Global Sources
EE Times-India
EE Times-India > EDA/IP

Why industrial automation needs safety-certified codes

Posted: 06 Jul 2015     Print Version  Bookmark and Share

Keywords:industrial automation  RTOS  TEE  embedded system  safety-certified code 

The proliferation of industrial automation has reached a point where it necessitates a safety-certified code. To make matters worse, industrial device software is increasingly becoming more complex along with the costs associated with device certification. However, the right design framework and real-time operating system (RTOS) can help streamline and cost-reduce creation and certification of safety-critical software.

A RTOS with a light-weight process model and power management framework, along with the use of a Trusted Execution Environment (TEE) (an embedded hardware technology) can assist software developers in reducing code complexity and limiting costs when developing industrial embedded systems.

The demand for increasing amounts of software presents significant challenges for software developers as they strive to develop devices that meet the IEC 61508 safety certified standard. The software design selected, which comprises both safety critical and non-safety critical applications, can have a direct impact on the reduction of system complexity and overall certification costs. Knowing which parts of the code are an important design consideration.

Obtaining safety integrity level certification for a device requires software documentation and testing for every line of critical code in the system. Because this comes at a significant cost, only the safety-critical code should be certified. Designing the software so the certified applications are separated from the non-critical applications is a necessity to keep software certification costs down.

Certified and Non-certified Code

One option for software developers is to partition certified software from non-certified software. This is done by developing two different hardware subsystems: one subsystem to execute the certified applications, and a second subsystem for non-certified applications. While effective, this approach has several drawbacks including added hardware costs; additional testing; and increased space, weight, heat and power consumption.

An alternative to the dual subsystem approach is consolidating both the safety critical and non-safety critical applications onto a single SoC. Clearly, there are advantages to developing a mixed-criticality system on a single module. For such a design, issues to be considered include: partitioning for safety assurance; sharing for efficient resource usage; certified applications/tasks must be guaranteed system resources; non-certified applications/tasks given best possible service; and assurance that the behaviour of non-certified applications will not adversely impact the behaviour of certified software.

New processors now on the market allow for the consolidation of a rack or multi-CPU system into a single small card. These processors offer enough power to run both the safety certified and non-safety certified applications. They also offer provisioning for space and resource partitioning and can contain failures in the non-certified application to prevent any impact on a safety critical application.

Mixed Criticality Systems

A software framework designed for "mixed criticality" provides software developers with the option to use a single hardware module to execute both certified and non-certified applications. More sophisticated software frameworks include a certified hypervisor or an ARINC653 certified OS, of which, both are very good for heterogeneous OS designs. However, for many devices, these options add unnecessary complexity to the software development and come with a cost of increased testing and documentation.

1 • 2 • 3 Next Page Last Page

Comment on "Why industrial automation needs safe..."
*  You can enter [0] more charecters.
*Verify code:


Visit Asia Webinars to learn about the latest in technology and get practical design tips.


Go to top             Connect on Facebook      Follow us on Twitter      Follow us on Orkut

Back to Top