Indeed, the analysis of dependability of a PEE system can allocate a level of confidence in the safety, reliability, availability and maintainability of the functions for which it was designed. These PEE systems are developed for the most part, to protect human environments in which it operates

Examples:

• An ESP is a safety system that allows a vehicle to follow the path defined by its driver.
• An ABS is a safety system that allows the driver of a vehicle to slow down without locking the wheels.
• A Platform Screen Door is a safety system that will prevent passengers from falling on the tracks.
• An overspeed control is a safety system that allows a process to trigger an emergency brake in excess of its authorized speed.
• A system of computerized aircraft flight is a safety system that allows the driver to limit the evolution in his plane.

But in all these examples, the high level of dependability of each item of equipment, not enough to ward off human accidents, it is not incorporated in a more comprehensive risk management.

Indeed, a driver designates an ESP system will rely on its safety system and move his attention elsewhere in the turns. Similarly for a driver equipped with an ABS system, it will shift its attention away from the safe distance. A passenger waiting for his subway will enjoy the safety system that covers up the track to enjoy the maximum space of the platform. Train drivers will rely on the safety of the speed controller to move its attention to other maneuvers. The pilot of aircraft will be based on the security system of the flight control computer to hire new workers.

Thus, a safety system can not alone replace the vigilance of its users. This decrease in alertness, reflected through changes in behavior must be incorporated into the overall risk analysis that integrates all other between the awareness and prevention, to take into account all the risks that will be induced by Installation a system in its environment.

During this fair, the main points which have attracted our attention were the following:

• The impact of the ISO 26262 on the actual state of the art safety concepts in automotive industry
• The main lines form FIDES 2008 guide,
• The risk control of systems on the automation of the Paris Metro line 1,
• The use of formal methods in the framework of industrial projects.

The impact of the ISO 26262 on the actual state of the art safety concepts in automotive industry:

The establishment of this new standard ISO 26262, is a genuine revolution in the automotive sector. This standard resumed many points already present in the standards well known by ClearSy such as the IEC 61508, 50129, 50128, while incorporating also the constraints inherent to the automotive sector.

The main lines form FIDES 2008 guide:

The release of new FIDES 2008 guide, is an important development of the system reliability, since this standard shall deliver a better way to predict reliablity than the standard of reliability MIL HDBK 217F, too old now (1990), that sometimes generate a mismatch between the result of foresight studies and the real conditions of aging.
In addition, this new standard integrates more returns from experience than famous standard RDF2000 (UTE C 81-810), because it is carried out by a European consortium comprising the major actors in the industry of defense and the aeronautics.

The risk control of systems on the automation of the Paris Metro line 1:

The control of risks on the automation of the line 1 is part of the major concerns of ClearSy, because ClearSy is an actor in the process of automation of this line, responsable for developing the full command control system for plataform screen doors which allows to manage the mixing between trains automatic and trains with drivers. (see our DOF1 project).

The use of formal methods in the framework of industrial projects:

As a developer and publisher of the Atelier B tool (tool for development of the B formal method), ClearSy contributes strongly to the deployment of this method in the industrial environment. ClearSy has therefore very closely interest to the advances and developments of formal methods in industrial fields.

Our opinion on the Conference Lambda Mu:

The Lambda Mu is an exhibition which is designed to address all aspects of the control of risk and safety of operation. This area is a very vast area which affects all activities in all industrial sectors.
For a long time, the question of the control of risks or the safety of operation was often left aside by the industrial people because it was not considered applicable to constraints imposed by the operational projects.
But, more and more, this question of the control of risk and safety of operation is considered in the implementation of industrial projects. ClearSy, as an actor in the achievement of operational safety for electronic systems/computer saw a real change in the way of thinking the projects. The Lambda Mu fair thus allows to realize the magnitude of the phenomenon.
Furthermore, this place is the opportunity to submit university and research works in the field of the control of risk and safety of operation.

Our Stand at Lambda Mu 16

Useful links

• Program of Lambda Mu 16
• lMdR Web site
• Our report of Lambda Mu 15