Hercules vs. C2000 Diagnostic Library

Eddie Hsieh

Intellectual 290 points

Sir,

Is there diagnostic function comparison table between Hercules and C2000?

For example, the C2000 doesn't have "Error Signaling Module".

Why does most of people recommend to use Hercules in Safety Device?

Can C2000 achieve the same safety level as Hercules?

Best Regards,

Eddie

over 5 years ago

0 QJ Wang over 5 years ago

TI__Guru**** 198766 points

Hello Eddie,

1. All the Hercules TMS570 devices are certified for IEC61505 SIL-3 and ISO-26262 ASIL-D by TUV. The Hercules RMx devices are certified for IEC61508 SIL3.

2. The SW development process of the SafeTI software for Hercules devices are certified for IEC 61508 SIL3 and ISO 26262 ASIL-D.

Please refer to ti.com for more details.

About C2000, it is so good for real time control. Several new C2000 devices support functional safety too (up to SIL2 and ASIL-B).

1663.JPG

0 Eddie Hsieh over 5 years ago in reply to QJ Wang

Intellectual 290 points

Hello QJ,

I saw the information from blog https://e2e.ti.com/blogs_/b/industrial_strength/archive/2018/05/24/diagnostic-software-helps-meet-safety-requirements-in-mcu-designs?tisearch=e2e-quicksearch&keymatch=blog%20safety.

An independent third-party assessment (from Tüv-Süd) that:

Ratifies the ability of the F28x7x device family to meet the random hardware capability of Automotive Safety Integrity Level (ASIL)-B, SIL-2.
Confirms the systematic capability (development process compliance) of the F28x7x device family to meet ASIL-D/SIL-3 according to ISO 26262 and IEC 61508, respectively.

Now, we are planning to design a SIL3 device by two F2837xS approach.

I just wonder what kind of diagnostic functions that C2000 doesn't support, but the Hercules does.

Best Regards,

Eddie

0 Eddie Hsieh over 5 years ago in reply to Eddie Hsieh

Intellectual 290 points

Dear Sir,

I saw the post

https://e2e.ti.com/support/microcontrollers/hercules/f/312/p/867742/3210440?tisearch=e2e-sitesearch&keymatch=C2000%2520SIL3#3210440 that says the main dual chips solution is "C2000+TMS570".

Why don't we choose two C2000 CPU? It is more economic.

Eddie

0 Sunil Oak over 5 years ago in reply to Eddie Hsieh

TI__Mastermind 49120 points

Eddie,

Both the ISO 26262 and IEC 61508 standards allow for techniques to assign safety requirements to multiple components in order to meet a higher-level safety integrity level. The system designer has to make the choice considering the safety integrity level targets, cost, complexity, etc. Refer to this whitepaper for an explanation of these ASIL-decomposition and SIL-synthesis rules and techniques.

http://www.ti.com/lit/wp/sway028/sway028.pdf

Regards, Sunil