Functional Safety Assessment of a Generic Accelerator Control System With Electronic Throttle Control in Fuel Cell Hybrid Electric Vehicles

2018Becker, C., Nasser, A., & Attioui, F. (2018, December). Functional safety assessment of a generic accelerator control system with electronic throttle control in fuel cell hybrid electric vehicles (Report No. DOT HS 812 640). Washington, DC: National Highway Traffic Safety Administration.PDFTech ReportDOT HS 812 640DOT-VNTSC-NHTSA-16-09Intra-Agency Agreement DTNH22-15-V-00010, 51HS7BA200Control system applicationsAccelerators (Devices)Fuel cell vehiclesHazard analysisRisk assessmentHybrid vehiclesaccelerator control systemelectronic throttle controlfuel cellhazard and operability studyfailure mode and effects analysissystems theoretic process analysisISO 26262safety requirementsUnited StatesUnited States. Department of Transportation. National Highway Traffic Safety AdministrationBecker, ChristopherNasser, AhmadAttioui, FouadJohn A. Volpe National Transportation Systems Center (U.S.)United States. Department of Transportation. Office of the Assistant Secretary for Research and TechnologyUnited States. Department of Transportation. National Highway Traffic Safety AdministrationUS Transportation CollectionThis report describes research assessing the functional safety of accelerator control systems with electronic faults, such as errant electronic throttle control signals, following an industry process standard. This study focuses specifically on errant signals in motor vehicles with fuel cell hybrid electric propulsion. This study follows the concept phase process in the ISO 26262 standard and applies a hazard and operability study, functional failure mode and effects analysis, and systems theoretic process analysis methods. In total, this study identifies 7 vehicle-level safety goals and 202 ACS/ETC system safety requirements (an output of the ISO 26262 and STPA processes). This study uses the results of the analysis to identify potential opportunities to improve the risk assessment approach in ISO 26262.75