A safety apparatus for providing a safe operation of a subsystem within a safety critical system, SCS is disclosed herein. The safety apparatus includes: a system communication interface for communication with components of the subsystem and other subsystems of the safety critical system; a backend communication interface for communication with a safety cloud backend; an integrated identifier memory storing a unique identifier of the subsystem; and an authorization control unit configured to perform a handshake authorization procedure with another target subsystem of the safety critical system via the system communication interface, and with the safety cloud backend via the backend communication interface to get authorization for the subsystem to execute a safety critical function on the target subsystem of the safety critical system based on the unique identifiers of both subsystems.