www.ti.com
Next Steps in Your Safety Development
5.2.4 Clocks
The Piccolo devices are primarily synchronous logic devices and as such require clock signal for proper
operation. The clock management logic is elaborate to provide synchronous clock across subsystems and
provide failsafe clock when there is main clock failure. Piccolo devices have two internal oscillators, OSC1
and OSC2, and in some derivative an external oscillator and clock input to provide standalone clock for
the device. For the clock selection and failsafe switching, see the Piccolo MCU data sheet and user guide
mentioned in the Table 1.
Delfino devices do not support on-chip oscillators; they support the on-chip crystal oscillator and external
clock only. For details, see device-specific data sheets mentioned in Table 1.
5.2.5 CPU Interrupts for Illegal Instructions
28x CPU has an inherent feature to detect illegal instruction fetch and cause interrupt for safe recovery.
For specific usage of this instruction, see the TMS320C28x CPU and Instruction Set Reference Guide
(SPRU430). The user applications should include error recovery interrupt service routine to manage this
error in the end application.
5.2.6 Division by Zero Conditions
28x CPU instructions do not have a hardware feature to detect division by zero operation. User algorithm,
if it builds a division function using the 28x instructions, then the user code should add an explicit check
for division by zero conditions. The FPU unit in the subsystems with 28x CPU, has hardware flags to
detect division by zero error conditions when FPU instructions are used. User algorithms should include
error check using this flag after division operations. For more details, see the TMS320C28x Floating Point
Unit and Instruction Set Reference Guide (SPRUEO2).
5.2.7 Low-Power Mode Wake Up Checks
Piccolo and Delfino MCU devices support several modes of low power mode to save power. System
designer should consider appropriate method to wake up with input triggers signals and also add
redundant recovery mode, in case the device wake inputs fail to work.
6 Next Steps in Your Safety Development
TI's support for your safety development does not stop with the delivery of the safety manual. Customers
have a wide range of support options, such as:
• SafeTI solutions and product support on the web:
http://www.ti.com/ww/en/functional_safety/safeti/SafeTI-60730.html
• Access C2000 MCU page s any time on the web: http://www.ti.com/lsds/ti/microcontroller/32-
bit_c2000/overview.page
• The Piccolo Wiki page provides answers to many commonly asked questions:
http://www.ti.com/lsds/ti/microcontroller/32-bit_c2000/training.page
Table 4. C2000 MCU IEC60730/UL1998/IEC60335 product functional safety deliverables
IEC60730 Safety Documentation Contents Status Release
C2000 MCU Safety Manual – Overview of safety considerations in product development Preliminary Nov 2012
Preliminary and product architecture details for Piccolo and Delfino
MCUs
C2000 MCU Safety Manual - Final Safety module documentation and system level description Public May 2013
for customer implementation
V300Beta library and Source Software libraries for IEC60730 Class B Beta4 Dec 2012
For
Piccolo6x/3x/2x
V300 Software lib User Manual User Manual for Software libraries IEC60730 Class B Beta4 Dec 2012
For
Piccolo6x/3x/2x
27
SPRUHI3A–April 2013–Revised August 2013 Safety Manual for C2000™ MCUs in IEC60730 Safety Applications
Submit Documentation Feedback
Copyright © 2013, Texas Instruments Incorporated
To Next Page
Loading...
Need help?
General
