The electronics architecture presented is a result of the Prystine (Programmable Systems for Intelligence in Automobiles) R&D project, which involved 60 partners from 14 countries. With a budget of around €50 million, Prystine aimed to realise safe automated driving through fail-safe environment perception in urban environments. The focus is on the fail-safe fusioning and processing of vehicle-bound environment sensors, for example radar and lidar sensors as well as cameras.
The mixed critical approach followed in the project allows the use of computer hardware and software that run applications of different Automotive Safety Integrity Levels (ASIL). A failover mechanism consisting of a primary (“Doer” node) and a fallback ECU (“Fallback” node) ensures the necessary fail-operationality for vehicles. In case the “Doer” fails, the “Fallback” promptly takes over within milliseconds. This mechanism ensures the fail operationality of the system, for example, sensor fusion, trajectory planning and object recognition tasks of SAE Level 3 and 4 functions.
A modular concept offers the highly flexible and fast development of Automated Driving Systems (ADS) by enabling the combination of various off-the-shelf elements such as SoCs (System on a Chip), automotive microcontrollers, power supplies, with a deterministic backbone network as well as multiple cameras.
The architecture represents an ideal setup for a safe electronic architecture to take highly automated driving to the next level, the companies believe. Infineon and TTTech Auto, with the participation of TTTech Group, will continue their collaboration to enable Level 4 and Level 5 automated driving and shape the future of safe autonomous mobility.
The fail-operational architecture is widely based on Infineon's Aurix processor
“With a fail-operational system design, car manufacturers lift the safety of their highly automated vehicle to aviation standard in a cost-efficient manner”, says Stefan Poledna, CTO of TTTech Auto. “This system architecture takes the high safety and reliability requirements of global car manufacturers’ mass-production programs into account. Furthermore, based