Electronic control unit

An electronic control unit for electronically controlling a system, which provides a safety function having a high-order automotive safety integrity level, and for providing a plurality of safety mechanisms having a plurality of low-order automotive safety integrity levels respectively, which are decomposed from the high-order automotive safety integrity level, the electronic control unit comprising:

• a plurality of central processing units including a first central processing unit and a second central processing unit;
• a memory that is commonly utilized by the plurality of central processing units;
• and
• an anti-interference device,
• wherein each of the first central processing unit and the second central processing unit executes a first monitoring function and a second monitoring function as a safety mechanism according to the low-order automotive safety integrity levels, respectively,
• wherein the first monitoring function provides to monitor whether a control function of the system is properly executed,
• wherein the second monitoring function provides to monitor whether the first monitoring function is properly executed,
• wherein the memory has a first area, which is utilized by the first central processing unit to execute each of the first monitoring function and the second monitoring function, and a second area, which is utilized by the second central processing unit to execute each of the first monitoring function and the second monitoring function,
• wherein the first area is different from the second area,
• wherein the anti-interference device executes at least one of a prevention of an interference and a record of a history of the interference, and
• wherein the interference includes a first interference, which is provided to the second area by the first central processing unit when the first central processing unit executes each of the first monitoring function and the second monitoring function, and a second interference, which is provided to the first area by the second central processing unit when the second central processing unit executes each of the first monitoring function and the second monitoring function.