「IoT時代のセーフティ設計技術解説」
Contents
1. E PL N lt x D HH _ m N f j V amp V d SIL ASIL HW SW SW V amp V f I E 2 E p emm 1_ emm a m mmm s s mu m gt _ p d _ m H2. Eson H amp R E ss mm ROI ODER 0898 15012100 ane 3 eg ey DP JIS9700 2013 5 3 gt i T BEF Rh 3
3. moz lt lt 62 728h efEXIE r 5 lt O V F CPUDBHPSG2 S0c EUIESIEIHS 0 ofa S CPU CPU IE API 7 F t
4. EU LUE EIU prp VEL EIE T 2015 3 30 IoT 2015WITZInc 1 1 un lt um 21 H amp R RO EL E yx _ T 2 2 qu CRUBE JIS9700 2013 JIS9702 2000 JIS9700 2013 HAZOP 1ISO TR 14121 2 2012 ISO TR 14121 2 2012
5. E o e TETE C a U Z OGG SIL2 In gt SIL2 gt SIL2 J Ped s T EE mM T E _ cum EM a ETES En F Fo E a Im I R 7 _ W XP 15012100 mme S E RI O
6. DAR 3 a 022 2015 3 3 7 1 965185 2 DME 2015 WITZ Inc 26 ENMI TEEI NEEN NIY Uses _ HwW IEC 61508 ISO 26262 2 BS EN 50129 3 1 1 2 2 2 3 4 IM 2015 3 30 Io
7. RAE NC M UNE E S gos T ASIL TER J R R B ET L3 is v z 0 IHE cR 1SO26262 5 Table D 6 Volatile memory Safety See overview Typical diagnostic coverage mechanism measure of techniques considered achievable DC High coverage for stuck at failures No coverage for linked failures Can be appropriate to run under interrupt protection RAM pattern test 2 5 Medium 90 Depends on the write read order for RAM March test 25 Hi linked cell coverage Test generally not appropriate for run time Parity bi 0252 Low 60601 Memory monitoring using The effectiveness depends on the error detection correction 24 High 99 number of redundant bits Can be codes EDC used to correct errors 990 failure modes reduce Block replication 2 High diagnostic coverage The effectiveness of the signature depends on the polynomial in relation to the block length of the information to be protected Care needs to be taken so that values used to Running checksum CRC 254 High 990 0 determine checksum not changed during checksum calculation Probability is 17 maximum value of checksum if random pattern is returned
8. API L RTOS x Br khata z puro cac UE 2015 3 30 IoT 62 42 71855 MPH AOR TARERE AD MEETOD 5 Eio Fa A y FE AT T a Ai FEITO TIVA Ca c a 43 F T OEE m a Av F Y S1 amp LT0S sw 02 REG 00058 OS SW 02 REQ 00001 2 Er ADRE EE s U MI T TETTE e T o TCAORBa S PSs Sw 02 REQ 00059 OS SW 02 REQ 00001 le26259250274 uUL 2 8B Elm F a Ae F L DRABA Sal 0s sWw 02 REQ 00060 OS SW 02 REQ 00001 cli mo 5zxxBi mE mU EB S TU ZdgIBR S TOS Sw 02 REQ 00061 OS SW 02 REG 00001 51 COE TEE Tea 7 di lt DRAE S AO THELIST Ag
9. SRPHZR KEO ki 2 2015 3 30 IoT 2015 WITZ Ine 4r 99 FHEHEES X p 5 DLE _ Z 5 mem NG LP B iz L TR T E Ac K m n L 7 P
10. WO E a 7 RR BIS f DT RIANA 3 L l 2 HE 8 r si uu R R R R R R R R R R R RK RK R RR R K RK R R R RK R R R E K R SEE EE EX L FEX BERLA TA 3 imme do EA a O RRAOHA O H 2015 3 30 IoT 2015 WITZ Ine ET H amp R VS gt amp H amp R ISO12100 SIL ASIL 2015 3 30 IoT 2015 WITZ Inc C
11. 2015 WITZ Ine r r r 1 d E m e Z E aero UE ea Verification gt ae et m rr mm _ s i mE Lem L E Tus z 2015 3 30 IoT 02015 WITZ Inc C 15 _ 7SO72700 Jis B 9700 E 07 450 JREI UXZZEXXVFRARUUXZfKEEH
12. 2 3 4 5 5 Ga 2 m HR mu E m E u Ae LET ul vL xc S A S mr Te 2015 3 30 IoT 2015 WITZ Ine r r r 23 ka EON 15026262 62 ASLL IS026262 5 amp 4 a m a _ wa r m E lo wo jew quo e Jm EB s E3 w sss E MR s E 2015 3 30 IoT 02015 WITZ Inc ME _24 T m T 5 Er pe T E M PME EE E E E E s ss E E T zx 2 EX Ax PET Dr s zd NE ER cr 215 z n E E NES MEM E e a m MEI Eas iet d EA EE L73425 EE JJ ds 12600073 5
13. 4 2 2 2 CERTIFICATE No Q4B 12 03 73778 001 CERTIFICATE No Q4B 10 04 73778 002 Holder of Certificate Witz Corporation Shirakawa 2nd BLDG 13 1 SAKAE 2 CHOME NAKA KU NAGOYA 450 0006 JAPAN Holder of Certificate Witz Corporation Shirakawa 2nd BLDG 13 1 SAKAE 2 CHOME NAKA KU NAGOYA 460 0008 JAPAN Factory ies Witz Corporseon Shirakawa 2nd BLDG 13 1 SAKAE 2 NAKA KU NAGOYA 460 0008 JAPAN Certification Mark 478 Rte Scope of Certificate Software Development Procoss Factory ies Witz Corporaton Shirakawa 2nd BLDG 13 1 SAKAE 2 CHOME NAKA KU NAGOYA 462 0008 JAPAN Certification Mark Scope of Certificate Software Development Process Applied Sohmaee Development Process Incksding E Standard s Owwrali 5 stety Ufecycla Renurementa and Applied Software Development Process including Funct Safety Merageemwent scoordng to Standard s Overall Safety Lifecycle Requirements and EC 815 2010 Functional Safety Management according to IEC 61508 1 1998 SIL 1 3 J IEC 61508 2 2000 as applicable at 4 SO 26262 5 2011 IEC 61508 3 1998 SIL 1 3 The report V NBAZZBC a mandatory part of IEC 61508 4 1998 as applicable this certhicate CER
14. e e e n __ TT EJ LER putei ros en en EE pcm EE Z 2015 3 30 IoT ASDoQ 39 Q uL Era Z LE ETE M PX HH Wu d F M 9 x un Hr 8 T v E 73 SN JH E E OMERE CERIAN NG gt OK 6242 WHggRRODserTIBFES OS SW 02 REQ 00058 OS SW 02 REGQ 0000 1 TARERE 57 oca b BODA FETON ALADA 4 Ai F SEL lt 6 2 6 2 889 50 0 v
15. o Jeje jeje fej je Je e leo jeje lelelelelelelelelelelelelelelelele elelelelelelelele elelele e jojojo EC 61508 jelelelelelelel J je IS026262 o e o eo oo o e eo oo eje e elelelelelele ee ee 1S013849 e e _ e je e je jeje jej le _ 2015 3 30 101 02015 WITZ Inc e DZ 6 mum rM 4 The available documentation of Witz Inc is complete with respect to the concept of the TOE as w ud ay Review Report defined in chapter 1 mum asc caedis lu I mmm passa LII offe The safety manual has to be completed in the detailed phases of a specific project depending Y Partition OS Safety Concept on the project specific regulation of deliverables by Witz Inc This includes requirements result ILA H HH ERI 1 m Meplicant ing from the fa
16. 1 Ne seem 79 54 75 1 11 t1 7 a a A Be EE a i a E r Ef t r s tz E i ae L L L m ZE m i 7 E poe TOT 11 EIE r TEF V Ec ec a I 2015 3 30 TETTE ran 2015 WITZ Inc 42 F E Jv 2 46 lt Dar CETERO ai urne EE EJ g s am SE FEIERN miei 2852192 a T E ES E zn GER MINE ER rg dom Em punc THORRES THOER TISTE LES PE LA ns ATE UC B P SEE US n nix i OT o JA o wA EE oS Ts nr guae CORRI A CM E lie m E JA Do 2 OS SW 01 REQ 0 E A Tu I ECCE TS i URU FIET TROM No 5 1112 d T T C SL 51 9 l zzi 0D E EY PET zal x 5 1 n3 DS
17. pari px EXE EE EE B e n 2015 3 30 IoT 2015 WITZ Inc _ 30 ROM CRC ROMw RAM RAM Table D 6 2 P Table D 4 WDT WDT Table D 10 Don Ec reci E ecu zm ISO26262 6 Table 4 Mechanisms for error detection at the software architectural level Methods Range checks of Input and output data Plausibility check Det
18. 22 24 3 Par0S OS TUV SUD complete Z 6 Summary The available documentation of Witz Inc is complete with respect to the concept of the TOE as defined in chapter 1 The safety manual has to be completed in the detailed phases of a specific project depending on the project specific regulation of deliverables by Witz Inc This includes requirements result ing from the fact that Witz Inc makes it mandatory to order the Board Support package devel opment to Witz Inc The resulting final safety manual shall be reviewed and checked to achieve precise and accurate instructions for the user of ParOS The requirements of IEC 61508 2 Edition are met The results and recommendations can be used to execute the detailed development phase and documentation for PartitionOS Review Report of the Partition OS Safety Concept Shirakawa 2 Bldg 2F 7F 13 1 Sakae 2 Chome aka ku 460 0008 Nagoya Japan Manufacturer Witz Incorporation Same as above Report no WN84129T Revision 2 0 Date 18 01 201
19. E oir E E n siraq TSS M CE CEST TI ETA mM a c IER E 25 MM E RD zu Tm A _ A BEL EE CET ir z _ E z gt Tm F ce m http www witz inc co jp SUD http WWw tuev sued de industry_and_consunter_Droducts certificates Search Witz Corporation http release nikkei co jp detail cfm rellD 3064358 amp lindID 1 EDN http ednjapan com edn articles 1203 29 news083 html Tech On http techon nikkeibp co jp article NEWS 20120329 210429 http panasonic co jp corp news official data data dir jn120329 8 jn120329 8 html RR http www toshiba co jp about press 2012_03 pr_j2901 htm IPROS http www ipros jp news article detail 3649 Response http response jp article 2012 03 30 172177 html Tech On IEC61509 http techon
20. ISO 13482 OOC w k SE ER Lx Eam TTrs n s IE a ES a Io 2015 10 m sem g 5 RET 50 AE EH HE T E i WP tat pL v _ Pompa pra IR mud zeit cum ee GEEN Bir 5 Copyright 2014 All Rights Reserved IPA Software Reliability Enhancement Center 11 NL FJC Safety amp Security Part 1 2014 7 VH e an a a 2015 3 30 IoT 2015 WITZ Inc 3
21. Smart Safety Agriculture mm P FB REEL E I ISO BUS RE lt ISO 11783 ISOBUS D gt 10 behind VEMM ISOBUS 2000 fu e Smart Safety Agriculture 5 behind lt GSN SafeML ISO 25119 2010 2015 3 30 IoT G2015WTZImc m T da E zc p 0 2 Il 9f d 2015 WITZ Inc FSS EXE PER Ps Dx a TW ENS IEC 60730 IEC 60335 DO 178B DO 178C ISO 26262 WE SSNN D V BS EN 50128 BS EN 50129 62304 J IEC 82304 IEC 62061 ISO 13849
22. OK 9 OS SW 01 REQ 02046 ROMO 308 8W 01 R OS SW 01 REQ 2D 24gl c 10 OS SW 01 REQ 02047 ROMO OS SW 01 R OS SwW 01 REQ 11 OS Sw 01 REQ 02049 CRC OS SW 01 ROS SW 01 REQ 12 OS SW 01 REQ 02052 OS SW 01 R 05 51 01 7D 248glc 13 OS SW 01 REQ 02055 5 1 bI TOS SW 01 ROS SW 01 RE 14 05 51 01 REQ 02055 LI y2 gl EL TOS SW 01 ROS SW 01 REQ 15 OS SW 01 REQ 02059 08 SW OB T OS SW 02 VAS ROM2 No 5 OK 16 OS SW 01 REQ 02059 0S SW 08 T OS SW 02 VAS ROM2 No 5 OK 17 OS SW 01 REQ 02234 lOS SW 08 T OS SW 02 VAS ROM2 No 5 PETS B NG 18 oS Sw 01 REQ 02234 IO8 SW OB T OS SW 02 VAS 7 A F ROM2 No 5 19 0S SW 03 DSN 00583 mmck_chk ablkO OS SW 08 T OS SW 02 VAS 7 ROM2 No 5 20 OS SW 03 DSN 00583 romck_ chk ablk OS SW 08 T OS SW 02 VAS ZF
23. ET WG J ste HUI 02015 WITZ Inc AKHOHZS mr I c HX IoT H amp R ME NO M PS 2015 3 30 IoT 2015 WITZ Inc 2 2015 WITZ Inc IEC61508 15026262 aus i ES snr _ as i x m TE ELTE ux T as S 2010 4 IEC61508 SIL3 2012 3 stemmate ISO26262 ASIL D
24. ROM2 No 5 OK 21 OS SW 03 DSN 00583 romck chk abk OS SW 08 T OS SW 02 VAS 7 AF ROM6 No 7 OK 22 OS SW 03 DSN 00583 romck_ chk ablk OS SW 08 T OS SW 02 VAS 7 7 ROM6 Na 7 23 OS SW 03 DSN 00583 rmmck_chk_ablkO OS SW 08 T OS SW 02 VAS AF ROM6 Na 2 24 DS SW 03 DSN 00583 romck chk ablkO OS SW 08 T OS SW 02 VAS 7 ZF ROM6 No 2 25 OS SW 03 DSN 00583 romck chk ablk OS SW 08 T OS SW 02 VAS FAF ROM6 Na 1 26 DS SW 03 DSN 00583 rmmck chk ablkO OS SW 08 T OS SW 02 VAS 7 ZF ROM6 Na 1 27 OS SW 03 DSN 00584 romck cal cre 3 OS SW 08 T OS SW 02 VAS 7 ZF FIET ROMS 28 OS SW O3 DSN O0584 romck erc D 3 OS 8W 08 T OS SW 02 VAS gt k ROM3 eye E RW Ot RFO 02265 TOS SW OR T OS 8W 02 VAR T A F EIB ROMA Nn 2 cb dB Rigit M4 MN BeviewReport DEMO 3 5 2 h 2 kur 42007 4 G ad 2 Z A G B ad H doAB H ome ie Microsoft C Greyhoun OD sar Greyhound ix Microso 09 9020 1855 Greyhound 357 AN 231 lt pk LUE
25. GSN Safety Case mee z x Safety Case TOP GSN GSN Solution COBURVIORHTUT 05 http www users cs york ac uk tpk dsn2004 pdf Solution Strategy Undeveloped Goal Context to be developed further Fizure 4 Principal Elements of the Goal 5 An Example Goal Stru tfre Structuring Notation GSN se 2015 3 30 IoT 2015 WITZ Inc 35 rope RCM IAM LIESS uH 085 TOP RE IE NF TOP Satety Case T IRO BM EAA ETOREH Safa etyCase L 73 wo A
26. F r DEAE 05S SW 02 REQ 00062 OS SW 02 REQ 00001 CPU EDR ROB e OS SW 02 REQ 00063 O5 SW 02 REQ 00001 APT OS SW 02 REQ 00064 OS SW 02 REQ 00001 7 3MERJL X Ld 33 T EIC F LEBER RM PI 0S SW 02 REQ 00065 OS 8W 02 REQ 00001 40 WP ME 1 0 8
27. PHA HAZOP amp IMOSAR 2015 3 30 IoT 2015 WITZ Inc _ 22 m M WAR W E _ EU ELI S lt R P S F A Ps S 3 P 2 S CF 1 1 2 2 3 3 3 5 Ps 1 2 3 4 X A 1
28. amp R SIL ASIL Wiese WmLATADONE 61508 ISO 26262 ISO 13849 etc PO ED MEN oci J _ _ __ _ J 1 q _ _ JB _ _ X HW M um CHIMIE AE m VENE 0 IoT 02015 WITZ Ine rra _13 Lez E re d PL 1 DHENIA PLRK IE BE JI PLE E CT 5178290 V ODE RC RITE SUIS PLERZA CIRIHS 5 ED f 2015 3 30 IoT
29. gt l H 542 H A LL niv Xx MU jT Lo 2 T TANE E T E 2015 3 30 IoT 2015 WITZ Inc J 02015 WITZ Inc 44 omm SEC BOOKS amp EET rra IPA SEC WG gt gt M amp v Ec E Bal 2015 3 30 IoT 2015 WITZ Ince C r k r _45 Q 3 E A E
30. nikkeibp co jp article NEWS 20100512 182502 morikawa Qwitz inc co jp Tel 052 220 1218 lop E m 2015 3 30 IoT 2015 WITZ Inc eA
31. 3 Test and Certification body TUV S D Ra pepe Genenc Sa 16 D 80339 Munich A M 0040 LV Guido Neumann iA Sylvia Waldhausen Technical Certifier Expert Functional Safety Page 1 of 16 represented only In complete wording The use for promotion needs writ This technical report may on dm ParOS by me test and certification agency app Z E eu LERNTE K s 2015 3 30 IoT 2015 WITZ Inc m _5 y 71 2014 12 ras ese ee ee Tose ee vis isTe osse on essit v ue vas pas vis ze eie os oe en e ET DISBESES 7D EA 85 OR 4 ma lt n FMEDA amp e o e 3 RTOS E
32. N T TE 4 OQS Sw 3 DSH JEE E3 Microsoft Excel ReviewReport DEMO 38 B csv 2 401 ETY FAU ERO F D 0 ilis Q aa 28 X um 92 0 9 z 2 2 eB txs 8 B MS P 70 B Z U Z SZ E sig Si 2 A pi Z 2 Al B 0 0 O REP E Al Y B B D E F H 1 265 i 2 OS SW 01 R OS SW 01 REQ IEC 615080 2 R OK 3 OS SW 01 REQ 02043 IEC 615080 28 OS SW 01 R OS SW 01 REQ ROMO OK 4 OS SW 01 REQ 02043 IEC 615080 8828 OS SW 01 R OS SW 01 REQ ROMO OK 5 OS SW 01 REQ 02043 615080 3828 OS SW 01 R OS SW 01 REQ CRO OK 6 OS SW 01 REQ 02043 615080 3828 OS SW 01 R OS SW 01 REQ OK 7 OS SW 01 REQ 02043 615080 3828 OS SW 01 R OS 8W 01 REQ 1 OK 8 OS SW 01 REQ 02050 Bi AGEREU OS SW 01 ROS SW 01 REQ
33. T 02015 WITZ Inc 127 9 Safety Mechanism SM a h ARIS 2 L 1 1 gt 2 gt 2 1 1 _ i 2015 3 30 IoT 2015 WITZ Ince _ 28 Q HAZOP or FMEA and or FTA HAZOP or FMEA RATA KIFE
34. TIFICADO CERTIFICAT CERTIFICADO CERTIFICAT gt The Certfv nton Body of T JV SUD Product Senice GmbH certhes thal the company mentioned above has esisiolished and s msrmisnieg 9 management sysbam which meets the requiremants of he ksted standards The results are documented in report See alse notes ovre The Certification Body of TUV SUD Product Service GmbH certifies that the company mentioned abcve has established and is maintaining a management system which meets te requirements of the amp sted standards The results are documented in a report See also notes overleaf Report No WN83079T Report No WN84225C TOY 172215 Valid until 2013 04 18 Vaid until 2015 03 14 7 Date 2010 04 22 Peter Weiss 365324 Page 1 of 1 ZERTIFIKAT CERTIFICATE ZERTIFIKAT CERTIFICATE TUV SUD Product Service GmbH Zertifizierstelle Ridlerstrasse 65 80339 M nchen amp a mia s MEX s ma a ES Bs B E PEE E E DI 2015 3 30 IoT G 2015 WITZ Inc _4 r Ff SU I ru _ vm PEUT Tic EI E e E
35. ct that Witz Inc makes it mandatory to order the Board Support package devel cememem conu opment to Witz Inc The resulting final safety manual shall be reviewed and checked to un achieve precise and accurate instructions for the user of ParOS e uum m x e LV Guido Neumann LA Sylvia Waldhausen h 4 Technical Certifier Expert Functional Safety 2 5 mu 1 T Japan Manufacturer used to execute the detailed development phase and documentation for PartitionOS Safety amp Security CCDS 3 JASPAR WG 053 74 1177473708 AUTOSAR MBD UU seu EE EE URL 7 A EET A L 2 JO apum 66 M A L
36. ection of data errors dd External monitoring facility de Control flow monitoring Diverse software design gt gt 2015 3 30 IoT 2015 WITZ Inc _ 32 weist E 9m 2015 WITZ Inc Safety case wet _ 3 EN Safety Argument Safety Evidence 10 5 3 2015 3 30 IoT 2015 WITZ Inc C G Safety Requirements amp Objectives 34
37. hip attribute data models FE XB B244 R R R R I 6 Message sequence charts C244 R R R R A Decision truth tables ce1 R R BR G lt s sqm css s sm a s 2015 3 30 IoT 2015 WITZ Ine r r r _ ag 0 rur Bn Ei OE Q gt O LILZU A E LL L L Z7 Ja coke v JI 4 us Ez rw SA git mJ lt ef 2m LUI s a EC Ye 1 is ASDoQ 1 9929 Bh e 8 4 ERES Tr T LASMA http asdoq jp secretariat asdoq jPp ASDoQ e
38. v Verification anza P Validation 2015 3 30 IoT 2015 WITZ Inc r a _ 26 4 at SRS i Ts SM amp H amp R m as 27 2015 3 30 IoT 2015 WITZ Inc 37 lt RIS E _ ES ro ur p ISO26262 6 Table 2 Notations for software architectural design uis Semi formal notations 7 E Formal notatio IEC61 Table B 7 Semi formal methods LN Logic functi T 2 E eg x P zz m fe Finite state machines state transition diagrams m Time 5233 R F mm Entity relations
Download Pdf Manuals
Related Search