- 2x Intel® Atom™ E6xx, 512 MB DDR2 RAM
- 1x Intel® Atom™ E6xx, 1 GB DDR2 for I/O
- Independent supervisors for each block
- Fail-safe and fail-silent board architecture
- Clustering of two F75P to raise availability
- SIL 4 certification packages available
- -40 to +85°C qualified, full EN 50155 compliance
SIL certifiable x86 CPU
The F75P is a COTS safe computer with onboard functional safety that unites three CPUs on one 3U CompactPCI® PlusIO card. It makes Intel® Atom™ E6xx ("E600") performance with dual redundancy extremely compact, mainly targeting railway applications. Two independent Control Processors (CP) with independent DDR2 RAM and Flash and a supervision structure provide safety: with redundant software running on F75P, and, e.g., with the software instances on the two CPs comparing their output, the board becomes a fail-silent subsystem, i.e. it can shut down in case of a fatal fault.
Its I/O Processor (IOP) is built up like a classic CompactPCI® CPU board, including DDR2 RAM, front and rear I/O. The front connectors include VGA, two USB 2.0, and two 100-Mbit (Fast) Ethernet channels. At the rear, the board provides another four USB 2.0, two Fast Ethernet ports, one 3-Gbit SATA and one PCI Express® x1 link. These interfaces comply with the standardized pinout of CompactPCI® PlusIO (PICMG 2.30). An onboard mSATA slot makes for scalable, robust mass storage. The intelligent board management controller of the IOP logs events such as reset, overvoltage or under-voltage in a non-volatile FRAM.
The Control (CP) and I/O Processors (IOP) communicate via internal links provided by an FPGA. The CPs are designed to run a deterministic real-time operating system such as the QNX® Neutrino RTOS Safe Kernel or PikeOS. It is also possible to implement diversitary software on both kernels. All three CPUs support Linux and QNX®.
The F75P can replace multiprocessing systems with CPU redundancy and I/O by a small-footprint, low-power solution that is flexible for different types of application scenarios. It uses a single +5V supply voltage to allow operation with external power supplies that do not generate +3.3 V.
A clustering option is considered as well, to increase system availability: two F75P boards can operate next to each other and can provide hot or cold standby.
F75P-based systems are generally certifiable up to SIL 4. Since the card has no voter of its own, the customer has to add the software that implements and controls functional safety behaviour. The safety features such as the CP supervisors are designed to SIL 4 according to EN 50129. A railway certification package including the "safety case" document and a certificate from TÜV SÜD is available.
Its rugged set-up also makes the F75P truly rail-ready: with assets like conformal coating and an operating temperature of -40 to +85°C with qualified components, it is fully EN 50155 compliant. A 4-HP version is available with RJ45 Ethernet connectors and a reduced temperature range for system design, while another standard card with 8 HP width provides the necessary space for M12 front connectors and a larger heat sink for -40 to +85°C.