Accelerate the construction of domain-based IVI architecture to achieve automotive safety systems that meet ASIL-D

By: Michael Burk, Chief Architect of In-Vehicle Infotainment Systems, Micron’s Automotive Division

Today’s cars are increasingly demanding the ability to quickly store and process massive amounts of data. Automakers have been under pressure to integrate processing power, keep digital systems running smoothly, and compete on cost. Now, an unexpected new trend has emerged. In-vehicle infotainment (IVI) systems, with their fascinating high-resolution screens and features, are becoming more like smartphones, and their functions are no longer just for entertainment. Designers are integrating IVI systems with instrument clusters to achieve more critical systems that meet functional safety requirements.

With the advent of digital instrument clusters, new requirements for graphics processing have emerged. To meet these requirements, the in-vehicle infotainment system architecture and the instrument cluster are being integrated into a common architecture called a domain controller. This integration can bring multiple benefits, including reducing costs and simplifying the architecture, thereby accelerating innovation.

The processing platform in the in-vehicle infotainment system already has graphics processing capabilities, so using it as a common domain controller helps eliminate system redundancy and reduce the total system cost. The ability to interchange graphics between the in-vehicle infotainment system and the instrument cluster user interface further enhances the user experience. At the system level, this integration also reduces the complexity of the interface.

Integration brings both advantages and challenges

While this integration is beneficial, there are also functional safety requirements to consider. Some of the information in the instrument cluster is used to alert the driver to vehicle functions, some of which may have an impact on vehicle and passenger safety and therefore need to meet strict compliance requirements.

Therefore, the domain controller architecture is divided into two domains. The first domain is used for the safety-critical interface of the instrument cluster, which usually meets the Automotive Safety Integrity Level B (ASIL-B) standard. The second domain controls other connections in the vehicle. This domain is controlled solely by the Telematics Control Unit (TCU) and is generally isolated by a security gateway.

The integrity of safety-critical information is very important. The ISO 26262 compliance requirement level is first established at the system level based on hazard analysis, which will analyze the severity, controllability and exposure of failures. According to the requirements of ISO 26262, integrators have a variety of options to integrate semiconductor components into their systems, such as: using components with the same ASIL level as the system, performing ASIL decomposition and conducting hardware evaluation of components.

ASIL Rating System

1. Airbags (ASIL-D)
2. Instrument cluster (ASIL-B)
3. Engine management (ASIL-C to D)
4. Headlights (ASIL-B)

5. Radar cruise control (ASIL-C)
6. Electric power steering (ASIL-D)
7. Vision ADAS (ASIL-B)
8. Active suspension (ASIL-B to C)

9. Anti-lock brakes (ASIL-D)
10. Brake lights (ASIL-B)
11. Rear view cameras (ASIL-B)

ASIL certification covers some key vehicle components

To achieve ASIL certification, the architecture supporting critical information was isolated from other vehicle functions and modeled as deterministic functions with high availability. In early in-vehicle infotainment systems, integrators needed to use "quality management" (QM) grade memory devices to meet functional safety requirements for different components. However, as other interfaces such as driver monitoring and electronic rearview mirrors are integrated into the domain controller, the interaction between in-vehicle infotainment systems and other critical vehicle functions has increased. System integrators will face increasing challenges - how to meet system functional safety requirements by simply integrating QM memory components.

To meet this challenge, when developing memory products, it is necessary to comply with the ISO 26262 standard. Previously, DRAM and NAND-based memory products were limited to the QM level, either because customers and integrators did not have demand or because memory suppliers did not develop compliance support. Recognizing this development trend, Micron has launched a series of memory components that have been evaluated for functional safety.

Micron Launches Industry-Leading Automotive Safety Solutions

Based on a deep understanding of the automotive market and the important role of memory in safety applications, Micron recently launched an industry-leading automotive functional safety memory series solution, which is an ideal solution for the next generation of in-vehicle infotainment system applications. Functional safety solutions further demonstrate Micron's 30-year commitment to providing leading solutions to the automotive market and reflect the company's extensive investment in various fields.

Micron's new automotive LPDDR5 memory is the first in our broad automotive-compatible portfolio and is suitable for safety systems at any ASIL level, making it the best choice for next-generation domain-based in-vehicle infotainment applications. Micron's LPDDR5 products come with a hardware evaluation plan and analysis report, which was evaluated by exida, an independent third-party, industry-recognized consulting firm. According to exida's analysis, the product is suitable for the highest level systems, including the most stringent ASIL-D.

The functional safety documentation for this memory product includes not only typical vendor deliverables, such as safety analysis reports and safety application notes, but also a hardware evaluation report developed internally by Micron. This evaluation report provides customers with more detailed information to help them demonstrate that their systems comply with the ISO 26262-5 standard. The product and accompanying hardware evaluation report mark the next milestone in our move toward a broader LPDDR5 product line that supports increasing levels of functional safety system integration.

In addition, this product is also ahead of its peers in the development of innovative functional safety: it is the first and only DRAM to include a unique "safety engine" that can meet ASIL-C requirements for random hardware errors through independent component functions and meet ASIL-D standards with more support from the host system. Compared with standard JEDEC LPDDR5 solutions, Micron's JEDEC-compliant safety solutions enable system integrators to better ensure that DRAM is not affected by system failures, while significantly enhancing fault detection capabilities and improving system performance, power consumption, cost and availability.

It is worth mentioning that although Micron provides an unparalleled range of memory and security products for the rapidly evolving automotive intelligent edge, it will ultimately be the responsibility of customers and system integrators to prove that all electronic components are suitable for safety-related systems. It is also particularly important to ensure through system design that the failure of any component will not affect the safety of people or vehicles.

As a memory solution provider, Micron is a leader in product expertise and design data availability, supporting customers in system-level analysis and integration of memory components. By providing the first LPDDR5 memory that meets ASIL-D standards, Micron's safety-optimized products help automotive designers meet the functional safety requirements of in-vehicle infotainment system integration.