道路车辆.功能安全.第9部分:面向汽车安全完整性水平（ASIL）和面向安全的分析

[中文适用范围]： 本文件旨在适用于包括一个或多个电气和/或电子（E/E）系统并安装在批量生产道路车辆（不包括轻便摩托车）中的安全相关系统。 本文件不涉及特种车辆中独特的 E/E 系统，例如为残疾驾驶员设计的 E/E 系统。 注：存在其他专用的特定应用安全标准，并且可以补充 ISO 26262 系列标准，反之亦然。 已发布用于生产的系统及其组件，或者在本文档发布日期之前已经在开发的系统及其组件，不属于本版本的范围。 本文件通过根据变更定制安全生命周期，解决了在本文件发布之前对现有系统及其发布用于生产的组件的变更。 本文件通过定制安全生命周期解决了未根据本文件开发的现有系统和根据本文件开发的系统的集成。 本文件解决了安全相关 E/E 系统的故障行为（包括这些系统的交互）可能造成的危险。 它不涉及与电击、火灾、烟雾、热、辐射、毒性、可燃性、反应性、腐蚀、能量释放和类似危险相关的危险，除非直接由安全相关的 E/E 系统的故障行为引起。 本文件描述了一个功能安全框架，以协助开发安全相关的 E/E 系统。 该框架旨在用于将功能安全活动集成到公司特定的开发框架中。 有些要求有明确的技术重点，以将功能安全实现到产品中；其他涉及开发过程，因此可以被视为过程要求，以证明组织在功能安全方面的能力。 本文件不涉及 E/E 系统的标称性能。 本文件规定了面向汽车安全完整性等级（ASIL）和安全性分析的要求，包括以下内容： ——与 ASIL 定制相关的需求分解； ——元素共存的标准； ——相关失效分析； - 安全分析。 附件 A 概述了本文件的目标、先决条件和工作成果。  [外文原描述]： This document is intended to be applied to safety-related systems that include one or more electrical and/or electronic (E/E) systems and that are installed in series production road vehicles, excluding mopeds. This document does not address unique E/E systems in special vehicles such as E/E systems designed for drivers with disabilities. NOTE Other dedicated application-specific safety standards exist and can complement the ISO 26262 series of standards or vice versa. Systems and their components released for production, or systems and their components already under development prior to the publication date of this document, are exempted from the scope of this edition. This document addresses alterations to existing systems and their components released for production prior to the publication of this document by tailoring the safety lifecycle depending on the alteration. This document addresses integration of existing systems not developed according to this document and systems developed according to this document by tailoring the safety lifecycle. This document addresses possible hazards caused by malfunctioning behaviour of safety-related E/E systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy and similar hazards, unless directly caused by malfunctioning behaviour of safety-related E/E systems. This document describes a framework for functional safety to assist the development of safety-related E/E systems. This framework is intended to be used to integrate functional safety activities into a company-specific development framework. Some requirements have a clear technical focus to implement functional safety into a product; others address the development process and can therefore be seen as process requirements in order to demonstrate the capability of an organization with respect to functional safety. This document does not address the nominal performance of E/E systems. This document specifies the requirements for Automotive Safety Integrity Level (ASIL)-oriented and safety-oriented analyses, including the following: — requirements decomposition with respect to ASIL tailoring; — criteria for coexistence of elements; — analysis of dependent failures; and — safety analyses. Annex A provides an overview on objectives, prerequisites and work products of this document.