SAFe Automotive aRchItecture SAFARI

SAFARI_Presentation_Short_v1.ppt 2 / /P. Cuenot/ © Continental AG ARTEMIS/Call2 R&D Project Proposal Project selection : Late October 2009 Project start : 1st of June 2010 for 3 years duration

SAFARI_Presentation_Short_v1.ppt 3 / /P. Cuenot/ © Continental AG Goals Scope : Automotive electronics architecture (system + software + electronic hardware including Electrical Distribution System) Improve dependability including safety focus of automotive products (from vehicle to component) Ensure process compliance to ISO26262 at the best cost (automation required, and no over design) matching AUTOSAR requirements methods to reference supplier chain job split, liability and to respect Intellectual Property Early evaluation of safety architecture and reuse (quality and cost driven) Demonstrate preservation of functional design choice (safety oriented) on component architecture Improve and standardized interface within automotive supply chain Interconnected to others Automotive R&D projects including CESAR R&D initiative as multi-domain platform

SAFARI_Presentation_Short_v1.ppt 4 / /P. Cuenot/ © Continental AG SAFARI Vision Definition of application rules for functional safety process application (ISO26262) Based on ADL language and methods capturing Functional and Technical Design (e.g. EAST-ADL2/SySML) complementing AUTOSAR hardware introduction job split (responsibilities) of involved parties Providing Model Based Techniques for safety evaluation Automatic extraction and synthesis of failure mode Fault injection methods (target virtual hardware platform) Verification of functional design choice (safety oriented) into component implementation HW and SW COTS safety characterization (matching AUTOSAR syntax) Generative approach for code and test generation Early evaluation of architecture choice based on safety and multi-criteria metrics Mastering and enforcing reuse to reach details satisfying safety case documentation

SAFARI_Presentation_Short_v1.ppt 5 / /P. Cuenot/ © Continental AG SAFARI WP structure WP1 : Requirement elicitation WP2: Safety Model Based WP4: Use case for Evaluation WP5 :Methodology and application rules WP6: Training, Dissemination Specifies Evaluates Feedbacks Analyzes Validates Adjusts Documents Standardizes System OEM / Tier1 Sub- System OEM / Tier1 Sub- System Tier1 / Supplier Use case Scenario ISO26262 Spec. State** of the art WP0: Management, Exploitation WP3: Technology Platform Integrated Platform** Specialized plug-in Realization Specifies Synchronizes **CESAR Link Meta-Model Implemen- -tation Safety goals Modeling Architecture Modeling Methods for Analysis Meta Model Variant Manag. Documents Safety code generation

SAFARI_Presentation_Short_v1.ppt 6 / /P. Cuenot/ © Continental AG SAFARI Results Open meta model for description of system, software (AUTOSAR IPR), hardware Technology Platform defined as reference for platform set-up Training Material for the reference platform Industrial use cases (confidentiality respect) managed with concurrent engineering (OEMs, Tier1, silicon supplier) demonstrating methods and tools results Assessment process to demonstrate compliance to ISO26262 (validated by accreditation body) Recommendation and guidelines for System decomposition for effective design of safety mechanism Compliance with architecture constraints and safety mechanism with supervisor architecture AUTOSAR platform configuration for safety Inclusion of COTS in a safety system developed according to the standard

SAFARI_Presentation_Short_v1.ppt 7 / /P. Cuenot/ © Continental AG SAFARI link to AUTOSAR R4.0 will include safety mechanism and documentation report (Released on Dec. 2009) SAFARI provides Set up link to ISO26262 and engineering processes Provide complete overview on system level Complement hardware description SAFARI evaluates AUTOSAR results for AUTOSAR platform configuration for safety application Safety test conformance for component Process compliance with safety standard