C2000-SAFETI-DIAGNOSTICS-LIB: C2000™ microcontrollers forum

Eddie Hsieh

Part Number: C2000-SAFETI-DIAGNOSTICS-LIB

Dear Sir,

We are developing one SIL-3 device by using dual C2000 CPU (TMS320F2837x).

Each CPU has its own RAM and clock. The code is also stored in its storage. We had used the diagnostic library for self testing for individual CPU.

Due to use two CPUs, each CPU will execute its code from its storage. For the safety function, the consultant ask us to compare the results of the dual-CPU code execution.

We have seen one reference design that uses SPEAr 1300 CPU.

Schneider M580 provides the following SIL3 safety level functions

1. Independent double execution of the safety task code.

2. Comparison of the results of the double code execution.

3. Periodic self-tests.

4. Support for a 1oo2 (“one out of two”) architecture.

How do I compare the result between two CPUs? Is there reference sample? by software or hardware?

Best Regards,

Eddie

We have one reference design by using SPEAr 1300 CPU.

Schneider M580 provides the following SIL3 safety level functions

Independent double execution of the safety task code.

Comparison of the results of the double code execution.

Periodic self-tests.

Support for a 1oo2 (“one out of two”) architecture.

over 4 years ago

0 Krishna Allam over 4 years ago

TI__Expert 7985 points

Dear Eddie,

We are reviewing your request and in discussion with domain experts to help you better. In the mean time, I think you meant to include a picture or something towards the end of your message but it did not come through.

Would you kindly have a look and resend please.

Regards,

Krishna

0 Eddie Hsieh over 4 years ago in reply to Krishna Allam

Intellectual 290 points

At the previous post, I try paste the question form MS Word that includes text and picture. But, it fails.

I use the "Insert media" to attach the picture M580 Safety PAC. Do you see it?

My question is how can I cross check different CPU's calculation by diagnostic functions. Or, it should be done by hardware.

0 Eddie Hsieh over 4 years ago in reply to Eddie Hsieh

Intellectual 290 points

Dear Sir,

I review the C2000 safety mechanism. It has the "ePIE double SRAM hardware comparison" and "ERAD module".

Can I use it for comparing the results of dual CPU?

Is there sample code and hardware reference design?

Best Regards,

Edie

0 Krishna Allam over 4 years ago in reply to Eddie Hsieh

TI__Expert 7985 points

Hi Eddie,

Please take a look at the safety manual for the TMS320F2837x available here: http://www.ti.com/lit/ug/sprui78c/sprui78c.pdf

See Section 6.2.8 - Reciprocal Comparison by Software. This is very much in line with the kind of solution that may fit your need.

You can also study the ISO26262-5, Annex D, mentioned in the safety manual above (a snippet from the standard is provided below), which provides additional details about reciprocal comparison.

Please let us know if this helps!

Regards,

Krishna

0 Eddie Hsieh over 4 years ago in reply to Krishna Allam

Intellectual 290 points

Krishna,

The document is conceptual design guideline.

Is there any reference design for two CPUs 1002D or more detail technical document?

Eddie

0 Krishna Allam over 4 years ago in reply to Eddie Hsieh

TI__Expert 7985 points

Eddie,

Due to the long cycle time required for safety applications, certifications and the broad variety of application specific requirements, we do not have a reference design that will satisfactorily meet expectations. The safety manual provides the concepts that can be adapted to any application.

I hope that helps.

Regards,

Krishna

C2000™︎ microcontrollers

C2000 microcontrollers forum

C2000-SAFETI-DIAGNOSTICS-LIB: C2000™ microcontrollers forum