SWITCHING BETWEEN SAFETY AND NON-SAFETY STATES USING A REMOTE CONTROLLER WHILE ENSURING FUNCTIONAL SAFETY REQUIREMENT SATISFACTION

A device operating in a nominal mode receives a request to switch to a functional safety mode, the request including a selection of a safety actuator and one or more of a plurality of secondary actuators. Responsive to receiving the request, the device transmits a copy of a safety message from the safety actuator to a first microcontroller to a second microcontroller. The device validates the safety message at the first microcontroller and the second microcontroller, the validation resulting in first validation values from the first microcontroller and second validation values from the second microcontroller. The device validates the first validation values against the second validation values, and, responsive to successfully validating the safety message at the first microcontroller and the second microcontroller, and successfully validating the first validation values against the second validation values, commands the device to transition from the nominal mode to the functional safety mode.