TMS320F280049: Safety Manual and ISO26262

Dear Ashish,

Then... which is the maximum attainable: C or D?

Which functions do we need or do you recommend to reach an ASIL B level?

Thank you.

Hi Ivan,

For achieving desired safety integrity level such as ASIL-B, we need to identify parts and sub-parts on the MCU to be Safety Related(SR).

For each of the SR part on the MCU, the safety manual will guide safety mechanisms and combination of these will be required to meet the target.

e.g. for C28x CPU - the dominant safety mechanism is "Reciprocal Comparison by Software" and combination of other safety mechanisms such as CPU317 are required based on its implementation. THis exercise can be repeated for other parts on MCU such as ADC, PWM and others as required.

Regards,

--Ashish

Dear Ashish,

In our case some of the peripherals used are clrealy safety related and we have identified the main safety functions to implement such has redundancy, register checking, protected variables by the ECC and so.

The doubts come from the "transversal" elements, the ones that can cause common failures such as the clocks, CPU failures, undesired interrupts, frequency drift, missing clock, watchdogs test, reciprocal comparison, monitoring of interrupts and events, self-test of safety functions (checking of logic of ECC/Parity checks,...) and so.

For every peripheral/component there is a list of tests, but there are no guidelines about which tests to perform to reach an ASIL B level. There are tests that seems clearly above ASIL B. I would say for example that the ones related to "testing the testers" are ASIL > B. But this is just our criteria.

For these sources of error which are the recommended functions for an ASIL B level? Could you provide some guidelines to follow the ASIL B with these source of failures?

Thank you.