Automotive Semiconductors and Functional Safety

Which correctly describes the fault tolerant time interval (FTTI) in ISO 26262?

  1. AThe average time a component can be used without failing; it has the same meaning as MTTF, and longer means safer
  2. BThe time from a fault occurring until repair is completed; shorter is considered safer
  3. CThe minimum time from a fault occurring until a hazardous event could occur if no countermeasure were taken; fault detection and transition to a safe state must be completed within this time
Show answer and explanation

Answer: C. The minimum time from a fault occurring until a hazardous event could occur if no countermeasure were taken; fault detection and transition to a safe state must be completed within this time

FTTI is the minimum time from the occurrence of a fault until a hazardous event would occur if safety mechanisms did not act. A safety mechanism must keep the sum of the time to detect the fault and the time from detection to reaching a safe state, for example by shutting off outputs, within the FTTI. For example, for a function with an FTTI of several tens of ms, a diagnosis once every few seconds is too slow. It is a different concept from MTTF, which represents component life, or from repair time.

Practice this topic Back to topic

Books on Automotive Semiconductors and Functional Safety Ad

As an Amazon Associate I earn from qualifying purchases.

More Automotive Semiconductors and Functional Safety questions

  1. Which correctly describes how a lockstep CPU, used as a safety mechanism in automotive microcontrollers, works?
  2. What is the main reason for offsetting the execution of the two cores in a lockstep CPU by a few clock cycles, or placing the two cores apart on the chip?
  3. An automotive microcontroller's memory uses ECC (SEC-DED), which can correct 1-bit errors and detect 2-bit errors. What generally happens when read data contains a 2-bit error?
  4. Which correctly describes a feature of a window watchdog timer?
  5. What is the main functional safety purpose of running logic BIST and memory BIST in an automotive microcontroller at power-up or before driving?