Toyota tested about 35 million miles at system level plus 11 million hours module level software testing nasa report p. Nhtsanasa study of unintended acceleration in toyota. Toyotas electronic throttle control system etcs source code is of. Technical assessment of toyota electronic throttle control. How is electronic throttle control system with intelligence lexus and toyota abbreviated. Toyotas electronic throttle control system etcs source code is of unreasonable quality. On its website, toyota has a webinar describing highlights of its electronic throttle control system. The goal of the study was to determine if there are design and implementation vulnerabilities in the toyota electronic throttle control system intelligent etcsi that could cause uas and whether those. Nhtsanasa reports show that toyota electronics are. Toyota air conditioning and climate control course 752. Due to system complexity which will be described and the many possible electronic hardware and software systems interactions, it is not realistic to attempt to prove that the etcsi cannot cause uas. A detailed electronic mechanism for sudden unintended acceleration r.
As a primary expert witness for the plaintiffs, the indepth analysis. Nhtsanasa reports show that toyota electronics are deficient can lead to unintended acceleration. Etcsi is a collection of components and features that was changed in the basic engine design when toyota switched from mechanical to electronic throttle control. A detailed electronic mechanism for sudden unintended. But nasa does not analyze espb2 software in its reports analysis is limited to. Safety and bywire systems blog on automotive safety. Analysis of toyota etcsi system hardware and software. Another expensive independent expert study paid for by toyota and used by the defense pdf file. In march 2010, nhtsa enlisted the support of nasa in analyzing the toyota. Nhtsas analysis indicated that these types of complaints generally do not. Note electronic throttle control system etcs may also be. Todays vehicles are sufficiently complex that no reasonable amount of analysis. Mike kirsch is a principal engineer in the nasa engineering and safety center.
Nhtsa report on toyota unintended acceleration investigation. Embedded software used to be lowlevel code wed bang together using c or assembler. A case study of toyota unintended acceleration and software safety. Toyotas etcsi open the throttle without driver input and without setting a.
Systems engineering approach to supporting the national. Toyota admits etcs has software bugs barr chapter regarding toyotas software bugs 3 2 a. Something that i find most annoying is that the areas where the embedded system hardware is. They only needed software experts to testify that bugs in software and hardware always exist and also that there was a fail safe. Voqs could not be found with the hardware and software testing performed. Technical assessment of toyota electronic throttle control safety. Toyotas etcsi electronic throttle control etc consists of a simplistic electromechanical hardware system controlled by an electronic control module ecm with sophisticated control and diagnostic. My overall point was that it is hard to judge the quality of their analysis. Random hardware and software faults are a fact of life. He served as the project manager for the nesc study to determine if there are design and implementation vulnerabilities in the. Full text of analysis of toyota etcsi system hardware and software. Toyota etcsi is an example of a safetycritical hard realtime system. Therefore, absence of proof that the etcsi has caused a ua does not vindicate the system. When it comes to software, there are going to be bugs, and that is the case not just with toyota but.
Toyotas electronic throttle control system intelligent etcsi see. Report of fatal crash nhtsanvs2011etcsr09, analysis of emc. We have evaluated your petition, and a summary of the analysis is presented in the enclosed. For my comments on that webinar, please see a previous blog posting. The ecm software formed the core of the technical investigation.
Angelo, chief quality officer north american quality task force. Nasa cant find unintended acceleration causes in toyotas. On the toyota ua case and the redefinition of product. When it comes to software, there are going to be bugs, and that is the case not just with toyota but with any software in the automotive industry and any. Exponent investigated whether toyota vehicles equipped with electronic throttle control technology could accelerate in an uncommanded.
Sudden acceleration, spaghetti software and trauma at the. The etcsi electronic throttle system uses electronics to sense and communicate commands to control the engine throttle, instead of the traditional mechanicalwire. Ebook analysis of toyota etcsi system hardware toyota. Toyota president lentz updates feds on recall and safety.
Nasa images solar system collection ames research center. Etcsi stands for electronic throttle control system with intelligence lexus and toyota. In a blog post yesterday unintended acceleration and other embedded software bugs, i wrote extensively on the report from nasas technical team regarding their analysis of the embedded software in toyotas etcsi system. Test scenarios were developed based on analysis of software and hardware. Analysis of toyota etcsi system hardware and software is almost 300 pages long, yet only 19. Unintended acceleration and other embedded software bugs. Using loopholes to reveal the marginal cost of regulation. A case study of toyota unintended acceleration and. Failure analysis associates exponent analysis of toyota etcs system hardware and software exponent failure analysis associates analysis of toyota. Accurate diagnosis and efficient repair depend on using the correct tools and information. Nasa engineers found no electronic flaws in toyota vehicles capable of.
889 400 1044 728 310 1129 1332 1615 814 713 845 972 693 1351 1107 153 311 404 301 1062 300 1173 1115 973 245 664 780 541 567 266 1109 571