A Survey on an Emerging Safety Challenge for Autonomous Vehicles:Safety of the Intended Functionality

As the complexity of autonomous vehicles(AVs)continues to increase and artificial intelligence algorithms are becoming increasingly ubiquitous,a novel safety concern known as the safety of the intended functionality(SOTIF)has emerged,presenting significant challenges to the widespread deployment of AVs.SOTIF focuses on issues arising from the functional insufficiencies of the AVs’intended functionality or its implementation,apart from conventional safety considerations.From the systems engineering standpoint,this study offers a comprehensive exploration of the SOTIF landscape by reviewing academic research,practical activities,challenges,and perspectives across the development,verification,validation,and operation phases.Academic research encompasses system-level SOTIF studies and algorithm-related SOTIF issues and solutions.Moreover,it encapsulates practical SOTIF activities undertaken by corporations,government entities,and academic institutions spanning international and Chinese contexts,focusing on the overarching methodologies and practices in different phases.Finally,the paper presents future challenges and outlook pertaining to the development,verification,validation,and operation phases,motivating stakeholders to address the remaining obstacles and challenges.

Static Extracting Method of Software Intended Behavior Based on API Functions Invoking

The method of extracting and describing the intended behavior of software precisely has become one of the key points in the fields of software behavior＇s dynamic and trusted authentication. In this paper, the author proposes a specified measure of extracting SIBDS （software intended behaviors describing sets） statically from the binary executable using the software＇s API functions invoking, and also introduces the definition of the structure used to store the SIBDS in detail. Experimental results demonstrate that the extracting method and the storage structure definition offers three strong properties： （i） it can describe the software＇s intended behavior accurately; （ii） it demands a small storage expense; （iii） it provides strong capability to defend against mimicry attack.

Spar Intends to Join Hands with CASC

Spar hopes to establish a long-term strategic alliance with China Aerospace Corporation (CASC) toward the next century. This was reiterated by J. C. Mackay, Senior Vice President and General Manager of Spar Space Systems, when he met April 4 with Bai Baier, Vice President of CASC. During the meeting Spar briefed their Chinese counterparts on the status of Radarsat-1, launched last November aboard Delta-2 rocket., the satellite, with Synthetic Aperture Radar (SAR) as its principal instrument, has just finished its commissioning phase and been declared operational by its user, the Canadian Space Agency (CSA). The quality of the images it generates exceeds their specifications with the highest resolution of

Humen Garment Intends to Create its Own Business Circle

It is learned from the Special Meeting of Leaders on Cloths of Humen Garment Market by the journalist that, Humen Garment will, upon the construction of business circle, launch a big event and mainly intend to create three garment business circles as follows:

Analysis of antihypertensive regimens and their intended patients from three hospitals in Beijing

This study aimed to investigate various regimens of antihypertensive agents for different groups of patients and the outcomes in the real world. We retrospectively collected 974 prescriptions for hypertension from three hospitals in Beijing, along with medical records of 219 hypertensive patients from one of the hospitals to study the regimens and their effects on patients. The antihypertensive regimens were classified by different combinations of subclasses of antihypertensive agents. Nearly all prescriptions can be classified into 11 different antihypertensive regimens, and most of them are combination therapy. Grade III hypertension patients significantly （P〈0.001） tend to be treated with regimens containing calcium channel blocker （CCB） and RAAS inhibitors, angiotensin II receptor blocker （ARB） or angiotensin-converting enzyme inhibitor （ACEI）. β-Blockers are more likely to be combined with CCB than with other categories of antihypertensive agents. Hydrochlorothiazide is less widely used than recommended.

面向预期功能安全的eVTOL智能避障系统运行时保证方法

为保障电动垂直起降飞行器(eVTOL)在城市空中交通(UAM)场景下的预期功能安全(SOTIF),降低人工智能算法的验证难度,建立基于运行时保证(RTA)方法的避障模型。首先,使用人工势场法改进的柔性动作评价(SAC)算法作为eVTOL智能避障系统的复杂功能;然后,使用动态反应规划(DRP)作为智能航电系统的备用功能,以减缓SOTIF危险,同时,使用监视和决策模块采集环境状态,搭建RTA架构;最后,分别仿真仅使用复杂功能和具有RTA架构的避障系统,对比避障效果。结果表明:2种方法均可实现避障,但仅使用复杂功能的传统避障系统会带来SOTIF危险;经过RTA架构设计,可使eVTOL的安全飞行时长占比由78.4%提高到98.15%,总航路长度仅增加0.95%,在保障效率的同时,降低了在运行场景中的风险。

Editorial for the Special Issue on Safety for Intelligent and Connected Vehicles

Intelligent and connected vehicles(ICVs)are confronted with critically complex traffic scenarios and safety challenges that have attracted increasing attention from academia and industry.The intelligent safety of ICVs involves several technologies and requires the common efforts of researchers and engineers,including the safety of the intended functionality(SOTIF),the safety of artificial intelligence,the intricacies of cybersecurity,and ethical dilemmas.Ensuring the intelligent safety of ICVs presents substantial chal-lenges in both research and commercialization,particularly SOTIF,which refers to the absence of unreasonable risk owing to hazards resulting from functional insufficiencies of the intended functiona-lity or reasonably foreseeable misuse by person.Because of the limited scene coverage ability of training samples and the practical application conditions without boundary restrictions,it is very dif-ficult to find the functional insufficiency of the intended function-ality and overcome it under dynamic unknown scenarios,which is also the source of SOTIF.

感知系统触发条件穿透率评估方法研究

预期功能安全问题制约着自动驾驶汽车的落地。自动驾驶感知系统面临的各种极端行驶环境等极易引起预期功能安全问题。因此,须按照现有预期功能安全标准,在安全分析阶段识别并评估种类多且数量大的触发条件,筛选高价值触发条件为后续测试验证提供测试场景输入。本文中首先基于对触发条件在自动驾驶系统中的风险演化过程的分析,提出一套包括暴露率、穿透率和危害率的三维感知系统触发条件评估体系。随后,基于层次分析法构建了触发条件穿透率量化评估方法。最后,针对某量产车型的融合感知系统分析并选取15个触发条件,构建测试用例并开展封闭场地测试,评估上述触发条件的穿透率。最终经计算筛选得到3个高风险触发条件,验证了触发条件穿透率量化评估方法的可行性。

论教育法典的基本原则

基本原则是教育法典总则编的重要组成部分,既应发挥预期功能,又应具有坚实的规范基础。作为“总则—序编”合一立法模式下的必然产物,基本原则应当发挥统摄整个法典展开和作为法典实施依据两大功能。前者涉及基本原则作为法典内在体系和价值融贯性的体现;后者意味着基本原则在法典实施过程中发挥解释和补充功能。具备坚实的规范基础,要求提炼教育法典基本原则的主要路径应当是:承接自现行宪法教育相关条款,以《教育法》总则章为基础加以抽象,以及由其他教育单行法“提取公因式”。教育法典的基本原则应当包括立德树人原则、受教育权保障原则、教育平等原则以及教育自主性原则。

液相色谱法测定特殊医学用途婴幼儿配方食品中VC

建立液相色谱法检测特殊医学用途婴幼儿配方食品中VC含量的分析方法。样品还原处理后,经HLB固相萃取柱净化、微孔滤膜过滤后进行亲水作用液相色谱法测定,外标法定量,对检测方法进行验证。结果表明:在质量浓度为0~50μg/mL范围内其线性相关系数≥0.999,定量限为3.0 mg/100 g,加标回收率为95.2%~102.8%,相对标准偏差为1.22%~3.62%;该方法具有操作简单、结果准确和重复性好等特点,适用于特殊医学用途婴幼儿配方食品中VC含量的测定。

面向自动驾驶感知的快速不确定性估计方法

在自动驾驶的视觉感知任务中,准确且快速提取认知不确定性和偶然不确定性对有效解决自动驾驶的预期功能安全问题至关重要。传统方法中,如Monte-Carlo Dropout和Deep Ensembles,通过采样不同子模型的预测结果来估计不确定性,这使在模型推理阶段不确定性估计速度很慢且容易占用处理器大量内存。针对Monte-Carlo Dropout不确定性估计速度较慢及其后续检测结果选取的问题,提出了一种快速Monte-Carlo Dropout方法及后续检测结果校正的方法。此方法使用多头机制替换了Monte-Carlo Dropout传统的多次采样机制,节省了采样时间,进而节省了整个不确定性估计阶段的推理时间。

Sufficient or insufficient: Assessment of the intended nationally determined contributions (INDCs) of the world's major greenhouse gas emitters

The recent Conference of the Parties of the United Nations Framework Convention on Climate Change has resulted in the submission of the Intended Nationally Determined Contributions (INDCs) of 190 countries. This study aims to provide an analysis of the ambitiousness and fairness of the mitigation components of the INDCs submitted by various parties. We use a unified framework to assess 23 INDCs that cover 50 countries, including European Union (EU)-28 countries as parties to the Convention, which represent 87.45% of the global greenhouse gas emissions in 2012. First, we transform initial INDC files into reported reduction targets. Second, we create four schemes and six scenarios to determine the required reduction effort, which considers each nation's reduction responsibility, capacity, and potential, thereby reflecting their historical and current development status. Finally, we combine the reported reduction target and the required reduction effort to assess INDCs. Evaluation results of the 23 emitters indicate that 2 emitters (i.e., EU and Brazil) are rated as "sufficient," 7 emitters (e.g., China, the United States, and Canada) are rated as "moderate," and 14 emitters (e.g., India, Russia, and Japan) are rated as "insufficient." Most pledges exhibit a considerable distance from representing a fair contribution.

融合STPA及有限状态机的ADAS触发条件生成机制

现有高级辅助驾驶系统(Advanced Driver Assistance Systems,ADAS)功能不断增多且系统复杂性不断提高,不可避免带来了预期功能安全(Safety of the Intended Functionality,SOTIF)问题。触发条件的识别与生成是预期功能安全活动中重要的一环,然而现有对触发条件识别仅借助系统过程理论分析方法(System Theoretic Process Analysis,STPA)进行分析,未充分考虑系统功能状态转换中存在的问题。本文以知识驱动的方式构建触发条件识别机制,将STPA及有限状态机(Finite State Machine,FSM)理论融合构建拓展型系统控制结构,针对拓展型控制架构及功能状态转换进行安全分析,根据系统存在的功能局限及人为误用,完成触发条件的识别、生成、规范化描述、分类及标签化。最后将本文提出的触发条件生成机制应用于集成式巡航辅助系统(Integrated Cruise Assistance,ICA),得到了该系统的触发条件及其分类,并将本文所提出的生成机制与现有相关触发条件生成方法进行对比分析,证明了本机制的实用性、可行性及有效性。

胀包学生饮用乳中不解糖嗜胨菌的鉴定

以学生饮用乳(发酵乳)来源的不解糖嗜胨菌为研究对象,基于分离计数、形态学观察、生化鉴定、基质辅助激光解吸电离飞行时间质谱(matrix-assisted laser desorption ionization-time-of-flight mass spectrometry,MALDITOF MS)和全基因组测序技术,建立适用于不解糖嗜胨菌的鉴定方法。结果表明:不解糖嗜胨菌在PCA培养基上厌氧环境下生长较适;在全自动微生物鉴定系统上鉴定为不解糖嗜胨菌,置信度98%;MALDI-TOF MS鉴定为不解糖嗜胨菌,鉴定比对值为2.241。通过全基因组测序,平均核苷酸一致性分析结果为98.58%。利用本研究建立的方法能够满足不解糖嗜胨菌的快速、准确鉴定,符合食品安全检测需求。

企业争议事件应对方式对消费者品牌态度的影响研究

争议事件的出现对企业来说是树立独特品牌身份的良机还是损害品牌资产,关键取决于企业对争议事件应对方式的选择。本研究基于消费者品牌认同理论,通过两个线上实验,探讨企业不同应对方式对消费者品牌态度影响的边界条件以及内在机制。结果表明,与预期形象为市场驱动的企业相比,价值驱动的企业坚持立场比改变立场更能改善消费者的品牌态度;品牌勇气感知中介了企业应对方式与企业预期形象对消费者品牌态度的交互作用。本文的研究结论对丰富品牌管理理论以及企业争议管理实践有重要意义。

高压选相断路器T100a试验电流和瞬态恢复电压的计算

相对于常规高压断路器,选相断路器的T100a试验的大半波电流非对称度增大,导致IEC 62271-101:2021附录A、E提供的电流和瞬态恢复电压(TRV)参数不再适用。为了快速精确地计算这些参数,文中提出了以短路电流对称分量为基础计算电流参数,通过时域分析获得TRV修正系数的方法,公式简单、灵活性好,适用范围广。其计算结果与传统公式计算值保持一致,并被IEC WG67认可,包含在IEC TS 62271-319(已通过DTS投票)附录N中。