EN50128 2011標(biāo)準(zhǔn)培訓(xùn)課件

EN501282011SeminarSummaryYaoJunFeb.27,2012EN501282011標(biāo)準(zhǔn)培訓(xùn)EN501282011Seminar北京英華經(jīng)綸交通運輸有限公司（勞氏北京）于2012年2月9日在北京舉辦了EN50128新版標(biāo)準(zhǔn)研討會，會議由ProfessorAliHessami講解（歐標(biāo)修訂工作組WG11主席，負(fù)責(zé)EN50128:2011的修訂)。AliHessami教授介紹了系統(tǒng)安全保障的基本概念，并從標(biāo)準(zhǔn)制定者的角度介紹了新版的EN50128，同時還談到了EN50126系列標(biāo)準(zhǔn)的整合和未來。下面的ppt文檔是基于本次研討會的總結(jié)，也加入了個人的理解，并把我的提問和回答也都列出。如果有不正確的或者遺漏的地方，請及時指出，謝謝！EN501282011標(biāo)準(zhǔn)培訓(xùn)MainDifferencesbetweenEN501282011andEN501282001MaindifferencesinNewEN50128arethefollowingcontents:OrganizationandrolePersonnelcompetenceSupporttoolsApplicationdataoralgorithmsDeploymentandmaintenanceEN501282011標(biāo)準(zhǔn)培訓(xùn)OrganizationandRoleOrganization,roleandindependencerequirements(section5.1)AddtheroleofRQM(requirementmanager),INT(Integritor)andTST(Tester)AddthedescriptionoftheserolesTheindependentrequirementsforrolesareclearlyexplained.Example:EN501282011標(biāo)準(zhǔn)培訓(xùn)PersoncompetencePersonnelcompetenciesareaddedinAnnexBofEN501282011.Anexampleisshown:EN501282011標(biāo)準(zhǔn)培訓(xùn)SupportTools(1/2)SupportToolsandLanguages(Section6.7)Provideevidencethatpotentialfailuresoftoolsdonotadverselyaffecttheintegratedtoolsetoutputinasafetyrelatedmanner.ClassificationThreeclassesoftoolssofarasreliabilityandsafetyimpactisconcernedasT1,T2andT3.EachclasswillplacedifferentrequirementsontherequiredassuranceEN501282011標(biāo)準(zhǔn)培訓(xùn)SupportTools(2/2)T1class(section3.1.42)generatesnooutputswhichcandirectlyorindirectlycontributetotheexecutablecode(includingdata)ofthesoftwareExample：atexteditor,configurationcontroltools.T2class(section3.1.43)supportsthetestorverificationofthedesignorexecutablecode,whereerrorsinthetoolcanfailtorevealdefectsbutcannotdirectlycreateerrorsintheexecutablesoftware.Example：atestcoveragemeasurementtoolandastaticanalysistoolT3class(section3.1.44)generatesoutputswhichcandirectlyorindirectlycontributetotheexecutablecode(includingdata)ofthesafetyrelatedsystemExample：asourcecodecompilerAsimplewaytounderstandthethreetypesoftools:T1---SIL0T2---SIL1&2T3---SIL3&4EN501282011標(biāo)準(zhǔn)培訓(xùn)ApplicationDataoralgorithmsThispartisemphasizedinthenewEN50128.(section8)“TherequirementsforthedevelopmentofapplicationalgorithmsarethesameasthedevelopmentofgenericsoftwareasdescribedinClauses1-7and9.“emphasizetheimportanceofthispart.ExampleEN501282011標(biāo)準(zhǔn)培訓(xùn)SoftwareDeploymentSoftwaredeployment(section9.1):

Toensurethatthesoftwareperformsasrequired,preservingtherequiredsoftwaresafetyintegritylevelanddependabilitywhenitisdeployedinthefinalenvironmentofapplication.KeyrequiremntsFollowISO90003asaminimumDefineandmaintainbaseline(Example:usingCC)ReleaseNotesErrorDetectioninTransportDeploymentManualEN501282011標(biāo)準(zhǔn)培訓(xùn)OtherChanges(1/6)SIL0isnotviewedasnon-safety,whichhassafetyimpactbelowSIL1.SomerequirementsforSIL0stillneedstobeachieved.Example:EN501282011標(biāo)準(zhǔn)培訓(xùn)OtherChanges(2/6)PredevelopedsoftwareandCOTSsoftwareareuniformlynamedasPre-exisitngsoftware(7.3.4.7).Example:EN501282011標(biāo)準(zhǔn)培訓(xùn)OtherChanges(3/6)OverallSoftwareTestisaddedtotestthesoftwarerequirementsObjective:ToanalyseandtesttheintegratedsoftwareandhardwaretoensurecompliancewiththeSoftwareRequirementsSpecification.Example:EN501282011標(biāo)準(zhǔn)培訓(xùn)OtherChanges(4/6)Softwaremoduleismodifiedassoftwarecomponent.ExampleEN501282011標(biāo)準(zhǔn)培訓(xùn)OtherChanges(5/6)SWSILischangedasSILExampleEN501282011標(biāo)準(zhǔn)培訓(xùn)OtherChanges(6/6)AddsoftwareinterfacespecificationinthearchitecturedesignstageExample:EN501282011標(biāo)準(zhǔn)培訓(xùn)NewTrendsinENstandardsEN50126-Xwillbepublishedin2014(estimated)EN50126-1RAMSinRailways(EN50126:1999)EN50126-2ToolsandMethods(New)EN50126-3SMSforRailways(Manypartiesdonotagree)EN50126-4FunctionalSafetyofElectronicSystems(EN50129:2003)EN50126-5SoftwareforRailwayApplications(EN50128:2011)EN501282011標(biāo)準(zhǔn)培訓(xùn)Q&A(1/3)1.1.Section7.3.4.7b)Forallsoftwaresafetyintegritylevelsthepre-existingsoftwareshallbeincludedinthevalidationprocessofthewholesoftware.Question:Whatistherealmeaningofthissentence?Actuallyallofthepre-existing(COTS)softwareisincludedinthesystemvalidation.Doweneedtocarefullyvalidatethepre-existingsoftwareespeciallyandindependentlybeforevalidatingthewholesoftwareorsystem?

Answer(AliHessami):Yes.Weshalldomorethanbeforeaboutthepre-existingsoftware.Itisrecommendedthatallofthefunctionsofpre-existingsoftwareshallbechecked.Ifthepre-existingsoftwarehaspassedthecertification,onlyreviewingdocumentsisenough.Ifthepre-exitingsoftwaredoesnothavethecertificate,allofthefunctionsneedstobecarefullytestedbeforeusing.EN501282011標(biāo)準(zhǔn)培訓(xùn)Q&A(2/3)2.Diverseprogramming(D16)Diverseprogrammingisadifficultmethodforimplementation.Ifwecannotassessthelevelofdiversity,howcouldweclaimthatourownsoftwarediversitymethodiseffectiveornot?Forinstance,wecanimplementtwodifferentmethodsinonecomputerortwodifferentmethodsintwocomputerstoachievesoftwarediversity.Couldyougiveusasuggestionwhichisbetter?Answer(AliHessami):Itdependsontheproblemyouwanttosolve.IftwodifferentmethodsinoneCPUcanachievethegoal(Hardwareunrelatedproblem),itisOK.Orelse,twodifferentmethodsintwoCPUsarenecessary(hardwarerelatedproblem).EN501282011標(biāo)準(zhǔn)培訓(xùn)Q&A(3/3)3.SILTraceabilityIndevelopingsafetycriticalsoftware,thesoftwarewithSIL4couldbetracedbySIL4andSIL0softwaremodule.Itisreasonable.Butinsomecases,thesoftwarewithSIL0