SafeTpack for Infineon AURIX TC3xx: LBIST, Program Flow Monitoring, and ASIL D Self-Test

SafeTpack for Infineon AURIX TC3xx: LBIST, Program Flow Monitoring, and ASIL D Self-Test

Every safety-critical ECU built on Infineon AURIX must demonstrate that its hardware can detect its own faults. ISO 26262 Part 5 requires diagnostic coverage of the processing unit, volatile and non-volatile memory, communication interfaces, and clock systems. For ASIL D applications, powertrain controllers, steering systems, braking ECUs, the diagnostic coverage target is 99% for single-point faults and 90% for latent faults.

Achieving those coverage numbers requires self-test routines that exercise every major hardware subsystem. SafeTpack, developed by Hitex GmbH, is a production-ready library of diagnostic and self-test routines specifically designed for Infineon AURIX TC2xx and TC3xx microcontrollers, certified to ISO 26262 ASIL A through ASIL D.

What SafeTpack Provides

SafeTpack is not a single test. It is a structured library of safety mechanisms, each targeting a specific hardware fault model identified in the AURIX safety manual.

LBIST (Logic Built-In Self-Test) management. The AURIX TC3xx includes hardware LBIST capability, a built-in mechanism that applies pseudo-random test patterns to the CPU’s combinational logic and compares the signature against a known-good value. SafeTpack manages the LBIST sequence: initiating the test during startup, handling the signature comparison, and reporting the result to the safety manager. This is not trivial, LBIST execution requires specific sequencing, clock configuration, and error handling that must be correct on every power cycle.

Program flow monitoring. SafeTpack implements software-based program flow monitoring that detects execution path deviations caused by hardware faults, transient errors, stack corruption, or runaway code. Checkpoints are inserted at critical program locations. If the sequence of checkpoints deviates from the expected pattern, SafeTpack flags a program flow error to the safety manager.

SFR cyclic control. Safety-critical register values, interrupt priorities, clock dividers, memory protection settings, can be corrupted by transient faults (bit flips from electromagnetic interference or alpha particles). SafeTpack periodically reads these Special Function Registers and compares them against their expected values. A mismatch triggers an immediate safety reaction.

Startup tests. Before the application launches, SafeTpack verifies RAM integrity (march tests), flash integrity (CRC/ECC checks), clock accuracy (oscillator monitoring), and peripheral initialization. These tests establish that the hardware is in a known-good state before safety-critical code executes.

Runtime tests. During normal operation, SafeTpack executes background diagnostic tests on a configurable schedule. These tests run in the idle time of the application’s scheduling loop, consuming minimal CPU bandwidth while maintaining continuous fault detection.

Source Code Delivery

SafeTpack ships as source code, not a binary library. This is a deliberate design choice. Safety assessors require full visibility into the safety mechanisms running on an ASIL-rated ECU. With source code delivery, your team can inspect every line, trace every function call, and integrate the library into your project’s static analysis and code review workflow.

The delivery includes a demo workspace, complete API documentation, and an integration guide specific to the AURIX derivative you are targeting (TC375, TC397, TC399, etc.).

AUTOSAR and Non-AUTOSAR Deployment

SafeTpack operates at the MCAL (Microcontroller Abstraction Layer) level, which means it works with or without an AUTOSAR software architecture. For AUTOSAR projects, SafeTpack includes Elektrobit tresos plugins that integrate the self-test routines into the AUTOSAR BSW configuration. For bare-metal or RTOS-based projects, SafeTpack integrates directly with the application’s initialization and scheduling code.

This flexibility matters for Indian teams. Some automotive ECU projects are full AUTOSAR Classic deployments. Others, particularly in two-wheeler electronics, industrial controllers, and defence systems, use bare-metal or FreeRTOS architectures. SafeTpack serves both.

Optional Watchdog and Program Flow Packages

SafeTpack offers optional extension packages:

• Watchdog package: integrates with Infineon TLF35584 and TLF35585 safety power supplies, implementing window-mode watchdog supervision that detects both timing violations and value errors
• Program Flow Monitor: enhanced checkpoint-based monitoring with external validation support, providing a higher diagnostic coverage figure for the program sequence metric

SafeTpack vs In-House Self-Test Development

Developing equivalent self-test routines in-house is technically possible but carries significant schedule and certification risk. The AURIX TC3xx has over 40 testable hardware subsystems, each with its own fault model and diagnostic approach. Developing, verifying, and qualifying custom routines for all of them typically requires 6 to 12 months of dedicated safety engineering effort.

SafeTpack compresses this to weeks of integration and configuration, with a pre-certified safety case that assessors recognize.

For teams that need coverage beyond what SafeTpack provides, for example, custom peripheral configurations or application-specific plausibility checks, the recommended approach is a hybrid: SafeTpack for the standard hardware subsystems, supplemented by custom routines for application-specific elements.

Why Buy from GSAS

GSAS Micro Systems is India’s authorized Hitex partner for SafeTpack licensing and integration support. Our safety engineers in Bengaluru, Pune, Chennai, Hyderabad, Mumbai, and Delhi NCR help automotive ECU teams integrate SafeTpack into AURIX-based platforms, from initial FMEDA review through production deployment. Whether you are building a powertrain controller targeting ASIL D, a body electronics module at ASIL B, or an industrial safety PLC under IEC 61508, GSAS provides the licensing, the integration consulting, and the safety engineering expertise to get SafeTpack deployed correctly.

All licensing is available with INR invoicing and local procurement.

Request a SafeTpack evaluation →