket was optimized under the typical single loads and design waves,accompanied by the different proportions of weights in the objective function,in which the safety factor function was further established,including yielding,buckling,and fatigue strength,and the weight minimization and safety maximization of the bracket were obtained.The findings of this study illustrate that the dimensionless objectives share equal contributions to the multi-objective function,which enhances the role of weights in the optimization.展开更多
Safety performance functions(SPFs),or crash-prediction models,have played an important role in identifying the factors contributing to crashes,predicting crash counts and identifying hotspots.Since a great deal of tim...Safety performance functions(SPFs),or crash-prediction models,have played an important role in identifying the factors contributing to crashes,predicting crash counts and identifying hotspots.Since a great deal of time and effort is needed to estimate an SPF,previous studies have sought to determine the transferability of particular SPFs;that is,the extent to which they can be applied to data from other regions.Although many efforts have been made to examine micro-level SPF transferability,few studies have focused on macro-level SPF transferability.There has been little transferability analysis of macro-level SPFs in the international context,especially between western countries.This study therefore evaluates the transferability of SPFs for several states in the USA(Illinois,Florida and Colorado)and for Italy.The SPFs were developed using data from counties in the United States and provincias in Italy,and the results revealed multiple common significant variables between the two countries.Transferability indexes were then calculated between the SPFs.These showed that the Italy SPFs for total crashes and bicycle crashes were transferable to US data after calibration factors were applied,whereas the US SPFs for total and bicycle crashes,with the exception of the Colorado SPF,could not be transferred to the Italian data.On the other hand,none of the pedestrian SPFs developed was transferable to other countries.This paper provides insights into the applicability of macro-level SPFs between the USA and Italy,and shows a good potential for international SPF transferability.Nevertheless,further investigation is needed of SPF transferability between a wider range of countries.展开更多
The empirical Bayes(EB)method based on parametric statistical models such as the negative binomial(NB)has been widely used for ranking sites in the road network safety screening process.In this paper a novel non-param...The empirical Bayes(EB)method based on parametric statistical models such as the negative binomial(NB)has been widely used for ranking sites in the road network safety screening process.In this paper a novel non-parametric EB method for modeling crash frequency data based on Conditional Generative Adversarial Networks(CGAN)is proposed and evaluated over a real-world crash data set.Unlike parametric approaches,there is no need for a pre-specified underlying relationship between dependent and independent variables in the proposed CGAN-EB and they are able to model any types of distributions.The proposed methodology is applied to real-world and simulated crash data sets.The performance of CGAN-EB in terms of model fit,predictive performance and network screening outcomes is compared with the conventional approach(NB-EB)as a benchmark.The results indicate that the proposed CGAN-EB approach outperforms NB-EB in terms of prediction power and hotspot identification tests.展开更多
文摘This article takes the current autonomous driving technology as the research background and studies the collaborative protection mechanism between its system-on-chip(SoC)functional safety and information security.It includes an introduction to the functions and information security of autonomous driving SoCs,as well as the main design strategies for the collaborative prevention and control mechanism of SoC functional safety and information security in autonomous driving.The research shows that in the field of autonomous driving,there is a close connection between the functional safety of SoCs and their information security.In the design of the safety collaborative protection mechanism,the overall collaborative protection architecture,SoC functional safety protection mechanism,information security protection mechanism,the workflow of the collaborative protection mechanism,and its strategies are all key design elements.It is hoped that this analysis can provide some references for the collaborative protection of SoC functional safety and information security in the field of autonomous driving,so as to improve the safety of autonomous driving technology and meet its practical application requirements.
文摘This study aims to construct a virtual twin testing framework for the safety of the intended functionality of intelligent connected vehicles to address the safety requirements of intelligent driving and transportation systems.The research methods include the construction of a theoretical model of safety for intelligent connected vehicles based on the concept of virtual twins,the correlation study between key concepts and functional safety,and the application research of virtual twin technology in the safety testing of intelligent connected vehicles.The results reveal that the virtual twin testing framework can effectively enhance the functional safety of intelligent connected vehicles,reduce development costs,and shorten the product launch cycle.The conclusion suggests that this framework provides strong support for the healthy development of the intelligent connected vehicle industry and has a positive impact on the safety and efficiency of intelligent transportation systems.
基金supported by the National Science Foundation of China Project(52072215,U1964203,52242213,and 52221005)National Key Research and Development(R&D)Program of China(2022YFB2503003)State Key Laboratory of Intelligent Green Vehicle and Mobility。
文摘As the complexity of autonomous vehicles(AVs)continues to increase and artificial intelligence algorithms are becoming increasingly ubiquitous,a novel safety concern known as the safety of the intended functionality(SOTIF)has emerged,presenting significant challenges to the widespread deployment of AVs.SOTIF focuses on issues arising from the functional insufficiencies of the AVs’intended functionality or its implementation,apart from conventional safety considerations.From the systems engineering standpoint,this study offers a comprehensive exploration of the SOTIF landscape by reviewing academic research,practical activities,challenges,and perspectives across the development,verification,validation,and operation phases.Academic research encompasses system-level SOTIF studies and algorithm-related SOTIF issues and solutions.Moreover,it encapsulates practical SOTIF activities undertaken by corporations,government entities,and academic institutions spanning international and Chinese contexts,focusing on the overarching methodologies and practices in different phases.Finally,the paper presents future challenges and outlook pertaining to the development,verification,validation,and operation phases,motivating stakeholders to address the remaining obstacles and challenges.
文摘This paper focuses on the high-voltage safety of drive motor systems in new energy vehicles and conducts standardized research on functional safety design in the concept phase. In view of the lack of high-voltage hazard analysis for drive motor systems in existing standards, based on theories such as GB/T 34590 and ISO 26262, the safety levels are deeply analyzed. The HAZOP method is innovatively used, and 16 types of guidewords are combined to comprehensively analyze the system functions, identifying vehicle hazards such as high-voltage electric shock caused by functional abnormalities, including high-voltage interlock function failure and abnormal active discharge. Subsequently, safety goals such as preventing high-voltage electric shock are set, functional safety requirements such as accurately obtaining collision signals and timely discharging high-voltage electricity are formulated, and requirements for external signal sources and other technologies are clearly defined, constructing a complete high-voltage safety protection system. The research results provide important technical support and standardized references for the high-voltage safety functional design of drive motor systems in new energy vehicles, and are of great significance for improving the high-voltage safety level of the new energy vehicle industry, expecting to play a key role in subsequent product development and standard improvement.
基金National Natural Science Foundation of China(No.61941114 and No.61521003)Key Universities and Academic Disciplines Contruction Project。
文摘The information security and functional safety are fundamental issues of wireless communications sytems.The endogenous security principle based on Dynamic Heterogeneous Redundancy provides a direction for the development of wireless communication security and safety technology.This paper introduces the concept of wireless endogenous security from the following four aspects.First,we sorts out the endogenous security problems faced by the current wireless communications system,and then analyzes the endogenous security and safety attributes of the wireless channel.After that,the endogenous security and safety structure of the wireless communications system is given,and finally the applications of the existing wireless communication endogenous security and safety functions are listed.
基金supported by Azure Mining Technology,CCTEG,and the University of Wollongong.
文摘The battery management system(BMS)is the main safeguard of a battery system for electric propulsion and machine electrifcation.It is tasked to ensure reliable and safe operation of battery cells connected to provide high currents at high voltage levels.In addition to efectively monitoring all the electrical parameters of a battery pack system,such as the voltage,current,and temperature,the BMS is also used to improve the battery performance with proper safety measures within the system.With growing acceptance of lithium-ion batteries,major industry sectors such as the automotive,renewable energy,manufacturing,construction,and even some in the mining industry have brought forward the mass transition from fossil fuel dependency to electric powered machinery and redefned the world of energy storage.Hence,the functional safety considerations,which are those relating to automatic protection,in battery management for battery pack technologies are particularly important to ensure that the overall electrical system,regardless of whether it is for electric transportation or stationary energy storage,is in accordance with high standards of safety,reliability,and quality.If the system or product fails to meet functional and other safety requirements on account of faulty design or a sequence of failure events,then the environment,people,and property could be endangered.This paper analyzed the details of BMS for electric transportation and large-scale energy storage systems,particularly in areas concerned with hazardous environment.The analysis covers the aspect of functional safety that applies to BMS and is in accordance with the relevant industrial standards.A comprehensive evaluation of the components,architecture,risk reduction techniques,and failure mode analysis applicable to BMS operation was also presented.The article further provided recommendations on safety design and performance optimization in relation to the overall BMS integration.
基金National Natural Science Foundation of China(No.61963023)。
文摘The short-range wireless communication technology has advanced considerably and provides the feasibility of train-train(T2T)communication link in the communication-based train control system.The introduction of the T2T link would reduce the headway and improve operational efficiency.Formal methods are system design techniques that use rigorously specified mathematical models to ensure all behaviors work as expected.And it is exactly the functional safety verification needed.Therefore,to deal with the functional safety verification of the T2T link,an untimed colored petri net model is first constructed.Secondly,the verification process is performed.Conclusions can be drawn from the state space report and the computation tree logic queries.Lastly,the model is parameterized,and then data log files are obtained for further performance measurement.Results show that the proposed criteria are satisfied and there are no defects in the basic design requirements.The transmission delay has considered the reconnection,transmission errors and the interruption.The probability of the delay lower than 150 ms accounts for 98.106%,which meets the specification and the previous field test.
基金Supported by Development Fund of the Institute of Radiation Medicine(No.SF1227)Research Fund for Youth Scholars of Union Medical College(No.2012D03)Research Fund for the Doctoral Program of Higher Education of China(No.20121106120042)
文摘[Objective] This study aimed to evaluate tbe healthy risk of genetically modified （ GM ） soybeans by using a novel approach for functions and safety of food. [ Me^od] Different from traditional evaluation of substantial equivalence, three great innovations were performed in this study, involving in basic diet, evalu- ation approaches and principle, as well as the clarification of connotation differences between absolute and relative mass of organs. Hence a novel BDI-GS （Bendib Damage Index and General Score） evaluation approach was established and applied in comparative evaluation between RR GM and natural soybeans. Healthy male ICR mice during linear growth were selected; experimental mice were fed with 15% RR GM soybeans and 15% natural soybeans blending maize meal diets, and control mice were fed with single maize meal diet for 13 d; the mice were dissected after collecting blood samples and perfectly obtained nine organs or tissues to re- cord their masses and conduct statistical analyses. [Result] Plenty of matching information was obtained through simple design. The growth performance of treated mice was markedly of individual differences, some mice were thwarted due to regular intake of RR soybeans. Meanwhile, the functions and safety of RR soybeans were markedly lowered in overall nutritional and healthy effects than those of natural soybeans expressed in GS values, and presents some declines in nutrition and health of thymus, pancreas and spermary; especially, it can make thymus immune （P 〈0.05） in markedly lower level than that of natural soybeans. [ Conclusion] Therefore, major troubles and risks of RR soybeans intake are of personal risks in different degrees, in addition, it may increase sub-health and related chronic epi- demics risks, and herein it will presents certain safety issues. The creation of this novel evaluation system provides a simple and available evaluation approach for functions and potential risks revelation of food effects, and will yield far-reaching influences to safety evaluation and healthy development of GM foods, as well as public health.
文摘A significant proportion of urban crashes,especially serious and fatal crashes,occur at traffic signals.Many of the black-spots in both Australia and New Zealand cities occur at high volume and/or high-speed traffic signals.Given this,crash reduction studies often focus on the major signalised intersections.However,there is limited information that links the phasing configuration,degree of saturation and overall cycle time to crashes.While a number of analysis tools are available for assessing the efficiency of intersections,there are very few tools that can assist engineers in assessing the safety effects of intersection upgrades and new intersections.Safety performance functions have been developed to help quantify the safety impact of various traffic signal phasing configurations and level of intersection congestion at low and high-speed traffic signals in New Zealand and Australia.Data from 238 signalised intersection sites in Auckland,Wellington,Christchurch,Hamilton,Dunedin and Melbourne was used to develop crash prediction models for key crash-causing movements at traffic signals.Different variables(road features)effect each crash type.The models indicate that the safety of intersections can be improved by longer cycle times and longer lost inter-green times,especially all-red time,using fully protected right turns and by extending the length of right turn bays.The exception is at intersections with lots of pedestrians where shorter cycle times are preferred as pedestrian crashes increase with longer wait times.A number of factors have a negative impact on safety including,free left turns,more approach lanes,intersection arms operating near or over capacity in peak periods and higher speed limits.
文摘The mission of nuclear safety authorities in national radioactive waste disposal programmes is to ensure that people and the environment are protected against the hazards of ionising radiations emitted by the waste.It implies the establishment of safety requirements and the oversight of the activities of the waste management organisation in charge of implementing the programme.In Belgium,the safety requirements for geological disposal rest on the following principles:defence-in-depth,demonstrability and the radiation protection principles elaborated by the International Commission on Radiological Protection(ICRP).Applying these principles requires notably an appropriate identification and characterisation of the processes upon which the safety functions fulfilled by the disposal system rely and of the processes that may affect the system performance.Therefore,research and development(R&D)on safety-relevant thermo-hydro-mechanical-chemical(THMC)issues is important to build confidence in the safety assessment.This paper points out the key THMC processes that might influence radionuclide transport in a disposal system and its surrounding environment,considering the dynamic nature of these processes.Their nature and significance are expected to change according to prevailing internal and external conditions,which evolve from the repository construction phase to the whole heatingecooling cycle of decaying waste after closure.As these processes have a potential impact on safety,it is essential to identify and to understand them properly when developing a disposal concept to ensure compliance with relevant safety requirements.In particular,the investigation of THMC processes is needed to manage uncertainties.This includes the identification and characterisation of uncertainties as well as for the understanding of their safety-relevance.R&D may also be necessary to reduce uncertainties of which the magnitude does not allow demonstrating the safety of the disposal system.
基金supported in part by the JSPS KAKENHI under Grants 23K11072in part by the China Scholarship Council under Grants 202308050055
文摘Industry 5.0 blows the whistle on a new industrial revolution,aiming to refocus industrial development by reintegrating the human factor into the technological equation.On the eve of the revolution,the comprehensive surveys for Industry 5.0 would provide important support for future development.However,current surveys for Industry 5.0 are still in their infancy and some gaps remain.(ⅰ)Current work lacks a comprehensive technical architecture for Industry 5.0 and an in-depth analysis of the enabling technologies that will drive Industry 5.0;(ⅱ)There is no comprehensive survey on security issues of Industry 5.0,which will directly hinder its development;(ⅲ)As Industry 5.0 introduces people into the technological equation,then it will also further consider the broader human interests in its security equation.It is an open issue that traditional security classifications cannot summarize these new security threats in Industry 5.0.Therefore,this survey starts by reviewing the latest key enabling technologies and proposing an overall technology hierarchical structure for Industry 5.0.Second,we investigate the triad of security issues in Industry 5.0,which includes threats and countermeasures for functional safety,information security,and humanized security.Among them,we define the third security issue in Industry 5.0,humanized security,which includes safeguarding the broader interests and rights of individuals,machines,and society.Finally,we summarize future challenges and research trends.To the best of our knowledge,this is the first comprehensive overview of security in Industry 5.0,in which humanized security is defined for the first time.
文摘A safety management system was established to provide for continuously improved safety levels of the non-urban roads in Israel. One of the main functions of the system lies in the identification and treatment of HL （hazardous locations） on existing roads. In line with the state-of-the art in road safety, the HL identification is based on an empirical Bayes evaluation, where an HL is recognized using a high positive difference between the number of accidents expected at the site and that predicted for similar sites. The latter is estimated using safety performance functions that were developed for local conditions, including single- and dual-carriageway road sections, and various types of intersections： signalized/non-signalized, three- and four-legged. The procedure of HL identification is applied annually, serving as a basis for the working programs on road infrastructure improvements. Positive safety effects of such improvements were recently reported in the country. These activities comply with the Road Infrastructure Safety Directive that was recently introduced in the European Union.
文摘The requirements for ensuring functional safety have always been very high.Modern safety-related systems are becoming increasingly complex, making also the safety integrity assessment more complex and time-consuming. This trend is further intensified by the fact that AI-based algorithms are finding their way into safety-related systems or will do so in the future. However, existing and expected standards and regulations for the use of AI methods pose significant challenges for the development of embedded AI software in functional safety-related systems. The consideration of essential requirements from various perspectives necessitates an intensive examination of the subject matter, especially as diferent standards have to be taken into account depending on the final application. There are also diferent targets for the “safe behavior” of a system depending on the target application. While stopping all movements of a machine in industrial production plants is likely to be considered a “safe state”, the same condition might not be considered as safe in flying aircraft, driving cars or medicine equipment like heart pacemaker. This overall complexity is operationalized in our approach in such a way that it is straightforward to monitor conformity with the requirements. To support safety integrity assessments and reduce the required efort, a Self-Enforcing Network(SEN) model is presented in which developers or safety experts can indicate the degree of fulfillment of certain requirements with possible impact on the safety integrity of a safety-related system. The result evaluated by the SEN model indicates the achievable safety integrity level of the assessed system, which is additionally provided by an explanatory component.
基金The National Natural Science Foundation of China(No.51408229,51278202)the Program of the Key Laboratory of Road and Traffic Engineering of the Ministry of Education,Tongji University(No.K201204)the Science and Technology Program of Guangdong Communication Department(No.2013-02-068)
文摘In order to improve the prediction precision of the safety performance function （SPF） of freeway basic segments, design and crash data of 640 segments are collected from different institutions. Three negative binomial （NB） regression models and three generalized negative binomial （GNB） regression models are built to prove that the interactive influence of explanatory variables plays an important role in fitting goodness. The effective use of the GNB model in analyzing the interactive influence of explanatory variables and predicting freeway basic segments is demonstrated. Among six models, the two models （one is the NB model and the other is the GNB model. ） which consider the interactive influence of the annual average daily traffic （AADT） and length are more reasonable for predicting results. Furthermore, a comprehensive study is carried out to prove that when considering the interactive influence, the NB and GNB models have almost the same fitting performance in estimating the crashes, among which the GNB model is slightly better for prediction performance.
文摘A medical device is an instrument that includes components,parts,or accessories to diagnose or treat patients.Since the complexity of medical devices has increased in recent years,functional safety and basic safety are required to ensure the overall device safety.Functional safety is part of the overall safety that relates to the equipment under control(EUC)and to the EUC control system that depends on the correct functionality of the electrical/electronic/programmable electronic(E/E/PE)safety-related systems.This study proposes approach methods to functional safety of medical devices for which it is important to correctly identify the safety functions and the safety integrity level(SIL).The relationship between the functional safety and essential performance is identified focusing on the safety function.The essential performance of E/E/PE systems is defined as the safety function of the functional safety.The target SIL of the essential performance is determined according to the potential risk levels,based on the classification rules of medical devices.This approach is applied to the pulse oximeter as a case study.The target SIL for the functionality of the power-failure alarm condition is determined to be SIL1.The target SILs of other functions are determined as SIL2.
基金the National Natural Science Foundation Innovation Group Project(61521003).
文摘The common endogenous security problems in cyberspace and related attack threats have posed subversive challenges to conventional theories and methods of functional safety.In the current design of the cyber physical system(CPS),functional safety and cyber security are increasingly intertwined and inseparable,which evolve into the generalized functional safety(S&S)problem.The conventional reliability and cybersecurity technologies are unable to provide security assurance with quanti able design and veri cation metrics in response to the cyberattacks in hardware and software with common endogenous security problems,and the functional safety of CPS facilities or device has become a frightening ghost.The dynamic heterogeneity redundancy(DHR)architecture and coding channel theory(CCT)proposed by the cyberspace endogenous security paradigm could handle random failures and uncertain network attacks in an integrated manner,and its generalized robust control mechanism can solve the universal problem of quantitative design for functional safety under probability or improbability perturbation.As a generalized functional safety enabling structure,DHR opens up a new direction to solve the common endogenous security problems in the cross-disciplinary elds of cyberspace.
基金made possible by a Discovery Grant from the Natural Sciences and Engineering Research Council of Canada (NSERC)
文摘Safety performance functions（SPFs） are crucial to science-based road safety management.Success in developing and applying SPFs, apart data quality and availability, depends fundamentally on two key factors： the validity of the statistical inferences for the available data and on how well the data can be organized into distinct homogeneous entities. The latter aspect plays a key role in the identification and treatment of road sections or corridors with problems related to safety. Indeed, the segmentation of a road network could be especially critical in the development of SPFs that could be used in safety management for roadway types, such as motorways（freeways in North America）, which have a large number of variables that could result in very short segments if these are desired to be homogeneous. This consequence, from an analytical point of view, can be a problem when the location of crashes is not precise and when there is an overabundance of segments with zero crashes. Lengthening the segments for developing and applying SPFs can mitigate this problem, but at a sacrifice of homogeneity. This paper seeks to address this dilemma by investigating four approaches for segmentation for motorways, using sample data from Italy. The best results were obtained for the segmentation based on two curves and two tangents within a segment and with fixed length segments. The segmentation characterized by a constant value of all original variables inside each segment was the poorest approach by all measures.
基金This work was financially supported by the Key Research and Development Project of Shandong Province(Grant No.2020CXGC010702).
文摘The shape and size optimization of brackets in hull structures was conducted to achieve the simultaneous reduction of mass and high stress,where the parametric finite element model was built based on Patran Command Language codes.The optimization procedure was executed on Isight platform,on which the linear dimensionless method was introduced to establish the weighted multi-objective function.The extreme processing method was applied and proved effective to normalize the objectives.The bracket was optimized under the typical single loads and design waves,accompanied by the different proportions of weights in the objective function,in which the safety factor function was further established,including yielding,buckling,and fatigue strength,and the weight minimization and safety maximization of the bracket were obtained.The findings of this study illustrate that the dimensionless objectives share equal contributions to the multi-objective function,which enhances the role of weights in the optimization.
文摘Safety performance functions(SPFs),or crash-prediction models,have played an important role in identifying the factors contributing to crashes,predicting crash counts and identifying hotspots.Since a great deal of time and effort is needed to estimate an SPF,previous studies have sought to determine the transferability of particular SPFs;that is,the extent to which they can be applied to data from other regions.Although many efforts have been made to examine micro-level SPF transferability,few studies have focused on macro-level SPF transferability.There has been little transferability analysis of macro-level SPFs in the international context,especially between western countries.This study therefore evaluates the transferability of SPFs for several states in the USA(Illinois,Florida and Colorado)and for Italy.The SPFs were developed using data from counties in the United States and provincias in Italy,and the results revealed multiple common significant variables between the two countries.Transferability indexes were then calculated between the SPFs.These showed that the Italy SPFs for total crashes and bicycle crashes were transferable to US data after calibration factors were applied,whereas the US SPFs for total and bicycle crashes,with the exception of the Colorado SPF,could not be transferred to the Italian data.On the other hand,none of the pedestrian SPFs developed was transferable to other countries.This paper provides insights into the applicability of macro-level SPFs between the USA and Italy,and shows a good potential for international SPF transferability.Nevertheless,further investigation is needed of SPF transferability between a wider range of countries.
文摘The empirical Bayes(EB)method based on parametric statistical models such as the negative binomial(NB)has been widely used for ranking sites in the road network safety screening process.In this paper a novel non-parametric EB method for modeling crash frequency data based on Conditional Generative Adversarial Networks(CGAN)is proposed and evaluated over a real-world crash data set.Unlike parametric approaches,there is no need for a pre-specified underlying relationship between dependent and independent variables in the proposed CGAN-EB and they are able to model any types of distributions.The proposed methodology is applied to real-world and simulated crash data sets.The performance of CGAN-EB in terms of model fit,predictive performance and network screening outcomes is compared with the conventional approach(NB-EB)as a benchmark.The results indicate that the proposed CGAN-EB approach outperforms NB-EB in terms of prediction power and hotspot identification tests.
