Incident: Air Bag Deployment Software Issue in Nissan Vehicles, 2013-2014 Model Years

Published Date: 2014-03-27

Postmortem Analysis
Timeline 1. The software failure incident with the occupant classification system in Nissan vehicles happened in the 2013-2014 model years [25291]. 2. Published on 2014-03-27. 3. The software failure incident likely occurred in 2013-2014.
System 1. Occupant classification system in Nissan vehicles (2013-14 model years) [25291]
Responsible Organization 1. The software failure incident in the Nissan vehicles was caused by a software problem in the occupant classification system, which was responsible for not detecting an occupant in the front passenger seat [25291].
Impacted Organization 1. Front passenger-side air bag deployment in Nissan vehicles [25291]
Software Causes 1. The software problem in the occupant classification system that might not detect an occupant in the front passenger seat due to sensitivity of the software calibration, particularly when certain factors like high engine vibration at idle or unusual seating postures are present [25291].
Non-software Causes 1. Sensitivity of the software
Impacts 1. The software failure incident in Nissan vehicles led to the front passenger-side airbag not deploying in crashes, potentially endangering occupants [Article 25291]. 2. The sensitivity of the software calibration caused issues, especially when there was high engine vibration at idle or unusual seating postures, leading to the failure of the occupant classification system [Article 25291]. 3. The software problem resulted in three reported accidents where the passenger airbag did not deploy despite the seat being occupied, raising safety concerns [Article 25291].
Preventions 1. Implementing more rigorous testing procedures during the software development phase to detect sensitivity issues in the software calibration, especially under varying conditions such as high engine vibration at idle and unusual seating postures [25291]. 2. Conducting thorough post-release monitoring and analysis of user feedback and complaints to promptly identify and address any recurring issues related to the occupant classification system [25291]. 3. Enhancing the software design to improve the accuracy and reliability of the occupant detection system, possibly through software updates or recalibrations based on real-world data and feedback [25291].
Fixes 1. Recalibrating the software sensitivity in the occupant classification system to better detect occupants in the front passenger seat [25291]. 2. Implementing software updates or patches to address the software problem in the occupant classification system [25291]. 3. Conducting thorough testing to ensure the software accurately detects occupants under various conditions, such as high engine vibration or unusual seating postures [25291].
References 1. Report to regulators published by Nissan [25291] 2. National Highway Traffic Safety Administration (NHTSA) [25291]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) In the case of Nissan, the article mentions a previous recall related to a software issue with the occupant classification system in the 2013 model year vehicles. Despite initially concluding that the problem was likely caused by out-of-position occupants, Nissan had to recall about 82,000 cars and trucks due to a malfunction of "strain gauge sensors" suppressing the front passenger airbag even if someone was seated there. It is not explicitly stated whether these vehicles are being recalled again for the same issue [25291]. (b) The article also highlights that other automakers like General Motors, Honda, and Toyota have announced large recalls for various issues including defective ignition switches and airbag malfunctions. This indicates that software-related problems leading to recalls are not unique to Nissan but have affected multiple organizations in the automotive industry [25291].
Phase (Design/Operation) design (a) The software failure incident in the article is related to the design phase. The failure was attributed to a software problem in the occupant classification system of Nissan vehicles, specifically in the sensitivity of the software calibration. The issue arose from factors such as high engine vibration at idle when the seat is initially empty and then becomes occupied, or an unusual seating posture, which the software failed to detect properly [25291]. (b) The software failure incident in the article is not related to the operation phase or misuse of the system.
Boundary (Internal/External) within_system (a) The software failure incident in the article is within the system. The failure was attributed to a software problem in the occupant classification system of Nissan vehicles, specifically related to the sensitivity of the software calibration. The issue arose from factors such as high engine vibration at idle when the seat is initially empty and then becomes occupied, or an unusual seating posture [25291].
Nature (Human/Non-human) non-human_actions (a) The software failure incident in the article is related to non-human actions. The failure was attributed to a software problem in the occupant classification system of Nissan vehicles, specifically in detecting an occupant in the front passenger seat. The sensitivity of the software calibration was identified as a key factor, especially when certain non-human factors like high engine vibration at idle or unusual seating postures were present [25291].
Dimension (Hardware/Software) hardware, software (a) The software failure incident in the article is related to hardware. The issue with the front passenger-side air bag not deploying in a crash was attributed to a software problem in the occupant classification system. The sensitivity of the software calibration was affected by factors such as high engine vibration at idle when the seat is initially empty and then becomes occupied, or an unusual seating posture, which are hardware-related factors [25291].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident described in the article is non-malicious. The failure was attributed to a software problem in the occupant classification system of Nissan vehicles, specifically related to the sensitivity of the software calibration. The issue arose from factors such as high engine vibration at idle when the seat is initially empty and then becomes occupied, or an unusual seating posture. This led to the front passenger-side air bag not deploying in certain situations where it should have, potentially endangering occupants [25291].
Intent (Poor/Accidental Decisions) accidental_decisions (a) The software failure incident related to the Nissan recall was not due to poor decisions but rather due to a sensitivity issue with the software calibration in the occupant classification system. The problem stemmed from a federally mandated system intended to determine whether the front passenger seat is occupied, leading to the airbag not deploying in certain situations [25291]. The issue was attributed to factors such as high engine vibration at idle when the seat is initially empty and then becomes occupied, or an unusual seating posture, rather than poor decisions made during the software development process.
Capability (Incompetence/Accidental) development_incompetence (a) The software failure incident in the article is related to development incompetence. Nissan is recalling nearly a million vehicles due to a software problem in the occupant classification system that might not detect an occupant in the front passenger seat. The issue was attributed to the sensitivity of the software calibration, particularly when certain factors like high engine vibration or unusual seating postures were present. Despite previous recalls and complaints, the problem was not initially identified as a malfunction but rather as caused by out-of-position occupants, indicating a lack of professional competence in addressing the root cause of the issue [25291]. (b) The software failure incident does not appear to be related to an accidental failure. The article clearly outlines the specific software problem in the occupant classification system that led to the recall of vehicles, indicating a known issue rather than an accidental introduction of a failure [25291].
Duration permanent (a) The software failure incident in this case seems to be more of a permanent nature. The article mentions that the problem with the occupant classification system in Nissan vehicles was due to a software problem that might not detect an occupant in the front passenger seat. This issue was attributed to the sensitivity of the software calibration, particularly when specific factors like high engine vibration at idle when the seat is initially empty and then becomes occupied or an unusual seating posture are present [25291]. Additionally, the article highlights that even after a previous recall related to the malfunction of "strain gauge sensors" suppressing the front passenger airbag, Nissan was still receiving complaints from owners about the occupant classification system not working properly. This led Nissan to conclude that the problem was not a malfunction but was likely caused by out-of-position occupants, indicating a more persistent software issue [25291].
Behaviour crash, omission, value, other (a) The software failure incident in the article is related to a crash, where the front passenger-side airbag might not deploy in a crash due to a software problem in the occupant classification system [25291]. (b) The software failure incident can also be related to omission, as the software might omit to detect an occupant in the front passenger seat, leading to the airbag not deploying when it should [25291]. (d) The software failure incident can be related to a value failure, as the software calibration's sensitivity was blamed for not detecting an occupant in the seat correctly, leading to the airbag not deploying as intended [25291]. (f) In addition to the mentioned behaviors, the software failure incident can be categorized as "other" due to the system's behavior being influenced by factors such as high engine vibration at idle when the seat is initially empty and then becomes occupied, or an unusual seating posture, which were not the typical scenarios considered during software calibration [25291].

IoT System Layer

Layer Option Rationale
Perception sensor, embedded_software (a) The failure was related to the sensor: The software failure incident in the Nissan vehicles was related to the occupant classification system's sensor not detecting an occupant in the front passenger seat, leading to the airbag not deploying when it should have. This failure was attributed to a software problem in the occupant classification system, specifically related to the sensitivity of the software calibration when factors like high engine vibration at idle or unusual seating postures were present [Article 25291].
Communication unknown The software failure incident reported in Article 25291 was related to the occupant classification system in Nissan vehicles, specifically affecting the front passenger-side airbag deployment. The failure was attributed to a software problem in the occupant classification system, which was not detecting occupants in the front passenger seat correctly. This issue was linked to the sensitivity of the software calibration, especially when certain factors like high engine vibration at idle or unusual seating postures were present. The failure was not directly related to the communication layer of the cyber physical system but rather to the software's ability to accurately detect occupants in the vehicle [25291].
Application TRUE The software failure incident reported in Article 25291 was related to the application layer of the cyber physical system. The failure was attributed to a software problem in the occupant classification system of Nissan vehicles, specifically a sensitivity issue in the software calibration. This issue could lead to the front passenger airbag not deploying in a crash even when the seat is occupied, due to factors such as high engine vibration at idle or unusual seating postures [25291].

Other Details

Category Option Rationale
Consequence non-human, theoretical_consequence (a) death: The article mentions that Nissan is not aware of any fatalities involving the problem with the front passenger-side air bag not deploying in a crash [25291]. (b) harm: The article does not mention any specific instances of people being physically harmed due to the software failure incident. (c) basic: The article does not mention any impact on people's access to food or shelter due to the software failure incident. (d) property: The article does not mention any impact on people's material goods, money, or data due to the software failure incident. (e) delay: The article does not mention any instances of people having to postpone an activity due to the software failure incident. (f) non-human: The software failure incident affected the functionality of the front passenger-side air bag in Nissan vehicles, which is a non-human entity [25291]. (g) no_consequence: The article does not mention any real observed consequences of the software failure incident. (h) theoretical_consequence: The article discusses potential consequences of the software failure incident, such as the air bag not deploying in a crash even though the seat was occupied, but it does not mention any actual occurrences of these theoretical consequences [25291]. (i) other: The article does not mention any other specific consequences of the software failure incident.
Domain transportation (a) The software failure incident reported in the article is related to the transportation industry. Nissan is recalling nearly a million vehicles, including Altima sedans, due to a software problem in the occupant classification system that might not detect an occupant in the front passenger seat, leading to the airbag not deploying in a crash [Article 25291].

Sources

Back to List