电气/电子/可编程电子安全相关系统的功能安全 第3-3部分：安全相关系统中的面向对象软件

[中文适用范围]： IEC TR 61508-3-3:2025 提出了一些在设计面向对象软件时应考虑的主题，以及应采用的方法和技术，以确保其适用于功能安全应用的适当质量。目前，面向对象语言被视为“前沿技术”。然而，IEC 61508-3 中的一些条款似乎排除了这些语言的使用。不过，在某些表格中（例如 IEC 61508-3:2010 表 B.1）也增加了备注，说明在某些情况下其使用可能是合理的。这些例外情况允许使用动态对象，并指出了主要关注点，如内存分配和可预测的时序问题，从而指导用户安全地使用面向对象语言。本文件旨在通过提出方法和技巧，将系统性故障减少到相应系统能力要求的水平。本文件并非旨在替代 IEC 61508-3 的任何部分。IEC 61508-3 中已有的规则同样适用于本文件，并且在此不重复，包括以下方面： • 软件生命周期， • 评估人员的参与， • 模块化， • 信息隐藏原则， • 证明和常规测试， • 文档的基本内容， • 低耦合和高内聚， • 人员的职责与培训， • 如 IEC 61508-4 和 IEC 61508-7 所描述的操作经验。 本技术报告是对 IEC 61508 标准系列的补充，应与 IEC 61508-3 联合阅读，并提出一种方法，以证明在安全相关应用中使用面向对象软件的合理性。 [外文原描述]： IEC TR 61508-3-3:2025 makes a proposal as to which topics to consider and which methods and techniques to use when designing object-oriented software to ensure suitable quality for use in functional safety applications. Object-oriented languages are perceived as "state-of-the-art" nowadays. Such languages seem to be excluded from use by several statements in IEC 61508-3. However there are additions in some tables such as in IEC 61508-3:2010, Table B.1, where notes are added under which their use might be justified. Such exceptions that would allow, for example, dynamic objects, name the main concerns such as memory allocation and predictable timing issues and guide the user to safe use of object-oriented languages. These considerations are taken up in this document to specify methods and techniques that allow the reduction of systematic faults to the levels required by the respective systematic capabilities. This document is not intended to replace any part of IEC 61508-3. Rules that exist in IEC 61508‑3 are valid here as well and are not repeated, including rules that concern: • the software life cycle, • involvement of the assessor, • modularization, • principle of information hiding, • proving and conventional testing, • basic aspects of documentation, • low coupling and high cohesion, • responsibilities and training of people, • operational experience as described in IEC 61508-4 and IEC 61508-7 This TR is a supplement to the IEC 61508 standard series. It has to be read in conjunction with IEC 61508-3 and proposes a way how the use of object-oriented software in safety relevant applications can be justified.