FMEDA FCCU PAD

[HeebeomPark]

For the following, in terms of the latent fault, the following SM3.FCCU_MON is recommended.

However, in case of Eout Pin is not used, the following section of FMEDA is not applicable?

What is the recommendation in case Eout Pin is not used?

[Yashwant_Singh]

Hello,

As discussed in the previous thread EOUT is an important chip state indication signal to the off chip hardware which is responsible for safe stating the chip within FTTI if the fault recovery measure (NMI or reset alike) executed by the chip fails to do. Without the EOUT monitoring any failed fault recovery attempt would go unnoticed and the compromised chip’s outputs would cascade to the off chip system elements thereby threatening the reliable operation of the entire system. Therefore the recommendation from NXP is to not to discard the EOUT indication concept in the first place.

Thanks!

-Yashwant

[HeebeomPark]

Dear Yashwant,

thank you very much for your quick answer. The above captured FMEDA for PAD is only for Eout Pin.

However, for the failure itself of FCCU even can be covered by the following safety mechanisms in the capture.  The following capture is the portion of MCU that is the source of the NMI?  

Many thanks,

Heebeom, 

[john_floros]

Hello,

I do not believe that that this is attached to the NMI.  The FCCU itself failure is covered by SAF software.

Regards,

John