
Explore functional safety in hardware-level product development under ISO 26262-5:2018, covering hardware safety requirements, hardware design, architecture and matrix evaluation, and hardware integration and testing.
Define functional safety as the absence of unreasonable risk from hazards caused by malfunctioning behavior of electrical or electronic systems, clarifying terms malfunctioning behavior and hazard with ISO 26262 vocabulary.
Explore ISO 26262-5:2018 hardware-level product development, including safety management, hazard analysis and risk assessment, and hardware design evaluation within a structured V-model.
Explore general topics for hardware-level development within the V model, define hardware safety requirements, plan integration with software teams, and assess robustness against random failures per clauses eight and nine.
Refine hardware safety requirements and establish hardware–software interface traceability from signal acquisition to software variables. Define timing and key signal attributes such as name, identifiers, interface type, direction, and range.
Derive hardware design from system architecture and safety requirements; develop hardware and software in parallel, exchange on the technical safety concept, and apply dependent failure analysis to validate safety.
Explore how a wiring diagram depicts circuit components with simplified shapes, maps power and signal connections, shows pin assignments, ADC or PWM sensors, and redundancies like accelerator pedal position.
Explore the circuit diagram as a representation of electrical circuits, showing connections and components, and illustrate how the inverter control unit supplies current to the e-motor from torque requests.
Analyze the coexistence of elements in hardware design to ensure freedom from interference between sub elements with asset ratings, using dependent failure analysis to prevent cascading and common cause failures.
Evaluate hardware architecture with the architecture matrix to verify safety goals and diagnostic coverage, including single point faults and detected, perceived, latent, and residual multiple point faults per ISO 26262.
Explain how safe faults are classified to avoid safety goal violations. Distinguish single point faults from independent multiple point faults and illustrate with a power transistor short example.
A residual fault occurs when a hardware fracture isn't covered by safety mechanisms, and diagnostic coverage falls short; parity checks add a parity bit to detect bit errors.
Define dual point and multiple point faults, where safety goals fail only with a second independent fault. Illustrate with redundant sensors, start up test, and detected or perceived fault classifications.
Identify latent faults as undetectable, hidden multiple point faults that combine with an independent fault and may threaten safety goals; standard tests can transform them to detected faults.
Explore a decision tree from ISO 26262 for classifying faults, including safe fault, single point fault, residual fault, and multiple point fault, with driver detectability and latent fault considerations.
Assess hardware robustness against random faults by calculating the hardware matrix with the single point fault metric and latent fault metric, guided by ASL targets and ISO 26262 recommendations.
Evaluate safety goal violations caused by random hardware failures and determine p values, fit and f values, and target thresholds for Ace and Sec in device hours.
Explain pf value calculation under ISO 26262, combining failure rates of single-point, residual, and detected faults with latent dual-point faults, multiplied by vehicle-type lifetime (1 hour/day passenger, 10 hours/day commercial).
Distribute the PMHF target value across components, allocating budgets such as 10%, 40%, and 30%, and ensure each HF value stays under budget, adjusting PM values if total exceeds target.
Explore methods to derive test cases for hardware-level development under ISO 26262-5:2018, guided by ACE rating, and include requirements analysis, interfaces, equivalence classes, boundary value analysis, and error guessing.
Explore three test methods for hardware level development: functional testing, fault injection testing, and electrical testing, including defining inputs, observing outputs, and verifying compliance with hardware safety requirements.
Master hardware matrix calculations and key ISO 26262-5 aspects for functional safety, and explore related courses with promo code ISO 2626 two.
This course is about ISO 26262-4: Product development at the system level. All relevant clauses of this part of ISO 26262 are explained in the course. The following clauses are considered:
Clause 6: Specification of hardware safety requirements
Clause 7: Hardware design
Clause 8: Evaluation of hardware architectural metrics
Clause 9: Evaluation of the safety goal violations due to random hardware failures
Clause 10: Hardware integration and testing
The following aspects are considered in Clause 6: Specification of hardware safety requirements:
The ISO 26262 V-model for the hardware phase
Refinement of the Hardware Software Interface (HSI)
Characteristics and attributes for the hardware safety requirements
The following aspects are considered in Clause 7: Hardware design:
Relevant aspects for creation of the hardware design
The following aspects are considered in Clause 8: Evaluation of hardware architectural metrics:
Hardware fault classification (Safe Fault, Single Point Fault, Residual Fault, Dual Point Fault, Multiple Point Faults, Latent Fault)
Examples for several hardware fault categories
Decision Tree for fault classification according to ISO 26262
Calculation of the Single Point Fault Metric (SPFM) and the Latent Fault Metric (LFM)
The following aspects are considered in Clause 9: Evaluation of the safety goal violations due to random hardware failures:
Evaluation of the safety goal violations due to random hardware failures
Calculation of the Probabilistic Metric of random Hardware Failures (PMHF)
The following aspects are considered in Clause 10: Hardware integration and testing:
Methods to derive test cases
Test methods
The course includes an exercise for determination of the hardware metrics SPFM, LFM and PMHF.
A possible solution for the exercise is presented in a video.
In the first part of the course you get a quick overview of all ISO 26262:2018 parts. Also the term functional safety is explained in the first part of the course. And you get an overview of functional safety standards for other industries, such as nuclear plants or process industry.
In case you already have some basic knowledge about functional safety and ISO 26262 the first part of the course is optional and you can skip it.