Development of automotive body domain controller based on ISO 26262
Body domain controllers using single microcontroller unit(MCU)lack diagnostic coverage for multi-point fault failures due to the lack of an external chip to monitor the operation of the master MCU,affecting the potential failure rate.In addition,the single MCU can hardly meet the requirements of functional safety level B due to the lack of chip pins,and the use of multiplexing chip dramatically increases the single-point fault failure rate.To meet the functional safety requirements,body domain controller with dual-MCU architecture based on the domestic automotive-gauge chip AC78406 was designed,which eliminated the hardware random failure rate of the multiplexing chip,and increased the diagnostic coverage of the MCU failures,thus improving the functional safety level.
domain controllerfunctional safety standardhardware in loop(HIL)
万方数据
维普
