针对风险R,可以描述为一个包含三个参数的函数 F:危害事件发生频率 f,可控性 C,以及所产生伤害或损坏的潜在严重度 S:
R = F(f,C,S)
其中 f 受两个因素影响:
一个因素是以何种频率、多长时间暴露在危害事件的运行场景中;简化成运行场景发生概率的度量 E
另外一个因素是相关项中故障的发生的概率,这在HARA中不考虑;
通过E、S、C确定的ASIL等级,确定了相关项最低限度的要求,以控制或减少随机硬件失效的概率,并且避免系统性故障;
同样的,在SOTIF的hazard 分析中,也有Occurrence和Exposure的概念;
The occurrence reflects the probability of encountering triggering conditions during the operating phase of the functionality.
发生率反映了功能在运行阶段遇到触发条件的概率;
There is an important difference between the occurrence of a triggering condition and the exposure to
a scenario in which the hazard can lead to harm. In general, triggering conditions are not independent
from scenarios. Therefore, in order to use the exposure to a scenario within an argument for risk
reduction, the statistical dependence between the probability of being in a scenario and the probability
of encountering a triggering condition is taken into account in the evaluation.
一般来说,触发条件不独立于场景,因此,在SOTIF中同样的,只适用场景暴露率Exposure;
(PS:个人理解:这里FUSA中occurrence指故障发生的概率,其影响是带来hazard,SOTIF中occurrence指的触发条件的发生概率,其影响也是带来hazard,因此,这两者应该是同一含义)