VIENNA SOFTWARE SUITE

Configurable safety-designed software. Zero safety development delay. BMS software designed to ISO 26262 ASIL-C/D on a qualified MCU with selected AFEs.

SAFETY-DESIGNED BMS SOFTWARE

REQUEST EVALUATION KIT

Home › Software & Algorithms › Vienna Software Suite

THE CHALLENGE

BMS DEVELOPMENT IS
SLOW, EXPENSIVE, AND REPETITIVE

Building a BMS from scratch means a multi-chip design: separate analog front-end ICs, a dedicated safety MCU, discrete protection circuits, and CAN transceivers — all on one complex PCB.

Then comes the software. Safety firmware development and ISO 26262 qualification takes 12 to 24 months per hardware variant. It requires deep functional safety expertise — engineers who understand both BMS physics and ASIL process rigor. That certification burden repeats for every new product or hardware revision.

The SDV era compounds this. Zone-based architectures need local module intelligence communicating over CAN/CANFD with zonal controllers. They need distributed processing at the edge, not monolithic central BMS units. And they need a platform that matches SDV principles: define behavior in software, update parameters without reflashing.

Classic BMS Architecture

BATTERY CELLS

MULTIPLE AFE ICS

Separate analog front-ends

SAFETY MCU + DISCRETE COMPONENTS

Custom firmware, separate safety circuits

APPLICATION MCU

Algorithms, fleet comms, UI

12 - 24 MONTH

CERT CYCLE PER VARIANT

HIGH COST

REPEATED SAFETY DEVELOPMENT

SCARCE TALENT

FEW ENGINEERS KNOW BMS + SAFETY

THE SOLUTION

VIENNA SOFTWARE SUITE

VIENNA consolidates core BMS safety functions into a safety-designed subsystem: an ARM Cortex-M0+ MCU running VIENNA software, paired with selected cell monitoring ICs. Together, these form the safety-engineered BMS foundation.

BATTERY CELLS

DAISY CHAIN

VIENNA MCU + PRESECTED AFES

All safety-critical sensing, protection, and diagnostics

CAN / CANFD (UP TO 5 MBITS)

YOUR APPLICATION MCU

Algorithms, analytics, fleet comms — no safety cert needed

SAFETY-DESIGNED SUBSYSTEM

VIENNA is developed to ISO 26262 as a Safety Element out of Context (SEooC). Integrate without re-qualifying the safety software.

CONFIGURABLE SAFETY SOFTWARE

Configure cell chemistry, pack topology, voltage range, application mode, and feature set. Safety design intent stays intact across all variants.

AUTONOMOUS SAFETY

White minimalistic Icon of a security lock, symbolizing the autonomous safety features of the Vienna software suite

The VIENNA subsystem operates independently. It protects the battery even if the application MCU fails, restarts, or loses communication.

ARCHITECTURE

HOW IT WORKS

  • Advanced SoC/SoH/RUL algorithms

  • Fleet and cloud communication

  • Performance optimization and application-specific logic

  • User interface and system coordination

THE VIENNA SUBSYSTEM

YOUR APPLICATION MCU

  • Sensing
    Cell voltage via CMBs, pack voltage, current via dual shunt with plausibility checks, temperature monitoring

  • Safety Logic
    Overcurrent detection, thermal event detection, cell defect detection, crash detection, HVIL monitoring, isolation resistance monitoring

  • Control
    Contactor driver, pyro fuse driver, cell balancing, low side switches

  • Communication‍ ‍
    CAN/CANFD reporting to host MCU, daisy chain to cell monitoring ICs

  • Diagnostics
    Battery usage histograms, SOC Lite, sleep/wake management

ASIL DECOMPOSITION

keeps the safety boundary on the VIENNA subsystem. Your application MCU receives pre-validated, safety-qualified data — no functional safety qualification needed for your application code.

ADOPTION

TWO WAYS TO INTEGRATE

DIRECTION 1

SMART EDGE ARCHITECTURE

Distributed BMS with a VIENNA module on every battery pack, connected via CAN/CANFD to a zonal controller. Each module handles safety-critical sensing and protection locally. SDV-native: define behavior in software, update parameters without reflashing.

DIRECTION 2

SAFETY CONTROLLER IN TRADITIONAL BMS

Keep your existing BMS architecture and add VIENNA as a dedicated safety controller alongside your application MCU. The fastest path for teams that want safety-designed foundation without changing their system topology.

VALUE

KEY BENEFITS

  • VIENNA is developed to ASIL-C/D as a SEooC. Core BMS monitoring and protection functions ship safety-qualified. Your safety case starts with a proven foundation, not a blank page.

  • Replace a multi-chip safety design with an integrated subsystem. Fewer components mean smaller boards, simpler routing, lower BOM cost, and fewer failure modes.

  • CAN/CANFD communication with zonal controllers at up to 5 Mbps. Fits naturally into zone-based E/E architectures where intelligence lives at the edge.

  • Runs on a single ARM Cortex-M0+ MCU at 24 or 48 MHz. No additional safety MCU, no RTOS/AUTOSAR license, less discrete safety components.

  • Build the features that win customers — analytics, fleet intelligence, predictive maintenance — while VIENNA handles the safety foundation. Stop spending senior engineering time on qualification paperwork.

MARKETS

APPLICATIONS

ELECTRIC VEHICLES

From 12V auxiliary battery monitoring to high-voltage traction packs, one platform scales across the full voltage range.

BESS

UL 1998 functional safety support for stationary storage applications at utility and commercial scale.

INDUSTRIAL

Material handling, marine, and off-highway applications where safety qualification accelerates market entry.

START UPS

Production-ready safety software without building a functional safety team. Ship your first safety-qualified product faster.

START BUILDING ON VIENNA

Get in touch with our team for evaluation hardware, a technical brief, an integration guide, and design-in consultation.