SM CODE ADC_SM_0
Addressed fault model Refer to NVIC_SM_0
Dependency on Device configuration Refer to NVIC_SM_0
Initialization Refer to NVIC_SM_0
Periodicity Refer to NVIC_SM_0
Test for the diagnostic Refer to NVIC_SM_0
Multiple-fault protection Refer to NVIC_SM_0
Recommendations and known limitations Refer to NVIC_SM_0
Table 73. ADC_SM_1
SM CODE ADC_SM_1
Description Multiple acquisition by Application software
Ownership End user
Detailed implementation
This method implements a timing information redundancy by executing multiple acquisitions
on the same input signal. Multiple acquisition data are then combined by a filter algorithm to
determine the signal correct value.
Error reporting Depends on implementation
Fault detection time Depends on implementation
Addressed fault model Depends on implementation
Dependency on Device configuration None
Initialization Depends on implementation
Periodicity Continuous
Test for the diagnostic Not applicable
Multiple-fault protection CPU_SM_0: Periodic core self-test software
Recommendations and known limitations
It is highly probable that this recommendation is satisfied by design by End userApplication
software. Usage of multiple acquisitions followed by average operations is a common
technique in industrial applications exposed to electromagnetic interference on sensor lines.
Table 74. ADC_SM_2
SM CODE ADC_SM_2
Description Range check by Application software
Ownership End user
Detailed implementation
The guidelines for the implementation of the method are the following:
• The expected range of the data to be acquired are investigated and adequately
documented. Note that in a well-designed application it is improbable that during
normal operation an input signal has a very near or over the upper and lower rail limit
(saturation in signal acquisition).
• If Application software is aware of the state of the system, this information is to be used
in the range check implementation. For example, if the ADC value is the measurement
of a current through a power load, reading an abnormal value such as a current flowing
in opposite direction versus the load supply may indicate a fault in the acquisition
module.
• As the ADC module is shared between different possible external sources, the
combination of plausibility checks on the different signals acquired can help to cover
the whole input range in a very efficient way.
Error reporting Depends on implementation
Fault detection time Depends on implementation
UM2305
Hardware and software diagnostics
UM2305 - Rev 10
page 46/110