Abstract: A computer implemented method, apparatus, and computer usable program code for designing a health monitor system for a vehicle. A functional model of the vehicle is created. A hazardous condition is identified that can occur during operation of the vehicle using the functional model. A model of causes is created for the hazardous condition and hazard cause controls are identified to avoid the hazardous condition using the model of causes, wherein the controls prevent causes of the hazardous condition from occurring. A set of monitors is identified to monitor the controls.

Abstract: A method and apparatus for hazard prevention. A vehicle has a hazard prevention system. The hazard prevention system includes a plurality of hazard cause controls, a health monitor system, and a vehicle control system. The plurality hazard cause controls are associated with a hazardous conditions and each hazard cause control in the plurality of hazard cause controls is associated with a system in the vehicle to prevent a hazardous condition from occurring during operation of the vehicle. The health monitor system monitors the hazard cause controls to determine if each of these hazard cause controls is operating properly and generates an alert if a hazard cause control is operating improperly. The control system is in communication with the health monitor system, wherein the control system receives alerts and provides a corrective action to avoid the hazardous condition.

Abstract: A computer implemented method, apparatus, and computer usable program code for designing a health monitor system for a vehicle. A functional model of the vehicle is created. A hazardous condition is identified that can occur during operation of the vehicle using the functional model. A model of causes is created for the hazardous condition and hazard cause controls are identified to avoid the hazardous condition using the model of causes, wherein the controls prevent causes of the hazardous condition from occurring. A set of monitors is identified to monitor the controls.

Abstract: A method and apparatus for hazard prevention. A vehicle has a hazard prevention system. The hazard prevention system includes a plurality of hazard cause controls, a health monitor system, and a vehicle control system. The plurality hazard cause controls are associated with a hazardous conditions and each hazard cause control in the plurality of hazard cause controls is associated with a system in the vehicle to prevent a hazardous condition from occurring during operation of the vehicle. The health monitor system monitors the hazard cause controls to determine if each of these hazard cause controls is operating properly and generates an alert if a hazard cause control is operating improperly. The control system is in communication with the health monitor system, wherein the control system receives alerts and provides a corrective action to avoid the hazardous condition.