• 1


  • Full advantage of automation, Electronic Components and Systems (ECS) vehicles through homologation and type approval.

    This requires safety, security, and reliability by design and in operation even if HW and SW of the four crucial ECA elements (perception, cognition, control, propulsion, connectivity).


  • 1

Within this complex chain of sensing-processing-controlling-actuating many types of ECS failures might occur and must be avoided by design or at least predicted in time during vehicle operation. These failures which occur with certain probabilities, reasons, and external influences include:

  • Failure of systems-on-chip, electronic components and hardware deficiencies,
  • Deficiencies in sensing road, traffic, and environmental conditions, e.g. sensors detect and respond to a non-existent event (false positive), or sensors do not detect and respond in the presence of obstacles (false negative),
  • Software failures such as deficiencies in control algorithms (complex and difficult situations),
  • Degraded system performance due to inoperable sensors/actuators or the vehicle is completely inoperable,
  • Faulty driver and vehicle interaction (mode confusion and false commanding).

ArchitectECA2030 envisions to cover both safety assurance by design and safety assurance in-operation.



Manage failure modes, uncertainties, and failure probabilities

  • propagating through the entire ECA vehicle stack consisting of onboard HW, onboard SW, off-board SW and data, development and validation methodologies, to support hazard identification, risk analysis, and sufficient risk mitigation.


  • 1

Develop a widely agreed homologation framework

  • comprised of harmonized methods, tools, and processes able to handle dynamic requirements (e.g. new scenarios, untested events, online traffic data etc. provided by the in-vehicle monitoring device, to ultimately design safe, secure, and reliable ECA vehicle with a well-defined, quantified, and acceptable residual risk across all ECS levels (from semiconductor to cyber-physical system level / HW and embedded SW). The residual risk relies on the failure risks of each single semiconductor, electronic component, subsystem, and system used to build ECA vehicles

  • 1

Propose, align and develop a concept

  • for an in-vehicle monitoring device, which is able to indicate and measure the health status and possible degradations of the functional electronics and electronic systems enabling predictive diagnosis, maintenance, and re-configuration of embedded SW.

  • 1

Bring together the representative stakeholders from ECS industry

  • standardization and certification bodies (Europe, US, Asia), governments, test field operators, and academia in tight interaction with the lighthouse initiative Mobility.E and its LIASE group to influence emerging standards, validation and homologation procedures for ECA vehicles and contributing to the emerging UL 4600 which is based on ISO 26262 and ISO/PAS 21448 (SOTIF).
  • 1











    The trade-off between safety and security cause the need to restructure the vehicle architecture significantly from SAE Level 3 on. ArchitectECA2030 addresses today’s challenge of closing the gap between continuous integration of methods, tools, and processes for automated driving functions and the need for the continuous approval of these safety-critical functions (ASIL).

  • 1


Project Coordinator


Dr Georg Stettinger

Infineon Technologies AG
81726 München

The Objectives of Architect ECA 2030 are represented in a chain and aim to strengthen Europe’s position in the fields of safe and reliable electronic components and embedded intelligence.
Objectives 1 to 3 represent the group of technical objectives for addressing the ECA vehicles challenges:

  • a continuous and robust design optimization
  • framework for safety validation
  • identification and management of  residual risks.

Objectives 4 and 5 highlight the contributions to economic and societal challenges

  • acceptance of ECS
  • zero emissions, zero crashes, zero congestions.

ArchitectECA2030 aims at developing a semiconductor-centric ecosystem of innovation in terms of reliable, robust, and fail-aware ECS for ECA vehicles beyond the state-of-the-art and viable technologies to increase the attractiveness of ECA vehicles by translating customer requirements and concerns into a value proposition. The methods, tools, technologies and applications are developed along the entire value chain in tandem.

The stringent implementation is driven by the spirit of a cross-skilled consortium of European partner across the ECS value chain.




ArchitectECA2030 has been accepted for funding within (ECSEL JU) in collaboration with the European Union’s H2020 Framework Programs under grant agreement No 877539.

The project will receive an ECSEL JU funding up to 4 M€ completed with national budgets from national funding authorities in Germany, Netherlands, Czech Republic, Austria and Norway.  

Project Facts

Short Name: ArchitectECA2030

Full Name: Trustable architectures with acceptable residual risk for the electric, connected and automated cars

Duration:  01/07/2020- 30/06/2023

Total Costs: ~ € 13,6 Mio.

Consortium: 20 partners from 8 countries

Coordinator: Infineon Technologies AG



Horizon 2020
Horizon 2020



National Funding

National Funding














Privacy Policy