Scenario- and Model-Based Systems Engineering Procedure for the SOTIF-Compliant Design of Automated Driving Functions | IEEE Conference Publication | IEEE Xplore