Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. This paper will present a concept which maps the functions of the external monitoring unit into an internal second processing core which are frequently available on modern, 32bit, monolithic, dual-core microcontrollers.
Implementation of a Basic Single-Microcontroller Monitoring Concept for Safety Critical Systems on a Dual-Core Microcontroller
Sae Technical Papers
SAE World Congress & Exhibition ; 2007
2007-04-16
Aufsatz (Konferenz)
Englisch
Basic Single-Microcontroller Monitoring Concept for Safety Critical Systems
British Library Conference Proceedings | 2007
|Basic single-microcontroller monitoring concept for safety critical systems
Kraftfahrwesen | 2007
|Basic Single-Microcontroller Monitoring Concept for Safety Critical Systems
SAE Technical Papers | 2007
|