This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

C2000-SAFETI-DIAGNOSTICS-LIB: C2000™ microcontrollers forum

Part Number: C2000-SAFETI-DIAGNOSTICS-LIB

Dear Sir,

We are developing one SIL-3 device by using dual C2000 CPU (TMS320F2837x).

Each CPU has its own RAM and clock. The code is also stored in its storage. We had used the diagnostic library for self testing for individual CPU. 

Due to use two CPUs, each CPU will execute its code from its storage. For the safety function, the consultant ask us to compare the results of the dual-CPU code execution.

We have seen one reference design that uses SPEAr 1300 CPU.

Schneider M580 provides the following SIL3 safety level functions

1. Independent double execution of the safety task code.

2. Comparison of the results of the double code execution.

3. Periodic self-tests.

4. Support for a 1oo2 (“one out of two”) architecture.

How do I compare the result between two CPUs? Is there reference sample? by software or hardware?

 

Best Regards,

Eddie

We have one reference design by using SPEAr 1300 CPU.
Schneider M580 provides the following SIL3 safety level functions
 Independent double execution of the safety task code.
 Comparison of the results of the double code execution.
 Periodic self-tests.
 Support for a 1oo2 (“one out of two”) architecture.

  • Dear Eddie, 

    We are reviewing your request and in discussion with domain experts to help you better.  In the mean time, I think you meant to include a picture or something towards the end of your message but it did not come through. 

    Would you kindly have a look and resend please. 

    Regards,

    Krishna

  • At the previous post, I try paste the question form MS Word that includes text and picture. But, it fails.

    I use the "Insert media" to attach the picture M580 Safety PAC. Do you see it?

    My question is how can I cross check different CPU's calculation by diagnostic functions. Or, it should be done by hardware.

  • Dear Sir,

    I review the C2000 safety mechanism. It has the "ePIE double SRAM hardware comparison" and "ERAD module".

    Can I use it for comparing the results of dual CPU?

    Is there sample code and hardware reference design?

    Best Regards,

    Edie

  • Hi Eddie, 

    Please take a look at the safety manual for the TMS320F2837x available here:  http://www.ti.com/lit/ug/sprui78c/sprui78c.pdf

    See Section 6.2.8 - Reciprocal Comparison by Software.  This is very much in line with the kind of solution that may fit your need.  

    You can also study the ISO26262-5, Annex D, mentioned in the safety manual above (a snippet from the standard is provided below), which provides additional details about reciprocal comparison.  

    Please let us know if this helps! 

    Regards,

    Krishna

  • Krishna,

    The document is conceptual design guideline.

    Is there any reference design for two CPUs 1002D or more detail technical document?

    Eddie

  • Eddie, 

    Due to the long cycle time required for safety applications, certifications and the broad variety of application specific requirements, we do not have a reference design that will satisfactorily meet expectations.  The safety manual provides the concepts that can be adapted to any application. 

    I hope that helps. 

    Regards,

    Krishna