📚 Course ContentsChapter 4 Process Failure Mode and Effects Analysis (PFMEA) for restraint manufacturing

4. Process Failure Mode and Effects Analysis (PFMEA) for restraint manufacturing

Process Failure Mode and Effects Analysis (PFMEA) is the structured risk-assessment method that translates a restraint system's design intent into manufacturing process controls. In occupant-safety manufacturing, PFMEA is not a documentation exercise; it is the analytical bridge between what the product must do (as defined by DFMEA and drawing requirements) and what the production line must actually control to guarantee that performance. This chapter examines how PFMEA is applied to the four dominant restraint manufacturing process families — assembly, welding, crimping, and gas generant handling — and how its outputs feed directly into control plans.

From Design Intent to Process Risk

PFMEA begins with a process flow diagram that decomposes manufacturing into discrete steps, each with defined inputs and outputs. For each step, the team identifies potential failure modes, their effects (at the process, product, and end-user levels), their causes, and the existing controls. Severity, Occurrence, and Detection are rated on the AIAG-VDA Action Priority framework, and the resulting Action Priority (High, Medium, Low) drives improvement decisions.

In restraint manufacturing, severity is rarely negotiable. A gas generator that fails to deploy, a weld that separates under load, or a crimp that leaks gas generant all map to severity 9 or 10 because the effect is a potential occupant fatality. This means the entire risk-reduction strategy must focus on reducing Occurrence and improving Detection — the process must be made incapable of producing the defect, and the detection method must catch it if it does.

Key principle: In safety-critical restraint processes, a High Action Priority rating cannot be closed by adding inspection alone. The preferred sequence is: eliminate the cause through process design, then reduce occurrence through parameter control, and only then improve detection through error-proofing.

PFMEA Across the Four Process Families

Each restraint manufacturing process family presents a distinct risk profile. The table below summarizes representative failure modes, causes, and control strategies that a PFMEA team would evaluate.

Process Family	Representative Failure Mode	Typical Cause	Control Strategy
Assembly	Incorrect component orientation (e.g., retractor pre-tensioner installed reversed)	Ambiguous fixture, operator error, missing poka-yoke	Asymmetric fixture design, vision verification, torque-monitored fastening
Welding	Insufficient weld nugget diameter on bracket-to-rail joint	Electrode wear, current drift, poor part fit-up	Weld current/force monitoring, periodic destructive peel test, electrode dressing schedule
Crimping	Under-crimped gas generant closure	Die wear, incorrect crimp height, material springback	In-line crimp height measurement, force-displacement signature monitoring, die maintenance interval
Gas Generant Handling	Moisture ingress or contamination of propellant	Inadequate dry-room control, exposed transfer, contaminated tooling	Humidity monitoring, sealed transfer containers, cleanroom classification, material traceability

For assembly, the dominant risk is human error and fixture capability. A PFMEA team should evaluate whether the fixture physically prevents incorrect orientation (preferred) or merely relies on operator attention. For welding, the risk is process drift — electrode wear and current variation change the heat input, which changes nugget geometry, which changes joint strength. The PFMEA must link these process parameters to the product characteristic they affect. For crimping, the critical characteristic is the crimp height and the resulting seal integrity; the PFMEA should identify the force-displacement curve as a process signature that can be monitored in real time. For gas generant handling, the risk is environmental and contamination-based; the PFMEA must address humidity, electrostatic discharge, and material exposure time as process parameters with defined limits.

Linking PFMEA to Control Plans

The control plan is the operational output of the PFMEA. Every failure mode with a High or Medium Action Priority must have a corresponding control in the control plan, and the control plan must specify the same process step, characteristic, specification, evaluation method, sample size, frequency, and reaction plan that the PFMEA identified. The linkage is bidirectional: if the control plan lists a check that the PFMEA does not justify, the PFMEA is incomplete; if the PFMEA identifies a risk with no control plan entry, the control plan is incomplete.

Consider a crimping operation. The PFMEA identifies "under-crimped closure" as a failure mode with severity 10, occurrence 4, and detection 3, yielding a High Action Priority. The team decides to install an in-line force-displacement monitor that compares each crimp cycle to a validated signature. The control plan entry then reads:

Process Step: Crimp gas generant closure
Characteristic: Crimp force-displacement signature
Specification: Peak force 2.4–2.8 kN; displacement at peak 1.8–2.2 mm
Evaluation Method: In-line signature monitor, 100% inspection
Sample Size / Frequency: 100% of units
Reaction Plan: Stop line, quarantine parts since last good signature, notify quality engineer, verify die condition

This entry is directly traceable to the PFMEA line item. The reaction plan is not generic; it specifies what to do with suspect material and what process condition to investigate. This traceability is what auditors and customers expect during a PPAP review.

Practical PFMEA Execution for a Crimping Process

To illustrate how a PFMEA is actually built, consider a crimping station for a gas generant closure. The team starts with the process flow: load generant, position closure, crimp, inspect, unload. For the crimp step, the team asks: what can go wrong? The closure can be under-crimped, over-crimped, misaligned, or contaminated. Each failure mode is analyzed separately.

For under-crimp, the effect is a gas leak or insufficient retention force, leading to non-deployment or partial deployment — severity 10. The cause is die wear or incorrect crimp height setting. The current control is a manual go/no-go gauge checked every 30 minutes. Occurrence is rated 4 because die wear is gradual and the 30-minute interval may allow several hundred parts to be produced before detection. Detection is rated 4 because the gauge only checks height, not force. The Action Priority is High.

The team's action is to install a force-displacement monitor with 100% inspection and a validated signature window. After implementation, occurrence drops to 2 (the process is monitored continuously) and detection drops to 2 (the monitor catches deviations in real time). The Action Priority becomes Medium, and the control plan is updated to reflect the new control method, sample size, and reaction plan.

Gas Generant Handling: Special Considerations

Gas generant handling introduces risks that are not present in conventional metal-forming or assembly processes. The propellant is sensitive to moisture, electrostatic discharge, and contamination. A PFMEA for this process family must treat environmental parameters as process characteristics. For example, dry-room relative humidity might be specified at ≤1% RH, with continuous monitoring and an alarm that stops production if the limit is exceeded. The PFMEA would identify "moisture ingress" as a failure mode, "inadequate dry-room control" as a cause, and "continuous humidity monitoring with interlock" as the control. The control plan would then specify the humidity limit, the monitoring frequency (continuous), the alarm response, and the reaction plan (quarantine material, re-verify propellant, investigate HVAC).

Similarly, electrostatic discharge is a cause of ignition or degradation. The PFMEA should identify grounding and ionization as controls, and the control plan should specify grounding verification frequency and ionizer maintenance. Material exposure time — the duration propellant is exposed to the environment during transfer — is another process parameter that must be limited and monitored.

Keeping PFMEA and Control Plan Aligned

PFMEA and control plan are living documents. When a process change occurs — a new die, a modified weld schedule, a different propellant lot — the PFMEA must be reviewed to determine whether new failure modes or changed ratings are introduced. If the change affects a High Action Priority item, the control plan must be updated before production resumes. A common audit finding is a control plan that lists a check that no longer exists in the PFMEA, or a PFMEA that identifies a risk with no corresponding control. Maintaining the bidirectional linkage is the core discipline of restraint process quality.

Practical tip: Use the PFMEA Action Priority as the trigger for control plan updates. Any line item rated High must have a control plan entry with a specific reaction plan. Any line item rated Medium should be reviewed at least annually or after any process change. Low-priority items still require controls, but they can rely on standard work instructions and periodic audits.

In summary, PFMEA for restraint manufacturing is a process-specific risk analysis that must address the unique failure modes of assembly, welding, crimping, and gas generant handling. Its value is realized only when its outputs are translated into a control plan that specifies what to check, how often, and what to do when the check fails. The traceability between the two documents is the foundation of a compliant and safe restraint production system.