Guidance of ISO 26262 to Semiconductors USA

8:00 am - 8:30 am Registration and welcome coffee

Who is Who | Discover who else is participating in the conference. The matchmaking picture wall

will help you identify who you want to meet at the conference. In cooperation with Fujifilm

8:30 am - 8:40 am Opening remarks by Conference Chairperson

8:40 am - 9:20 am Opening presentation: Navigating the SEooC sea: Readying Safety, Availability, and Adaptability for Unknown Customer Needs

The SEooC lifecycle has become a dominant pathway for semiconductor suppliers to deliver solutions to schedule- and cost-challenged OEMs and Tier-1s, who can no longer afford to follow the ideal V-model of top-down, years-long developments. OEM/Tier-1s expect IC suppliers to provide viable complete SEooC systems (chipsets or SoCs) that can be rapidly and cost-efficiently adapted to their specific safety requirements. Here we provide our guidance on successful strategies for confronting this challenge:

• Specific case studies in automotive power and advanced sensing of strategies to optimize adaptability to improve the customer experience at design-in time

• Balancing availability vs safety in fail-operational systems through system level architecture

• Reducing the risk of the overdesign trap in bottoms-up thinking

• How to be ready for engagement with customers of SEooCs when they need to analyze the impact of changes to the assumed concept

9:20 am - 10:00 am Opening panel discussion | Customer Expectations: Safety Mechanism vs. Product Availability

The ISO 26262 standard is written from a Tier1 perspective, which makes it even more important for OEMs, Tier1s and semiconductor companies to closely work together on achieving the right degree of functional safety. Instead of buying products that are designed based on assumptions, OEMs and Tier1 should take the chance to communicate their expectations.

• Risk of overdesigning safety mechanism

• Expectations from OEMs and Tier1s on their suppliers, and vice versa

10:00 am - 10:30 am Match & meet | If Money Did Not Matter…

Come together in groups and brainstorm about your dream concept of a safe vehicle on SAE automation level 3. Imagine money playing no role in it. How safe would you make your vehicle? How would the system handle critical situations in which the driver needed to get back in the loop?

10:30 am - 11:00 am Refreshment break and networking

11:00 am - 11:40 am Dealing with Variability when Integrating SEooCs

System development is a complex integration task of a lot of puzzle pieces. Pieces can be anything like semiconductor components, software or even subsystems. They are safety elements out of context (SEooC). SEooCs often are defined in a flexible way to allow the usage in various applications. Bringing those pieces together is a non-trivial task that challenges the integrator with:

• What are the actual boundaries of an SEooC?

• With all flexibility being kept in an SEooC definition, is there guidance on how to apply to the specific use case?

• How can tailoring be easily applied so that the integrator only needs to take care of remaining assumptions?

11:40 am - 12:20 pm Scalable Safety Element out of Context Sensor Development

This presentation is about Sensor development to meet a certain ASIL. It specifically addresses the definition of ASIL when a sensor supplier claims to meet a certain ASIL. In this presentation, we will also touch on different sensor functions vs Cost as well as challenges wrt to iso 26262 for a sensor development

12:20 pm - 1:00 pm Applying the ISO 26262 SEooC Model to Software

Focussing on software SEooC, safety professionals face different challenges compared to hardware SEooC development.

• Assumptions in developing a software SEooC

• Choosing the right ASIL

• Assuring a successful integration of the SEooC into the item’s safety development system

1:00 pm - 2:30 pm Networking luncheon

2:30 pm - 3:10 pm Anomaly Detection for Functional Safety of Analog and Mixed-Signal Circuits and Systems

Analog and mixed-signal circuits play crucial roles in many safety-critical applications e.g. automotive, industrial IOT. Their functional safety (FuSa), however, faces several challenges; on the other hand, analog behavior provides an opportunity for early anomaly alert before the actual failure happens, thus improving functional safety. In this talk we will present a distributed and scalable FuSa methodology using data-driven anomaly detection. It is expected to provide a framework of mining dynamic in-field time series data in the context of system operation to detect anomalous events from FuSa perspective, with minimal hardware overhead. We will also discuss its application to some emerging challenges in FuSa field, e.g. freedom from interference (FFI) analysis.

3:10 pm - 3:50 pm Organizing Yourself For ISO 26262 Compliance Success

Michael Munsey - Vice President Business Development and Strategic Accounts, Methodics, Inc. USA

While solutions exist for traceability for requirements, design and verification, these solutions are often not connected and error prone when information attempts to be shared or reused. This presentation will discuss:

• How to automate traceability from requirements through design to verification

• How to automate and mange FMEA, FMEDA and all other verification data through the development process

• How to automate documentation of requirements, design and verification results

3:50 pm - 4:20 pm Refreshment break and networking

4:20 pm - 5:00 pm Building SoC Safety Concepts with QM and ASIL Developed IPs

Today’s SoC safety concepts are built from a combination of IPs that are developed for automotive ISO 26262 and IPs that were previously developed following a QM process. This presentation looks at some of the key challenges building safety concepts with mixed criticality IPs, including:

• Overview of the main differences between an automotive QM process and non-automotive QM processes.

• How ISO 26262 8.13 can be applied to evaluate QM IPs

• Example case study of integrating a QM Soft IP into ASIL B & ASIL D Safety Concepts

5:10 pm - 6:50 pm AutoSoC: A Suite of Open-Source Safety-Oriented Automotive SoC Benchmarks

The talk will introduce the suite of benchmarks (named AutoSoC) developed in the frame of the RESCUE project, funded by the European Commission. Topics covered:

• Why a new set of open-source benchmarks

• Characteristics of the benchmarks

• Released material (hw, sw, supporting tools)

5:40 pm - 6:20 pm Evaluation and Improvement of Silicon Device Reliability

In this talk, I will discuss recent collaborative research between Imperial College London, Arm Ltd and the Rutherford Appleton Laboratory focussed on the evaluation and improvement of silicon device reliability. In particular, I will touch on active projects exploring the effectiveness of:

• lockstep and ECC mechanisms in current-generation CPUs

• automatically adapting hardware to meet realtime reliability requirements via FPGA reconfiguration

• neutron irradiation as a teaching aid

6:20 pm - 6:30 pm Closing remarks by Conference Chairman

6:30 pm - 8:30 pm Evening Get-Together

Join our evening Get-Together and take this opportunity to network and make new business contacts. Or just to relax and round off your first conference day.

Main Conference Day One