![\"\"](\"https:\/\/www.jamasoftware.com\/media\/2021\/04\/2021-04-15-av-come-together-right-now-over-safety_1024x512.jpg\")
<\/p>\n<\/p>\n
Editor\u2019s Note:\u00a0<\/strong>This posts on autonomous vehicle development was originally\u00a0published\u00a0here<\/a> by EE Times<\/a> and written by Junko Yoshida. While this post was published in 2020, the content is still relevant to AV development in 2021.<\/p>\n How many safety standards does it take to screw in the lightbulb in a highly automated vehicle? A few years ago, automotive market novices would have said, \u201cNone.\u201d These days, the number seems to keep increasing as the industry finally comes to grips with the technical challenges of producing demonstrably safe autonomous vehicles.<\/p>\n Driven by the winner-takes-all Internet platform business model, autonomous vehicle (AV) zealots were racing to develop the industry\u2019s first robocar. Their goal was simple. Dominate the AV platform so completely that everyone else in the industry would be forced to follow and license.<\/p>\n Close to ten industry initiatives are in the works, seeking to address different aspects of AV safety. Prominent among them are the existing ISO 26262 and SOTIF, and the newly-published UL 4600.<\/p>\n So, does this mean the automotive industry is finally coming together? Perhaps.<\/p>\n Collaboration is a new and alien concept for participants in the auto industry. When it comes to safety standards, of course, \u201ceveryone has different opinions,\u201d said Stefan Poledna, CTO of TTTech Auto, in a recent interview with EE Times, but \u201cthis is the general direction.\u201d<\/p>\n What changed?<\/p>\n The industry achieved Level 2 \/ Level 2+ autonomy so quickly that it vastly underestimated how much more difficult it would be to take the next leap to Level 3-5 technology. It has finally dawned on the AV industry that developing a safety-related computing system for Level 3-5 autonomy is \u201ca grand challenge that shouldn\u2019t be addressed by a single player, but in an ecosystem,\u201d Poledna noted.<\/p>\n When an L3, L4 or L5 vehicle goes the wrong way on a one-way street, it\u2019s no longer the driver who\u2019s responsible \u2014 it\u2019s the carmaker. Poledna, trumpeting the obvious, said, \u201cThat\u2019s a big deal.\u201d<\/p>\n Remember SaFAD (Safety First for Automated Driving)? It turns out the white paper published last July by 11 industry leaders (Aptiv, Audi, Baidu, BMW, Continental, Daimler, Fiat Chrysler Automobiles, HERE, Infineon, Intel and Volkswagen) is on its way to becoming a new ISO standard.<\/p>\n The white paper outlined \u201ca comprehensive approach to safety relevant topics of automated driving.\u201d The objective of the publication, the authors said, \u201cis to systematically break down safety principles into safety by design capabilities, elements and architectures and then to summarize the verification & validation methods in order to demonstrate the positive risk balance.\u201d<\/p>\n The ISO accepted that premise, allowing the industry to develop this into an ISO standard.<\/p>\n But what does it take to turn a \u201ccomprehensive approach\u201d into a workable ISO standard? We asked SaFAD member Intel.<\/p>\n Jack Weast, Intel senior principal engineer and vice president of standards at Mobileye, explained, \u201cFirst, we take the original SaFAD paper, clean it up, get rid of any color commentaries and reformat the technical meat of the document into the ISO standard.\u201d<\/p>\n Looking for a faster turnaround, Simon F\u00fcrst, principal expert autonomous driving technologies at BMW Group, who heads the committee, announced in a webcast called \u201cThe Autonomous<\/a>,\u201d that his group is shooting for mid-2020 to publish its ISO Draft Technology Report (DTR) 4804.<\/p>\n Weast described the DTR as the first step for ISO standardization.<\/p>\n Several auto industry sources told us the new ISO standard might be a step in the right direction, but the caveat is that it takes years before it becomes the final standard. Further, they said that they find it too generic and too high-level to help automotive OEMs in the short term.<\/p>\n Intel\u2019s Weast acknowledged the scope of the [ISO] document is \u201cpretty broad.\u201d But Weast defended it as \u201ca big umbrella\u201d covering discussions of \u201cHow would you define, derive, develop and test an automated driving system end to end.\u201d<\/p>\n Noting that the document offers \u201ca useful structure,\u201d Weast said, \u201cWe are obviously supportive of the safety by design principles,\u201d and the document provides \u201ca very well-thought-out way of doing things.\u201d Weast added, \u201cThis is why it\u2019s great to have an ISO document, which explains, \u2018hey, here\u2019s a good methodology in doing so.\u2019\u201d<\/p>\n TTTech Auto\u2019s CTO Poledna told\u00a0EE Times<\/em>\u00a0that TTTechAuto is convening many players in the automotive ecosystem at its own event to \u201cbrainstorm and discuss\u201d development of \u00a0\u201ca proving ground\u201d for car OEMs, Tier Ones and chip vendors to test out the safety of their AV systems. \u201cThey need to have certain exchanges amongst themselves,\u201d he said, at a time when everyone is struggling to figure out what it takes to bring L3 and L4 cars\u00a0that are safe<\/em>\u00a0to the market.<\/p>\n Poledna said that The Autonomous is fully aware of the many approaches \u2014 including different computing architecture, software algorithms and sensor fusions \u2014 pursued by different companies to ensure safety.<\/p>\n That\u2019s part of the reason for launching The Autonomous. TTTech Auto contends that players in the automotive industry need solutions much more specific, more concrete and quicker on the trigger. The aim of The Autonomous is to go one or two levels downs from the upcoming ISO DTR 4804 standard, to conceive \u201ca reference design implementation\u201d the AV industry can use.<\/p>\n The goal isn\u2019t about picking the winning black box, though.<\/p>\n Instead of building AVs around black boxes, carmakers would like to be able to mix and match different modules from different suppliers \u2014 safety modules, \u2018checker\u2019 modules (as in a \u2018doer-checker\u2019 model), calculation modules, etc. Assume one OEM opts for a safety module from Supplier A, which bears no resemblance, posing critical compatibility issues, to a safety module from Supplier B? Poledna argued that the AV industry must have \u201ca common understanding of what the safety architecture would look like.\u201d The industry should have a common approach and common understanding on \u201cinterfaces\u201d and \u201cdata structures,\u201d he explained.<\/p>\n On one hand, the ISO standard deemed too generic. On the other hand, too many players in the AV industry are already implementing different safety solutions on their own. How does The Autonomous plan to succeed as a \u201cmiddle ground\u201d solution?<\/p>\n Poledna said, \u201cIf we agree on \u2018doer-and-checker\u2019 as a generally acceptable safety approach, I\u2019d consider it as a huge achievement.\u201d Further, he noted that he\u2019d like to see the industry come to a collegial understanding on data structure, interfaces, and a definition of free space. \u00a0The Autonomous is holding a series of workshops focused on such issues as computing architecture, AI, security and regulation. While encouraging participants to share best practices, the goal for The Autonomous group is to foster amity among key automotive players and publish documents and technical papers reflecting state-of-the-art solutions in the industry.<\/p>\n <\/p>\n If The Autonomous is clicking one or two levels down from the ISO standard, Weast said that IEEE P2846, a group that Weast chairs, is boring down farther into the details, with specific focus on \u201ca very narrow area of decision-making capability.\u201d<\/p>\n The benefit of being narrowly-focused is that \u201cwe can go much deeper,\u201d he explained. In examining the decision-making process, \u201cwe also look at \u2018what kinds of assumptions we\u2019d make about other road users,\u201d he said. Depending on the city where an AV is driving or on a situation (an intersection with an occluded view, for example), knowledge of the assumptions that apply in those specific cases is essential to creating a safety model for a decision-making block.<\/p>\n While the IEEE P2846 is focused on that decision-making block, AV safety standards in the end are likely to require close to a dozen different technical blocks for the industry to define and implement safety, Weast speculated. \u201cWe will need, for example, a safe operation block,\u201d which could be addressed by ISO 26262 and SOTIF standards, for example. Others include a behavior and traffic block, \u201cwhich maps well with what IEEE P2846 offers,\u201d and things like a data recording block.<\/p>\n It is clear that \u201cstandards and interoperability are essential\u201d to enable an ecosystem on which an entirely new market like AV can be built, Weast explained. However, he acknowledged that setting industry standards is always a balancing act. You need to create a robust market, but companies must feel free to differentiate.<\/p>\n Asked on what specific technologies the AV industry must come to agree, Weast said, it\u2019s something \u2014 from different suppliers when made commonly available \u2014 that will benefit everyone and lift all boats equally.<\/p>\n Take, for example, IEEE P2846.<\/p>\n If AV companies can\u2019t agree on what safety means (including a safe distance between cars, for example), they won\u2019t be able to make convincing arguments to government regulators for the safety of autonomous vehicles, he explained. The same goes for operational design domains (ODD). If a common template isn\u2019t applied to define ODD, the industry can\u2019t explain what exactly a certain vehicle is capable of doing where, in what conditions.<\/p>\n Despite an epidemic that prevents many standards organization members, including IEEE P2846 members, from traveling, Weast said the group still wants to complete its draft by the end of this year or by early 2021.<\/p>\n To expedite the process, the group has broken the work into four subgroups. One is identifying safety-related scenarios in which there are assumptions about other road users. Another is examining the attributes of safety models used within decision making. The third group is aligning definitions and taxonomy with those used by other standards as the best possible. The fourth group is documenting how the standard fits or complements other standards, \u201cso that we can resolve some confusion and questions\u201d about IEEE P2846, explained Weast.<\/p>\n A bit of the good news on IEEE P2846 is the election, added Weast. While Weast is the chair, the group elected a person from Waymo to be the vice chair and an Uber representative as secretary. For Waymo, this is a first; until now the company has opted to go it alone.\u00a0 \u201cWe now have a good representation from the chip industry, companies in the mobility as a service business, to car OEMs, Tier Ones and robotics companies,\u201d said Weast.<\/p>\n Its 20 members include: Aptiv, ARM, Baidu, Denso, Exponent, Fiat Chrysler (FCA), Google, Huawei, Horizon Robotics, Infineon, Intel, Kontrol, National Taiwan University, Nvidia, NXP, Qualcomm, Uber ATG, Valeo and Volkswagen.<\/p>\n Safety case Instead of prescribing how to do safety by following certain steps, UL 4600 offers a guide to \u201cbuild the safety case\u201d for an AV design, according to Phil Koopman, CTO of Edge Case Research, one of the authors of the standard. Acknowledging that no single standard can solve the world\u2019s autonomous product problem, the authors of UL 4600 have fixed a starting point by asking autonomous product designers to make a safety argument.<\/p>\n Koopman stressed that Underwriters Laboratories created a diverse body of international stakeholders on its Standards Technical Panel (STP) to develop the document. The STP consists of 32 members with voting rights, including representatives of government agencies, academia, autonomous vehicle developers, technology suppliers, testing & standards organizations and insurance companies. Its STP members include: Uber, Nissan, Argo AI, Aurora Innovation, Locomotion, Zenuity, Intel, Infineon, Bosch, Renesas, Ansys, Liberty Mutural, AXA, US Department of Transportation, and others.<\/p>\n
\n![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/road-safety.jpg?w=300&resize=300%2C217\")
Fast forward to 2020. The go-it-alone, my-way-or-the-highway approach is driving on fumes. In contrast to a few years ago, leading automotive OEMs, Tier Ones and tech suppliers including chip vendors are more engaged in forming industry-wide coalitions to develop AV standards that have safety considerations at their core.<\/p>\nNew ISO standard on horizon<\/strong><\/h4>\n
![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/Simon-Fuerst-2.jpg?w=150&h=150&crop=1&resize=150%2C150\")
![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/Stefan-Poledna_CTO_TTTech-Auto.jpg?w=150&h=150&crop=1&resize=150%2C150\")
\u2018The Autonomous\u2019: Going one or two levels down<\/strong><\/h4>\n
\n<\/strong>TTTech Auto, which specializes in safe software and hardware systems for advanced vehicles, launched the initiative called \u201cThe Autonomous<\/a>\u201d (the webcast was named after the initiative).<\/p>\n![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/The-Autonomous-1.jpg?w=640&resize=640%2C361\")
![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/The-Autonomous-2.jpg?w=640&resize=640%2C364\")
\n![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/content-images-edn-jack-weast-150-1495223461.png?w=150&resize=150%2C151\")
Narrowly focused<\/strong><\/h4>\n
\n<\/strong>Separately, earlier this month, Underwriters Laboratories has completed its first standard for Autonomous Vehicles.\u00a0Called UL 4600<\/a>, it is published and now available at\u00a0ULstandards.com.<\/a><\/p>\n![\"\"](\"https:\/\/www.eetimes.com\/wp-content\/uploads\/images-eetimes-2016-09-1330494-koopman-160.png?w=150&h=150&crop=1&resize=150%2C150\")
\n\nWe’ve compiled a list of helpful resources for requirements management<\/a> in automotive development, click the button to learn more!<\/p>\n