Safety Mechanisms & Diagnostics
Master the full spectrum of hardware and software safety mechanisms, diagnostic coverage calculation, and PMHF methodology per ISO 26262 Part 5 and Annex D.
- Chapters
- 14
- Chapters
- Interactive Tools
- 6
- Interactive Tools
- Case Study
- 1
- Case Study
- Video
- 1
- Video
Quick answers
- What is a safety mechanism in ISO 26262?
- A safety mechanism is something built into the product itself, in hardware or software, whose job is to notice a fault and respond to it, usually by moving the system into a safe state or holding it there. Examples range from ECC on memories, CRC on communication, and watchdogs, to redundant sensing with plausibility checks and dual-channel comparison. In ISO 26262 Part 5 they carry the quantitative load of the hardware safety argument: each mechanism claims a diagnostic coverage for the faults it detects, and those claims feed the architectural metrics (SPFM, LFM) and the PMHF. Part 5 Annex D provides the reference catalog of mechanisms with achievable coverage levels and conditions of use.
- How is diagnostic coverage calculated?
- Diagnostic coverage is the ratio of the failure rate of detected (or controlled) faults to the total failure rate of the relevant faults for a hardware element, expressed as a percentage. In practice you decompose an element's failure rate across its failure modes, assign each mode to the mechanisms that detect it - using Annex D's typical coverage classes of low (60%), medium (90%), and high (99%) as calibrated starting points - and compute the weighted result. When multiple mechanisms cover one element, contributions combine per failure mode without double-counting a detection. The course includes an interactive DC calculator that walks this exact computation.
Why it pays for itself
The whole Annex D catalog, usable
Every mechanism in ISO 26262-5 Annex D surveyed with coverage values, conditions of use, and dependencies - so you select mechanisms from the standard's own catalog instead of reinventing justifications.
DC and PMHF numbers you can defend
Apply the ISO 26262 diagnostic coverage formula with per-mechanism failure rate contributions, then roll results into SPFM, LFM, and PMHF verification against ASIL B, C, and D targets.
From concept to AUTOSAR production code
Map each mechanism to the AUTOSAR BSW modules that implement it - WdgM, DEM, FiM, E2E - and verify activation, timing, and coverage claims with structured fault injection campaigns.
What you’ll be able to do
Select Mechanisms from Annex D
Navigate ISO 26262 Part 5 Annex D to select appropriate safety mechanisms with correct conditions of use for your hardware.
Calculate Diagnostic Coverage
Apply the ISO 26262 DC calculation methodology to determine combined coverage from multiple safety mechanisms.
Define FDTI and Fault Reactions
Specify Fault Detection Time Intervals, Fault Reaction Time Intervals, and safe state transitions for each mechanism.
Verify PMHF Compliance
Calculate PMHF from SPF and latent fault contributions and demonstrate compliance with ASIL B, C, and D targets.
Integrate Mechanisms in AUTOSAR
Configure AUTOSAR WdgM, DEM, FiM, and E2E modules to implement ISO 26262-compliant safety mechanisms in production code.
Verify Mechanisms with Fault Injection
Design fault injection test campaigns to verify safety mechanism activation, timing, and diagnostic coverage claims.
Chapter by chapter
- 01
Overview
Understand what safety mechanisms are, how they relate to diagnostic coverage, and their role in ISO 26262 Part 5.
- Mechanism definition
- DC concept
- Part 5 context
- 02
ISO 26262 Part 5 Requirements
Navigate the normative requirements of ISO 26262 Part 5 for hardware safety mechanisms and diagnostic coverage.
- Clause-by-clause
- Normative vs informative
- Work products
- 03
Mechanism Categories
Classify safety mechanisms by detection type, reaction type, and applicable hardware element categories.
- Detection categories
- Reaction categories
- Element applicability
- 04
ISO 26262 Annex D Catalog
Survey every mechanism in ISO 26262 Part 5 Annex D with conditions of use, coverage values, and dependencies.
- Full Annex D walkthrough
- Coverage values
- Conditions of use
- 05
Diagnostic Coverage Calculation
Calculate diagnostic coverage percentages using the ISO 26262 formula with failure rate contributions per mechanism.
- DC formula
- Failure rate inputs
- Combined mechanisms
- 06
FDTI & Timing Requirements
Define Fault Detection Time Intervals and Fault Reaction Time Intervals for each safety mechanism.
- FDTI definition
- FRTI constraints
- Timing budget
- 07
Fault Reaction & Safe States
Design fault reaction functions and safe state transitions triggered by detected faults for different severity levels.
- Reaction types
- Safe state definition
- Transition timing
- 08
Hardware Safety Mechanisms
Deep-dive into hardware-implemented mechanisms: ECC, CRC, redundancy, comparison, watchdog, and clock monitors.
- ECC & CRC
- HW redundancy
- Clock monitoring
- 09
Sensor Safety Mechanisms
Apply sensor-specific safety mechanisms: plausibility, range checks, gradient monitoring, and redundant sensing.
- Range & gradient
- Cross-sensor plausibility
- Redundant sensors
- 10
E-Gas 3-Level Monitoring
Analyze the E-Gas monitoring concept as the production reference for layered safety mechanisms in powertrain.
- 3 monitoring levels
- Mechanism layering
- DC contribution per level
- 11
Fault Injection Testing
Design and execute fault injection tests to verify safety mechanism activation, coverage, and timing compliance.
- HW fault injection
- SW fault injection
- Coverage verification
- 12
AUTOSAR Integration
Map safety mechanisms to AUTOSAR BSW modules: WdgM, DEM, FiM, E2E, and diagnostic communication.
- WdgM patterns
- DEM configuration
- FiM dependency
- 13
PMHF Methodology
Apply the complete PMHF methodology: failure rate data sources, calculation steps, ASIL verification, and documentation.
- FIT data sources
- PMHF calculation
- ASIL verification
- 14
ASIL Requirements by Level
Map SPFM, LFM, and PMHF targets to ASIL A through D with mechanism selection implications at each level.
- SPFM & LFM targets
- ASIL A-D comparison
- Design implications
Not just text: the visual toolkit
Annex D Mechanism Browser
Browse all ISO 26262 Part 5 Annex D safety mechanisms with filtering by element type, coverage level, and ASIL.
Diagnostic Coverage Calculator
Calculate combined diagnostic coverage from multiple mechanisms using the ISO 26262 formula with failure rate inputs.
PMHF Compliance Calculator
Compute PMHF from SPF and LF contributions and verify against ASIL B, C, and D targets.
Fault Reaction State Machine
Design fault detection to safe state transition sequences with timing verification and trigger conditions.
FDTI Budget Planner
Allocate Fault Detection Time Interval budgets across detection, reaction, and safe state activation timing.
AUTOSAR Safety Module Mapper
Map your safety mechanism requirements to the correct AUTOSAR BSW modules and configuration parameters.
Safety Mechanisms & PMHF Analysis for an ASIL-D Power Steering Torque Sensor
Design the complete safety mechanism set for an ASIL-D EPS torque sensor channel, calculate diagnostic coverage, verify PMHF compliance, and map to AUTOSAR BSW.
- Annex D selection: 6 mechanisms applied - ECC, CRC, dual-channel comparison, range check, gradient check, timeout monitoring
- Diagnostic coverage calculation: 97.3% DC achieved for ASIL-D SPFM requirement of ≥ 99%
- FDTI budget: sensor fault detection within 5 ms, safe state (zero torque assist) within 30 ms
- PMHF result: 4.1 × 10⁻⁹ h⁻¹ versus ASIL-D target of < 10⁻⁸ h⁻¹ - compliant with 60% margin
- Fault injection: 240 test cases executed covering all 6 mechanisms, 100% activation rate confirmed
Unlock in course
Who this guide is for
- Hardware engineers selecting safety mechanisms for an FMEDA with a DC target
- System designers budgeting FDTI and fault reactions toward a defined safe state
- AUTOSAR integrators wiring watchdogs, DEM, and E2E into safety-relevant stacks
- Anyone whose SPFM claim is due for assessor scrutiny
Frequently Asked Questions
Common questions about Safety Mechanisms & Diagnostics
Start the course today
A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. The Pro and Expert plans unlock more of the 78-guide library. No credit card required.