ISO26262 开发接口协议DIA
iso26262标准各章节具体内容
ISO xxx是国际上广泛认可的汽车电子系统安全标准，它对汽车电子系统的设计、开发和生产提出了严格的要求和规范。
ISO xxx标准共分为12个章节，每个章节都涵盖了汽车电子系统安全的关键方面。
下面，我将对ISO xxx标准的各章节具体内容进行全面评估并撰写一篇有价值的文章，希望能够帮助你更深入地理解ISO xxx标准。
1. 概述 ISO xxx标准的概述部分主要介绍了该标准的出台背景、范围和目的，以及对术语和定义进行了详细解释。
在概述部分，标准对汽车电子系统安全的重要性进行了阐述，指出了汽车电子系统安全的挑战和风险，为后续章节的内容提供了重要的背景铺垫。
2. 术语和定义第二章节主要对ISO xxx标准中所涉及的术语和定义进行了详细的解释和说明。
这对于标准的理解和运用起到了重要的作用，也为后续的章节内容提供了必要的概念基础。
**3. 管理*/ 第三章节是关于汽车电子系统安全管理的内容，主要包括了安全管理的责任和任务分配、安全管理计划的制定和执行、安全管理过程的控制和监督等内容。
在这一章节中，标准提出了对于汽车电子系统安全管理的严格要求，要求相关的责任人员必须具备专业的知识和经验，以确保汽车电子系统的安全管理得到有效执行。
**4. 安全计划项的内容和要求*/ 第四章节主要包括了对汽车电子系统安全计划的内容和要求的详细阐述。
安全计划是确保汽车电子系统从设计到生产都符合ISO xxx标准要求的关键部分，标准对安全计划的编制、实施和审核提出了明确的要求，并对安全计划的内容进行了详细的列举和解释。
**5. 扩展性依赖性和适用性*/ 第五章节主要讨论了ISO xxx标准的扩展性依赖性和适用性。
在这一章节中，标准指出了在特定的情况下，对标准的适用性可能会有所不同，因此需要根据具体情况进行灵活的解释和应用。
这一章节的内容对于理解和正确应用ISO xxx标准具有重要的指导意义。
**6. 安全管理过程*/ 第六章节是关于汽车电子系统安全管理过程的内容，主要包括了安全需求的确定、安全分析和评估、功能安全验证和确认等内容。
ISO26262 开发接口协议DIA
Development Interface Agreement
INSTRUCTIONS FOR COMPLETION For each Work Product: - SUPPLIER shall confirm the responsibility in completing Work Products (Col. Q, R, S, T) - SUPPLIER shall confirmthe Work Product submission level (Col. V) - SUPPLIER shall state all the document references covering the WP for the concerned EE component (Col. U) - SUPPLIER documents submission content shall comply with the DCI when existing (Col. G) Requirement level for ASIL ++: Highly recommended : SUPPLIER should provide document
WP
Submission level
R
A
a
S
I X X X
R X X X X
A X X X X X X X X
S
I Full Full Full Full Full Full Full Full X Consultation
iso26262功能安全评价方法
iso26262功能安全评价方法【原创实用版2篇】目录（篇1）1.Iso26262 功能安全评价方法的背景和意义2.Iso26262 功能安全评价方法的具体内容3.Iso26262 功能安全评价方法的实施步骤4.Iso26262 功能安全评价方法的优势和应用5.Iso26262 功能安全评价方法的未来发展正文（篇1）一、Iso26262 功能安全评价方法的背景和意义Iso26262 功能安全评价方法是一种针对汽车电子系统功能安全的国际标准，它的出现是为了确保汽车电子系统在失效情况下能够按照预期方式进行故障处理，从而避免对人员和环境造成伤害。
随着汽车电子化程度的不断提高，功能安全日益受到重视，Iso26262 功能安全评价方法应运而生，成为了保证汽车安全的重要手段。
二、Iso26262 功能安全评价方法的具体内容Iso26262 功能安全评价方法主要包括以下几个方面：1.安全目标的定义：根据汽车电子系统的功能和失效模式，明确安全目标，确保系统在失效情况下能够按照预期方式进行故障处理。
2.危害分析：通过对汽车电子系统可能的失效模式进行分析，评估可能带来的风险和危害程度。
3.功能安全等级：根据危害分析结果，为汽车电子系统中的各个功能分配相应的安全等级。
4.安全要求和措施：针对不同安全等级的功能，制定相应的安全要求和措施，确保系统在失效情况下能够满足安全目标。
5.验证和评估：对汽车电子系统进行实际验证和评估，检查系统在失效情况下是否能够按照预期方式进行故障处理。
三、Iso26262 功能安全评价方法的实施步骤1.建立项目团队：由汽车制造商、零部件供应商、技术服务公司等相关方共同组成项目团队，明确各方职责和任务。
2.收集和分析相关信息：收集汽车电子系统的设计、制造、使用等方面的信息，进行系统分析和失效模式分析。
3.制定安全目标和功能安全等级：根据分析结果，制定安全目标和功能安全等级。
4.制定和实施安全要求和措施：针对不同安全等级的功能，制定相应的安全要求和措施，并确保在系统设计和制造过程中得到有效实施。
ISO 26262功能安全相关的特殊图形符号和AIAG APQP参考手册与全球供应商质量指南（G-S
A CHARACTERISTIC OF AN ITEM, ELEMENT OR PRODUCTION PROCESS FOR WHICH REASONABLY FORESEEABLE DEVIATION COULD AFFECT, CONTRIBUTE TO OR CAUSE ANY POTENTIAL REDUCTION OF FUNCTIONAL SAFETY.COMPLIANCEMONITORING OFREQUIREDCOMPLIANCEMONITORING OFREQUIREDMONITORING OFREQUIREDCOMPLIANCEFIRST ARTICLE INSPECTION/OK FIRST PART≥ 1.33≥ 1.33≥ 1.67≥ 1.67≥ 1.67≥ 1.67≥ 1.67≥ 1.67≥ 1.67≥ 1.67OK FIRST PARTINSPECTION/FIRST ARTICLENON-KEY CHARACTERISTIC - STANDARD DIMENSION VS. STANDARD (INCL. TOLERANCE)USED TO SPECIFY ONGOING SPC METHODOLOGIES TO BE PERFORMED.SIGNIFICANT CHARACTERISTICS ARE THOSE PRODUCT PARAMETERS AND REQUIREMENTS THAT ARE IMPORTANT FOR CUSTOMERSATISFACTION (FORM, FIT AND FUNCTION) AND FOR WHICH QUALITY PLANNING ACTIONS MUST BE ADDRESSED ON A CONTROL PLAN.CRITICALSIGNIFICANTSPC (INITIAL) SHORT TERM Cpk≥ 1.67ISO 26262FUNCTIONAL SAFETY RELATED SPECIALDRAWING SYMBOLAIAG APQP REFERENCE MANUAL, GLOBAL SUPPLIER QUALITY MANUAL (G-SM-01) QMS-1004255, APPENDIX ALONG TERMPpk STANDARDSSSSCHARACTERISTICNAME CONTROL ITEM PRODUCTS HAVE CRITICAL CHARACTERISTICS THAT MAY AFFECT SAFE VEHICLE/PRODUCT OPERATION AND/ORCOMPLIANCE WITH GOVERNMENT REGULATIONS. UNIQUE SYMBOLS IDENTIFYING SAFETY AND REGULATORY CHARACTERISTICS.REFERENCE VIEWSSCALE 2:1SINGLE SIDED GOLD CONTACTSLOCATED ON THIS SIDE OFCONNECTORALWAYS LIFT CONNECTOR SLIDER LATCH VERTICALLY TO THE OPEN POSITION WHEN INSERTING OR EXTRACTING A CABLE TO AVOID CONNECTOR AND CABLE CONTACT DAMAGE. MUST CLOSE THESLIDER LATCH TO MAKE A PERMANENT CONNECTION TO THECABLE. AVOID LATERAL LOADING OF THE CONNECTOR.CONNECTOR TYPE: 4 POS FFC CONNECTORPIN 1 LOCATIONMANUFACTURER: AMPHENOLMANUFACTURER P/N: SFW4S-2STMAE1LF1940.79.35100.4ON PISTON SURFACENO PARTING LINE ONSEALING SURFACE PERMITTEDSURFACE FINISH SPI-B1 OR SMOOTHERA0.3 X 59°NO BURRS ALLOWED31.53±0.19±0.12X 5±0.130.411.5+-0.20.17.86±0.05ISO-109 EXTERNAL O-RING SEALING SURFACEB1312.25415.253.6±0.122.450.2A B C0.05C15.254(2X) M3 X 0.5 TAPPED HOLE1312.25AAGRAVITY0.1A12±0.05 2±0.10 6.5±0.1010±0.108.32±0.05SECTION A-A0.4.08UNDER SENSOR HOUSINGA15.254.03SENSATA TECHNOLOGIES 8MPP2-XX-XxXX-X-X X-XPSIG YYMMDD MADE IN MEXICOLASER CODING7.59±0.13BB2.62±0.08SECTION B-B SCALE 4 : 1MATERIALPERFORMANCEENVIRONMENTELECTRICAL CHARACTERISTICS OVER OPERATING TEMP RANGERECOMMENDED PORT MATING GEOMETRYMATING MATERIAL: CAST AlHARDWARE INSTALLATION TORQUE:7 IN-LB (1.20 N-mm) MAXCONNECTOR PINOUTUPDATE RATE (SEE NOTE 3)0: 0.5ms 1: 1.5ms 2: 6.5ms 3: 32.0ms I²C ADDRESS0x280x380x480x580x680x78MODEU: UPDATE MODE S: SLEEP MODEFULL SCALE PRESSURE RANGE01: 1PSIG 05: 5PSIGFAMILY DESCRIPTION MEMS I²C DIGITAL LOW PRESSURE SENSOR8MPP2 - XX - XxXX - X - XRECOMMENDED O-RING MATING GEOMETRY(PER ISO3601-109)MATING MATERIAL: SELECTED BY CUSTOMER (COMPATIBLE WITHNATURAL GAS AND RELEVANT APPLICATION MEDIA)PACKAGEBLACK FORTRON 1140 L4 (40% FIBER REINFORCED PPS)PRESSURE SEALO-RING SUPPLIED BY END USERCONNECTOR CONTACTS GOLDRoHS COMPLIANTPIN OUTPUT 1SCL 2SDA 3VSUP 4GNDOPERATING TEMPERATURE -40°C TO +85°C STORAGE TEMPERATURE -40°C TO +125°C FULL SCALE PRESSURE RANGE TRUE GAGEHUMIDITY 95% CONDENSING ON ATMOSPHERIC PORT ORIENTATION SENSING ELEMENT PERPENDICULAR TO GROUND EXPOSURE NATURAL GAS AND ITS IMPURITIES ON GAS SIDE PORTSHOCK 100G/6ms (PER MIL-STD-810)VIBRATION 5-150Hz @ 5m/s² FOR 20 SWEEPS PER AXISESDIEC 61000-4-2; 2kV HBM RADIATED IMMUNITYIEC 61000-4-20; 50V/m LEVELTOTAL ERROR BAND @ -40°C TO 85°C ±2.0%FSP @ Vs = 3.3VBURST PRESSURE70 PSIGPROOF PRESSURE20 PSIG (MAX)HELIUM LEAK RATE, OUT OF BOX <1e-6 cc/sec @25°CNATURAL GAS LEAKAGE RATE OVER LIFE <0.1mL/min @ 10 PSI AFTER 1k THERMAL CYCLESFROM -40°C TO 85°CTEB AFTER 1k TEMPERATURE CYCLES±2.0% @Vss = 3.3V AFTER 1k THERMAL CYCLESFROM -40°C TO 85°COPERATING SUPPLY VOLTAGE RANGE (Vs) 3.3 VDC 5%INPUT VOLTAGE PROTECTION VSUP: -0.3 TO 6VDC; ALL OTHERS: -0.3 TO VSUP + 0.3AVERAGE SUPPLY CURRENT 2.5mA (MAX)OUTPUT14 BIT DIGITAL OUTPUT OUTPUT RANGE (0%FSP TO 100%FSP)1638 TO 14745 COUNTS OUTPUT RESOLUTION12 BITS SCALED TO 14 BITSPOWER ON RESET THRESHOLDFALLING - 1.8V GUARANTEED SHUTDOWN RISING - 2.35V GUARANTEED STARTUP MAX POWER UP TIME TO OUTPUT VALID 8.4ms (MAX)PEAK CURRENT10mA (MAX)Vs RAMP UP TO 3.3V TIME LIMITS5µS MIN, 20µS MAX AVERAGE CURRENT DURING A POWER UP AND SINGLE READ CYCLE2mA (MAX)AVERAGE CURRENT DURING I²C READ OVER TEMP (DURING INTERVAL I²C START TO STOP) 2.5mA (MAX)VOLTAGE (Vs) NOISE TOLERANCE5%SHEET 1 OF 28MPP2-XX-XxXX-X-XAGAS METER TRANSDUCER ENVELOPE DRAWINGADEVICE: 8MPPPROJECT:DATE ECN NO.REVISION DESCRIPTIONTOLERANCESDECIMALS ANGLESINTERPRET DIMENSIONING AND TOLERANCING PER ASME Y14.5-2009. UNLESS OTHERWISE SPECIFIED DIMENSIONS ARE IN MILLIMETERS.FOR REFERENCE ONLY, CHECK LATEST REVISION BEFORE USE.PARTS MADE TO THIS PRINT MUST CONFORM TO E9898 REV. E.REV.AINITIAL RELEASE TO PRODUCTION; RTBECO-38827510-SEP-20208ZONE REV.TITLEDWG NO.SCALE3:1ROB BALLERSTEDT ENGINEER DATE 10-SEP-2020THIRD ANGLE PROJECTION SOLIDWORKSDATE DRAWN DATE DATE APPROVED APPROVEDROBERT LOUGHREY MIKE FALCO 10-SEP-202010-SEP-2020RICARDO YANEZ 10-SEP-2020529 PLEASANT STREETP.O. BOX 2964ATTLEBORO, MA 02703SIZEA1SENSATA TECHNOLOGIES PROPRIETARY AND CONFIDENTIAL. NEITHER THIS PRINT NOR THE INFORMATION CONTAINED HEREON IS TO BE USED AGAINST THE INTERESTS OF SENSATA TECHNOLOGIES OR AGAINST THE INTERESTS OF ANY OF ITS AFFILIATED COMPANIES OR WHOLLY OWNED SUBSIDIARIES.DO NOT SCALE DRAWINGBCDABDC765432158763142R0.4 REF 5±0.1001±0.050 PITCH (GOLD PLATED CONTACTS)0.700±0.0800.33±0.05 I²C COMMUNICATION:DEVICE SLAVE WAIT FOR PRESSURE MASTER PRESSURE MASTER ADDRESS [6:0] SLAVE ACK DATA [13:8] ACK DATA [7:0] NACK NOTE: THERE ARE THREE ADJUSTMENTS TO THE I²C IMPLEMENTATION COMPARED WITH THE ORIGINAL I²C PROTOCOL:NO EXTERNAL CAPACITANCE NEEDED FOR Vs5.RECOMMENDED CABLE GEOMETRYSENDING A START-STOP CONDITION WITHOUT ANY TRANSITIONS ON THE CLK LINE (NO CLOCK•PULSES IN BETWEEN) CREATES A COMMUNICATION ERROR FOR THE NEXT COMMUNICATION,EVEN IF THE NEXT START CONDITION IS CORRECT AND THE CLOCK PULSE IS APPLIED. ANSHEET 2 OF 28MPP2-XX-XxXX-X-X A REV.DWG NO.20:1SOLIDWORKS529 PLEASANT STREETP.O. BOX 2964ATTLEBORO, MA 02703。
5.5-相关技术---功能安全法规ISO26262简介
ISO26262
形式认证法规ECER79(转向)包含对功能安全的基本要求。北 美的OEM和供应商已经加快了追赶欧洲的步伐，正在依照ISO26262 建立自己IDE功能安全体系，SAE组织（美国机动车工程师协会）已 经组件汽车功能安全委员会（AFSC：Automotive Functional safety committee）在为欧洲OEM提供产品的一级供应商的驱动下，日本 在2010年末至2011年初，主流OEM启动了对ISO26262合规进程的启 动会议，由JAMA(一般社团法人日本自动车工业会)和JARI（日本自 动车研究所）合作创建通用的工作流程。国内的OEM和一级供应商 也非常关注ISO26262的动态，国标的转化工作正在中国汽车技术研 究中心的指导下全面展开
参考文献：电动助力转向系统故障诊断与失效保护 作者：张 瑞 硕士论文 2014.10 中国科学技术大学
故障诊断技术
系统故障自诊断是指系统的自身的硬件设计或者程序对系统 正常工作状态和工作异常作出判断，并根据故障特征，诊断系统故 障通过失效保护及处理程序，准确的定位故障。根据不同的故障类 型，使系统进入到安全的工作模式。
故障诊断技术
• 故障自诊断系统的主要任务有以下几块：系统对系统自身的故障 探测、诊断系统对故障类别的判断、系统故障定位及系统故障失 效保护等等。故障探测定义为系统正常工作后，通过周期性地实 时监测系统的运行状态，并通过系统设计好的诊断条件，判断系 统有没有产生了故障；诊断系统对故障类别的判断就是故障自诊 断系统在检测出故障发生后，自动告知系统故障的模式；故障定 位认为在故障自诊断系统监测出系统工作异常，并已经进行了系 统故障类别的判断，按照系统预定义的诊断条件定义具体故障位 置并记录故障诊断条件参数。同时，为系统的失效保护提供输入 信息；故障失效保护是系统故障诊断过程中最后一个环节，同时 也是最重要的一个环节，使系统能够根据故障原因，采取不同的 保护措施。
功能安全FunctionalSafetyISO26262-1
功能安全FunctionalSafetyISO26262-1ISO 26262-1 词汇表ISO26262是基于IEC61508标准演化⽽来的⼀项标准，旨在满⾜道路车辆电⼦电⽓系统领域的特定需求。
这种改编适⽤于由电⼦电⽓元件和软件组件组成的安全系统的整个⽣命周期内的所有活动。
安全是未来汽车发展的关键问题之⼀。
⼀些新的功能，在驾驶员辅助、动⼒、车内动态控制和主动&被动安全系统等⽅⾯⽇益牵涉到越来越多的系统安全⼯程。
这些功能的开发和集成会增加对安全系统开发流程、并证明所有合理的系统安全⽬标都得到满⾜的证据的需求程度。
随着技术复杂度、软件内容和机电⼀体化程度的不断提⾼，系统失效和随机硬件失效的风险也越来越⼤。
ISO 26262会提供适当的要求和流程来避免这些风险。
系统安全是通过⼀系列安全措施来实现的，通过应⽤各种技术（例如机械、液压、⽓动、电⽓、电⼦、可编程电⼦），并在开发过程的各个层⾯上应⽤。
尽管ISO26262涉及到电⼦电⽓系统的功能安全，但是它也会提供其他系统常⽤安全技术的框架。
ISO26262可以：a)提供车辆安全⽣命周期的⽀持（管理、开发、⽣产、操作、服务、报废）；b)提供车辆专⽤的风险评估⽅法（ASIL，Automotive Safety Integrity Levels，汽车安全完整性等级）；c)使⽤ASIL评级提出可实施的功能安全需求，来避免不合理的剩余风险；d)向供应商提供功能安全需求。
功能安全受到开发流程（需求规范、设计、实现、集成、验证、确认和配置）、⽣产和服务流程、管理流程的影响。
安全问题与以功能为导向、以质量为导向的开发活动和⼯作产品交织在⼀起。
ISO 26262阐述了开发活动和⼯作产品等安全相关的内容。
1 名称解释：⽂档、标准或者经验。
1.3architecture：架构；代表相关项/功能/系统/元件的构造块及构造块的边界和接⼝，且相关的功能已经分配给了硬件/软件元件。
汽车功能安全ISO26262 ASIL分解经验
17 February 2011
A HW/SW element inherits the ASIL from the highest ASIL function running on it
Experience with ASIL Decomposition
3
Lowering the ASIL
• In this case, the ASIL associated with the hardware or software component is inherited from the function with the highest ASIL
Function 1 (ASIL x) Function 2 (ASIL y)
7
Industrial Scenario
17 February 2011
Experience with ASIL Decomposition
8
Problem Description
• Consider a function F which, upon input from a combination of sensors S1, S2, ... Sn issues an activation command to actuator M (“Motor”)
4
Valid Combinations
Table of valid combinations for ASIL decomposition
17 February 2011
Experience with ASIL Decomposition
5
ASIL Decomposition Basics
ISO26262_DIA模板
eate validation plan 6 Specification of the technical safety requirements
Derive technical safety requirements Verify technical safety requirements Refine validation plan 7 System design
Refine software safety requirements Perform safety analysis (Check if required) Perform dependent failure analyses (Checkk if required) Verify software architecture 8 Software unit design and implementation Specify software units Implement software untis Perform static verification of implemented software units 9 Software unit testing Refine software verification plan Specfiy unit tests Perform unit test 10 Software integration and testing Plan software integration testing Specify software integration tests Perform software integration test 11 Verification of software safety requirements Plan verification of software safety requirements Specify software safety requirements verification tests Perform software safety requirements verification test 12 Annex C Configuration Specify configuration data Specify calibration data Refine safety plan Create configuration data Create calibration data Refine software verification plan Specify tests of variants Perform test of configurations 7 Production
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
<supplier name>
This DIA shall be put under configuration control and updated if necessary during the course of the development project.
For further information and recommendation of how to set up this DIA please refer to ISO 26262-8:5.4.
About this document
This Development Interface Agreement (DIA) applies to the development work carried out for the above stated development project where the system contains software (Automotive Spice) and/or requirements regarding functional safety (ISO 26262).
Mark unused sections of this document as “NOTAPPLICABLE”, do not remove the paragraph heading.
Text marked with a<green background>is to be replaced by something specific. This shall be used if there are specific keywords within standardized paragraphs that shall be replaced when creating the Work Product from the template.
Development Interface Agreement - DIA
1
2
Version
ECN no.
Changed by
Change from last version
01
The change history shall be a detailed eபைடு நூலகம்ough description of what sections that have been changed since the last version. Depending on the changes that have been made it may be necessary to describe the changes more in detail.
Work Product
A
I
9
Assign roles
Role
Person @XXXAsite
Person @ supplier site
Safety Management
<person name and contact details>
3
General overview
This section shall contain a brief description ofthe background of and/or reason forthisdevelopment project.
Describebriefly the system being developed.If the product/itemdeveloped at this level is part of a system, alsobriefly describethe products’relationship to the system.
6
State reference to any Non Disclosure Agreement (NDA) here.
7
List all safety activities in this paragraph. State which party (XXXAor supplier) is responsible “R” and supporting “S” for each activity.
Abbreviations
Abbreviation
XXXA
XXXXAutomotive
N/A
Not Applicable
TBC
To Be Confirmed
TBD
To Be Defined
4
Ref
Id
Issue
Document Name
[R1]
5
Define here the background to why this DIA has been established.
Blue text in italic is information/explanation directed to the issuer of the document.Before releasing theWork Product (document)all blue italic text must be removed.
The DIA is a bilateral contract determining each party’s interfaces and responsibilities.
The parties this DIA applies to are:
XXXXAutomotive (named “XXXA” hereafter)
Activity
R
S
8
List all safety work. State which party (XXXAor supplier) is responsible “R” and supporting “S” for each activity. State which party (XXXAor supplier) approves “A” the work product. State which party the work product is for information “I”.