External Safety-Island Interface for Scalable Functional Safety

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing solutions for monitoring Functional Safety (FuSa) levels in autonomous systems are inflexible, static, and costly, limiting scalability, connectivity, and collaboration with other connectivity solutions.

Innovation Solution

Implementing a safety-island processor external to the motherboard, which establishes a FuSa connection with the functional processing core, enabling on-demand provisioning of functional safety and supporting a generic, reusable interface for various SoCs and connectivity interfaces.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a safety-island processor is implemented external to the motherboard, then adaptability and scalability are improved, but device complexity increases

Engineering Contradiction:
ImproveadaptabilityVSAvoiddevice complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system is divided into a functional processing core on the motherboard and a separate safety-island processor external to the motherboard. This segmentation allows the safety functions to be independently provisioned and configured, improving adaptability while managing complexity through modular separation.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A FuSa connection interface acts as an intermediary between the functional processing core and the safety-island processor. This intermediary enables standardized communication and integration, reducing the complexity burden of direct integration while maintaining high adaptability through configurable connections.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a FuSa connection is established between the functional processing core and safety-island processor, then reliability is improved, but device complexity increases

Engineering Contradiction:
ImprovereliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The FuSa connection interface is designed with a generic, reusable architecture that can serve multiple SoC types and connectivity interfaces. This universal design improves reliability through consistent safety monitoring while reducing complexity by avoiding custom integration for each specific configuration.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The FuSa connection enables dynamic provisioning of functional safety on-demand, allowing the safety-island processor to be selectively activated and configured based on system requirements. This dynamic approach improves reliability where needed while minimizing complexity in configurations where full safety monitoring is not required.

Inventive Principle:
Principle #15Dynamics

3Adaptability or versatility

If on-demand provisioning of functional safety is enabled, then adaptability is improved, but manufacturing precision requirements increase

Engineering Contradiction:
ImproveadaptabilityVSAvoidmanufacturing precision
Core Design Contradiction:
Adaptability or versatilityVSManufacturing precision

Solution Approach 1:

The safety-island processor is pre-configured with FuSa monitoring capabilities and communication protocols during manufacturing. This preliminary configuration ensures that when the processor is deployed and connected to the functional processing core, it immediately provides reliable safety monitoring without requiring complex on-site calibration or precision adjustments.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12276963B2Apparatus, system, and method of functional safety
Publication Date: 2025.04.15 INTEL CORP
  • US12276963B2 patent drawing
  • US12276963B2 patent drawing
  • US12276963B2 patent drawing

AI summary

For example, an apparatus may include a motherboard including a functional processing core configured to perform a functionality having a Functional Safety (FuSa) level; a FuSa transceiver configured to communicate with an external safety-island processor, which is external to the motherboard; and a FuSa controller configured to establish a FuSa connection with the external safety-island processor according to the FuSa level, to send FuSa information corresponding to the functionality of the functional processing core to the external safety-island processor via the FuSa transceiver, and to control one or more FuSa operations of the functional processing core based on one or more control messages received from the external safety-island processor via the FuSa transceiver.