Implementation of Multiple Independent Safety-Critical Software Functions in a Single Integrated Circuit

摘要

In an embodiment, an integrated circuit includes a first fault domain that includes a first set of programmable logic gates configured to run a first program to create a first output signal. In addition, the integrated circuit includes a second fault domain including a second set of programmable logic gates configured to run a second program to create a second output signal. The integrated circuit further includes a digital communication channel in communication with the first fault domain and second fault domain, the digital communication channel itself including data access control logic configured to mediate communication between the first fault domain and the second fault domain without the need for an operating system.