Fail-Operational Steering Systems: Dual-Channel Control and Lockstep Execution

Eliminating the mechanical steering shaft between the driver's steering wheel and the front road wheels offers revolutionary packaging flexibility and unlocks autonomous chauffeuring. However, it transfers 100% of life-safety responsibility to microcontrollers, inverter gates, and software algorithms. In this article, we analyze the functional architecture of an ASIL-D fail-operational steer-by-wire system.

Split-Lock Architecture: Runtime Safety Isolation

The automotive ECU pairs two ARM Cortex-R52 real-time cores operating in lockstep. Both cores execute the exact same instructions on clock cycle N. A hardware comparator circuit checks outputs cycle-by-cycle. If a cosmic ray flips a transistor in Core A, the hardware comparator flags the mismatch within one CPU cycle, suppressing actuator outputs before a corrupted pulse width modulation (PWM) signal reaches the gate driver.

Explore Domain Portfolio