A method operates a safety-critical system, which system contains at least one first data device having approved, safety-relevant software and at least one reference data device having the same approved, safety-relevant software. In the method, after a type check of the system, the at least one first data device is equipped with at least one piece of non-safety-relevant additional software and the at least one reference data device is blocked from software modifications. Before safety-related data information is output, output information of the at least one first data device and of the at least one reference data device are checked for a match with regard to the safety-relevant software by a comparison device, and the safety-related data information is output in the case of a match.
Software update of non-critical components in dual safety-critical distributed systems
12.03.2019
Patent
Elektronische Ressource
Englisch
Software update mechanism for safety critical systems
Europäisches Patentamt | 2022
|SOFTWARE UPDATE MECHANISM FOR SAFETY CRITICAL SYSTEMS
Europäisches Patentamt | 2019
|SOFTWARE UPDATE MECHANISM FOR SAFETY CRITICAL SYSTEMS
Europäisches Patentamt | 2018
|SYSTEMS & SOFTWARE - Safety-critical software for aerospace systems.
Online Contents | 2004
Software Methodologies for Safety Critical Systems
NTIS | 1991
|