Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. The addition of a second microcontroller and the associated support circuitry that is required adds to the overall costs of the ECU, increases the size and creates significant system complexity.
Basic Single-Microcontroller Monitoring Concept for Safety Critical Systems
Sae Technical Papers
SAE World Congress & Exhibition ; 2007
2007-04-16
Conference paper
English
Basic Single-Microcontroller Monitoring Concept for Safety Critical Systems
British Library Conference Proceedings | 2007
|Basic single-microcontroller monitoring concept for safety critical systems
Automotive engineering | 2007
|2007-01-1488 Basic Single-Microcontroller Monitoring Concept for Safety Critical Systems
British Library Conference Proceedings | 2007
|British Library Conference Proceedings | 2007
|