Green Hills Platform for Industrial Safety

» Download Industrial Safety Datasheet (PDF)

   

» Platform overview
» Green Hills INTEGRITY RTOS
» Complete range of integrated middleware
» Development tools
» IEC 61508 frequently asked questions


INTEGRITY/velOSity
IEC 61508 SIL 3 Certificate
IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills Software

Click here for larger view
 
Platform overview  
IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills Software
   
The industrial control and process automation industry has strict requirements for control and automation device safety and security due to the possible consequences associated with catastrophic system failures. The software that controls plant processes and automation systems must have the utmost reliability and go through stringent analysis and testing before being deployed.

Developing and deploying software for these devices has traditionally been a time consuming and expensive process. The Green Hills Platform for Industrial Safety provides a complete solution for building the software components of safe, secure, and reliable systems, even those that require certification up to the demanding IEC/EN 61508 Safety Integrity Level 4 (SIL4). The Platform’s approach is equally applicable to products developed for the automotive, rail, and nuclear industries.
 
IEC/EN 61508 certification, IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills Software  
 
 

The Green Hills solution incorporates the following pre-integrated components that can help you increase productivity and drastically reduce product cost, risk, and time-to-market:

  • a safety-approved off-the-shelf (OTS) real-time operating system
  • integrated operating system middleware
  • highly integrated development and verification tool set for all phases of the software life cycle, including software changes
  • system/software consulting, development, and certification support services
Green Hills and its Platform for Industrial Safety partners are recognized leaders in supplying products and services related to embedded systems development and certification with a long history in the medical, avionics, defense, and industrial automation industries.

The Green Hills solution provides a complete cost-effective, end-to-end risk-managed product development solution covering every aspect of the product development life cycle from product and certification planning, to training, to architectural roadmap and full system development, to final certification.
 
IEC 61508 safety integrity levels
The INTEGRITY® royalty-free real-time operating system (RTOS) provides the foundation for the Platform. For applications requiring IEC/EN 61508 certifications, a TÜV certified IEC/EN 61508 SIL3 (Safety Integrity Level 3) RTOS kernel is available. IEC/EN 61508 is an international standard for the functional safety of electrical/electronic, programmable electronic systems (PES). This standard is well established in the industrial process control and automation industry, and is finding a foothold in the automotive, heavy machinery, mining and related industries where safety and reliability are paramount.

IEC/EN 61508 SIL levels are defined for system components in terms of probability of a dangerous failure and the corresponding required risk reduction. SIL3 is considered the highest level of risk reduction achievable using a single programmable electronic system. The standard allows for independent assessment of subsystems and components. It is possible to classify subsystems and components into the following categories:
  • Safety Critical: a single fault can result in a dangerous failure
  • Safety Relevant: a single fault in combination with a second fault can result in a dangerous failure
  • Interference Free: faults can not cause a dangerous failure

IEC 61508 safety integrity levels, IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills SoftwareSafety Critical components require the most scrutiny and tend to be the most expensive in terms of time, cost, and certification effort. Safety Relevant and Interference Free components require correspondingly less scrutiny and associated cost. For software components, the requirements of IEC/EN 61508 are met by employing a rigorous, systematic development process which emphasizes requirements traceability, criticality analysis, validation, and verification procedures.

The IEC 61508 safety standard is also the meta-standard for other published standards such as EN 50128 for railway (CENELEC), IEC 60601 for medical, IEC 61513 for nuclear, and IEC 61511 for the process industry, making the Green Hills Platform for Industrial Safety directly applicable to these industry sectors.

 
top  
Green Hills INTEGRITY RTOS  
INTEGRITY RTOS, IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills Software
 

INTEGRITY has been deployed in a wide range of safety-critical systems, including multiple DO-178B level A certified systems, FDA-approved Class II/III medical devices, and IEC 61508 SIL 3 certified systems. The INTEGRITY IEC 61508 SIL3 certified kernel has been developed according to a systematic development process based on ISO 9001/90003/12207 quality management processes and procedures as well as the IEC 61508 life cycle. This process emphasizes requirements traceability, design control, risk analysis, and validation. The resulting life cycle documentation and records, as well as source code, are optionally available to support the developer’s development and certification activities.

INTEGRITY architecture
INTEGRITY is the first RTOS to provide complete support for industrial automation and control applications containing software of multiple levels of safety criticality (Safety Critical, Safety Relevant, Interference Free) running concurrently on a single microprocessor. INTEGRITY allows multiple software applications to share a common hardware platform and allows developers to design applications such that an error or failure in one application cannot negatively impact the operation of other applications.

 
INTEGRITY achieves this secure application separation by providing the developer with capabilities for complete time, space, and resource partitioning between applications. With this architecture it is possible to divide application software into components at various criticality levels and be assured that a failure in a non-critical component— such as a non-critical display or communication stack—cannot cause a failure in a critical component— such as a process controller. The INTEGRITY Safety Manual provides guidelines on usage of INTEGRITY in safety system applications and outlines the robust set of Application Programming Interfaces (APIs) that are available for use.

Scalability
For devices designed with limited resources, the velOSity™ real-time operating system (the core kernel of INTEGRITY) is configured to run on microprocessors that do not support the virtual memory management unit (MMU), minimizing the memory footprint required while optimizing code execution speed. velOSity applications are 100% API compatible with INTEGRITY, providing a scalable, compatible software environment for the device manufacturer that is developing a range of devices and wants the utmost in code reuse, portability and target processor independence.
 
top  
Complete range of integrated middleware  
INTEGRITY is fully integrated with a complete range of feature-rich middleware components for interaction with other applications and systems in the industrial device environment.

Networking support
A complete suite of seamlessly integrated networking and communications products is provided for use with INTEGRITY. INTEGRITY supports a variety of wired, wireless, and industrial networking communications protocols as well as the latest secure communications protocols. These protocol stacks and security components can be placed in secure partitions with access given to only entitled applications.

USB
High-performance USB solutions provide both host and device (function) support and include numerous class drivers and example applications (source code provided for stacks and drivers).

File systems
INTEGRITY’s file system framework model, commonly referred to as a virtual file system (VFS) framework, is provided to make it easy to add and remove support for various file systems. The VFS server provides file system support for UNIX-like file systems, DOS/FAT 12/16/32, ISO 9660, Wear Leveling Flash File Systems, and others.

Embedded Databases
Support for several embedded in-memory databases allows users to store and access complex data content using structured store and query methods. The database solutions for INTEGRITY range from those with extremely small footprints, to distributed databases with real-time updates, to full blown SQL compliant databases.

Graphics and video support
INTEGRITY offers extensive support for embedded graphics development spanning the deeply embeddable to advanced OpenGL compatible 3D graphics environments.
 
 
 
top
 
Development tools  
The Green Hills Platform for Industrial Safety incorporates best-in-class tools to aid in all stages of the software development life cycle.

  MULTI IDE, IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills Software
 
 

Green Hills Software’s MULTI integrated development environment
Green Hills Software’s MULTI® integrated development environment (IDE) provides the industry’s most powerful and proven tools for developing embedded software with total reliability, maximum performance, and minimum code size. With MULTI’s sophisticated, intuitive capabilities, you can develop, debug, and optimize code more quickly, significantly reducing both development cost and time. MULTI supports more target processors, operating systems, and third-party tools than any other IDE—making it ideal for enterprise-wide use. By using a common set of development tools across projects, industrial device developers can more easily share code or move between projects without compromising productivity. With MULTI, you can develop code in C, C++, EC++, MISRA C and Ada95.

Telelogic’s Rhapsody SysML/UML modeling & code generation
Telelogic’s Rhapsody Model-driven Development Environment based on SysML (System Modeling Language) and UML 2.0 (Unified Modeling Language) helps software teams move from requirements through system architecture phase with advanced modeling tools. Rhapsody is capable of fully modeling system architectures across any discipline and allows the execution, implementation and testing of those models in an easy push button environment. Tightly integrated with MULTI and INTEGRITY, Rhapsody can generate code for INTEGRITY-based systems from the models created with UML. You can also debug Rhapsody models side-by-side with generated source code in MULTI.

 
 

Esterel Technologies’ SCADE software modeling & IEC 61508 certified code generation
Esterel Technologies’ SCADE Gateway for Rhapsody bridges SysML, UML and safety-critical software development, thus enabling a complete workflow from high-level system requirements down to IEC 61508 certified generated code. An IEC 61508 certified SCADE KCG C code generator can produce code for the INTEGRITY RTOS at any time in the development cycle. Using a pre-validated code generator eliminates the need for low level unit testing for this code. SCADE is also ideal for final development of the algorithmic safety critical functions of a system (e.g., a
control function). High level SysML/UML models can be imported from Rhapsody and refined in the SCADE graphical
modeling/simulation environment.

Vector Software’s VectorCAST software test & code coverage

Vector Software’s VectorCAST line of products reduce the burden placed on individual industrial device developers by automating and standardizing application component level testing—the "next generation" of intelligent test tools. VectorCAST is a world class integrated software test solution that automates the tasks associated with testing software components for C/C++, Embedded C++, and Ada83/Ada95 programs. Automation includes: complete test harness construction, test generation, test execution, code coverage analysis, regression testing and static measures for code complexity and basis path analysis. VectorCAST is integrated with both INTEGRITY and MULTI.

 
Platform services  

The Platform for Industrial Safety offers comprehensive services for the industrial control and automation industry. In addition to Telelogic, Esterel Technologies, and Vector Software, Green Hills Software has partnered with exida.com, a leader in the field of safety systems methodology, to provide another layer of safety, reliability, and automation expertise to our customers—bringing the end-to-end services you need to develop highly reliable embedded software for your device and meet a range of certification requirements.

Product development services offered include:

  • Analysis and reports—Functional safety management, safety life cycle, FMEA, FMEDA, HAZOP, cyber-security
  • Automation solutions for safety critical problems
  • Equipment certification assistance for IEC and CENELEC electrotechnical standards
  • Custom engineering for functional safety
  • Training: FMEA, FMEDA, HAZOP, IEC 61508; Certified Functional Safety Expert (CFSE) exam preparation

Green Hills Software, Custom Engineering services, IEC-61508 SIL 3 Certificate for Industrial Safety, TUV certified IEC/EN 61508 SIL3, IEC 60601, IEC 61513, IEC 61511, MILS, MLS, EAL 6+ at Green Hills SoftwareTools and RTOS support (INTEGRITY, velOSity, MULTI, Rhapsody, VectorCAST, SCADE)

  • Tools training
  • Quick start consulting—delivery, installation, configuration
  • Best practices assessment for use of tools
  • Product customization
  • Custom development—model development, device drivers and Board Support Packages (BSP)
  • Life cycle documentation/process support

 
Partners  
 



» IEC 61508 frequently asked questions

 
top