The Missing Link: Developing a Safety Case for Perception Components in Automated Driving
- Rick Salay - University of Waterloo ,
- Krzysztof Czarnecki - University of Waterloo ,
- Hiroshi Kuwajima - DENSO CORPORATION ,
- Hirotoshi Yasuoka - DENSO CORPORATION ,
- Vahdat Abdelzad - University of Waterloo ,
- Chengjie Huang - University of Waterloo ,
- Maximilian Kahn - University of Waterloo ,
- Van Duong Nguyen - University of Waterloo ,
- Toshihiro Nakae - DENSO CORPORATION
ISSN: 2641-9645, e-ISSN: 2641-9645
Published March 29, 2022 by SAE International in United States
Citation: Salay, R., Czarnecki, K., Kuwajima, H., Yasuoka, H. et al., "The Missing Link: Developing a Safety Case for Perception Components in Automated Driving," SAE Int. J. Adv. & Curr. Prac. in Mobility 5(2):567-579, 2023, https://doi.org/10.4271/2022-01-0818.
Safety assurance is a central concern for the development and societal acceptance of automated driving (AD) systems. Perception is a key aspect of AD that relies heavily on Machine Learning (ML). Despite the known challenges with the safety assurance of ML-based components, proposals have recently emerged for unit-level safety cases addressing these components. Unfortunately, AD safety cases express safety requirements at the system level and these efforts are missing the critical linking argument needed to integrate safety requirements at the system level with component performance requirements at the unit level. In this paper, we propose the Integration Safety Case for Perception (ISCaP), a generic template for such a linking safety argument specifically tailored for perception components. The template takes a deductive and formal approach to define strong traceability between levels. We demonstrate the applicability of ISCaP with a detailed case study and discuss its use as a tool to support incremental development of perception components.