Sensor Software Partitioning to Cut Safety Recertification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Sensor apparatuses used in safety-critical applications face costly and time-consuming certification processes due to modifications needed for adapting to operating conditions, which expire upon hardware and software changes, requiring recurrent certification.
Innovation Solution
The sensor apparatus is subdivided into certified and uncertified software parts, allowing only the safety-critical part to be certified initially and upon modifications, with the uncertified part being adaptable to operating conditions without requiring recertification, using separate processing units for data fusion and sensor data processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the sensor apparatus is adapted to different operating conditions by modifying hardware and software, then the adaptability is improved, but the certification cost and time increase due to recurrent certification requirements
Solution Approach 1:
The software is divided into two separate parts: a certified part that remains unchanged and maintains safety certification, and an uncertified part that can be freely adapted to different operating conditions. This segmentation allows modifications in the uncertified part without triggering recertification requirements, thus resolving the contradiction between adaptability and certification time.
Solution Approach 2:
The adaptable functionality is extracted into a separate uncertified software part that is distinct from the certified safety-critical part. This extraction enables the adaptable features to be modified independently without affecting the certified portion, eliminating the need for recurrent certification while maintaining safety standards.
2Adaptability or versatility
If the sensor apparatus is adapted to different operating conditions by modifying hardware and software, then the adaptability is improved, but the certification cost increases due to recurrent certification requirements
Solution Approach 1:
The software architecture is segmented into certified and uncertified portions, allowing the uncertified part to be adapted to different operating conditions without incurring recertification costs. This segmentation directly addresses the contradiction by enabling cost-effective adaptability while maintaining necessary safety certifications.
Solution Approach 2:
The adaptable functionality is extracted into a separate uncertified software module that can be modified without affecting the certified portion. This extraction eliminates recertification costs for adaptations while preserving the safety-critical certified functions.
3Reliability
If the entire sensor apparatus software is certified to meet safety standards, then the safety reliability is improved, but the adaptability to operating conditions deteriorates due to strict certification requirements
Solution Approach 1:
The software is segmented into a certified safety-critical part that ensures reliability and an uncertified part that provides adaptability. This segmentation resolves the contradiction by allowing the certified portion to maintain safety standards while the uncertified portion can be freely adapted to different operating conditions.
Solution Approach 2:
Different parts of the software have different quality requirements: the certified part maintains high safety standards while the uncertified part allows flexibility. This local differentiation of quality levels resolves the contradiction between safety reliability and adaptability by applying appropriate standards to each portion.
Data Source
AI summary
The invention relates to a sensor device for ascertaining a size, comprising hardware and software implemented thereon. The invention is characterized in that the software is divided into an uncertified part (10) and a part (12) which is certified on the basis of security requirements, said software parts being separated in terms of the respective software thereof and each software part having at least one computing unit (14, 16), wherein the computing units are connected together so as to communicate. The invention also relates to a working machine comprising such a sensor device and to a method for adapting such a sensor device to the respective use conditions thereof.