This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

Reg: New controller selection for SIL3 safety system.

Other Parts Discussed in Thread: HALCOGEN

Hello,

My name is Rajesh. S from India working with L&T.

We are developing safety control system for which we have planned to go for two controller architecture instead of one dual core.I need help to select micro-controller as per the below specification.

Minimum requirement:

  • Meet SIL3 or MTTFd ( Medium level) = 10years ≤MTTFd≤30 years
  • Single core

The tentative parametric list is given below for both master and safety controller

MCU (P/N)

Min Required Parameters

Data bus width

32bit Cortex MX

Grade

 Industrial TUV recommended

Flash(B)

256Kb - 512Kb

RAM(B)

128Kb-256Kb

CAN

3

SPI

2

UART

1

Ethernet

NA

I/O

50

Max. Speed

>72MHz

RTC

1

PWM

4

ADC

12bit/ 16 Channel

JTAG/SWD

JTAG/SWD

Operating Temperature

-40°C to 105°C

Supply Voltage

 3.3V

Package

 Preferably LQFP

Cost (1000 Qty)

 $ 5.0 to $ 8.0

Life /Status

 

Supplier details

 

Debugger

 

Debugger Price

 

Development Tools

 

Validity

 

Development Tool Price

 

Suggested controller can be updated to automotive grade in future. 

Please do needful. For any more information feel free to contact.

Regards,

Rajesh Sharma

rajesh.sharma@lnttechservices.com 

 

 

  • Hi Rajesh,

    I will move the thread to Hercules™ Safety Microcontrollers forum for more appropriate support.
    Meanwhile you can check this page:
    www.ti.com/.../overview.page

    Regards,
    Yordan
  • Hello Rajesh,

    First, to clarify, the Hercules devcies are not dual core. They are lockstep core devices. The subtle distinction is made because in the Hercules architecture, there is only 1 core that is actively connected within the MCU system. The second core functions solely as a diagnostic which monitors the primary/active core in realtime, all the time.

    With that stated, I will highlight which of the points in your list we can meet with the finally proposed part number.

    Rajesh Sharma0 said:

    MCU (P/N)

    Min Required Parameters

    Data bus width

    32bit Cortex MX

    Hercules MCUs are Cortex-RX based, Recommended device is Cortex-R4F with included floating point unit

    Grade

     Industrial TUV recommended

    Hercules MCUs are all Certified by TUEV SUED to IEC61508 SIL3 and in case of TMS570 devices also to ISO26262 ASIL D

    Flash(B)

    256Kb - 512Kb

    768KB Flash with ECC

    RAM(B)

    128Kb-256Kb

    128KB SRAM with ECC

    CAN

    3

    Up to 3 DCAN modules with 64 Mailboxes each

    SPI

    2

    Up to 4 SPIs (3 buffered/1 standard)

    UART

    1

    2 UART (SCI) interfaces, 1 with LIN capability

    Ethernet

    NA

    I/O

    50

    Up to 64 GPIO pins/16 with GPIO Interrupts

    Max. Speed

    >72MHz

    Up to 160MHz System Clock

    RTC

    1

    Hercules devices have an RTI module for tick counts and RTOS counters, etc. RTC functionality would have to be provided by SW or by an external device.

    PWM

    4

    Hercules has both dedicated PWM pins (up to 7 ePWM pins) and our proprietary programmable timer NHET with up to 50 programmable channels in 2 module instantiation for redundancy

    ADC

    12bit/ 16 Channel

    Hercules has 2 - 12-bit ADC modules with up to 24 channels including 16 shared for redundant/parallel operation

    JTAG/SWD

    JTAG/SWD

    Operating Temperature

    -40°C to 105°C

    RMxx devices = -40 to 105C, TMS570 devices are -40 to 125C for automotive grade.

    Supply Voltage

     3.3V

    Package

     Preferably LQFP

    Cost (1000 Qty)

     $ 5.0 to $ 8.0

    TBD

    Life /Status

     

    Supplier details

     

    Debugger

     CCS

    Debugger Price

     Free with use of XDS100V2 emmulator

    Development Tools

    CCS, Halcogen HAL code generator, SafeTI Dignostic Library for safety diagnostic implementations, Comipler Qual Kit (CQK, compliance support packages for assessor required evidence. 

    Validity

     

    Development Tool Price

     TBD

    Suggested controller can be updated to automotive grade in future. 

    My recommendation would be for you to use an RM44Lx device specifically if you are considering only industrial, however, if you will need to do a 1 for one port of software to an automotive class applciation, it would make more since to start with the TMS570LS07x/09x class of devices as they are auto qualified and certified to both ISO26262 and IEC61508.

    In regard to pricing, I am not the write person to offer pricing other than what is listed in our standard TI Store pricing online for minimum order quantities. I will forward you post to our business management so that they can then have a TI sales representative reach out to you for detailed pricing discussions on devices, tools, etc.