SLLU312A July   2019  – May 2022 TCAN4550-Q1

 

  1.   TCAN4550-Q1 Functional Safety-Manual
  2.   Trademarks
  3. 1Introduction
  4. 2Product Functional Safety-Capability
  5. 3Product Overview
    1. 3.1 Block Diagram
    2. 3.2 Target Applications
      1. 3.2.1 Diagnostic Features
        1. 3.2.1.1 Mode Overview
        2. 3.2.1.2 Sleep Wake Error Timer (SWE)
        3. 3.2.1.3 Undervoltage
        4. 3.2.1.4 Thermal Shut Down
        5. 3.2.1.5 CAN Bus Communication
          1. 3.2.1.5.1 M_CAN
        6. 3.2.1.6 Processor Communication
          1. 3.2.1.6.1 SPI Integrity
            1. 3.2.1.6.1.1 SPI Scratchpad
            2. 3.2.1.6.1.2 SPIERR
            3. 3.2.1.6.1.3 M_CAN Forced Dominant and Recessive
            4. 3.2.1.6.1.4 SPI and FIFO
            5. 3.2.1.6.1.5 ECC for Memory
          2. 3.2.1.6.2 Timeout Watchdog
          3. 3.2.1.6.3 Floating Pins
          4. 3.2.1.6.4 RST Pin
          5. 3.2.1.6.5 Interrupt and Internal Fault Detection
  6. 4Development Process for Management of Systematic Faults
    1. 4.1 TI New-Product Development Process
  7. 5Revision History
Timeout Watchdog

The TCAN4550-Q1 contains a watchdog (WD) timeout function. When using the WD timeout function the WD runs continuously. The WD is default enabled and can be configured with four different timer values. WD is active in Normal and Standby modes and off in Sleep mode. Once the device enters Standby or Normal mode the timer does not start until the first input trigger event. This event can be either writing a one to register 16'h0800[18] or if selected, by changing the voltage level on the GPIO1 pin either high or low when configured for watchdog input. If the first trigger is not set the watchdog is disabled. The first trigger can happen in Standby mode or Normal mode. This is system implementation specific. While the timer is running, a SPI command writing a one to 16'h0800[18] resets the WD_TIMER timer, or if configured for pin control the GPIO1 behaves as the watchdog input bit.

The TCAN4550-Q1 has two ways of setting the trigger bit: via a SPI command and, if selected, through a GPI (GPIO1 configured as GPI). When a GPI pin is used any rising or falling edge resets the timer. A watchdog event can be conveyed back to the microprocessor in two methods: interrupt on nINT pin, or if selected, the GPO2 pin can be programmed to toggle upon a WD timeout. A timeout can initiate one of three actions by the TCAN4550-Q1: interrupt, INH toggle plus putting the device into Standby mode or toggle watchdog output reset pin if enabled. The input CLKIN or crystal values needs to be entered into reg 16'h0800[27] and is either 20 MHz or 40 MHz. See Table 3-7 for the register settings for the watchdog function. This can help mitigate potential faults shown as 3 and 4 and is safety mechanism SM-19.

Note:

  • If the device enters UVIO protected mode, the watchdog timer is held in reset. When the device returns to Standby mode, the timer resumes counting.
  • Once the command to enter Sleep mode takes place, the WD timer is turned off and does not trigger a watchdog event.
  • If the any of the watchdog registers needs to be changed, the watchdog must be disabled and the change made and then re-enabled.

Table 3-7 Watchdog Registers and Descriptions
AddressBIT(S)FieldTypeResetDESCRIPTION
16'h080029:28WD_TIMERR/W2'b00WD_TIMER: Watchdog timer

00 = 60 ms

01 = 600 ms

10 = 3 s

11 = 6 s

27CLK_REFR/W1'b1CLK_REF: CLKIN/Crystal frequency reference

0 = 20 MHz

1 = 40 MHz

23:22GPO2_CONFIGR/W2'b00GPO2_CONFIG: GPO2 configuration

00 = No action

01 = M_CAN_INT 0 interrupt (active low)

10 = Watchdog output

11 = Mirrors nINT pin

18WD_BIT_SETW1C1'b0WD_BIT_SET: write a 1 to reset timer: if times out; this bit sets and then the selected action from register 16'h0800[17:16] takes place.

Note: This is a self-clearing bit. Writing a 1 resets the timer and then the bit clears.

17:16WD_ACTIONR/W2'b00WD_ACTION: Selected action when WD_TIMER times out

00 = Set interrupt flag and if a pin is configure to reflect WD output as an interrupt the pin shows a low.

01 = Pulse INH pin and place device into Standby mode – high - low - high ≈300 ms

10 = Pulse watchdog output pin if enabled – high - low - high ≈300 ms

11 = Reserved

Note: Interrupt flag is always set for a WD timeout event.

15:14GPIO1_CONFIGRW2'b01GPIO1_CONFIG: GPIO1 Pin Function Select

00 = GPO

01 = Reserved

10 = GPI – Automatically becomes a WD input trigger pin.

11 = Reserved

3WD_ENRXU1'b1WD_EN - Watchdog Enable

0 = Disable

1 = Enabled