Electronically controlled safety-critical functions are becoming more and more prevalent in the off-highway industry (construction, agricultural or forestry machinery etc). Failures of such safety-critical functions may cause serious injury or death to people. Therefore, product safety and liability are becoming increasingly important for all OEMs in this industry. Currently, IEC 61508 [1] is considered the state-of-the-art standard for the development of safety-critical systems. Safety integrity levels (SIL) 2 and 3 are the most common levels required by off-highway applications.This paper shows a scalable architecture with a single ECU type that allows fulfilling both SIL2 and SIL3 requirements: A 1oo1D architecture (single ECU) will be used for systems with SIL2 requirements, a 1oo2D architecture for SIL3 requirements. In the 1oo2D variant two redundant ECUs exchange data over a time-triggered protocol. Due to this scalability the controller is suited for the majority of safety-critical applications in the off-highway industry.
SIL2 and SIL3 ECU - Safety Controller for Off-Highway
Sae Technical Papers
SAE World Congress & Exhibition ; 2007
2007-04-16
Conference paper
English
SIL2 and SIL3 ECU - safety controller for off-highway
Automotive engineering | 2007
|2007-01-1489 SIL2 and SIL3 ECU - Safety Controller for Off-Highway
British Library Conference Proceedings | 2007
|SIL2 and SIL3 ECU - Safety Controller for Off-Highway
British Library Conference Proceedings | 2007
|SIL3 fuer mobile Arbeitsmaschinen
Automotive engineering | 2017
|SIL3-Anwendung: Elektrische Parkbremse
Automotive engineering | 2007
|