ものづくりにおける GSN/D-Case による安全論証と合意

Recently, safety-critical systems driven by AI technologies are expected to penetrate into society, there is a really call for methodologies of safety arguments or agreements. In this presentation, we introduce GSN/D-Case with its background and basic ideas and show some case studies.

Transcript

1. ΋ͷͮ͘Γʹ͓͚Δ(4/
 %$BTFʹΑΔ҆શ࿦ূͱ߹ҙ גࣜձࣾνΣϯδϏδϣϯ
   
   
   ಸྑઌ୺Պֶٕज़େֶӃେֶ
   ߴҪ
   རݑ ೔ຊେֶ
   দ໺
   ༟ ೥݄೔ˏ௕Ԭ
 ୈ̍̌ճԣװ࿈߹ίϯϑΝϨϯε
   ΋ͷͮ͘ΓΛߦ͏্Ͱͷ҆શੑɾ৴པੑʹؔ͢Δ৽ͨͳऔ૊Έ
2. ൃදͷྲྀΕ എܠɿηʔϑςΟέʔε
   (4/%$BTFͷ঺հ
   (4/ͷࣄྫ
   (4/ʹΑͬͯظ଴Ͱ͖ΔޮՌ
   %$BTFͷ঺հ
   (4/%$BTFͷݚڀྫ
   ·ͱΊ 2
3. ηʔϑςΟέʔε TBGFUZ
   DBTF ओு DMBJN ɼٞ࿦ BSHVNFOU ɼূڌ FWJEFODF ʹΑͬͯɼγεςϜͷ҆શੑ ͳͲͷੑ࣭ͷୡ੒Λ࿦ূ͢Δจॻ
   ಋೖͷ͖͔͚ͬͷҰͭ
   ೥ͷ๺ւ༉ా1JQFS
   "MQIBʹ͓ ͚ΔരൃࣄނͰ໊ࢮ๢
   
   ˠ
   νΣοΫϦετʹΑͬͯ҆શੑΛ ֬ೝ͢Δ͜ͱͷݶք͕ೝࣝ͞ΕΔ 3 ݱࡏͰ͸ɺࣗಈंɺమಓɺҩྍɺߤۭͳͲଟ͘ͷ෼໺Ͱීٴ
   ҆શੑʹݶΒͣɺ৴པੑ΍ηΩϡϦςΟͳͲʹ֓೦Λ޿͛ͨ
 อূέʔεʢBTTVSBODF
   DBTFʣ΋ࠃࡍඪ४ن֨ʹ
   *40*&$
   4ZTUFN
   "TTVSBODF
   γϦʔζ ओு DMBJN ূڌ FWJEFODF ٞ࿦ BSHVNFOU
4. ηʔϑςΟέʔεʹΑΓظ଴͞ΕΔޮՌ  ҆શੑʹؔ͢Δ۩ମతͳ໨ඪ ͕ؔ܎ऀؒͰڞ༗Ͱ͖Δ
    ҆શੑΛୡ੒͢ΔͨΊͷઓུ Λؔ܎ऀؒͰڞ༗Ͱ͖Δ
    ҆શੑΛୡ੒͢ΔͨΊͷ֤׆ ಈʹ͍ͭͯͦͷҐஔ෇͚Λڞ ༗Ͱ͖Δ 4 ओு DMBJN ূڌ FWJEFODF ٞ࿦ BSHVNFOU ͨͩ͠ɺηʔϑςΟέʔεࣗମ͕๲େʹͳΓ΍͢ ͘ʮϖʔύʔηʔϑςΟʯʹؕΓ΍͍͢
5. (4/%$BTFͷ঺հ (4/ʹ(PBM
   4USVDUVSJOH
   /PUBUJPOʢΰʔϧߏ଄Խදݱʣ
   ͦͷ໊ͷ௨Γɺΰʔϧ໨త
 ҙਤͷߏ଄͕ॻ͚Δ
   ΰʔϧ͸จ຺͕େࣄ
   จ຺͕ॻ͚Δ
   ΰʔϧ͸ୡ੒͢Δ΋ͷ
   ୡ੒ͷઓུ͕ॻ͚Δ
   ୡ੒ݟࠐΈͷࠜڌ͕ॻ͚Δ
   %$BTF
   (4/Λ༻͍ͨσΟϖϯμϏϦςΟʹؔ͢Δ
 ߹ҙͱ࿦ূͷํ๏࿦ 5
6. (4/ͷϊʔυͷछྨ 6
7. (4/ͷࣄྫ &VSPQFBO
   "FSPOBVUJDBM
   *OGPSNBUJPO
   4ZTUFN
   %BUBCBTF
   &"%
   4BGFUZ
   $BTF 
   Ϥʔϩούͷߤۭ؅੍γεςϜʹؔ͢Δ҆શ࿦ূ
   ๲େͳจॻͷಓ͠Δ΂తͳ໾ׂͱͯ͠׆༻
   .*43"
   (VJEFMJOFT
   GPS
   "VUPNPUJWF
   4BGFUZ
   "SHVNFOUT 
   ࣗಈंͷػೳ҆શن֨*40ͷΨΠυ
   Ұൠతʹίετ͕ߴ͘ͳΓ͕ͪͳػೳ҆શͷೝূ׆ಈͷޮ཰ԽΛ໨ࢦͯ͠׆༻
   ࣗಈंͷࣗಈӡస෼໺ͷ҆શن֨
   *401"4
   
   3PBE
   7FIJDMFT
   r
   4BGFUZ
   PG
   UIF
   JOUFOEFE
   GVODUJPOBMJUZ
   ҙਤ͢Δػೳͷ҆શੑʹؔ͢Δެ։࢓༷
   γφϦΦϕʔεͰͷ҆શੑͷอূͰ͋Δ͜ͱΛ໌ࣔ
   γφϦΦͷಋग़ઓུΛ໌ࣔ 7 (*1) https://www.eurocontrol.int/publication/ead-safety-case (*2) https://www.misra.org.uk/Publications/tabid/57/Default.aspx#label-gasa
8. 8 &VSPQFBO
   "FSPOBVUJDBM
   *OGPSNBUJPO
   4ZTUFN
   %BUBCBTF
   &"%
   4BGFUZ
   $BTF
   ʹؚ·ΕΔ(4/ͷྫ
9. 9 .*43"
   (VJEFMJOFT
   GPS
   "VUPNPUJWF
   4BGFUZ
   "SHVNFOUT
   ʹؚ·ΕΔ(4/ྫ Safety goals split by hazardous events to which they pertain
10. (4/ʹΑͬͯظ଴͞ΕΔޮՌ  ݐઃతͳٞ࿦Λଅਐ͢Δ
    ٞ࿦ͷߏ੒ཁૉͷڞ௨ೝ͕ࣝಘΒΕΔ
     ূڌʹجͮٞ͘࿦͕ଅਐ͞ΕΔ
    ໦ߏ଄ͷ຤୺͸ɺ٬؍తͳσʔλ͕ٻΊΒΕΔ
     ҆શੑʹ͍ͭͯͷ࿦ূߏங׆ಈΛޮ཰ԽͰ͖Δ
    ϞδϡʔϧԽͳͲπʔϧʹΑΔߏஙࢧԉ͕Մೳ
    ύλʔϯ΍ςϯϓϨʔτͳͲ࿦ূͷ࠶ར༻ੑ͕Մೳ
    ଞͷ੒Ռ෺ͱͷ࿈ܞ΍υΩϡϝϯτੜ੒ͳͲͷ
 ࣗಈԽ͕Մೳ 10
11. %$BTFͷ঺հ (4/Λ༻͍ͨγεςϜͷσΟϖϯμϏϦςΟʹؔ͢ Δ߹ҙܗ੒΍࿦ূͷํ๏࿦
    ߏஙͱ߹ҙܗ੒ϓϩηεͷΨΠυ
    εςʔΫϗϧμͷઃఆ͔Βɺ
 هड़ɺධՁΛ௨ͨ͡߹ҙܗ੒
 ΛؚΉ
    %$BTFจ๏
    ӡ༻࣌ͷ׆༻΋૝ఆͨ͠(4/ͷ֦ுΛؚΉ
    ͜Ε·Ͱʹ೥౓ʹ͸Ԇ΂ਓ͕ࢀՃ͢Δ
 ܭճͷ%$BTFΛֶͿϫʔΫγϣοϓΛ։࠵ 11
12. (4/%$BTFͷݚڀྫ ओுʹର͢Δ൓࿦ͷهड़ͱධՁ͕Մೳͳ֦ு
    ٞ࿦ֶΛԠ༻
    ҆શੑͷ࿦ূʹར༻͞ΕΔ࿦ূͷύλʔϯͷఏҊ
    هड़ͨ͠࿦ূʹجͮ͘৴༻౓ͷఆྔతධՁ
    ࿦ূͷࣗಈੜ੒
    ػցֶशΛؚΉγεςϜͷ҆શੑ΁ͷԠ༻
    %$BTFͷӡ༻࣌ͷͨΊͷ֦ுͷԠ༻ 12
13. ·ͱΊ (4/%$BTF͸ɺηʔϑςΟέʔεͳͲͷͨΊͷߏ ଄తͳදݱͰ͋Δ
    (4/%$BTF͸ɺΰʔϧ΍໨తɺҙਤͱ͍ͬͨ΋ͷ ͷߏ଄ͱ͍͏ɺैདྷͷιϑτ΢ΣΞͷϞσϦϯάݴޠ ͷείʔϓʹ͸ؚ·Εͳ͔ͬͨ΋ͷΛදݱͰ͖Δ
    ҉໧஌ͷՄࢹԽͱͯ͠ଟ͘׆༻͞Ε͍ͯΔ
    ྫɿϨϏϡʔه࿥ͷߏ଄తͳه࿥
    ྫɿγεςϜͷࢼݧͷ؍఺ͷهड़
    ࠓޙ͸"*ٕज़ͷීٴʹΑΓɺ҆શੑͷઆ໌΍࿦ূʹؔ ͢Δٕज़ͷ໾ׂ͸ΑΓେ͖͘ͳΔͱߟ͑ΒΕΔ 13