道路车辆 - 功能安全 - 第5部分:硬件级产品开发

[中文适用范围]： 本文件旨在适用于包括一个或多个电气和/或电子（E/E）系统并安装在批量生产道路车辆（不包括轻便摩托车）中的安全相关系统。 本文件不涉及特种车辆中独特的 E/E 系统，例如为残疾驾驶员设计的 E/E 系统。 注：存在其他专用的特定应用安全标准，并且可以补充 ISO 26262 系列标准，反之亦然。 已发布用于生产的系统及其组件，或者在本文档发布日期之前已经在开发的系统及其组件，不属于本版本的范围。 本文件通过根据变更定制安全生命周期，解决了在本文件发布之前对现有系统及其发布用于生产的组件的变更。 本文件通过定制安全生命周期解决了未根据本文件开发的现有系统和根据本文件开发的系统的集成。 本文件解决了安全相关 E/E 系统的故障行为（包括这些系统的交互）可能造成的危险。 它不涉及与电击、火灾、烟雾、热、辐射、毒性、可燃性、反应性、腐蚀、能量释放和类似危险相关的危险，除非直接由安全相关的 E/E 系统的故障行为引起。 本文件描述了一个功能安全框架，以协助开发安全相关的 E/E 系统。 该框架旨在用于将功能安全活动集成到公司特定的开发框架中。 有些要求有明确的技术重点，以将功能安全实现到产品中；其他涉及开发过程，因此可以被视为过程要求，以证明组织在功能安全方面的能力。 本文件不涉及 E/E 系统的标称性能。 本文件规定了汽车应用硬件级产品开发的要求，包括以下内容： ——硬件级产品开发的一般主题； ——硬件安全要求规范； ——硬件设计； ——硬件架构指标的评估； ——评估由于随机硬件故障导致的安全目标违规； - 硬件集成和验证。 本文件对硬件元件的要求适用于非可编程和可编程元件，例如 ASIC、FPGA 和 PLD。 更多指南可参见附件 A，该附件概述了本文件的目标、先决条件和工作成果。  [外文原描述]： This document is intended to be applied to safety-related systems that include one or more electrical and/or electronic (E/E) systems and that are installed in series production road vehicles, excluding mopeds. This document does not address unique E/E systems in special vehicles such as E/E systems designed for drivers with disabilities. NOTE Other dedicated application-specific safety standards exist and can complement the ISO 26262 series of standards or vice versa. Systems and their components released for production, or systems and their components already under development prior to the publication date of this document, are exempted from the scope of this edition. This document addresses alterations to existing systems and their components released for production prior to the publication of this document by tailoring the safety lifecycle depending on the alteration. This document addresses integration of existing systems not developed according to this document and systems developed according to this document by tailoring the safety lifecycle. This document addresses possible hazards caused by malfunctioning behaviour of safety-related E/E systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy and similar hazards, unless directly caused by malfunctioning behaviour of safety-related E/E systems. This document describes a framework for functional safety to assist the development of safety-related E/E systems. This framework is intended to be used to integrate functional safety activities into a company-specific development framework. Some requirements have a clear technical focus to implement functional safety into a product; others address the development process and can therefore be seen as process requirements in order to demonstrate the capability of an organization with respect to functional safety. This document does not address the nominal performance of E/E systems. This document specifies the requirements for product development at the hardware level for automotive applications, including the following: — general topics for the product development at the hardware level; — specification of hardware safety requirements; — hardware design; — evaluation of the hardware architectural metrics; — evaluation of safety goal violations due to random hardware failures; and — hardware integration and verification. The requirements of this document for hardware elements are applicable to both non-programmable and programmable elements, such as ASIC, FPGA and PLD. Further guidelines can be found in ISO 26262-10:2018 and ISO 26262-11:2018. Annex A provides an overview on objectives, prerequisites and work products of this document.