Architectural Concepts for Fail-Operational Automotive Systems

Kohn, Andre; Schneider, Rolf Michael; Vilela, Antônio Cezar Faria; Roger, A.; Dannebaum, Udo

doi:10.4271/2016-01-0131

Cited by 23 publications

(7 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Architecture patterns for functional safety are analysed in [10] and [11], where specific solutions are proposed for automated driving functions. Each of them involves a certain level of redundancy and can be implemented with different topologies.…”

Section: Related Workmentioning

confidence: 99%

Automotive Architecture Topologies: Analysis for Safety-Critical Autonomous Vehicle Applications

2021

View full text Add to dashboard Cite

Safety-critical systems such as Advanced Driving Assistance Systems and Autonomous Vehicles require redundancy to satisfy their safety requirements and to be classified as fail-operational. Introducing redundancy in a system with high data rates and processing requirements also has a great impact on architectural design decisions. The current self-driving vehicle prototypes do not use a standardized system architecture but base their design on existing vehicles and the available components. In this work, we provide a novel analysis framework that allows us to qualitatively and quantitatively evaluate an in-vehicle architecture topology and compare it with others. With this framework, we evaluate different variants of two common topologies: domain and zone-based architectures. Each topology is evaluated in terms of total cost, failure probability, total communication cable length, communication load distribution, and functional load distribution. We introduce redundancy in selected parts of the systems using our automated process provided in the framework, in a safety-oriented design process that enables the ISO26262 Automotive Safety Integrity Level decomposition technique. After every design step, the architecture is re-evaluated. The advantages and disadvantages of the different architecture variants are evaluated to guide the designer towards the choice of correct architecture, with a focus on the introduction of redundancy.

show abstract

Section: Related Workmentioning

confidence: 99%

Automotive Architecture Topologies: Analysis for Safety-Critical Autonomous Vehicle Applications

2021

View full text Add to dashboard Cite

show abstract

“…This suggests that the power consumption at the highest or lowest ambient temperatures can make differences in the expected lifetime of the system. In order to take this effect into consideration in the reliability optimization, we vary the degree of hardening (m) only in the highest ambient temperature intervals, i.e., interval '10' in Figure 4(b) while keeping the m values for other intervals maximum (16).…”

Section: ) Degree Of Hardeningmentioning

confidence: 99%

“…Such architecture-level hardening solution can also be found in other safety-critical embedded systems, e.g. automotive systems [16], [17].…”

Section: Introductionmentioning

confidence: 99%

Reliability Optimization of Real-Time Satellite Embedded System Under Temperature Variations

Kim

Yang

2020

IEEE Access

View full text Add to dashboard Cite

“…According to [10], a fail-operational MCU provide fault tolerance, fault containment and fault diagnosis on register level such as the multi-core MCU presented in the paper.…”

Section: Fail-operability In Automated Drivingmentioning

confidence: 99%

“…To change it, the ECU and the controller implementation itself need to meet a number of requirements. The authors in [10] differentiate between fail-operational concepts on ECU and on MCU level, where the MCU represents the central component of the ECU. On ECU level the following concepts are presented: (i) Triple modular redundancy.…”

Section: Fail-operability In Automated Drivingmentioning

confidence: 99%

Concepts for improved availability and computational power in automated driving

Grubmüller

Stettinger

Nešić

et al. 2018

Elektrotech. Inftech.

View full text Add to dashboard Cite

Automated vehicles are required to operate on highways and in complex urban scenarios. To safely handle these complex environmental influences, sophisticated automated driving functions demand a high availability of all involved components in combination with increased computational power. Particular multi-core platforms are deployed to cope with these demands. To achieve higher system availability for SAE level 3 and higher, fail operational concepts from system level down to Microcontroller Unit (MCU) level are needed. These concepts include hardware as well as software requirements and are discussed in this paper. For an increased computing performance, the idea and further the model of a parallel computation method for driving functions and their control algorithms is introduced. For that a stabilizing controller is implemented on different cores of the multi-core processor. Finally, this resulting closed-loop system is modeled as a hybrid system which will serve as an input for further stability analysis.Keywords: fail-operational; parallel computation; waveform relaxation; multi-core processor Konzepte für höhere Verfügbarkeit und Rechenleistung im Bereich autonomes Fahren. Autonome Fahrzeuge sollen in Zukunft auf

show abstract

Architectural Concepts for Fail-Operational Automotive Systems

Cited by 23 publications

References 6 publications

Automotive Architecture Topologies: Analysis for Safety-Critical Autonomous Vehicle Applications

Automotive Architecture Topologies: Analysis for Safety-Critical Autonomous Vehicle Applications

Reliability Optimization of Real-Time Satellite Embedded System Under Temperature Variations

Concepts for improved availability and computational power in automated driving

Contact Info

Product

Resources

About