EIM

[HeebeomPark]

In the FMEDA, there is no safety mechanism for EIM1/2/3 and the comment is written like "EIM cannot be activated with a single bit.". In this case, what is the recommendation for safety application?

Can you explain in more detail? 

[antoinedubois]

Hello,

EIM are the feature to test the safety mechanisms therefore if they fail they would be consider triple point fualt and are consider safe.

The only potential failure mode is the unintended activation of the EIM, however in the HW there is a dual enable and Triple voting flogs therefore it cannot happen. There is no specific implementation required by the customer it is built into the HW.