Most recent
UL 4600 Ed. 3-2023
Evaluation of Autonomous Products
2 1.1 This standard covers the safety principles, risk mitigation, tools, techniques, and lifecycle processes for building and evaluating a safety argument for vehicles that can operate in an autonomous mode, whether the item is individual or part of a team such as a platoon . 2 1.2 Operation is assumed to occur without human supervision and without expectation of human intervention in performing and supervising the dynamic driving task and other normal system operations based upon the current item state and ability to sense and otherwise interpret the operating environment. Human contributions to safety in other than normal operation are considered (e.g., maintenance), as are interactions with humans who are not operating the item (e.g., pedestrians). 2 1.3 This standard generally uses the term “ item ” rather than “system” or “product” when referring to the scope of the safety case as well as the operation of the item . This approach is in recognition of the possibility that the safety of the item might rely upon infrastructure, services, support processes, and other factors that might not normally be considered part of a system such as a vehicle per se, but which materially affect its safety and therefore are all considered within the scope of the item being assessed for conformance . For a team of vehicles the item might be scoped as an individual vehicle that is a member of a team or instead the item might be designed to function as a team as a whole without reducing the safety of any one vehicle. 2 1.4 This standard assumes that the item autonomously operates starting at some well-defined initial state to some other well-defined end state without human intervention. Human input might influence the selection of desirable states (e.g., via an occupant requesting a destination). However, the extent to which human operators mitigate or introduce risk by performing or supervising a dynamic control task (e.g., by driving or taking responsibility for monitoring system operation) is outside the scope of the standard. Similarly, the extent to which human operator performance or non-performance is involved in risks related to transferring human driver control to or from the item is also outside the scope of the standard. However, ensuring that the item itself properly performs any change of control functions if and when it is supposed to is generally within the scope of the standard since it can adversely affect operation in fully autonomous mode as well. Thus, while portions of this standard might be helpful for addressing less than fully autonomous vehicles, issues involving human driver responsibilities, vigilance, and ability to properly accept responsibility for vehicle control are out of scope for this standard. 2 1.5 While information security is an essential topic, the details of that area are out of scope for this standard beyond a general requirement for a Security Plan and prompt elements that are possibly unique to autonomous vehicle operation in comparison to other vehicular security requirements. Reasonably foreseeable misuse and abuse as well as physical attacks (e.g., physical sensor damage) are in scope. 2 1.6 The requirements of this standard are considered to be at a necessary, but possibly not sufficient, level of completeness and rigor to create an acceptably well-formed and acceptably complete item safety case . In particular, prompt element lists are considered non-exhaustive , with an expectation that design teams will include additional items as relevant to the item and its operational design domain
Content Provider
Underwriters Laboratories [ul]
