京都大学 / 0048 / 新制・課程博士 / 博士(情報学) / 甲第21918号 / 情博第701号 / 新制||情||120(附属図書館) / 京都大学大学院情報学研究科システム科学専攻 / (主査)准教授 西原 修, 教授 大塚 敏之, 教授 加納 学 / 学位規則第4条第1項該当 / Doctor of Informatics / Kyoto University / DFAM

With the introduction of electronic control units to automotive vehicles, system complexity has increased. With this change in complexity, new standards have been created to ensure safety at the system level for these vehicles. Furthermore, vehicles have become increasingly complex with the push for electrification of automotive vehicles, which has resulted in the creation of hybrid electric and battery electric vehicles. The goal of this thesis is to provide an example of a hazard and operability analysis as well as a hazard and risk analysis for a hybrid electric vehicle. Additionally, the safety standards developed do not align well with educational prototype vehicles because the standards are designed for corporations. The hybrid vehicle supervisory controller example within this thesis demonstrates how to define a system and then perform system-level analytical techniques to identify potential failures and associated requirements. Ultimately, through this analysis suggestions are made on how best to reduce system complexity and improve system safety of a student built prototype vehicle. / Master of Science / With the introduction of electronic control units to automotive vehicles, system complexity has increased. With this change in complexity, new standards have been created to ensure safety at the system level for these vehicles. Furthermore, vehicles have become increasingly complex with the push for electrification of automotive vehicles, which has resulted in the creation of hybrid electric and battery electric vehicles. There are different ways for corporations to demonstrate adherence to these standards, however it is more difficult for student design projects to follow the same standards. Through the application of hazard and operability analysis and hazard and risk analysis on the hybrid vehicle supervisory controller, an example is provided for future students to follow the guidelines established by the safety standards. The end result is to develop system requirements to improve the safety of the prototype vehicle with the added benefit of making design changes to reduce the complexity of the student project.

Model-based development is one of the most significant areas in recent research and development activities in the field of automotive industry. As the field of software engineering is evolving, model based development is gaining more and more importance in academia and industry. Therefore, it is desirable to have techniques that are able to identify anomalies in system models during the analysis and design phase instead of identifying them in development phase where it is difficult to detect them and a lot of time, effort and resources are required to fix them. Model checking is a formal verification technique that facilitates the identification of defects in system models during early stages of system development. There are a lot of tools in academia and industry that provide the automated support for model checking.  In this master thesis a vehicle control system of Scania the Fuel Level Display System is modeled in two different model checking tools; Simulink Design Verifier and UPPAAL. The requirements that are to be satisfied by the system model are verified by both tools. After verifying the requirements against the system model and checking the model against general design errors, it is established that the model checking can be effectively used for detecting the design errors in early development phases and can help developing better systems. Both the tools are analyzed depending upon the features supported. Moreover, relevance of model checking is studied with respect to ISO 26262 standard.