<?xml version="1.1" encoding="UTF-8"?>
<safety:MeasureCatalog xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:safety="http://www.ikv.de/medini/metamodels/SafetyModel/1.0" xmi:id="_f8kKYCP7Ee-zPpIFUA321A" mediniIdentifier="_f8kKYCP7Ee-zPpIFUA321A" name="System level safety mechanisms">
  <collectionType href="http://www.ikv.de/medini/metamodels/SafetyModel/1.0#//SafetyMechanism"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_jRW78CP7Ee-zPpIFUA321A" mediniIdentifier="_jRW78CP7Ee-zPpIFUA321A" id="ISO26262-5: D.2.1.1" name="Failure detection by on-line monitoring" monitoring="2" maxDC="LOW" notes="Depends on diagnostic coverage of failure detection" user_activated_="YES"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_j0hTYCP7Ee-zPpIFUA321A" mediniIdentifier="_j0hTYCP7Ee-zPpIFUA321A" id="ISO26262-5: D.2.5.6; D.2.5.7; D.2.5.8" name="Combination of information redundancy, frame counter and timeout monitoring" description="End2End Protection" monitoring="2" maxDC="HIGH" notes="For systems without hardware redundancy or test patterns, high coverage can be claimed for the combination of these safety mechanisms." user_activated_="YES"/>
  <measures xsi:type="safety:SafetyMechanism" xmi:id="_kICsUCP7Ee-zPpIFUA321A" mediniIdentifier="_kICsUCP7Ee-zPpIFUA321A" name="Memory Protection Unit" description="from supplier" monitoring="2" notes="Prevents memory corruption by other SW components" user_activated_="YES"/>
</safety:MeasureCatalog>
