标准编号:ISO/PAS 21448:2019
中文名称:道路车辆 预期功能的安全性
英文名称:Road vehicles — Safety of the intended functionality
发布日期:2019-01
标准范围
The absence of unreasonable risk due to hazards resulting from functional insufficiencies of the
intended functionality or by reasonably foreseeable misuse by persons is referred to as the Safety
Of The Intended Functionality (SOTIF). This document provides guidance on the applicable design,
verification and validation measures needed to achieve the SOTIF. This document does not apply to
faults covered by the ISO 26262 series or to hazards directly caused by the system technology (e.g. eye
damage from a laser sensor).
This document is intended to be applied to intended functionality where proper situational awareness
is critical to safety, and where that situational awareness is derived from complex sensors and
processing algorithms; especially emergency intervention systems (e.g. emergency braking systems)
and Advanced Driver Assistance Systems (ADAS) with levels 1 and 2 on the OICA/SAE standard J3016
automation scales. This edition of the document can be considered for higher levels of automation,
however additional measures might be necessary. This document is not intended for functions of
existing systems for which well-established and well-trusted design, verification and validation (V&V)
measures exist at the time of publication (e.g. Dynamic Stability Control (DSC) systems, airbag, etc.).
Some measures described in this document are applicable to innovative functions of such systems,
if situational awareness derived from complex sensors and processing algorithms is part of the
innovation.
Intended use and reasonably foreseeable misuse are considered in combination with potentially
hazardous system behaviour when identifying hazardous events.
Reasonably foreseeable misuse, which could lead directly to potentially hazardous system behaviour, is
also considered as a possible event that could directly trigger a SOTIF-related hazardous event.
Intentional alteration to the system operation is considered feature abuse. Feature abuse is not in scope
of this document.
标准预览图

