EB tresos Functional Safety and and fail-operational

Functional safety ISO 26262

Functional safety and fail-operational

EB tresos Safety

One of our core competencies: Functional safety for autonomous driving and x-by-wire systems

Trends such as autonomous driving make functional safety ISO 26262 a key technology in the automotive industry. More and more electronic functions define the driving experience – and they must be safe. It is essential that these safety systems work reliably to ensure human safety, even in the case of a malfunction or an accident. That’s why car makers relying on AUTOSAR need electronic control unit (ECU) software, developed and integrated in accordance with the ISO 26262 standard and up to the highest Automotive Safety Integrity Level, ASIL D.

The past several decades show a remarkable transformation for drivers. From traditional manual control to the introduction of assisted driving systems, and heading to automated driving, the electronic control systems play an essential role in changing our driving experience.

Autonomous vehicles compliant with the SAE Levels from Level 3 to Level 5 require strong fail-operational x-by-wire electronic systems. This requires fundamental changes in how the software must be implemented within the system; highly available and reliable.

Find out how Elektrobit is addressing such software implication under EB tresos Safety Fail-operational.

Functional safety in a nutshell – ISO 26262, IEC 61508, AUTOSAR, and ASIL D

ISO 26262 is an adaption of the IEC 61508 functional safety standard and has been specially developed for the safety needs of the automotive industry. It has to be applied in order to meet the legal regulations required for state-of-the-art software development. ISO 26262 defines “Functional Safety” as the absence of unreasonable risk due to hazards caused by malfunctioning behavior of electrical and electronic systems. According to ISO 26262, freedom from interference is a fundamental requirement, i.e. there must be a guarantee that different software components can coexist without disturbing each other.

The functional safety standard determines the classifications of the Automotive Safety Integrity Level (ASIL), ranging from the lowest, ASIL A, to the highest, ASIL D. A safety ECU project receives a rating (ASIL A, B, C, or D) based on requirements and measures throughout the whole development life cycle.

Elektrobit’s scalable safety solutions

Depending on the safety and ASIL requirements, there are different possible basic software architectures. To determine the right architecture, you need to consider the project requirements with respect to functional safety as well as system performance and maintainability.

Elektrobit offers consulting for safety architecture workshops, standardized safety products, and services to support you during the project. These solutions are based on the AUTOSAR standard, meet the ISO 26262 requirements up to the highest automotive safety integrity level, (ASIL D), and are available for single-core and multi-core microcontrollers. Additionally, our solutions conform to the IEC 61508 standard for non-automotive use. EB tresos Safety solutions have been on the road with leading car makers for many years.


Accuracy and reliability

Elektrobit offers industry-leading software solutions up to the highest automotive safety integrity level (ASIL D) and completely certified solutions that ease safety assessments.

Expertise in functional safety

With more than 30 years in automotive software development Elektrobit is a well-known development partner. We provide efficient integration of functional safety ISO 26262 and AUTOSAR.

Reducing complexity

EB tresos Safety architecture allows flexible partitioning, based on your project needs. We assure seamless integration into the EB tresos product line.

Functional Safety made by Elektrobit within a vehicle software architecture

Functional Safety ISO 26262 within a software architecture
EB tresos Safety within a software architecture
  • A mix of safety and quality management (QM) software
  • Integration of Black Box Software
  • Availability of safety mechanisms – independent of QM software
  • Scalable architectures for single-core and multi-core devices
  • Availability for several microcontrollers, including Freescale, STM, Infineon, Texas Instruments, and Renesas Electronics
  • Exida-certified: All our EB tresos Safety products are certified by exida, ensuring that you are building on a platform that meets the highest levels of safety requirements. Elektrobit’s safety products seamlessly integrate into the EB tresos product line.

Functional Safety products in detail

Functional Safety ISO 26262 EB tresos Safety OS

EB tresos Safety Fail-operational

Highly reliable application execution and communication:
EB tresos Safety Fail-operational is a comprehensive software solution based on Classic AUTOSAR, enabling the fail-operational systems to maintain continuous and reliable operation without the need for human intervention during system failures.

Using such systems, autonomous vehicles compliant with SAE Levels from Level 3 to Level 5 operate safely and reliably across all domains.

EB tresos Safety Fail-operational, built with ASIL D qualified components, and based on a complexity reduced implementation design, provides guaranteed continuous task execution and communication, along with tools against unintended service interruption, and guaranteed worse-case-execution-time (WCET).

Functional Safety ISO 26262 EB tresos Safety OS

EB tresos Safety OS (single-core and multi-core)

Data protection: To provide a safe execution environment for safety-critical functions, Elektrobit incorporated proven concepts such as Microkernel and System Calls from the aerospace and industrial markets. The result is a robust and protected Safety Operating System (OS) compatible with the latest AUTOSAR standard. The OS is independently certified for use in ASIL D applications such as electrical power steering as well as SIL 3 use in non-automotive projects. The EB tresos Safety OS combines the flexibility of AUTOSAR multi-core software architectures with the requirements of safety projects. It enables the distribution of software components to different cores without affecting the availability of the individual CPU cores.

Functional Safety ISO 26262 EB tresos Safety E2E Protection

EB tresos Safety RTE:

Data protection: The EB tresos Safety RTE takes care of the safe handling of RTE services between software in different partitions.

EB tresos Safety E2E Protection

Communication protection: EB tresos Safety E2E Protection is a set of modules that supports the transmission of safety-related data between ECUs. It consists of an end-to-end communication protection library and an end-to-end protection wrapper for integration into an AUTOSAR basic software stack.

Functional Safety ISO 26262 EB tresos TimE Protection

EB tresos Safety TimE Protection

Execution protection: EB tresos Safety TimE Protection is a software module that enables the timing and execution supervision of safety-related applications. Thus, it provides freedom from the interference of safety-related software modules with regard to time and execution. EB tresos Safety TimE Protection is independently certified for use in ASIL D applications such as electrical power steering, as well as SIL 3 use in non-automotive projects.

Related content to Elektrobit’s AUTOSAR solutions and functional safety ISO 26262