Hazard Analysis of Action Loops for Automated Vehicle Remote Operation

Author(s):  
Amudha V. Kamaraj ◽  
Joshua E. Domeyer ◽  
John D. Lee

One way to compensate for the limitations of automated vehicles is to use a remote operator as a fallback controller. Indeed, this has been proposed for fleet management and intermittent vehicle control. However, existing remote operation applications have demonstrated control challenges, such as latency and bandwidth, that inhibit the effectiveness of human operators. Additionally, human factors challenges arising due to the roles of multiple remote operators managing multiple vehicles further complicates these interventions. This paper uses the Systems Theoretic Process Analysis hazard analysis technique to identify system-level issues related to the remote operation of automated vehicles. Human factors challenges are identified through the lens of two control loops that link remote drivers, dispatchers, and vehicle automation. These control loops reveal familiar challenges, such as situation awareness and mental model mismatches, as well as novel challenges, such as poorly synchronized and misaligned control.

Dependability ◽  
2021 ◽  
Vol 21 (2) ◽  
pp. 31-37
Author(s):  
А. V. Ozerov ◽  
А. М. Olshansky

The Aim of the paper is to consider approaches to the analysis of a safety model of complex multi-loop transportation systems comprising not completely supervised subsystems. Method. For the description of a safety model, the paper uses systems theoretic process analysis (STPA) methods and the principles specified in ISO/PAS 21448:2019 (SOTIF). Result. The paper shows drawbacks of the FTA and FMEA local risk analysis methods and demonstrates a demand for some universal approach based on the combination of STPA and control theory. It gives an overview of the major stages of such analysis for the safety model of complex transportation systems exemplified by the Moscow Central Circle, which provide a feedback for safety evaluation of a transport control system under development. The paper analyzes the feasibility of using a virtual model for control purposes in the form of a so-called “supervised artificial neural network”.Conclusion. Today, railways are actively testing autonomous systems (with no driver onboard) that apply as their subsystems automatic perception modules using machine learning. The introduction of the latter into the control loop complicates the task of hazard analysis and safety evaluation of such systems using conventional FTA and FMEA methods. The construction of a safety model of such complex multi-loop transportation systems comprising not completely supervised subsystems that use machine learning methods with not completely predictable behavior requires the application of a systems approach to the analysis of unsafe scenarios along with the compilation of a scenario library and the formalization of a hazard model’s description, pertaining to the boundaries of various control loops as well, in order to reduce the regions of unknown unsafe scenarios for autonomous transportation systems under development.


2021 ◽  
Vol 11 (3) ◽  
pp. 1145
Author(s):  
Krzysztof Wróbel ◽  
Mateusz Gil ◽  
Chong-Ju Chae

With numerous efforts undertaken by both industry and academia to develop and implement autonomous merchant vessels, their safety remains an utmost priority. One of the modes of their operation which is expected to be used is a remote control. Therein, some, if not all, decisions will be made remotely by human operators and executed locally by a vessel control system. This arrangement incorporates a possibility of a human factor occurrence. To this end, a variety of factors are known in the literature along with a complex network of mutual relationships between them. In order to study their potential influence on the safety of remotely-controlled merchant vessels, an expert study has been conducted using the Human Factors Analysis and Classification System-Maritime Accidents (HFACS–MA) framework. The results indicate that the most relevant for the safety of this prospective system is to ensure that known problems are properly and timely rectified and that remote operators maintain their psycho- and physiological conditions. The experts elicited have also assigned higher significance to the causal factors of active failures than latent failures, thus indicating a general belief that operators’ actions represent the final and the most important barrier against accident occurrence.


Electronics ◽  
2021 ◽  
Vol 10 (10) ◽  
pp. 1220
Author(s):  
Chee Wei Lee ◽  
Stuart Madnick

Urban mobility is in the midst of a revolution, driven by the convergence of technologies such as artificial intelligence, on-demand ride services, and Internet-connected and self-driving vehicles. Technological advancements often lead to new hazards. Coupled with the increased levels of automation and connectivity in the new generation of autonomous vehicles, cybersecurity is emerging as a key threat affecting these vehicles. Traditional hazard analysis methods treat safety and security in isolation and are limited in their ability to account for interactions among organizational, sociotechnical, human, and technical components. In response to these challenges, the cybersafety method, based on System Theoretic Process Analysis (STPA and STPA-Sec), was developed to meet the growing need to holistically analyze complex sociotechnical systems. We applied cybersafety to coanalyze safety and security hazards, as well as identify mitigation requirements. The results were compared with another promising method known as Combined Harm Analysis of Safety and Security for Information Systems (CHASSIS). Both methods were applied to the Mobility-as-a-Service (MaaS) and Internet of Vehicles (IoV) use cases, focusing on over-the-air software updates feature. Overall, cybersafety identified additional hazards and more effective requirements compared to CHASSIS. In particular, cybersafety demonstrated the ability to identify hazards due to unsafe/unsecure interactions among sociotechnical components. This research also suggested using CHASSIS methods for information lifecycle analysis to complement and generate additional considerations for cybersafety. Finally, results from both methods were backtested against a past cyber hack on a vehicular system, and we found that recommendations from cybersafety were likely to mitigate the risks of the incident.


2020 ◽  
Author(s):  
Mizanur Rahman ◽  
Ankur Sarker ◽  
Haiying Shen ◽  
Mashrur Chowdhury ◽  
Kakan Dey ◽  
...  

Information-aware connected and automated vehicles (CAVs) have drawn great attention in recent years due to their potentially significant positive impacts on roadway safety and operational efficiency. In this paper, we conduct an in-depth review of three basic and key interrelated aspects of a CAV: sensing and communication technologies; human factors; and information-aware controller design. First, the different vehicular sensing and communication technologies and their protocol stacks, to provide reliable information to the information-aware CAV controller, are thoroughly discussed. Diverse human factors, such as user comfort, preferences, and reliability, to design the CAV systems for mass adaptation are also discussed. Then, the different layers of a CAV controller (route planning, driving mode execution, and driving model selection) considering human factors and information through connectivity are reviewed. In addition, the critical challenges for the sensing and communication technologies, human factors, and information-aware controller are identified to support the design of a safe and efficient CAV system while considering user acceptance and comfort. Finally, the promising future research directions of these three aspects are discussed to overcome existing challenges to realize a safe and operationally efficient CAV.


2019 ◽  
Vol 48 (3) ◽  
pp. 269-275 ◽  
Author(s):  
Árpád Török ◽  
Zsolt Szalay ◽  
Gábor Uti ◽  
Bence Verebélyi

The main goal of this article is to determine a comprehensive and well applicable model architecture, which is adequate to estimate the system level advantages with regard to automated transportation and which is appropriate to determine possible costs and losses with regard to the approach of such transport modes. In the study the Budapest Transportation Model is applied. Taking autonomous vehicle penetration into account as an external variable, in the analysis a constant growth is assumed in the penetration of automated vehicles. This article has taken the most relevant factors of transportation network into account with regard to automated cars. It is also important to mention that the paper presents the most important modelling phases, where automated cars can be taken into account during the macroscopic modelling process. In the first step of the process during the network definition phase it is possible to consider the effect of automated vehicles on the transport system (e.g. separated routes). The next phase where the effect of automated vehicles should be taken into consideration is the mode choice step (e.g. different demand segments). And finally traffic assignment step, where the effect of automated vehicles can be represented. The easiest way for this is the modification of passenger car units through the parameter of assigned traffic per capacity ratio.


2020 ◽  
Vol 10 (21) ◽  
pp. 7400
Author(s):  
Lei Chen ◽  
Jian Jiao ◽  
Tingdi Zhao

ISO26262: 2018 is an international functional safety standard for electrical and/or electronic (E/E) systems within road vehicles. It provides appropriate safety requirements for road vehicles to avoid unreasonable residual risk according to automotive safety integrity levels (ASILs) derived from hazard analysis and risk assessment (HARA) required in the ISO26262 concept phase. Systems theoretic process analysis (STPA) seems to be designed specifically to deal with hazard analysis of modern complex systems, but it does not include risk evaluation required by most safety related international standards. So we integrated STPA into Failure Mode and Effect Analysis (FMEA) template to form a new method called system theoretic process analysis based on an FMEA template, STPAFT for shot, which could not only meet all the requirements of the concept phase in ISO26262, but also make full use of the advantages of the two methods. Through the focus of FMEA on low-level components, STPAFT can obtain more detailed causal factors (CFs), which is very helpful for derivation of safety goals (SGs) and the functional safety requirements (FSRs) in the concept phase of ISO26262. The application of STPAFT is described by the case study of fuel level estimation and display system (FLEDS) to show how the concept phase of ISO26262 could be supported by STPAFT.


2019 ◽  
Vol 26 (1) ◽  
pp. e100081 ◽  
Author(s):  
Mark Sujan ◽  
Dominic Furniss ◽  
Kath Grundy ◽  
Howard Grundy ◽  
David Nelson ◽  
...  

The use of artificial intelligence (AI) in patient care can offer significant benefits. However, there is a lack of independent evaluation considering AI in use. The paper argues that consideration should be given to how AI will be incorporated into clinical processes and services. Human factors challenges that are likely to arise at this level include cognitive aspects (automation bias and human performance), handover and communication between clinicians and AI systems, situation awareness and the impact on the interaction with patients. Human factors research should accompany the development of AI from the outset.


Sign in / Sign up

Export Citation Format

Share Document