Safety of the Intended Functionality of Lane-Centering and Lane-Changing Maneuvers of a Generic Level 3 Highway Chauffeur System
archive: archived pipeline: cataloged verified
Get this paper ↗ (full text — opens at the source; we link to it, we don't host it)
Summary
This report addresses the safety analysis of automated driving systems (ADS) by applying the Safety of the Intended Functionality (SOTIF) framework, defined in ISO PAS 21448, to a generic SAE Level 3 highway chauffeur system. The research was motivated by the recognition that the existing functional safety standard, ISO 26262, only covers hazards arising from electrical and electronic failures, leaving gaps in addressing risks caused by correct system performance under limited situational awareness or foreseeable misuse. The study aims to illustrate how SOTIF complements ISO 26262, provide a practical example of SOTIF application for lane-centering and lane-changing maneuvers, and identify methods for validating SOTIF analysis results. The methodology involved an analytical review and scenario development process rather than simulation or physical testing. The authors developed a generalized Level 3 system model and integrated SOTIF steps with the concept phase of ISO 26262 to create a holistic safety analysis process. They utilized Systems-Theoretic Process Analysis (STPA) and incorporated variables from the Fatality Analysis Reporting System (FARS) to construct operational scenarios. This approach allowed for the identification of triggering events categorized into Type I (system performance limitations, such as sensor or algorithm constraints) and Type II (human-machine interface and driver interaction issues). The analysis focused on deriving hazards, safety goals, and mitigation measures for the specified maneuvers. The study identified four potential vehicle-level hazards and five associated safety goals. It cataloged 59 potential Type I triggering events related to sensor, algorithm, and system limitations, and 22 Type II triggering events related to foreseeable misuse. Additionally, the authors developed 126 example mitigation measures, including functional restrictions and design improvements. The integration of FARS data proved effective in identifying non-typical environmental conditions and erratic driver behaviors, such as tracking a swerving lead vehicle or detecting environmental effects like crosswinds that sensors might miss. The report also mapped SOTIF clauses to ISO 26262 processes, highlighting overlaps in hazard analysis and risk assessment while noting that SOTIF focuses on functional modifications rather than a formal safety concept document. The significance of this work lies in advancing automotive safety analysis practices by demonstrating how SOTIF and ISO 26262 can be integrated to assess ADS safety comprehensively. The findings provide system developers with insights into efficient testing and evaluation methods, particularly for addressing known-unsafe and unknown-unsafe scenarios. By establishing a framework for identifying triggering events and mitigation measures, the report supports the industry’s effort to manage residual risks in automated driving systems. The study concludes that while SOTIF helps reduce unknown-unsafe scenarios, some residual risk will likely remain, necessitating continuous evaluation and iterative safety analysis throughout the system development lifecycle.
Key finding
The SOTIF analysis of a generic Level 3 highway chauffeur system identified four vehicle-level hazards, 59 system limitation triggering events, 22 misuse triggering events, and 126 example mitigation measures.
Methodology
theoretical
Provenance
The full processing record for this entry. Every stage of this paper's journey through the pipeline is logged — what ran, with which tool and model, how many attempts it took, and when it last completed. Discovered via bulk_ingest_rosap on 2026-05-23 (6 acquisition events logged).
| Stage | Outcome | Tool | Model | Prompt | Attempts | Completed |
|---|---|---|---|---|---|---|
| discover | success | rosap | — | — | 2 | 2026-05-23 |
| archive | success | — | — | — | 1 | 2026-05-23 |
| extract | success | cached | — | — | 2 | 2026-06-10 |
| clean | success | — | — | — | 1 | 2026-06-01 |
| chunk | success | — | — | — | 1 | 2026-06-01 |
| embed | success | — | — | — | 1 | 2026-06-02 |
| enrich | success | — | — | — | 1 | 2026-05-23 |
| promote | success | — | — | — | 1 | 2026-05-23 |
| summarize | success | llm | qwen3.6-27b-prismaquant | summ-v5 | 3 | 2026-06-10 |
| tag | success | vector_similarity | — | — | 19 | 2026-06-11 |
| verify | success | — | — | — | 2 | 2026-06-10 |
Summary generated by qwen3.6-27b-prismaquant on 2026-06-10; verification: verified.
Topics
Ranked by relevance to this paper. Hover a topic for its definition.
Information type
What kind of knowledge this paper contributes, grouped by family — independent of topic (what it is about) and method (how it was studied).
- Methodological Resource: tool software
- Theoretical Contribution: conceptual framework, computational model