Context:
We developed a wearable biosignal recorder, which uses TI's TPS61130 converter, with output voltages 3.6V (switching output) and 3.3V (LDO output, with 3.6V as input), and average load current about 40mA. The battery is a rechargeable Li-ion 3.7V. The TPS61130 is the only component that is able to steadily step up voltage on the board. Attached is the schematic's section of DC-DC converter as implemented in our board.
Question:
For an aerospatial application (in this case we will use a battery pack composed by a series of 2 primary Li cells 1.5V), we have been asked to make a risk analysis, in order to exclude the possibility that voltage, in "catastrophic" failure conditions too, can rise to values that can result in dangerous currents for the subject wearing the system. NASA indicates as voltage threshold 32V, beyond which a stronger safety analysis must be done.
From my initial analysis, I located a possible risk in failure of feedback divider resistances, that can result in increase of the output voltage and of the switching voltages on SWP/SWN. Which value can reach this increase, before damaging the IC? How much time can go on a voltage transient over nominal absolute ratings? Another risk could be the failure of the capacitor between inductances of SEPIC circuit: in my experience, an immediate overheating of the coil, subsequent to the increase of current, damages the insulations in few seconds and generates a short circuit between Vbat and GndPwr, so that there is no more voltage at the output. Can you see other possibly dangerous events? Do you have some test results or model simulations about these matters? The 32V threshold is far enough from the real values involved, or must I introduce additional safety solutions?
Thank you for your attention and help!
Best regards,
Francesco Rizzo