With an increasing degree of automation, automated vehicle systems become more complex in terms of functional components as well as interconnected hardware and software components. Thus, holistic systems engineering becomes a severe challenge. Emergent properties like system safety are not solely arguable in singular viewpoints such as structural representations of software or electrical wiring (e.g. fault tolerant). This states the need to get several viewpoints on a system and describe correspondences between these views in order to enable traceability of emergent system properties. Today, the most abstract view found in architecture frameworks is a logical description of system functions which structures the system in terms of information flow and functional components. In this article we extend established system viewpoints towards a capability-based assessment of an automated vehicle and conduct an exemplary safety analysis to derive behavioral safety requirements. These requirements can afterwards be attributed to different viewpoints in an architecture frameworks and thus be integrated into a development process for automated vehicles.
@cite_25 propose a surveillance system based on performance criteria for the (Automation Level 2) research vehicle Leonie in the project . Performance criteria for the system are identified based on functional degradation strategies which are part of the safety concept for the vehicle. Since Level 2 automation relies on a human supervisor as a fall-back strategy, the demanded state in case of performance degradation is a request for takeover.
@cite_25
2051228755
Autonomous driving in urban environments is potentially dangerous since a malfunction of vehicle guidance systems can lead to severe situations for passengers inside the autonomous vehicle and other road users. Therefore both, monitoring the current system operation state by a surveillance system, which is able to detect failures of software and hardware modules, and a safety system, which reacts on these failures immediately, is necessary.