1  功能概述FUNCTIONAL OVERVIEW

TC367 Safety Library用于帮助客户实现基于AURIX TC367平台的功能安全要求。Safety Library具有高扩展性，可以根据不同的客户项目要求进行配置和再开发，最终满足客户的功能安全需求。

The TC367 Safety Library is designed to assist customers in achieving functional safety requirements based on the AURIX TC367 platform. The Safety Library is highly scalable and can be configured and redeveloped according to different customer project requirements, ultimately meeting the customers' functional safety requirements.

TC367 Safety Library用于实现TC367系列的软件安全机制 ，包括MCU内部模块的测试和硬件安全机制的驱动。

The TC367Safety Library is used to implement the software safety mechanisms of the TC367, including the testing of internal MCU modules and the driving of hardware safety mechanisms.

2  应用领域APPLICATION FIELD

TC367 Safety Library可应用于有功能安全等级需求的控制器。例如：

The TC367 Safety Library can be applied to controllers that require functional safety levels.

For example:

Ø  电池管理系统(BMS)

Battery Management System

Ø  智能驾驶控制器(ADAS)

Advanced Driver Assistance System Controller

Ø  智能网关控制器(Gateway)

Intelligent Gateway Controller

Ø  智能刹车系统(iBooster)

Intelligent Braking System

Ø  车身稳定控制(ESC/Onebox)

Electronic Stability Control

Ø  电动助力转向(EPS)

Electric Power Steering

Ø  车身控制器(BCM)

Body Control Module

Ø  发动机管理系统(EMS)

Engine Management System

Ø  底盘域线控系统应用

Chassis Domain Control System Applications

通过将Safety Library集成到基于TC367的控制中，可达到ISO26262 ASIL-D的等级要求。

By integrating the Safety Library into the control based on TC367, it is possible to meet the ISO 26262 ASIL-D level requirements.

3  配置环境CONFIGURATION ENVIRONMENT 

4  开发背景 DEVELOPMENT BACKGROUND

目前，汽车上的电子电气架构越来越复杂，对汽车电子的安全性要求也越来越高，为了满足汽车的安全性需求，汽车功能安全越来越受到重视。提到功能安全，大家首先想到的是功能安全的标准ISO26262。其中，ISO 26262-5(2018) Clause 8中介绍了2个度量：Single-point fault metric(单点故障度量)和Latent-fault metric(潜伏故障度量)。根据不同的ASIL等级要求，单点故障度量和潜伏故障度量需要达到相应的等级。

Currently, the electronic and electrical architecture of automobiles is becoming increasingly complex, and the safety requirements for automotive electronics are also rising. To meet the safety requirements of automobiles, functional safety is gaining more attention. When it comes to functional safety, the first thing that comes to mind is the functional safety standard ISO 26262. In particular, ISO 26262-5(2018) Clause 8 introduces two metrics: Single-point fault metric (single-point fault metric) and Latent-fault metric (latent fault metric). Depending on the required ASIL level, the single-point fault metric and latent fault metric must meet the corresponding levels.

对于微控制器(MCU，以下简称MCU)，在电子电气系统中，作为SEooC(safety element out of context)进行设计开发。MCU为了满足以上提到的2个度量要求，需要实现相应的安全机制。而安全机制可以分配到硬件和软件模块中。MCU的Safety Frame安全库就是实现分配到软件上的安全机制。

For microcontrollers (MCU, referred to as MCU below), within the electronic and electrical system, they are designed and developed as SEooC (safety element out of context). To meet the aforementioned metric requirements, MCUs need to implement corresponding safety mechanisms. These safety mechanisms can be allocated to both hardware and software modules. The Safety Frame safety library for MCUs is the implementation of safety mechanisms allocated to software.

5  功能描述FUNCTIONAL DESCRIPTION

5.1 产品特点Product Feature

Ø  可作为复杂驱动集成到AUTOSAR中

Can be integrated as a complex driver into AUTOSAR .

Ø  可集成到非AUTOSAR软件架构中，灵活适配

Can be integrated into non-AUTOSAR software architectures.

Ø  支持双核测试（CPU0/CPU1）及应用

Supports dual-core (CPU0 and CPU1) testing and applications.

Ø  Safety Library具有内部程序流监控

Safety Frame has internal program flow monitoring.

Ø  高安全性：支持 CPU0 与 CPU1 双核自检。本交付覆盖 TC367 片内安全机制，可满足最高 ASIL-D 需求。

High safety: dual-core (CPU0 and CPU1) self-test. This delivery covers the on-chip safety mechanisms of the TC367 and supports integration up to ASIL D.

Ø  高扩展性：各模块可配置满足不同客户的应用需求

High scalability: Each module can be configured to meet the application requirements of different customers.

5.2     软件架构 Software Architecture

软件架构
software architecture

实现的功能模块：

Realized functional modules:

TC367 Safety Manual中的ESM：

Meet the ESM in the TC367 Safety Manual:

5.3     配置工具Configuration Tool

为了满足客户的不同项目需求，提高Safety Library的扩展性，TC367 Safety Library实现了各个模块可配置性，并且实现了Safety Library的配置工具。客户可根据不同需求，在配置工具上完成Safety Library各个模块的配置工作，可生成配置代码文件，将生成的配置文件集成到工程中即可。

To meet the diverse project requirements of customers and enhance the scalability of the Safety Library, the TC367 Safety Library has implemented the configurability of each module and has developed a configuration tool for the Safety Library. Customers can complete the configuration of various modules of the Safety Library using the configuration tool according to different requirements. They can generate configuration code files, and integrate the generated configuration files into the project.

6  过程文档PROCESS DOCUMENTATION

 7  证书CERTIFICATE

功能安全证书

Functional Safety Certificate

木牛软件著作权登记证书
ZC.MUNIU SOFTWARE COPYRIGHT REGISTRATION CERTIFICATE

木牛软件产品登记证书
ZC. MUNIU SOFTWARE PRODUCT REGISTRATION CERTIFICATE