Safety Manual for TMS570LS31x and TMS570LS21x Hercules …

1 SafetyManualfor TMS570LS31xandTMS570LS21xHercules ARM -BasedSafetyCriticalMicrocontrollersUser 's GuideLiteratureNumber:SPNU511 DNovember2014 Managementof MCUA utomotiveLegacyIEC Managementof ArchitecturePartitionto SupportSafetyAnalysis(FMEA/FMEDA).. PerformingDependent/CommonCauseFailureAn alysisIncludingthe ImprovingIndependenceof Function/Co-Existenceof FunctionWhenUsingthe (ESM).. (FEE).. and Level3 (L2 and L3) MultiplexingModule(IOMM).. (VIM).. (RTI).. (DMA).. (N2 HET),HETT ransferUnit (HTU).. (MibADC).. (MibSPI).. (SPI)..412 Tableof ContentsSPNU511D November2014 RevisedDecember2015 SubmitDocumentationFeedbackCopyright 2014 2015, (I2C).

2 (SCI).. (LIN).. (DCAN).. ,FlexRayTransferUnit (FTU).. (GIO).. (EMIF).. , Trace,Calibration,and CentralProcessingUnit (CPU)Debugand (DMM).. (RTP).. (PMM).. (POM)..497 BriefDescriptionof Multiplexingin Multiplexingin Multiplexingin Multiplexingin Self Test(LBIST).. Self Test(LBIST) (MPU).. DMMPin RTPPin (DCC).. (includingPeripheralSlaveErrorTrapping)- L2 WarmReset(nRST).. November2014 RevisedDecember2015 ContentsSubmitDocumentationFeedbackCopyr ight 2014 2015, ControlBus nRSTand L2 (VMON).

3 PhysicalBus / SCI Bit / SCI / SCI PowerOscillatorClockDetector(LPOCLKDET). . (MPU)for Non-CPUBus (MPU)for CortexR4 November2014 RevisedDecember2015 SubmitDocumentationFeedbackCopyright 2014 2015, VIM (PCR) Slip ControlBus ECCS toragein MultiplePhysicalBanksper Multi-BitEnableKeysfor Primaryor ParityBit Causeof Last FunctionUsingI/O FunctionUsingI/O CheckingIn GIO FunctionUsingI/O Loopbackin Transceiver/ FunctionUsingI/O Loopbackin Transceiver/ PHY- FunctionUsingI/O Loopback- November2014 RevisedDecember2015 ContentsSubmitDocumentationFeedbackCopyr ight 2014 2015.

4 SRAMW rapperAddressDecodeDiagnosticand of CoreSightDebugLogicKey of DCCas of MPUsto BlockAccessto Summaryof the be November2014 RevisedDecember2015 SubmitDocumentationFeedbackCopyright 2014 2015, of StandardMCUA utomotiveQM HerculesMCUfor the of Tables1 Identificationof to Summaryof SafetyFeaturesand SafetyFeaturesand TI vs. Performedby be Consideredin November2014 RevisedDecember2015 List of FiguresSubmitDocumentationFeedbackCopyri ght 2014 2015,TexasInstrumentsIncorporatedUser's GuideSPNU511D November2014 RevisedDecember2015 SafetyManualfor TMS570LS31xand TMS570LS21xHercules ARM -BasedSafetyCriticalMicrocontrollers1 IntroductionYou,a systemand equipmentmanufactureror designer,are responsibleto ensurethat yoursystems(andany TI hardwareor softwarecomponentsincorporatedin yoursystems)

5 Meetall applicablesafety,regulatory,and applicationand safetyrelatedinformationinthis document(includingapplicationdescription s,suggestedsafetymeasures,suggestedTI products,andothermaterials)is providedfor understandand agreethat youruse of TI componentsin safetycriticalapplicationsis entirelyat yourrisk, and that you (as buyer)agreeto defend,indemnify,and hold harmlessTI fromany and all damages,claims,suits,or documentis a safetymanualfor the productfamilyutilizesa commonsafetyarchitecturethat is implementedin this safetymanualincludesiliconrevisions0, A, B, C, and D of the followingproducts:(Notethat the part numberslistedbeloware forrevisionD; otherrevisionsare devicerevisioncan be determinedby the symbolsmarkedon the top of the deviceas seenin Figure1 belowthis list).

6 TMS570 LSSafetyCriticalMicrocontrollers TMS570LS2124-PGE(OrderablePart #: TMS5702124 DPGEQQ1) TMS570LS2124-PGE(OrderablePart #: TMS5702124 DPGEQQ1R) TMS570LS2124-ZWT(OrderablePart #: TMS5702124 DZWTQQ1) TMS570LS2124-ZWT(OrderablePart #: TMS5702124 DZWTQQ1R) TMS570LS2125-PGE(OrderablePart #: TMS5702125 DPGEQQ1) TMS570LS2125-PGE(OrderablePart #: TMS5702125 DPGEQQ1R) TMS570LS2125-ZWT(OrderablePart #: TMS5702125 DZWTQQ1) TMS570LS2125-ZWT(OrderablePart #: TMS5702125 DZWTQQ1R) TMS570LS2134-PGE(OrderablePart #: TMS5702134 DPGEQQ1) TMS570LS2134-PGE(OrderablePart #: TMS5702134 DPGEQQ1R) TMS570LS2134-ZWT(OrderablePart #: TMS5702134 DZWTQQ1) TMS570LS2134-ZWT(OrderablePart #: TMS5702134 DZWTQQ1R) TMS570LS2135-PGE(OrderablePart #: TMS5702135 DPGEQQ1) TMS570LS2135-PGE(OrderablePart #: TMS5702135 DPGEQQ1R) TMS570LS2135-ZWT(OrderablePart #: TMS5702135 DZWTQQ1) TMS570LS2135-ZWT(OrderablePart #: TMS5702135 DZWTQQ1R) TMS570LS2135-ZWT(OrderablePart #: TMS5702135 DZWTSQ1) TMS570LS2135-ZWT(OrderablePart #: TMS5702135 DZWTSQ1R) TMS570LS2136-ZWT(OrderablePart #.)

7 TMS5702136 DZWTSQ1) TMS570LS2136-ZWT(OrderablePart #: TMS5702136 DZWTSQ1R) Hercules ,SafeTIare trademarksof ,Cortexare registeredtrademarksof a trademarkof AdobeSystemsIncorporatedin the UnitedStates, ,DOORSare registeredtrademarksof InternationalBusinessMachinesCorporation ,registeredin ,Excelare registeredtrademarksof MicrosoftCorporationin the UnitedStatesand/orothercountries,or othertrademarksare the propertyof TMS570LS31xand TMS570LS21xHercules ARM -SPNU511D November2014 RevisedDecember2015 BasedSafetyCriticalMicrocontrollersSubmi tDocumentationFeedbackCopyright 2014 2015.

8 TexasInstrumentsIncorporatedDevice Revision Code3137xZWTQQ1#######TMS570 LSDevice Revision Code3137xPGEQQ1####### TMS570LS3133-ZWT(OrderablePart #: TMS5703133 DZWTQQ1) TMS570LS3133-ZWT(OrderablePart #: TMS5703133 DZWTQQ1R) TMS570LS3134-PGE(OrderablePart #: TMS5703134 DPGEQQ1) TMS570LS3134-PGE(OrderablePart #: TMS5703134 DPGEQQ1R) TMS570LS3134-ZWT(OrderablePart #: TMS5703134 DZWTQQ1) TMS570LS3134-ZWT(OrderablePart #: TMS5703134 DZWTQQ1R) TMS570LS3135-PGE(OrderablePart #: TMS5703135 DPGEQQ1) TMS570LS3135-PGE(OrderablePart #: TMS5703135 DPGEQQ1R) TMS570LS3135-ZWT(OrderablePart #: TMS5703135 DZWTQQ1) TMS570LS3135-ZWT(OrderablePart #: TMS5703135 DZWTQQ1R) TMS570LS3136-ZWT(OrderablePart #: TMS5703136 DZWTQQ1) TMS570LS3136-ZWT(OrderablePart #: TMS5703136 DZWTQQ1R) TMS570LS3136-ZWT(OrderablePart #: TMS5703136 DZWTSQ1) TMS570LS3136-ZWT(OrderablePart #: TMS5703136 DZWTSQ1R) TMS570LS3137-PGE(OrderablePart #: TMS5703137 DPGEQQ1) TMS570LS3137-PGE(OrderablePart #: TMS5703137 DPGEQQ1R) TMS570LS3137-ZWT(OrderablePart #: TMS5703137 DZWTQQ1) TMS570LS3137-ZWT(OrderablePart #.)

9 TMS5703137 DZWTQQ1R)Figure1. DeviceRevisionCodeIdentificationThis SafetyManualprovidesinformationneededby systemdevelopersto assistin the creationof a safetycriticalsystemusinga documentcontains: An overviewof the supersetproductarchitecture An overviewof the developmentprocessutilizedto reducesystematicfailures An overviewof the safetyarchitecturefor managementof randomfailures The detailsof architecturepartitions,implementedsafety mechanismsThe followinginformationis documentedin theSafetyAnalysisReportSummaryfor TMS570LS31xandTMS570LS21xARM -BasedSafetyCriticalMicrocontrollers(SPN U521)and is not repeatedin thisdocument.

10 Summaryof failureratesof the MCUestimatedat the chip level Assumptionsof use utilizedin calculationof safetymetrics Summaryof targetedstandard(IEC61508,ISO 26262,and so forth)safetymetricsat the chip levelThe followinginformationis documentedin theDetailedSafetyAnalysisReportfor TMS570LS31xandTMS570LS21xARM -BasedSafetyCriticalMicrocontrollers(SPN U523)and is not repeatedin thisdocument: Faultmodelusedto estimatedevicefailureratessuitableto enablecalculationof customizedfailure9 SPNU511D November2014 RevisedDecember2015 SafetyManualfor TMS570LS31xand TMS570LS21xHercules ARM -BasedSafetyCriticalMicrocontrollersSubm itDocumentationFeedbackCopyright 2014 2015, QuantitativeFMEA(alsoknownas FMEDA,FailureModes,Effects,and DiagnosticsAnalysis)