VX\gYRmW`NjmTA]Oem[bj\O­³°n|n|VX\g]UPm4faWhm^¡¥±©2£«,"#+,%,'%#)$*

#&#-.E

71ɍEngineering'SystemsƐĴĠƾ#kɍÎpxpxŷxĝċēĐƾ

Jkɍ£¤ĪipxpxŷƨƛƣċēĐƾp¦żÝȴɁȋǪǥļÀŲĂɂɈɌųɃƾǅǍǻǮǶǮǖǲǙǆƾǅǖǋǫǧǻǆƾǅǴǢǯǐǆǁƾƐƎƏƎƒÇǹǻ£¤px6¶¯ƾƠƤƚƥƨƜ½Ê´ūōĖȴȿȥɁƾƠƨƥƊơƩƚƏƍƨƚƕƊƬƞƒƐǅȃɁȌȜȍȚȶǆ

ǁǁ_2Ô• ƦƣƠ½Ê´ūƊƦƝƣƍƦƞƣƊƬƞĴĠƾÆşǫċēȜɁȱɍ¼êŕƾȐȿȗȬȞȝȒȅȿƍǁǁȐȿȗȬȞȈȿȔȠȃȺȿȎƾpŇÜȓȕȜȳȝȒȅȿƾƉ"ƁȓȕȜȳȝȒȅȿƾȅȣȭɁȜȄȫȝȒȅȿƾƱƺƯƒ JLPVME[KRBY[HƔȓȕȜȳȖȈȿȔȠȃȺȿȎ7ɍINCOSE'SE'Handbook'    "$)#$#"" ##ƕ

VX\gYRmW`NjmT¯
JLPVME[KRBY[HA|i4?
.79te JLPVjk
1 gn1>gq`+B-FPGOWjkAbv3+al;9gqA{\4?te D[PHZ-JX[
1 ms9x@65ITJLPVAz_4?te r,o
1 E[KRBY[Hte802?o0=:ms&"*$ , fhup&$ 9te
 JLPVME[KRBY[H}c
1  A545<8+yte9kw,bv,rA]/teƖƫȵȝȻ678=,)

678=

Valida1on'

678=
.-
5;?678=,)

5;?678=.-!#&/2-*

678=
/2

Veriﬁca1on''5;?678=/2-*
''5;?678=

5;?678=/2

4><@3:>9,)

4><@3:>9.-

4><@3:>9

4><@3:>9/2-*

4><@3:>9
/2
%'"$

(1+0ȓȕȜȳȖȈȿȔȠȃȺȿȎĚûƗVȵȝȻǪŴǛǼųũǌ• VȵȝȻǬǂÂĝ;ĄǩȬȽȗȕǧǩǣǥǊǼĭǌ¼ȀľǙǠǷǫǦǉǼƏƎɍǅǖǋǫǧǻǆJLPVME[KRBY[Hd^~802?QCU[NSYPCƏƏıÃy{Ýz/ōŋǫŅǅǡǊǢǆɐJAXAɐNASAɐNASAƏƐǅǖǋǫǧǻǆǧǬ71ɍ'JAXA'(HTV1Press'Kit)
ƏƑǅǖǋǫǧǻǆǧǬ/űɍĞ9.8m'
ćɍĞ4.4m'
ĨřŮɍÆp16.5ton'
ŁĤĲ?ɍÆp6ton'

71ɍ'JAXA'(HTV1Press'Kit)
ƏƒǅǖǋǫǧǻǆǪǍǔǼz/ōŋɍȐȿȗȬȞ• ƟƩƫǦÆǷȍȺȜȄȋȻǩȤȒɁȟɎĽĕɎĽĕŜŨǰǫ©.– ƚƮƺƮƹƺƸƶƷƳƴƯƊƟƮƼƮƸưɎƐƊƝƮƴƵƊƨƮƲƱǫŅæ• ƝƩƙǪǹǼ8ÏǫģÐǂǫɊǤǏĽĕŜŨǰǫ©.ǫ ǩƚƮƻƹƱ– ȱȡɁȥÂǪ |ǹǻpǐǩƽƫɂ]ŮɃȀĂüǛǼ– ȱȡɁȥÂǪ |ǹǻǘǩƽƫȀĂüǛǼ– ȱȡɁȥǏ |ǘǽǥǊǩǊǧǐǪƽƫȀĂüǛǼ71ɍz/xȓȿȰȔȆȳ2011ƏƓǅǖǋǫǧǻǆǪǍǔǼz/ōŋɍȐȿȗȬȞ

?V 

Aţȗȿȑ&ǏǘǒǂǳǡG8Ǫ]ǙǥǩǊǧǴǩǙǥǙǳǋǃȐȿȩȷɁșǫŋęģÐǏ
ųũǣǥǙǳǊǂ |ǹǻoǒ]ǙǥǙǳǋǃ  ?V 

ȐȿȩȷɁșǎǺ]'ßǫ­ǏÍǥǊǼǏǂȥȻȫǏȕșțȍǛǼǩǨǪǹǻVǐĦǔǥǙǳǋǃ     71ɍz/xȓȿȰȔȆȳ2011ƏƔǅǖǋǫǧǻǆǪǍǔǼz/ōŋƘz/Ņæ•ȓȕȜȳz/Ņæ'– 2'Fail'Safe'for'Catastrophic'Hazard,'1'Fail'Safe'for'Cri1cal'Hazard'•ȐȿȩȷɁșȓȕȜȳz/ōŋŅæƊ(CBCS:Computer'Based'Control'System'Safety'Requirements)'– Must'Work'Func1on'(MWF)'Ņæ'• ÝĲǏrǿǽǼǧȤȒɁȟǪǩǼhR' ǌǭǂìȗȿȕǛǼÝĲǏrǿǽǼǧǂèƈǘǝǼǧǐǪAõǙǛǑǥǙǳǋ'• ȪȉɁȻȞȞȼȹȿȕǪǹǼ='ǀȗȿȑȀŃ·¬ǠǝǼ– Must'Not'Work'Func1on'(MNWF)Ņæ'• Ū9ǩșȅȲȿȎǦÝĲǏDǛǼǧȤȒɁȟǪǩǼhR'• ȅȿȧȨțȞǪǹǼ='ǌǭǂ¦ǏNǫǪǉǼǧǐǪǂųũǣǥǍ
îǏǦǼǧò*ȀǙǥǙǳǋ'ǀȽțȍÝÚȀ¬ǠǝǼ– ķŅæ'• ȤȒɁȟ=ǪǿǽǼȐȿȩȷɁșKǯȘȪȞȆȇȃǪǛǼŅ
æ'71ɍǅǖǋǫǧǻǆ(HWIITransferVehicle:HTV)ǪǍǔǼȐȿȩȷɁșȓȕȜȳz/ōŋ(2011)

ƏƕǅǖǋǫǧǻǆǪǍǔǼz/ōŋ
controller of switching the string   ȲțȓȸȿȀĥĦǦǐǼ
ÝĲ'ɎàǙǒΔVȀ='Ɏz/  ȲțȓȸȿǬĥĦǦǐǩǊǏǂz/ǩȼȭȻǦΔVȀ
=ǛǼÝĲùa=ǪǣǥǊǼȃȍȚȷȈɁșɍȱȡɁȥĴȀĎßǦǐǩǊǠǶǂΔVǉǼǊǬAţŮȀȵȠșǙǩǏǺǂāǏǉǣǠhRǪǬȃȍȚȷȈɁșȀ9ǻÅǌǼǖǧǦ'71ɍz/xȓȿȰȔȆȳ2011ƏƖǅǖǋǫǧǻǆǪǍǔǼz/ōŋ
controller of switching the string 

 

 

ɊĝǉǼǠǶǂɈĝǫǴǫǧǐǹǻǷ"ƁǫǊūYȀ<þǏOĲ

  

ȐȵȿȵɁȟµź'• ȘȪȞȆȇȃǬɊđƃ'• ȐȿȩȷɁșǷɊđƃ'• ȗȿȑƃǬǂođȗȿȑ

71ɍz/xȓȿȰȔȆȳ2011ƏƗǅǖǋǫǧǻǆǪǍǔǼz/ōŋɍƿōŋɂŹFƝƛƠƧɃ• FDIR'(Fault'Detec1on,'Isola1on'and'Recovery)'• Layered'FDIR'architecture'
Casue1

Cause1.1– Wide'coverage'of'cause'– Quick'response'to'failure''ǁǁǁɂȲțȓȸȿĥĦǫǠǶǪŭŅɃ
Cause1.2

Cause1.1.1

Cause1.1.2

Cause1.1.3

Cause1.2.1

Cause1.2.2

Cause1.2.3

71ɍŋíĴD=xý×ŕ¸őLevel 3 FDIRǁɁƉȋȥȼțȔǁɅȼȕȰȿȕ

Level 2 FDIRǁɅ ȋȥȼțȔǁɅ ȼȕȰȿȕ

Level 1 FDIRǁɅȋȥȼțȔǁɅƉȼȕȰȿȕƐƎ

VX\gYRmW`NjmTE~v}

ƐƏȓȕȜȳȖȈȿȔȠȃȺȿȎ0INCOSE'SE'Handbook'      VX\gYRmW`NjmTE¨C¤nA ¦ƐƐ

Systems'Engineering'ĀDTǇŪþȟȴȅȿǫ«pǈ'• ŵļ/ĶĔ/y{→ǫý×ǰ'– Transporta1on'– HealthcareǂBiomedical'– Automo1veɂŵļ/ĶĔ/y{ǎǺūȀM.ǃǷǢǾȁšǷɃ'– Consumer'Product'• Ĵý×ǰǫȋȕșȱȅȖɂex.'P&GǫȦȿȦɁȕɃ'ǇSystems'EngineeringǫŦFǈ'• ¼êŕǫŦFɍMBSE'• Ūþƀeǫ«pɍ$ĉF'ƐƑuwE yi]kd6X_4VX\gYRmW`NjmTƐƒ71ɍ½:×»į

SysMLƐƓ• SysMLǦǏǦǐǼǫǎɏ• ÚŤɇ®ǼĵǊɇŅæɇȦȹȴȞȺțȍ=Ğ• H+×• ȐȿȋȼȿȞȈȿȔȠȃȺȿȎÄĜǫǗĠɂPractical Guide to SysMLǫĬŎÊɃ• ȓȕȜȳȖȵȝȺȿȎŊœƊSysML71ɍAmazon• ńÌƊďXɂąŎɃɄăc¥@Ʉ¥ŞĈɄűŗgɄ ŀüɄī• ĸĮɍSanford Friedenthal, Alan Moore, Rick Steiner• 7÷čɍ • Ăl½ɍ20125Ç10½ƐƔ§E¤n5²´yƐƕ.,-') .,-',(!#(+#(!  (!#(+#(!.,-', 

(-+*+#,.,-',(!#(+#(! p®5'/)()'ƐƖ)#$ )#$#p®5.,-',(!#(+#(!())%ƐƗ&%"
)#$#"'$$ !($) $""$)#$#

“The Seven Samurai of Systems Engineering'
Dealing'with'the'Complexity'of'7'Interrelated'Systems”'
By'James'Mar1nƑƎ$"!"#)#$#" &%"

“The Seven Samurai of Systems Engineering'
Dealing'with'the'Complexity'of'7'Interrelated'Systems”'
By'James'Mar1nƑƏEnterprise'Systems'Engineering

71ɍEnterprise'Systems'EngineeringƑƐ")#$#71ɍEngineering'SystemsƑƑɍ$ĉFǘǽǠȓȕȜȳJLPVME[KRBY[HƑƒr75 clWQS^

71ɍDARPA'F6ȬȽȔȇȍȞƑƓr85HBK>clWQS^36'ǱǨǹǙȬȽȔȇȍȞɍɋǤǫĆÛƿ
W'2010ɓ2014ǁÆ-ėċēŲĂ´²ȬȽȎȹȳƊW'ǁƊĀȞțȬåðǫŚdļÀɂ50ɒɑȍȹȕɃȀȐȕȞɂ3,3ɃǂĊÉųɂ22ɃǦŲĂɀŧþǦǐǼ`PȀÚěǙǂĀǪ-ƆǔǥǞǫCÐĄǩ<þȀŲªǛǼǖǧɈɆŚdļÀǪŪǙǠǅǱǨǹǙ"ƁxǆǸŐƇ¦êȀUǶǠŲĂȬȽȗȕǫÚěɉɆŲĂȀ´ǌǼ_2ǫȑȬȹȅȚȇɁȿȢțȞȾɁȍǫÚěǧËİ¥ɊɆȑȅȖäǫĲǏĀȼȭȻǫŅğÝ\Ǹ-ŦĄbǫċēŲĂɋɆÍǪǩǊ»ǙǊy{<þêǧ<þȐȲȷȠȜȄȀŲªǙǂļÀŲĂɀ<þý×ǪǤǩǕǼ
71ɍ2013y{Đx¨ĻťRŖñĂľŘºƑƔǱǨǹǙ"ƁxǧǬ

71ɍ2013y{Đx¨ĻťRŖñĂľŘºƑƕǱǨǹǙ"ƁxɍfÊ¼ů• ɊǤǫÓƏƋ ļÀǫ"ƁǪǅĈǪǆſȀǌǼȪȂȍșȀņØǶǂǞǫȵȝȻFȀĺǋǖǧƐƋ ǞǫŉóǫǷǧǂĈǫȓȕȜȳ"ƁȀƉǶǺǽǼōŋ¦êǫ°ēƑƋ ŲĂȬȽȗȕǪǍǔǼôƅǩǒ"ƁȀħ¬ǛǼ¦êɂȬȽȗȕȃȬȽɁȚɃǫ°ē
0ŢȐȿȗȬȞÍǫZƂō|ǫÑǪǧǺǿǽǜǂǞǽȀãŹn)Ǫ
ǕǂǞǫ ǦjǌǠĴÿǷ<þǙǥ/ÆŪȀĆ­71ɍ2013y{Đx¨ĻťRŖñĂľŘºǛȃȬȽɁȚƑƖ"ƁǪĈǪſȀǌǼȪȂȍșɁǫ7
ȓȕȜȳ"ƁɎōŋ"Ɓ''''''''''''''''''''''''''''''''''''''''''×'ōŋŢǻǪDǛǼ"ƁƊƊƊƊƊƊƊƊƊɂɈɃōŋŢǻǪDǛǼ"ƁɎ(πɈ,'πɉ,'πɊɃ×πɋǁǁƊƊǁǁƊƊƊǁǁɂɉɃ'πɈɍȽȔțȍȲȕǸōŋȲȕĘǫȧȷɁȱȿ'ȪȂȍșɁȀĭ¢ǙǠƊōŋ"Ɓ(5)π2ɍōŋŢǻǪǺǽǠǎǫłŤ"Ɓ  (3)π3ɍŐƇǸŜŨ}ŏǪǹǼDČŒǏ'(16)Č}ǪǦǐǥǊǼǎǫ}ŏ"Ɓ(9)π4ɍŧþǏļÀōŋÂǪ ÉǘǽǠŢǻ'ǪČ}ǪĺǿǽǼǎǫŧþ"Ɓ71ɍ2013y{Đx¨ĻťRŖñĂľŘº

2002ɓ2006Ʉ11ļÀɄ/33ƊƑƗ
(by'y{ċǁ¹Ĺ-üǫŔÔɃŃŻǫ­Û• ōŋŢǻǪDǛǼ"ƁǫŅ^ɎŃŻ'• ǅȐȿȜȍȕȞɂ¸ĳɃ·ǆǫÙɍ'ǁǁǅāǩǼbŐƇȀŅǧǙǂųǏǞǽǟǽǫøéǦǫÝ\ǫDǫ(/ȀĭǌǩǊǧǊǔǩǊȐȿȜȍȕȞɂ¸ĳɃǫ·ǆǧǊǋÙȀ±ÕǙǂǞǫġǴ
RǿǝĄöĂǏ"Ɓǫǧ·ɂŲĂǫB?Ƀ
ǫjpǪǤǩǏǼǃ''ǁƊ"ƁǫTǬǂǅȐȿȜȍȕȞ·ȀtǪ ǩǒǛǼǎǆǂǳǠǂǅȐȿȜȍȕȞǫhRǫ·ǫöĂǫťŰȀtǪ9ǼǎǆǧǊǋňóǦȃȅȝȃȀŠæ
71ɍ2013y{Đx¨ĻťRŖñĂľŘºƒƎǨȁǩvEǦǷqŸż?Č!ǦǐǼōŋ• qŸżçȦȟȻ¼Ɗvs.'ȯȝȄɁȱȆȿȞ¼'• vE=Ĳ?ǪļÀǫ'ɀĂüż?ŮǬ=ŶǘǽǼǏǂ'üǐáǪǏ wǛǼ'ǁüǐâǽǼɀÂųŀǏǉǼǃ'ɂȐȿȜȍȕȞǫ³ǉǻɃ'ǅvEǧǊǋȐȿȜȍȕȞǪļ
• qŸżçǫǩǊžǏǉǣǥǷ'ǅļÀvEǏŽßǛǼǖǧǬǩǊǆ' Àǫż?Ǐ wǙǩǒǩǼǆƊ
Ȁ!źǛǼǖǧǦ71ɍ2013y{Đx¨ĻťRŖñĂľŘºƒƏǱǨǹǙ"ƁxɍfÊ¼ů• ɊǤǫÓƏƋ ļÀǫ"ƁǪǅĈǪǆſȀǌǼȪȂȍșȀņØǶǂǞǫȵȝȻFȀĺǋǖǧƐƋ ǞǫŉóǫǷǧǂĈǫȓȕȜȳ"ƁȀƉǶǺǽǼōŋ¦êǫ°ēƑƋ ŲĂȬȽȗȕǪǍǔǼôƅǩǒ"ƁȀħ¬ǛǼ¦êɂȬȽȗȕȃȬȽɁȚɃǫ°ē
0ŢȐȿȗȬȞÍǫZƂō|ǫÑǪǧǺǿǽǜǂǞǽȀãŹn)Ǫ
ǕǂǞǫ ǦjǌǠĴÿǷ<þǙǥ/ÆŪȀĆ­42'ǛȃȬȽɁȚ
71ɍ2013y{Đx¨ĻťRŖñĂľŘºƒƐōŋŕǰǫLÁɍȺȗțȞǫ<þ• PCǪǍǔǼȺȗțȞǦǫɍǉǼ¡WǦĲ'– øéǪǎǎǿǺǜSǚ¦ǦëǵɂȐȿȜȍȕȞ·ɈɃ'• ȺȗțȞǬǅĥĦȊȮȼɁȓȸȿȀǉǐǺǶǼǆǧÅǌ'• ǅȺȗțȞǦǛǼǆǖǧǏČ}ǡǧǊǋ>±ǪĖǥǭǂ5űĝǛǼǹǻǷȺȗțȞȀČ}ǪǙǠ¼ǏCÐĄ'1.0 0.8
  0.6

1.0

0.4
0.00.5 0.5

 

71ɍ2013y{Đx¨ĻťRŖñĂľŘº
1.00.0ƒƑōŋŕǰǫLÁɍŜŨȓȕȜȳ4Ú¥Ĳ?
• ȼȭȻɈɍŜŨǦȘȪȞȆȇȃȀ¿Ǫ4Ú¥ǦǐǼōŋ'• ŜŨǦǹǻÆŪǩȦȹȴșǪȚȷɁȠȿȎɂ§ǢǕÂǬbúŁśǳǦ7ÍǽǭǹǊǃɃ'•|nǫøéǪǙǥǷ'• Ƅ~ǫŅÈmFǰǷÒŝǪ'• ȼȭȻɉɍȐɁȝȄȿȎȀǙǩǊȘȪȞȆȇȃŲĂ'• Ȧȹȴșō|ǪǹǼSDKȹȅȫȹȺǎǺȘȪȞȆȇȃȀ}ù'• IȵȔȷɁȻǫōŋÖŏǧłŤÖŏǏŅ'• ȘȪȞȆȇȃ/ǫÖŏǬ§ǢǕǳǦǪŅǩǧǖǾ
ȀÖŏ'
71ɍ2013y{Đx¨ĻťRŖñĂľŘºƒƒǱǨǹǙ"ƁxɍfÊ¼ů• ɊǤǫÓƏƋ ļÀǫ"ƁǪǅĈǪǆſȀǌǼȪȂȍșȀņØǶǂǞǫȵȝȻFȀĺǋǖǧƐƋ ǞǫŉóǫǷǧǂĈǫȓȕȜȳ"ƁȀƉǶǺǽǼōŋ¦êǫ°ēƑƋ ŲĂȬȽȗȕǪǍǔǼôƅǩǒ"ƁȀħ¬ǛǼ¦êɂȬȽȗȕȃȬȽɁȚɃǫ°ē0ŢȐȿȗȬȞÍǫZƂō|ǫÑǪǧǺǿǽǜǂǞǽȀãŹn)Ǫ
ǕǂǞǫ ǦjǌǠĴÿǷ<þǙǥ/ÆŪȀĆ­71ɍ2013y{Đx¨ĻťRŖñĂľŘºǛȃȬȽɁȚŲĂȬȽȗȕǪǍǔǼôƅǩǒ"ƁȀħ¬ǛǼ'¦êɂȬȽȗȕȃȬȽɁȚɃǫ°ē• ŲĂŘïɂĄUǵɃ/ȀņǥǫÆŪŬ8ǫÖŌɍĆĄȀ¾ČFɂȴșȬȽȗȕFɃɅȝȒȅȿȼȨȷɁǁǁɅ¸ÄĚûǁǁǁɅŐƇǫÆF• nū×ǧȅȿșɁȪȇɁȕȀ9ǣǥǫsĞǬĴÿȀuǕǥǙǳǋɅSǫŲĂȚɁȳǧǙǥH+ǁɂƨƨƩƢƌƊƨƷƮƯƱƭĘǫ¥@ɃɅƄ~ǧǷ0SǦĆÛĲɀ"Ɓō|ɂĴÿǏjǌǼɃ• %ǄǫȬȽȔȇȍȞǦǬǩǒĥĦǙǠȬȽȎȹȳȼȭȻǦǫ"ƁĚûɅȴȅȿƚƦƪǫĿǦÞƚƦƪǫŐƇǁǁɅÛðFǦ}ĩ·ȀĒǓ
71ɍ2013y{Đx¨ĻťRŖñĂľŘºƒƔņǌǼF→ȃȓȷȃȹȿȕȏɁȕǫ.'DWCASEǪǹǼǱǨǹǙɊQÝżïĝōŋ

71ɍ2013y{Đx¨ĻťRŖñĂľŘºƒƕr95qclZX]UPmAz
osD<=LqclZXEzA¢xGE{71ɍ2013½ÊĢ[ȓȕȜȳxĂľŘºƒƖIAJ• VX\gYRmW`NjmTA]Oem[bj\OE Ft;
• VX\gYRmW`NjmTE§{¬ª¤nD:M?@3§{¬ªE¤nƒƗDesign the future!
www.sdm.keio.ac.jp