The importance of functional safety in the industrial field, which aims to maintain safety even when malfunctions occur, is increasing to prevent the adverse effects of breakdowns and accidents inside plant operation, injuries to operators, and the associated economic losses. The European Union’s Machinery Directive and workplace safety laws in many countries requires equipment to meet functional safety standards. To reduce the development burden on customers as the application of functional safety standards expands within many industrial fields, Renesas offers functional safety solutions and development tools with safety support.
Functional Safety Solution
The Renesas Functional Safety Solution reduces the development burden on customers and contributes to the realization of safe and trusted factories with the application of functional safety standards, such as IEC61508, a key standard in many industrial fields.
The Functional Safety Solution offers software technology compliant to IEC61508 SIL* certification, a reference hardware board for constructing a functional safety system, a reference document as a guidebook to IEC61508, and safety compilers for safe development. Register here to obtain the complimentary evaluation version of the software and reference document.
Key Features
- One-stop functional safety solution for general purpose MCU
- Reduces time for constructing functional safety systems
- Easily implement safety system for various safety applications
*SIL: Safety Integrity Level which is defined in the functional safety standard
Note: The software kits in yellow boxes are certified by TÜV Rheinland.
| Functional Safety Software and Documents | RX Family | RA Family | ||
|---|---|---|---|---|
| RXv1 | RXv2 | RXv3 | RA4M1, RA6M1, M2, M3 | |
| 1. SIL3 System Software Kit*1 | check | check New | ||
| 2. Self-Test Software Kit*1 | check | check | check New | check New |
| 3. Functional Safety over EtherCAT Stack | check New | check New | ||
| 4. Reference Documents*1 | check | check | check | check |
| 5. Reference Hardware Board | check | check | check New | |
| 6. Safety Compilers | check | check | check | check New*2 |
*1: Register for complimentary evaluation software and reference document
*2: Corresponding compiler is IAR-EWARM V8.22.3. Please contact IAR Systems for more details.
Renesas Functional Safety Solution
Shorten Development/Certification Process
- 1) SIL3 System Software Kit
- 2) Self-Test Software Kit
- 3) FSoE Application Software Kit
- 4) Reference Document
- 5) Reference Hardware Board
- 6) Compiler/Certification Kit
Safety Software Overview
Renesas released IEC61508 SIL3 certified software for general purpose MCUs to enhance safety level with cross-monitoring and self-diagnostics features.
- SIL3 System Software Kit: Product package of Functional Safety Platform Software. This software is for cross-monitoring dual MCUs and is able to control user application behavior, which needs to be used together with the self-test software.
- Self-Test Software Kit: Product package of MCU self-diagnostics software, which is software for diagnosing the CPU, ROM, and RAM in an MCU.
1) SIL3 System Software Kit
The SIL3 System Software Kit provides Functional Safety Platform Software, a safety manual*, user guide and IEC61508 SIL3 certificate and test report* certified by TÜV Rheinland Industrie Service GmbH (Germany).
It also includes a configuration tool for evaluating the behavior of Functional Safety Platform Software on a PC, and a software development handbook for easy development.
Key Features of the Functional Safety Platform Software in this package:
- Executes MCU self-diagnostics and cross monitoring, which vastly reduce the development time and burden when building redundant, dual safety MCU system.
- Simply add user application software to complete the safety MCU software.
- The software partitioning function simplified re-certification and enables coexistence of safety software and non-safety software.
*Not included in the evaluation version of the SIL3 system software kit.
| Device | Corresponding Compiler | Full Kit Part Number | Evaluation Kit Part Number | Note | Certificate | |
|---|---|---|---|---|---|---|
| RXv2 Core RXv3 Core |
CC-RX V3.01.00 | RTK0EF0061F22002SJ | RTK0EF0061F32002SJ |
Image
 Full Kit
|
Evaluation Kit
|
RXv2 Core, RXv3 Core |
| IAR-EWRX V4.14.2 | RTK0EF0062F22002SJ | RTK0EF0062F32002SJ | ||||
2) Self-Test Software Kit
The Self-Test Software Kit provides a self-diagnostics software library for microcontroller, a complete safety manual, user guide and IEC61508 SIL3 Certificate test report certified by TÜV Rheinland Industrie Service GmbH (Germany). For safe system development, developers can select the information they require from the safety manual and make use of the self-diagnostics software library to alleviate the burden on microcontroller-level development to conform to functional safety.
The Self-Test Software Kit diagnoses the permanent failure of CPU, internal ROM, and internal RAM. Please refer to the reference document for permanent failure diagnosis of other modules and transient failure diagnosis.
Test Timing
At start up, interval execution after start up
Running of Test Condition
All execution or division execution
Development Tool (C Compiler)
Renesas CC-RX compiler for functional safety
IAR Embedded Workbench® for RX FS
| Device | Corresponding Compiler | Part Number | Note | Certificate | |
|---|---|---|---|---|---|
| RXv1 Core | RX100 series*1 | CC-RX V2.03.00 | RTK0EF0059F31001SJ |
Image
|
RX100 |
| IAR-EWRX V3.10.5 | RTK0EF0060F31001SJ | ||||
| RXv2 Core, RXv3 Core | RX700 series*2 | CC-RX V3.01.00 | RTK0EF0054F37002SJ | RX700 | |
| IAR-EWRX V4.14.2 | RTK0EF0055F37002SJ | ||||
| RX600 series*3 | CC-RX V3.01.00 | RTK0EF0054F36002SJ | RX600 | ||
| IAR-EWRX V4.14.2 | RTK0EF0055F36002SJ | ||||
| RX200 series*4 | CC-RX V3.01.00 | RTK0EF0054F32002SJ | RX200 | ||
| IAR-EWRX V4.14.2 | RTK0EF0055F32002SJ | ||||
| Arm Core | RA4M1 | IAR-EWARM V8.22.3 | RTK0EF0090F40001SJ | RA4, 6 | |
| RA6M1, RA6M2, RA6M3 | IAR-EWARM V8.22.3 | RTK0EF0090F60001SJ | |||
*1: Compatible with RX111, RX113, and RX130
*2: Compatible with RX71M, RX72M, RX72N, and RX72T
*3: Compatible with RX651/RX65N, RX64M, RX66N, and RX66T
*4: Compatible with RX24U, RX24T, RX230/RX231, RX23T, RX23W, and RX23E-A
3) Functional Safety over EtherCAT (FSoE) Application Software Kit
The FSoE application software kit is a comprehensive application software that can easily realize the FSoE slave function. A dedicated configuration file makes it easy to set different safety data and parameters for each product. The software kit is also ETG.5100G®V1.2.0 compliant and IEC61508 SC3/SIL3 certified. Both RXv3 core and RXv2 core MCUs are compatible with this software kit.
| Device | Corresponding Compiler | Part Number | Note | Certificate |
|---|---|---|---|---|
| RXv2 Core, RXv3 Core | CC-RX V3.01.00 | RTK0EF0080F21001SJ |
Image
|
RXv2 Core, RXv3 Core |
| IAR-EWRX V4.14.2 | RTK0EF0081F21001SJ |
4) Reference Document
This is a technical document explaining the method to comply with the IEC61508 standard. The document consists of 20 sets of documents and excel data with easy explanation of the requirements to meet the IEC61508 standard, such as various diagnostics, control methods, required CPU performance, and various information useful for preparation.
- Documents and guidelines for the concept phase
- Safety Plan (SP)
- Verification and Validation plan (V & V)
- Safety Requirements Specification (SRS)
- Safety Concept (SC)
- Documents for diagnostic method
- Inter-MCU communication
- Software error diagnosis
- Power supply voltage diagnosis
- Other circuits diagnosis
- Documents for safety validation
- FMEA, coverage computation and more
| Product | Part Number |
|---|---|
| Reference document All documents set |
RTK0EF0005Z21001ZJ |
5) Reference Hardware Board
Evaluation boards for dual configuration specified by functional safety standards. Renesas safety software can also be evaluated.
This Industrial Automation Functional Safety Reference Board is built based on Renesas' experience in safety system specifications and its implementation, and comes from detailed design, safety analysis, and diagnostics on a dual structure microcontroller system. By using this reference board as a template, the customer will be able to reduce system development time.
| Product name | Contents | MCU |
|---|---|---|
| Industrial Automation Functional Safety Reference Board |
|
RX72N-RX72N Dual MCU |
| RX71M-RX651 Dual MCU | ||
| RX111-RX111 Dual MCU |
Board for evaluating function and performance, mounted with two RX 32-bit microcontrollers
Board with Two RX72N MCUs
Board with RX71M and RX651 MCUs
Board with Two RX111 MCUs
6) Safety Compilers with Certification Kit
For constructing software in the functional safety system, it is necessary to prove that the compiler generates valid code. Renesas offers an IEC 61508 certified C compiler for functional safety.
| Product Name | Contents |
|---|---|
| C/C++ Compiler Package for RX Family |
Image
|
| IEC 61508 Certification Kit for RX Compilers |
|
IAR embedded workbench certified by TÜV-SUD is available. For details please contact IAR.
IEC61508 Certification Kits for RX Compilers
| Product | Part Number |
|---|---|
| IEC61508 Certification Kit for RX Compilers V3.01.00 | RTCRX0000TC03ZNR |
| IEC61508 Certification Kit for RX Compilers V2.03.00 | RTCRX0000TC02ZNR |