基于STPA的SSPC不安全控制行为识别与验证  

Identification and Verification of SSPC Unsafe Control Action Based on STPA

作　　者：张光玖 葛红娟[1] 李文臣 曾郑志远 桑益芹 ZHANG Guang-jiu;GE Hong-juan;LI Wen-chen;ZENG Zheng-zhi-yuan;SANG Yi-qin(Nanjing University of Aeronautics and Astronautics,Nanjing 211000,China)

机构地区：[1]南京航空航天大学,江苏南京211000

出　　处：《航空计算技术》2022年第4期38-42,共5页Aeronautical Computing Technique

基　　金：国家自然科学基金项目资助(U2133203,U1933115)。

摘　　要：固态功率控制器是飞机配电系统的重要组成部分,是固态配电的核心,需要在系统研制过程中进行完善的风险识别与安全性分析。当今使用较多的方法如故障树分析等主要基于部件独立性计算系统失效率,但针对组件之间非线性交互带来的安全性问题的研究较少。为此以固态功率控制器为对象,应用STPA方法识别不安全控制行为,利用UPPAAL工具建立形式化模型并对不安全控制行为进行验证,基于过程模型识别危害场景并进行形式化验证,形成更详细的SSPC安全控制约束清单。结果表明,方法可以有效识别出SSPC组件交互不当产生的安全性问题。Solid-state power controller is an important part of aircraft power distribution system,and it is the core of solid-state power distribution system.It is necessary to carry out perfect risk identification and safety analysis in the process of system development.Nowadays,many methods,such as fault tree analysis,mainly calculate the system failure rate based on component independence,but there are few studies on the safety problems caused by the nonlinear interaction between components.Therefore,taking the solid-state power controller as the object,STPA method is applied to identify unsafe control action.The formal model is established by UPPAAL tool and the unsafe control action is verified.Based on the process model,hazard scenarios are identified and formally verified.Finally,a more detailed SSPC safety control constraint list is formed.The results show that this method can identify the safety problems caused by improper interaction of SSPC components.

关 键 词：固态功率控制器 系统理论过程分析 不安全控制行为 形式化验证 

分 类 号：TM41[电气工程—电器]