Partitioning systems operating in multiple domains

A method for implementing a partitioned system, the method comprising:

• operating a first system partition, the first system partition designed to operate in compliance with a predetermined safety integrity level, the predetermined safety integrity level including a level of functional safety that is free from unacceptable risk of physical injury or of damage to health of people either directly or indirectly, the first system partition including an electronic control system that controls operation of a target system;
• operating a second system partition within a user domain not designed to operate in compliance with the predetermined safety integrity in which information supplied by the second system partition is not sufficiently reliable to be used by the first system partition, the second system partition including hardware that is separate from hardware used within the first system partition;
• receiving the information from the second system partition by a programmable circuit connected between the first system partition and the second system partition, the programmable circuit monitoring and supervising use of the information in order to maintain compliance of the first system partition with the predetermined safety integrity level, wherein the programmable circuit includes dedicated hardware that is separate from hardware used within the second system partition;
• and,
• monitoring and supervising the second system partition by the programmable circuit in order to maintain compliance of the first system partition with the predetermined safety integrity level including the level of functional safety that is free from unacceptable risk of physical injury or of damage to health of people either directly or indirectly
• wherein the programmable circuit comprises configurable system integrated circuitry that includes manufacturing-time fabric that is configured during manufacturing of the configurable system integrated circuitry, compile-time fabric that is configured during compile time for the configurable system integrated circuitry and run-time fabric that is configured during run-time for the configurable system integrated circuitry;
• and
• wherein during compile time, hardware description language is taken through electronic design automation tools including synthesis, place and route to produce a first configuration file that is uploaded into the compile-time fabric and to additionally produce a second configuration file that is uploaded into the run-time fabric during run-time of the partitioned system without affecting operating integrity of the first system partition.

An interface comprising:

• a programmable circuit for connection between a first system and a second system;
• wherein the first system includes an electronic control system that controls operation of a target system, the first system designed to operate in compliance with a predetermined safety integrity level, the predetermined safety integrity level including a level of functional safety that is free from unacceptable risk of physical injury or of damage to health of people either directly or indirectly;
• wherein the second system operates in a user domain not designed to operate in compliance with the predetermined safety integrity in which information supplied by the second system is not sufficiently reliable to be used by the first system operating in compliance with the predetermined safety integrity level, the second system including hardware that is separate from hardware used within the first system;
• wherein the programmable circuit is configured to receive the information supplied by the second system;
• wherein the programmable circuit includes dedicated hardware that is separate from hardware used within the second system;
• wherein the programmable circuit comprises configurable system integrated circuitry that includes manufacturing-time fabric that is configured during manufacturing of the configurable system integrated circuitry, compile-time fabric that is configured during compile time for the configurable system integrated circuitry and run-time fabric that is configured during run-time for the configurable system integrated circuitry;
• and
• wherein during compile time, hardware description language is taken through electronic design automation tools including synthesis, place and route to produce a first configuration file that is uploaded into the compile-time fabric and to additionally produce a second configuration file that is uploaded into the run-time fabric during run-time of the interface.