Product Architecture for Management of Random Faults
www.ti.com
GPIO configuration registers are write-protected with special EALLOW instructions. Most of the GPIO
inputs have a programmable de-glitching filter to screen spurious noise or debouncing. This is especially
important for PWM output trip control signals, to avoid false tripping of PWM outputs.
The Control peripherals are complemented with three 32-bit CPU timers that can support time base
checks and as redundant channels.
Delfino MCUs use industry standard communication ports such as; CAN, SCI, SPI, McBSP and I2C.
These peripherals are often available in multiple instantiations that allow 1oo2 voting schemes and internal
loop back paths that allow periodic serial data integrity checks.
Section 5 presents many of the functional safety diagnostics schemes that can be implemented to add
safety in each of these MCU functions during run time and power up state.
Analog Subsystem: Delfino analog subsystem supports all the necessary analog sensing and feedback
channels. It has limited analog resources compared to the Piccolo family. Analog enhancement is primarily
on the ADC convertor module. On-chip ADC is pipeline architecture capable of 12.5 MSPS to integrate
sophisticated DSP algorithms in automotive radar and solar invertor applications. The device needs dual
rail external 3.3 V and 1.8 V power supplies. It supports a crystal oscillator, external clock in and a PLL
clock. PLL also supports a limp mode clock for clock recovery for safe shut down during input clock
failure. External clock voltage monitors and check-micro helps to meet necessary functional safety
compliance.
The oscillator clocks feed the on-chip watchdog module to provide time-out monitoring of time critical
loops. Device reset is offered through an external pin. This pin is a bidirectional pin allowing on-chip
watchdog reset to propagate to external devices. The reset input signal is always qualified with a
deglitching filter (about 200 ns) that helps to block reset line noise due to any electrical disturbance.
4.4.2 Type D: C28x CPU With Control and Analog Subsystem – Delfino F2823x Family
Figure 8. C2000 MCU Delfino F2823x With Safety Features in Software
Delfino: TMS320F2823x MCU is functionally identical to TMS320F2833x family except for the floating-
point unit. For more details on this family, see Table 2.
22
Safety Manual for C2000™ MCUs in IEC60730 Safety Applications SPRUHI3A–April 2013–Revised August 2013
Submit Documentation Feedback
Copyright © 2013, Texas Instruments Incorporated