Functional Safety

Un nuovo modo flessibile di creare software embedded

Keil MDK v6 introduce un approccio moderno allo sviluppo embedded, costruito su flussi open‑source sviluppati da Arm e dal suo ecosistema. L’obiettivo è permettere ai team di lavorare con la massima libertà, scegliendo l’ambiente più adatto al proprio workflow.

The certification of safety end-products requires a compiler toolchain used in development to be qualified according to appropriate functional safety standards. The process of qualifying these tools known as ‘Tool Qualification’ or ‘Tool Validation’ can be time-consuming and expensive process. Moreover, it doesn’t offer any differentiation to the end-product. While end-users have to be responsible for the overall tool qualification process, vendors of development tools can make this process much easier by offering tools that are qualified to appropriate safety standards.

Arm Compiler for Embedded FuSa is a qualified C/C++ toolchain that has been assessed by safety-accredited certification body, TÜV SÜD. The qualified toolchain is suitable for developing embedded software for safety markets including automotive, industrial, medical, railways and aviation.

With a TÜV certificate and a comprehensive Qualification Kit, Arm Compiler for Embedded FuSa greatly simplifies the overall ‘Tool Qualification’ process allowing end-users to focus on their end-product development.

Arm Compiler for Embedded FuSa is qualified for developing software that meets the highest level of safety integrity for the following standards:

• IEC 61508 (Industrial) – SIL 3
• ISO 26262 (Automotive) – ASIL D
• EN 50128 (Railways) – SIL 4
• IEC 62304 (Medical) – Class C

For other safety standards, many of which have been derived from IEC 61508, the Qualification Kit provides the key information required by end-users need to perform ‘Tool Validation’.

FLEXIBLE PROTOCOL STACKS FOR IMPLEMENTING SAFETY COMMUNICATION

• Modular design enables perfect adaptation
• Easy implementation and certification
• Developed according to IEC 61508:2010 for applications up to SIL3 or Performance Level PLe

For faster safety development and go-to-market, the Certified C Library can be licensed separately in addition to the Arm Compiler for Embedded FuSa. The library is a subset of the standard C library consisting of approximately 200 functions that have been specifically implemented and optimized for use in safety development.

The Ixxat Safe T100/CS offers device manufacturers an easy way to control safe I/O signals using a safe fieldbus protocol. The module meets the SIL3 safety requirement level as defined by IEC 61508 and Performance Level PLe / Category 4 in ISO 13849-1.

Safe T100/CS is primarily designed to be used together with Anybus CompactCom, where the safety communication uses the black channel principle through Anybus CompactCom. For CIP Safety, CompactCom takes over the EtherNet/IP Adapter functionality and the safety module implements the CIP safety layer and safe control of three dual-channel inputs as well as one dual-channel output.

The module's very compact size and flexible safety I/O routing make it perfect for integration into customer specific device solutions.

The Ixxat Safe T100/PS offers device manufacturers an easy way to control safe I/O signals using a safe fieldbus protocol. The module meets the SIL3 safety requirement level as defined by IEC 61508 and Performance Level PLe / Category 4 in ISO 13849-1.
Safe T100/PS is primarily designed to be used together with Anybus CompactCom, where the safety communication uses the black channel principle through Anybus CompactCom. For PROFIsafe, CompactCom performs the tasks of a PROFINET IO device, while Safe T100 includes the PROFIsafe layer and safe control of three dual-channel inputs as well as one dual-channel output.

The module's very compact size and flexible safety I/O routing make it perfect for integration into customer specific device solutions.

The implementation of the Ixxat FSoE protocol software (Functional Safety over EtherCAT®) is characterized by efficient protocol processing, which is essential for safe drive applications, for example. The FSoE software allows parallel instantiation, both for slave and master functionality, providing a multitude of communication options for the safe application. The clearly structured interfaces of the FSoE software also enables the use of different, non- safe EtherCAT communication interfaces, such as the Anybus CompactCom Module.