A method operates a safety-critical system, which system contains at least one first data device having approved, safety-relevant software and at least one reference data device having the same approved, safety-relevant software. In the method, after a type check of the system, the at least one first data device is equipped with at least one piece of non-safety-relevant additional software and the at least one reference data device is blocked from software modifications. Before safety-related data information is output, output information of the at least one first data device and of the at least one reference data device are checked for a match with regard to the safety-relevant software by a comparison device, and the safety-related data information is output in the case of a match.


    Access

    Download


    Export, share and cite



    Title :

    Software update of non-critical components in dual safety-critical distributed systems


    Contributors:

    Publication date :

    2019-03-12


    Type of media :

    Patent


    Type of material :

    Electronic Resource


    Language :

    English


    Classification :

    IPC:    G06F ELECTRIC DIGITAL DATA PROCESSING , Elektrische digitale Datenverarbeitung / B61L Leiten des Eisenbahnverkehrs , GUIDING RAILWAY TRAFFIC / H04L TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION , Übertragung digitaler Information, z.B. Telegrafieverkehr



    SOFTWARE UPDATE MECHANISM FOR SAFETY CRITICAL SYSTEMS

    BUJAN EDUARDO | European Patent Office | 2018

    Free access

    Software update mechanism for safety critical systems

    BUJAN EDUARDO | European Patent Office | 2022

    Free access

    SOFTWARE UPDATE MECHANISM FOR SAFETY CRITICAL SYSTEMS

    BUJAN EDUARDO | European Patent Office | 2019

    Free access


    Software Methodologies for Safety Critical Systems

    W. C. Dolman / A. M. Ashdown / T. C. Moores | NTIS | 1991