STPA危险分析方法及其在ATSA-ITP设计中的应用

STPA hazard analysis method and its application in ATSA-ITP design

传统危险分析方法无法胜任对复杂的非线性社会技术系统的分析。系统理论过程分析(STPA)方法是建立在系统理论事故建模和过程(STAMP)基础上的一种新型的危险分析方法,它将安全视为系统的一种涌现特性,认为除了组件失效,组件间的非功能交互也是导致危险的主要原因,并通过定义系统危险、绘制安全控制结构、识别不安全控制行为、确定不安全控制行为起因等4个步骤完成危险分析过程。美国的空中交通态势感知尾随程序(ATSA-ITP)设计案例分析表明,STPA方法的组织形式有序,逻辑结构严谨,分析过程透彻。

The traditional hazard analysis methods are not competent to analyze complex socio-technical systems with distinct nonlinearity characteristics. STPA,that sees the safety as an emergence property of system,is a new hazard analysis method on the basis of Systems-Theoretic Accident Modeling and Processes（ STAMP） model,and thinks that the disfunctional interaction between the system components is also an important causation besides component failures. It completes the entire hazard analysis process by four steps including defining the system hazards,drawing the safety control structure,identifying the unsafe control actions and determining the potential causes for each unsafe control action. The case for Airborne Traffic Situational Awareness In-Trail Procedures（ ATSA-ITP） design shows that STPA method has many advantages such as ordered organization format,strict logic structure,intensive analysis process and so on,and the obtained results have better practical value.