统一三大AI治理标准,实现智能交通系统合规自动化。
UGAF-ITS: A Standards Harmonization Framework and Validation Tool for Multi-Framework AI Governance in Distributed Intelligent Transportation Systems
- 将三套AI治理标准合并为12项统一管控措施,通过五阶段映射方法实现
- 三层次部署下平均覆盖91.7%框架要求,证据量减少45.9%,80%文件通用
- 开源工具支持可复现验证,适合需多标准合规的智能交通系统开发者
部署智能交通系统的组织面临治理碎片化:ISO/IEC 42001要求可认证管理体系,欧盟《人工智能法案》自2026年8月起强制实施高风险义务,而NIST AI风险管理框架提供自愿实践结构。本文提出UGAF-ITS,一个标准统一框架,通过可复现的五阶段交叉映射法,将三个规范中的154项义务整合为12项统一控制措施,覆盖八个治理领域。采用三层运行模型,将每项控制分配至车辆、边缘或云层执行与留证。20个版本化的证据基底支持跨三框架的单一审计包,内容不重复。通过开源治理引擎在四种架构迥异的ITS场景中评估,引擎编码完整交叉映射目录并执行八项合规计算。三层次部署实现91.7%平均范围覆盖率,证据减少45.9%,具备双向追溯性,80%的文档同时满足三框架需求。部分部署按预期收缩,证据缩减率在25%至50%之间。孤立基准通过逐文档枚举,在运行时由工具计算。结果揭示了该统一目录在架构变化下的结构性特征,但未验证实际合规准备度,仍需从业者外部评估。工具、场景及所有结果均已公开,供独立复现。
原文摘要 · Abstract (English)
Organizations deploying AI-enabled Intelligent Transportation Systems face fragmented governance: ISO/IEC~42001 demands a certifiable management system, the EU AI Act imposes binding high-risk obligations from August~2026, and the NIST AI Risk Management Framework structures voluntary practice. This paper introduces UGAF-ITS, a standards harmonization framework that consolidates 154 source obligations from the three instruments into 12 unified controls across eight governance domains through a reproducible five-phase crosswalk methodology. A three-tier operating model allocates each control to the vehicle, edge, or cloud tier where enforcement and defensible evidence production are feasible. An evidence backbone of 20 versioned artifacts supports a single audit package across all three frameworks without duplicating content. We evaluate UGAF-ITS through an open-source governance engine applied to four architecturally distinct ITS deployment scenarios. The engine encodes the complete crosswalk catalog and executes eight compliance computations. Three-tier deployments achieve 91.7\% average scoped framework coverage with 45.9\% evidence reduction, complete bidirectional traceability, and 80\% of artifacts serving all three frameworks simultaneously. Partial deployments contract predictably, with reduction holding between 25\% and 50\% across archetypes. The siloed baseline is enumerated document by document and computed by the tool at run time. These results establish structural properties of the harmonized catalog under architectural variation. They do not establish operational compliance readiness, which external assessment with practitioners has yet to test. The tool, scenarios, and all reported results are publicly available for independent replication.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。