Overview
ISO/TR 4804:2020 - "Road vehicles - Safety and cybersecurity for automated driving systems - Design, verification and validation" - provides a technical framework and guidance for developing, verifying and validating automated driving systems (ADS) with SAE J3016:2018 Level 3 and Level 4 capabilities. The report emphasizes safety-by-design and cybersecurity-by-design, describes dependability attributes, and closes the loop with verification and validation (V&V) methods to demonstrate a positive risk balance and avoidance of unreasonable risk.
Key topics and technical scope
- Safety and cybersecurity principles: guidance on achieving a positive risk balance, avoiding unreasonable risk, and integrating safety and cybersecurity objectives.
- Dependability-driven development: deriving ADS capabilities from dependability domains (reliability, availability, maintainability, safety, security - RAMSS).
- Standards alignment: references and alignment with related standards such as ISO/PAS 21448 (SOTIF), ISO 26262 (functional safety) and ISO/SAE 21434 (automotive cybersecurity).
- ADS capabilities and elements: discussion of capabilities, minimal risk conditions and maneuvers, elements to implement capabilities, and a generic logical architecture.
- Verification & validation (V&V): end-to-end V&V scope and steps, including defining test goals, test design techniques, platforms, and strategies to address key challenges.
- Key V&V challenges:
- Statistical demonstration of risk reduction without driver intervention
- System safety for driver interaction and takeover maneuvers
- Handling unknown or novel scenarios (corner cases)
- Validation across multiple configurations and variants
- Validation of machine learning–based subsystems
- Testing methods: simulation types and validation of simulation, scenario-based testing, equivalence classes, and quantity/quality of testing.
- Sub-system verification: perception, localization (GNSS), sensor fusion, interpretation/prediction, motion control, HMI and user-state monitoring.
- Field operation: traceability, configuration/change management, regression prevention, and continuous cybersecurity monitoring and updates.
- Informative annexes: development examples, use of deep neural networks, principles of safety/cybersecurity, and a proposed standards list.
Practical applications - who uses this standard
- OEMs and Tier‑1/Tier‑2 suppliers designing Level 3/4 ADS
- System architects, safety and cybersecurity engineers implementing safety-by-design and security-by-design
- V&V teams, test labs and simulation providers developing test strategies and scenario libraries
- Regulators and compliance teams evaluating demonstrations of risk mitigation
- Startups and mobility service providers aligning product development with accepted technical guidance
Related standards (for reference)
- ISO/PAS 21448 (SOTIF) - Safety of the intended functionality
- ISO 26262 series - Functional safety for road vehicles
- ISO/SAE 21434 - Automotive cybersecurity
Keywords: ISO TR 4804:2020, automated driving systems, ADS, SAE Level 3, SAE Level 4, safety-by-design, cybersecurity-by-design, verification and validation, V&V, simulation, ISO 26262, ISO/PAS 21448, ISO/SAE 21434.