Designing System Architecture
Daniel Lammering
Carolin Hilbert
Final Event
Aachen, Germany
28 June 2017
// Overview of Working Packages
•
•
•
•
Functional & Safety Requirements for automated driving
Specification and harmonization of functional and system architecture
Definition of a fail-operational & resilient system architecture:
•
Duo Duplex Architecture with fault detection selected and
advantages evaluated
Specification of harmonized driving strategies for minimum risk
maneuver & lane change maneuver
2
// 28 June 2017
AdaptIVe Final Event, Aachen
// System Architecture Design
Logical
Architecture
Solution independent
structuring of features
Functional Architecture
Functional description of logical
features & their interfaces
Network Architecture
Electric infrastructure of the system
and
partitioning of SW functions and I/Os
Wiring Harness Architecture
ECU placement and the electrical &
physical connections
3
// 28 June 2017
AdaptIVe Final Event, Aachen
// Initial System Architecture
4
// 28 June 2017
AdaptIVe Final Event, Aachen
// Refined System Architecture
5
// 28 June 2017
AdaptIVe Final Event, Aachen
// Technical Architecture Design
Safety
Goals
Functional
Safety
Requirements
RIF
import
Imported Requirements
Functional Safety
Concept
Technical
Safety
Requirements
DOORS
Hazard & Risk
Assessment
Item
Definition
Technical Safety Concept
6
// 28 June 2017
AdaptIVe Final Event, Aachen
// Technical Architecture Design
Imported
Requirements
Functional
Safety
Concept
Technical
Safety
Concept
7
// 28 June 2017
AdaptIVe Final Event, Aachen
Requirements
Mapping
Function
Mapping
// Functional Safety and Redundancy Concept
• Vehicle E/E – Architecture needs a holistic approach
e.g Service Oriented Architectures, Cloud services, Update over the air
› Safety & system architecture/ interface
must be defined together
› Safety, reliability and availability has
important implications for analyzing
› Fail Operational Behavior – fail silent may
not be suitable any longer
8
// 28 June 2017
AdaptIVe Final Event, Aachen