Automotive Semiconductors and Functional Safety

When the functions of multiple ECUs are integrated into a single high-performance SoC and software of different ASILs runs together, which is required?

  1. APlace the lower-ASIL and higher-ASIL software in the same memory region and let them read and write data freely
  2. BIsolate them with memory protection, timing monitoring and similar measures so that malfunctions of lower-ASIL software do not encroach on the memory or execution time of higher-ASIL software
  3. CGive the lower-ASIL software higher priority and run the higher-ASIL software only in idle time
Show answer and explanation

Answer: B. Isolate them with memory protection, timing monitoring and similar measures so that malfunctions of lower-ASIL software do not encroach on the memory or execution time of higher-ASIL software

Consolidating multiple functions in one SoC reduces the number of components and ECUs, but bugs in lower-ASIL software may interfere with higher-ASIL functions by corrupting memory or using up CPU time. Therefore, freedom from interference is demonstrated through spatial partitioning with memory protection units or a hypervisor, and temporal partitioning by allocating and monitoring execution time. Without partitioning, everything must be developed to the highest ASIL, which requires much more effort.

Practice this topic Back to topic

Books on Automotive Semiconductors and Functional Safety Ad

As an Amazon Associate I earn from qualifying purchases.

More Automotive Semiconductors and Functional Safety questions

  1. In CAN, what happens when two nodes start transmitting frames at the same time?
  2. On a CAN bus with 120 Ω termination resistors at both ends, the resistance between CAN_H and CAN_L was measured with the power off. Which value is closest to that of a normal bus?
  3. Which correctly describes a feature of CAN FD?
  4. Which correctly describes a feature of the in-vehicle network LIN?
  5. Which correctly describes a feature of the in-vehicle network FlexRay?