Hazard ID Situational Analysis Hazard Identification Hazardous Event Classification Determination of ASIL and Safety Goals

Environmental Other Details Item Usage Deviation Details Hazardous Event Event Details Exposure Rationale Severity Rationale Controllability Rationale ASIL
Operational Mode Operational Scenario Situation Details Situation Description Function Deviation Hazardous Event Description Safety Goal
Details (optional) (function) (resulting effect) (of situation) (for exposure) (of potential harm) (for severity) (of hazardous event) (for controllability) Determination
HA-001 Lane Departure The oscillating steering torque from the
Warning (LDW) High haptic feedback can affect Lane Departure Warning function shall be
The LDW function applies Since the system applies high torque on the
Normal driving on a highway during rain function shall apply an DV04 - Actor driver's ability to steer as intended. Highway during rain (slippery road) The driver is traveling limited.
IU01 - Correctly an oscillating torque with EV00 - Collision with Loss of of vehicle control E3 - Medium S3 - Life-threatening or C3 - Difficult to control or steering wheel, a normal driver would have difficulty
OM03 - Normal driving OS04 - Highway EN06 - Rain (slippery road) SD02 - High speed N/A (slippery road) with high speed and oscillating steering effect is too The driver could lose control of the occurs once a month or more often at high speed and ASIL C
used very high torque (above other vehicle (steering) with possible collision. probability fatal injuries uncontrollable controlling the vehicle on a slippery road at high
correctly used system. torque to provide the much vehicle and collide with another for an average driver could lose control.
limit). speed.
driver with haptic vehicle or with road infrastructure.
feedback.
HA-002 Lane Keeping The driver is misusing the function The Lane Keeping Assistance function
Normal driving on country roads during The driver is on a country road and
Assistance (LKA) The LKA is not time limited, by taking both hands off the If driver has both hands off the wheel at high shall be time limited and the additional
normal conditions with high speed and DV03 - Function misusing the system as an ADAS The driver is traveling
EN01 - Normal IU02 - Incorrectly function shall apply the so the driver can misuse it EV00 - Collision with wheel, overstimating the car´s self- Loss of vehicle control E2 - Low S3 - Life-threatening or C3 - Difficult to control or speeds, the driver may not be not be able to steering torque shall end after a given
OM03 - Normal driving OS03 - Country Roads SD02 - High speed N/A incorrectly used system (the driver is using always system. We consider this at high speed and ASIL B
Conditions used steering torque when as an autonomous driving other vehicle driving capabilities. The vehicle (steering) with possible collision. probability fatal injuries uncontrollable regain control fast enough to react to road time interval so that the driver cannot
the LKA function as a fully autonomous activated combination a low probability, so could lose control.
active in order to stay function. could collide with other vehicles or situations. misuse the system for autonomous
function). we will label the exposure E2
in ego lane. get off the road. driving.
Lane Departure The malfunction of the LDW The Lane Departure Warning shall detect
The camera subsystem Even at low speeds,
Warning (LDW) warning due to fog or similar low- A normal driver would take extra conditions where it cannot operate as
detection of lane lines can the vehicle is drifting Most drivers (>90%) would be able to take back the
Normal driving on a country roads during function shall apply an DV19 - Sensor visibility conditions, together with a care driving on fog or very low expected (such as very low visibility due
EN03 - Fog (degraded IU01 - Correctly be wrong due to low EV00 - Collision with Collision with traffic or road E2 - Low S3 - Life-threatening or into another lane and ego car to its lane when detecting other traffic,
HA-003 OM03 - Normal driving OS03 - Country Roads SD01 - Low speed N/A fog (degraded view) with low speed and oscillating steering Detection is driver's mistake, also due to bad visibility conditions, and usually will C2 - Normally Controlable ASIL A to fog or heavy rain) and warn the vehicle
view) used visibility conditions, leading other vehicle infrastructure. probability fatal injuries may have a head-on even if the distance is short due to visibility
correctly used system. torque to provide the Wrong visibility and/or dependence on the not trust the system in such operator with an audible and visible
to non-activation of the collision with oncoming conditions.
driver with haptic LDW system, could lead to a conditions warning about this fact ("function
LDW. traffic.
feedback. collision with other vehicle. unavailable").
Lane Departure
Unexpected haptic feedback can
Warning (LDW) The LDW function is
affect driver's ability to steer as Even though snow in an urban The severity would
Normal driving on city roads during function shall apply an DV19 - Sensor activated inadvertently due Since the vehicle is traveling a slow speed, the The Lane Departure Warning function
EN04 - Snowfall IU01 - Correctly EV00 - Collision with intended. The driver could lose Loss of of control (steering) with E2 - Low area is common, the likelihood of S1 - Light and moderate normally be low
HA-004 OM03 - Normal driving OS02- City Roads SD01 - Low speed N/A snowfall (degraded view) with low speed oscillating steering Detection is to the camera subsystem C2 - Normally controllable driver should be able to control the vehicle most of QM shall differentiate between snow and lane
(degraded view) used other vehicle control of the vehicle and collide possible collision. probability the camera subsystem injuries because of slow
and correctly used system. torque to provide the Wrong identifying a patch of snow the time. lines.
with another vehicle or with road misdetecting a lane is low. speeds in urban traffic.
driver with haptic as lane line.
infrastructure.
feedback.