3 articles
TechnicalAn accelerator pedal sensor fault, a 150 ms fault tolerant time interval, and only about 2 ms of it spent running safety software. Detection, reaction and the transition to the safe state all draw on one interval, and most of it goes on filters, sampling, bus frames, torque ramps and mechanics. Treated as a single number, it drifts without anyone noticing. New article, with an electric car's pedal sensor fault as the worked example.
Technical300 injected faults, 300 detected, and the voltage supervisor still covers only about 80 % of the failure rate it was credited with. The 99 % in an FMEDA row usually comes from a handbook table. Fault injection tests the mechanism as built, and the result only means something when each failure mode is weighted by its share of the failure rate. New article, with a core supply supervisor and its deglitch filter as the worked example.
TechnicalDiscover how automotive engineers use proven architectural configurations to prevent catastrophic failures in safety-critical systems like AEB and steer-by-wire.
Keep learning
Each guide is a full course with diagrams and worked examples. Open one to see what it covers.