Extension of SysML for functional hazard analysis
A method is disclosed of using Systems Modeling Language (SysML) for a hazard analysis description that describes a potential functional failure of a physical system. The method includes describing the potential functional failure of the physical system in SysML using a first type of custom SysML element; and describing at least one potential cause and at least one potential effect of the potential functional failure with respective instances of a second type of custom SysML element, wherein the first type of custom SysML element has a different SysML metaclass than the second type of custom SysML element. A method of using SysML for a hazard analysis description and a system for using SysML for a hazard analysis description are also disclosed.
1 . A method of using Systems Modeling Language (SysML) for a hazard analysis description that describes a potential functional failure of a physical system, comprising:
describing the potential functional failure of the physical system in SysML using a first type of custom SysML element;
describing at least one potential cause and at least one potential effect of the potential functional failure with respective instances of a second type of custom SysML element; and
linking the at least one cause and the at least one effect to the potential functional failure using respective instances of a third type of custom SysML element that represents causation;
wherein the first type of custom SysML element has a different SysML metaclass than the second type of custom SysML element.
2 . The method of claim 1 , wherein the third type of custom SysML element has a different SysML metaclass than the first type of custom SysML element and the second type of custom SysML element.
3 . The method of claim 2 , wherein:
the metaclass of the first type of custom SysML element is class;
the metaclass of the second type of custom SysML element is activity; and
the metaclass of the third type of custom SysML element is dependency.
4 . The method of claim 2 , comprising:
describing in SysML each of one or mitigations that can be implemented to mitigate an effect or likelihood of the potential functional failure; and
linking each of the one or more mitigations to the potential functional failure using a respective fourth type of custom SysML element.
5 . The method of claim 4 , wherein:
the fourth type of custom SysML element and the third type of SysML element have a same SysML metaclass.
6 . The method of claim 4 , wherein each of the mitigations is described using one or more native, non-custom SysML element types.
7 . The method of claim 4 , comprising:
describing a potential system level effect of the potential functional failure using a fifth type of custom SysML element;
wherein the potential system level effect is linked to and is a higher level effect than a particular one of the at least one potential effects; and
wherein the potential system level effect is linked to the particular one of the at least one potential effects using an instance of the third type of custom SysML element.
8 . A method of using Systems Modeling Language (SysML) for a hazard analysis description that describes a potential functional failure of a physical system, comprising:
describing the potential functional failure of the physical system in SysML using a first type of SysML element; and
describing at least one potential cause and at least one potential effect of the potential functional failure with respective instances of a second type of SysML element; and
linking the at least one cause and the at least one effect to the potential functional failure using respective instances of a third type of SysML element that represents causation; wherein the first type of SysML element has a different SysML metaclass than the second type of SysML element; and
wherein the third type of SysML element has a different SysML metaclass than the first type of SysML element and the second type of SysML element.
9 . The method of claim 8 , wherein:
the metaclass of the first type of SysML element is class;
the metaclass of the second type of SysML element is activity; and
the metaclass of the third type of SysML element is dependency.
10 . The method of claim 8 , comprising:
describing in SysML each of one or mitigations that can be implemented to mitigate an effect or likelihood of the potential functional failure; and
linking each of the one or more mitigations to the potential functional failure using a respective fourth type of SysML element.
11 . The method of claim 10 , wherein:
the fourth type of SysML element and the third type of SysML element have a same SysML metaclass.
12 . The method of claim 10 , comprising:
describing a potential system level effect of the potential functional failure using a fifth type of SysML element;
wherein the potential system level effect is linked to and is a higher level effect than a particular one of the at least one potential effects; and
wherein the potential system level effect is linked to the particular one of the at least one potential effects using an instance of the third type of SysML element.
13 . A system for using Systems Modeling Language (SysML) for a hazard analysis description that describes a potential functional failure of a physical system, comprising:
processing circuitry operatively connected to memory and configured to:
describe the potential functional failure of the physical system in SysML using a first type of custom SysML element; and
describe at least one potential cause and at least one potential effect of the potential functional failure with respective instances of a second type of custom SysML element; and
link the at least one cause and the at least one effect to the potential functional failure using respective instances of a third type of custom SysML element that represents causation;
wherein the first type of custom SysML element has a different SysML metaclass than the second type of custom SysML element.
14 . The system of claim 13 , wherein the third type of custom SysML element has a different SysML metaclass than the first type of custom SysML element and the second type of custom SysML element.
15 . The system of claim 14 , wherein:
the metaclass of the first type of custom SysML element is class;
the metaclass of the second type of custom SysML element is activity; and
the metaclass of the third type of custom SysML element is dependency.
16 . The system of claim 14 , wherein the processing circuitry is configured to:
describe in SysML each of one or mitigations that can be implemented to mitigate an effect or likelihood of the potential functional failure; and
link each of the one or more mitigations to the potential functional failure using a respective fourth type of custom SysML element;
wherein the fourth type of custom SysML element and the third type of SysML element have a same SysML metaclass.
17 . The system of claim 16 , wherein:
the processing circuitry is configured to describe a potential system level effect of the potential functional failure using a fifth type of custom SysML element;
the potential system level effect is linked to and is a higher level effect than a particular one of the at least one potential effects; and
the potential system level effect is linked to the particular one of the at least one potential effects using an instance of the third type of custom SysML element.