Approach to functional safety-compliant ECU design for electro-mechanical brake systems

In this paper, we propose a design approach to a functional safety-compliant ECU for an electro-mechanical brake (EMB) control system or an electronic wedge brake (EWB) control system. Brake actuators in a brake-by-wire (BBW) system such as EMB or EWB are characterized by the safety-critical functions which are now executed by using many electric and electronic devices with application software. Based on hazard analysis and risk assessments of the automotive functional safety standard ISO 26262, the proposed EMB control system should be ASIL-D-compliant, which is the highest ASIL level. To this end, a hardware and a software design method is introduced to implement functionl safety-oriented monitoring functions which are based on an asymmetric dual-core architecture with an external watchdog processor. It is shown by using EMB hardware-In-the-Loop-Simulation (HILS) that the proposed ECU design approach is very effective when a hardware fault or software execution faults occur in the EMB ECU, moreover, this functional safety-compliant design can be well combiled with the sensor fault-tolerant control logic.