Reduce Development Time, System Complexity, and Certification Risk
Qualified Functional Safety Data Package
Industrial automation, transportation, the smart grid, automotive, military and aerospace, and
medical require that machinery and products are highly reliable, safe, and certified for functional
safety. Safety is a central requirement when you develop machinery that must comply with
worldwide established safety standards such as IEC 61508 and ISO 26262.
When you develop a safe product, you need to consider safety as a core system functionality.
Design challenges include:
• Adopting quality management standards, a “safe” design methodology, and safety concepts
• Accounting for additional project effort (time and technology), resulting in longer time to market
and higher cost of ownership
Impact of Functional Safety
Typical design steps to develop an application, before safety:
Architecture
Development
Component
Selection
Application Design
Implementation
Integration
and Test
Release
If you add some of the required steps to design a safe application and achieve functional safety certification (shown in
yellow), you can see the significant project complexity:
Project Startup,
Risk Analysis
Architecture
Development
Safety
Requirements
Specification
Validation,
Verification
Plan
Component
Selection
Component
IP and Tools
Qualification
Application
Design
Implementation
Safety/
Diagnostic
Functions
Integration
and Test
Safety
Validation
Certification
Release
Having immediate access to qualified semiconductor data, intellectual property (IP), development flows, and design
tools from a vendor like Altera can help you significantly shorten your overall project timeline by 1 ½ years to 2 years:
Project Startup,
Risk Analysis
Architecture
Development
Safety
Requirements
Specification
Validation,
Verification
Plan
Component
Selection
Application
Design
Implementation
Integration
and Test
Safety
Validation
Certification
Altera
Certificate
Release
18-24 Month
Time Savings
Component IP and
Tools Qualification
Safety/Diagnostic
Functions
Accelerating Development
To simplify and speed up the certification
process for faster time to market, we worked
with TÜV Rheinland and obtained approval for
Altera® FPGA devices, IP, our established safety
FPGA design flow, and development tools for
safety designs up to the Safety Integrity Level 3
(SIL3). This certification means that our tools,
methodologies, and devices are sufficiently free
of systematic errors.
Altera Functional Safety Data Package Contents
Functional Data Safety Package
Altera FPGA development methodology
Altera FPGA development tools
IP
Diagnostic IP
Device reliability reports, guidelines
Formatted according to IEC 61508
Benefit
Qualified, safe design methodology
Qualified tools
Safe-to-use system components to speed up
application development
Shorten design time for safety architecture
Simplifies risk analysis, failures in time (FITs) calculation
Seamless integration into project documentation
Altera FPGAs Provide Flexible Safety Solutions
Figure 1 illustrates a typical industrial controller application. It integrates standard (“non-safe”)
and safety functions with very few board components using FPGA devices, such as the Altera
Cyclone® FPGA, and a soft processor core, such as the Nios® II processor. In this example, all
three embedded controllers are Nios II soft-core processors, each with an individual custom
peripheral set.
Safety Data Package
Contents:
• Application Note: Silicon
Integration – How to qualify devices
using the reliability report
• Application Note: Tools and Tool
Flow – How to use Quartus
®
II
software and develop FPGAs
systems according to IEC 61508
• Suggested RTL coding guidelines
for FPGA development
• Diagnostic IP with IEC 61508
standard documentation and source
code: single event upset (SEU) test,
clock check, and cyclic redundancy
check (CRC) test modules
• Quartus II software version 11.0 SP1
• Altera-qualified devices up to
Cyclone IV and Stratix
®
IV FPGAs
and MAX
®
II and MAX II Z CPLDs
• IP including Nios
®
II embedded
processor
• Latest FPGA device reliability report
With such a safety-focused
architecture for a SIL3
certified application, you can
reduce the total cost of owner-
ship, design footprint, and
power consumption while
meeting the global requirements
for functional safety.
Figure 1: A Typical SIL3 Industrial “Safe” System
Encoder / Sensor
FPGA
Custom
Logic
Encoder I/F
Motor
Controller
Safe I/O
Safety
Controller 1
Safe I/O
Safety
Controller 2
Architectures where safety
Application
Custom
Fieldbus/IE
typically is an after-thought often
Processor
PWM
Controller
use bolt-on safety option boards
and dual microcontroller units
Drive Power
Fieldbus/
(MCUs) that detect system
Sensor
Industrial
failures. Using an option card
Ethernet
increases the cost significantly.
Integrating a SIL3 “safe” solution in a pre-qualified FPGA with standard application functions
on the main board not only lowers the safety cost footprint, but it also enhances system
flexibility and shortens development time. It is designed with safety as a core system function-
ality in mind.
If you are concerned about the lack of flexibility, long development times, or device
certification issues that come with traditional safety architectures, Altera’s FPGAs are the
ideal solution.
TÜV Rheinland Certificate
No. 968/EL 850.00/12
Product Order Numbers
Functional Safety Data Package:
IP-ABG-SafetyDP2
Annual Renewal:
IPR-ABG-SafetyDP2
Want to Dig Deeper?
For more information on developing IEC 61508 systems with FPGAs
and the Functional Safety Data Package, please contact your local Altera
or distributor sales office or visit the Functional Safety page at
www.altera.com/safety.
Altera Corporation
101 Innovation Drive
San Jose, CA 95134
USA
www.altera.com
Altera European Headquarters
Holmers Farm Way
High Wycombe
Buckinghamshire
HP12 4XF
United Kingdom
Telephone: (44) 1 94 602 000
Altera Japan Ltd.
Shinjuku i-Land Tower 32F
6-5-1, Nishi-Shinjuku
Shinjuku-ku, Tokyo 163-1332
Japan
Telephone: (81) 3 3340 9480
www.altera.co.jp
Altera International Ltd.
Unit 11-18, 9/F
Millennium City 1, Tower 1
388 Kwun Tong Road
Kwun Tong
Kowloon, Hong Kong
Telephone: (852) 2945 7000
© 2012 Altera Corporation. All rights reserved. ALTERA, ARRIA, CYCLONE, HARDCOPY, MAX, MEGACORE, NIOS, QUARTUS and STRATIX words and logos are trademarks of Altera Corporation
and registered in the U.S. Patent and Trademark Office and are trademarks or registered trademarks in other countries. All other words and logos identified as trademarks or service marks are the property
of their respective holders as described at www.altera.com/legal. PDF September, 2012
SS-1032.3.0