This paper discusses a methodology for calculating the probability of a redundant system to fail in a specified time interval after a first fault has occurred. Four different redundant system configurations of a safety relevant automotive control system are discussed and compared with respect to their reliability characteristics. The four configurations differ in system topologies as well as the intelligence of the system components for self-monitoring.
展开▼
