Architecture Verification of the Axivion Suite demonstrates Freedom from Interference in a Mixed ASIL Approach according to ISO 26262


About Schaeffler Group

As a leading global supplier to the automotive and industrial sectors, the Schaeffler Group has been driving forward ground-breaking inventions and developments in the fields of motion and mobility for over 75 years. With innovative technologies, products, and services for electric mobility, CO₂-efficient drives, Industry 4.0, digitalisation, and renewable energies, the company is a reliable partner for making motion and mobility more efficient, intelligent, and sustainable. The technology company manufactures high-precision components and systems for powertrain and chassis applications as well as rolling and plain bearing solutions for a large number of industrial applications. The Schaeffler Group generated sales of approximately EUR 13.9 billion in 2021. With around 83,000 employees, Schaeffler is one of the world’s largest family companies. With more than 1,800 patent applications in 2021, Schaeffler is Germany’s third most innovative company according to the DPMA (German Patent and Trademark Office).

Schaeffler is a leading global automotive and industrial supplier for the development of future mobility. At its Buehl location, the Automotive Technologies division carries out truly pioneering work in the field of electric drives and alternative mobility concepts, such as the development of hybrid gearboxes and electrical axle systems and components, including electric motors, inverters and the associated software. The level of complexity and the continuous extension of automotive embedded software presents the developers in the E-Mobility division with daily challenges and the Axivion Suite plays a major role in their resolution.

Why Axivion?

Axivion Static Code Analysis is certified for use in the development of safety systems according to ISO 26262, IEC 61508, IEC 62304 as well as EN 50128 and EN 50657

Axivion Architecture Verification reliably detects violations of the explicitly defined safety architecture in the code

Axivion helps companies provide evidence regarding Freedom from Interference

Immediate feedback enables team members to better understand the interrelationships of the software's safety architecture

Axivion provides various types of automated reports

Seamless integration into existing environemts reduces the workload for developers right from the start 

The complexity of automotive embedded software is further increased by software components with different ASIL requirements. With the ISO 26262 certified Axivion Suite, Schaeffler Automotive Buehl maintains the high quality of its mixed ASIL systems. Automated architecture verification reduces manual testing work and therefore creates free capacities for new developments in electromobility.

Schaeffler Automotive Buehl GmbH & Co. KG

The Challenge

Schaeffler offers its customers a complete range of products, from components and subsystems to highly integrated complete systems or from individual electric motors to complete 4in1 axle systems for hybrid or electric vehicles. The company has a high level of system know-how at the vehicle level and places a high priority on quality, reliability and safety. This involves special challenges for the development of functions and software by the Schaeffler E-Mobility division in Buehl, which focuses on automotive embedded software development for e-mobility. The development team pursues a mixed ASIL approach to ensure that safety-relevant applications and base software are specifically developed according to the stringent requirements of ISO 26262.

The team reduces the amount of development work for individual function groups by developing the groups according to their particular ASIL level. By means of suitable protective measures, the groups are separated both from each other and from unqualified functions, so that no interference occurs between the groups. This procedure creates a secure development basis for safety-relevant control devices. To meet the requirements of ISO 26262, the development team must provide evidence regarding freedom from interference for software components with different automotive safety integrity levels (ASIL). This requires a consistent software architecture. In the past the team sometimes needed to perform an enormous amount of manual work in order to review the architecture in relation to the interfaces and undesirable dependencies between software with different automotive safety integrity levels.

The Solution

This is where the Axivion Suite came in. The Schaeffler Automotive division E-Mobility had already used this for many years for static code analysis, checking coding rules and MISRA. The Static Code Analysis (SCA) package of the Axivion tool suite is certified up to ASIL D for ISO 26262, SIL 4 for IEC 61508, Class C for IEC 62304 as well as SIL 4 for EN 50128 and EN 50657. Therefore the developers were familiar with the proven suitability of the Axivion Suite for developing safety-relevant automotive software, as well as the reliability of its checks and user-friendliness in daily use.

The architecture verification by the Axivion Suite replaces manual checking with a tool-assisted automated analysis. The Axivion Suite efficiently checks the safety architecture, i.e. the classification of software components according to their ASIL level or their categorisation as QM components. Violations of the explicitly defined safety architecture in the code are reliably detected and reported as forbidden dependencies by the automatic architecture check.The developers receive the messages directly in their development environment and where they can process them further. Reports are also provided automatically.

The Success

For the development team at Schaeffler Automotive Technologies, use of the Axivion Suite means a lightening of the workload on several levels. Automation of the architecture verification allows to avoid manual work. Based on the results of the architecture check, the developers can modify the code directly to remove forbidden dependencies. At the same time, immediate feedback enables team members to better understand the interrelationships of the safety
architecture and how the various software components with their different ASIL requirements need to be handled. The proven suitability of the Axivion Suite for checking compliance with the relevant automotive safety standards, including for mixed ASIL systems, gives the developers the confidence which they need.

All in all, use of the Axivion Suite by Schaeffler reduces the effort for quality assurance of embedded software for electromobility. The stringent functional safety requirements can be checked at an early stage, continually checked during the development process and demonstrated for safety certification. This enables the company to provide new functions for the ever-growing market for electric vehicles much faster.

Need more information?


Request a meeting with one of our experts to find out how Axivion can help you ensure the high quality of your software code.


Contact us