FMEDA FCCU PAD

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

FMEDA FCCU PAD

457 Views
HeebeomPark
Contributor II

For the following, in terms of the latent fault, the following SM3.FCCU_MON is recommended.

However, in case of Eout Pin is not used, the following section of FMEDA is not applicable?

What is the recommendation in case Eout Pin is not used?

HeebeomPark_0-1699495689531.png

 

0 Kudos
3 Replies

378 Views
Yashwant_Singh
NXP Employee
NXP Employee

Hello,

As discussed in the previous thread EOUT is an important chip state indication signal to the off chip hardware which is responsible for safe stating the chip within FTTI if the fault recovery measure (NMI or reset alike) executed by the chip fails to do. Without the EOUT monitoring any failed fault recovery attempt would go unnoticed and the compromised chip’s outputs would cascade to the off chip system elements thereby threatening the reliable operation of the entire system. Therefore the recommendation from NXP is to not to discard the EOUT indication concept in the first place.

Thanks!

-Yashwant

0 Kudos

364 Views
HeebeomPark
Contributor II

Dear Yashwant,

 

thank you very much for your quick answer. The above captured FMEDA for PAD is only for Eout Pin.

However, for the failure itself of FCCU even can be covered by the following safety mechanisms in the capture.  The following capture is the portion of MCU that is the source of the NMI?  

HeebeomPark_0-1701253498490.png

Many thanks,

Heebeom, 

 

 

 

0 Kudos

265 Views
john_floros
NXP Employee
NXP Employee

Hello,

I do not believe that that this is attached to the NMI.  The FCCU itself failure is covered by SAF software.

Regards,

John

0 Kudos