为RISC-V在自动驾驶安全认证中提供系统性框架与落地路径
RISC-V Functional Safety for Autonomous Automotive Systems: An Analytical Framework and Research Roadmap for ML-Assisted Certification
- 构建以认证经济为核心的分析框架,聚焦可验证架构设计
- 提出多类AI技术辅助安全流程,提升诊断覆盖率与案例生成效率
- 适合关注汽车芯片安全认证的工程师与研究者
RISC-V正成为汽车级嵌入式计算的可行平台,近期已通过ISO 26262 ASIL-D认证,具备部署于自动驾驶系统的能力。然而,汽车功能安全本质上是认证问题,而非处理器本身问题。主要成本源于诊断覆盖率分析、工具链认证、故障注入实验、安全论证生成,以及满足ISO 26262、ISO 21448(SOTIF)和ISO/SAE 21434等标准的要求。本文分析RISC-V在汽车功能安全中的作用,重点关注指令集开放性、形式化可验证性、自定义扩展可控性、调试透明性及厂商无关认证等优势。结合自动驾驶安全需求,映射出锁步执行、安全岛、混合关键性隔离与安全调试等架构挑战。不追求单一算法突破,而是提出以认证经济学为核心目标的分析框架与研究路线图。同时探讨多种机器学习方法的应用:如大模型辅助生成FMEDA、知识图谱自动化安全案例、强化学习优化故障注入、图神经网络提升诊断覆盖率,助力认证流程。核心观点是:最成功的结果不是更快的核,而是可获得ASIL-D认证的完整可信赖RISC-V平台。
原文摘要 · Abstract (English)
RISC-V is emerging as a viable platform for automotive-grade embedded computing, with recent ISO 26262 ASIL-D certifications demonstrating readiness for safety-critical deployment in autonomous driving systems. However, functional safety in automotive systems is fundamentally a certification problem rather than a processor problem. The dominant costs arise from diagnostic coverage analysis, toolchain qualification, fault injection campaigns, safety-case generation, and compliance with ISO 26262, ISO 21448 (SOTIF), and ISO/SAE 21434. This paper analyzes the role of RISC-V in automotive functional safety, focusing on ISA openness, formal verifiability, custom extension control, debug transparency, and vendor-independent qualification. We examine autonomous driving safety requirements and map them to RISC-V architectural challenges such as lockstep execution, safety islands, mixed-criticality isolation, and secure debug. Rather than proposing a single algorithmic breakthrough, we present an analytical framework and research roadmap centered on certification economics as the primary optimization objective. We also discuss how selected ML methods, including LLM-assisted FMEDA generation, knowledge-graph-based safety case automation, reinforcement learning for fault injection, and graph neural networks for diagnostic coverage, can support certification workflows. We argue that the strongest outcome is not a faster core, but an ASIL-D-ready certifiable RISC-V platform.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。