Make the world safer
with Hercules safety MCU platform
Collins Jiang
Hercules Safety MCU
BDM
Collins-jiang@[Link]
Hercules MCUs make the world a safer place
TM
Electronics are proliferating in safety-critical applications
DO-254
EN 50128
DO-178B
(railway)
(aerospace)
IEC
60601
IEC
50156
(medical
equipment)
TM
Hercules
(furnaces)
MCU
IEC 60880
IEC
61511
(nuclear
power
stations)
(process
industry)
IEC 62061
ISO 13849
(machinery)
Hercules MCUs
provide
developers of
safety-critical
applications:
ISO 26262
IEC 61508
(automotive)
(safety)
Protection against random and systematic failures
Headroom for application differentiation
Simplified development and system certification
TM
TI Hercules MCU Platform
ARM Cortex Based Microcontrollers
RM
Industrial and Medical
Safety MCUs
TMS570
Hercules
Safety MCU
Platform
Transportation and
Safety MCUs
TMS470M
Value Line Transportation
& Safety MCUs
Industrial Applications
Medical Applications
-40 to 105C Operation
ENET, USB, CAN & UART
Developed to Safety Standards
IEC 61508 SIL-3
Cortex-R over 350 DMIPs
Transportation Applications
Automotive Q100 Qualification
-40 to 125C Operation
FlexRay, ENET, CAN, LIN/UART
Developed to Safety Standards
ISO 26262 ASIL-D
IEC 61508 SIL-3
Cortex-R over 280 DMIPs
Transportation Applications
Automotive Q100 Qualification
-40 to 125C Operation
CAN, LIN/UART Connectivity
Supports Safety for
IEC 61508 Systems
Cortex-M to 100 DMIPS
Hercules Safety MCU: End Equipment
Aerospace & Railway
Industrial
Communications Gateway
Flight Control
Industrial Motor
Control
Avionics / Autopilot
Manufacturing /
Robotics
Wind Power
Anti-Skid Control
Elevator
Escalator
Motor Control
Automotive
Industrial
Automation / PLC
Airbag
Braking / Stability Control
Sensor & Communications
Gateway
Solar Power
Hybrid & Electric Vehicles
Radar / Collision Avoidance
(ADAS)
Infusion Pumps
Oxygen
Concentrators
Active Suspension
Chassis / Domain Control
Electric Power Steering
Anesthesia
Respirators
Medical
4
Safety MCU ARM Cortex Roadmap
Industrial,
Medical, Energy
* Safety MCU = HerculesTM MCU
RM46x
2*R4F LS
1.25MB, 192kB
220MHz
RM48L9x
2*R4F LS
3MB, 256kB
220MHz
Production 4Q 2013
ETHERNET
RM48L5x
2MB, 192kB
Automotive & Transportation
ETHERNET
2MB, 192kB
RM42x
2*R4LS
384KB, 32KB
100 MHz
2*R4F LS
1.25MB, 192kB
180MHz
2*R4F LS
3MB, 256kB
180MHz
TMS570LS21x
QEP / PWM
QEP
TMS570LS12x
TMS570LS31x
Production
ETHERNET
Industrial Drives
Performance Safety PLCs
Memory
Solar / Wind Energy
Peripherals
Elevators / Escalators
Remote I/O Modules
Infusion Pumps
Railway Signaling
Avionics Systems
ETHERNET
Off-road Vehicle
Production 4Q 2013
Stability Control
TMS570LS11x
1MB, 128kB
Power Steering
QEP / PWM
Vehicle Electrification
Safety Relays
ABS
Fuel Pumps
Passive Safety
CAN Communication
TMS570LS04x
2*R4 LS
384KB, 32KB
80MHz
Production 4Q 2013
QEP
TMS570LS03x
256KB, 32kB
Sampling
Development
Lockstep
CPUs
61508
SIL3
26262
ASIL-D
TI Confidential Selective Disclosure
5
Hercules TMS570 Roadmap
2012
High
TMS570LS31x 180MHz R4F
3MB Flash, 256kB RAM
SafeTI ISO & IEC
2013
!
2MB Flash, 192kB RAM
SafeTI ISO & IEC
Features:
Lock Step
Architecture
TMS570LS21x 180MHz R4F
ISO ISO 26262
Ethernet
QEP/ePWM
CAN CAN
CAN
2014+
FlexRay
IEC IEC 61508
SafeTI
TMS570LS12x 180MHz R4F
1.25MB Flash, 192kB RAM
SafeTI ISO & IEC
Mid
Next Gen High
SafeTI ISO & IEC
Next Gen Mid
SafeTI ISO & IEC
TMS570LS11x 180MHz R4F
1MB Flash, 128kB RAM
SafeTI ISO & IEC
CAN
Production 4Q13
Low
TMS570LS04x 80MHz R4
Production
384kB Flash, 32kB RAM
SafeTI ISO & IEC
Sampling
TMS570LS03x 80MHz R4
Development
256kB Flash, 24kB RAM
SafeTI ISO & IEC
Next Gen Low
SafeTI ISO & IEC
!
CAN
Production 4Q13
Hercules RM Cortex-R Roadmap
2012
High
RM48L9x 220MHz R4F
3MB Flash, 256kB RAM
SafeTI ISO & IEC
Features:
Lock Step
Architecture
RM48L5x 200MHz R4F
2MB Flash, 192kB RAM
SafeTI ISO & IEC
2014
2013
CAN CAN
CAN
ISO ISO 13849
Ethernet
QEP/PWM
USB
IEC IEC 61508
SafeTI
RM46L8x 220MHz R4F
1.25MB Flash, 192kB RAM
SafeTI ISO & IEC
Mid
Next Gen High
SafeTI ISO & IEC
Next Gen Mid
SafeTI ISO & IEC
RM46L4x 200MHz R4F
1MB Flash, 128kB RAM
SafeTI ISO & IEC
CAN
Low
Production 4Q 2013
Production
Sampling
RM42x 100MHz R4
384kB Flash, 32kB RAM
SafeTI ISO & IEC
CAN
Next Gen Low
SafeTI ISO & IEC
Production 4Q 2013
Development
Hercules Cortex-R4F MCU safety features
Logical / physical
design optimized to
reduce probability of
common cause
failure
Dual Core Lockstep Cycle by Cycle CPU
Fault Detection
Safe Island Hardware diagnostics (RED)
ECC for flash / RAM /
interconnect evaluated
inside the Cortex R4F
CPU Self Test
Controller requires
little S/W overhead
Lockstep
CPUs
ARM
CortexR4F
Memory
Flash
w/ ECC
RAM
w/ ECC
Non Safety Critical Functions (BLACK)
Power, Clock, & Safety
OSC PLL
PBIST/LBIST
POR
ESM
CRC
RTI/DWWD
Flash
EEPROM w/ ECC
Calibration
CPU Fault Detection
Blended HW diagnostics (BLUE)
Memory Interface
JTAG Debug
Embedded Trace
External Memory
Parity or CRC in
Serial and Network
Communication
Peripherals
On-Chip Clock and
Voltage Monitoring
DMA
Enhanced System Bus and Vectored Interrupt Module
Parity on all
Peripheral, DMA and
Interrupt controller
RAMS
Memory BIST on all
RAMS allows fast
memory test at
startup
Serial
Interfaces
Network
Interfaces
Dual
ADC
Cores
Available
Dual
High-end
Timers
Available
GIO
Error Signaling
Module w/ External
Error Pin
IO Loop Back, ADC
Self Test,
Dual ADC Cores with
shared channels
1oo1D Dual Core Safety Concept
Unique design to reduce common
cause failures (IC)
Second CPU mirrored and
rotated
Minimum distance 100m
between CPUs
Cycle delayed lockstep
Guard ring per CPU
Duplicated clock tree per CPU
Compare
Error
Output + Control
CCM
Cycle Delay
Self
Test
ARM
Cortex-R4F
> 100um
CPU Compare Module (CCM)
Self-test capability
Self-test error injection/error
forcing
Output error injection
Cycle Delay
Input + Control
10
Safety in hardware maximizes performance
& speeds development
100
CPU Usage (%)
Safety
software
Significantly reduce safety
software overhead with
integrated safety features
Up to 30%
Headroom
50
App.
software
App.
software
Competitive
MCU
Hercules
MCU
Improve time to market
Spend less time developing complex
safety software
Spend less time proving your CPU
safety solution to auditors, leaving
more time to differentiate
Safety manual
Complete guide to developing a safety
solution using a Hercules Safety MCU
TIs SafeTI design packages for functional
safety are robust and speed certification
Standards-specific SafeTI
solution bundles
[Link]/safeti
12
SafeTI website: One click away from safety!
[Link]/safeti
Functional Safety System Example
Safe Motor Control
Example of Safety System
Connectivity
TPS65381
DRV3201
Multi-Rail
Supply
Power Supply
Safety
Diagnostics
Hercules
Safety
MCU
Reset
Error Signaling
Bridge Driver
Driver &
Control
Monitor
Safety
Diagnostics
SPI
ADC
Sensor Interface
GIO
M
Devices developed to target IEC61508 and ISO26262
Voltage Signals, Voltage Rail Monitor/Protection (GREEN)
Communications/Safety Features (RED)
Hercules MCU plus Multi-Rail Power Supply
for an optimized safety solution
Voltage Signals (GREEN)
Microcontroller ErrorSignal Monitor
6V asynch switch-mode
pre-regulator, integrated
current limit
4.5V to 36V Operating
Range
Temp
Prot.
Current
Limit
Multi-Rail
Supply
TPS65381
Voltage monitoring
on all Power Supplies
and internal supply
voltages
5V Supply
3.3V/5V uC
Supply
0.8V2.6V uC
Core Supply
3.3V9.5V
Sensor Supply
Clock monitoring on
internal oscillators
Communications/Safety Features (RED)
Clock Voltage
Monitor Monitor
BIST
CRC
e.g. CAN
Transceiver
Hercules
Safety
MCU
Reset
Reset/Enable
Interface
ERROR
Monitor
Comms
Q&A Watchdog
AMUX / DMUX
Diagnostics
Error
Signaling
5V linear regulator
(internal FET) with
temp protection and
current limit
Multiple supply rails
to power the MCU,
CAN/FlexRay, and
external sensor
Reset circuit for the
MCU integrated in
power supply
Window or Q/A
watchdog support
SPI
ADC
GIO
AMUX/DMUX for
export of critical
signals to be
monitored by MCU
TMS570LS31x/21x Block Diagram
Dual Core Lockstep ARM Cortex-R4F w/ Floating Point
Features
IEC
ISO
CAN
Performance / Memory
Up to 180 MHz ARM Cortex-R4F w/ Floating Point
Up to 3MB Flash and 256KB Data SRAM
Dedicated 64KB Data Flash (EEPROM Emulation)
16 Channel DMA
TMS570LS31x
Temperature
ARM
Cortex-R4F
ARM
Cortex-R4F
Up to 180 MHz
Note: Above reflects max configuration of each module some functions are multiplexed.
Lockstep CPU Fault
Detection
AEC Q100
Memory
Power & Clocking
Up to 3MB
Flash (w/ ECC)
CLKMON
Up to 256KB
SRAM (w/ ECC)
Memory Protection Unit
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
10/100 MAC
FlexRay w/DMA
3 CAN Interfaces
5 SPI (3 Multi-Buffered)
2 UART (1 LIN capable), 1 I2C
Enhanced I/O Control
2x High End Timer Coprocessor (N2HET) w/DMA
Up to 44 pins plus 6 monitor channels
Pins can be used as Hi-Res PWM or Input Capture
2 x12-bit Multi-Buffered ADC
24 total input channels (16 shared)
Calibration and Self Test
Up to 120 GPIO pins (16 dedicated)
-40C - 125C
OSC/PLL
VMON
Safety & System
64KB EEPROM (emulated)
CPU BIST
Debug
SRAM BIST
CRC
JTAG
ETM, RTP, DMM
OS Timers
Windowed Watchdog
DMA w/ Memory Protection Unit
Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
High End Timer 1
(N2HET1 = 32ch)
(16 shared channels)
12-bit MibADC2 16ch
2ch FlexRay
(16 shared channels)
3x CAN (64mb)
Memory Interface
3x Multi-Buffer SPI , 2x SPI
SDRAM/ASYNC EMIF
High End Timer 2
(N2HET2 = 14ch)
2x UART (1 LIN capable)
Input / Output
I2C
GIO/INT (16)
Packages
Targeted Applications
144p QFP
(20x20mm)
337p BGA
(16x16mm)
IEC 61508 and ISO
26262 Safety
Applications
Automotive, Rail,
Aerospace (COTS), Off
Road
16
TMS570LS12x/11x Block Diagram
Dual Core Lockstep ARM Cortex-R4F w/ Floating Point
Features
IEC
ISO
CAN
Performance / Memory
Up to 180 MHz ARM Cortex-R4F w/ Floating Point
Up to 1.25MB Flash and 192KB Data SRAM w/ECC
Dedicated 64KB Data Flash (EEPROM Emulation)
16 Channel DMA
TMS570LS12x
Temperature
ARM
Cortex-R4F
ARM
Cortex-R4F
-40C - 125C
Memory
Power & Clocking
Up to 1.25MB
Flash (w/ ECC)
CLKMON
Up to 192KB
SRAM (w/ ECC)
Up to 180 MHz
Note: Above reflects max configuration of each module some functions are multiplexed.
OSC/PLL
VMON
Safety & System
64KB EEPROM (emulated)
Memory Protection Unit
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
10/100 MAC
FlexRay
3 CAN Interfaces
5 SPI (3 Multi-Buffered)
2 UART (1 LIN capable), 1 I2C
Enhanced I/O Control
2x High End Timer Coprocessor (N2HET) w/DMA
Up to 40 pins plus 6 monitor channels
Pins can be used as Hi-Res PWM or Input Capture
Motor Control Timers
7x ePWM (14 ch), 6x eCAP, 2x eQEP
2 x12-bit Multi-Buffered ADC
24 total input channels (16 shared)
Calibration and Self Test
Up to 101 GPIO pins (16 dedicated)
AEC Q100
Debug
Lockstep CPU Fault
Detection
CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog
DMA w/ Memory Protection Unit
Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
2x High End Timer (N2HET)
2ch FlexRay
ePWM (14ch)
(16 shared channels)
12-bit MibADC2 16ch
(16 shared channels)
Memory Interface
SDRAM EMIF
3x CAN (64mb)
eCAP (6x)
3x Multi-Buffer SPI , 2x SPI
eQEP (2x)
2x UART (1 LIN capable)
Input / Output
I2C
GIO/INT (16)
Packages
Targeted Applications
144p QFP
(20x20mm)
337p BGA
(16x16mm)
IEC 61508 and ISO
26262 Safety
Applications
Automotive, Rail,
Aerospace (COTS), Off
Road
17
TMS570LS04x/03x Block Diagram
Dual Core Lockstep ARM Cortex-R4 Microcontroller
Features
IEC
ISO
CAN
Performance / Memory
Up to 80 MHz ARM Cortex-R4 CPU
Up to 384KB Flash and 32KB Data SRAM w/ECC
Dedicated 16KB Data Flash (EEPROM Emulation)
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
2 CAN Interfaces
3 SPI (1 Multi-Buffered)
1 UART (LIN capable)
Enhanced I/O Control
High End Timer Coprocessor (NHET)
Up to 19 channels
Pins can be used as PWM or Input Capture
Motor Control Timers
2x QEP
12-bit Multi-Buffered ADC
16 total input channels
Calibration and Self Test
Up to 45 GPIO pins (8 dedicated)
RM42x
Temperature
ARM
Cortex-R4
ARM
Cortex-R4
Up to 80MHz
Lockstep CPU Fault
Detection
AEC Q100
Memory
Power & Clocking
Up to 384KB
Flash (w/ ECC)
OSC/PLL
Up to 32KB
SRAM (w/ ECC)
16KB EEPROM (emulated)
Memory Protection Unit
Debug
CLKMON
VMON
Safety & System
CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog
Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
CAN1 (32 mb)
12-bit MibADC
16 channels
(64 Buffers)
Packages
Control Peripherals
High End Timer (N2HET)
CAN2 (16mb)
Multi-Buffer SPI (4 CS)
eQEP (2x)
2x SPI (1 CS)
Input / Output
UART (LIN capable)
GIO/INT (8)
Targeted Applications
100p QFP
(14x14mm)
Note: Above reflects max configuration of each module some functions are multiplexed.
-40C - 125C
IEC 61508 and ISO
26262 Safety
Applications
Automotive, Rail,
Aerospace (COTS), Off
Road
18
RM48x Block Diagram
Dual Core Lockstep ARM Cortex-R4F w/ Floating Point
Features
IEC
CAN
Performance / Memory
Up to 220 MHz ARM Cortex-R4F w/ Floating Point
Up to 3MB Flash and 256KB Data SRAM w/ECC
Dedicated 64KB Data Flash (EEPROM Emulation)
16 Channel DMA
RM48x
ARM
Cortex-R4F
ARM
Cortex-R4F
Note: Above reflects max configuration of each module some functions are multiplexed.
-40C - 105C
Memory
Power & Clocking
Up to 3MB
Flash (w/ ECC)
CLKMON
Up to 256KB
SRAM (w/ ECC)
Up to 220 MHz
Memory Protection Unit
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
10/100 MAC
USB: Host and Device
3 CAN Interfaces
5 SPI (3 Multi-Buffered)
2 UART, 1 I2C
Enhanced I/O Control
2x High End Timer Coprocessor (N2HET) w/DMA
Up to 44 pins plus 6 monitor channels
Pins can be used as Hi-Res PWM or Input Capture
2 x12-bit Multi-Buffered ADC
24 total input channels (16 shared)
Calibration and Self Test
Up to 120 GPIO pins (16 dedicated)
Temperature Range
Lockstep CPU Fault
Detection
OSC/PLL
VMON
Safety & System
64KB EEPROM (emulated)
CPU BIST
Debug
SRAM BIST
CRC
JTAG
ETM, RTP, DMM
OS Timers
Windowed Watchdog
DMA w/ Memory Protection Unit
Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
High End Timer 1
(N2HET1 = 32ch)
(16 shared channels)
12-bit MibADC2 16ch
USB Host & Device
(16 shared channels)
3x CAN (64mb)
Memory Interface
3x Multi-Buffer SPI , 2x SPI
SDRAM/ASYNC EMIF
High End Timer 2
(N2HET2 = 14ch)
2x UART
Input / Output
I2C
GIO/INT (16)
Packages
Targeted Applications
144p QFP
(20x20mm)
337p BGA
(16x16mm)
General IEC61508
Safety Applications
Industrial, Medical,
Energy
19
RM46x Block Diagram
Dual Core Lockstep ARM Cortex-R4F w/ Floating Point
Features
IEC
CAN
Performance / Memory
Up to 220 MHz ARM Cortex-R4F w/ Floating Point
Up to 1.25MB Flash and 192KB Data SRAM w/ECC
Dedicated 64KB Data Flash (EEPROM Emulation)
16 Channel DMA
RM46x
ARM
Cortex-R4F
ARM
Cortex-R4F
Temperature Range
-40C - 105C
Memory
Power & Clocking
Up to 1.25MB
Flash (w/ ECC)
CLKMON
Up to 192KB
SRAM (w/ ECC)
Up to 220 MHz
Note: Above reflects max configuration of each module some functions are multiplexed.
VMON
Safety & System
64KB EEPROM (emulated)
Memory Protection Unit
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
10/100 MAC
USB: Host and Device
3 CAN Interfaces
5 SPI (3 Multi-Buffered)
2 UART, 1 I2C
Enhanced I/O Control
2x High End Timer Coprocessor (N2HET) w/DMA
Up to 44 pins plus 6 monitor channels
Pins can be used as Hi-Res PWM or Input Capture
Motor Control Timers
7x ePWM (14 ch), 6x eCAP, 2x eQEP
2 x12-bit Multi-Buffered ADC
24 total input channels (16 shared)
Calibration and Self Test
Up to 101 GPIO pins (16 dedicated)
OSC/PLL
Debug
Lockstep CPU Fault
Detection
CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog
DMA w/ Memory Protection Unit
Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
Control Peripherals
12-bit MibADC1 24ch
10/100 EMAC
2x High End Timer (N2HET)
USB Host & Device
ePWM (14ch)
(16 shared channels)
12-bit MibADC2 16ch
(16 shared channels)
Memory Interface
SDRAM EMIF
3x CAN (64mb)
eCAP (6x)
3x Multi-Buffer SPI , 2x SPI
eQEP (2x)
2x UART
Input / Output
I2C
GIO/INT (16)
Packages
Targeted Applications
144p QFP
(20x20mm)
337p BGA
(16x16mm)
General IEC61508
Safety Applications
Industrial, Medical,
Energy
20
RM42x Block Diagram
Dual Core Lockstep ARM Cortex-R4 Microcontroller
Features
IEC
CAN
Performance / Memory
100 MHz ARM Cortex-R4 CPU
384KB Flash and 32KB Data SRAM w/ECC
Dedicated 16KB Data Flash (EEPROM Emulation)
Safety
Dual CPUs in Lockstep
CPU Logic Built in Self Test (LBIST)
Up to 12 CPU MPU regions
Flash & RAM w/ ECC (w/ bus protection)
Memory Built-in Self Test (PBIST)
Cyclic redundancy checker module (CRC)
Select peripheral RAMs protected by Parity
Communication Networks
2 CAN Interfaces
3 SPI (1 Multi-Buffered)
1 UART
Enhanced I/O Control
High End Timer Coprocessor (NHET)
Up to 19 channels
Pins can be used as PWM or Input Capture
Motor Control Timers
2x QEP
12-bit Multi-Buffered ADC
16 total input channels
Calibration and Self Test
Up to 45 GPIO pins (8 dedicated)
RM42x
ARM
Cortex-R4
ARM
Cortex-R4
100MHz
-40C - 105C
Memory
Power & Clocking
384KB
Flash (w/ ECC)
OSC/PLL
32KB
SRAM (w/ ECC)
16KB EEPROM (emulated)
Memory Protection Unit
Lockstep CPU Fault
Detection
Debug
CLKMON
VMON
Safety & System
CPU BIST
SRAM BIST
CRC
JTAG
OS Timers
Calibration
Windowed Watchdog
Enhanced System Bus and Vectored Interrupt Manager
Analog
Communications
CAN1 (32 mb)
12-bit MibADC
16 channels
(64 Buffers)
Packages
Control Peripherals
High End Timer (N2HET)
CAN2 (16mb)
Multi-Buffer SPI (4 CS)
eQEP (2x)
2x SPI (1 CS)
Input / Output
UART
GIO/INT (8)
Targeted Applications
100p QFP
(14x14mm)
Note: Above reflects max configuration of each module some functions are multiplexed.
Temperature Range
General IEC61508
Safety Applications
Industrial, Medical,
Energy
21
Hercules TMS570 Development Tools
IDEs & Compilers
TI Code Composer Studio compiler
qualification kit
Embedded Workbench for ARM is
certified by TV SD as suitable for
use to IEC 61508 and ISO 26262
MDK-ARM with uVision IDE and ARM
C/C++ Compilation Tools
MULTI IDE and Green Hills Compiler
certified to ISO 26262 and IEC 61608
Tantino-Cortex-R4 with professional
HiTOP Debugger/IDE
CoDeSys programming system and
runtime system for IEC 61131-3
programmable logic controllers
TargetLink code generation from
MathWorks Simulink/Stateflow,
certified for IEC 61508
Processor-In-the-Loop (PIL) with
MathWorks Simulink
JTAG Emulators & Trace
Spectrum Digital XDS200 & XDS560
Blackhawk XDS510 & XDS560
Keil ULINK
Segger J-Link
TI XDS100v2
Lauterbach TRACE32 PowerView for
program and data trace
iSYSTEM winIDEA IDE, iC5000
emulator and trace hardware
Flash Programming
Automated offline Programmers:
Data I/O
BP Micro Systems
In Circuit JTAG Programmers:
SMH Technologies
Checksum
XJTAG
CCS UniFlash
HET IDE with Synapticad
WaveViewer or WaveFormer Pro
22
TM
Hercules TMS570 Development Kits
SafeTI-HSK
Motor Control Kit
Spin 3 phase Brushless DC and
Brushless AC Motors
Starting at $499
Evaluate Hercules MCU and
TPS65381 Combination for Safetycritical Applications
$499
TMS570LS31, LS12
controlCARD
NEW!
TMS570LS31
HDK
Initial Software Development and
Short-run Builds for System
Prototypes
Get Started on Development with
Hercules MCU Platform
Starting at $99
$199
TMS570LS31,
LS12
USB Stick
LS31, LS12, LS04
LaunchPad
Low-cost Option to Evaluate
Hercules MCU Platform
NEW!
Lowest cost Option to Evaluate
Hercules MCU Platform
$79
TMS570LS31
$19.99
TMS570LS0423
Click here to watch the TMS570 Development Kit Video (Internet Connection Required)
23
Hercules LaunchPad
LaunchPad Demos
LAUNCHXL-RM42
LAUNCHXL-TMS57004
BoosterPack XL Interface
On Board JTAG (XDS100v2)
Kit Overview
GIO Push Button
Hercules Safety MCU
USB powered
On board USB XDS100v2 JTAG debug
On board SCI to PC serial communication
GIO & NHET LEDs
Ambient Light sensor
40 pin BoosterPack XL Header
Footprint for an Expansion header (not
populated) to bring out all MCU Pins
Ambient Light Sensor
$19.99
USB Cable
Quick Start Guide
24
SafeTI Hitex Safety Kit
Hitex Safety Kit Software
SAFETI-HSK-RM48
SAFETI-HSK-570LS31
TPS65381 Power Supply &
Safety Monitor
On Board Display
Kit Overview
ControlCard Interface
Hercules Safety MCU
$499
Cost effective entry into functional safety
related to ISO26262 and IEC61508
Evaluation board supporting all safety
features according to the safety manual
Error injection and reaction monitoring by
second C connected to GUI
Full source code available for modification
of the application or including the library in
your own application
Evaluation version of compiler and
debugger included
Evaluation version of SafeRTOS included
User friendly documentation
[Link]
25
Hercules TMS570 Software Offering
RTOS Support
MiddleWare
Real-Time Operating Systems:
MISRA-compliant embedded TCP/IP stack
that supports both IPv4 and IPv6 protocols.
USB Host & Device, File systems, etc
FreeRTOS: [Link]
Portable, open source, royalty free, mini
Real Time Kernel.
SafeRTOS: High Integrity Systems
Design assurance package for IEC61508,
others
C/OS: Micrium
Certifiable design package for IEC61508,
others
SCIOPTA: SCIOPTA RTOS
Kernel certified by TUV for IEC 61508
and EN50128 Hercules to SIL-3
MISRA-compliant CANopen real-time
protocol and device driver used in medical
automation and automotive equipment.
lwIP
USB
Ethernet Driver and light weight IP Stack
USB Device Driver & CDC Class
Many MiddleWare options available from
RTOS providers
TI Peripheral Drivers and Libraries
Peripheral Drivers
CoDeSys: Smart Software Solutions
Control and safety runtime system for
Industrial PLCs
HALCoGen Hardware Abstraction
Layer. GUI based code generation
TI MCAL for AUTOSAR v4.0.3
SMXRTOS: Micro Digital
Modular RTOS that meets the needs of
small to medium-size embedded systems
AUTOSAR OS/RTE:
- Vector MICROSAR Safe
- ElektroBit tresos
- ETAS RTA-OS & RTA-RTE
Libraries
MotorWare
SafeTI Diagnostic Library
executable form of safety manual
MotorWare InstaSPIN BLDC
DSP & Math library Cortex-R4
optimized library (CMSIS compliant)
26
HerculesTM Safety Support & Certification
SafeTI & Companion ICs
Safety Certification
SafeTI design packages for functional safety
provide standards specific solution bundles:
Development process and device certification:
TV-SD certification for functional
SafeTI-61508
SafeTI-26262
SafeTI-60601
SafeTI-QM
Hercules
safety development process
SafeTI-61508
SafeTI-26262
Architecture & device safety
assessment and certificates
TM
Safety MCU
Power Management
TPS65381
Exida
TV-SD
[Link]
Safety Documentation
Documents provided by TI assist in the safety
certification process:
Device Safety Manual (SM)
Details product safety architecture and
recommended usage
Software Compliance Support Packages
- SafeTI Compiler Qualification Kit
- SafeTI Diagnostic Library
- Peripheral Driver Compliance Support
Package (coming soon)
Safety Analysis Report (SAR)
FIT rate and device FMEDA
Safety Case Report (SCR)
FIT Summary of compliance support to
IEC 61508 and/or ISO 26262
TI ARM Compiler
27
Hercules MCU software and support
TM
Hercules Software Resources:
Software Product Page
RTOS partners
Flash API
MotorWare Software
InstaSPIN-BLDC
FOC Encoder with SMO
DSP Library Page
60+ fixed and float functions
CMSIS compliant
Example Code Repository
Initialization
Hercules Web Page:
[Link]/hercules
Data sheets
Technical reference manual
Application notes
Evaluation and development
kits
Engineer 2 Engineer Forum:
[Link]/hercules-support
Ask Technical Questions
Search for Technical Content
News and Announcements
Useful Links
WIKI:
Bootloader
[Link]/hercules-wiki
How to guides
CAN, Ethernet, FlexRay & more
Intro Videos
HALCoGen Peripheral Drivers
General Information
GUI-based HAL create/config
TM
Hercules Training
[Link]/herculestraining
1 Day Training Class:
Hercules 1 Day Safety Seminar
Introduction
What is Functional Safety?
Safety Standards Overview
IEC 61508 Safety Standard
ISO 26262 Safety Standard
Random Fault Management
Safety System Architectures
Hercules Safety Concept
Lab 1: Hercules Safety MCU Demos
Hercules Architecture
Development Tools: HW kits, SW tools
Embedded Flash Memory tools
Real Time Interrupt (RTI)
Vectored Interrupt Manager (VIM)
Direct Memory Access (DMA)
General-purpose I/O (GIO) & NHET
Lab 2: Using NHET as GIO
Communication Interfaces: UART, LIN, CAN, FlexRay,
Multi-Buffered Serial Peripheral Interface (MibSPI)
Lab 3: PC to SCI Communication
External Memory Interface (EMIF) / Parameter Overlay
Multi-buffered Analog-to-Digital Converter (MibADC)
Support Structure: Web, Forum, WIKI
3 Day Training Class:
Safety Critical Design and Programming with
ARM CortexTM-R4F based Hercules MCUs
Who should attend:
Hardware and Software Developers
Project Managers
Safety Specialists
Anyone interested in Hercules MCUs and
functional safety
Day 1
Day 2
Welcome and Intro
Hercules Product Overview / MCU
Roadmap
Safety Standards and Hercules Safety
Features
HALCoGen / Exercise
Code Composer Studio / Demonstration /
Exercise
Compiler / Exercise
Flash Overview
Flash Tools: nowFlashTM, nowECCTM,
nowProfileTM
Summary / Questions
ARM Cortex -R4F CPU Architecture
Overview
System Module Overview
Device setup/startup, Real Time Interrupt
Module, Vectored Interrupt Manager
CRC Controller, CPU Compare Module,
Error Signaling Module)
General Purpose I/Os / Supply
Direct Memory Access Controller (DMA)
Serial Communication Interface
(SCI/UART/LIN)
Day 3
Summary / Questions
Multi-Buffer Serial Peripheral Interface
(SPI / MIBSPI-P)
DCAN
FlexRay / Transfer Unit
Multi-Buffer ADC (MIBADC)
External Memory Interface (EMIF) /
Parameter Overlay Module (POM)
NHET (High End Timer) IDE
NHET
NHET Transfer Unit
Summary & Questions
29
Safety
software
Thanks
App.
software
App.
software
