<?xml version="1.1" encoding="UTF-8"?>
<safety:MeasureCatalog xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:safety="http://www.ikv.de/medini/metamodels/SafetyModel/1.0" xmi:id="_Luv8oAX3Eeq4AMRV0u5rew" mediniIdentifier="_Luv8oAX3Eeq4AMRV0u5rew" name="P-11 Table 51 - PLD: Off-Chip Communication">
  <collectionType href="http://www.ikv.de/medini/metamodels/SafetyModel/1.0#//SafetyMechanism"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE8AX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE8AX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.1" name="One-bit hardware redundancy" maxDC="LOW" notes="-"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE8QX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE8QX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.2" name="Multi-bit hardware redundancy" maxDC="MEDIUM" notes="-"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE8gX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE8gX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.9" name="Read back of sent message" maxDC="MEDIUM" notes="-"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE8wX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE8wX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.3" name="Complete hardware redundancy" maxDC="HIGH" notes="Common mode failures  can reduce diagnostic coverage."/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE9AX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE9AX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.4" name="Inspection using test patterns" maxDC="HIGH" notes="-"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE9QX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE9QX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.5" name="Transmission redundancy" maxDC="MEDIUM" notes="Depends on type of redundancy. Effective only against transient faults."/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE9gX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE9gX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.6" name="Information redundancy" maxDC="MEDIUM" notes="Depends on type of redundancy."/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE9wX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE9wX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.7" name="Frame counter" maxDC="MEDIUM" notes="-"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE-AX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE-AX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.8" name="Timeout monitoring" maxDC="MEDIUM" notes="-"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_fmDE-QX8Eeq4AMRV0u5rew" mediniIdentifier="_fmDE-QX8Eeq4AMRV0u5rew" id="ISO26262-5: D.2.5.6; D.2.5.7; D.2.5.8" name="Combination of information redundancy, frame counter and timeout monitoring" maxDC="HIGH" notes="For systems without hardware redundancy or test patterns, high coverage can be claimed for the combination of these safety mechanisms."/>
</safety:MeasureCatalog>
