5 Description of Safety Elements

This section contains a brief description of the elements on the TMS320F28P65x MCU device family, organized based on the classification of parts of generic hardware of a system (8) as shown in Figure 5-1. For a full functional description of any of these modules, see the device-specific technical reference manual. The brief description of the hardware part is followed by the list of primary safety mechanisms that can be employed to provide diagnostic coverage to the hardware part. Some safety standards have the requirement to provide diagnostic coverage for the primary diagnostic measures (for example, Latent Fault Metric requirement from ISO26262). These measures are called as test of diagnostics. Primary diagnostics of type “Software” and “Hardware/Software” involves execution of the software on the processing units viz. CPU and CLA and also use many of the MCU parts like Interconnect, Memory (Flash, SRAM and ROM) and TMS320F28P65x MCU infrastructure components (Clock, Power, Reset and JTAG). To keep the integrity of the implemented primary diagnostics and the associated diagnostic coverage values, measures to protect execution of primary diagnostics on respective processing units needs to be implemented. Appropriate combination of test of diagnostics is recommended to be implemented for parts of the MCU contributing to the successful operation of the processing units. For diagnostics for these parts, see the respective sections in this safety manual. In this case, separate test of diagnostic measures exist for a primary diagnostic measure, they are mentioned along with the respective hardware part.

Figure 5-1 Generic Hardware of a System