1、raising standards worldwideNO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAWBSI Standards PublicationBS ISO 17894:2005Ships and marine technology Computer applications General principles forthe development and useof programmable electronicsystems in marine applicationsBS ISO 178
2、94:2005 BRITISH STANDARDNational forewordThis British Standard is the UK implementation of ISO 17894:2005.The standards listed in Clause 2 (normative references) include source documents for terms and definitions reproduced in Clause 3 and, in accordance with D.1.4 of the ISO/IEC Directives, Part 2
3、(2004), these references are informative. The UK committee would like to emphasize that this standard can be applied as a stand alone document and no other publication is indispensible to its application. However, the bibliography lists seven primary standards that are extensively cited in informati
4、ve Annex B and that these are helpful in the application of BS ISO 17894:2005.The UK participation in its preparation was entrusted to Technical Committee SME/32, Ships and marine technology - Steering committee.A list of organizations represented on this committee can be obtained on request to its
5、secretary.This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. BSI 2011ISBN 978 0 580 74561 4ICS 35.240.60; 47.020.99Compliance with a British Standard cannot confer immunity from legal obligations.This British St
6、andard was published under the authority of the Standards Policy and Strategy Committee on 31 July 2011.Amendments issued since publicationDate T e x t a f f e c t e dBS ISO 17894:2005Reference numberISO 17894:2005(E)ISO 2005INTERNATIONAL STANDARD ISO17894First edition2005-03-15Ships and marine tech
7、nology Computer applications General principles for the development and use of programmable electronic systems in marine applications Navires et technologies marines Applications informatiques Principes gnraux pour le dveloppement et lutilisation des systmes lectroniques programmables pour applicati
8、ons marines BS ISO 17894:2005ISO 17894:2005(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer per
9、forming the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this
10、PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central
11、 Secretariat at the address given below. ISO 2005 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at t
12、he address below or ISOs member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO 2005 All rights reservedBS ISO 17894:2005ISO 17894:2005(E)
13、 ISO 2005 All rights reserved iiiContents Page Foreword iv Introduction v 1 Scope 1 2 Conformance . 1 3 Normative references . 1 4 Terms and definitions. 2 5 Symbols and abbreviated terms 5 6 Use of this International Standard 5 7 Principles for marine PES 6 7.1 Intention for marine PES 6 7.2 Produc
14、t principles for marine PES 6 7.2.1 First principle 6 7.2.2 Second principle . 6 7.2.3 Third principle . 7 7.2.4 Fourth principle. 7 7.2.5 Fifth principle 7 7.2.6 Sixth principle . 7 7.2.7 Seventh principle 8 7.2.8 Eighth principle . 8 7.2.9 Ninth principle . 8 7.2.10 Tenth principle 8 7.2.11 Eleven
15、th principle . 9 7.3 Life cycle principles for marine PES. 9 7.3.1 General. 9 7.3.2 Twelfth principle 9 7.3.3 Thirteenth principle. 9 7.3.4 Fourteenth principle . 10 7.3.5 Fifteenth principle . 10 7.3.6 Sixteenth principle 11 7.3.7 Seventeenth principle. 11 7.3.8 Eighteenth principle 11 7.3.9 Ninete
16、enth principle 11 7.3.10 Twentieth principle . 12 Annex A (informative) Terms and concepts used in this International Standard 13 Annex B (informative) Guidance on the principles for marine PES 18 Annex C (informative) Guidance on the life cycle of marine PES . 39 Annex D (informative) Checklist for
17、 marine PES life cycle outputs 45 Annex E (informative) Application of the principles in the life cycle 57 Annex F (informative) Principles for marine PES 61 Bibliography . 63 BS ISO 17894:2005ISO 17894:2005(E) iv ISO 2005 All rights reservedForeword ISO (the International Organization for Standardi
18、zation) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to b
19、e represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization. International Standa
20、rds are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of technical committees is to prepare International Standards. Draft International Standards adopted by the technical committees are circulated to the member bodies for voting. Publication as an Inter
21、national Standard requires approval by at least 75 % of the member bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights. ISO 17894 w
22、as prepared by Technical Committee ISO/TC 8, Ships and marine technology, Subcommittee SC 10, Computer applications. BS ISO 17894:2005ISO 17894:2005(E) ISO 2005 All rights reserved vIntroduction Systems which include programmable electronic systems (PES) are not exact substitutes for the electromech
23、anical systems and/or crew tasks which they replace. A new technology is involved, which can provide opportunities for integration of traditional system components (including crew tasks) and more complex behaviour. This allows increases in efficiency and safety through improved monitoring, better si
24、tuational awareness on the bridge, etc. However, PES are complex products and, like all products, they can contain defects. These defects cannot be seen. Software does not respond to traditional engineering methods for the testing of soundness. The combination of complexity, replacement of a combina
25、tion of mechanical and crew functions with computer hardware and software, and industry practice in developing and maintaining marine PES leads to a wide range of potential defects which cannot be guarded against by prescriptive standards. The use of a PES in the management, monitoring or control of
26、 a ship may have several effects: potential to enhance the ability and efficiency of the crew; changes in the organization of work through the automation of lower-level tasks; integration of systems through use of several systems by one seafarer; shift in the role of the crew towards the management
27、of many linked, complex PES; shift of the crews perception of the ship to that presented by the interfaces of the PES; layers of embedded and/or application software interposed between the crew and the ship; physical interconnection of ship systems through the use of computer networks. The overall e
28、ffect of the use of PES is that the ship becomes one total system of inter-linked PES and crew which work together to fulfil the operators business goals for the ship. In order for this total system to be dependable, both the design of the PES and the management of its use have to support the safe a
29、nd effective performance of the crew as a critical component of the total system. Such a human-centred approach has to be based on a thorough knowledge of the particular skills, working environment and tasks of the crew using the PES. The total system concept is described further in A.2. In the trad
30、itional approach to maritime safety, ship systems are built to and operated against precise, prescriptive standards. These standards were developed in response to feedback about incidents or risky behaviour of previous ship systems. This approach is appropriate for relatively simple systems in a tim
31、e of slow technical innovation. However, suppliers and operators nowadays want to innovate with complex, new solutions. In addition, the base technologies for PES are evolving very quickly. The assurance of dependability in this case cannot rely on knowledge of previous systems. The solution is for
32、the developer and operator to assess the risks from and to the particular ship, its systems, crew and its operating philosophy, and to address these specific risks in the design and operation of the PES. Components of the system can then either be re-designed or operated in such a way as to minimize
33、 these risks. The quality of construction, operation and maintenance of the system to be sure of the achievement of a required level of dependability of the PES is also defined. This International Standard is based on best practice in PES development as stated in existing marine, electrical and elec
34、tronic, IT, ergonomics and safety standards. It is not intended to replace any of these standards. It presents a synoptic view of the requirements of these standards as a framework of principles for the development of dependable PES. BS ISO 17894:2005BS ISO 17894:2005INTERNATIONAL STANDARD ISO 17894
35、:2005(E) ISO 2005 All rights reserved 1Ships and marine technology Computer applications General principles for the development and use of programmable electronic systems in marine applications 1 Scope This International Standard provides a set of mandatory principles, recommended criteria and assoc
36、iated guidance for the development and use of dependable marine programmable electronic systems for shipboard use. It applies to any shipboard equipment containing programmable elements which may affect the safe or efficient operation of the ship. It contains information for all parties involved in
37、the specification, operation, maintenance and assessment of such systems. The principles and guidance in the document are largely based on requirements in national and International Standards. The source standards and their contribution to this International Standard are presented in the bibliograph
38、y. NOTE This International Standard does not directly address performance, test or test results requirements associated with specific types of equipment or functions. In such instances existing application or component standards may be applied, e.g. IEC 60945, in respect of navigation and radio-comm
39、unications equipment. The responsible body (e.g. National Administration, Classification Society or other contracted party) will determine the applicability of this International Standard, and its specific requirements where any potential conflict arises. 2 Conformance An organization demonstrating
40、compliance to this International Standard shall provide evidence of how its system fulfils the principles stated in Clause 7. The evidence shall be to the satisfaction of an independent assessor. This can be achieved through compliance with the criteria given in Clause 7 or by an alternative means w
41、hich is to the satisfaction of an independent assessor. NOTE The criteria for assessment are given in an itemized list below each principle in Clause 7. 3 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the ed
42、ition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO 9000:2000, Quality management systems Fundamentals and vocabulary ISO 9241-2, Ergonomic requirements for office work with visual display terminals (VDTs) Part 2: Guidanc
43、e on task requirements ISO 9241-10, Ergonomic requirements for office work with visual display terminals (VDTs) Part 10: Dialogue principles ISO 9241-11, Ergonomic requirements for office work with visual display terminals (VDTs) Part 11: Guidance on usability ISO 10007, Quality management systems G
44、uidelines for configuration management BS ISO 17894:2005ISO 17894:2005(E) 2 ISO 2005 All rights reservedISO 13407, Human-centred design processes for interactive systems ISO/IEC 2382-1, Information technology Vocabulary Part 1: Fundamental terms ISO/IEC 9126-1, Software engineering Product quality P
45、art 1: Quality model ISO/IEC 12207, Information technology Software life cycle processes ISO/IEC 12207:1995/Amd.1:2002, Information technology Software life cycle processes Amendment 1 ISO/IEC 12207:1995/Amd.2:2004, Information technology Software life cycle processes Amendment 2 IEC 61069-1, Indust
46、rial-process measurement and control Evaluation of system properties for the purpose of system assessment Part 1: General considerations and methodology IEC 61508-4, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 4: Definitions and abbreviations IEEE 6
47、10.12, Standard glossary of software engineering terminology BS 4778-3.1, Quality vocabulary. Availability, reliability and maintainability terms. Guide to concepts and related definitions BS 4778-3.2, Quality vocabulary. Availability, reliability and maintainability terms. Glossary of international
48、 terms 4 Terms and definitions For the purposes of this document, the following terms and definitions apply. The following referenced definitions are stated here since there is some inconsistency between the listed standards and also because the listed definitions are used frequently in this documen
49、t. Annex A elaborates the concepts behind key terms used in this International Standard. 4.1 context of use the users, goals, tasks, equipment (hardware, software and materials), and the physical and social environments in which a product is used ISO 9241-11 NOTE See A.2 for an elaboration of this term as used in this International Standard. 4.2 dangerous failure failure which has the potential to put the safety-related system into a hazardous or fail-to-function state IEC 61508-4 NOT
