Part Number: TMS320F2800157
Tool/software:
I want to implement Hardware Redundancy for ADC, my signals can be sampled on ADCA and ADCC using the same trigger which is in my case are timers, these timers already have safety mechanisms implemented to detect if there is any failure in any of them.
I just have a question regarding the information mentioned in the safety manual as quoted below:
"While implementing hardware redundancy for ADC modules, additional care needs to be taken to ensure
common cause failures do not impact both instances in same way. Reference voltage sources configured
for redundant module instances should be independent. Additionally, for ADC SOC trigger sources used for
redundant ADC instance should be configured to different ePWM module instance"
So in my case:
- The target has only one VREF so both ADCA and ADCC has the same reference voltage so as stated in the Safety manual "Reference voltage sources configured
for redundant module instances should be independent." So this is inapplicable. - "ADC SOC trigger sources used for
redundant ADC instance should be configured to different ePWM module instance". I can't fullfill this also as my original signals are triggered hsing timers and I can't use epwm currently in our project for some specific reasons.
So my question is, does having a different reference voltage and a different trigger source mandatory for the safety mechanism? Or I can just sample the signal on ADCA and ADCC independently and crosscheck the values sampled from both to check for any failures and hence the safety mechanism will be fullfilled?
