| ISO 26262, Automotive Electronic Systems Testing and Validation
| ASIL focuses on risks to drivers on the road
| Automotive semiconductors must obtain IATF 16949 and AEC-Q100

Samsung Electronics announced on the 13th that it has obtained ISO 26262 Functional Safety Management (FSM) certification, an international standard for functional safety of automotive semiconductors. This means that Samsung Electronics' automotive semiconductor development and management processes meet the requirements of ISO 26262.

In addition to Samsung Electronics, there are many electronics companies that have announced that they have obtained national standards for automotive semiconductors. Many electronics companies, including Xilinx, LG Electronics, Lattice, ams, and Rohm, are steadily seeking ISO 26262 certification.


Why is it hot?
It's simple. Cars are becoming electronic devices on wheels. Microchip, a semiconductor manufacturer, has the second-highest revenue from the automotive sector, accounting for 17 percent of its revenue.

On the 9th, Microchip selected four major factors in the automotive semiconductor market at a press conference. The four major factors show why the automotive semiconductor market will grow and how much cars are becoming electronic products.

The first is electrification. Environmental regulations are becoming more stringent day by day, and investment in electric vehicles is also increasing. Electric vehicles and hybrid electric vehicles are equipped with numerous electric applications such as electric motors, AC/DC converters, and regenerative braking systems.

The second is the activation of HMI and vehicle infotainment. The growth rate of the vehicle infotainment market, which aims to improve user convenience and driving safety, is double-digit, which is steeper than the single-digit growth rate of the finished vehicle market.

The third is the full-scale implementation of ADAS and autonomous vehicle technology. McKinsey predicts that 15% of vehicles manufactured in 2030 will be fully autonomous vehicles. To achieve this, high-performance computing has become essential. Even if it is not now, someday all cars will perform high-performance computing.

The fourth is the growing need for automotive cybersecurity. The maturation of autonomous vehicle technology and the widespread adoption of connected cars are driving the demand for security certification. The automotive security endpoint market is expected to grow at a CAGR of 12% from 2019 to 2026.

Semiconductors are and will be used in various automobiles. This is why electronics companies are also paying attention to automobile standards. Next, let's learn about various international automobile standards.


Why ISO 26262 came into being
As the automotive industry becomes more complex, there are more regulations to improve safety. Current cars use by-wire systems such as throttle-by-wire.

In this system, when a driver steps on the accelerator, a sensor in the pedal sends a signal to the ECU (Electronic Control Unit), and the ECU analyzes various factors such as engine speed, car speed, and pedal position and sends a command to the throttle body.

As adoption of bywire systems increases, the automotive industry needs procedures to test and verify electronic systems such as throttle-by-wire and even brake-by-wire.

The purpose of ISO 26262 is to standardize safety-related requirements for all automotive E/E (Electric/Electronic) systems. The Draft International Standard (DIS) of ISO 26262 was published in June 2009.

Following ISO 26262 gives you a recognized standard to use to determine how safe your system is when used. Additionally, because these standards provide a common terminology, you can also express specific parts of your system in common terms.

That is, this accredited ISO 26262 provides a way to judge how secure a system is.


Components of ISO 26262
ISO 26262 consists of several steps to manage the functional safety of a system, and specifies product development rules at the system, hardware, and software levels.

The ISO 26262 standard provides regulations and recommendations for the overall product development process from development through disposal. It details how to assign an acceptable level of risk to a system or component and documents the entire testing process.

In general, ISO 26262 provides ▲ automotive safety life cycle management (management, development, production, operation, service, decommissioning) and supports the coordination of necessary activities according to each stage of the life cycle. ▲ It also provides a risk-based approach specific to automobiles to determine the risk level (Automotive Safety Integrity Level; ASIL). ▲ It also provides the necessary safety requirements for components to accept additional acceptable risks using ASIL. Finally, ▲ It provides requirements for verification and validation methods to ensure a sufficient and acceptable safety level.

ISO 26262 consists of 10 parts in total, which are designed to fit the automotive development process and include parts specific to automobiles. For example, Part 7 of ISO 26262 provides specific safety requirements for production, operation, service and disposal.

The ISO 26262 automotive safety life cycle describes the entire production life cycle. ISO 26262 includes the need for a safety manager, the development of a safety plan, and the definition of verification measures (including safety verification, inspection, and evaluation). These requirements are intended for use in the development of E/E systems and components.


Automotive Safety Integrity Standard, ASIL
Let's learn about ASIL, which was mentioned earlier. ASIL is a key factor for ISO 26262 compliance.

The ASIL is determined at the beginning of the development process. Each function of the system is analyzed for possible hazards. Based on the combination of the probability of exposure to hazards, the controllability that the driver can exercise, and the severity of the consequences in the event of a critical failure, the risk assessment leads to the ASIL.

ASIL does not address the technologies used in the system. ASIL focuses solely on the risk to the driver and other road users.

Each safety requirement is divided into ASIL levels A, B, C, or D, with level D representing safety-critical processes and having strict testing regulations.

The ISO 26262 standard details the minimum test requirements based on the ASIL of the component. Once the ASIL is determined, safety goals for the system are established. This defines the system behavior required to ensure safety.

For example, in a windshield wiper system, safety analysis determines the impact on the driver's vision if the wiper malfunctions. ASIL provides guidance for determining the appropriate approach to reach a certain level of product integrity. The guide is designed to complement current safety practices.


IATF 16949 and AEC-Q100
Samsung Electronics announced on the 13th that in addition to ISO 26262, it produces products that satisfy the automotive quality management system IATF 16949 and the automotive semiconductor reliability evaluation standard AEC-Q100.

Automobile manufacturers are requiring their parts suppliers to obtain IATF 16949 (ISO/TS 16949) certification to ensure product quality.

IATF 16949 (ISO/TS 16949) certification is an essential certification for establishing a system that meets specific customer requirements and continuously improving it to enhance corporate competitiveness.

The International Automotive Technology Foundation (IATF) and ISO/TC 176 have integrated existing individual automotive quality management system standards into the ISO/TS 16949 standard, which can be applied to the quality systems of all companies in the automotive industry supply chain worldwide.

By obtaining ISO/TS 16949 certification, suppliers and partners in the automotive industry can demonstrate that they have a quality management system in place for continuous improvement, defect prevention, and reduction of variation and waste.

From October 2016, it was changed to the revised version, IATF 16949:2016. The first major change requirement is to reflect the organizational situation in the management system and emphasize risk management and top management leadership.

In addition, it emphasizes requirements for safety-related components and processes, clarifies supplier management and development requirements, strengthens product traceability requirements to respond to the latest legal and regulatory changes, adds requirements for products with embedded software (ASPICE), and includes a warranty management process that includes linkage with NTF (no trouble found) and use of automotive industry guidelines. Additional corporate responsibility requirements, etc.

AEC-Q100 is a reliability evaluation standard for semiconductors. It was established by the Automotive Electronics Council (AEC). There are also AEC-Q101, AEC-Q102, AEC-Q104, and AEC-Q200.

Most automotive semiconductors must obtain AEC-Q100 qualification. AEC-Q100 was developed as an acceleration test that takes into account the main failure mechanisms, so that it can predict the life and reliability of automotive semiconductors, and easily find design and manufacturing problems.

AEC-Q100 specifies four grades for each usable temperature range, and most automotive semiconductors must obtain AEC-Q100 qualification at the level appropriate for their intended use.


The core of the standard, safety
In conclusion, the most important thing that international standards are concerned about is safety. With the advancement of technology, driving experiences are becoming more convenient day by day, but without a foundation of safety, it would be nothing more than a house on the ground. Automobiles must be safe. Safety is the most important. It is directly related to human life. It is natural that the electronics industry is paying attention to international standards for automobiles. Complying with standards is now a priority.