This paper proposes protection mechanisms for a generic FlexRay network to achieve end-to-end fault detection sufficient for a fail safe communication system with safety integrity level SIL3. The mechanisms are derived from IEC 61508 with respect to random hardware failure modes of FlexRay communication controllers and a bit error rate for the communication bus. Mechanisms provided by the FlexRay protocol are shown and additional features necessary to fulfill the normative requirements are discussed. Furthermore, it is demonstrated how the residual error probability of the CRC used as a safety code is calculated according to EN 50159. This paper analyses the requirements for error detection mechanisms for a SIL3 fail-safe FlexRay communication system. Section 2 describes the current safety concept advised in the validated norms. In section 3 the mechanisms provided by the FlexRay protocol are explained and the requirements not covered by the protocol are identified. Section 4 addresses additional communication protection defences for end-to-end communication and their characteristics. Finally, section 5 outlines the legal situation and product liability.
End-to-end protection for a fail-safe FlexRay communication system
Vollschutz für ein ausfallsicheres FlexRay-Kommunikationssystem
2008
12 Seiten, 3 Bilder, 2 Tabellen, 10 Quellen
Aufsatz (Konferenz)
Englisch
Enforcing Fail-Silence in the Entire FlexRay Communication Cycle
SAE Technical Papers | 2007
|Enforcing Fail-Silence in the Entire FlexRay Communication Cycle
British Library Conference Proceedings | 2007
|Enforcing fail-silence on the entire FlexRay communication cycle
Kraftfahrwesen | 2007
|2007-01-1499 Enforcing Fail-Silence in the Entire FlexRay Communication Cycle
British Library Conference Proceedings | 2007
|FlexRay - safe and rapid with M32C
Kraftfahrwesen | 2005
|