Experts in embedded RTOS, with a specialisation in safety certified software
SAFERTOS provides Industrial developers with a responsive, deterministic embedded Real Time Operating System (RTOS) with a Design Assurance Pack that provides an easy route to achieving certification of SAFERTOS once integrated into an Industrial Safety Product.
SAFERTOS and its Design Assurance Pack (DAP) are available pre-certified by TÜV SÜD to IEC 61508 Safety Integrity Level 3 (SIL3), the highest level possible for a software only component.
IEC 61508 is a generic Industrial safety standard supporting the design, development and operation of electrical/electronic/programmable electronic systems. Different industries (see figure) have created their own sector specific standards based on IEC 61508. For software development the underlying principles are similar; however the domain specific adaptations include processes and procedures for managing the unique system level risks present within each industrial sector.
All SAFERTOS ports delivered with a DAP comply with the requirements of IEC 61508 SIL 3. SAFERTOS and the DAP also support certification to the domain specific adaptations of IEC 61508, with compliance demonstrated by the use of cross-referencing matrixes and/or independent certification.
When ordering SAFERTOS please let our RTOS consultants know which sector specific standard you are working to, so WHIS can include the required documentation with your SAFERTOS delivery.
SAFERTOS and the Industrial Design Assurance Pack were initially certified against the safety standard IEC 61508 to Safety Integrity Level 3, the highest level possible for a software only product, in 2007 by TÜV SÜD. Since then, WHIS has routinely re-certified SAFERTOS to IEC 61508 on many different compiler/processor combinations.
Typical SAFERTOS industrial applications include safety critical motor controllers, industrial automation, industrial safety devices, traffic management systems, process engineering, and drilling/mining applications.
SAFERTOS and its Industrial Design Assurance Pack are available pre-certified by TÜV SÜD to SIL 3.
The EN 50128 is a specialisation of IEC 61508, and is a European standard for the development of safety-related software for railway applications, both trackside and train side.
The majority of SAFERTOS rail developers purchase the standard Industrial DAP supporting certification to IEC 61508 SIL 3. For those companies that need to demonstrate compliance to EN 50128, WHIS can provide information required by EN 50128 within the DAP and supply a cross-referencing matrix from the DAP to the EN 50128 standard.
Typical SAFERTOS rail applications include signalling, control and communication systems.
The standard ISO 26262 is an adaptation of the Functional Safety standard IEC 61508 for Automotive Electric/Electronic Systems. ISO 26262 defines functional safety for automotive equipment applicable throughout the lifecycle of all automotive electronic and electrical safety-related systems.
IEC/EN 62061, “Safety of machinery: Functional safety of electrical, electronic and programmable electronic control systems” is the machinery specific implementation of IEC/EN 61508. It provides requirements that are applicable to the system level design of all safety related electrical control systems for machinery, and also for the design of non-complex subsystems or devices.
SAFERTOS supports this development standard by the use of the standard SAFERTOS Industrial IEC 61508 DAP.
With an imperceptible boot time, SAFERTOS is an ideal choice in systems that need to protect users and equipment from hazards quickly after a power on or brown out event.
The imperceptible boot time also means SAFERTOS is ideally suited for use on the booting core of a multi-core/multi processor safety system. SAFERTOS can quickly and effectively bring the system up, configure the safety partitions and execute critical safety functionality before enabling other cores/processors, which may require longer to boot.
SAFERTOS provides deterministic event handling, frequently used in motor control applications requiring precision control. It is the ideal choice for systems that need to respond quickly to safety events, where the system must be placed into a safe state.
The Task Isolation and Separation feature of SAFERTOS using the processor's MPU/MMU enables developers to co-locate safety critical code with non-safety critical code. Used effectively this can greatly reduce the amount of safety critical code required within an industrial device, resulting in lower development and maintenance costs.
The SAFERTOS Design Assurance Pack contains the planning, design, and verification evidence which supports the certification of SAFERTOS. It is specific to the selected processor/compiler combination, which removes the need for expensive and prolonged retesting on the target hardware.
Certification of SAFERTOS integrated into an Industrial product is straightforward. WHIS supplies an easy to follow Safety Manual that clearly details how to install and integrate SAFERTOS into a safety critical development environment. Following the concise instructions preserves the verification and validation already performed by the WHIS Safety engineers.
WHIS uses a high integrity lifecycle to develop, maintain and support SAFERTOS and its Design Assurance Packs that’s supported by a deeply institutionalised Quality Management System (QMS). Work started on the QMS in 1999, when WHIS was developing flight control systems. Over the subsequent years WHIS has developed its QMS to encompass the range of applications and standards it supports today, as demand for its services and products from its customers have broadened and deepened.
Lloyds Register LRQA UK independently certifies the WHIS QMS to ISO 9001, with the applicable scope:
Lloyds Register LRQA UK