Overview - SOTIF (ISO 21448:2022)

Calculate risk from probability and severity within standards like ISO 2626 two and ISO 2144 eight, and reduce it to an acceptable level by implementing measures.

Explore the legal aspects of SOTIF (ISO 21448:2022), including product liability laws, burden of proof, and the mandatory versus optional parts, and how standards reflect state of the art.

Explore SOTIF principles and the four scenario areas, showing how triggering conditions and sensor faults create hazards and hazardous events, with sense-plan-act reducing residual risk.

Explore specification of functionality and design considerations for automation, detailing performance targets, HMI communications with the driver, and warning and fallback concepts, with adaptive cruise control as an example.

Identify hazards that can lead to harm in SOTIF using exposure, controllability, and severity to assess risks, with an autonomous emergency braking example triggered by radar.

Evaluate vehicle-level hazards using exposure, controllability, and severity from ISO 2626 two risk evaluation to determine ASIL levels. Implement risk reductions to lower severity or improve controllability in hazardous scenarios.

Define acceptance criteria for residual risk after risk evaluation, considering severity and controllability ratings and quantitative values and regulatory inputs.

Examine potential functional insufficiencies and triggering conditions in SOTIF (ISO 21448:2022) and assess the acceptability of hazardous behavior responses. Apply analysis methods across planning algorithms, sensors, actuators, and misuse scenarios.

Estimate the acceptability of the system's response to triggering conditions by evaluating all scenarios; achieve Sawteeth if residual risk is below acceptance criteria, otherwise modify functionality in chapter eight.

Explore four options to reduce residual risk in SOTIF: system modification, functional modification, handing over authority, and addressing reasonably foreseeable misuse; apply improvements to sensors, processing, actuators, and human-machine interface.

Update the input information for specification and design based on defined measures, iterating while hazards with unreasonable risk remain, and provide new input for chapter six activities.

Define the verification and validation strategy to evaluate potentially hazardous scenarios, cover the scenario space with systematic test-case derivation, and specify required evidence such as analyses and test reports.

Explore how SOTIF guides the verification of sensing elements, planning algorithms, and integrated system to manage known hazardous scenarios, focusing on sensor performance, environmental conditions, and residual risk.

Verify planning algorithms for robustness against interference using noise injection and requirement-based testing, analyze scenarios, and ensure triggers are detected with responses such as handing over control or reducing torque.

Verify activation with accuracy, resolution, and timing constraints; apply requirements-based testing; test actuator behavior under environmental conditions; and validate risk mitigation through resimulation of hazardous scenarios in the integrated system.

Verify the integrated system after sensing, planning, algorithms, and actuation using requirement-based tests to validate performance targets, timing constraints, aging effects, and internal and external interfaces.

Evaluate the residual risk from known hazardous scenarios against defined validation targets and acceptance criteria, following the verification and validation strategy from chapter nine, with future coverage of unknown scenarios.