The Challenges in Supporting Multiple Safety Levels in the Same System
summary
Argues that ASIL-A infotainment and ASIL-D ADAS can coexist on one chip by combining RISC-V + MIPS cores (P family for single‑thread performance, M family for multithreading), using safety island or mixed integrity decomposition, sensor fusion/true redundancy (MobilEye example), and out-of-context certification to reuse IP and cut certification time by about six months. Explains lockstep vs parity/ECC tradeoffs, running diagnostics in idle threads, and shows this reduces cost pressure (OEM margin example: Mercedes ~$7,000 per car) while meeting safety goals.
AI-written summary · about
chapters (11)
- 0:00Introduction and background
- 1:07MIPS in automotive market
- 2:34MIPS core families for safety
- 5:02Functional safety levels explained
- 7:32Cost and complexity challenges
- 10:00System element out of context
- 11:04Mixed integrity level systems
- 12:09Autonomous driving levels
- 15:40True redundancy in systems
- 17:50Multi-threading for safety
- 19:15Key takeaways and conclusion
related talks
17mDeveloping a RISC-V Automotive Safety Island
16mAutomotive Solution Empowered by RISC-V Based Security and Functional Safety Module
11mKeynote: Shaping the Future of Automotive Computing with RISC-V
09mDemo: Enabling Automotive Safety with Andes RISC-V IP
21mRISC-V and Functional Safety
08mEmbedded Executive LIVE
06mDemo: RISC-V Dual Lock-step Implementation for Safety and Security Applications
20mIntegrate RISC V to build Open Common Automotive Platform