智能汽车系统功能安全保障机制的现状与展望  

Current Status and Future Outlook of System Functional Safety Mechanisms in Intelligent Vehicles

作　　者：罗通强 刘坚坚 赵炳根 邱旭波 李仰光 吕晨 LUO Tongqiang;LIU Jianjian;ZHAO Binggen;QIU Xubo;LI Yangguang;LYU Chen(BYD Auto Industry Company Limited,Shenzhen 518118,Guangdong,China)

机构地区：[1]比亚迪汽车工业有限公司,广东深圳518118

出　　处：《汽车工程学报》2024年第6期921-933,共13页Chinese Journal of Automotive Engineering

基　　金：国家重点研发计划项目(2023YFB2504500)。

摘　　要：随着高阶智能网联汽车的快速发展,其安全性引发了广泛关注,现阶段功能安全保障机制是国内外的研究热点。各国针对车辆安全性能逐步制定了相应的标准,国际标准化组织也不断完善功能安全(ISO 26262)和预期功能安全(ISO 21448)标准。因此,大多数汽车产品的安全目标,尤其是与自动驾驶相关的智能底盘系统(线控制动与线控转向执行机构)都可归类为汽车安全完整性等级中的D级别。基于行业研究资料总结了系统安全架构冗余机制,分析和梳理了不同自动驾驶等级的故障运行安全架构以及功能安全降级策略,展望了将ISO 21448引入ISO 26262标准的融合思路,以有效避免因车辆的E/E系统错误和执行器性能不足而引发的事故,为车辆安全行驶提供保障。With the rapid development of advanced intelligent connected vehicles,their safety has become a widespread concern.Currently,the mechanisms to ensure functional safety are a major research focus both domestically and internationally.Countries are gradually establishing standards for vehicle safety performance,and the International Organization for Standardization(ISO)continues to refine the Functional Safety(ISO 26262)and Safety of the Intended Functionality(ISO 21448)standards.On this basis,the safety objectives of most automotive products,especially intelligent chassis systems related to autonomous driving,such as brake-by-wire and steer-by-wire actuators,are classified under Automotive Safety Integrity Level D(ASIL D).This paper summarizes industry research on redundancy mechanisms in system safety architecture,analyzes and organizes fail-operational safety architecture across different levels of autonomous driving,and examines functional safety degradation strategies.Finally it discusses the potential for integrating ISO 21448 into the ISO 26262 standard to effectively prevent accidents due to errors in the vehicle's Electronic/Electrical(E/E)systems and insufficient actuator performance,thereby providing stronger assurance for safe vehicle operation.

关 键 词：智能汽车 功能安全 冗余机制 域控制器 

分 类 号：U461.91[机械工程—车辆工程]