china-l3-fusa-sotif

It is a Chinese national standard (GB/T, working group draft) defining functional safety and SOTIF technical requirements for L3 conditional autonomous driving systems. It is the first standard worldwide to systematically integrate FuSa and SOTIF requirements into a unified framework.

The standard unifies safety goals, applies joint risk analysis methods, integrates the V-model development process, and provides a combined safety argumentation framework. It references GB/T 34590-2022 for functional safety and GB/T 43267-2023 for SOTIF as base standards.

MRM must trigger on system faults, ODD exit, unresponsive drivers, or severe sensor degradation, with activation latency under 500ms. Execution requires comfort-limited deceleration, safe stop location selection, hazard lights, parking brake, and eCall triggering in severe cases.

The standard requires collision frequency not exceeding 10^-4 per hour and a minimum SOFIL level of 4E. Safety must be demonstrated as no lower than a competent and careful human driver, supported by statistical argumentation from naturalistic driving data.

The standard lists 10 highway scenarios including cut-in vehicles, tunnel lighting transitions, and construction zones, plus 10 urban scenarios including jaywalking pedestrians, intersection conflicts, and GPS multipath. Each scenario requires functional safety analysis and verification testing.