Browse Topic: Safety regulations and standards

Items (850)
Find
Automating Fault Detection Time Intervals in Automotive Functional Safety Using HIL Simulation2025-28-0274To be published on 11/06/2025
Functional safety is driven by number of standards like in automotive its driven by ISO26262, in Aerospace its driven by DO-178C, and in Medical its driven by IEC 60601. Automotive electronic controllers must adhere to state-of-the-art functional safety standard provided by ISO26262. A critical functional safety requirement is the Fault Handling Time Interval (FHTI), which includes the Fault Detection Time Interval (FDTI) and Fault Reaction Time Interval (FRTI). The requirements for FHTI are derived from Failure Mode Effect Analysis (FMEA) conducted at the system level. Various fault categories are analyzed, including electrical faults (e.g., short to battery, short to ground, open circuits), systemic faults (e.g., sensor value stuck, sensor value beyond range), and communication faults (e.g., incorrect CAN message signal values). Controllers employ strategies such as debouncing and fault time maturity to detect these faults. Numerous FDTI requirements must be verified to ensure
Lengare, Sunil, Yadav, Vikaskumar, Shiraskar, Pallavi
Ensuring Functional Safety and SOTIF Analysis for Autonomous Off-Highway Vehicles: Addressing Risks in Complex Systems2025-28-0315To be published on 11/06/2025
The growing complexity of electronic systems and the rise of autonomous (driverless) vehicles in the off-highway industry emphasise the need for safer Electronic/Electrical (E/E) systems. In this paper, we present our approach to performing a comprehensive Functional Safety (FuSa) analysis and extending the scope to the application of Safety of the Intended Functionality (SOTIF) principles for off-highway vehicles. We apply FuSa to ensure that systems operate safely, by minimising risk through safety measures. This involves assessing risks based on potential hazards and deriving safety requirements in accordance with ISO 19014 and IEC 61508. Autonomous operation involves significant safety challenges. Thus, further analysis is needed to ensure the perception system functions safely and as intended in all scenarios. In the absence of a dedicated SOTIF standard for off-highway vehicles, we adapt ISO 21448 from the automotive industry for this analysis, as it is regarded as state-of-the
Kumar, Amrendra, Bagalwadi, Saurabh
Introduction to Technical Standards1352408/07/2025
This video series brought to you by SAE International will show you what a standard is, how to interpret what you're reading, and how to differentiate technical standards from other information types.
Patterson, Lori
A 3D Visibility Label for Mobility Coatings: Enhancing Traffic Safety Through Color and Sensor Perception12-09-02-000907/22/2025
The mobility industry is rapidly advancing towards more autonomous modes of transportation with the adoption of sophisticated self-driving technologies. However, a critical challenge, being the lack of standardized norms for defining, measuring, and ensuring vehicle visibility across various dynamic traffic environments, remains. This lack of awareness of visibility is hindering the development of new regulations for vehicle visibility and the controlled transition to a fully-integrated autonomous future. While current efforts focus on improving sensing technologies like computer vision, LiDAR systems, and sensor fusion development, two key issues remain unresolved: 1 The absence of a representative and realistic three-dimensional color visibility model for measuring and comparing the visibility of complex shapes with large but varying color coated three-dimensional surface areas. 2 The need for enhanced visibility solutions that improve visibility and vehicle detectability for all
Mijnen, Paul W., Moerenburg, Joost H.
Cab Roof Strength Evaluation - Quasi-Static Loading Heavy TrucksJ2422_202507 (Current)07/22/2025
This SAE Recommended Practice describes the test procedures for conducting quasi-static cab roof strength tests for heavy-truck applications. Its purpose is to establish recommended test procedures that will standardize the procedure for heavy trucks. Descriptions of the test setup, test instrumentation, photographic/video coverage, and test fixtures are included.
Truck Crashworthiness Committee
SAE TOMORROW TODAY - What Happens After a Crash? The Push for Safer AVs1352307/11/2025
What happens after an AV crashes? That split-second response can make all the difference--and that's exactly what the Automated Vehicle Safety Consortium (AVSC) is focused on. Backed by decades of engineering and mobility expertise, the AVSC brings together top minds in AV development to align on critical safety issues. Their latest work tackles one of the most urgent: how these vehicles should react and communicate after a crash. As AVs expand from test fleets to real-world deployments, the industry needs clear guidance now more than ever. Listen in as we sit down with Jonathan Barentine, Principal Engineer at the AVSC, to discuss the organization's just-released best practices for automated driving systems in the moments following a collision. You'll learn how the AVSC is working with first responders, manufacturers, and policymakers to develop scenario-based protocols that prioritize effective communication, safety management, and a culture of accountability. We'd love to hear from
Patterson, Lori
Fuel Versus Oxygen: Evaluations and ConsiderationsAIR5648B (Current)07/09/2025
Current regulations (e.g., Title 14 of the United States Code of Federal Regulations, or 14 CFR) define design requirements for oxygen system provisions for protection of crewmembers and passengers following emergency events such as in-flight decompression. This aerospace information report (AIR) addresses the operational oxygen system requirements for a decompression incident that may occur at any point during a long-range flight, with an emphasis for a decompression at the equal time point (ETP). This AIR identifies fuel and oxygen management contingencies and presents possible solutions for the efficient, safe, and optimum fuel/oxygen flight continuation. Oxygen management is a critical concern for all aircraft, ranging from single-engine types operating above 10000 feet to complex, high-performance aircraft equipped with supplemental oxygen systems. Proper planning ensures compliance with regulations and supports pilot and passenger safety at higher altitudes. This document
A-10 Aircraft Oxygen Equipment Committee
Structural Modification for Personally Licensed Vehicles to Meet the Transportation Needs of Persons with DisabilitiesJ1725_202506 (Current)06/30/2025
This SAE Information Report applies to structural integrity, performance, drivability, and serviceability of personally licensed vehicles not exceeding 10000 pounds GVWR such as sedans, crossovers, SUVs, MPVs, light trucks, and van-type vehicles that are powered by gas and alternative fuel such as electric, plug-in hybrid, or hybrid technologies. It provides engineering direction to vehicle modifiers in a manner that does not limit innovation, and it specifies procedures for preparing vehicles to enhance safety during vehicle modifications. It further provides guidance and recommendations for the minimum acceptable design requirements and performance criteria on general and specific structural modifications, thereby allowing consumers and third-party payers the ability to obtain and purchase equipment that meets or exceeds the performance and safety of the OEM production vehicle.
Adaptive Devices Standards Committee
Minimum Sound Testing of Medium- and Heavy-Duty Electric Vehicles2025-01-504406/27/2025
The acoustic performance of seven vehicles was evaluated according to Canadian Motor Vehicle Safety Standard 141 (CMVSS 141), which governs minimum required sound levels for hybrid and electric vehicles with a gross vehicle weight rating (GVWR) of 4536 kg (10,000 lb) or less. To better understand the sound profiles of medium-duty electric vehicles (MDEVs) and heavy-duty electric vehicles (HDEVs), the sound emissions of two light-duty electric vehicles (LDEVs), one MDEV, three HDEVs, including an electric transit bus, and one heavy-duty internal combustion engine (HD ICE) vehicle were compared. The sound emissions of the MDEV and HDEVs were quieter than the HD ICE vehicle and comparable to that of the LDEVs equipped with auxiliary speakers. The MDEV with its auxiliary speaker turned off and all three HDEVs without auxiliary speakers met CMVSS 141 requirements in reverse gear and at speeds of 20 km/h and 30 km/h. The MDEV, though not subject to CMVSS 141, failed to meet the minimum sound
Sharma, Vinay, Larocque-Legros, Marc-André, Weston, Cole, Schulte, Andrew, Christenson, Martha, Rooney, Anne
Observers for Laser Safety in the Navigable AirspaceARP5535B (Current)06/17/2025
This document applies to safety observers or spotters involved with the use of outdoor laser systems. It may be used in conjunction with AS4970.
G-10T Laser Safety Hazards Committee
Proposed Reformulation of Brain Injury Criteria (BrIC) Using Head Rotation-Induced Brain Injury Thresholds Simulated and Derived Directly from A Subhuman Primate Finite Element Model2025-22-000305/13/2025
Recent studies have found that Brain Injury Criteria (BrIC) grossly overpredicts instances of real-world, severe traumatic brain injury (TBI). However, as it stands, BrIC is the leading candidate for a rotational head kinematics-based brain injury criteria for use in automotive regulation and general safety standards. This study attempts to understand why BrIC overpredicts the likelihood of brain injury by presenting a comprehensive analysis of live primate head impact experiments conducted by Stalnaker et al. (1977) and the University of Pennsylvania before applying these injurious conditions to a finite element (FE) monkey model. Data collection included a thorough analysis and digitization of the head impact dynamics and resulting pathology reports from Stalnaker et al. (1977) as well as a representative reconstruction of the Penn II baboon diffuse axonal injury (DAI) model. Computational modeling techniques were employed on a FE Rhesus monkey model, first introduced by Arora et al
Demma, Dominic R., Tao, Ying, Zhang, Liying, Prasad, Priya
Development of a Generic Nearside Impact Test Fixture for Evaluating In-Vehicle Crashworthiness of Wheelchairs2025-22-000205/13/2025
Current voluntary standards for wheelchair crashworthiness only test under frontal and rear impact conditions. To help provide an equitable level of safety for occupants seated in wheelchairs under side impact, we developed a sled test procedure simulating nearside impact loading using a fixed staggered loading wall. Publicly available side impact crash data from vehicles that could be modified for wheelchair use were analyzed to specify a relevant crash pulse. Finite element modeling was used to approximate the side impact loading of a wheelchair during an FMVSS No. 214 due to vehicle intrusion. Validation sled tests were conducted using commercial manual and power wheelchairs and a surrogate wheelchair base fixture. Test procedures include methods to position the wheelchair to provide consistent loading for wheelchairs of different dimensions. The fixture and procedures can be used to evaluate the integrity of wheelchairs under side impact loading conditions.
Boyle, Kyle, Hu, Jingwen, Manary, Miriam, Orton, Nichole R., Klinich, Kathleen D.
Letter from the Guest Editors12-08-02-001105/06/2025
Letter from the Guest Editors
Liang, Ci, Törngren, Martin
The Why of Development Assurance2025-01-015405/02/2025
In the domain of aircraft certification, Development Assurance is what some would call a useful tool to gain confidence in the development of complex systems, and what others would call a necessary evil. But what does it actually do? Why is it necessary for certification of modern aircraft? What, epistemologically, does it bring to the table? This paper aims to show how Development Assurance (DA) activities, at all levels from aircraft to item, close the epistemological holes created when complex systems are chosen for implementation. It will map the different sources and types of uncertainty encountered in system and aircraft verification and explain how each type is dealt with within a certification context, working from simple mechanical systems up to complex and highly integrated systems using software and airborne electronic hardware and beyond. It will show that Development Assurance, far from being an arbitrary set of activities, systematically brings personal and corporate
Laflin, Cory R.
Determining Worst-Case Execution Time Bounds for Multi-Core Processors2025-01-015505/02/2025
Demonstrating deadline adherence for real-time tasks is a common requirement in all safety norms. Timing verification has to address two levels: the code level (worst-case execution time) and the scheduling level (worst-case response time). Determining which methodology is suited best depends on the characteristics of the target processor. All contemporary microprocessors try to maximize the instruction-level parallelism by sophisticated performance-enhancing features that make the execution time of a particular instruction dependent on the execution history. On multi-core systems, the execution time additionally is influenced by interference effects on shared resources caused by concurrent activities on the different cores, which are not controlled by the scheduling algorithm. In the avionics domain, the new FAA AC 20-193 / EASA AMC 20-193 guidance documents formalize predictability aspects of multi-core systems and derive adequate measures for timing verification. Timing verification
Kaestner, Daniel, Gebhard, Gernot, Huembert, Christian, Pister, Markus, Wegener, Simon, Ferdinand, Christian
A Systematic Literature Review on Safety of the Intended Functionality for Automated Driving Systems2025-01-503004/28/2025
In the automobile industry, ensuring the safety of automated vehicles equipped with the automated driving system (ADS) is becoming a significant focus due to the increasing development and deployment of automated driving. Automated driving depends on sensing both the external and internal environments of a vehicle, utilizing perception sensors and algorithms, and electrical/electronic (E/E) systems for situational awareness and response. ISO 21448 is the standard for Safety of the Intended Functionality (SOTIF) that aims to ensure that the ADS operate safely within their intended functionality. SOTIF focuses on preventing or mitigating potential hazards that may arise from the limitations or failures of the ADS, including hazards due to insufficiencies of specification, or performance insufficiencies, as well as foreseeable misuse of the intended functionality. However, the challenge lies in ensuring the safety of vehicles despite the limited availability of extensive and systematic
Patel, Milin, Jung, Rolf, Khatun, Marzana
Automated Vehicles and Infrastructure Enablers: Dedicated LanesEPR202500704/24/2025
Dedicated lanes provide a simpler operating environment for ADS-equipped vehicles than those shared with other roadway users including human drivers, pedestrians, and bicycles. This final report in the Automation and Infrastructure series discusses how and when various types of lanes whether general purpose, managed, or specialty lanes might be temporarily or permanently reserved for ADS-equipped vehicles. Though simulations and economic analysis suggest that widespread use of dedicated lanes will not be warranted until market penetration is much higher, some US states and cities are developing such dedicated lanes now for limited use cases and other countries are planning more extensive deployment of dedicated lanes. Automated Vehicles and Infrastructure: Dedicated Lanes includes a review of practices across the US as well as case studies from the EU and UK, the Near East, Japan, Singapore, and Canada. Click here to access the full SAE EDGETM Research Report portfolio.
Coyner, Kelley, Bittner, Jason
Advanced Driver Assistance Systems (ADAS): Assessing the Efficacy of Non-Impact Testing for Evaluating the Performance of Frontal Collision Mitigation Technology2025-01-805604/01/2025
As Automatic Emergency Braking (AEB) systems become standard equipment in more light duty vehicles, the ability to evaluate these systems efficiently is becoming critical to regulatory agencies and manufacturers. A key driver of the practicality of evaluating these systems’ performance is the potential collision between the subject vehicle and test target. AEB performance can depend on vehicle-to-vehicle closing speeds, crash scenarios, and nuanced differences between various situational and environmental factors. Consequently, high speed impacts that may occur while evaluating the performance of an AEB system, as a result of partial or incomplete mitigation by an AEB activation, can cause significant damage to both the test vehicle and equipment, which may be impractical. For tests in which impact with the test target is not acceptable, or as a means of increasing test count, an alternative test termination methodology may be used. One such method constitutes the application of a late
Kuykendal, Michelle, Easter, Casey, Koszegi, Giacomo, Alexander, Ross, Paradiso, Marc, Scally, Sean
Aggregation of Cervical Loads in Rear Impact Crash Tests and Comparison to Activities of Daily Living2025-01-870804/01/2025
Peak upper and lower neck load data from rear impact crash testing were reviewed, aggregated, and analyzed from over 1,800 tests of existing peer-reviewed literature and research as well as available testing conducted by the Insurance Institute for Highway Safety (IIHS) and the National Highway Traffic Safety Administration (NHTSA). Both human volunteers and anthropomorphic test devices (ATDs) were subjects of the reviewed studies and testing. Peak upper and lower neck axial forces (compression and tension), sagittal shear forces, and sagittal moments (flexion and extension) from available crash testing were reported and analyzed as functions of measured change in velocity (delta-V) ranging from approximately 3 to 60 km/h (1.9 to 37 mph). This load data was then further analyzed for possible trends amongst various testing conditions, such as seat type, ATD used, and subject seating position within the vehicle chassis and seat to develop a simple linear model. The linear regressions
Kazmierczak, Alex, Umale, Sagar, Visalli, Alyssa, Webb, Ella, Kashdan, Aryeh, Randles, Bryan, Welcher, Judson
The Influence of Impact Location and Angle on the Dynamic Response of a Large Omnidirectional Child Dummy Head and Neck Complex2025-01-874004/01/2025
Head injuries are a common cause of fatality and long-term impairment in child occupants in motor vehicle crashes. The National Highway Traffic Safety Administration (NHTSA) has developed the Large Omnidirectional Child (LODC) Anthropomorphic Test Device (ATD) where the head was designed to match pediatric biomechanical impact response targets from previous literature. The purpose of this study was to compare experimental and computational results for eight impact directions at 45-degree increments around the LODC head under two levels of impact severity: low and high, corresponding to nominal velocities of 3.08 mm/ms and 5.42 mm/ms, respectively. The experimental setup consists of the LODC head and neck assembly rigidly attached to a circular fixture plate and a hemispherical-shaped impactor 76.2 mm in diameter. The acceleration and angular velocity responses were measured and computed from the LODC finite element (FE) head CG and compared against the experimental data. Experimental
Challa, Abhishikt, Noll, Scott
Controllability and Driving Automation2025-01-867904/01/2025
A key challenge for manufacturers of automotive systems, hardware components and software products with no contribution to driving automation is the stringent requirements imposed on elements while being integrated into vehicles with driving automation. The result is increased development cost and low reusability. For such elements or components with no contribution to driving automation, their functions and failure modes remain unchanged when comparing vehicle integration with and without driving automation. The influence of driving automation is not accounted for in the current approach of classifying risk while conducting a Hazard Analysis and Risk Assessment (HARA). Functional safety standards for on-road vehicles rely on human intervention as a parameter to classify risk. Since current safety standards for on-road vehicles are not inclusive of driving automation concepts, classification of risk, based on existing definitions of parameters such as controllability, leads to
Shah, Mihir, Ibarra, Ireri
Research on Torque Management Safety Monitoring Control for Hybrid Vehicles2025-01-857904/01/2025
Hybrid vehicles are driven by the vehicle controller, engine controller and motor controller through torque control, and there may be unexpected acceleration or deceleration of the vehicle beyond the driver's expectation due to systematic failure and random hardware failure. Based on the torque control strategy of hybrid vehicles, the safety monitoring model design of torque control is carried out according to the ISO 26262 safety analysis method. Through the establishment of safety goals and the analysis of safety concepts, this paper conducts designs including the driver allowable torque design for safety monitoring, the driver torque prediction design for safety monitoring, the rationality judgment design of driver torque for safety monitoring, the functional safety degradation design, and the engine start-stop status monitoring, enabling the system to transition to a safe state when errors occur. Firstly, the design of the driver's allowable torque includes the allowable requested
Jing, Junchao, Wang, Ruiguang, Liu, Yiqiang, Huang, Weishan, Dai, Zhengxing
Freedom from Interference Challenges for Adaptive Autosar Based Platform2025-01-807404/01/2025
This paper examines the challenges and mechanisms for ensuring Freedom from Interference in Adaptive AUTOSAR-based platforms, with a focus on managing Memory, Timing, and Execution challenges. It explores the robust safety mechanisms in Classic AUTOSAR that ensure Freedom from Interference and the significant challenges in achieving interference-free operation in Adaptive AUTOSAR environments while adhering to ISO26262 standards. The study emphasizes strategies for managing complexities and outlines the multifaceted landscape of achieving interference-free operation. Additionally, it discusses ASIL-compliant Hypervisor, memory partitioning, and Platform Health Management as mechanisms for ensuring safety execution. The paper also raises open questions regarding real-time problems in live projects that are not solved with existing safety mechanisms. Adaptive AUTOSAR plays a crucial role in the development of autonomous and connected vehicles, where functional safety is of utmost
Jain, Yesha
Development of a Rule-Based Lidar Lane-Keeping Assistance System for Autonomous Vehicles Applications2025-01-802504/01/2025
Lane-keeping is critical for SAE Level 3+ autonomous vehicles, requiring rigorous validation and end-to-end interpretability. All recently U.S.-approved level 3 vehicles are equipped with lidar, likely for accelerating active safety. Lidar offers direct distance measurements, allowing rule-based algorithms compared to camera-based methods, which rely on statistical methods for perception. Furthermore, lidar can support a more comprehensive and detailed approach to studying lane-keeping. This paper proposes a module perceiving oncoming vehicle behavior, as part of a larger behavior-tree structure for adaptive lane-keeping using data from a lidar sensor. The complete behavior tree would include road curvature, speed limits, road types (rural, urban, interstate), and the proximity of objects or humans to lane markings. It also accounts for the lane-keeping behavior, type of adjacent and opposing vehicles, lane occlusion, and weather conditions. The algorithm was evaluated using
Soloiu, Valentin, Mehrzed, Shaen, Kroeger, Luke, Pierce, Kody, Sutton, Timothy, Lange, Robin
Responsible AI System Development in Automotive Applications: A Framework2025-01-810204/01/2025
With the surge in adoption of artificial intelligence (AI) in automotive systems, especially Advanced Driver Assistance Systems (ADAS) and autonomous vehicles (AV), comes an increase of AI-related incidents–several of which have ended in injuries and fatalities. These incidents all share a common deficiency: insufficient coverage towards safety, ethical, and/or legal requirements. Responsible AI (RAI) is an approach to developing AI-enabled systems that systematically take such requirements into account. Existing published international standards like ISO 21448:2022 (Safety of the Intended Functionality) and ISO 26262:2018 (Road Vehicles – Functional Safety) do offer some guidance in this regard but are far from being sufficient. Therefore, several technical standards are emerging concurrently to address various RAI-related challenges, including but not limited to ISO 8800 for the integration of AI in automotive systems, ISO/IEC TR 5469:2024 for the integration of AI in functional
Nelson, Jody, Lin, Christopher
Integration of Safety Standards for a Unified Safety Framework for Automated Vehicles2025-01-871704/01/2025
This paper proposes a structured safety framework tailored for the concept phase of Level 2 and Level 3 automated vehicles, addressing the unique challenges posed by these advanced systems. The framework integrates key principles from ISO 26262 and ISO 21448 to create a safety approach that spans hardware reliability, functional safety, and system performance. Central to the framework is a broad analysis that combines methodologies from System-Theoretic Process Analysis (STPA) and Hazard Analysis and Risk Assessment (HARA). This dual approach enables the identification of potential risks arising from both hardware failures and the intended functionalities of the system. The framework further details a combined specification and design process that aligns the strengths of each standard, ensuring robust sensor architectures and reliable decision-making processes. A case study on Adaptive Cruise Control with Lane Keeping is presented to demonstrate the practical implementation of the
Sari, Ayse Aysu, Soleimani, Morteza
Leveraging the Automated Mobility Partnership (AMP) to Support the Evaluation of Safety of the Intended Functionality (SOTIF) in Automated Driving Systems2025-01-867404/01/2025
The Automated Mobility Partnership (AMP) is a consortium of industry and academic stakeholders dedicated to advancing Automated Driving Systems (ADS) through a comprehensive suite of tools, datasets, and methodologies. The AMP portal integrates events from over 35 million miles of naturalistic driving data including thousands of annotated crashes and near-crashes and a decade of U.S. police-reported crash data curated by the Virginia Tech Transportation Institute. The portal enables data discovery, visualization, processing, and analysis through secured web access. This paper briefly describes the AMP portal and examines its utility in developing and evaluating the safety of ADS using standardized processes. For the examination, we provide examples based on generic automated driving functions, guided by the Safety of the Intended Functionality (SOTIF) framework. The results show that AMP is instrumental in identifying recorded real-world cases in which the hazardous behavior of a
Antona-Makoshi, Jacobo, Williams, Vicki, Ali, Gibran, Sullivan, Kaye, Terranova, Paolo, Kefauver, Kevin, Hatchett, Alex
The Challenges of Next-gen ADAS and ADS and Related Vehicle Safety TopicsEPR202500303/31/2025
Advanced driver assistance systems (ADAS) and automated driving systems (ADS) continue to expand into the market at a rapid pace. As improved (i.e., next generation) versions of these systems become available, they will continue to face many challenges in their implementation and benefits for safety and driving operations. The solution will involve many parties, including road safety professionals and researchers who see the potential in these systems but may have difficulties keeping up with them, and safety advocates who are calling for these systems to achieve higher levels of safety now. The Challenges of Next-gen ADAS and ADS and Related Vehicle Safety Topics explores these challenges that will fall on the National Highway Traffic Safety Administration (NHTSA) and automakers as they balance costs and benefits; establish reasonable regulations and standards; and determine how to improve, test, deliver, and use these systems successfully. Perhaps the most formidable challenge will
Chalmers, Seth
Smart Clusters: Functional Safety Concepts and Requirements12-08-02-001803/28/2025
This study presents a detailed review of a contemporary safety concept for a smart cluster, comprising a multipurpose display and a head unit. It focuses on elucidating the fundamental regulatory requirements for smart clusters within the frameworks of the United States and the European Union, and draws connections to their functional safety requirements and concepts. The article explores a range of safety mechanisms and architectures designed to implement these proposed functional safety requirements. For each mechanism, we provide an in-depth analysis of its benefits and drawbacks, as well as a thorough explanation of its operational logic. This comprehensive evaluation offers valuable insights into developing safer and more efficient smart clusters in line with international regulatory standards.
Anisimov, Valentin, Babaev, Islam, Shinde, Chaitanya
System Theoretic Process Analysis (STPA) Standard for All IndustriesJ3307_202503 (Current)03/25/2025
This standard documents what is required to execute a System Theoretic Process Analysis (STPA) of safety-critical products or systems in all industries. This standard defines the terminology, the steps in using STPA, the activities flow, and the expected deliverables. This standard may be used when addressing compliance with contractual or regulatory requirements regarding risk assessments, safety assessments, development assurance, system security engineering, or other similar requirements as appropriate. In addition, this standard can be used to demonstrate that an effective STPA evaluation has been conducted when compliance is not of paramount concern. This standard is applicable to a broad set of uses including, but not limited to, corporate product development processes, organizational processes, regulatory groups, supplier processes, defense programs (e.g., government awards a contract to a company and the contract mandates STPA), defense program office (e.g., government safety
Functional Safety Committee
Editorial09-13-01-000803/24/2025
Driving Change: NHTSA’s Role in Advancing Road Safety
Hardy, Warren N.
AVSC Best Practice for Automated Driving System-Dedicated Vehicle (ADS-DV) Immediate Post-Crash Behaviors and InteractionsAVSC-I-05-202503/04/2025
The behaviors and interactions of automated driving system-dedicated vehicles (ADS-DVs) following a crash can have continuing effects on road safety. As more ADS-DVs are commercially deployed and tested on public roads, it is important that systems are designed not only to prevent crashes, but to minimize the impact severity in situations where crashes cannot be avoided. Further injuries, vehicle and property damage, and secondary crashes can be mitigated based on appropriate ADS-DV behaviors and interactions following a crash. This best practice defines five general crash stages, focusing on the Immediate Post-Crash stage. It presents a framework with examples of ADS-DV behavior and interaction activities. It includes recommendations on decision making and evaluation of immediate post-crash ADS-DV behaviors. The document also highlights three dependencies that impact the behavior and interaction of an ADS-DV. The dependencies are paired with illustrative scenarios, followed by
Automated Vehicle Safety Consortium
Regulatory and Policy Framework for Urban Drone Logistics Systems2025-01-714402/21/2025
The swift and relentless progression of drone technology has ushered in novel opportunities within the realm of urban logistics, especially for the potential of drones to modify last-mile delivery and improve customer fulfillment through mobile application integration, offering the potential for delivery systems that are both efficient and environmentally sustainable. This development is not just a technological leap but a transformative shift in how goods are moved within urban spaces, potentially reducing traffic congestion and emissions from traditional vehicles. Nevertheless, the safety issues of drone flights in cities are becoming increasingly serious, and the accountability related to drone accidents is not clear, raising concerns in society regarding the use and safety of drones. Therefore, to fully utilize the potential of drones in urban logistics, the incorporation of drones into the urban airspace environment necessitates the establishment of a strong regulatory and policy
Ma, Jie, Yang, Junjie, Diao, Weile, Du, Yiling, Chen, Weiqi
Leveraging Triggering Conditions for Efficient Scenario-Based Testing of Automated Vehicles12-08-04-003502/19/2025
Scenario-based testing has become a central approach of safety verification and validation (V&V) of automated driving. The standard ISO 21448: Safety of the intended functionality (SOTIF) [1] proposes triggering conditions (e.g., an occluded traffic sign) as a new aspect to be considered to organize scenario-based testing. In this contribution, we discuss the requirements and the strategy of testing triggering conditions in an iterative, SOTIF-oriented V&V process. Accordingly, we illustrate a method for generating test scenarios for evaluating potential triggering conditions. We apply the proposed method in a two-fold case study: We demonstrate how to derive test scenarios and test these with a virtual automated driving system in simulation. We provide an analysis of the testing result to show how triggering condition-based testing facilitates spotting the weakness of the system. Besides, we exhibit the applicability of the method based on multiple triggering conditions and nominal
Zhu, Zhijing, Philipp, Robin, Howar, Falk
AVSC Best Practice for Automated Driving System-Dedicated Vehicles (ADS-DVs) Safety Inspection FrameworkAVSC-D-03-202412/20/2024
Safety inspections support sustained safety performance when fleet operators deploy automated driving system-dedicated vehicles (ADS-DVs) on public roads. A clearly defined and traceable safety inspection protocol can help build public trust and promote industry standardization. A well-defined process for designing and managing a safety inspection protocol and a list of minimum inspection elements can help ADS-DV manufacturers, developers, and fleet operators create, maintain, and implement safety inspection protocols. This best practice provides a framework for creating, maintaining, and documenting a safety inspection protocol. It includes a classification for ADS-DV subsystems and components, a list of minimum inspection elements, a perspective on the types of triggers that can initiate inspections, and an illustrative example of the lifecycle of a safety inspection protocol and how inspections may change at each stage. This best practice will help to standardize the communication
Automated Vehicle Safety Consortium
Development and Simulation of an AUTOSAR Software Component for Functional Safety according to ISO 26262 Fault Detection and Safety Mechanisms2024-36-013212/20/2024
In the context of advancing automotive electronic systems, ensuring functional safety as per ISO 26262 standards has become of primary importance. This paper presents the development of an AUTOSAR-compliant Software Component (SWC) applied to ISO 26262 applications. Using MATLAB/Simulink, we design and simulate a SWC that operates within the AUTOSAR architecture, focusing on fault detection and activation of safety mechanisms. The SWC is built to monitor specific system parameters and operational anomalies. Upon detecting a fault, it triggers predefined safety mechanisms to mitigate risks and ensure system integrity. The simulation focus on capability to accurately identify faults and execute safety measures effectively, thus demonstrating a practical approach to enhance automotive system safety implementation and its reuse. This paper not only highlights the importance of ISO 26262 in the automotive industry but also illustrates the feasibility of developing and integrating safety
Santiago, Frederico Victor Scoralick, dos Santos Machado, Cleberson, Imbasciati, Henrique, Costa, Silvio Romero Alves
Biofidelity Assessment of the GHBMC M50-O Seated in a Honda Accord Seat in a Rear-Facing Configuration during a High-Speed Frontal Impact09-12-03-001412/10/2024
Vehicles equipped with automated driving systems (ADS) may have non-traditional seating configurations, such as rear-facing for front-row occupants. The objectives of this study are (1) to generate biomechanical corridors from kinematic data obtained from postmortem human subjects (PMHS) sled tests and (2) to assess the biofidelity of the Global Human Body Models Consortium (GHBMC) 50th male (M50-O) v6.0 seated in an upright (25-deg recline) Honda Accord seat with a fixed D-ring (FDR) in a 56 km/h rear-facing frontal impact. A phase optimization technique was applied to mass-normalized PMHS data for generating corridors. After replicating the experimental boundary conditions in the computational finite element (FE) environment, the performance of the rigidized FE seat model obtained was validated using LSTC Hybrid III FE model simulations and comparison with experiments. The most recent National Highway Traffic Safety Administration (NHTSA) Biofidelity Ranking System (BRS) method was
Pradhan, Vikram, Ramachandra, Rakshit, Stammen, Jason, Kracht, Corey, Moorhouse, Kevin, Bolte, John H., Kang, Yun-Seok
Writing an Effective Technical Safety Concept in Accordance with ISO262622024-28-020712/05/2024
With the trend of increasing technological complexity, software content and mechatronic implementation, there are increasing risks from systematic failures and random hardware failures, which is to be considered within the scope of functional safety. ISO 26262 series of standards provides guidance to mitigate these risks by providing appropriate requirements and processes. To develop a safe product with respect to above mentioned complexities, it is very critical to develop a safe system and hence a thorough and robust “Technical Safety Concept” is very important to ensure absence of unreasonable risk due to hazards caused by malfunctions of E/E systems. ISO26262-Part 4 provides guidelines for “Product development at the system level”, to design safety-related systems that include one or more electrical and/or electronic (E/E) systems and that are installed in series production road vehicles. Defining requirements at system level for each individual technology and systematically
Cheni, Dileep Kumar, Desai, Priyanka Pradeep
Comprehensive Characterization of Soft Tissue and Surrogate Materials across Varied Loading Methods09-12-02-001211/12/2024
Exploring the mechanical properties of soft tissues under compressive loading is crucial for understanding their role in automobile incidents. Soft tissues, which serve as cushions or padding between bone and vehicle interiors, significantly influence contact duration and forces, thereby altering incident kinematics and injury. In this investigation, muscle and soft connective tissues from post-mortem human subjects (PMHS) forearms were excised and subjected to compression and indentation testing methods at various rates and strains. Specific samples with higher proportions of muscle were compared against samples without muscle tissues to evaluate the role of compositional changes. Anthropomorphic test device (ATD) upper extremity foam and vinyl–foam composite analog tissues underwent similar testing for comparison. High impact rates simulating those in high-speed automotive collisions were achieved using a custom-built drop tower impactor setup. The results revealed significantly
Dennis, Cole J., Quenneville, Cheryl E.
Safety Concepts for Future Electromechanical Brake Central Control Systems15-18-01-000410/25/2024
Electromechanical brakes (EMB) are currently coming into focus in the automotive industry. This trend was confirmed in 2022, when a first automotive supplier [1] announced the series production of EMB systems. One major driver is safety, especially if EMB systems are implemented with smart actuators that install redundant electronic control units (ECU) and distributed software [1]. Earlier, the authors have addressed safety mechanisms in EMB actuators [2]. In this article the authors extend their investigation to address safety mechanisms in future EMB central control systems (CCS). Impact of different brake system topologies (X-, H-, centralized) vis-à-vis potential safety mechanisms within communication buses and ECUs is analyzed.
Schrade, Simon, Röhler, Andreas, Nowak, Xi, Verhagen, Armin, Schramm, Dieter
Navigating the Evolving Landscape of Safety Standards for Machine Learning-based Road Vehicle FunctionsEPR202401708/26/2024
ML approaches to solving some of the key perception and decision challenges in automated vehicle functions are maturing at an incredible rate. However, the setbacks experienced during initial attempts at widespread deployment have highlighted the need for a careful consideration of safety during the development and deployment of these functions. To better control the risk associated with this storm of complex functionality, open operating environments, and cutting-edge technology, there is a need for industry consensus on best practices for achieving an acceptable level of safety. Navigating the Evolving Landscape of Safety Standards for Machine Learning-based Road Vehicle Functions provides an overview of standards relevant to the safety of ML-based vehicle functions and serves as guidance for technology providers—including those new to the automotive sector—on how to interpret the evolving standardization landscape. The report also contains practical guidance, along with an example
Burton, Simon
Braking compatibility between motorvehicle and trailer: identification of impacts on braking behavior under different types of predominance pressure2024-36-030808/09/2024
In recent decades, it can be noted an advance in new technologies applied to commercial vehicles. This advancement led to the development of new functions making products more efficient and safer, benefiting the society in general. Commercial vehicle manufacturers brought their products to levels higher than those required by current legal resolutions. Among the various resolutions applied to the braking system, in CONTRAN #915/22, which specifies minimum requirements of performance of vehicles brakes, the part 7 of NBR 10966 stands out. This standard determines requirements for compatibility between towing and towed units combined as a vehicle. The purpose of this study was to evaluate the thermal balance between the brakes of a motor vehicle combined with a semi-trailer. The tests were carried out by varying the pneumatic pressure that controls the service brake of towed units during braking. Some of the pressure levels were complying with compatibility requirements, others were not
Dias, Eduardo Miranda, Travaglia, Carlos Abílio Passos, Rodrigues, André, Rudek, Cludemir, Britto, Danilo
Toward a Methodology for the Verification and Validation of AI-Based Systems12-08-01-000607/27/2024
Verification and validation (V&V) is the cornerstone of safety in the automotive industry. The V&V process ensures that every component in a vehicle functions according to its specifications. Automated driving functionality poses considerable challenges to the V&V process, especially when data-driven AI components are present in the system. The aim of this work is to outline a methodology for V&V of AI-based systems. The backbone of this methodology is bridging the semantic gap between the symbolic level at which the operational design domain and requirements are typically specified, and the sub-symbolic, statistical level at which data-driven AI components function. This is accomplished by combining a probabilistic model of the operational design domain and an FMEA of AI with a fitness-for-purpose model of the system itself. The fitness-for-purpose model allows for reasoning about the behavior of the system in its environment, which we argue is essential to determine whether the
Paardekooper, Jan-Pieter, Borth, Michael
Formal Technique for Fault Detection and Identification of Control Intensive Application of Stall Warning System Using System Theoretic Process Analysis2024-26-047106/01/2024
Faults if not detected and processed will create catastrophe in closed loop system for safety critical applications in automotive, space, medical, nuclear, and aerospace domains. In aerospace applications such as stall warning and protection/prevention system (SWPS), algorithms detect stall condition and provide protection by deploying the elevator stick pusher. Failure to detect and prevent stall leads to loss of lives and aircraft. Traditional Functional Hazard and Fault Tree analyses are inadequate to capture all failures due to the complex hardware-software interactions for stall warning and protection system. Hence, an improved methodology for failure detection and identification is proposed. This paper discusses a hybrid formal method and model-based technique using System Theoretic Process Analysis (STPA) to identify and diagnose faults and provide monitors to process the identified faults to ensure robust design of the indigenous stall warning and protection system (SWPS). The
Kale, Alexander, Madhuranath, Ganesh, Shanmugham, Viswanathan, Nanda, Manju, Singh, Giresh, Durak, Umut
FMVSS Inertia Dynamometer Test Procedure for Vehicles Below 4540 kg GVWRJ2784_202405 (Current)05/24/2024
This document derives from the Federal Motor Vehicle Safety Standards (FMVSS) 105 and 135 vehicle test protocols as single-ended inertia-dynamometer test procedures. The test sequences enable brake output measurement, friction material effectiveness, and corner performance in a controlled and repeatable environment. This SAE Document also includes optional sections for parking brake output performance for rear brakes with hydraulic or Electric Park Brakes (EPB). It applies to brake corners from vehicles covered by the FMVSS 105 and 135 when using the appropriate brake hardware and test parameters. The FMVSS 135 applies to all passenger cars and light trucks up to 3500 kg of gross vehicle weight (GVWR). The FMVSS 105 applies to all passenger cars, multi-purpose vehicles, buses, and trucks above 3500 kg of GVWR. This document does not include testing for school bus applications or vehicles equipped with hydraulic brakes with a GVWR above 4540 kg. This document does not evaluate or
Brake Dynamometer Standards Committee
AVSC Best Practice for Core Automated Vehicle Safety InformationAVSC-D-02-202405/14/2024
Automated driving system (ADS) manufacturers, developers, and operators need to provide clear information on their safety approach to relevant stakeholders. Explainability to diverse audiences helps build trust in statements from these organizations towards the shared value of safety. A defined list of core safety topics can help set expectations when communicating deployment and use-case-specific automated vehicle (AV) safety information. The topics listed in this best practice are implementation-agnostic and broadly applicable. This best practice describes how safety is continuous and connected throughout lifecycle stages and highlights considerations when including safety metrics as part of the communicated information. It lists topics that are considered core, provides a rationale, illustrative examples where applicable, suggestions of content that could be included for the example, and lists references and industry examples for further information. By following this best practice
Automated Vehicle Safety Consortium
Investigation of THOR-AV 5F Biofidelity in Sled Test Conditions with a Semi-Rigid Seat2023-22-000404/17/2024
THOR-AV 5F, a modified THOR-5F dummy, was designed to represent both upright and reclined occupants in vehicle crashworthiness studies. The dummy was evaluated in four test conditions: a) 25° seatback, 15 km/h, b) 25° seatback, 32 km/h, c) 45° seatback, 15 km/h, d) 45° seatback, 32 km/h. The dummy’s biomechanical responses were compared against those of postmortem human subjects (PMHS) tested in the same test conditions. The latest National Highway Traffic Safety Administration (NHTSA) BioRank method was used to provide a biofidelity ranking score (BRS) for each data channel in the tests to assess the dummy’s biofidelity objectively. The evaluation was categorized into two groups: restraint system and dummy. In the four test conditions, the restraint system showed good biofidelity with BRS scores of 1.49, 1.47, 1.15, and 1.79, respectively. The THOR-AV 5F demonstrated excellent biofidelity in three test conditions: 25° seatback, 15 km/h (BRS = 0.76); 25° seatback, 32 km/h (BRS = 0.89
Wang, Z. Jerry, Humm, John, Hauschild, Hans W.
Evaluation of DAMAGE Algorithm in Frontal Crashes2023-22-000604/17/2024
With the current trend of including the evaluation of the risk of brain injuries in vehicle crashes due to rotational kinematics of the head, two injury criteria have been introduced since 2013 – BrIC and DAMAGE. BrIC was developed by NHTSA in 2013 and was suggested for inclusion in the US NCAP for frontal and side crashes. DAMAGE has been developed by UVa under the sponsorship of JAMA and JARI and has been accepted tentatively by the EuroNCAP. Although BrIC in US crash testing is known and reported, DAMAGE in tests of the US fleet is relatively unknown. The current paper will report on DAMAGE in NCAP-like tests and potential future frontal crash tests involving substantial rotation about the three axes of occupant heads. Distribution of DAMAGE of three-point belted occupants without airbags will also be discussed. Prediction of brain injury risks from the tests have been compared to the risks in the real world. Although DAMAGE correlates well with MPS in the human brain model across
Prasad, Priya, Barbat, Saeed D., Kalra, Anil, Dalmotas, Dainius J.
Advanced Driver Assistance System (ADAS) Performance Variability with Partial Overlap Targets2024-01-203804/09/2024
While various Advanced Driver Assistance System (ADAS) features have become more prevalent in passenger vehicles, their ability to potentially avoid or mitigate vehicle crashes has limitations. Due to current technological limitations, forward collision mitigation technologies such as Forward Collision Warning (FCW) and Automated Emergency Braking (AEB) lack the ability to consistently perform in many unique and challenging scenarios. These limitations are often outlined in driver manuals for ADAS equipped vehicles. One such scenario is the case of a stationary lead vehicle at the side of the road. This is generally considered to be a challenging scenario for FCW and AEB to address because it can often be difficult for the system to discern this threat accurately and consistently from non-threatening roadway infrastructure without unnecessary or nuisance system activations. This is made more difficult when the stationary lead vehicle is only partially in the driving lane and not
Scally, Sean, Paradiso, Marc, Koszegi, Giacomo, Easter, Casey, Kuykendal, Michelle, Alexander, Ross
STEAM & MoSAFE: SOTIF Error-and-Failure Model & Analysis for AI-Enabled Driving Automation2024-01-264304/09/2024
Driving Automation Systems (DAS) are subject to complex road environments and vehicle behaviors and increasingly rely on sophisticated sensors and Artificial Intelligence (AI). These properties give rise to unique safety faults stemming from specification insufficiencies and technological performance limitations, where sensors and AI introduce errors that vary in magnitude and temporal patterns, posing potential safety risks. The Safety of the Intended Functionality (SOTIF) standard emerges as a promising framework for addressing these concerns, focusing on scenario-based analysis to identify hazardous behaviors and their causes. Although the current standard provides a basic cause-and-effect model and high-level process guidance, it lacks concepts required to identify and evaluate hazardous errors, especially within the context of AI. This paper introduces two key contributions to bridge this gap. First, it defines the SOTIF Temporal Error and Failure Model (STEAM) as a refinement of
Czarnecki, Krzysztof, Kuwajima, Hiroshi
Items per page:
1 – 50 of 850