Functional Safety Assessment of a Generic Accelerator Control System With Electronic Throttle Control in Diesel-Fueled Vehicles

2018PDFTech ReportDOT HS 812 585DOT-VNTSC-NHTSA-15-10Intra-Agency Agreement DTNH22-13-V-0011451HS7BA100Hazard analysisRisk assessmentDiesel enginesInternal combustion enginesAccelerator control systemelectronic throttle controlhazard and operability studyfailure modes and effects analysissystems theoretic process analysisISO 26262safety requirementsUnited StatesUnited States. Department of Transportation. National Highway Traffic Safety AdministrationVan Eikema Hommes, QiBecker, ChristopherNajm, Wassim G.John A. Volpe National Transportation Systems Center (U.S.)United States. Department of Transportation. National Highway Traffic Safety AdministrationVolpe National Transportation Systems Center, Technical Reference CenterThis report describes the research assessing the functional safety of accelerator control systems with electronic faults, such as errant electronic throttle control signals, following an industry process standard. This study focuses specifically on errant signals in motor vehicles powered by diesel engines. The study follows the concept phase process in the ISO 26262 standard and applies a hazard and operability study, functional failure modes and effects analysis, and systems theoretic process analysis methods. In total, this study identifies five vehicle-level safety goals and 204 ACS/ETC system safety requirements (an output of the ISO 26262 and STPA processes). This study uses the results of the analysis to identify potential opportunities to improve the risk assessment approach in the ISO 26262 standard