SM4.REDUNDANT_IO

[HeebeomPark]

Actually, for our system with GPIO, it doesnt require ASIL D.

However from the below, it shows the SM4.REDUNDANT_IO shall be used.

However , for us, is there any alternative instead of SM4.REDUNDANT_IO?

[Yashwant_Singh]

Hello Heebeom,

SIUL2 provides control over the state and muxing of Input/output singals that appear on the PADS. These three modules become Safety Related if PADs are used to input/output any Safety Related Signal. The Safety Mechanism SM4.Redundant_IO is about acquiring redundant safety related inputs(double read) through physically separate paths and covers the failures of SIUL2/IOMUXC/IOMUX. When the signals are acquired redundantly and compared, it provides a high coverage for ASIL D target metric. 

When ASIL D targets are not required (considering ASIL B application) the high coverage (99% dc) provided by the redundant input/outputs isn't required. In such cases any application-level measure such as a Plausibility check can be implemented over the inputs/outputs that provides the required medium coverage (90% dc) for an ASIL B target

Thanks!

-Yashwant