ISO 26262 《道路车辆—功能安全》就如何预防由汽车电子电气系统产生故障导致的意外风险提供了指导 意见。但是,即使电子电气系统没出故障,因技术或系统定义缺陷也会造成安全隐患。 目前为止,关于SOTIF 的指导文件并不多。Automated Driving - Challenges in the Interplay between Functional Safety and Safety of the Intended Functionality Mirko Conrad Samoconsult GmbH ABSTRACT ISO 26262 "Road vehicles — Functional safety" provides guidance on how to avoid unreasonable risk due to hazards caused by malfunctioning behavior of automotive E/E systems. However, hazards can also been caused by these systems in the absence of any faults, i.e., resulting from technological shortcomings or shortcomings in their system definitions. Developers of ADAS are increasingly caught between addressing functional safety and the latter topic area, dubbed SOTIF (safety of the intended functionality).