Railway collision risk analysis due to obstacles

Similar documents
Post impact trajectory of vehicles at rural intersections

Determining Occurrence in FMEA Using Hazard Function

Pedestrian traffic flow operations on a platform: observations and comparison with simulation tool SimPed

D1.2 REPORT ON MOTORCYCLISTS IMPACTS WITH ROAD INFRASTRUCTURE BASED OF AN INDEPTH INVESTIGATION OF MOTORCYCLE ACCIDENTS

The risk assessment of ships manoeuvring on the waterways based on generalised simulation data

Reduction of Speed Limit at Approaches to Railway Level Crossings in WA. Main Roads WA. Presenter - Brian Kidd

Crash Patterns in Western Australia. Kidd B., Main Roads Western Australia Willett P., Traffic Research Services

Queue analysis for the toll station of the Öresund fixed link. Pontus Matstoms *

Assessment of retaining levels of safety barriers

EFFICIENCY OF TRIPLE LEFT-TURN LANES AT SIGNALIZED INTERSECTIONS

Measuring Heterogeneous Traffic Density

ESTIMATION OF THE DESIGN WIND SPEED BASED ON

Hydraulic and Economic Analysis of Real Time Control

A Method Quantitatively Evaluating on Technical Progress of Students in Ship Handling Simulator Training ABSTRACT

ROUNDABOUT CAPACITY: THE UK EMPIRICAL METHODOLOGY

The Effect of Pavement Marking on Speed. Reduction in Exclusive Motorcycle Lane. in Malaysia

AUSTRIAN RISK ANALYSIS FOR ROAD TUNNELS Development of a new Method for the Risk Assessment of Road Tunnels

A Hare-Lynx Simulation Model

On-Road Parking A New Approach to Quantify the Side Friction Regarding Road Width Reduction

Geometric designs for Safe Highways. Dr. Manoj M. Asst. Professor Department of Civil Engineering IIT Delhi

Why We Should Use the Bullpen Differently

Traffic circles. February 9, 2009

Relative safety of alternative intersection designs

Calculation of Trail Usage from Counter Data

Why do we need checklists?

Effects of Geometry on Speed Flow Relationships for Two Lane Single Carriageway Roads Othman CHE PUAN 1,* and Nur Syahriza MUHAMAD NOR 2

Road design and Safety philosophy, 1 st Draft

Quantifying the Bullwhip Effect of Multi-echelon System with Stochastic Dependent Lead Time

ITARDA INFORMATION. No.128. Special feature

Traffic Parameter Methods for Surrogate Safety Comparative Study of Three Non-Intrusive Sensor Technologies

3.1 TRAFFIC CALMING PROCESS SUMMARY

An approach for optimising railway traffic flow on high speed lines with differing signalling systems

Traffic Impact Study. Westlake Elementary School Westlake, Ohio. TMS Engineers, Inc. June 5, 2017

Safety and accident prevention plan in Burgos

Title: 4-Way-Stop Wait-Time Prediction Group members (1): David Held

MICROSIMULATION USING FOR CAPACITY ANALYSIS OF ROUNDABOUTS IN REAL CONDITIONS

SUMMARY OF SAFETY INVESTIGATION REPORT

Safety assessments for Aerodromes (Chapter 3 of the PANS-Aerodromes, 1 st ed)

PLACEMENT OF SIGNS RECOMMENDED PRACTICES SUB-SECTION

New metro line in Turin: an analysis of the impacts on road traffic accidents and local mobility

DOI /HORIZONS.B P23 UDC : (497.11) PEDESTRIAN CROSSING BEHAVIOUR AT UNSIGNALIZED CROSSINGS 1

APPENDIX A TWO-LANE RURAL ROADS ELEMENTS OF DESIGN CREST VERTICAL CURVES

Traffic Signal Design

LECTUR 10 CHARACTERISTICS OF THE DRIVER, THE PEDESTRIAN, THE VEHICLE AND THE ROAD. One problem that faces traffic and transportation engineers is:

Using SHRP 2 s NDS Video Data to Evaluate the Impact of Offset Left-Turn Lanes on Gap Acceptance Behavior Karin M. Bauer & Jessica M.

ESTIMATION OF THE EFFECT OF AUTONOMOUS EMERGENCY BRAKING SYSTEMS FOR PEDESTRIANS ON REDUCTION IN THE NUMBER OF PEDESTRIAN VICTIMS

Use of Throw Distances of Pedestrians and Bicyclists as Part of a Scientific Accident Reconstruction Method 1

AN INVESTIGATION OF LONGITUDINAL VENTILATION FOR SHORT ROAD TUNNELS WITH HIGH FIRE HRR

CONCLUSIONS AND RECOMMENDATIONS

Influence of wind direction on noise emission and propagation from wind turbines

LYNNWOOD ROAD ARTERIAL STUDY The effect of intersection spacing on arterial operation

Grade Separated Intersection

Currents measurements in the coast of Montevideo, Uruguay

Public transport and town planning from a retroactive point of view C. Wallstrom, S. Johansson et al

Answers Written Exam Public Transport

23 RD INTERNATIONAL SYMPOSIUM ON BALLISTICS TARRAGONA, SPAIN APRIL 2007

Basis of Structural Design

Chapter 33. Grade Separated Intersection Overview Classification of Intersection Grade Separated Intersection

Author s Name Name of the Paper Session. Positioning Committee. Marine Technology Society. DYNAMIC POSITIONING CONFERENCE September 18-19, 2001

OBSERVATION OF GAP ACCEPTANCE DURING INTERSECTION APPROACH

Safety Assessment of Installing Traffic Signals at High-Speed Expressway Intersections

Relationship Between Missing Ballast and Development of Track Geometry Defects

PHASE 1 WIND STUDIES REPORT

Proposal for amendments to Regulation No. 79 to include ACSF > 10 km/h

Assessing Level of Service for Highways in a New Metropolitan City

At each type of conflict location, the risk is affected by certain parameters:

EXPERIMENTAL STUDY ON THE DISCHARGE CHARACTERISTICS OF SLUICE FOR TIDAL POWER PLANT

A location model for pedestrian crossings in arterial streets

Applying Hooke s Law to Multiple Bungee Cords. Introduction

Software Reliability 1

DEVELOPMENT OF A SET OF TRIP GENERATION MODELS FOR TRAVEL DEMAND ESTIMATION IN THE COLOMBO METROPOLITAN REGION

Road Safety Facilities Implemented in Japan

Autodesk Moldflow Communicator Process settings

Scaling up of ADAS Traffic Impacts to German Cities

SPEED PROFILES APPROACHING A TRAFFIC SIGNAL

Pedestrian crossings survey in Europe

Goodyear Safety Research Project 2008 Presentation by Competitive Measure at the FEI Eventing Safety Forum. Presented by Tim Deans and Martin Herbert

An Analysis of Factors Contributing to Wins in the National Hockey League

Drilling Efficiency Utilizing Coriolis Flow Technology

Clutch Hitters Revisited Pete Palmer and Dick Cramer National SABR Convention June 30, 2008

Transactions on the Built Environment vol 7, 1994 WIT Press, ISSN

This guidance applies to all five scenarios for toll facility implementation:

Wind Flow Validation Summary

Evaluation and Improvement of the Roundabouts

Fatal Train accidents on Europe`s railways: Prof. Andrew Evans from CTS, Imperial College London. Wednesday, 02 March :00

TABLE OF CONTENTS LIST OF FIGURES. Figure Title

A Novel Gear-shifting Strategy Used on Smart Bicycles

Analyses and statistics on the frequency and the incidence of traffic accidents within Dolj County

Analysis of Variance. Copyright 2014 Pearson Education, Inc.

Blocking time reduction for level crossings using the genetic algorithm

AIS data analysis for vessel behavior during strong currents and during encounters in the Botlek area in the Port of Rotterdam

UNDERSTANDING A DIVE COMPUTER. by S. Angelini, Ph.D. Mares S.p.A.

TRAFFIC CHARACTERISTICS. Unit I

Simulating Major League Baseball Games

3.1 TRAFFIC CALMING PROCESS SUMMARY

Evaluation of shared use of bicycles and pedestrians in Japan

(fig. 3) must be at the same temperature as the water in this chamber CALORIMETRIC STUDIES OF THE EXTREMITIES

Lighting of short tunnels

Fig 2.17: Topographic model: snow-free area (Snow boundary = red) Contour interval of 1 m.

JAR-23 Normal, Utility, Aerobatic, and Commuter Category Aeroplanes \ Issued 11 March 1994 \ Section 1- Requirements \ Subpart C - Structure \ General

Transcription:

Railway collision risk analysis due to obstacles A. Fernández & B. Vitoriano Instituto de Investigación Tecnológica (IIT) Universidad Pontificia Comillas de Madrid (UPCo), Spain Abstract In the following article, the risk of a train suffering an accident by collision is analysed in conjunction with an unexpected obstacle on the track. This study is applied to high velocity railways, although this could be reflected towards any other lines. Various measures associated with the risk of accident, can be defined accordingly: the probability of being engaged in an accident, the time on risk and the critical velocity. Subsequently, the elements which alter the previous measures are analysed. These elements are related to rolling stock, to the railway infrastructure and the density of the traffic. A model is proposed to obtain the appropriate risk measures of a configuration of these elements, and to compare and evaluate the impact of different configurations. This model is applied to the case study based on data of a high velocity line in construction in Spain. Keywords: railway collision risk, probability, stochastic process, high speed. 1 Introduction Railway accidents can be produced due to a wide variety of causes, for instance, signalling systems failures, human errors, problems in rolling stock, collisions with obstacles on the track, sabotages, etc., or a contribution of all the above. This article is focused on a concrete type of accident, that produced by the collision of the train with unexpected obstacle on the tracks. Although the study proposed is valid for whatever type of railway, special importance is placed on those of high velocity, wherein the distances involved in brake emergencies of the trains can be prolonged for a longer distance. The gravity of the accident also drastically augments when high velocities are considered. In these types of railways, the margins of the track usually are well protected, however, fallen obstacles (vehicles, rocks etc.) from points above the level of the track can appear in these points. For example, like in the elevated

994 Computers in Railways IX bridges, in the entrances and exits of the tunnels, and in valleys or narrow mountain passes. Some topics related with this kind of accidents have been discussed from different points of view in the last years: from the viewpoint of the systems of detection (EG, Jin et al.[1] or Fujita and Okano [2], from the reaction against an emergency (Bin [3]), from the general risk in the lines of high velocity ([Leighton and Dennis [4]) or the methodology of the approval of security (E1 Kousi et al.[5]). In this article the model proposed allows to evaluate the risk of accident by collision with obstacles on the track, given the characteristics of the infrastructure, the rolling stock and the traffic. This model will permit quantifying the impact of the possible strategies for the improvement of the security: installation of automatic detection devices of obstacles on the track, construction of physical retaining barriers, limitations of velocity in the conflictive areas, etc. With this information, it will be able to establish for each line some objective criteria that will permit identification and elimination of critical points, optimising the investment to achieve equipment and works of security. From another angle, the model could be used for designing the traffic, by permitting to evaluate the risk associated with each traffic stage, taking into account its density and the characteristics of the rolling stock utilised. The elements which have an influence on the risk of accident, so they should be taken into account to evaluate the risk, are enumerated in section 2. In section 3 various measures associated with the risk of accident by collision with obstacles are defined. They will further serve to compare and evaluate risks in accidents under distinct hypothesis. Section 4 dedicates itself to present the theoretical models developed to evaluate the measures associated with the risk of accident. In section 5, results are obtained in a case study, and in section 6 conclusions are evidenced in the regards to having completed the study. 2 Characterisation of the elements determining the risk of accident caused by collision of obstacles The elements that influence in the risk of accident by collision with obstacles on the train track are diverse, and can divided in the one s inherent to the infrastructure, those that correspond to rolling stock and those related to the exploitation. 1. From the infrastructure: A point of risk represents a concrete point on the track (entrance or exit of the tunnel, flyover, etc.) which is considered potentially hazardous, concerning the risk of falls of the obstacles at a point. It is characterised by: Falling Rate: is the estimated rate of appearance of obstacles in that point (average number of falls per unit of time). It is difficult to estimate, being very small and dependent from varied factors. Maximum visibility: as defined presently it is the maximum visibility that the driver of the train has at the risk point. The authentic visibility

Computers in Railways IX 995 will be a percentage of the above mentioned, depending on the weather conditions. Time of automatic detection: assuming that a automatic detector of obstacles has been installed in the point of risk, it is the time delay to reach the traffic control centre the signal informing that there is an obstacle in the given point from its fall. Time of manual detection: It is the average time that the warning of the obstacles in the way (from its fall) takes to arrive at the traffic control centre by non-automatic means. It will be an estimation. Other elements of the infrastructure that are associated with the railroad: Slopes of the railroad: It is imperative to have the profiles of the physical slopes to calculate the time and distance when applying the emergency brake. Time of communication: It is the time that it takes the order of the emergency brake process from the traffic control centre to the train. 2. From rolling stock: Mass in normal shipment: Total of the train in normal conditions. Time in reaction: it is the time that it takes for the emergency brakes to act since the order is received in the train. Maximum reach of the headlights of the train: It is only necessary when the train circulates at right, thus reducing the visibility at this juncture. Strength of braking process: it is the curve of effort in the braking process of the train in function of the velocity of the train. Air resistance: it is the curve of air resistance of the train in function of the speed of the train. 3. From the exploitation: Cinematic profiles: speed-space and time-space profiles, defined from the origin to the destination of the train at regular spatial intervals. Time of last control: time in which the last check-up was done to find out if there was an obstacle at the point, by non-automatic means. To make an analysis of accident risk during a temporal horizon the characteristics of composition and density of the traffic during the horizon will have to be defined as well. 3 Measures associated in respect to risk of accident 1. Risk of accident Given a configuration of the elements described previously, it will be defined risk of accident as the probability that one accident take place given the present configuration. When a set of points of risk and trains are considered, risk accident is defined as the probability that at least one accident takes place. 2. Time on risk of a train at the point of risk.

996 Computers in Railways IX Because the risk of accident calculation assumes known the falling rate, and this rate is difficult to be estimated, another measure independent of this data, is defined: Time on risk of one service in a point of risk is defined as the period during if an obstacle were to fall in the given point of risk, the collision of the train with the obstacle would result unavoidable. 3. Critical velocity of a train at a point of risk Critical velocity of a train at a point of risk is the maximum velocity that the train could reach in the point, in such a way, supposing that there is an obstacle, the driver can sight it and brake the train to avoid the collision. In other words, it is the maximum velocity to avoid the collision without any detection in advance. It is independent from the falling rate. 4 Theoretical models 4.1 Point of risk model Assuming that the fallen of obstacles are due to random effects, the collection of variables { N t } t, where N T t represents the number of falls in a point of risk in the interval (0, t ], it can be modelled like a Poisson process of parameter λ, where λ is the falling rate at the point. With this model the number of falls in that point in the interval time ( t1, t 2] follows a Poisson distribution, therefore, P(no fall at the point of risk in interval ( t, t ]) e λ 1 2 ( t2 t1) = (1) To model the falls as a Poisson process is reasonable because, from one aspect, they can be considered rare occurrences. From another aspect, it implies that the time between two consecutive falls follows an exponential distribution, and it does not have memory, which seems logical as a hypothesis. Moreover, the probability does not depend on the initial instant of interval only of its length (it is an stochastic process with stationary and independent increments.) 4.2 Time on risk model This model determines the time on risk of a train in a point of risk. In this calculation, four different times intervene: Time of detection: is the minimum between the automatic and manual time of detection. Time of last control Time of communication Time on risk braking: time needed at normal circulation to cover the emergency brake distance. To obtain the time on risk braking, emergency brake distance is computed through simulation. In the simulation model must be taken into account the

Computers in Railways IX 997 characterising elements of infrastructure and rolling stock. Also space covered in the time of reaction will be added to evaluate the named space on risk. From this value the time on risk braking can be determined using the cinematic profiles of the train, calculating the time that the train runs in that space in normal circulation conditions. From the prior value the time on risk calculation depends on the following cases: a) If the space on risk is less than the visibility distance Time on risk = Time on risk braking b) If the space on risk is more than the visibility distance b.1.) If there is a system to detect obstacles, automatic or manual, Time on risk = Time on risk braking +Time of detection + Time of communication b.2) If there is not an obstacle detection system: Time on risk = Time of last control 4.3 Risk of accident of a train in a point From previous models, it is clear that no accident will be occur at a risk point if no obstacle fall happens at that point during the time on risk. So, from the point of risk model, the probability of this will occur is i P(no accident at point i) = e λ Timeonrisk (2) and thus, the risk of accident is i P(accident at point i) = 1 e λ Timeonrisk (3) 4.4 Critical velocity of one train at one point To calculate the critical velocity is supposed the train nears the point of risk at a constant speed, increasing the speed until the first one for that the space on risk is greater than the visibility distance. 4.5 Risk of accident considering a set of points and trains Previous models are intended to calculate the individual risk of a train accident in a point of risk. To calculate the risk of the complete route of a train or different trains, these risks have to be accumulated. At the point of risk model increments independence has been assumed and, as a result of the security conditions, there is no flapping of intervals of time on risk at a point for different trains. Therefore, and because the probability that no accident is the probability of no accident in any point of risk by any train

998 Computers in Railways IX considered, this probability will be the product of all the probabilities obtained independently. So, considering I points of risk and J trains P(NO accident with I points and J trains) = λi Timeonriskij λitimeonriskij j = P(NO accident at point i of train j) = e = e i, j i, j i and subsequently the risk of accident in terms of probability will be λi λitimeonriskij j P(accident with I points and J trains) = 1 e = e i, j i Timeonriskij (4) (5) 5 Results To obtain the results of the model described, a high velocity line has been considered, whose length is 500 km, and 300 points of risk in each sense, corresponding to elevated places over the track and entry and exit tunnels. Lacking of historic statistics, the same falling rate has been considered in all points. The study has been developed for mixed traffic with 2 types of trains: of 350 km/h and 200 km/h maximum velocity. Two types of studies will be presented: Analysis of risk associated from the passing of one train by one point. The influence is analysed from the distinct elements implied over the different measures defined, associated to the risk of accident in a point. Calculation of the total risk of a railroad. Assuming a determined line of traffic, the risk that an accident takes place in a temporal horizon has been calculated, for different values of the falling rate of obstacles on the track. 5.1 Risk associated with the passing of a train by one point This study is focused on analysing the elements that intervene in the measures associated with the risk of accident in the passing of a train by a risk point, as well as the relation between them. The falling rate considered has been 1 obstacle/year in the whole railroad, divided likewise in all the points of risk. 5.1.1 Relation between the probability of accident and risk time A graphic is shown below with all the times on risk obtained for a train running through the line, from least to most, and their probabilities of accident associated. A 350 type of train and detection of fallen obstacles in all possible points have been considered.

Computers in Railways IX 999 probability of accident (10e-6) 0.07 0.06 0.05 0.04 0.03 0.02 0.01 0 0.0 10.0 20.0 30.0 40.0 50.0 60.0 70.0 Tim e on risk (s) As can be observed, the relation appears to be linear, not exponential. The reason is because the falling rate in a point is very small, so the values on the exponent are very close to zero, being able to consider it lineal., as states, 1 e λt λ t, λ t small enough. The consequence is that the time on risk is a valid measure to compare the risk of accident in different points or under different suppositions, maintaining the proportion existing between the time on risk also for the probabilities. In such cases, the risk of accident can be obtained as the product of time on risk by the falling rates estimated. 5.1.2 Relation between the risk of accident and the velocity. Effect of the detection systems of obstacles. For this analysis a point of risk of the railway has been selected, and the speed of the train has been varied to observe the effect regarding the time on risk. In the following graphic four functions are shown. The first graph represents the time to cover the emergency brake distance in normal speed. The second one represents the time on risk braking. (Total time on risk, if the velocity is lower than the critical velocity). The third graph is the total time on risk if there is a detection system at the point and the fourth if no type of detection exists. 1900 Times (s) 1800 70 60 50 40 30 20 10 C rítical V elo city 0 0 30 60 90 120 150 180 210 240 270 300 330 Tim e on risk braking T. on risk braking + tim e of reaction Tim e on risk with detectors Tim e on risk without detectors Speed train (km/h)

1000 Computers in Railways IX Notice that when a detection system exists, time on risk follows a relationship almost lineal with the velocity, with the exception of the discontinuity. This is an important outcome, showing how the risk by collision with obstacles in the track increases in lineal form with the velocity of the train. 5.1.3 Factors that influence in the critical velocity: slope and visibility In the following graph the variation of the critical velocity with the slope is shown, varying it between the minimum and maximum limits of the line. The relationship is practically lineal and of great influence (until 40 km/h) 220 Critical Velocity (km/h) 210 200 190 180 170 160-30 -24-18 -12-6 0 6 12 18 24 Track slope (mm) Visibility = 1500 m Next graph shows the variation of the critical velocity with the visibility. The slopes given are at their minimum in the line (200m is the potential reach of the lights of the train), the void, and the maximum in line (1800m). Observe that the variation of the critical velocity with the visibility is exponential, therefore these variations are smaller for high values. In addition, the values of critical velocity should be observed, the maximum is 240 km/h. This value is outweighed by the normal speed of trains of type 350, so the installation of detection systems in the whole line would be necessary, or at least in points where the presence of an obstacle cannot be detected even by manual detection (minimally travelled). 250 230 Critical Velocity (km/h) 210 190 170 150 130 110 90 70 50 200 400 600 800 1000 1200 1400 1600 1800 slope=0 mm slope=25 mm slope=-30 mm Visibility (m)

Computers in Railways IX 1001 5.1.4 Calculation of total risk of accident in the line In this analysis the model of risk of accident for a set of trains and points of risk will be used, taking into account temporal horizons of 1 and 10 years. It has been taken into consideration a daily traffic of 11 daytime trains and 3 nocturnal ones for each of the 2 types of trains considered, in both directions. In the following graphic the results obtained are shown. The vertical axis corresponds to the risk of accident by collision with obstacles, and the horizontal the inverse of the falling rates, this is, the average number of years between two consecutive falls of obstacles in the line. Probability of accident 1.0 0.9 0.8 0.7 0.6 0.5 0.4 0.3 0.2 0.1 0.0 1 3 5 7 9 11 13 15 17 19 with detectors 1 year without detectors 1 year with detectors 10 years without detectors 10 years Falling rate (years/obstacle) The results can be summed up in the following: Without detection systems installed, the risk of accident is clearly unacceptable for the whole range of rates studied. The values for 10 years would vary between 30% up to 100% and in the study for 1 year the exponential growth for rates inferior to a fall every 8 years. With detection systems installed the risk decreases dramatically. In the study of 10 years, in the worst case scenario (one fall per year) reaches up to 26% and in that of 1 year it remains very low, 3% in its worst possible case. 6 Conclusions In the article the elements influencing in the risk of accident by collision with obstacles have been presented, as well as several measures associated. Models have also been presented to obtain these measurements, and from the application of these models in a case study the following conclusions have been obtained: In the analysis of one point and one train, the risk of accident and the time on risk are related in lineal form, serving this measurement, that does not depend on the falling rate, to compare different points and trains. From that analysis also it is deduced that when there is a detection system installed, the risk of accident increases in lineal form with the velocity, not

1002 Computers in Railways IX exponential, but if there is not, the risk increment quite substantially, regardless the velocity. The critical velocity is seen influenced by the slope lineally and by the visibility exponentially. The critical velocity is violated systematically for trains of high velocity, and sometimes for other trains, so detection systems are absolutely needed. The most important conclusion is that installing detection systems implies a very high decreasing of the risk of accident. Decisions about where preferentially it should be invested will be depending on the estimation in each point of risk of the falling rates. To maintain the risk in admissible limits, the falling rate of obstacles in the line shouldn t be high. As criteria, in view of the graphs of risk, it should be maintained in the flat area of the graph. In another way, in points of risk in which have been installed systems of detection of obstacles, it has to be taken into account that these systems can be out of service in some cases. In such a case, if the objective is to maintain the same level of risk, it will be necessary to reduce the velocity of the train until the time on risk is equal to the value when the system is in service. References [1] Jin, Y.; Goto, Y.; Nishimoto, Y.; Aono, Y.; Naito, H.; Fukumoto, Y.; Yamamura, T.; & Iwake, A., Dynamic obstacle-detecting system for railway surroundings using highly accurate laser-sectioning method. Proc. of the IECON '9. New York, USA: IEEE, p.p. 2426-30 vol.3, 1991. [2] Fujita, T. & Okano, Y., Integrated disaster prevention information system. Japanese Railway Engineering, 31, 1, p.p. 8-11, 1992. [3] Bin, N. Analysis of train braking accuracy and safe protection distance in automatic train protection (ATP) systems. Proceedings of 5 TH COMPRAIL Conference, Germany, 1996. [4] Leighton, C.L. & Dennis, C.R., Risk assessment of a new high speed railway. Quality and Reliability Engineering International, 11, 6, p.p. 445-55, 1995. [5] El Koursi, M.; Ching-Yao Chan & Wei-Bin Zhang, Preliminary hazard analyses: a case study of advanced vehicle control and safety systems. Conference Proceedings. 1999 IEEE International Conference on Systems, Man, and Cybernetics, Piscataway, NJ, USA, p.p.558-63 vol.4, 1999.