Specification of Health Monitoring, AUTOSAR R22-11, FO, No.850

AUTOSARは、ISO、IEC、ITUと情報交換契約を結んでいません。
AUTOSAR文書には、ISO、IEC,ITU記述を全文引用することはできません。
WTO/TBT協定に基づき、国際的な調達は国際規格との差異を記述することにより文化依存しない仕様を目指します。
ISO、IEC、ITU文書を合わせて読むと技術内容は理解できます。　
CAN、OSEK/VDX OS、DIAGは、ISO定義を先に確認しましょう。　　
OSEK COM、OSEK NMなどはISOの規定から基本的な部分で定義を変えています。
変更している部分を仕様等で明記するか、ISOを改定するとよいでしょう。　

AUTOSARの参考文献欄の改定が進んでいません。　
Glossary用語定義の網羅性が低いです。
本文を読む前に確認するとよいかもしれません。
本文を読んでから確認してもよいかもしれません。

AUTOSARが、2022年の版、R22-11公開しました。公開行事の模様は

AUTOSAR R22-11 Release Event 20221208

下記URL順次確認中です。

文書は検索してダウンロードすることができます。
クラウドサービスにありがちな、あるのにないかのような検索結果が出ることがあります。

要求/仕様（Requirement and Specification)

一覧

AUTOSAR R22-11 Adaptive Platform 一覧はこちら。

Adaptive Platform Release Overview, No.782, AP, AUTOSAR 22-11 新

Foundation Release Overview, No.781, FO, AUTOSAR 22-11 新

Classic Platform Release Overview, AUTOSAR R22-11, CP, No.0(2)

AUTOSAR R22-11 マラソン

AUTOSAR 文書番号と発行年　

AUTOSAR 　R22-11で　リンク切れ、表示しない文書

Qiitaの記事の一覧は作成中です。

AUTOSAR R22-11 Qiita記事一覧　新

Abstract Platformとの関係

RS統合

<この項は書きかけです。順次追記します。>

文書変更(Document Change)

• Introduced Elementary Supervision Status for Adaptive platform
• Determination of Supervision Status is now platform specific

用語(terms)

Term	Description
Alive Indication	An indication of a Supervised Entity to signal its aliveness by calling a checkpoint used for Alive Supervision.
Alive Supervision	Kind of supervision that checks if a Supervised Entity executed in a correct frequency.
Checkpoint	A point in the control flow of a Supervised Entity where the activity is reported.
Deadline Supervision	Kind of supervision that checks if the execution time between two Checkpoints is within minimum/maximum time limit.
Final Checkpoint	The ending Checkpoint of a Graph. There can be zero or more Final Checkpoints for each Graph.
Global Supervision Status	Status that summarizes the Local Supervision Status of all Supervised Entities of a software subsystem.
Graph	A set of Checkpoints connected through Transitions, where at
least one of Checkpoints is an Initial Checkpoint. There is a path (through Transitions) between any two Checkpoints of the Graph.
Health Channel	Channel providing information about the health status of a (sub)system. This might be the Global Supervision Status of an application, the result any test routine or the status reported by a (sub)system (e.g. voltage monitoring, OS kernel, ECU status, ...).
Health Channel Supervision	Kind of supervision that checks if the health indicators registered by the supervised software are within the tolerances/limits.
Health Monitoring	Supervision of the software behaviour for correct timing and sequence.
Health Status	A set of states that are relevant to the supervised software (e.g. a Voltage State, an application state, the result of a RAM monitoring algorithm).
Health Status Supervision	Check if the health indicators registered by the supervised software are within the tolerances/limits.
Initial Checkpoint	The starting Checkpoint of a Graph. There can be one or more Initial Checkpoints for each Graph.
Logical Supervision	Kind of online supervision of software that checks if the software (Supervised Entity or set of Supervised Entities) is executed in the sequence defined by the programmer (by the developed code).
Local Supervision Status	Status that represents the current result of Alive Supervision, Deadline Supervision and Logical Supervision of a single Supervised Entity.
Machine	see [3] AUTOSAR Glossary
Platform Health Management	Health Monitoring for the Adaptive Platform
Supervised Entity	A whole or part of a software component type which is included in the supervision. A Supervised Entity denotes a collection of Checkpoints within the corresponding software component type. A software component type can include zero, one or more Supervised Entities. A Supervised Entity may be instantiated multiple times, in which case each instance is independently supervised.
Supervision Mode	An overall state of a microcontroller or virtual machine or state of a Function Group (in case of Adaptive Platform). Modes are mutually exclusive. A mode can be e.g. Startup, Shutdown, Low power.
Health Indicator	Health Indicator provides an evaluation metric of current system performance with regard to safety requirements.
System Health Monitor(SHM)	System Health Monitor is responsible for monitoring the health of a (Sub)-system. It provides Health Indicators that can be used for system wide error handling across several Classic, Adaptive and any third party platforms.
Local Health Monitor	Local Health Monitor gathers health information of the platform on which it is deployed.
Health Indicator Interface	Health Indicator Interface is an interface used for communication of Health Indicators using a standardized service field.
SE	Supervised Entity.
SOTIF	Safety Of The Intended Functionality [4].
Performance	The Performance rates the performance with respect to malfunctioning behavior.
Reliability	Reliability evaluates how much to trust the system due to uncertainties.

英日

日本語は仮訳

T.B.D.

参考(reference)

[1] ISO 26262:2018 (all parts) – Road vehicles – Functional Safety
http://www.iso.org
[2] Requirements on Health Monitoring
AUTOSAR_RS_HealthMonitoring
[3] Glossary, AUTOSAR_TR_Glossary
https://www.autosar.org/fileadmin/standards/R22-11/FO/AUTOSAR_TR_Glossary.pdf
[4] ISO/PAS 21448:2019 – Road vehicles – Safety of the intended functionality
http://www.iso.org
[5] Explanation of System Health Monitoring
AUTOSAR_EXP_SystemHealthMonitoring
[6] Specification of Watchdog Manager
AUTOSAR_SWS_WatchdogManager
[7] Specification of Platform Health Management
AUTOSAR_SWS_PlatformHealthManagement

202304 URL更新

＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞

文書履歴(document history)

ver. 0.01 初稿 20230203
ver. 0.02 ありがとう追記　20230716

最後までおよみいただきありがとうございました。

いいね　💚、フォローをお願いします。

Thank you very much for reading to the last sentence.

Please press the like icon 💚　and follow me for your happy life.

Specification of Health Monitoring, No.850, FO, AUTOSAR R22-11(2)