One of the Army requirements before fielding any system that triggers the detonation of munitions is a Failure Mode Analysis. My responsibility is to go through each component in the circuit, list each failure mode, and describe the likely consequences of such a failure. The goal of the analysis is to show that the likelihood of a failure that results in a premature or unpredicted detonation is not more than 1 part in a million.
The design whose Failure Modes I am analyzing contains a TI switching DC/DC converter: TPS62203. I need to know how the device will behave if either of the following occurs:
- Pin 3 open-circuits: The data sheet states only that the ENABLE pin must not be left unterminated. However, I need to understand what happens if the pin is unterminated.
- Pin 4 open-circuits: This is the feedback pin. I need to understand what happens if the pin is unconnected.
If the likely consequence of a failure is that the circuit will exhibit a behavior that is apparent to the user as abberant, then the user is trained to discontinue its use, and no detonation will occur. If, however, the circuit (including the firmware being executed by the ARM7 processor on-board) does not exhibit any abberant behavior, then I must document as such, and then calculate the probability of such a failure mode.
All help is appreciated.
Aaron Chesir