Control-in-the-loop Model Based Safety Analysis

Indeed, the more complex the system is the more switching mechanisms appears in the controlled process (due to fault tolerance, mission phase changes, maintenance based on autotest …). These switching mechanisms are handled by functions implemented into components of the control. Therefore, the achievement of these mechanisms depends on the ability of the control components to perform them. Hence, the failure of the control components may lead to the nonachievement of these mechanisms, what may have a significant influence on the results of a qualitative MBSA. Moreover, the formalism for performing MBSA are generally not made for taking into account the loss of these switching mechanisms.