A Model-Driven Approach for Dependent Failure Analysis in Consideration of Multicore Processors Using Modified EAST-ADL 2017-01-0065

Safety is becoming more and more important with the ever increasing level of safety related E/E Systems built into the cars. Increasing functionality of vehicle systems through electrification of power train and autonomous driving leads to complexity in designing system, hardware, software and safety architecture. The application of multicore processors in the automotive industry is becoming necessary because of the needs for more processing power, more memory and higher safety requirements. Therefore it is necessary to investigate the safety solutions particularly for Automotive Safety Integrity Level (ASIL-D) Systems. This brings additional challenges because of additional requirements of ISO 26262 for ASIL-D safety concepts. This paper presents an approach for model-based “dependent failure analysis” which is required from ISO 26262 for ASIL-D safety concepts with decomposition approach. Therefore, the hardware modeling, function modeling and dependability package of EAST-ADL (Electronics Architecture and Software Technology - Architecture Description Language) are extended in a way that it now allows the modeling of a multicore processor with its hardware elements and software safety architecture which are necessary to prove hardware and software independency. Additionally, some scripts are developed to analyze the decomposition paths automatically from system level to software and hardware level and generate the analysis results. Additionally, we briefly discuss how the main activities from ISO 26262 such as hazard analysis and risk assessment, functional safety concept, technical safety concept, safety analysis, etc. can be developed model-driven. The extensions and developed scripts make it possible to gain sufficient transparency and traceability for the safety arguments and to support the whole safety process in a single solution even in hardware and software development.