What is SPFM (Single-Point Fault Metric) in ISO 26262?

The Single-Point Fault Metric (SPFM) measures the robustness of a safety architecture against single-point faults, which are individual hardware faults that can directly violate a safety goal without being detected. SPFM is calculated as: SPFM = 1 - (sum of single-point fault rates / sum of all safety-related fault rates). ISO 26262 Part 5 requires SPFM >= 90% for ASIL B, >= 97% for ASIL C, and >= 99% for ASIL D. A higher SPFM indicates better diagnostic coverage against single faults.

What is LFM (Latent Fault Metric) in ISO 26262?

The Latent Fault Metric (LFM) measures the effectiveness of safety mechanisms against latent faults, which are undetected faults that remain dormant until a second fault occurs, creating a dangerous multi-point failure. LFM is calculated as: LFM = 1 - (sum of latent multi-point fault rates / sum of all safety-related fault rates). ISO 26262 Part 5 requires LFM >= 60% for ASIL B, >= 80% for ASIL C, and >= 90% for ASIL D. Improving LFM typically requires periodic self-tests, start-up diagnostics, or cross-checking between channels.

What is PMHF (Probabilistic Metric for random Hardware Failures)?

PMHF is the probability of a safety goal violation due to random hardware failures over the vehicle lifetime. It accounts for single-point faults, residual faults (detected but not fully covered), and dual-point latent faults. ISO 26262 Part 5 defines target values: < 10^-7 per hour for ASIL C and < 10^-8 per hour for ASIL D (note: these are per safety goal, not per component). PMHF calculation requires failure rate data (FIT values), diagnostic coverage ratios, fault detection intervals, and the system architecture model.

What is FMEDA and how does it relate to hardware metrics?

FMEDA (Failure Modes, Effects, and Diagnostic Analysis) is a systematic bottom-up analysis method that classifies every possible failure mode of each hardware component into categories: safe faults, single-point faults, residual faults, detected multi-point faults, perceived multi-point faults, and latent multi-point faults. The failure rates from FMEDA feed directly into SPFM, LFM, and PMHF calculations. FMEDA extends traditional FMEA by adding quantitative failure rate data (FIT values) and diagnostic coverage assessment for each failure mode.

What is a FIT rate and where do failure rate values come from?

FIT (Failures In Time) is the unit for hardware failure rates, defined as 1 failure per 10^9 component-hours of operation. For example, 100 FIT means 100 failures per billion hours. FIT data comes from several sources: semiconductor vendor reliability reports (e.g., SN 29500, IEC 62380), industry handbooks (MIL-HDBK-217F, FIDES), field return data and warranty databases, accelerated life testing results, and physics-of-failure models. For automotive applications, temperature derating factors must be applied since FIT rates increase significantly at elevated junction temperatures following the Arrhenius equation.

What is diagnostic coverage and how is it calculated?

Diagnostic coverage (DC) is the percentage of dangerous hardware faults that a safety mechanism can detect. It is calculated as: DC = (failure rate of detected faults) / (total failure rate of dangerous faults). ISO 26262 Part 5 Table D.4 provides typical DC values for common safety mechanisms: comparators between independent channels achieve 99% DC, watchdog timers achieve 60-90% DC depending on type, RAM tests achieve 90-99% DC, and CRC checks achieve 99% DC. The overall SPFM and LFM of a system depend on the combined diagnostic coverage of all safety mechanisms applied to each component.

What is the bathtub curve in the context of ISO 26262 hardware metrics?

The bathtub curve describes the typical failure rate pattern over a hardware component lifecycle: an early-life period with elevated "infant mortality" failures (decreasing failure rate), a useful-life period with constant random failures (the region ISO 26262 hardware metrics address), and a wear-out period with increasing failure rate. ISO 26262 hardware metrics (SPFM, LFM, PMHF) apply to the constant failure rate region during useful life. Screening and burn-in processes reduce early-life failures, while maintenance and replacement strategies address wear-out. Automotive components must be qualified for the expected vehicle lifetime (typically 15 years or 300,000 km).

How do different safety architectures affect SPFM and PMHF?

Architecture choice directly impacts hardware metrics. Single-channel monitored (1oo1D): SPFM depends entirely on monitor diagnostic coverage, typically achieving 90-97%. Dual-channel monitor (1oo2D): cross-comparison between channels provides high DC (99%+), achieving SPFM > 99% suitable for ASIL D. Dual-channel redundant (1oo2): both channels can independently maintain function, achieving highest PMHF performance. Triple Modular Redundancy (2oo3): majority voting masks single faults entirely, providing the best SPFM but at highest cost. Each architecture has different trade-offs between cost, performance, SPFM/LFM/PMHF capability, and fail-operational vs fail-safe behavior.

Which chapter in ISO 26262 mentions PMHF, SPFM, and LFM details for ASIL B?

ISO 26262 Part 5 (Hardware Level) defines SPFM, LFM, and PMHF requirements. The ASIL-dependent target values are specified in Part 5 Tables 4 and 5: ASIL B requires SPFM >= 90%, LFM >= 60%, and PMHF < 10^-7/h. Part 5 Clause 8 covers the evaluation of hardware architectural metrics, and Part 5 Clause 9 addresses the evaluation of safety goal violations due to random hardware failures (PMHF). Our course covers all these details across 16 chapters with interactive calculators.

How do you apply PMHF calculation for ISO 26262?

To apply PMHF calculation per ISO 26262-5: (1) Define the safety goal and identify all hardware elements in the safety-related path, (2) Obtain base failure rates (FIT values) for each component from datasheets or reliability databases, (3) Perform FMEDA to classify failure modes and determine diagnostic coverage, (4) Calculate single-point fault contribution, residual fault contribution, and dual-point latent fault contribution, (5) Sum all contributions: PMHF = SPF rate + RF rate + latent dual-point rate, (6) Compare the result against the ASIL target value. Our interactive PMHF calculator walks you through each step with real component data.

What is the SPFM formula in ISO 26262?

The SPFM formula per ISO 26262-5 is: SPFM = 1 - (sum of single-point fault rates for each safety-related HW element) / (sum of total failure rates of all safety-related HW elements). A single-point fault is a hardware fault that can directly lead to a safety goal violation and is not covered by any safety mechanism. Improving SPFM requires adding safety mechanisms with sufficient diagnostic coverage to convert single-point faults into detected or residual faults.

Complete Learning Module

Hardware Metrics

16 chapters Master SPFM, LFM, and PMHF calculation per ISO 26262-5 with 16 chapters covering fault classification, FMEDA analysis, architecture comparison (1oo2, 2oo2, 1oo2D), 7 real-world worked examples, FIT data sources, EEC method, and semiconductor FMEDA with interactive calculators and a step-by-step FMEDA simulator.

Start Learning View Curriculum

How You Learn

Video and text stay in sync. As you scroll through the chapter, the video jumps to the matching explanation automatically.

Scroll SyncVideo follows your reading position

Click to JumpClick any cue to jump the video

Chapter NavNavigate from video or content

BookmarksSave sections, resume anytime

iso26262.academy/concepts/hardware-metrics

...

Saved

08:12

Ch 2

Synced to reading position

Learning Objectives

Calculate Hardware Metrics

Compute SPFM, LFM, and PMHF for any safety architecture using standard formulas with proper failure mode classification and diagnostic coverage inputs.

Perform FMEDA Analysis

Execute complete failure mode, effects, and diagnostic analysis with systematic failure mode classification, FIT rate derivation, and DC determination.

Select Safety Architectures

Choose between 1oo2, 2oo2, and 1oo2D architecture patterns based on ASIL requirements, diagnostic capability, and fail-operational needs.

Evaluate Failure Rates

Apply FIT data from multiple sources including handbooks, field data, and semiconductor models with proper temperature derating and mission profile adaptation.

Chapters

Theoretical Background & Methodology

Understand E/E architecture evolution, failure rate fundamentals, the bathtub curve, three pillars of hardware metrics, ASIL development aspects, redundancy concepts, and safety analysis methodology.

Hardware Metrics

Master SPFM, LFM, and PMHF formulas with safe fault classification, failure mode categories, multi-point fault detection, and IEC 61508 metric relationships.

ASIL Target Requirements

Explore PMHF targets per ASIL with overview cards showing quantitative thresholds, compliance criteria, and the relationship between ASIL and metric stringency.

EEC - Evaluation of Each Cause

Learn the Evaluation of Each Cause method as an alternative to PMHF, with per-cause evaluation steps and a detailed steering control system worked example.

Practical Metrics & Architectural Decisions

Compare 1oo2, 2oo2, and 1oo2D safety architectures, understand FTTI timing constraints, perform CCF analysis, and apply architectural best practices.

Advanced Analysis & System-Level Concepts

Explore safe states, sensitivity analysis, PMHF budget allocation, MFTTI hierarchy, fail-operational phases, and networked system considerations.

Evaluation Methods & Architecture Trade-offs

Compare MCU lockstep vs diverse redundancy, SPFm/LFm evaluation approaches, FTA integration, cut set analysis, and mission time modeling techniques.

Interactive Calculator

Use the interactive PMHF, SPFm, and LFm calculators with real-time ASIL compliance checking, adjustable parameters, and instant visual feedback.

Real-World Examples

Study real-world case studies with detailed component analysis, failure rate data, diagnostic coverage determination, and calculated metric results.

FMEDA Process

Follow the complete FMEDA process flow from failure mode classification through diagnostic coverage to safety mechanism definition, FIT rate derivation, and DC verification.

Advanced FMEDA & Semiconductor Analysis

Master functional mapping, mechanical FMEDA, assumptions checklists, failure mode distribution, dynamic FMEDA methodology, and mission profile integration.

Implementation Process

Navigate project lifecycle phases for hardware metric implementation, explore tools and resources, understand supplier safety manuals, and apply ISO 26262-10 guidance.

FIT Data Sources & Guidelines

Understand FIT rate fundamentals across 20+ data sources (SN 29500, IEC TR 62380, IEC 61709, MIL-HDBK-217, Telcordia SR-332, FIDES, AEC-Q100), apply selection guidelines, perform field data analysis, and account for temperature derating factors.

System Integration, Budgets & Supplier Chains

Master PMHF budget allocation across system elements, navigate supplier safety manual requirements, manage multi-tier supply chain metric contributions, and apply ISO 26262-10 guidance for system-level integration.

Worked Examples & Interactive Tools

Study 7 complete worked examples: Electronic Brake Controller (ASIL D), Steering Angle Sensor (ASIL C), ADAS Domain Controller (ASIL D), Radar Sensor Module (ASIL B), EPS Controller (ASIL D), Battery Management System (ASIL C), and AEB ECU (ASIL D).

Verification, Pitfalls & Assessment Readiness

Prepare for functional safety assessments with common metric calculation pitfalls, verification checklists, reviewer expectations, documentation requirements, and strategies to avoid the conservative paradox in SPFM/LFM evaluation.

Interactive Calculators & Tools

PMHF Calculator

Real-time PMHF calculation with dual-point fault terms, adjustable failure rates, diagnostic coverage sliders, and instant ASIL compliance assessment.

SPFm Calculator

Single-point fault metric calculator with component-level failure input, safe fault classification, and automatic ASIL B/C/D target comparison.

LFm Calculator

Latent fault metric calculation with multi-point fault detection rates, residual fault categorization, and visual compliance indicators.

Architecture Comparison

Side-by-side comparison of 1oo2, 2oo2, and 1oo2D safety architecture patterns with reliability calculations and ASIL suitability assessment.

Bathtub Curve Visualization

Interactive failure rate visualization showing infant mortality, useful life, and wear-out phases with adjustable parameters and FIT rate overlay.

FMEDA Process Simulator

Featured

Step-by-step failure mode, effects, and diagnostic analysis with interactive failure mode classification and diagnostic coverage determination.

Explore Simulators

Complete Analysis Workflow

FMEDA Process Simulator

Walk through a complete Failure Mode, Effects, and Diagnostic Analysis from component identification through failure mode classification to diagnostic coverage determination and metric calculation.

Systematic failure mode identification and classification
Safe fault, single-point fault, and multi-point fault categorization
Diagnostic coverage determination with safety mechanism mapping
FIT rate derivation from handbook and field data sources
SPFm, LFm, and PMHF calculation from FMEDA results

FMEDA Analysis Results

SPFm: 99.2% | LFm: 92.4% | PMHF: 4.2×10⁻⁸ h⁻¹

Unlock in course

Ready to Master Hardware Metrics?

Start your journey through 16 comprehensive chapters with interactive calculators, FMEDA simulation, and 7 real-world worked examples from brake controllers to ADAS systems.

Start Learning Now

16 Chapters3 CalculatorsFMEDA Sim7 Case Studies

Hardware Metrics

Learning Objectives

Calculate Hardware Metrics

Compute SPFM, LFM, and PMHF for any safety architecture using standard formulas with proper failure mode classification and diagnostic coverage inputs.

Perform FMEDA Analysis

Execute complete failure mode, effects, and diagnostic analysis with systematic failure mode classification, FIT rate derivation, and DC determination.

Select Safety Architectures

Choose between 1oo2, 2oo2, and 1oo2D architecture patterns based on ASIL requirements, diagnostic capability, and fail-operational needs.

Evaluate Failure Rates

Apply FIT data from multiple sources including handbooks, field data, and semiconductor models with proper temperature derating and mission profile adaptation.

Chapters

Theoretical Background & Methodology

Understand E/E architecture evolution, failure rate fundamentals, the bathtub curve, three pillars of hardware metrics, ASIL development aspects, redundancy concepts, and safety analysis methodology.

Hardware Metrics

Master SPFM, LFM, and PMHF formulas with safe fault classification, failure mode categories, multi-point fault detection, and IEC 61508 metric relationships.

ASIL Target Requirements

Explore PMHF targets per ASIL with overview cards showing quantitative thresholds, compliance criteria, and the relationship between ASIL and metric stringency.

EEC - Evaluation of Each Cause

Learn the Evaluation of Each Cause method as an alternative to PMHF, with per-cause evaluation steps and a detailed steering control system worked example.

Practical Metrics & Architectural Decisions

Compare 1oo2, 2oo2, and 1oo2D safety architectures, understand FTTI timing constraints, perform CCF analysis, and apply architectural best practices.

Advanced Analysis & System-Level Concepts

Explore safe states, sensitivity analysis, PMHF budget allocation, MFTTI hierarchy, fail-operational phases, and networked system considerations.

Evaluation Methods & Architecture Trade-offs

Compare MCU lockstep vs diverse redundancy, SPFm/LFm evaluation approaches, FTA integration, cut set analysis, and mission time modeling techniques.

Interactive Calculator

Use the interactive PMHF, SPFm, and LFm calculators with real-time ASIL compliance checking, adjustable parameters, and instant visual feedback.

Real-World Examples

Study real-world case studies with detailed component analysis, failure rate data, diagnostic coverage determination, and calculated metric results.

FMEDA Process

Follow the complete FMEDA process flow from failure mode classification through diagnostic coverage to safety mechanism definition, FIT rate derivation, and DC verification.

Advanced FMEDA & Semiconductor Analysis

Master functional mapping, mechanical FMEDA, assumptions checklists, failure mode distribution, dynamic FMEDA methodology, and mission profile integration.

Implementation Process

Navigate project lifecycle phases for hardware metric implementation, explore tools and resources, understand supplier safety manuals, and apply ISO 26262-10 guidance.

FIT Data Sources & Guidelines

System Integration, Budgets & Supplier Chains

Worked Examples & Interactive Tools

Verification, Pitfalls & Assessment Readiness

Interactive Calculators & Tools

PMHF Calculator

Real-time PMHF calculation with dual-point fault terms, adjustable failure rates, diagnostic coverage sliders, and instant ASIL compliance assessment.

SPFm Calculator

Single-point fault metric calculator with component-level failure input, safe fault classification, and automatic ASIL B/C/D target comparison.

LFm Calculator

Latent fault metric calculation with multi-point fault detection rates, residual fault categorization, and visual compliance indicators.

Architecture Comparison

Side-by-side comparison of 1oo2, 2oo2, and 1oo2D safety architecture patterns with reliability calculations and ASIL suitability assessment.

Bathtub Curve Visualization

Interactive failure rate visualization showing infant mortality, useful life, and wear-out phases with adjustable parameters and FIT rate overlay.

FMEDA Process Simulator

Featured

Step-by-step failure mode, effects, and diagnostic analysis with interactive failure mode classification and diagnostic coverage determination.

Explore Simulators

FMEDA Process Simulator

Walk through a complete Failure Mode, Effects, and Diagnostic Analysis from component identification through failure mode classification to diagnostic coverage determination and metric calculation.

Systematic failure mode identification and classification

Safe fault, single-point fault, and multi-point fault categorization

Diagnostic coverage determination with safety mechanism mapping

FIT rate derivation from handbook and field data sources

SPFm, LFm, and PMHF calculation from FMEDA results