operational design domain
{{Other uses of|ODD}}
{{automation}}
Operational design domain (ODD) is a term for a particular operating context for an automated system, often used in the field of autonomous vehicles. The context is defined by a set of conditions, including environmental, geographical, time of day, and other conditions. For vehicles, traffic and roadway characteristics are included. Manufacturers use ODD to indicate where/how their product operates safely. A given system may operate differently according to the immediate ODD.{{cite book |last1=Lee |first1=Chung Won |last2=Nayeer |first2=Nasif |last3=Garcia |first3=Danson Evan |last4=Agrawal |first4=Ankur |last5=Liu |first5=Bingbing |title=2020 IEEE Intelligent Vehicles Symposium (IV) |chapter=Identifying the Operational Design Domain for an Automated Driving System through Assessed Risk |date=October 2020 |pages=1317–1322 |doi=10.1109/IV47402.2020.9304552 |isbn=978-1-7281-6673-5 |s2cid=231599295 |chapter-url=https://ieeexplore.ieee.org/document/9304552}}
The concept presumes that automated systems have limitations.{{cite book |last1=Erz |first1=Jannis |last2=Schütt |first2=Barbara |last3=Braun |first3=Thilo |last4=Guissouma |first4=Houssem |last5=Sax |first5=Eric |title=2022 IEEE International Systems Conference (SysCon) |chapter=Towards an Ontology That Reconciles the Operational Design Domain, Scenario-based Testing, and Automated Vehicle Architectures |date=April 2022 |pages=1–8 |doi=10.1109/SysCon53536.2022.9773840|isbn=978-1-6654-3992-3 |s2cid=248850678 }} Relating system function to the ODD it supports is important for developers and regulators to establish and communicate safe operating conditions. Systems should operate within those limitations. Some systems recognize the ODD and modify their behavior accordingly. For example, an autonomous car might recognize that traffic is heavy and disable its automated lane change feature.
ODD is used for cars, for ships,{{cite journal |last1=Yamada |first1=Tomoaki |last2=Sato |first2=Makoto |last3=Kuranobu |first3=Rikiya |last4=Watanabe |first4=Ryo |last5=Itoh |first5=Hiroko |last6=Shiokari |first6=Megumi |last7=Yuzui |first7=Tomohiro |title=Evaluation of effectiveness of the STAMP / STPA in risk analysis of autonomous ship systems |journal=Journal of Physics: Conference Series |date=1 July 2022 |volume=2311 |issue=1 |pages=012021 |doi=10.1088/1742-6596/2311/1/012021|s2cid=251344689 |doi-access=free |bibcode=2022JPhCS2311a2021Y }} trains,{{cite journal |last1=Meng |first1=Zicong |last2=Tang |first2=Tao |last3=Wei |first3=Guodong |last4=Yuan |first4=Lei |title=Analysis of ATO System Operation Scenarios Based on UPPAAL and the Operational Design Domain |journal=Electronics |date=January 2021 |volume=10 |issue=4 |pages=503 |doi=10.3390/electronics10040503 |language=en |issn=2079-9292 |doi-access=free }} agricultural robots,{{cite journal |last1=Krank |first1=Joshua |title=Robo-Crop: The Imminence of Autonomous Technology in Agriculture |journal=Drake Journal of Agricultural Law |date=2020 |volume=25 |pages=473 |url=https://heinonline.org/HOL/LandingPage?handle=hein.journals/dragl25&div=30}} and other robots.
Definitions
Various regulators have offered definitions of related terms:
class="wikitable" | ||
Definition | Source | |
---|---|---|
"operating conditions under which a given driving automation system ... or feature thereof is specifically designed to function" | ISO/TS 14812:2022(en), 3.7.3.2{{cite ISO standard |csnumber=79779 |title=ISO/TS 14812:2022, Intelligent transport systems — Vocabulary | section=3.7.3.2 |page= |date=2022 |publisher=ISO |access-date=11 June 2023}} |
"operating conditions under which a given automated driving system ... or feature thereof is specifically designed to function, including, but not limited to, environmental, geographical, and time-of-day restrictions, and/or the requisite presence or absence of certain traffic or roadway characteristics" | ISO/TR 4804:2020(en), 3.37{{cite ISO standard |csnumber=80363 |title=ISO/TR 4804:2020, Road vehicles — Safety and cybersecurity for automated driving systems — Design, verification and validation | section=3.22 |page= |date=2020 |publisher=ISO |access-date=11 June 2023}} |
"operating conditions under which a given driving automation system or feature thereof is specifically designed to function, including, but not limited to, environmental, geographical, and time-of-day restrictions, and/or the requisite presence or absence of certain traffic or roadway characteristics" | ISO 34501:2022(en), 3.26{{cite ISO standard |csnumber=78950 |title=ISO 34501:2022, Road vehicles — Test scenarios for automated driving systems — Vocabulary | section=3.26 |page= |date=2022 |publisher=ISO |access-date=11 June 2023}} |
"specific conditions under which a given driving automation system is designed to function" | ISO 21448:2022(en), 3.21{{cite ISO standard |csnumber=77490 |title=ISO 21448:2022, Road vehicles — Safety of the intended functionality | section=3.21 |page= |date=2022 |publisher=ISO |access-date=11 June 2023}} |
"operating conditions under which a given driving automation system or feature thereof is specifically designed to function" | BSI PAS 1883{{cite web |title=PAS 1883:2020 |url=https://www.bsigroup.com/globalassets/localfiles/en-gb/cav/pas1883.pdf |publisher=BSI Group |access-date=11 June 2023}} | |
"set of environments and situations the item is to operate within" | ANSI/UL 4600{{cite book |last1=Peleska |first1=Jan |last2=Haxthausen |first2=Anne E. |last3=Lecomte |first3=Thierry |chapter=Standardisation Considerations for Autonomous Train Control|title=Leveraging Applications of Formal Methods, Verification and Validation. Practice |series=Lecture Notes in Computer Science |date=2022 |volume=13704 |pages=286–307 |doi=10.1007/978-3-031-19762-8_22 |publisher=Springer Nature Switzerland |isbn=978-3-031-19761-1 |language=en|doi-access=free }} | |
"environmental, geographic, time-of-day, traffic, infrastructure, weather and other conditions under which an automated driving system is specifically designed to function" | Global Forum for Road Traffic Safety (WP.1) resolution on the deployment of highly and fully automated vehicles in road traffic{{cite web |title=Resolution on the Deployment of Highly and Fully Automated Vehicles in Road Traffic {{!}} UNECE |url=https://unece.org/transport/publications/resolution-deployment-highly-and-fully-automated-vehicles-road-traffic |website=unece.org |publisher=UNECE |access-date=11 June 2023 |date=September 2018}} | |
"For the assessment of the vehicle safety, the vehicle manufacturers should document the [ODD] available on their vehicles and the functionality of the vehicle within the prescribed [ODD]. The [ODD] should describe the specific conditions under which the automated vehicle is intended to drive in the automated mode. The [ODD] should include the following information at a minimum: roadway types; geographic area; speed range; environmental conditions (weather as well as day/night time); and other domain constraints." | Revised Framework document on automated/autonomous vehicles (WP.29){{cite web |title=Framework Document for Automated/Autonomous Vehicles (UPDATED) {{!}} UNECE |url=https://unece.org/info/publications/pub/365097 |website=unece.org |publisher=UNECE |access-date=11 June 2023 |date=February 2022}} | |
An "automated lane keeping system defines the specific operating conditions (e.g., environmental, geographic, time-of-day, traffic, infrastructure, speed range, weather, and other conditions) within the boundaries fixed by this regulation under which the automated lane keeping system is designed to operate without any intervention by the driver." | UN Regulation No 157 – Uniform provisions concerning the approval of vehicles with regards to Automated Lane Keeping Systems [2021/389]{{CELEX|42021X0389|text=UN Regulation No 157}} | |
An ODD is defined in terms of physical infrastructure, operational constraints, objects, connectivity, environmental conditions, and zones.
Physical infrastructure includes roadway types, surfaces, edges, and geometry. Operational constraints include speed limits and traffic conditions. Environmental conditions include weather, illumination, etc. Zones include regions, states, school areas, and construction sites. |US Department of Transportation report{{cite web |last1=Thorn |first1=Eric |last2=Kimmel |first2=Shawn C. |last3=Chaka |first3=Michelle |date=1 September 2018 |title=A Framework for Automated Driving System Testable Cases and Scenarios |url=https://rosap.ntl.bts.gov/view/dot/38824 |access-date=11 June 2023 |language=English}} | ||
'Operational design Domain ('ODD')' means operating conditions under which a given ADS is specifically designed to function, including, but not limited to, environmental, geographical, and time-of-day restrictions and/or the requisite presence or absence of specific traffic or roadway characteristics.
|EU Commission Implementing Regulation (EU) 2022/1426{{CELEX|32022R1426|text=Commission Implementing Regulation (EU) 2022/1426}} |
Examples
In 2022, Mercedes-Benz announced a product with an ODD of Level 3 autonomous driving at 130 km/h.{{cite news |last1=Rocco |first1=Nicolas La |title=Level-3-Fahren mit 130 km/h: Mercedes gestaltet nächste ODD für Drive Pilot aus |url=https://www.computerbase.de/2022-08/level-3-fahren-mit-130-km-h-mercedes-gestaltet-naechste-odd-fuer-drive-pilot-aus/ |access-date=11 June 2023 |work=ComputerBase |date=12 August 2022 |language=de}}