A Case Study of Toyota Unintended Acceleration and Software Safety PDF

18 sept. 2014 “Lawsuit pursues claims for breach of warranties unjust enrichment

Toyota Sudden Acceleration Lawsuit

The Toyota Electronic Throttle Control System's. Susceptibility to Unintended Acceleration Problems and. Lack of Adequate Safeguards.

Production Liability After Unintended Acceleration: How Automotive

21 mai 2014 as another actor arguably making product liability lawsuits unnecessary). 3 In Re: Toyota Motor Corp. Unintended Acceleration Marketing ...

A Case Study of Toyota Unintended Acceleration and Software Safety

18 sept. 2014 “Lawsuit pursues claims for breach of warranties unjust enrichment

UNITED STATES JUDICIAL PANEL on MULTIDISTRICT

5 oct. 2021 IN RE: TOYOTA MOTOR CORP. UNINTENDED. ACCELERATION MARKETING SALES PRACTICES

Safety Research ...

7 nov. 2013 Last month Toyota hastily settled an Unintended Acceleration lawsuit – hours after an Oklahoma jury determined that the automaker acted ...

A Case Study of Toyota Unintended Acceleration and Software Safety

“Lawsuit pursues claims for breach of warranties unjust enrichment

Machines Without Principals: Liability Rules and Artificial Intelligence

26 mars 2014 There has been extensive litigation over the safety of surgical robots ... See

A Case Study of Toyota Unintended Acceleration and Software Safety

Brief history of Toyota UA events. • Recalls investigations

Toyota Statement on Media Reports Regarding Internal Legal Memo

28 févr. 2010 "sudden acceleration" and "sudden unintended acceleration" appear nowhere in this memo. Moreover the lawsuit that is discussed in the memo

What Is The Toyota Acceleration Problem?
For around the last decade, Toyota vehicles have been plagued with concerns that the vehicles can start to accelerate unintentionally – leading to uncontrollable speeds and deadly collisions. One incident reportedly caused the death of several consumers. On the final day of 2015, California resident Berta O. reportedly picked up her seven-year-old ...
What Is Unexpected acceleration?
If a vehicle accelerates unexpectedly, it can put drivers, passengers, or even pedestrians at risk for a potentially deadly collision – such as the one in Berta’s case. There may be several causes of unexpected acceleration in vehicles. Investigations from the National Highway Traffic SafetyAdministration (NHTSA) and other agencies have found that ...
What Caused The Toyota Acceleration Problem?
Reports of sudden Toyota acceleration problems have reportedly been lodged since 2009. Numerous deaths were pinned on the acceleration issueand the problem started to garner public notice. Some people theorized that the problem was caused by a defect in the vehicles’ electricalsystems, although Toyota denied these assertions. In 2009 and 2010, Toyo...
Has Toyota Faced Consequences For The Acceleration Problem?
In order to get to the root of the Toyota acceleration issue, federal investigators launched a criminal probe into the problem. The FBI reportedly argued that Toyota knew about the acceleration problem but deceived federal authorities and the public into thinking the vehicles were safe. In March 2014, Toyota agreed to pay $1.2 billion in an agreeme...
Does Unintended Acceleration Affect Other Vehicles?
Toyota is not the only company to experience alleged unintended acceleration problems, but the Toyota acceleration problem was perhaps the most striking. After allegations against Toyota came to light around then years ago, the NHTSA began to explore how to address the issue. According to Consumer Reports, the administration invested requiring vehi...
What If My Vehicle Is Defective?
If your vehicle is defective, you can check with your vehicle’s manufacturer to determine if there has been a recall issued. If not, it is important to report the issue. You can report vehicle safety defects to the National Highway Traffic Safety Administration (NHTSA) on their website. Over the last half-century, the NHTSA has recalled more than 3...

What is a Toyota unintended acceleration lawsuit?

In other cases it appeared that the gas pedal linkage could stick in an open position leading to loss of control for the driver. The Toyota unintended acceleration lawsuit settlement compensated owners for the loss in value of their vehicles when they sold them, among other remedies.

Why does my Toyota have a sudden acceleration problem?

Reports of sudden Toyota acceleration problems have reportedly been lodged since 2009. Numerous deaths were pinned on the acceleration issue and the problem started to garner public notice. Some people theorized that the problem was caused by a defect in the vehicles’ electrical systems, although Toyota denied these assertions.

What causes Toyota accidents?

Toyota owners claimed that fatal accidents resulted from these defects. In some cases, investigators found that loose or thick floor mats had entrapped the gas pedal, causing the unintended acceleration. In other cases it appeared that the gas pedal linkage could stick in an open position leading to loss of control for the driver.

What should I do if my car accidentally accelerates?

In cases of accidental acceleration, Dobbs Auto Center recommends taking the following steps: Keep the engine on to retain power brakes and power steering. Brake hard on the brake pedal – do not push the acceleration pedal. Put the transmission in neutral or depress the clutch. Only use emergency brakes if the service brakes have failed.

A Case Study of Toyota

Unintended Acceleration and

Software Safety

Prof. Phil Koopman

September 18, 2014

Carnegie Mellon University

Overview

• Brief history of Toyota UA events • Recalls, investigations, lawsuits • Fines & jury awards -$$Billions • Technical discussion of the problems •This is a Case Study- what can we learn? • What does this mean for future automobiles? • The bar is raised, at least for now • E.g, handling of GM ignition switch & Honda hybrid SW UA • I testified as a Plaintiff expert witness • I saw a whole lot of stuff, but not "source code" • I can only talk about things that are public 2 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

Aug. 28, 2009, San Diego CA, USA

• Toyota Lexus ES 350 sedan • UA Reached 100 mph+ • 911 Emergency Phone Call from passenger during event • All 4 occupants killed in crash • Driver:

Mark Saylor, 45 year old male.

Off-duty California Highway Patrol Officer; vehicle inspector. • Crash was blamed on wrong floor mats causing pedal entrapment • Brake rotor damage indicated "endured braking" • This event triggered escalation of investigations dating back to 2002 MY 3 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

Recalls & Public Discussion

(Brakes might not mitigate open throttle- more later)•Floor mat recalls • Sept. 2007 recall to fasten floor mats • Wider recall Oct./Nov. 2009 after Saylor mishap •Sticky gas pedal recall • Jan. 2010 and onward •Congressional investigation • Toyota President testifies to US Congress, Feb. 2010 • April 2010: Economic loss class action venue selected 4 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license. 5

May 25,

2010
© Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

NASA Investigation

• NASA team investigates UA (2010-2011) • Including Electronic Throttle Control System (ETCS) • Controls air + fuel + spark engine power 6 [NASA UA Report Fig 4.0-1] © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

Toyota 2008 ETCS - Two CPUs

7 Main CPU (Contains

Software)Monitor

Chip (Contains

Software)

Toyota ETCS Is Safety Critical

• If driver pumps brakes, loses vacuum power-assist • With depleted vacuum, holding against WOT requires average of

175 pounds of force on brake pedal

across vehicles tested [NHTSA data]•With vacuum it's only 15.0 - 43.6 pounds force • A software defect could command UA, for example via

Wide Open Throttle (WOT)

•The brakes will not necessarily stop the car [Consumer reports: http://www.youtube.com/watch?v=VZZNR9O3xZM] •Potentialto command WOT matters for safety • Not just whether there is an actual bug in that does that • Drivers will not necessarily perform countermeasures [NASA UA Report, p. 66]: shift to neutral; key-off while moving) 8 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

NASA Conclusions

• NASA didn't find a "smoking gun" • Tight timeline & limited information [Bookout 2013-10-14AM 39:18-40:8] •Did not exonerate system

• But, U.S. Transportation Secretary Ray LaHood said,"We enlisted the best and brightest engineers to study Toyota's

electronics systems, and the verdict is in. There is no electronic-based causefor unintended high-speed acceleration in Toyotas." 9 [NASA UA Report. Executive Summary] http://www.nhtsa.gov/PR/DOT-16-11 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

Did NASA Have Correct & Complete Information?

• The ESP-B2 Monitor Chip has software in it •But NASA does not analyze ESP-B2 softwarein its reports - analysis is limited to Main CPU software. • NASA credited Error Correcting Codes in RAM for 2005MY: • Apparently because Toyota told NASA it had EDAC (ECC) [Bookout 2013-10-14PM 83:19-84:25] • Exponent public report claims ECC for Main CPU [p. 201] • Only claims SEC, not SECMED •But, actually no EDAC on RAMfor 2005MY vehicle [Bookout 2013-10-11 AM 55:22-25; 2013-10-14 AM 72:5-73:11; 2013-10-14AM

78:16-79:17]

10 [NASA REPORT P. 54] © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license. $1.6B Economic Loss Class Action • "Lawsuit pursues claims for breach of warranties, unjust enrichment, and violations of various state consumer protection statutes, among other claims." • https://www.toyotaelsettlement.com/ • 2002 through 2010 models of Toyota vehicles • Toyota denies claims; settled for $1.6 Billion in Dec. 2012 • Brake override firmware update for in some recentmodels 11 https://www.toyotaelsettlement.com/

3 August 2014

Bookout/Schwarz Trial

• October 2013, Oklahoma • Fatal 2007 crash of a 2005 Toyota Camry •Neither floor mat nor sticky pedal recalls cover this MY; no "fixes" announced • Toyota blamed driver error for crash • Mr. Arora (Exponent) testified as Toyota software expert • "[Toyota's counsel] theorized that Bookout mistakenly pumped the gas pedal instead of the brake, and by the time she realized her mistake and pressed the brake, it was too late to avoid the crash" • Plaintiffs blamed ETCS • Dr. Koopman & Mr. Barr testified as software experts • Testified about defective safety architecture & software defects •150 feet of skid marks implied open throttle while braking 12 toyota-crash-verdict/] © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license. 13 -sua-jury-verdict-form-1.pdf (excerpts)] © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license. 14

Bookout

Trial

Reportinghttp://www.eetimes.com/do

cument.asp?doc_id=1319

903&page_number=1

(excerpts)

Task X death

The Bookout/Schwarz Results

• Jury awarded $3 million compensation • Key point in trial was whether ETCS design defects caused the fatal crash • To this day, Toyota disputes that their ETCS is flawed • $1.5M each to Bookout and Schwarz estate • Toyota settled before jury could consider awarding additional, punitive damages • Subsequent Federal trials put on hold • Only ETCS software/safety case to actually go to trial • Remaining Federal trials deferred • Mass settlements proceeding during 2014 •Hundreds of cases pending being settled as of summer 2014 15 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

US Criminal Investigation

The Technical Point of View

• NASA didn't find a smoking gun, but... • They found plenty that is technically questionable • It was a difficult assignment with limited time & resources • Jury found that ETCS defects caused a death • Experts testified ETCS is unsafe .. .. but jury is non-technical • So........let's consider public information and you can decide if ETCS is safe for yourself • Consider accepted practices circa 2002 MY vehicles •UA loss of command authority over the throttle • Consider if "reasonable care" was used • Standard of evidence is "more likely than not" 17 © Copyright 2014, Philip Koopman. CC Attribution 4.0 International license.

ETCS Architecture

(simplified) 18

Source:

NASA UA

Report

Figure

6.4.1-1;

not all functions are depicted

Accelerator

PedalVPA1

VPA2

Cruise Control

Transmission

Shift Selector

Vehicle SpeedVTA1

VTA2Monitor ASIC

quotesdbs_dbs20.pdfusesText_26

[PDF] A Case Study of Toyota Unintended Acceleration and Software Safety

What Is The Toyota Acceleration Problem?

What Is Unexpected acceleration?

What Caused The Toyota Acceleration Problem?

Has Toyota Faced Consequences For The Acceleration Problem?

Does Unintended Acceleration Affect Other Vehicles?

What If My Vehicle Is Defective?

What is a Toyota unintended acceleration lawsuit?

Why does my Toyota have a sudden acceleration problem?

What causes Toyota accidents?

What should I do if my car accidentally accelerates?

A Case Study of Toyota

Unintended Acceleration and

Software Safety

Prof. Phil Koopman

September 18, 2014

Carnegie Mellon University

Overview

Aug. 28, 2009, San Diego CA, USA

Mark Saylor, 45 year old male.

Recalls & Public Discussion

May 25,

NASA Investigation

Toyota 2008 ETCS - Two CPUs

Software)Monitor

Software)

Toyota ETCS Is Safety Critical

175 pounds of force on brake pedal

Wide Open Throttle (WOT)

NASA Conclusions

Did NASA Have Correct & Complete Information?

78:16-79:17]

3 August 2014

Bookout/Schwarz Trial

Bookout

Reportinghttp://www.eetimes.com/do

903&page_number=1

Task X death

The Bookout/Schwarz Results

US Criminal Investigation

The Technical Point of View

ETCS Architecture

Source:

NASA UA

Report

Figure

6.4.1-1;

Accelerator

PedalVPA1

Cruise Control

Transmission

Shift Selector

Vehicle SpeedVTA1

VTA2Monitor ASIC