Browse Topic: Safety regulations and standards

Items (864)
Find
Achieving full ASIL-B level functional safety (FuSa) for Automotive Clusters2026-26-0008To be published on 01/16/2026
Traditionally, automotive cluster modules have not placed strong emphasis on functional safety (FuSa) measures for capturing and displaying data. Most cluster components are developed with a focus on Quality Management (QM) levels, and proprietary implementations are often used without adhering to standardized safety approaches. This paper highlights the need to bring certain cluster components under an Automotive Safety Integrity Level B (ASIL-B) context, proposing a standardized and structured methodology for their development — particularly by adopting Classic AUTOSAR frameworks. Several critical components within the cluster demand FuSa mechanisms to ensure reliable and safe operation. These components should be designed to comply with key safety principles, including freedom from interference, execution under privileged levels, and integrity verification. The FuSa goals for these components also extend to their configuration management and update strategies within the cluster
Singh, Iqbal, Kumar, Praveen
A Comparative Analysis of Road Accident data collected: A Multi-Country Study of Traffic Accidents in India, USA, UK and France2026-26-0247To be published on 01/16/2026
This paper presents a comparative study on the accident data collected in India with that of USA, France and UK. The data for the analysis and comparison are collected from trusted sources such as Open Government Data (OGD) and National Highway Traffic Safety Administration (NHTSA), GOV.UK and French Road Safety Observatory. By examining these datasets, the paper aims to identify trends and discrepancies in accident data collected across different countries and to verify if more documentation can help in bringing down the number of accidents. Reducing the frequency of accidents requires an understanding of the underlying causes of each one, which can only be achieved by conducting in-depth analysis of the accident data and comparing the parameters with data from Integrated Road Accident Database (iRAD). The primary objective of this paper is to find documentation gaps and propose potential improvements to the documentation process in India that would ensure that research organizations
Raj, Aswin, Raja, Dheepan, Abhimanyu Shinde, Antriksh
A Model Based Framework for Safety Risk Assessment using Systems Theoretic Process Analysis for ASIL Justification According to ISO 262622026-26-0022To be published on 01/16/2026
With advancements in automotive systems, particularly in autonomous and electric vehicles, the increasing complexity of modern vehicular systems is challenging the traditional safety analysis methods prescribed by ISO 26262. Failure-based safety analysis techniques often struggle to identify systematic risks arising from software interactions, human factors, and emergent behaviors. This paper addresses this gap by providing a framework that utilizes Systems-Theoretic Process Analysis (STPA) to complement ISO 26262’s hazard analysis methods by considering emergent hazards during the justification of Automotive Safety Integrity Levels (ASIL). The aim of this paper is to present a model-driven hybrid methodology that combines traditional fault-based approaches with STPA for traceable ASIL justification, thereby enhancing ISO 26262’s Hazard Analysis and Risk Assessment (HARA) process. This approach allows for the integration of contemporary safety analysis techniques like STPA into
NAG, PRAMIT, Ali, Sam, Roy Choudhury, Diyanjan
Unique methodology to cluster and reuse the “Hazard Analysis and Risk Assessment” across different E/E systems and features2026-26-0004To be published on 01/16/2026
As software-defined vehicles advance in complexity, achieving robust functional safety in line with ISO 26262 becomes increasingly vital. This growing need has led to a significant increase in Hazard Analysis and Risk Assessment (HARA) activities across numerous electrical and electronic (E/E) systems and features. Traditionally, HARA is performed separately for each E/E system, feature, or component. This approach often results in redundant analyses of the same function in multiple places, which leads to inconsistent risk categorizations and even conflicting safety goals, such as assigning different Automotive Safety Integrity Levels (ASIL) to similar features. As a result, the overall engineering effort and risk of inconsistency increase. To address these challenges, this paper proposes a unique approach: performing consolidated HARA for a group of vehicle-level functions (termed “platform HARA”). Rather than deriving safety goals for each E/E system or feature individually, this
Somasundaram, Manickam, Vijayakumar, Melvin
Configurable and Standardized Test Case Generation using VBA Script2026-26-0557To be published on 01/16/2026
Test Cases plays a vital and very important role in Software and System testing to verify the functionality as per requirements and meets the customer expectations. The traditional approach of test case generation in the testing field is predominantly manual, time consuming, and prone to human error but less expensive. Each tester tends to have their own approach to creating test cases, which may not cover experience-based test scenarios leading to inconsistencies, and lack of standardization. This lack of uniformity can cause testing deficiencies and make it difficult to ensure comprehensive test coverage. The objective is to develop an automation framework to generate standardized, configurable, modular, reusable and human error free test cases as per user defined inputs based on system requirement specifications. The framework proposed in this paper is known as the Automated Test Case Generator tool. This framework is designed using Visual Basic Applications (VBA) Scripts, in which
Pallavi, Yerragudi, Umarji, Shruti, Tavhare Sr, Sarika, Anilkumar, Sandhya
Analysis on Impact of SUMS(R156) update on Functional Safety2026-26-0618To be published on 01/16/2026
Now a days, with the increasing integration of advanced technology in modern vehicles, manufacturers are now able to update their software seamlessly, thereby enhancing functionality and ensuring optimal performance. Therefore, SUMS has been introduced to enhance vehicle security, improve performance, and ensure that the latest software enhancements and fixes can be delivered efficiently without the need for physical service station visits. With this increasing complexity and ensure connectivity of modern vehicles, necessitates robust systems to manage software updates. Within this context, the United Nations Economic Commission for Europe's Regulation No. 156 (UN R156) provides specific requirements for Software Update Management Systems (SUMS) to ensure safety, security, and traceability. The evaluation of R156-compliant SUMS within the framework of functional safety protocols, such as ISO 26262 for automotive presents numerous technical challenges. This paper aims to analyze the
Talasila, Namitha
A Quality-Driven Approach to Engineering Sign-Off for Software and Robust Product Development2026-26-0581To be published on 01/16/2026
This abstract outline a paper detailing the development and implementation of a comprehensive framework designed to enhance the quality and governance of the product development process in the automotive industry. As the sector undergoes significant transformation—driven by electrification, autonomous systems, and increasing regulatory and customer expectations—the need for structured development approach and robust oversight has become critical to success. The paper introduces a newly developed framework for Final Data Judgment (FDJ) and Engineering Sign-Off (ESO), representing a next-generation strategy to defect free design, robust engineering quality management and product maturity assurance. This methodology emphasizes customer-centric deliverables, risk-based assessments, and technical rigor to minimize post-SOP issues and ensure alignment with end-user expectations. The approach prioritizes end-user impact by embedding rigorous quality checkpoints that align engineering outputs
Digikar, Ashish, PATHAK, ISHA, Kothari, Bhushan
Towards AI-Driven Automated Driving Systems: Homologation perspective2026-26-0133To be published on 01/16/2026
This paper examines the challenges and opportunities in homologating AI-driven Automated Driving Systems (ADS). As AI introduces dynamic learning and adaptability to vehicles, traditional static homologation frameworks are becoming inadequate. The study analyzes existing methodologies, such as the New Assessment/Test Methodology (NATM), and how various institutions address AI incorporation into ADS certification. Key challenges identified include managing continuous learning, addressing the "black-box" nature of AI models, and ensuring robust data management. The paper proposes a harmonized roadmap for AI in ADS homologation, integrating safety standards like ISO/TR 4804 and ISO 21448 with AI-specific considerations. It emphasizes the need for explainability, robustness, transparency, and enhanced data management in certification processes. The study concludes that a unified, global approach to AI homologation is crucial, balancing innovation with safety while addressing ethical
Lujan Tutusaus, Carlos, Hidalgo, Justin
Mileage Accumulation Target Identification For AEBS Validation for Medium & Heavy Trucks Considering Real-World Accidents In India2026-26-0036To be published on 01/16/2026
Robust validation of Advanced Driver Assistance Systems (ADAS) considering real-world conditions is a vital for ensuring safety. Mileage accumulation is a one of the validation method for ensuring ADAS system robustness. By subjecting systems to diverse real-world driving environments and edge-case scenarios, engineers can evaluate performance, reliability, and safety under realistic conditions. In accordance with ISO 21448 (SOTIF), known hazardous scenarios are explicitly tested during robustness validation in combination of virtual and physical testing at component, sub system and vehicle level, while unknown hazards may emerge through extended mileage by running vehicles on roads, allowing them to be identified and classified. However, defining a mileage target that ensures comprehensive safety remains a significant engineering challenge. This paper proposes a data-driven approach to define mileage accumulation targets for validating Autonomous Emergency Braking Systems (AEBS
Koralla, Sivaprasad, Ravjani, Amin, Tatikonda, Vijay, GADEKAR, GANESH
SEooC-Based Design Framework for Integrated EV Power Conversion Systems under ISO 26262 Compliance2026-26-0192To be published on 01/16/2026
The rapid integration of electric vehicle (EV) power conversion elements—such as traction inverters, onboard chargers, and DC-DC converters—into unified architectures poses new challenges for ensuring functional safety compliance as per ISO 26262. This paper presents a system-level framework that leverages the Safety Element out of Context (SEooC) approach to design and validate reusable safety-critical components independent of vehicle-specific applications. By defining clear assumptions of use and ASIL decomposition strategies, the proposed method facilitates early-stage fault analysis and verification. The framework integrates model-based development with Hardware-in-the-Loop (HIL) testing and formal verification techniques to validate both control logic and hardware behavior under diverse fault injection scenarios. The result is a scalable, standards-compliant methodology that reduces time-to-market and enhances reliability in integrated EV power electronics platforms. The work
Uthaman, Sreekumar, Mulay, Abhijit B, Gadekar, Pundlik
Functional Safety of Electric or Hybrid Off-Highway Vehicles – An Embedded Software Viewpoint2025-28-021711/06/2025
To provide growing needs of food, clothing and infrastructure for growing population of the world, off-highway vehicles such as those in construction, agriculture and commercial landscaping are moving towards electrification for enhanced precision, productivity, efficiency and sustainability. It has also paved a way to adopt autonomy of these vehicles to address challenges like skilled labor shortage for timely and efficient execution. Despite the tremendous advantages of electrification, be it through completely replacing engines in vehicles or efficiency improvements using hybrid architecture for powertrain and auxiliary power demands, safety remains a significant challenge and critical requirement for off-highway electric vehicles. This paper explains the concept and importance of functional safety in electric off-highway vehicles, and shows how different standards like ISO 26262, ISO 25119, ISO 13849 can be utilized to achieve state of the art in functional safety for different off
Mujumdar, Chaitanya Gajanan, Bachhav, Kiran, Deshpande, Chinmay
Automating Fault Detection Time Interval in Automotive Functional Safety Using HIL Simulation2025-28-027411/06/2025
Functional safety is driven by number of standards like in automotive its driven by ISO26262, in Aerospace its driven by DO-178C, and in Medical its driven by IEC 60601. Automotive electronic controllers must adhere to state-of-the-art functional safety standard provided by ISO26262. A critical functional safety requirement is the Fault Handling Time Interval (FHTI), which includes the Fault Detection Time Interval (FDTI) and Fault Reaction Time Interval (FRTI). The requirements for FHTI are derived from Failure Mode Effect Analysis (FMEA) conducted at the system level. Various fault categories are analyzed, including electrical faults (e.g., short to battery, short to ground, open circuits), systemic faults (e.g., sensor value stuck, sensor value beyond range), and communication faults (e.g., incorrect CAN message signal values). Controllers employ strategies such as debouncing and fault time maturity to detect these faults. Numerous FDTI requirements must be verified to ensure
Lengare, Sunil, Yadav, Vikaskumar, Shiraskar, Pallavi
Ensuring Functional Safety and SOTIF for Autonomous Off-Highway Vehicles: Addressing Risks in Complex Systems2025-28-031511/06/2025
The increasing complexity of autonomous off-highway vehicles, particularly in mining, demands robust safety assurance for Electronic/Electrical (E/E) systems. This paper presents an integrated framework combining Functional Safety (FuSa) and Safety of the Intended Functionality (SOTIF) to address risks in autonomous haulage systems. FuSa, based on ISO 19014[1] and IEC 61508[2], mitigates hazards from system failures, while SOTIF, adapted from ISO 21448[3] addresses functional insufficiency and misuse in complex operational environments. We propose a comprehensive verification and validation (V&V) strategy that identifies hazardous scenarios, quantifies risks, and ensures acceptable safety levels. By tailoring automotive SOTIF standards to off-highway applications, this approach enhances safety for autonomous vehicles in unstructured, high-risk settings, providing a foundation for future industry standards.
Kumar, Amrendra, Bagalwadi, Saurabh
AVSC Best Practice for Assessment of Automated Driving System-Dedicated Vehicles (ADS-DVs) Safety Case Claims Supported by Evidence (CSE)AVSC-D-04-202510/14/2025
AVSC Best Practice for Assessment of Automated Driving System-Dedicated Vehicles (ADS-DVs) Safety Case Claims Supported by Evidence (CSE) supports organizations in conducting structured, transparent, and repeatable safety case assessments. It promotes a systems-based approach to reviewing whether the safety arguments presented are credible, well supported, and consistent with industry expectations and regulatory contexts. The document outlines principles, assessment criteria, and illustrative examples to aid practitioners in identifying gaps, evaluating uncertainties, and improving the overall trustworthiness of ADS-DV safety cases.
Automated Vehicle Safety Consortium
The Sotif Meta-Algorithm: Quantiative Analyses of the Safety of AI2025-01-043709/16/2025
This paper presents updates to a “meta-algorithm” for achieving safer AI driven systems by integrating systems theoretic process analysis, quantitative fault tree analysis, structured generation of safety metrics, and statistical hypothesis testing of metrics between simulation and reality. This paper presents updates to the meta-algorithm after its application in use cases involving commercial autonomous vehicle deployment.
Wagner, Michael, Carlson, Noah, Dwyer, Chris
Leveraging ISO 26262-2018 to Support MIL-STD-882E Compliance2025-01-046209/16/2025
The principles of Modular Open Systems Approach (MOSA) encourage the use of other accepted and consensus-based standards for system development. ISO 26262 falls under this category. This paper will detail how this safety standard can be applied in a military environment. Since its release, the MIL-STD-882 System Safety standard has been required in the development of various systems and platforms within the DoD (Department of Defense) and all branches of the armed forces. It provides a general method for identification, classification, and mitigation of hazards through various analyses. The standard, however, provides little definition on specific risk-rated mitigation strategies or risk-level-driven analysis in achieving the safety objectives of the design. This is in part due to the less prescriptive nature of the standard. Though there is no direct alignment between the risk levels of these two standards, this paper will detail how the ISO 26262 safety measures and safety analyses
LaRue, David A., Ruiz, Luis Edwin Rivera
Introduction to Technical Standards1352408/07/2025
This video series brought to you by SAE International will show you what a standard is, how to interpret what you're reading, and how to differentiate technical standards from other information types.
Patterson, Lori
A 3D Visibility Label for Mobility Coatings: Enhancing Traffic Safety Through Color and Sensor Perception12-09-02-000907/22/2025
The mobility industry is rapidly advancing towards more autonomous modes of transportation with the adoption of sophisticated self-driving technologies. However, a critical challenge, being the lack of standardized norms for defining, measuring, and ensuring vehicle visibility across various dynamic traffic environments, remains. This lack of awareness of visibility is hindering the development of new regulations for vehicle visibility and the controlled transition to a fully-integrated autonomous future. While current efforts focus on improving sensing technologies like computer vision, LiDAR systems, and sensor fusion development, two key issues remain unresolved: 1 The absence of a representative and realistic three-dimensional color visibility model for measuring and comparing the visibility of complex shapes with large but varying color coated three-dimensional surface areas. 2 The need for enhanced visibility solutions that improve visibility and vehicle detectability for all
Mijnen, Paul W., Moerenburg, Joost H.
Cab Roof Strength Evaluation - Quasi-Static Loading Heavy TrucksJ2422_202507 (Current)07/22/2025
This SAE Recommended Practice describes the test procedures for conducting quasi-static cab roof strength tests for heavy-truck applications. Its purpose is to establish recommended test procedures that will standardize the procedure for heavy trucks. Descriptions of the test setup, test instrumentation, photographic/video coverage, and test fixtures are included.
Truck Crashworthiness Committee
SAE TOMORROW TODAY - What Happens After a Crash? The Push for Safer AVs1352307/11/2025
What happens after an AV crashes? That split-second response can make all the difference--and that's exactly what the Automated Vehicle Safety Consortium (AVSC) is focused on. Backed by decades of engineering and mobility expertise, the AVSC brings together top minds in AV development to align on critical safety issues. Their latest work tackles one of the most urgent: how these vehicles should react and communicate after a crash. As AVs expand from test fleets to real-world deployments, the industry needs clear guidance now more than ever. Listen in as we sit down with Jonathan Barentine, Principal Engineer at the AVSC, to discuss the organization's just-released best practices for automated driving systems in the moments following a collision. You'll learn how the AVSC is working with first responders, manufacturers, and policymakers to develop scenario-based protocols that prioritize effective communication, safety management, and a culture of accountability. We'd love to hear from
Patterson, Lori
Fuel Versus Oxygen: Evaluations and ConsiderationsAIR5648B (Current)07/09/2025
Current regulations (e.g., Title 14 of the United States Code of Federal Regulations, or 14 CFR) define design requirements for oxygen system provisions for protection of crewmembers and passengers following emergency events such as in-flight decompression. This aerospace information report (AIR) addresses the operational oxygen system requirements for a decompression incident that may occur at any point during a long-range flight, with an emphasis for a decompression at the equal time point (ETP). This AIR identifies fuel and oxygen management contingencies and presents possible solutions for the efficient, safe, and optimum fuel/oxygen flight continuation. Oxygen management is a critical concern for all aircraft, ranging from single-engine types operating above 10000 feet to complex, high-performance aircraft equipped with supplemental oxygen systems. Proper planning ensures compliance with regulations and supports pilot and passenger safety at higher altitudes. This document
A-10 Aircraft Oxygen Equipment Committee
Structural Modification for Personally Licensed Vehicles to Meet the Transportation Needs of Persons with DisabilitiesJ1725_202506 (Current)06/30/2025
This SAE Information Report applies to structural integrity, performance, drivability, and serviceability of personally licensed vehicles not exceeding 10000 pounds GVWR such as sedans, crossovers, SUVs, MPVs, light trucks, and van-type vehicles that are powered by gas and alternative fuel such as electric, plug-in hybrid, or hybrid technologies. It provides engineering direction to vehicle modifiers in a manner that does not limit innovation, and it specifies procedures for preparing vehicles to enhance safety during vehicle modifications. It further provides guidance and recommendations for the minimum acceptable design requirements and performance criteria on general and specific structural modifications, thereby allowing consumers and third-party payers the ability to obtain and purchase equipment that meets or exceeds the performance and safety of the OEM production vehicle.
Adaptive Devices Standards Committee
Minimum Sound Testing of Medium- and Heavy-Duty Electric Vehicles2025-01-504406/27/2025
The acoustic performance of seven vehicles was evaluated according to Canadian Motor Vehicle Safety Standard 141 (CMVSS 141), which governs minimum required sound levels for hybrid and electric vehicles with a gross vehicle weight rating (GVWR) of 4536 kg (10,000 lb) or less. To better understand the sound profiles of medium-duty electric vehicles (MDEVs) and heavy-duty electric vehicles (HDEVs), the sound emissions of two light-duty electric vehicles (LDEVs), one MDEV, three HDEVs, including an electric transit bus, and one heavy-duty internal combustion engine (HD ICE) vehicle were compared. The sound emissions of the MDEV and HDEVs were quieter than the HD ICE vehicle and comparable to that of the LDEVs equipped with auxiliary speakers. The MDEV with its auxiliary speaker turned off and all three HDEVs without auxiliary speakers met CMVSS 141 requirements in reverse gear and at speeds of 20 km/h and 30 km/h. The MDEV, though not subject to CMVSS 141, failed to meet the minimum sound
Sharma, Vinay, Larocque-Legros, Marc-André, Weston, Cole, Schulte, Andrew, Christenson, Martha, Rooney, Anne
Observers for Laser Safety in the Navigable AirspaceARP5535B (Current)06/17/2025
This document applies to safety observers or spotters involved with the use of outdoor laser systems. It may be used in conjunction with AS4970.
G-10T Laser Safety Hazards Committee
Proposed Reformulation of Brain Injury Criteria (BrIC) Using Head Rotation-Induced Brain Injury Thresholds Simulated and Derived Directly from A Subhuman Primate Finite Element Model2025-22-000305/13/2025
Recent studies have found that Brain Injury Criteria (BrIC) grossly overpredicts instances of real-world, severe traumatic brain injury (TBI). However, as it stands, BrIC is the leading candidate for a rotational head kinematics-based brain injury criteria for use in automotive regulation and general safety standards. This study attempts to understand why BrIC overpredicts the likelihood of brain injury by presenting a comprehensive analysis of live primate head impact experiments conducted by Stalnaker et al. (1977) and the University of Pennsylvania before applying these injurious conditions to a finite element (FE) monkey model. Data collection included a thorough analysis and digitization of the head impact dynamics and resulting pathology reports from Stalnaker et al. (1977) as well as a representative reconstruction of the Penn II baboon diffuse axonal injury (DAI) model. Computational modeling techniques were employed on a FE Rhesus monkey model, first introduced by Arora et al
Demma, Dominic R., Tao, Ying, Zhang, Liying, Prasad, Priya
Development of a Generic Nearside Impact Test Fixture for Evaluating In-Vehicle Crashworthiness of Wheelchairs2025-22-000205/13/2025
Current voluntary standards for wheelchair crashworthiness only test under frontal and rear impact conditions. To help provide an equitable level of safety for occupants seated in wheelchairs under side impact, we developed a sled test procedure simulating nearside impact loading using a fixed staggered loading wall. Publicly available side impact crash data from vehicles that could be modified for wheelchair use were analyzed to specify a relevant crash pulse. Finite element modeling was used to approximate the side impact loading of a wheelchair during an FMVSS No. 214 due to vehicle intrusion. Validation sled tests were conducted using commercial manual and power wheelchairs and a surrogate wheelchair base fixture. Test procedures include methods to position the wheelchair to provide consistent loading for wheelchairs of different dimensions. The fixture and procedures can be used to evaluate the integrity of wheelchairs under side impact loading conditions.
Boyle, Kyle, Hu, Jingwen, Manary, Miriam, Orton, Nichole R., Klinich, Kathleen D.
Letter from the Guest Editors12-08-02-001105/06/2025
Letter from the Guest Editors
Liang, Ci, Törngren, Martin
Determining Worst-Case Execution Time Bounds for Multi-Core Processors2025-01-015505/02/2025
Demonstrating deadline adherence for real-time tasks is a common requirement in all safety norms. Timing verification has to address two levels: the code level (worst-case execution time) and the scheduling level (worst-case response time). Determining which methodology is suited best depends on the characteristics of the target processor. All contemporary microprocessors try to maximize the instruction-level parallelism by sophisticated performance-enhancing features that make the execution time of a particular instruction dependent on the execution history. On multi-core systems, the execution time additionally is influenced by interference effects on shared resources caused by concurrent activities on the different cores, which are not controlled by the scheduling algorithm. In the avionics domain, the new FAA AC 20-193 / EASA AMC 20-193 guidance documents formalize predictability aspects of multi-core systems and derive adequate measures for timing verification. Timing verification
Kaestner, Daniel, Gebhard, Gernot, Huembert, Christian, Pister, Markus, Wegener, Simon, Ferdinand, Christian
The Why of Development Assurance2025-01-015405/02/2025
In the domain of aircraft certification, Development Assurance is what some would call a useful tool to gain confidence in the development of complex systems, and what others would call a necessary evil. But what does it actually do? Why is it necessary for certification of modern aircraft? What, epistemologically, does it bring to the table? This paper aims to show how Development Assurance (DA) activities, at all levels from aircraft to item, close the epistemological holes created when complex systems are chosen for implementation. It will map the different sources and types of uncertainty encountered in system and aircraft verification and explain how each type is dealt with within a certification context, working from simple mechanical systems up to complex and highly integrated systems using software and airborne electronic hardware and beyond. It will show that Development Assurance, far from being an arbitrary set of activities, systematically brings personal and corporate
Laflin, Cory R.
A Systematic Literature Review on Safety of the Intended Functionality for Automated Driving Systems2025-01-503004/28/2025
In the automobile industry, ensuring the safety of automated vehicles equipped with the automated driving system (ADS) is becoming a significant focus due to the increasing development and deployment of automated driving. Automated driving depends on sensing both the external and internal environments of a vehicle, utilizing perception sensors and algorithms, and electrical/electronic (E/E) systems for situational awareness and response. ISO 21448 is the standard for Safety of the Intended Functionality (SOTIF) that aims to ensure that the ADS operate safely within their intended functionality. SOTIF focuses on preventing or mitigating potential hazards that may arise from the limitations or failures of the ADS, including hazards due to insufficiencies of specification, or performance insufficiencies, as well as foreseeable misuse of the intended functionality. However, the challenge lies in ensuring the safety of vehicles despite the limited availability of extensive and systematic
Patel, Milin, Jung, Rolf, Khatun, Marzana
Automated Vehicles and Infrastructure Enablers: Dedicated LanesEPR202500704/24/2025
Dedicated lanes provide a simpler operating environment for ADS-equipped vehicles than those shared with other roadway users including human drivers, pedestrians, and bicycles. This final report in the Automation and Infrastructure series discusses how and when various types of lanes whether general purpose, managed, or specialty lanes might be temporarily or permanently reserved for ADS-equipped vehicles. Though simulations and economic analysis suggest that widespread use of dedicated lanes will not be warranted until market penetration is much higher, some US states and cities are developing such dedicated lanes now for limited use cases and other countries are planning more extensive deployment of dedicated lanes. Automated Vehicles and Infrastructure: Dedicated Lanes includes a review of practices across the US as well as case studies from the EU and UK, the Near East, Japan, Singapore, and Canada. Click here to access the full SAE EDGETM Research Report portfolio.
Coyner, Kelley, Bittner, Jason
Advanced Driver Assistance Systems (ADAS): Assessing the Efficacy of Non-Impact Testing for Evaluating the Performance of Frontal Collision Mitigation Technology2025-01-805604/01/2025
As Automatic Emergency Braking (AEB) systems become standard equipment in more light duty vehicles, the ability to evaluate these systems efficiently is becoming critical to regulatory agencies and manufacturers. A key driver of the practicality of evaluating these systems’ performance is the potential collision between the subject vehicle and test target. AEB performance can depend on vehicle-to-vehicle closing speeds, crash scenarios, and nuanced differences between various situational and environmental factors. Consequently, high speed impacts that may occur while evaluating the performance of an AEB system, as a result of partial or incomplete mitigation by an AEB activation, can cause significant damage to both the test vehicle and equipment, which may be impractical. For tests in which impact with the test target is not acceptable, or as a means of increasing test count, an alternative test termination methodology may be used. One such method constitutes the application of a late
Kuykendal, Michelle, Easter, Casey, Koszegi, Giacomo, Alexander, Ross, Paradiso, Marc, Scally, Sean
Responsible AI System Development in Automotive Applications: A Framework2025-01-810204/01/2025
With the surge in adoption of artificial intelligence (AI) in automotive systems, especially Advanced Driver Assistance Systems (ADAS) and autonomous vehicles (AV), comes an increase of AI-related incidents–several of which have ended in injuries and fatalities. These incidents all share a common deficiency: insufficient coverage towards safety, ethical, and/or legal requirements. Responsible AI (RAI) is an approach to developing AI-enabled systems that systematically take such requirements into account. Existing published international standards like ISO 21448:2022 (Safety of the Intended Functionality) and ISO 26262:2018 (Road Vehicles – Functional Safety) do offer some guidance in this regard but are far from being sufficient. Therefore, several technical standards are emerging concurrently to address various RAI-related challenges, including but not limited to ISO 8800 for the integration of AI in automotive systems, ISO/IEC TR 5469:2024 for the integration of AI in functional
Nelson, Jody, Lin, Christopher
Development of a Rule-Based Lidar Lane-Keeping Assistance System for Autonomous Vehicles Applications2025-01-802504/01/2025
Lane-keeping is critical for SAE Level 3+ autonomous vehicles, requiring rigorous validation and end-to-end interpretability. All recently U.S.-approved level 3 vehicles are equipped with lidar, likely for accelerating active safety. Lidar offers direct distance measurements, allowing rule-based algorithms compared to camera-based methods, which rely on statistical methods for perception. Furthermore, lidar can support a more comprehensive and detailed approach to studying lane-keeping. This paper proposes a module perceiving oncoming vehicle behavior, as part of a larger behavior-tree structure for adaptive lane-keeping using data from a lidar sensor. The complete behavior tree would include road curvature, speed limits, road types (rural, urban, interstate), and the proximity of objects or humans to lane markings. It also accounts for the lane-keeping behavior, type of adjacent and opposing vehicles, lane occlusion, and weather conditions. The algorithm was evaluated using
Soloiu, Valentin, Mehrzed, Shaen, Kroeger, Luke, Pierce, Kody, Sutton, Timothy, Lange, Robin
Freedom from Interference Challenges for Adaptive Autosar Based Platform2025-01-807404/01/2025
This paper examines the challenges and mechanisms for ensuring Freedom from Interference in Adaptive AUTOSAR-based platforms, with a focus on managing Memory, Timing, and Execution challenges. It explores the robust safety mechanisms in Classic AUTOSAR that ensure Freedom from Interference and the significant challenges in achieving interference-free operation in Adaptive AUTOSAR environments while adhering to ISO26262 standards. The study emphasizes strategies for managing complexities and outlines the multifaceted landscape of achieving interference-free operation. Additionally, it discusses ASIL-compliant Hypervisor, memory partitioning, and Platform Health Management as mechanisms for ensuring safety execution. The paper also raises open questions regarding real-time problems in live projects that are not solved with existing safety mechanisms. Adaptive AUTOSAR plays a crucial role in the development of autonomous and connected vehicles, where functional safety is of utmost
Jain, Yesha
Integration of Safety Standards for a Unified Safety Framework for Automated Vehicles2025-01-871704/01/2025
This paper proposes a structured safety framework tailored for the concept phase of Level 2 and Level 3 automated vehicles, addressing the unique challenges posed by these advanced systems. The framework integrates key principles from ISO 26262 and ISO 21448 to create a safety approach that spans hardware reliability, functional safety, and system performance. Central to the framework is a broad analysis that combines methodologies from System-Theoretic Process Analysis (STPA) and Hazard Analysis and Risk Assessment (HARA). This dual approach enables the identification of potential risks arising from both hardware failures and the intended functionalities of the system. The framework further details a combined specification and design process that aligns the strengths of each standard, ensuring robust sensor architectures and reliable decision-making processes. A case study on Adaptive Cruise Control with Lane Keeping is presented to demonstrate the practical implementation of the
Sari, Ayse Aysu, Soleimani, Morteza
Leveraging the Automated Mobility Partnership (AMP) to Support the Evaluation of Safety of the Intended Functionality (SOTIF) in Automated Driving Systems2025-01-867404/01/2025
The Automated Mobility Partnership (AMP) is a consortium of industry and academic stakeholders dedicated to advancing Automated Driving Systems (ADS) through a comprehensive suite of tools, datasets, and methodologies. The AMP portal integrates events from over 35 million miles of naturalistic driving data including thousands of annotated crashes and near-crashes and a decade of U.S. police-reported crash data curated by the Virginia Tech Transportation Institute. The portal enables data discovery, visualization, processing, and analysis through secured web access. This paper briefly describes the AMP portal and examines its utility in developing and evaluating the safety of ADS using standardized processes. For the examination, we provide examples based on generic automated driving functions, guided by the Safety of the Intended Functionality (SOTIF) framework. The results show that AMP is instrumental in identifying recorded real-world cases in which the hazardous behavior of a
Antona-Makoshi, Jacobo, Williams, Vicki, Ali, Gibran, Sullivan, Kaye, Terranova, Paolo, Kefauver, Kevin, Hatchett, Alex
Controllability and Driving Automation2025-01-867904/01/2025
A key challenge for manufacturers of automotive systems, hardware components and software products with no contribution to driving automation is the stringent requirements imposed on elements while being integrated into vehicles with driving automation. The result is increased development cost and low reusability. For such elements or components with no contribution to driving automation, their functions and failure modes remain unchanged when comparing vehicle integration with and without driving automation. The influence of driving automation is not accounted for in the current approach of classifying risk while conducting a Hazard Analysis and Risk Assessment (HARA). Functional safety standards for on-road vehicles rely on human intervention as a parameter to classify risk. Since current safety standards for on-road vehicles are not inclusive of driving automation concepts, classification of risk, based on existing definitions of parameters such as controllability, leads to
Shah, Mihir, Ibarra, Ireri
Research on Torque Management Safety Monitoring Control for Hybrid Vehicles2025-01-857904/01/2025
Hybrid vehicles are driven by the vehicle controller, engine controller and motor controller through torque control, and there may be unexpected acceleration or deceleration of the vehicle beyond the driver's expectation due to systematic failure and random hardware failure. Based on the torque control strategy of hybrid vehicles, the safety monitoring model design of torque control is carried out according to the ISO 26262 safety analysis method. Through the establishment of safety goals and the analysis of safety concepts, this paper conducts designs including the driver allowable torque design for safety monitoring, the driver torque prediction design for safety monitoring, the rationality judgment design of driver torque for safety monitoring, the functional safety degradation design, and the engine start-stop status monitoring, enabling the system to transition to a safe state when errors occur. Firstly, the design of the driver's allowable torque includes the allowable requested
Jing, Junchao, Wang, Ruiguang, Liu, Yiqiang, Huang, Weishan, Dai, Zhengxing
The Influence of Impact Location and Angle on the Dynamic Response of a Large Omnidirectional Child Dummy Head and Neck Complex2025-01-874004/01/2025
Head injuries are a common cause of fatality and long-term impairment in child occupants in motor vehicle crashes. The National Highway Traffic Safety Administration (NHTSA) has developed the Large Omnidirectional Child (LODC) Anthropomorphic Test Device (ATD) where the head was designed to match pediatric biomechanical impact response targets from previous literature. The purpose of this study was to compare experimental and computational results for eight impact directions at 45-degree increments around the LODC head under two levels of impact severity: low and high, corresponding to nominal velocities of 3.08 mm/ms and 5.42 mm/ms, respectively. The experimental setup consists of the LODC head and neck assembly rigidly attached to a circular fixture plate and a hemispherical-shaped impactor 76.2 mm in diameter. The acceleration and angular velocity responses were measured and computed from the LODC finite element (FE) head CG and compared against the experimental data. Experimental
Challa, Abhishikt, Noll, Scott
Aggregation of Cervical Loads in Rear Impact Crash Tests and Comparison to Activities of Daily Living2025-01-870804/01/2025
Peak upper and lower neck load data from rear impact crash testing were reviewed, aggregated, and analyzed from over 1,800 tests of existing peer-reviewed literature and research as well as available testing conducted by the Insurance Institute for Highway Safety (IIHS) and the National Highway Traffic Safety Administration (NHTSA). Both human volunteers and anthropomorphic test devices (ATDs) were subjects of the reviewed studies and testing. Peak upper and lower neck axial forces (compression and tension), sagittal shear forces, and sagittal moments (flexion and extension) from available crash testing were reported and analyzed as functions of measured change in velocity (delta-V) ranging from approximately 3 to 60 km/h (1.9 to 37 mph). This load data was then further analyzed for possible trends amongst various testing conditions, such as seat type, ATD used, and subject seating position within the vehicle chassis and seat to develop a simple linear model. The linear regressions
Kazmierczak, Alex, Umale, Sagar, Visalli, Alyssa, Webb, Ella, Kashdan, Aryeh, Randles, Bryan, Welcher, Judson
The Challenges of Next-gen ADAS and ADS and Related Vehicle Safety TopicsEPR202500303/31/2025
Advanced driver assistance systems (ADAS) and automated driving systems (ADS) continue to expand into the market at a rapid pace. As improved (i.e., next generation) versions of these systems become available, they will continue to face many challenges in their implementation and benefits for safety and driving operations. The solution will involve many parties, including road safety professionals and researchers who see the potential in these systems but may have difficulties keeping up with them, and safety advocates who are calling for these systems to achieve higher levels of safety now. The Challenges of Next-gen ADAS and ADS and Related Vehicle Safety Topics explores these challenges that will fall on the National Highway Traffic Safety Administration (NHTSA) and automakers as they balance costs and benefits; establish reasonable regulations and standards; and determine how to improve, test, deliver, and use these systems successfully. Perhaps the most formidable challenge will
Chalmers, Seth
Smart Clusters: Functional Safety Concepts and Requirements12-08-02-001803/28/2025
This study presents a detailed review of a contemporary safety concept for a smart cluster, comprising a multipurpose display and a head unit. It focuses on elucidating the fundamental regulatory requirements for smart clusters within the frameworks of the United States and the European Union, and draws connections to their functional safety requirements and concepts. The article explores a range of safety mechanisms and architectures designed to implement these proposed functional safety requirements. For each mechanism, we provide an in-depth analysis of its benefits and drawbacks, as well as a thorough explanation of its operational logic. This comprehensive evaluation offers valuable insights into developing safer and more efficient smart clusters in line with international regulatory standards.
Anisimov, Valentin, Babaev, Islam, Shinde, Chaitanya
System Theoretic Process Analysis (STPA) Standard for All IndustriesJ3307_202503 (Current)03/25/2025
This standard documents what is required to execute a System Theoretic Process Analysis (STPA) of safety-critical products or systems in all industries. This standard defines the terminology, the steps in using STPA, the activities flow, and the expected deliverables. This standard may be used when addressing compliance with contractual or regulatory requirements regarding risk assessments, safety assessments, development assurance, system security engineering, or other similar requirements as appropriate. In addition, this standard can be used to demonstrate that an effective STPA evaluation has been conducted when compliance is not of paramount concern. This standard is applicable to a broad set of uses including, but not limited to, corporate product development processes, organizational processes, regulatory groups, supplier processes, defense programs (e.g., government awards a contract to a company and the contract mandates STPA), defense program office (e.g., government safety
Functional Safety Committee
Editorial09-13-01-000803/24/2025
Driving Change: NHTSA’s Role in Advancing Road Safety
Hardy, Warren N.
AVSC Best Practice for Automated Driving System-Dedicated Vehicle (ADS-DV) Immediate Post-Crash Behaviors and InteractionsAVSC-I-05-202503/04/2025
The behaviors and interactions of automated driving system-dedicated vehicles (ADS-DVs) following a crash can have continuing effects on road safety. As more ADS-DVs are commercially deployed and tested on public roads, it is important that systems are designed not only to prevent crashes, but to minimize the impact severity in situations where crashes cannot be avoided. Further injuries, vehicle and property damage, and secondary crashes can be mitigated based on appropriate ADS-DV behaviors and interactions following a crash. This best practice defines five general crash stages, focusing on the Immediate Post-Crash stage. It presents a framework with examples of ADS-DV behavior and interaction activities. It includes recommendations on decision making and evaluation of immediate post-crash ADS-DV behaviors. The document also highlights three dependencies that impact the behavior and interaction of an ADS-DV. The dependencies are paired with illustrative scenarios, followed by
Automated Vehicle Safety Consortium
Regulatory and Policy Framework for Urban Drone Logistics Systems2025-01-714402/21/2025
The swift and relentless progression of drone technology has ushered in novel opportunities within the realm of urban logistics, especially for the potential of drones to modify last-mile delivery and improve customer fulfillment through mobile application integration, offering the potential for delivery systems that are both efficient and environmentally sustainable. This development is not just a technological leap but a transformative shift in how goods are moved within urban spaces, potentially reducing traffic congestion and emissions from traditional vehicles. Nevertheless, the safety issues of drone flights in cities are becoming increasingly serious, and the accountability related to drone accidents is not clear, raising concerns in society regarding the use and safety of drones. Therefore, to fully utilize the potential of drones in urban logistics, the incorporation of drones into the urban airspace environment necessitates the establishment of a strong regulatory and policy
Ma, Jie, Yang, Junjie, Diao, Weile, Du, Yiling, Chen, Weiqi
Leveraging Triggering Conditions for Efficient Scenario-Based Testing of Automated Vehicles12-08-04-003502/19/2025
Scenario-based testing has become a central approach of safety verification and validation (V&V) of automated driving. The standard ISO 21448: Safety of the intended functionality (SOTIF) [1] proposes triggering conditions (e.g., an occluded traffic sign) as a new aspect to be considered to organize scenario-based testing. In this contribution, we discuss the requirements and the strategy of testing triggering conditions in an iterative, SOTIF-oriented V&V process. Accordingly, we illustrate a method for generating test scenarios for evaluating potential triggering conditions. We apply the proposed method in a two-fold case study: We demonstrate how to derive test scenarios and test these with a virtual automated driving system in simulation. We provide an analysis of the testing result to show how triggering condition-based testing facilitates spotting the weakness of the system. Besides, we exhibit the applicability of the method based on multiple triggering conditions and nominal
Zhu, Zhijing, Philipp, Robin, Howar, Falk
Development and Simulation of an AUTOSAR Software Component for Functional Safety according to ISO 26262 Fault Detection and Safety Mechanisms2024-36-013212/20/2024
In the context of advancing automotive electronic systems, ensuring functional safety as per ISO 26262 standards has become of primary importance. This paper presents the development of an AUTOSAR-compliant Software Component (SWC) applied to ISO 26262 applications. Using MATLAB/Simulink, we design and simulate a SWC that operates within the AUTOSAR architecture, focusing on fault detection and activation of safety mechanisms. The SWC is built to monitor specific system parameters and operational anomalies. Upon detecting a fault, it triggers predefined safety mechanisms to mitigate risks and ensure system integrity. The simulation focus on capability to accurately identify faults and execute safety measures effectively, thus demonstrating a practical approach to enhance automotive system safety implementation and its reuse. This paper not only highlights the importance of ISO 26262 in the automotive industry but also illustrates the feasibility of developing and integrating safety
Santiago, Frederico Victor Scoralick, dos Santos Machado, Cleberson, Imbasciati, Henrique, Costa, Silvio Romero Alves
AVSC Best Practice for Automated Driving System-Dedicated Vehicles (ADS-DVs) Safety Inspection FrameworkAVSC-D-03-202412/20/2024
Safety inspections support sustained safety performance when fleet operators deploy automated driving system-dedicated vehicles (ADS-DVs) on public roads. A clearly defined and traceable safety inspection protocol can help build public trust and promote industry standardization. A well-defined process for designing and managing a safety inspection protocol and a list of minimum inspection elements can help ADS-DV manufacturers, developers, and fleet operators create, maintain, and implement safety inspection protocols. This best practice provides a framework for creating, maintaining, and documenting a safety inspection protocol. It includes a classification for ADS-DV subsystems and components, a list of minimum inspection elements, a perspective on the types of triggers that can initiate inspections, and an illustrative example of the lifecycle of a safety inspection protocol and how inspections may change at each stage. This best practice will help to standardize the communication
Automated Vehicle Safety Consortium
Items per page:
1 – 50 of 864