5

Wind River collaboration accelerates functional safety - Automotive blog - Arm C...

 1 year ago
source link: https://community.arm.com/arm-community-blogs/b/automotive-blog/posts/wind-river-functional-safety-collaboration
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Wind River and Arm collaboration accelerates journey to functional safety compliance in centralized vehicle controllers

Wind-River-blog-post-image.png

As electrical/electronic (E/E) vehicle architectures continue to evolve toward centralized compute, the demand for high-performance processing, virtualization, and safety capabilities surges. After all, these are cornerstones of the software-defined vehicle. Earlier this year, we started working with Wind River Systems on a proof-of-concept that integrated Arm Software Test Library (STL) with Wind River® Helix Virtualization Platform (Helix Platform). 

The results from this collaboration helps guide system architects and integrators to more easily address ISO26262 and IEC61508 hardware diagnostic coverage requirements in mixed-criticality systems. A detailed whitepaper is available now from Wind River’s website. Additionally, Stefan Harwarth, Senior Field Application Engineer at Wind River, summarizes findings and recommendations in his Arm DevSummit 2022 masterclass, available on demand.

Springboard to ASIL B compliance

Arm STLs provides a flexible and cost-effective way to self-test CPU functional logic for random permanent faults. As a complement to foundational hardware safety mechanisms, they extend diagnostic coverage and help demonstrate system safety metric goals. STLs are particularly useful for achieving ISO 26262 ASIL B requirements. In these applications, expensive hardware duplications, such as Dual-Core Lock-step (DCLS) are overkill and must be avoided. Similarly, methods that take processors offline for testing, such as Logic Built-In Tests (LBIST), are too intrusive and significantly impact system availability.

Safety mechanisms comparison

Flexibility to suit complex project requirements

One of the main advantages of Arm STLs is flexibility. STLs can run both at boot- and run-time. At run-time, they can be regularly scheduled or run when the user application releases a CPU. Each time they are called, they can run all tests or just part of them to reduce latency. Furthermore, integrators are offered a choice of Exception Levels (EL) on Arm CPUs for executing most STL test functions (note that a small subset of optional control register tests require EL3 privileges).

However, with so many integration possibilities, what is the best approach to design STL into a system built on the Helix Platform? That is the question that Wind River, an industry leader in software for mission-critical systems, with assistance from our team at Arm, set out to answer. This was answered through a demonstrator platform running on a quad-core Arm Cortex-A53 CPU processor subsystem.

Three basic STL scheduling options have been explored, as per below, each offering advantages for different requirements:

  • Single test partition on all cores at the same time (STL on guest OS or within hypervisor thread).
  • Multiple test partitions with individual schedules (STL on guest OS or within hypervisor thread).
  • Independent user space scheduling (STL as application-level thread).
STL scheduling single partition
STL scheduling multiple partitions
STL scheduling user application

Source: Wind River Systems Inc.

Increased functional safety, only 0.5 percent CPU overhead

Wind River tests confirmed very low intrusiveness of the STL, regardless of the integration option. Including context switches and Exception level transitions, running the entire suite of applicable tests takes just between 50ms and 58ms to complete. For reference, this equates to between 0.5% and 0.6% of total CPU capacity assuming Fault Tolerant Time Interval (FTTI) of 10ms.

With such a low impact on performance overall, STL integration choice is more likely to come down to considerations related to:

  • Separation of project roles (for example, similar to the DO-297 standard for Avionics systems)
  • Supply chain and workflows
  • Cybersecurity.

The technical content created with Wind River discusses many of these factors. Should you want to learn more, both Wind River and Arm will be happy to discuss strategies to help you achieve you safety goal faster.

Next steps

  1. Watch Arm DevSummit 2022 on-demand masterclass: “Integration of Arm Software Test Library with the Wind River safety-certifiable Hypervisor".
  2. Download the whitepaper for further details.
  3. Get in touch if you would like to learn more about Arm Software Test Libraries (or other Arm technologies for safety-related applications).

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK