A Safety Architecture for Centralized E/E Architectures

A safety architecture for domain-centralized E/E (Electric and/or Electronic) architectures is proposed to specifically address the scenario where the domain controller of a centralized vehicle domain fails catastrophically. The proposed architecture is based on decentralized control implementing a functional fallback strategy that is distributed over the remaining functioning ECUs in the affected domain. The safety architecture is also applicable to cross-domain E/E architectures.