Safety AddOns includes Safety Measures

Global Objective

The global objective of the logical and temporal program flow monitoring is defined in IEC 61508, part 7:
To detect a defective program sequence. A defective program sequence exists if the individual elements of a program (for example software modules, subprograms or commands) are processed in the wrong sequence or period of time, or if the clock of the processor is faulty.
We allow monitoring and checking each of the objective (logical sequence and timing) individually. If we want to achieve the highest diagnostic coverage levels, the combination is compelling in detecting potential defective program sequences.

Program Flow Control

The logical program flow control is a measure, which is highly recommended in all safety standards. This safety measure must avoid or detect the following failure scenarios:
Execution of a function is skipped
Starting a function multiple times
Changed order of function execution

Time Budged Monitoring

We combine the temporal program flow monitoring most often with the logical program flow control to achieve the completeness of our program flow safety measure. The time budge monitor must detect the following scenarios:
Function runtime is out of range
Function cycletime is out of range
Interrupt load is out of range

Pre-certified Modules

Program Flow Monitor
The program flow monitor checks the logical program sequence via freely definable program execution gates.
Supports unlimited number of execution gates
Check functions, ISR handlers, and RTOS tasks
Check any number of program flows
Time Budget Watchdog
The time budget watchdog provides checking of the runtime consumption in functions, function groups or tasks.
Optional integrated into Flexible Safety RTOS
Supports any time base for measurement
Integrated timing diagnostic mode
CRC Module
This module provides the calculation for cyclic redundancy checksums. The flexible design allows:
Define multiple sets of algorithm parameters
Take advantage of hardware CRC modules
Performance optimized table driven design
End-To-End Protection
This module enables the transmission of safety-relevant data via unsafe communication channels by using a safety envelope.
Define the strength of protection for each channel
Autonomous synchronization after startup
Integrated memory management when used with RTOS

Your Benefits when using the Safety AddOns

Pre-certified solution
You get proven algorithms as part of the Safety AddOns, ready for use with a pre-certification for multiple use cases:
Industrial: IEC 61508 - SIL3
Medical: IEC 62304 - CLass C
Automotive: ISO 26262 - ASIL D
Independent component
The delivered Safety AddOns are independent in many ways. This allows maximum possible flexibility in your project design:
Pre-certified for any ANSI C99 compliant Compiler
Optional integration in Flexible Safety RTOS
Safety AddOns is usable on any hardware
Safety Guidance
The Safety AddOns includes some guidance on how to achieve the target diagnostic coverage in the extensive documentation.
Detailed Safety Manual
Users Guide and API Reference Manual
Explained demo projects

Want to learn more...

Customer References

  • Sick Stegmann
Item 1 of 21
Create Your Free Account
Create an account to get access to free Embedded Office services
Access free Embedded Office services
Flyer: Safety AddOns
Related Links
How to realize a Soft Error Protection
Learn more about the pre-certified Flexible Safety RTOS
© Copyright 2019. Embedded Office GmbH & Co. KG. All rights reserved. (Version: 0f9b52c)