功能安全——Malfunction

书接上文，首先解释一下什么是Malfunction

Malfunction就是指功能故障，但是这些故障怎么定义呢？

其实在SAE J2980中有相关的描述来帮助我们理解和使用。

这里我们可以用HAZOP分析法，基于功能列举一些关键词。

#N	Guidewords	Description
1	No	This is the complete negation of the design intention. No part of the intention is achieved nothing else hanppen.
2	More	This is quantitative increase.
3	Less	This is quantitative decrease.
4	As well as	All the design intention is achieved together with addtions.
5	Part of	Only some of design intention is achieved.
6	Reverse	The logical oppsite of the intention is achieved.
7	Other than	Complete substitution, where no part of the original intention is achieved but something quite different happens.
8	Early	Something happens eariler than expected relative to clock time.
9	Late	Something happens later than expected relative to clock time.
10	Before	Something happens before it is expected relating to order or sequence.
11	After	Something happens after it is expected,relating to order or sequence.

因为这些关键词在分析中稍显晦涩，所以需要将这些关键词结合实际的功能，例如加速、制动、换挡、转向等等来进行分析，得到相关功能的失效，也就是整车层面的危害（Hazard），这个过程等同于自己找自己的问题，避免分析的遗漏。

与功能结合之后的示例：

Function vs Guidewords

Loss of function

More than intended fucntion

Less than intended function

Wrong direction

Function provided when not intended

Failure of function to update as intended

下面举两个实际的案例：助力转向功能和刹车控制功能

Function vs Guidewords	Loss of function	More than intended fucntion	Less than intended function	Wrong direction	Function provided when not intended	Failure of function to update as intended
助力转向功能	助力转向功能丢失	助力转向力矩过大	助力转向力矩过小	助力转向力矩方向相反	未提供助力转向力矩	助力转向卡滞
刹车控制功能	刹车功能丢失	刹车力过大	刹车力过小	-	未提供刹车力	刹车功能卡滞

这只是一个例子，具体的情况失效有很多，譬如助力转向功能不稳定，刹车功能震荡，刹车功能延时等等，这些都属于产品的malfunction，考虑的失效情况越多越好，多进行头脑风暴，使自己对产品功能失效考虑的更全面，更深入。

在这里给大家留一个作业啊，根据自己目前的产品，仔细思考一下各种失效，然后写出产品的Malfunction，最后判断一下这些Malfunction对车辆是否存在危害.

今天的分享到这里，后面继续对HARA的其他细节做拆解分析，谢谢。