重新思考自治系统的更高信任和道德保障的认证
Rethinking Certification for Higher Trust and Ethical Safeguarding of Autonomous Systems
摘要：
随着软件的复杂性日益增加，渗透到自动驾驶等关键领域，这些系统的工程设计需要重新思考。预计自动驾驶将继续逐步取代所有关键驾驶功能，这增加了自动驾驶系统认证的复杂性。作为回应，认证机构已经开始引入自动驾驶汽车及其软件的认证策略。但是，即使有了这些新方法，认证程序也不能完全跟上未来自治系统的动态性和不可预测性，因此可能不一定能保证遵守对这些系统的所有要求。在本文中，我们确定了一些问题，提出的认证策略，这可能会影响系统的实质性。例如，我们强调，对不断变化的系统中发生的软件变化缺乏充分的反映，或者对管理协调行动所需的系统合作支持不足。其他的缺点涉及到授予认证的狭隘焦点，忽略了诸如自治软件系统的道德行为等方面。本文的贡献有三个方面。首先，我们讨论了需要修改自动驾驶系统当前认证流程的动机。其次，我们分析了当前的国际标准中使用的认证过程中的要求，来自动态的软件生态系统和自治系统本身的要求。第三，我们概述了一个概念，将缺失的部分纳入认证程序。
英文摘要：
With the increasing complexity of software permeating critical domains such as autonomous driving, new challenges are emerging in the ways the engineering of these systems needs to be rethought. Autonomous driving is expected to continue gradually overtaking all critical driving functions, which is adding to the complexity of the certification of autonomous driving systems. As a response, certification authorities have already started introducing strategies for the certification of autonomous vehicles and their software. But even with these new approaches, the certification procedures are not fully catching up with the dynamism and unpredictability of future autonomous systems, and thus may not necessarily guarantee compliance with all requirements imposed on these systems. In this paper, we identified a number of issues with the proposed certification strategies, which may impact the systems substantially. For instance, we emphasize the lack of adequate reflection on software changes occurring in constantly changing systems, or low support for systems' cooperation needed for the management of coordinated moves. Other shortcomings concern the narrow focus of the awarded certification by neglecting aspects such as the ethical behavior of autonomous software systems. The contribution of this paper is threefold. First, we discuss the motivation for the need to modify the current certification processes for autonomous driving systems. Second, we analyze current international standards used in the certification processes towards requirements derived from the requirements laid on dynamic software ecosystems and autonomous systems themselves. Third, we outline a concept for incorporating the missing parts into the certification procedure.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
