Hercules Introduction

Make the world safer
with Hercules safety MCU platform
Collins Jiang
Hercules Safety MCU
BDM
Collins-jiang@ti.com
Hercules MCUs make the world a safer place

TM
Electronics are proliferating in safety-critical applications

DO-254
EN 50128
DO-178B
(railway)
(aerospace)
IEC
60601
IEC
50156
(medical
equipment)
TM
Hercules
(furnaces)
MCU
IEC 60880
IEC
61511
(nuclear
power
stations)
(process
industry)
IEC 62061
ISO 13849
(machinery)
Hercules MCUs
provide
developers of
safety-critical
applications:
ISO 26262
IEC 61508
(automotive)
(safety)
Protection against random and systematic failures
Headroom for application differentiation

Simplified development and system certification
TM
TI Hercules MCU Platform

ARM Cortex Based Microcontrollers
RM
Industrial and Medical

Safety MCUs
TMS570
Hercules
Safety MCU
Platform
Transportation and
Safety MCUs
TMS470M
Value Line Transportation

& Safety MCUs
Industrial Applications
Medical Applications
-40 to 105C Operation
ENET, USB, CAN & UART
Developed to Safety Standards
IEC 61508 SIL-3
Cortex-R over 350 DMIPs
Transportation Applications
Automotive Q100 Qualification
FlexRay, ENET, CAN, LIN/UART
Developed to Safety Standards
ISO 26262 ASIL-D
IEC 61508 SIL-3
Cortex-R over 280 DMIPs
Transportation Applications
Automotive Q100 Qualification
CAN, LIN/UART Connectivity
Supports Safety for
IEC 61508 Systems
Cortex-M to 100 DMIPS
Hercules Safety MCU: End Equipment

Aerospace & Railway
Industrial
Communications Gateway
Flight Control
Industrial Motor
Control
Avionics / Autopilot
Manufacturing /
Robotics
Wind Power
Anti-Skid Control
Elevator
Escalator
Motor Control
Automotive
Industrial
Automation / PLC
Airbag
Braking / Stability Control
Sensor & Communications

Gateway
Solar Power
Hybrid & Electric Vehicles
Radar / Collision Avoidance

(ADAS)
Infusion Pumps
Oxygen
Concentrators
Active Suspension
Chassis / Domain Control

Electric Power Steering
Anesthesia
Respirators
Medical
4
Safety MCU ARM Cortex Roadmap

Industrial,
Medical, Energy
* Safety MCU = HerculesTM MCU
RM46x
2*R4F LS
1.25MB, 192kB
220MHz
RM48L9x
2*R4F LS
3MB, 256kB
220MHz
Production 4Q 2013
ETHERNET
RM48L5x
2MB, 192kB
Automotive & Transportation
ETHERNET
2MB, 192kB
RM42x
2*R4LS
384KB, 32KB
100 MHz
2*R4F LS
1.25MB, 192kB
180MHz
2*R4F LS
3MB, 256kB
180MHz
TMS570LS21x
QEP / PWM
QEP
TMS570LS12x
TMS570LS31x
Production
ETHERNET
Industrial Drives
Performance Safety PLCs
Memory
Solar / Wind Energy
Peripherals
Elevators / Escalators
Remote I/O Modules
Infusion Pumps
Railway Signaling
Avionics Systems
ETHERNET
Off-road Vehicle
Production 4Q 2013
Stability Control
TMS570LS11x
1MB, 128kB
Power Steering
QEP / PWM
Vehicle Electrification
Safety Relays
ABS
Fuel Pumps
Passive Safety
CAN Communication
TMS570LS04x
2*R4 LS
384KB, 32KB
80MHz
Production 4Q 2013
QEP
TMS570LS03x
256KB, 32kB
Sampling
Development
Lockstep
CPUs
61508
SIL3
26262
ASIL-D
TI Confidential Selective Disclosure

5
Hercules TMS570 Roadmap

2012
High
TMS570LS31x 180MHz R4F

3MB Flash, 256kB RAM
SafeTI ISO & IEC
2013
!

SafeTI ISO & IEC
Features:
Lock Step
Architecture
ISO ISO 26262
Ethernet
QEP/ePWM
CAN CAN
CAN
2014+
FlexRay
IEC IEC 61508
SafeTI
1.25MB Flash, 192kB RAM

SafeTI ISO & IEC
Mid
Next Gen High

SafeTI ISO & IEC
Next Gen Mid

SafeTI ISO & IEC

SafeTI ISO & IEC
CAN
Production 4Q13
Low
TMS570LS04x 80MHz R4
Production
384kB Flash, 32kB RAM

SafeTI ISO & IEC
Sampling
TMS570LS03x 80MHz R4
Development

SafeTI ISO & IEC
Next Gen Low

SafeTI ISO & IEC
!
CAN
Production 4Q13
Hercules RM Cortex-R Roadmap

2012
High
RM48L9x 220MHz R4F

SafeTI ISO & IEC
Features:
Lock Step
Architecture
RM48L5x 200MHz R4F

SafeTI ISO & IEC
2014
2013
CAN CAN
CAN
ISO ISO 13849
Ethernet
QEP/PWM
USB
IEC IEC 61508
SafeTI
RM46L8x 220MHz R4F

1.25MB Flash, 192kB RAM
SafeTI ISO & IEC
Mid
Next Gen High

SafeTI ISO & IEC
Next Gen Mid

SafeTI ISO & IEC
RM46L4x 200MHz R4F

SafeTI ISO & IEC
CAN
Low
Production 4Q 2013
Production
Sampling
RM42x 100MHz R4

SafeTI ISO & IEC
CAN
Next Gen Low

SafeTI ISO & IEC
Production 4Q 2013
Development
Hercules Cortex-R4F MCU safety features
Logical / physical
design optimized to
reduce probability of
common cause
failure
Dual Core Lockstep Cycle by Cycle CPU
Fault Detection
Safe Island Hardware diagnostics (RED)
ECC for flash / RAM /

interconnect evaluated
inside the Cortex R4F
CPU Self Test

Controller requires
little S/W overhead
Lockstep
CPUs
ARM
CortexR4F
Memory
Flash
w/ ECC
RAM
w/ ECC
Non Safety Critical Functions (BLACK)

Power, Clock, & Safety
OSC PLL
PBIST/LBIST
POR
ESM
CRC
RTI/DWWD
Flash
EEPROM w/ ECC
Calibration
CPU Fault Detection
Blended HW diagnostics (BLUE)
Memory Interface
JTAG Debug
Embedded Trace
External Memory
Parity or CRC in
Serial and Network
Communication
Peripherals
On-Chip Clock and

Voltage Monitoring
DMA
Enhanced System Bus and Vectored Interrupt Module
Parity on all
Peripheral, DMA and
Interrupt controller
RAMS
Memory BIST on all

RAMS allows fast
memory test at
startup
Serial
Interfaces
Network
Interfaces
Dual
ADC
Cores
Available
Dual
High-end
Timers
Available
GIO
Error Signaling
Module w/ External
Error Pin
IO Loop Back, ADC
Self Test,
Dual ADC Cores with
shared channels
1oo1D Dual Core Safety Concept

Unique design to reduce common
cause failures (IC)
Second CPU mirrored and
rotated
Minimum distance 100m
between CPUs
Cycle delayed lockstep
Guard ring per CPU
Duplicated clock tree per CPU
Compare
Error
Output + Control
CCM
Cycle Delay
Self
Test
ARM
Cortex-R4F
> 100um
CPU Compare Module (CCM)

Self-test capability
Self-test error injection/error
forcing
Output error injection
Cycle Delay
Input + Control
10
Safety in hardware maximizes performance

& speeds development
100
CPU Usage (%)
Safety
software
Significantly reduce safety

software overhead with
integrated safety features
Up to 30%
Headroom
50
App.
software
App.
software
Competitive
MCU
Hercules
MCU
Improve time to market

Spend less time developing complex
safety software
Spend less time proving your CPU
safety solution to auditors, leaving
more time to differentiate
Safety manual
Complete guide to developing a safety
solution using a Hercules Safety MCU
TIs SafeTI design packages for functional

safety are robust and speed certification
Standards-specific SafeTI
solution bundles
www.ti.com/safeti
12
SafeTI website: One click away from safety!

www.ti.com/safeti
Functional Safety System Example

Safe Motor Control
Example of Safety System
Connectivity
TPS65381
DRV3201
Multi-Rail
Supply
Power Supply
Safety
Diagnostics
Hercules
Safety
MCU
Reset
Error Signaling
Bridge Driver
Driver &
Control
Monitor
Safety
Diagnostics
SPI
ADC
Sensor Interface
GIO
M
Devices developed to target IEC61508 and ISO26262
Voltage Signals, Voltage Rail Monitor/Protection (GREEN)

Communications/Safety Features (RED)
Hercules MCU plus Multi-Rail Power Supply

for an optimized safety solution
Voltage Signals (GREEN)
Microcontroller ErrorSignal Monitor
6V asynch switch-mode
pre-regulator, integrated
current limit
4.5V to 36V Operating

Range
Temp
Prot.
Current
Limit
Multi-Rail
Supply
TPS65381
Voltage monitoring
on all Power Supplies
and internal supply
voltages
5V Supply
3.3V/5V uC
Supply
0.8V2.6V uC
Core Supply
3.3V9.5V
Sensor Supply
Clock monitoring on
internal oscillators
Communications/Safety Features (RED)
Clock Voltage
Monitor Monitor
BIST
CRC
e.g. CAN
Transceiver
Hercules
Safety
MCU
Reset
Reset/Enable
Interface
ERROR
Monitor
Comms
Q&A Watchdog
AMUX / DMUX
Diagnostics
Error
Signaling
5V linear regulator
(internal FET) with
temp protection and
current limit
Multiple supply rails
to power the MCU,
CAN/FlexRay, and
external sensor
Reset circuit for the
MCU integrated in
power supply
Window or Q/A
watchdog support
SPI
ADC
GIO
AMUX/DMUX for
export of critical
signals to be
monitored by MCU
TMS570LS31x/21x Block Diagram

Dual Core Lockstep ARM Cortex-R4F w/ Floating Point
Features
IEC
ISO
CAN
Performance / Memory
Up to 180 MHz ARM Cortex-R4F w/ Floating Point

Up to 3MB Flash and 256KB Data SRAM
Dedicated 64KB Data Flash (EEPROM Emulation)
16 Channel DMA
TMS570LS31x
Temperature
ARM
Cortex-R4F
ARM
Cortex-R4F
Up to 180 MHz
Note: Above reflects max configuration of each module some functions are multiplexed.
Lockstep CPU Fault

Detection
AEC Q100
Memory
Power & Clocking
Up to 3MB
Flash (w/ ECC)
CLKMON
Up to 256KB
SRAM (w/ ECC)
Memory Protection Unit
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
10/100 MAC
FlexRay w/DMA
3 CAN Interfaces
5 SPI (3 Multi-Buffered)
2 UART (1 LIN capable), 1 I2C
Enhanced I/O Control
2x High End Timer Coprocessor (N2HET) w/DMA
Up to 44 pins plus 6 monitor channels
Pins can be used as Hi-Res PWM or Input Capture
2 x12-bit Multi-Buffered ADC
24 total input channels (16 shared)
Calibration and Self Test
Up to 120 GPIO pins (16 dedicated)
-40C - 125C
OSC/PLL
VMON
Safety & System
64KB EEPROM (emulated)
CPU BIST
Debug
SRAM BIST
CRC
JTAG
ETM, RTP, DMM
OS Timers
Windowed Watchdog
DMA w/ Memory Protection Unit

Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
High End Timer 1

(N2HET1 = 32ch)
(16 shared channels)
12-bit MibADC2 16ch
2ch FlexRay
3x CAN (64mb)
Memory Interface
3x Multi-Buffer SPI , 2x SPI
SDRAM/ASYNC EMIF
High End Timer 2

(N2HET2 = 14ch)
2x UART (1 LIN capable)
Input / Output
I2C
GIO/INT (16)
Packages
Targeted Applications
144p QFP
(20x20mm)
337p BGA
(16x16mm)
IEC 61508 and ISO

26262 Safety
Applications
Automotive, Rail,
Aerospace (COTS), Off
Road
16

Features
IEC
ISO
CAN

Up to 1.25MB Flash and 192KB Data SRAM w/ECC
16 Channel DMA
TMS570LS12x
Temperature
ARM
Cortex-R4F
ARM
Cortex-R4F
-40C - 125C
Memory
Power & Clocking
Up to 1.25MB
Flash (w/ ECC)
CLKMON
Up to 192KB
SRAM (w/ ECC)
Up to 180 MHz
OSC/PLL
VMON
Safety & System
Safety
10/100 MAC
FlexRay
3 CAN Interfaces
2 UART (1 LIN capable), 1 I2C
Motor Control Timers
7x ePWM (14 ch), 6x eCAP, 2x eQEP
AEC Q100
Debug
Lockstep CPU Fault

Detection
CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog

Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
2x High End Timer (N2HET)
2ch FlexRay
ePWM (14ch)
12-bit MibADC2 16ch

Memory Interface
SDRAM EMIF
3x CAN (64mb)
eCAP (6x)
eQEP (2x)
2x UART (1 LIN capable)
Input / Output
I2C
GIO/INT (16)
Packages
144p QFP
(20x20mm)
337p BGA
(16x16mm)
IEC 61508 and ISO

26262 Safety
Applications
Automotive, Rail,
Road
17

Dual Core Lockstep ARM Cortex-R4 Microcontroller
Features
IEC
ISO
CAN
Up to 80 MHz ARM Cortex-R4 CPU
Up to 384KB Flash and 32KB Data SRAM w/ECC
Safety
2 CAN Interfaces
1 UART (LIN capable)
High End Timer Coprocessor (NHET)
Up to 19 channels
Pins can be used as PWM or Input Capture
2x QEP
12-bit Multi-Buffered ADC
16 total input channels
RM42x
Temperature
ARM
Cortex-R4
ARM
Cortex-R4
Up to 80MHz
Lockstep CPU Fault

Detection
AEC Q100
Memory
Power & Clocking
Up to 384KB
Flash (w/ ECC)
OSC/PLL
Up to 32KB
SRAM (w/ ECC)
Debug
CLKMON
VMON
Safety & System

CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog
Analog
Communications
CAN1 (32 mb)
12-bit MibADC
16 channels
(64 Buffers)
Packages
Control Peripherals
High End Timer (N2HET)
CAN2 (16mb)
Multi-Buffer SPI (4 CS)
eQEP (2x)
2x SPI (1 CS)
Input / Output
UART (LIN capable)
GIO/INT (8)
100p QFP
(14x14mm)
-40C - 125C
IEC 61508 and ISO

26262 Safety
Applications
Automotive, Rail,
Road
18
RM48x Block Diagram

Features
IEC
CAN

Up to 3MB Flash and 256KB Data SRAM w/ECC
16 Channel DMA
RM48x
ARM
Cortex-R4F
ARM
Cortex-R4F
-40C - 105C
Memory
Power & Clocking
Up to 3MB
Flash (w/ ECC)
CLKMON
Up to 256KB
SRAM (w/ ECC)
Up to 220 MHz
Safety
10/100 MAC
USB: Host and Device
3 CAN Interfaces
2 UART, 1 I2C
Temperature Range
Lockstep CPU Fault

Detection
OSC/PLL
VMON
Safety & System
CPU BIST
Debug
SRAM BIST
CRC
JTAG
ETM, RTP, DMM
OS Timers
Windowed Watchdog

Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
High End Timer 1

(N2HET1 = 32ch)
12-bit MibADC2 16ch
USB Host & Device
3x CAN (64mb)
Memory Interface
SDRAM/ASYNC EMIF
High End Timer 2

(N2HET2 = 14ch)
2x UART
Input / Output
I2C
GIO/INT (16)
Packages
144p QFP
(20x20mm)
337p BGA
(16x16mm)
General IEC61508
Safety Applications
Industrial, Medical,
Energy
19
RM46x Block Diagram

Features
IEC
CAN

Up to 1.25MB Flash and 192KB Data SRAM w/ECC
16 Channel DMA
RM46x
ARM
Cortex-R4F
ARM
Cortex-R4F
Temperature Range
-40C - 105C
Memory
Power & Clocking
Up to 1.25MB
Flash (w/ ECC)
CLKMON
Up to 192KB
SRAM (w/ ECC)
Up to 220 MHz
VMON
Safety & System
Safety
10/100 MAC
USB: Host and Device
3 CAN Interfaces
2 UART, 1 I2C
7x ePWM (14 ch), 6x eCAP, 2x eQEP
OSC/PLL
Debug
Lockstep CPU Fault

Detection
CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog

Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
2x High End Timer (N2HET)
USB Host & Device
ePWM (14ch)
12-bit MibADC2 16ch

Memory Interface
SDRAM EMIF
3x CAN (64mb)
eCAP (6x)
eQEP (2x)
2x UART
Input / Output
I2C
GIO/INT (16)
Packages
144p QFP
(20x20mm)
337p BGA
(16x16mm)
General IEC61508
Safety Applications
Energy
20
RM42x Block Diagram

Dual Core Lockstep ARM Cortex-R4 Microcontroller
Features
IEC
CAN
100 MHz ARM Cortex-R4 CPU
384KB Flash and 32KB Data SRAM w/ECC
Safety
2 CAN Interfaces
1 UART
High End Timer Coprocessor (NHET)
Up to 19 channels
Pins can be used as PWM or Input Capture
2x QEP
12-bit Multi-Buffered ADC
16 total input channels
RM42x
ARM
Cortex-R4
ARM
Cortex-R4
100MHz
-40C - 105C
Memory
Power & Clocking
384KB
Flash (w/ ECC)
OSC/PLL
32KB
SRAM (w/ ECC)
Lockstep CPU Fault

Detection
Debug
CLKMON
VMON
Safety & System

CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog
Analog
Communications
CAN1 (32 mb)
12-bit MibADC
16 channels
(64 Buffers)
Packages
Control Peripherals
High End Timer (N2HET)
CAN2 (16mb)
Multi-Buffer SPI (4 CS)
eQEP (2x)
2x SPI (1 CS)
Input / Output
UART
GIO/INT (8)
100p QFP
(14x14mm)
Temperature Range
General IEC61508
Safety Applications
Energy
21
Hercules TMS570 Development Tools

IDEs & Compilers
TI Code Composer Studio compiler
qualification kit
Embedded Workbench for ARM is
certified by TV SD as suitable for
use to IEC 61508 and ISO 26262
MDK-ARM with uVision IDE and ARM
C/C++ Compilation Tools
MULTI IDE and Green Hills Compiler

certified to ISO 26262 and IEC 61608
Tantino-Cortex-R4 with professional
HiTOP Debugger/IDE
CoDeSys programming system and
runtime system for IEC 61131-3
programmable logic controllers
TargetLink code generation from
MathWorks Simulink/Stateflow,
certified for IEC 61508
Processor-In-the-Loop (PIL) with
MathWorks Simulink
JTAG Emulators & Trace

Spectrum Digital XDS200 & XDS560
Blackhawk XDS510 & XDS560
Keil ULINK
Segger J-Link
TI XDS100v2
Lauterbach TRACE32 PowerView for
program and data trace
iSYSTEM winIDEA IDE, iC5000
emulator and trace hardware
Flash Programming
Automated offline Programmers:
Data I/O
BP Micro Systems
In Circuit JTAG Programmers:
SMH Technologies
Checksum
XJTAG
CCS UniFlash
HET IDE with Synapticad

WaveViewer or WaveFormer Pro
22
TM
Hercules TMS570 Development Kits

SafeTI-HSK
Motor Control Kit

Spin 3 phase Brushless DC and
Brushless AC Motors
Starting at $499
Evaluate Hercules MCU and

TPS65381 Combination for Safetycritical Applications
$499
TMS570LS31, LS12
controlCARD
NEW!
TMS570LS31
HDK
Initial Software Development and

Short-run Builds for System
Prototypes
Get Started on Development with

Hercules MCU Platform
Starting at $99
$199
TMS570LS31,
LS12
USB Stick
LS31, LS12, LS04
LaunchPad
Low-cost Option to Evaluate
NEW!
Lowest cost Option to Evaluate

$79
TMS570LS31
$19.99
TMS570LS0423
Click here to watch the TMS570 Development Kit Video (Internet Connection Required)
23
Hercules LaunchPad
LaunchPad Demos
LAUNCHXL-RM42
LAUNCHXL-TMS57004
BoosterPack XL Interface
On Board JTAG (XDS100v2)
Kit Overview
GIO Push Button
Hercules Safety MCU
USB powered
On board USB XDS100v2 JTAG debug
On board SCI to PC serial communication
GIO & NHET LEDs
Ambient Light sensor
40 pin BoosterPack XL Header
Footprint for an Expansion header (not

populated) to bring out all MCU Pins
Ambient Light Sensor
$19.99
USB Cable
Quick Start Guide
24
SafeTI Hitex Safety Kit

Hitex Safety Kit Software
SAFETI-HSK-RM48
SAFETI-HSK-570LS31
TPS65381 Power Supply &

Safety Monitor
On Board Display
Kit Overview
ControlCard Interface
Hercules Safety MCU
$499
Cost effective entry into functional safety

related to ISO26262 and IEC61508
Evaluation board supporting all safety
features according to the safety manual
Error injection and reaction monitoring by
second C connected to GUI
Full source code available for modification
of the application or including the library in
your own application
Evaluation version of compiler and
debugger included
Evaluation version of SafeRTOS included
User friendly documentation
http://www.hitex.com/safeti
25
Hercules TMS570 Software Offering

RTOS Support
MiddleWare
Real-Time Operating Systems:
MISRA-compliant embedded TCP/IP stack

that supports both IPv4 and IPv6 protocols.
USB Host & Device, File systems, etc
FreeRTOS: FreeRTOS.org
Portable, open source, royalty free, mini
Real Time Kernel.
SafeRTOS: High Integrity Systems
Design assurance package for IEC61508,
others
C/OS: Micrium
Certifiable design package for IEC61508,
others
SCIOPTA: SCIOPTA RTOS
Kernel certified by TUV for IEC 61508
and EN50128 Hercules to SIL-3
MISRA-compliant CANopen real-time

protocol and device driver used in medical
automation and automotive equipment.
lwIP
USB
Ethernet Driver and light weight IP Stack

USB Device Driver & CDC Class
Many MiddleWare options available from
RTOS providers
TI Peripheral Drivers and Libraries

Peripheral Drivers
CoDeSys: Smart Software Solutions

Control and safety runtime system for
Industrial PLCs
HALCoGen Hardware Abstraction

Layer. GUI based code generation
TI MCAL for AUTOSAR v4.0.3
SMXRTOS: Micro Digital

Modular RTOS that meets the needs of
small to medium-size embedded systems
AUTOSAR OS/RTE:
- Vector MICROSAR Safe
- ElektroBit tresos
- ETAS RTA-OS & RTA-RTE
Libraries
MotorWare
SafeTI Diagnostic Library

executable form of safety manual
MotorWare InstaSPIN BLDC
DSP & Math library Cortex-R4
optimized library (CMSIS compliant)
26
HerculesTM Safety Support & Certification

SafeTI & Companion ICs
Safety Certification
SafeTI design packages for functional safety

provide standards specific solution bundles:
Development process and device certification:

TV-SD certification for functional
SafeTI-61508
SafeTI-26262
SafeTI-60601
SafeTI-QM
Hercules
safety development process

SafeTI-61508
SafeTI-26262
Architecture & device safety
assessment and certificates
TM
Safety MCU
Power Management
TPS65381
Exida
TV-SD
http://www.ti.com/safeti
Safety Documentation
Documents provided by TI assist in the safety

certification process:
Device Safety Manual (SM)
Details product safety architecture and
recommended usage
Software Compliance Support Packages

- SafeTI Compiler Qualification Kit
- SafeTI Diagnostic Library
- Peripheral Driver Compliance Support
Package (coming soon)
Safety Analysis Report (SAR)

FIT rate and device FMEDA
Safety Case Report (SCR)

FIT Summary of compliance support to
IEC 61508 and/or ISO 26262
TI ARM Compiler
27
Hercules MCU software and support

TM
Hercules Software Resources:

Software Product Page
RTOS partners
Flash API
MotorWare Software
InstaSPIN-BLDC
FOC Encoder with SMO
DSP Library Page
60+ fixed and float functions

CMSIS compliant
Example Code Repository
Initialization
Hercules Web Page:

www.ti.com/hercules
Data sheets
Technical reference manual
Application notes
Evaluation and development
kits
Engineer 2 Engineer Forum:
www.ti.com/hercules-support
Ask Technical Questions
Search for Technical Content
News and Announcements
Useful Links
WIKI:
Bootloader
www.ti.com/hercules-wiki
How to guides
CAN, Ethernet, FlexRay & more
Intro Videos
HALCoGen Peripheral Drivers
General Information
GUI-based HAL create/config
TM
Hercules Training
www.ti.com/herculestraining
1 Day Training Class:

Hercules 1 Day Safety Seminar
Introduction
What is Functional Safety?
Safety Standards Overview
IEC 61508 Safety Standard
ISO 26262 Safety Standard
Random Fault Management
Safety System Architectures
Hercules Safety Concept
Lab 1: Hercules Safety MCU Demos

Hercules Architecture
Development Tools: HW kits, SW tools
Embedded Flash Memory tools
Real Time Interrupt (RTI)
Vectored Interrupt Manager (VIM)
Direct Memory Access (DMA)
General-purpose I/O (GIO) & NHET
Lab 2: Using NHET as GIO

Communication Interfaces: UART, LIN, CAN, FlexRay,
Multi-Buffered Serial Peripheral Interface (MibSPI)
Lab 3: PC to SCI Communication
External Memory Interface (EMIF) / Parameter Overlay
Multi-buffered Analog-to-Digital Converter (MibADC)
Support Structure: Web, Forum, WIKI
3 Day Training Class:

Safety Critical Design and Programming with
ARM CortexTM-R4F based Hercules MCUs
Who should attend:

Hardware and Software Developers
Project Managers
Safety Specialists
Anyone interested in Hercules MCUs and
functional safety
Day 1
Day 2
Welcome and Intro

Hercules Product Overview / MCU
Roadmap
Safety Standards and Hercules Safety
Features
HALCoGen / Exercise
Code Composer Studio / Demonstration /
Exercise
Compiler / Exercise
Flash Overview
Flash Tools: nowFlashTM, nowECCTM,
nowProfileTM
Summary / Questions
ARM Cortex -R4F CPU Architecture
Overview
System Module Overview
Device setup/startup, Real Time Interrupt
Module, Vectored Interrupt Manager
CRC Controller, CPU Compare Module,
Error Signaling Module)
General Purpose I/Os / Supply
Direct Memory Access Controller (DMA)
Serial Communication Interface
(SCI/UART/LIN)
Day 3
Summary / Questions
Multi-Buffer Serial Peripheral Interface
(SPI / MIBSPI-P)
DCAN
FlexRay / Transfer Unit
Multi-Buffer ADC (MIBADC)
External Memory Interface (EMIF) /
Parameter Overlay Module (POM)
NHET (High End Timer) IDE
NHET
NHET Transfer Unit
Summary & Questions
29
Safety
software
Thanks
App.
software
App.
software

Hercules Introduction

Cargado por

Información del documento

Derechos de autor

Formatos disponibles

Compartir este documento

Compartir o incrustar documentos

Opciones para compartir

¿Le pareció útil este documento?

¿Este contenido es inapropiado?

Copyright:

Formatos disponibles

Hercules Introduction

Cargado por

Copyright:

Formatos disponibles

Make the world safer

with Hercules safety MCU platform

Hercules MCUs make the world a safer place

Electronics are proliferating in safety-critical applications

Protection against random and systematic failures

Headroom for application differentiation

TI Hercules MCU Platform

Industrial and Medical

Value Line Transportation

Hercules Safety MCU: End Equipment

Sensor & Communications

Hybrid & Electric Vehicles

Radar / Collision Avoidance

Chassis / Domain Control

Safety MCU ARM Cortex Roadmap

* Safety MCU = HerculesTM MCU

Automotive & Transportation

TI Confidential Selective Disclosure

Hercules TMS570 Roadmap

TMS570LS31x 180MHz R4F

2MB Flash, 192kB RAM

TMS570LS21x 180MHz R4F

ISO ISO 26262

IEC IEC 61508

TMS570LS12x 180MHz R4F

1.25MB Flash, 192kB RAM

Next Gen High

Next Gen Mid

TMS570LS11x 180MHz R4F

384kB Flash, 32kB RAM

256kB Flash, 24kB RAM

Next Gen Low

Hercules RM Cortex-R Roadmap

RM48L9x 220MHz R4F

3MB Flash, 256kB RAM

RM48L5x 200MHz R4F

ISO ISO 13849

IEC IEC 61508

RM46L8x 220MHz R4F

Next Gen High

Next Gen Mid

RM46L4x 200MHz R4F

384kB Flash, 32kB RAM

Next Gen Low

Hercules Cortex-R4F MCU safety features

Safe Island Hardware diagnostics (RED)

ECC for flash / RAM /

CPU Self Test

Non Safety Critical Functions (BLACK)

CPU Fault Detection

Blended HW diagnostics (BLUE)

On-Chip Clock and

Memory BIST on all

1oo1D Dual Core Safety Concept

CPU Compare Module (CCM)

Safety in hardware maximizes performance

CPU Usage (%)

Significantly reduce safety

Improve time to market

TIs SafeTI design packages for functional

SafeTI website: One click away from safety!

Functional Safety System Example

Voltage Signals, Voltage Rail Monitor/Protection (GREEN)

Hercules MCU plus Multi-Rail Power Supply