Safety beginners are quite often very confused about how Safety affects the hardware design and choice of components in the BOM. “Should I use ASIL certified Micro controllers, CAN transceivers, PMICs and switches in my ASIL program? What about the resistors and capacitors? Do we even have ASIL certified passives in the market?” they ask.
In this blog and next ones to come, we will clear the confusion surrounding “ASIL” certification and qualification of Hardware elements. We will cover several questions surrounding this topic.
This blog post will cover the following questions:
1. Background – How the ASIL certification for HW really started
2.Scope of ASIL Certification for HW – Which HW elements are expected to be ASIL Certified and which need not be
Background – How the ASIL certification for HW really started
Scope of ASIL Certification for HW – Which HW elements are expected to be ASIL Certified and which need not be
- Typically, all HW elements used in an Automotive application are qualified according to world-wide quality standards such as AEC-Q100 or AEC-Q200. This ensures that the HW element has a sufficiently high quality and performance.
- The Class I and Class II HW elements do not provide any safety mechanisms by itself. The failures of these HW elements can be detected by implementing Safety mechanisms in the System in which it is used. The HW elements can also be sufficiently tested in the System in which they are used.
- The failure modes of Class I elements and many Class II elements are similar irrespective of the supplier, and these modes and its distribution can be picked up from hardware failure mode libraries like the MIL Standard library and IEC failure mode library. For e.g., here is a snippet from the MIL Standard library that shows the failure modes and distribution for different types of resistors. Immaterial of the supplier of the resistor, these remain the same.