This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

TCAN1164-Q1: FuSa documentation

Part Number: TCAN1164-Q1

Hi team,

My customer is designing with TCAN1164-Q1, and they would like to know if there is other FuSa documentation available, additional to the ti.com resources, to implement Safety Mechanisms up to ASIL-B.

Can you confirm if ti.com collateral is enough? More generally, how do you support FuSa inquiries ?

Best regards, Antoine

  • Hi team,

    I add 3 additional questions:

    • How the WD_ERR_CNT register is increased? (SPI failures, internal failures, etc.)
    • How is the WD_INPUT register written? 
    • When watchdog is triggered, does the TCAN1164 disable the LDO? 

    Best regards, Antoine

  • Hi Antoine,

    My customer is designing with TCAN1164-Q1, and they would like to know if there is other FuSa documentation available, additional to the ti.com resources, to implement Safety Mechanisms up to ASIL-B.

    Can you confirm if ti.com collateral is enough? More generally, how do you support FuSa inquiries ?

    The functional safety manual, functional safety report, and functional safety analysis report are located in the Technical Documentation section of the ti.com product folder for the devices. The full FMEDA Excel file can be obtained via MySecure for customers with an active NDA.

    Note that these parts were not generated for ASIL-B. This device is functional safety quality-managed, but it is not independently ASIL-B. This safety classification is a system-level determination for the designer. The full FMEDA assists in this determination.

    How the WD_ERR_CNT register is increased? (SPI failures, internal failures, etc.)

    This is the watchdog error counter. This increments when there is a watchdog failure. The "Watchdog" section of the device data sheet details the specifics of how the different watchdog mechanisms work, and what events cause an increase in the watchdog error counter.

    How is the WD_INPUT register written? 

    This is the watchdog input trigger. This is accomplished by writing FF16 (or 111111112) to the register. After triggering, the register automatically changes back to 0016 (or 000000002).

    When watchdog is triggered, does the TCAN1164 disable the LDO? 

    No, neither a watchdog trigger nor a watchdog failure disable the LDO. The LDO is active unless the device enters fail-safe due to overtemperature or VCC overvoltage.

    Best,

    Danny