Safety Gaps filling of a Partial Networking Coordinator, developed in AUTOSAR Application Layer, as Safety Element out-of-Context

Automotive Industry is a field where Embedded Systems are widely employed. Modern vehicles can contain up to 80 microprocessor-based systems, called Electronic Control Unit or ECU, they run millions of Lines of Code and they can represent the up to 80% of vehicle innovation. An important aspect, in terms of innovation, is the power saving. Some studies have proved that the power saving can have a positive impact on several parameters like the emissions: reducing the power consumption is possible to reduce the emissions by a math formula. One of solution to implement the power saving at vehicle context is to adopt the Partial Networking at communication level among ECUs. The design and development of an Embedded System for a vehicle shall be done considering the safety-critical nature of Automotive products and so they shall meet several regulations and normatives to ensure the State-of-Art. ETAS GmbH (Bosch Group) is an AUTOSAR premium partner it develops several application, tools and services for Automotive solutions. One of these is a Partial Networking Coordinator it manages the Basic Software Services as a central node in application layer, for each application software component that is mapped in Partial Networks, using a CAN bus system. The nature of the software component forces to identify it as a Safety Element out-of-Context (SEooC) and therefore its design and development, compliant to ISO 26262, requires a certain level of tailoring in safety activities. The following paper will analyze all aspect related to ISO 26262 for SEooC development and it will try to produce a solution, in order to get compliance of ETAS Partial Networking Coordinator with ISO 26262 in all its parts that are considered in scope, using language subset as MISRA C to improve the safety too.