系统验证计划 System Vlidtion Pln_V1

Validation PlanDocument Control InformationLocation: The version of this document is maintained in folder Revision HistoryTable 1 : Version HistoryVersionDate of ReleaseDescription(Change and Reasons for Change)Prepared byReviewed byApproved byTable of ContentsContentsDocument Control Information2Table of Contents3List of Figures5List of Tables61Introduction71.1Purpose71.2Scope71.3Definitions, Acronyms, and Abbreviations82Inputs and Output102.1Prerequisition102.2Further supporting Information102.3Outputs103Safety Strategy and Processes113.1Overview113.2Validation Test objectives113.3Safety Validation (Item development life cycle)113.4Validation Processes123.5Safety Organization and R&R133.6Regression strategy154Item Description164.1Item overview164.1.1System Component164.2Configuration174.3Calibration175Project Development and Validation schedule185.1Validation Test Plan185.1.1HARA Controllability Validation185.1.2Safety Goal Validation195.1.3Long-term test195.2Test Methods information205.3Validation method for safety goal216Test Case and Acceptance Criteria227References23List of FiguresFigure 1 : List of Tables1 Introduction1.1 PurposeValidation Plan is planning document which plans validation performance for integrated item at Vehicle level. After HW, SW development, the hardware and software elements are integrated and tested to form an item that is then integrated into a vehicle. Once integrated at the vehicle level, safety validation is performed to provide evidence of functional safety with respect to the safety goals.Therefore the Validation Plan describes all validation activities which shall be carried out for this IWV project. It is fully compliant to the requirements of ISO 26262 Part4 paragraph 5.4.2, 6.4.6 and 9.4.2.The objective of Safety Validation is described in ISO 26262.The first objective is to provide evidence of compliance with the safety goals and that the functional safety concepts are appropriate for the functional safety of the item.The second objective is to provide evidence that the safety goals are correct, complete and fully achieved at the vehicle level.1.2 ScopeThis plan is useful for validation activities which should be performed at vehicle level by IWV Development Project.This document describes the following information for IWV validation:Ythe configuration of the item subjected to validationYthe calibration of the item subjected to validationYValidation proceduresYtest casesYdriving maneuversYacceptance criteriaYthe equipment and required environmental conditions.1.3 Definitions, Acronyms, and AbbreviationsAll terms, acronyms and abbreviations which are required to correctly interpret this document are listed as follows.Table 2 : TermsTermDescriptionIntegrityThe name of tool which is used for requirements management andconfiguration management system in Hazard Analysis &Risk Assessment (HARA)HARA is to identify and to categorize the hazards that malfunctions inthe item can trigger and to formulate the safety goals related to the prevention or mitigation of the hazardous events, in order to avoid unreasonable risk.Table 3 : Acronyms & AbbreviationsAcronymDescriptionVCUVehicle control unitIWVIn-wheel VCUCANController Area NetworkISOInternational Standard OrganizationNANot ApplicableSASSteering angle sensorYRSYaw rate sensorAPSAccelerator position sensorBPSBrake position sensorBMSBattery management systemBCMBody control moduleESCElectronic stability controlSBSmart BoosterFLFront leftFRFront rightRLRear leftRRRear rightWSSWheel speed sensorADCAnalog digital converterSOCState of chargeTemp.TemperatureRegen.RegenerationtorqTorque2 Inputs and Output2.1 PrerequisitionThe following information shall be available.- Safety Plan- Item Definition- Hazard Analysis & Risk Assessment- Safety Goal- Functional Safety Concept- Validation plan (refined)2.2 Further supporting InformationThe following information may be considered- Project plan- Technical Safety Concept- Functional Concept (from external source)- Item Integration and Testing Plan- Safety Analysis Reports2.3 OutputsThe following is the deliverable from this phase- Validation Report3 Safety Strategy and Processes3.1 OverviewThe Validation Plan is a requirement of the Automotive Functional Safety Standard ISO 26262. Internal and external safety inspectors may use this System Validation Plan as the basis for assessing how and to what extent safety-related issues have been addressed and treated during development of a safety critical system in the automotive domain.3.2 Validation Test objectivesValidation plan must satisfy the following requirements:- The safety activities for the product development at the system level shall be planed including determination of appropriate methods and measures during design and integration (5.4.1)- The validation activities shall be planned (5.4.2)3.3 Safety Validation (Item development life cycle)Following figure shows that when it must be performed according to safety activity cycle for Safety Validation. Timing for performing according to safety activity cycle for Safety Validation is shown in figure 4-3.Figure 1 : Reference phase of Safety Validation3.4 Validation ProcessesThe safety goals of the item shall be validated at the vehicle level by evaluating the controllability, effectiveness of safety measures, external measures and other technologies.And the results of the validation shall be evaluated. Validation process is like below.Validation StartPrepareTest Vehicle, FIT tool, Data Acquisition Sys.Safety Goal Validation- Operating scenario- Intended use- Foreseeable misuse- Safety Measure- External Measure- Other Technology- Positive test of Function- Fault Injection Test- Simulation- Fleet Test- User test under real-life conditionResult EvaluationValidation ReportFigure 2 : Validation Process3.5 Regression strategyRegression test shall be required the quality and performance improvement in case of vehiclestructure, mounting position and vehicle communication load changes. Table 5 : Regression strategyTestConditionRemarkLong term TestProto phase one time-Fault Injection TestP1 phase one time-4 Item Description4.1 Item overview4.1.1 System ComponentFigure 3 : Sketch of 4.1.2 Safety Goal of The safety goals for validation test are listed in the following table. SPF shall be documented by reference of FMEA, FTA analysis report.IDSafety GoalHazard(s) mitigatedASILSafe State, FTTIIWV_SG01ExampleThe IWV shall not command unintended driving torqueIWV_H1.1 IWV_H1.2 IWV_H1.3DThe IWV shallnot command driving torque 100msTable 6 Safety goal of 4.2 ConfigurationValidation tester shall check configuration of IWV through scanning tool before testingTable 6 Configuration DataConfig-IDRegionPower trainBrakeSteering.4.3 CalibrationFor domestic market, IWV shall use calibration data for domestic market; IWV shall use calibration data for EU and general market because the structure of vehicle is different according to market. Therefore validation tester shall check calibration ID through scanning tool before testing.Table 7 Calibration DataCal IDRelatedConfigurationCalibration valueValue1Value2Value3Cal-DM-1Conf-DM-1TBDTBDTBD.5 Project Development and Validation schedule5.1 Validation Test PlanValidation test item and schedule shall be prepared base on above the document. Specific test case of validation in each stage shall be specified in 7. Test Case Clause.Test levelTest methods0+1+2+3+4+5+6+7+8+9+10+11+12+13+14+15+16Test engineerM0ALLM/CARP1P2Integration testValidation testVehicle validationHARA CExampleFTTISG ValidationLong termFigure 5 : Validation Test schedule5.1.1 HARA Controllability ValidationIn case of HARA performance, Severity, Exposure, Controllability shall be driven by stated critera and other brain-storming on criteria. At this time, high ASIL C,D to allocate for Controllability rating shall be needed to verify the rating validity through vehicle test. The validation test such as this Controllability shall be performed in the initial development, detail content and test case shall be specified in 7. Test case clause.Description of the performance period of Controllability validation test5.1.2 Safety Goal ValidationThe final goal of validation is to verify that safety goal shall be accurately implemented at the vehicle level. The evaluation period is (TBD).Test case shall be completed and sample shall be prepared until (TBD).5.1.3 Long-term testThe durability test of Safety Goal shall be verified through long-term test. The implementation period is (TBD).5.2 Test Methods informationTable 8 : Information related with Validation testValidation testTest methodTest environmentTest EquipmentDriving ManeuverEnvironmental conditionControllabilityconfirmation testFITProving GroundSummer/Winter Item integrated in vehicleDAQBreakout BoxStraightLane change CircleHi/Mid/Lowtemp Hi/Low muFTTIconfirmation te