logo资料库

Getrag ISO26262功能安全实施案例.pdf

第1页 / 共27页
第2页 / 共27页
第3页 / 共27页
第4页 / 共27页
第5页 / 共27页
第6页 / 共27页
第7页 / 共27页
第8页 / 共27页
资料共27页,剩余部分请下载后查看
A global approach to functional safety Dr.-Ing. M. Leibbrandt, Getrag Ford Transmissions GmbH
Agenda 1. Finding all hazards 2. Determination of safety goals 3. Definition of safety functions  Local safety architecture  Global safety architecture 4. Hardware architectural metrics 5. Bus communication 2 © GETRAG, 14th International VDI Congress, Drivetrain for Vehicles, Friedrichshafen June 2014, Dr. Martin Leibbrandt June 24, 2014
Finding all hazards
System boundary diagram BUS Signals ( CAN / LIN ) External Controls Engine System Damper Starter Housing Breather TCMA L 1 & L 2 SW Nested Clutch Rear Roll Restrictor Hydraulic Controls Gears / Shafts / Bearings LHS Engine Mount Shipping Plugs Parksystem Oilcooler Pressurefilter Internal Controls Synchronizer Oil Pan / Suction Filter Oil Pump Oil Flow Differential Shaft Drives Legend : Housing Connection Signals Oil Mechanical Interface Boundary Transmission 4 © GETRAG, 14th International VDI Congress, Drivetrain for Vehicles, Friedrichshafen June 2014, Dr. Martin Leibbrandt June 24, 2014 SHS TMC DSL ASL MSL GSL SIC GSM
Physical interface diagram BUS Signals ( CAN / LIN ) External Controls Transfer torque Faults (e.g. HAZOP): No torque Too much torque Too less torque Intermittent torque Negative torque … Engine System Damper Nested Clutch Hydraulic Controls Gears / Shafts / Bearings Internal Controls Synchronizer TCMA L 1 & L 2 SW Parksystem Oil Pump Oil Flow Shaft Drives Legend : Housing Connection Signals Oil Mechanical Interface Boundary Transmission 5 © GETRAG, 14th International VDI Congress, Drivetrain for Vehicles, Friedrichshafen June 2014, Dr. Martin Leibbrandt June 24, 2014
Safety Goals
Safety Goals – Hazard And Risk Analysis 7 © GETRAG, 14th International VDI Congress, Drivetrain for Vehicles, Friedrichshafen June 2014, Dr. Martin Leibbrandt June 24, 2014
Safety Goals – Example Definition System Fault: Transmission blocks drive shaft. On a double clutch transmission this can happen if both clutches are engaged at the same time (clutch tie-up) Rating: Depending on vehicle architecture, vehicle state and drive situation between ASIL QM and ASIL D Safety goal (front driven vehicle): If absolute vehicle speed is above a defined threshold, the system shall prevent with a safety integrity of ASIL C that the transmission output is blocked due to both clutches engaged. Safe State: To establish the Safe State the difference of the added torques of both clutches and the engine torque shall be below a defined total torque. Process safety time: 300 ms © GETRAG, 14th International VDI Congress, Drivetrain for Vehicles, Friedrichshafen June 2014, Dr. Martin Leibbrandt 8 June 24, 2014
分享到:
收藏