About This Document; Purpose And Scope; Normative References; Table 1. Document Sections Versus Iec 61508-2 Annex D Safety Requirements - ST STM32L4 Series User Manual

1

About this document

1.1

Purpose and scope

This document describes how to use Arm
unit (MCU) devices (further also referred to as Device(s)) in the context of a safety‑related system, specifying the
user's responsibilities for installation and operation, in order to reach the desired safety integrity level.
It is useful to system designers willing to evaluate the safety of their solution embedding one or more Device(s).
For terms used, refer to the glossary at the end of the document.
Note: Arm is a registered trademark of Arm Limited (or its subsidiaries) in the US and/or elsewhere.
1.2

Normative references

This document is written in compliance with the IEC 61508 international norm for functional safety of electrical,
electronic and programmable electronic safety-related systems, version IEC 61508:1-7 © IEC:2010.
The other functional safety standards considered in this manual are:
• ISO 13849-1:2015, ISO13849-2:2012
• IEC 62061:2005+AMD1:2012+AMD2:2015
• IEC 61800-5-2:2016
The following table maps the document content with respect to the IEC 61508-2 Annex D requirements.
D2.1 a) a functional specification of the functions capable of being performed
D2.1 b) identification of the hardware and/or software configuration of the Compliant item
D2.1 c) constraints on the use of Compliant item or assumptions on which analysis of the behavior or
failure rates of the item are based
D2.2 a) the failure modes of Compliant item due to random hardware failures, that result in a failure of
the function and that are not detected by diagnostics internal to Compliant item;
D2.2 b) for every failure mode in a), an estimated failure rate;
D2.2 c) the failure modes of Compliant item due to random hardware failures, that result in a failure of
the function and that are detected by diagnostics internal to Compliant item;
D2.2 d) the failure modes of the diagnostics, internal to Compliant item due to random hardware failures,
that result in a failure of the diagnostics to detect failures of the function;
D2.2 e) for every failure mode in c) and d), the estimated failure rate;
D2.2 f) for every failure mode in c) that is detected by diagnostics internal to Compliant item, the
diagnostic test interval;
D2.2 g) for every failure mode in c) the outputs of Compliant item initiated by the internal diagnostics;
D2.2 h) any periodic proof test and/or maintenance requirements;
D2.2 i) for those failure modes, in respect of a specified function, that are capable of being detected by
external diagnostics, sufficient information must be provided to facilitate the development of an external
diagnostics capability.
D2.2 j) the hardware fault tolerance;
D2.2 k) the classification as type A or type B of that part of Compliant item that provides the function (see
7.4.4.1.2 and 7.4.4.1.3);
UM2305 - Rev 10
®
Cortex
Table 1. Document sections versus IEC 61508-2 Annex D safety requirements
Safety requirement
® ‑M4 -based STM32L4 and STM32L4+ Series
UM2305
About this document
microcontroller
Section number
3
3.2
3.2
3.7
3.2.2
3.6
3.7
3
page 2/110