Automotive Semiconductors and Functional Safety
Which of the following problems is addressed mainly by SOTIF (ISO 21448, Safety of the Intended Functionality) rather than ISO 26262 (functional safety)?
- AA component in the radar transmitter circuit degrades and fails after years of use under stresses such as temperature changes, so objects ahead can no longer be detected
- BBecause of an error in the brake control software, the braking force is miscalculated under specific conditions
- CA camera that has not failed cannot recognize a pedestrian ahead due to strong backlight, and automatic emergency braking does not activate
Show answer and explanation
Answer: C. A camera that has not failed cannot recognize a pedestrian ahead due to strong backlight, and automatic emergency braking does not activate
SOTIF addresses hazards that arise even when no component has failed, from sensor performance limitations, insufficient recognition algorithms, inadequate specifications, foreseeable misuse and the like. Failing to recognize a pedestrian in backlight is a problem caused not by a failure but by a functional limitation, so it falls under SOTIF. Failure due to component degradation is a random hardware failure and a software error is a systematic failure; both are handled by ISO 26262. In SOTIF, testing and simulation are used to reduce unknown hazardous scenarios.
Continue: 9 more Automotive Semiconductors and Functional Safety questions