enabling functional safety for mmwave sensors

42
Enabling Functional Safety in TI mmWave Devices Raghunandan Kamath Radar Business Unit

Upload: others

Post on 24-Dec-2021

9 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Enabling Functional Safety for mmWave Sensors

Enabling Functional Safety in TI mmWave Devices

Raghunandan Kamath

Radar Business Unit

Page 2: Enabling Functional Safety for mmWave Sensors

Agenda

• mmWave Device Introduction

• mmWave Functional Safety Concept

• Safety Features in mmWave devices

– Analog/RF modules with in-built monitors

– Digital modules

• Customer Safety Enablers

• SDL (Software Diagnostics Library)

• FMEA / FMEDA

• Monitoring Application notes

• Safety Manual

• TUV Functional Safety Certificates and assessment reports

• Q&A

2

Page 3: Enabling Functional Safety for mmWave Sensors

mmWave Device Introduction

3

TI Information – Selective Disclosure

Page 4: Enabling Functional Safety for mmWave Sensors

AWR2243 – High Performance Front End

• Integrated transceiver with 4 Rx and 3 Tx

• Higher sampling frequency (45 Msps) & IF BW (20 MHz)

• Enhanced RF performance vs. Gen1

– Better phase noise

– Lower noise figure

– Superior bumper handling

• 0.65 mm 10.4x10.4 mm2 FCBGA

• ASIL-B capable

• Use cases:

– MRR, LRR: 1x AWR2243 + External MCU

– Imaging Radar Sensor: 2x or 4x AWR2243 (cascade) + External MCU

4

AWR2243

4RX Calibration,

Monitoring

Engine

3TX Synth SPI

CSI2

Page 5: Enabling Functional Safety for mmWave Sensors

Agenda

• mmWave Device Introduction

• mmWave Functional Safety Concept

• Safety Features in mmWave devices

– Analog/RF modules with in-built monitors

– Digital modules

• Customer Safety Enablers

• SDL (Software Diagnostics Library)

• FMEA / FMEDA

• Monitoring Application notes

• Safety Manual

• TUV Functional Safety Certificates and assessment reports

• Q&A

5

Page 6: Enabling Functional Safety for mmWave Sensors

mmWave Functional Safety Concept

6

TI Information – Selective Disclosure

Page 7: Enabling Functional Safety for mmWave Sensors

Identified Safety Goals for the Sensor

• Do not miss an Object when it is present

• Timely identification of Object if it is present

• Do not detect/ misidentify an object if it is not

present

7

SEooC and Safety Concept

Industrial Applications Automotive Applications

• Building Automation

• Displacement Sensing

• Gesture

• Robotics

• Traffic Monitoring

• Proximity and Position Sensing

• Security and Surveillance

• Factory Automation

• Safety Guards

• People Counting

• Motion Detection

• Occupancy Detection

• Blind Spot Detection

• Lane Change Assistance

• Cross Traffic Alert

• Parking Assistance

• Occupancy Detection

• Simple Gesture Recognition

• Car Door Opener Applications

• City Auto Breaking

• Low Speed Adaptive Cruise Control

• Autonomous Emergency Breaking

“TI mmWave Sensor Safety Concept and

requirements are driven to address the above Safety

Goals”

Page 8: Enabling Functional Safety for mmWave Sensors

Architecture For Management of Random Faults

• Operating States

– Power Off Safe State AR1 Cold Reset Warm Reset Operational

– Safe States

• AR 1 – Reset Assertion

• AR 2 – “NERROR” Error Signal Indication.

• Safety Concept

– Hardware Diagnostics

– HW + SW Diagnostics

– Software Diagnostics

– System Level Diagnostics Recommendation.

• Management of Errors

– Error Reporting / Signaling

– Error Response

8

Page 9: Enabling Functional Safety for mmWave Sensors

Error Signaling Module

9

Different Error Response

• NERROR Pin

• Generation of WARM RESET

• Generation of NRESET

• CPU Abort

• CPU Interrupts

MSS

Diagnostics RCSS ESM DSS ESM

MSS ESM

External

Monitoring

Low Priority Interrupt to R5F

High Priority Interrupt to R5F

WARM RESET NERROR Pin

High Priority Interrupts

Page 10: Enabling Functional Safety for mmWave Sensors

10

Safety Critical Functions

BSS_GPADC

BSS_RAMPGEN

BU

S_M

AT

RIX

DSS_CBUFF

DSS_CQ

BU

S_M

AT

RIX

MSS_DMA, MSS_DMA2

MAILBOX

PADRING, MSS_IOMUX

TEST, DEBUG

DSS_L3RAM

MSS_MIBSPIA, MSS_MIBSPIB

MSS_QSPI

MSS_CRC, MSS_ESM

BSS_ANA

BSS_FFT

I2C, MSS_SCIA

MSS_GIO, MSS_GPCFG_REG

MSS_ETPWM1, MSS_ETPWM2,

MSS_ETPWM3

DSS_SCI, TEST

PROGFILT

FREQ_MON

BSS_RCM

BSS_DCC,

BSS_CCC

BSS_SCI, TEST,

DSS_CP, DSS_BPM

DSS_TPTC0, DSS_TPTC1,

DSS_TPCC1

DSS_ADCBUF

MSS_SCIB, DEBUG

MSS_TOPRCM

BU

S_M

AT

RIX

BSS_DFE_CQ

BSS_DFE_STC

MSS_RCM

BU

S_M

AT

RIX

DSS_REG, DSS_REG2

BSS_UDMA

BSS_GPCFG_RE

G

BSS_SEQ_EXT

N

CORTEXR4F

MSS_VIM

MSS_RTIB, MSS_CCCB

(Watchdog)

MSS_TCM

A_RAM

MSS_TC

MB_RAM

MSS_TC

MA_ROM

MSS_STC

MSS_CortexR4F_WRAPPER

CORTEXR4F

BSS_VIM

BSS_RTI (Watchdog)

BSS_TCM

A_RAM

BSS_TCM

B_RAM

BSS_TC

MA_ROM

BSS_CCM

R4

BSS_CR4

_STC

BSS_CortexR4F_WRAPPER RX TX

RE

GS

BSS_

DFE

FRC

FUSEROM0

CSI2

BSS_CRC,

BSS_ESM

BSS_FUSE_SRE

G

MSS_RTIA MSS_DCCA, MSS_DCCB,

MSS_CCCA

Master Subsystem

DSP Subsystem

TOP Subsystem Radar Subsystem LVDS

RF/Analog Subsystem

SLICER/

XO

Crystal

RX x4

TEMP

_SENS GPADC

REF+LDO

LODIST

WAKEUP

To

DFE

PA PS

SYNTH X4

FM_CW_SYNCIN

FM_CW_SYNCOUT

APLL PA PS

PA PS

LNA ADC

MIXER,

IQGEN

LNA ADC

LNA ADC

LNA ADC

PM

IFA1,2

TX x3

• Power supplies

• Clock generation

• Reset

• RF/Analog Modules

• Digital Front-end filters

• Ramp generation

• Enhanced Direct Memory Access

• ADC Buffer

• DSS Interconnect

• Master Microcontroller Elements

• BIST Microcontroller Elements

• BSS Interconnect

• MSS Real Timer Interrupt

• MSS Interconnect

• Direct Memory Access modules

• Inter-processor communication

• SPI Master interface

• Input Outputs

• Error Signaling Module

Safety Island Diagnostics

MSS Bootloader

MSS Functional Firmware

BSS Firmware

Page 11: Enabling Functional Safety for mmWave Sensors

11

Safety Critical Functions

BSS_GPADC

BSS_RAMPGEN

BU

S_M

AT

RIX

DSS_CBUFF

DSS_CQ

BU

S_M

AT

RIX

MSS_DMA, MSS_DMA2

MAILBOX

PADRING, MSS_IOMUX

TEST, DEBUG

DSS_L3RAM

MSS_MIBSPIA, MSS_MIBSPIB

MSS_QSPI

MSS_CRC, MSS_ESM

BSS_ANA

BSS_FFT

I2C, MSS_SCIA

MSS_GIO, MSS_GPCFG_REG

MSS_ETPWM1, MSS_ETPWM2,

MSS_ETPWM3

DSS_SCI, TEST

PROGFILT

FREQ_MON

BSS_RCM

BSS_DCC,

BSS_CCC

BSS_SCI, TEST,

DSS_CP, DSS_BPM

DSS_TPTC0, DSS_TPTC1,

DSS_TPCC1

DSS_ADCBUF

MSS_SCIB, DEBUG

MSS_TOPRCM

BU

S_M

AT

RIX

BSS_DFE_CQ

BSS_DFE_STC

MSS_RCM

BU

S_M

AT

RIX

DSS_REG, DSS_REG2

BSS_UDMA

BSS_GPCFG_RE

G

BSS_SEQ_EXT

N

CORTEXR4F

MSS_VIM

MSS_RTIB, MSS_CCCB

(Watchdog)

MSS_TCM

A_RAM

MSS_TC

MB_RAM

MSS_TC

MA_ROM

MSS_STC

MSS_CortexR4F_WRAPPER

CORTEXR4F

BSS_VIM

BSS_RTI (Watchdog)

BSS_TCM

A_RAM

BSS_TCM

B_RAM

BSS_TC

MA_ROM

BSS_CCM

R4

BSS_CR4

_STC

BSS_CortexR4F_WRAPPER RX TX

RE

GS

BSS_

DFE

FRC

FUSEROM0

CSI2

BSS_CRC,

BSS_ESM

BSS_FUSE_SRE

G

MSS_RTIA MSS_DCCA, MSS_DCCB,

MSS_CCCA

Master Subsystem

DSP Subsystem

TOP Subsystem Radar Subsystem LVDS

RF/Analog Subsystem

SLICER/

XO

Crystal

RX x4

TEMP

_SENS GPADC

REF+LDO

LODIST

WAKEUP

To

DFE

PA PS

SYNTH X4

FM_CW_SYNCIN

FM_CW_SYNCOUT

APLL PA PS

PA PS

LNA ADC

MIXER,

IQGEN

LNA ADC

LNA ADC

LNA ADC

PM

IFA1,2

TX x3

Power

• Internal VMON, Temp Sensor

Clock

• DCC , Internal & External Watchdog

• APLL Lock Detection

RF / Analog Modules

• Internal Analog Signal Monitoring

• PLL Control VMON

• TX Internal

• RX Internal

• PM, CLK & LO

• GPADC Monitoring

• External Analog Signals Monitoring

• Temperature Sensors

• TX Power Monitoring

• TX Ball Break Monitoring

• RX Loopback Test

• RX Gain, Phase & Noise Monitoring

• RX IF Loopback Test

• Synthesizer Chirp Freq Monitoring

• BSS Clock Monitoring

• RX Saturation Detector & Monitoring

• TX Loopback Test

• Analog Fault Injection

Page 12: Enabling Functional Safety for mmWave Sensors

12

Safety Critical Functions

BSS_GPADC

BSS_RAMPGEN

BU

S_M

AT

RIX

DSS_CBUFF

DSS_CQ

BU

S_M

AT

RIX

MSS_DMA, MSS_DMA2

MAILBOX

PADRING, MSS_IOMUX

TEST, DEBUG

DSS_L3RAM

MSS_MIBSPIA, MSS_MIBSPIB

MSS_QSPI

MSS_CRC, MSS_ESM

BSS_ANA

BSS_FFT

I2C, MSS_SCIA

MSS_GIO, MSS_GPCFG_REG

MSS_ETPWM1, MSS_ETPWM2,

MSS_ETPWM3

DSS_SCI, TEST

PROGFILT

FREQ_MON

BSS_RCM

BSS_DCC,

BSS_CCC

BSS_SCI, TEST,

DSS_CP, DSS_BPM

DSS_TPTC0, DSS_TPTC1,

DSS_TPCC1

DSS_ADCBUF

MSS_SCIB, DEBUG

MSS_TOPRCM

BU

S_M

AT

RIX

BSS_DFE_CQ

BSS_DFE_STC

MSS_RCM

BU

S_M

AT

RIX

DSS_REG, DSS_REG2

BSS_UDMA

BSS_GPCFG_RE

G

BSS_SEQ_EXT

N

CORTEXR4F

MSS_VIM

MSS_RTIB, MSS_CCCB

(Watchdog)

MSS_TCM

A_RAM

MSS_TC

MB_RAM

MSS_TC

MA_ROM

MSS_STC

MSS_CortexR4F_WRAPPER

CORTEXR4F

BSS_VIM

BSS_RTI (Watchdog)

BSS_TCM

A_RAM

BSS_TCM

B_RAM

BSS_TC

MA_ROM

BSS_CCM

R4

BSS_CR4

_STC

BSS_CortexR4F_WRAPPER RX TX

RE

GS

BSS_

DFE

FRC

FUSEROM0

CSI2

BSS_CRC,

BSS_ESM

BSS_FUSE_SRE

G

MSS_RTIA MSS_DCCA, MSS_DCCB,

MSS_CCCA

Master Subsystem

DSP Subsystem

TOP Subsystem Radar Subsystem LVDS

RF/Analog Subsystem

SLICER/

XO

Crystal

RX x4

TEMP

_SENS GPADC

REF+LDO

LODIST

WAKEUP

To

DFE

PA PS

SYNTH X4

FM_CW_SYNCIN

FM_CW_SYNCOUT

APLL PA PS

PA PS

LNA ADC

MIXER,

IQGEN

LNA ADC

LNA ADC

LNA ADC

PM

IFA1,2

TX x3

DFE Filters • Boot time PBIST & LBIST

• Parity

Ramp Generation • Boot Time PBIST of Chirp RAM’s

• ECC on RAM

• Lock Step for Sequencer Logic

• Periodic SW Read back of Config Reg.

• SW read back of written configuration

BSS Microcontroller Element • Boot time LBIST – CPU , VIM

• Boot time PBIST – TCM , VIM

• E2E ECC – TCM , VIM

• Redundant Address Decode

• MPU, PMU

• Illegal Operation & Instruction Trapping

• Periodic SW read back of Config Reg

• Internal Watchdog

ADC BUFFS • Boot Time PBIST

• ECC on RAM

Page 13: Enabling Functional Safety for mmWave Sensors

13

Safety Critical Functions

BSS_GPADC

BSS_RAMPGEN

BU

S_M

AT

RIX

DSS_CBUFF

DSS_CQ

BU

S_M

AT

RIX

MSS_DMA, MSS_DMA2

MAILBOX

PADRING, MSS_IOMUX

TEST, DEBUG

DSS_L3RAM

MSS_MIBSPIA, MSS_MIBSPIB

MSS_QSPI

MSS_CRC, MSS_ESM

BSS_ANA

BSS_FFT

I2C, MSS_SCIA

MSS_GIO, MSS_GPCFG_REG

MSS_ETPWM1, MSS_ETPWM2,

MSS_ETPWM3

DSS_SCI, TEST

PROGFILT

FREQ_MON

BSS_RCM

BSS_DCC,

BSS_CCC

BSS_SCI, TEST,

DSS_CP, DSS_BPM

DSS_TPTC0, DSS_TPTC1,

DSS_TPCC1

DSS_ADCBUF

MSS_SCIB, DEBUG

MSS_TOPRCM

BU

S_M

AT

RIX

BSS_DFE_CQ

BSS_DFE_STC

MSS_RCM

BU

S_M

AT

RIX

DSS_REG, DSS_REG2

BSS_UDMA

BSS_GPCFG_RE

G

BSS_SEQ_EXT

N

CORTEXR4F

MSS_VIM

MSS_RTIB, MSS_CCCB

(Watchdog)

MSS_TCM

A_RAM

MSS_TC

MB_RAM

MSS_TC

MA_ROM

MSS_STC

MSS_CortexR4F_WRAPPER

CORTEXR4F

BSS_VIM

BSS_RTI (Watchdog)

BSS_TCM

A_RAM

BSS_TCM

B_RAM

BSS_TC

MA_ROM

BSS_CCM

R4

BSS_CR4

_STC

BSS_CortexR4F_WRAPPER RX TX

RE

GS

BSS_

DFE

FRC

FUSEROM0

CSI2

BSS_CRC,

BSS_ESM

BSS_FUSE_SRE

G

MSS_RTIA MSS_DCCA, MSS_DCCB,

MSS_CCCA

Master Subsystem

DSP Subsystem

TOP Subsystem Radar Subsystem LVDS

RF/Analog Subsystem

SLICER/

XO

Crystal

RX x4

TEMP

_SENS GPADC

REF+LDO

LODIST

WAKEUP

To

DFE

PA PS

SYNTH X4

FM_CW_SYNCIN

FM_CW_SYNCOUT

APLL PA PS

PA PS

LNA ADC

MIXER,

IQGEN

LNA ADC

LNA ADC

LNA ADC

PM

IFA1,2

TX x3

MSS Microcontroller Element • Boot time LBIST – CPU , VIM

• Boot time PBIST – TCM , VIM

• E2E ECC – TCM , VIM

• Redundant Address Decode

• MPU, PMU

• Illegal Operation & Instruction Trapping

• Periodic SW read back of Config Reg

• Internal Watchdog

DMA • SRAM Data Parity

• Boot Time PBIST

• Periodic SW Read back of Config Reg.

• SW Watchdog Timer

• MPU, Non-Privileged Bus Master Access

IPC • CRC, ECC on SRAM

• Error Monitoring (ACK, Stuff, Form & Bit)

SPI • End to End Staffing, using CRC.

• Error Signal Monitoring.

IO

ESM

Page 14: Enabling Functional Safety for mmWave Sensors

Agenda • mmWave Device Introduction

• mmWave Functional Safety Concept

• Safety Features in mmWave devices

– Analog/RF modules with in-built monitors

– Digital modules

• Customer Safety Enablers

• SDL (Software Diagnostics Library)

• FMEA / FMEDA

• Monitoring Application notes

• Safety Manual

• TUV Functional Safety Certificates and assessment reports

• Q&A

14

Page 15: Enabling Functional Safety for mmWave Sensors

Safety Features in mmWave devices

15

TI Information – Selective Disclosure

Page 16: Enabling Functional Safety for mmWave Sensors

Analog/RF And Digital Monitoring

• RF/Analog monitoring is an important aspect to consider in the context of

Safety.

• mmWave device include hardware and firmware elements to enable monitoring

of its analog and digital sections.

• These built-in features are exposed to users through firmware APIs.

• Help users build their software to program and use these APIs to achieve their

end-product’s safety goals.

• The APIs offer a high amount of programmability:

– The built-in monitoring features the customer wants the device to execute

– The periodicity of such execution

– The verbosity of the monitor reports,

– Measurement comparison thresholds the device should use in reporting.

Page 17: Enabling Functional Safety for mmWave Sensors

Analog/RF and Digital Monitor Supported

Key monitors in mmwave devices include:

RX Gain/phase monitor

IF stages monitor

TX power monitors

TX ball break detection

Synth (chirp) frequency error monitor

Clock monitors

Temperature sensors

Internal signals monitors

17

TI Information – Selective Disclosure

Page 18: Enabling Functional Safety for mmWave Sensors

Programming of Monitors

18

Page 19: Enabling Functional Safety for mmWave Sensors

Monitoring Concept/Scheduling

19

Page 20: Enabling Functional Safety for mmWave Sensors

Common Configuration Messages

• Setting the CALIB_MON_TIME_UNIT

– The periodicity of monitoring is configured by setting the calibration and monitoring

time unit using “AWR_CALIB_MON_TIME_UNIT_CONF_SB”.

• Analog Monitors Configuration

– The set of analog monitors to execute cyclically at this periodicity is configurable

through “AWR_MONITOR_ANALOG_ENABLES_CONF_SB”

• Digital Monitor Configuration

– The consolidated configuration of all the digital monitoring is done using

AWR_MONITOR_RF_DIG_LATENTFAULT_CONF_SB.

20

Page 21: Enabling Functional Safety for mmWave Sensors

RX Gain, Phase Monitoring

• API

– AWR_MONITOR_RX_GAIN_PHASE_CONF_SB

• Thresholds

– Tolerable thresholds for deviation of gain from the programmed value and the

imbalances in gain and phase.

• Monitoring Report

– AWR_MONITOR_RX_GAIN_PHASE_REPORT_AE_SB.

• Report

– Measured RX gain and phase values of receivers across RF frequencies

21

Page 22: Enabling Functional Safety for mmWave Sensors

RX IF Stage Monitor

• API

– AWR_MONITOR_RX_IFSTAGE_CONF_SB

• Thresholds

– tolerable gain error and cutoff frequency error (thresholds).

• Monitoring Report

– AWR_MONITOR_RX_IFSTAGE_REPORT_AE_SB.

• Report

– Measured RX IF amplifier gain and cutoff frequency errors.

22

Page 23: Enabling Functional Safety for mmWave Sensors

TX Power Monitoring

• API

– AWR_MONITOR_TXn_POWER_CONF_SB (TXn)

• Thresholds

– Absolute Power and the flatness

• Monitoring Report

– AWR_MONITOR_TXn_POWER_REPORT_AE_SB (TXn)

• Report

– The measured TX power for each enabled channel at each enabled RF frequency.

23

Page 24: Enabling Functional Safety for mmWave Sensors

TX Ball Break Monitoring

• API

– AWR_CAL_MON_FREQUENCY_TX_POWER_LIMITS_SB

– AWR_MONITOR_TXn_BALLBREAK_CONF_SB(TXn)

• Thresholds

– Maximum allowable threshold for the TX reflection coefficient

• Monitoring Report

– AWR_MONITOR_TXn_BALLBREAK_REPORT_AE_SB (TXn)

• Report

– Status of the ball-break. TX ball breaks are assumed to result in a high degradation in

the reflection coefficient.

24

Page 25: Enabling Functional Safety for mmWave Sensors

PM, CLK, and LO Systems Internal Analog Signals Monitoring • API

– AWR_MONITOR_PMCLKLO _INTERNAL_ANALOG_SIGNALS_CONF_SB

• Thresholds

– 20G signal min and max threshold.(In case of Cascade Configuration)

• Monitoring Report

– AWR_MONITOR_PMCLKLO_INTERNAL_ANALOG_SIGNALS_REPORT_AE_SB

• Report

– Supply voltage/DCBIAS of the PM, CLK, LO distribution circuits

25

Page 26: Enabling Functional Safety for mmWave Sensors

TX and RX Internal Analog Signals Monitoring

• API

– AWR_MONITOR_TXn_INTERNAL_ANALOG_SIGNALS_CONF_SB(for TXn)

– AWR_MONITOR_RX_INTERNAL_ANALOG_SIGNALS_CONF_SB (for all RXs)

• Thresholds

– Phase shifter DAC monitor delta threshold.

• Monitoring Report

– AWR_MONITOR_TXn_INTERNAL_ANALOG_ SIGNALS_REPORT_AE_SB(For

TXn)

– AWR_MONITOR_RX_INTERNAL_ANALOG_ SIGNALS_REPORT_AE_SB (for all

RXs)

• Report

– Status flags indicating the supply voltage failures

26

Page 27: Enabling Functional Safety for mmWave Sensors

PLL Control Voltage Monitoring

• API

– AWR_MONITOR_PLL_CONTROL_VOLTAGE_SIGNALS_CONF_SB

• Thresholds

– None

• Monitoring Report

– AWR_MONITOR_PLL_CONTROL_VOLTAGE REPORT_AE_SB

• Report

– Measured control voltage values and failure flags

27

Page 28: Enabling Functional Safety for mmWave Sensors

Synthesizer Frequency Monitoring

• API

– AWR_MONITOR_SYNTHESIZER_FREQUENCY_CONF_SB

• Thresholds

– Tolerable frequency error

• Monitoring Report

– AWR_MONITOR_SYNTHESIZER_FREQUENCY_REPORT_AE_SB

• Report

– Number of threshold violations in a monitoring duration and maximum frequency error

during the monitoring duration

28

Page 29: Enabling Functional Safety for mmWave Sensors

DCC-Based Clock Frequency Monitoring

• API

– AWR_MONITOR_DUAL_CLOCK_COMP_CONF_SB

• Thresholds

– None

• Monitoring Report

– AWR_MONITOR_DUAL_CLOCK_COMP_REPORT_AE_SB

• Report

– Measured clock frequency from the enabled clock pairs

29

Page 30: Enabling Functional Safety for mmWave Sensors

Monitoring in Cascaded Configuration

• In Cascaded application, monitoring execution in one device may interfere with

those executing in another device

– Simultaneous execution of the non-interfering monitors

– Time Division and Frequency Division based separation of mutually interfering

monitors among the cascaded AWR devices.

• Categorization of Monitors

– Type 1

• These are predominantly non-transmitting(TX is Off) monitors.

– Type 2

• These are monitors that transmit but don’t receive any test signal through RX LNA.

– Type 3

• These are monitors that transmit and receive test signal through the RX LNA and are

susceptible to interference .

30

Page 31: Enabling Functional Safety for mmWave Sensors

Host-based monitoring scheduling for cascaded applications

31

Page 32: Enabling Functional Safety for mmWave Sensors

Agenda

• mmWave Device Introduction

• mmWave Functional Safety Concept

• Safety Features in mmWave devices

– Analog/RF modules with in-built monitors

– Digital modules

• Customer Safety Enablers

• SDL (Software Diagnostics Library)

• FMEA / FMEDA

• Monitoring Application notes

• Safety Manual

• TUV Functional Safety Certificates and assessment reports

• Q&A

32

Page 33: Enabling Functional Safety for mmWave Sensors

Customer Safety Enablers

33

TI Information – Selective Disclosure

Page 34: Enabling Functional Safety for mmWave Sensors

Safety Diagnostics Library(SDL)

• SDL is a collection of functions for access to safety functions and response

handlers for various safety mechanisms for TI mmWave sensors.

• Diagnostic runs in the context of the caller's protection environment and all

responses are handled in the context of interrupt or exception.

• It implements diagnostic mechanism that are indicated in the device safety

manual.

• The SDL is provided to customers in source code form.(.c and .h) along with the

quality artifacts(Compliance Support Package)

• Released via mySecureSoftware .

Page 35: Enabling Functional Safety for mmWave Sensors

FMEDA worksheet

Detailed Safety Analysis Report

• Assumptions of use applied in calculation of safety metrics

• Summary of IEC 61508 or ISO 26262 standard safety metrics at

the AWR Device component level

• A fault model used to estimate device failure rates and an

example of customizing this model for use with the example

application.

• FMEDA with details to the sub-module level of the Device, that

enables calculation of safety metrics based on customized

application of diagnostics

• Use of FMEDA worksheet

• FIT Estimation sheet to tailor use conditions

• Product Function Tailoring sheet to select AWR modules used

in safety function

• Pin Level Tailoring sheet to select AWR pins used in safety

function

• Safety Mechanism Tailoring sheet to select applied Safety

mechanisms

• Summary and Details-ISO26262 or IEC61508 sheets to

determine if AWR and modules safety metrics are met.

Available under Safety NDA

Page 36: Enabling Functional Safety for mmWave Sensors

• An overview of the safety architecture for management of

random failures

• The details of architecture partitions, implemented safety

mechanisms, and recommended usage

• Failure modes and failure rates

• Use Diagnostics Mechanism Summary Table to determine

applicable safety mechanisms by AWR module such as

modules in Safe Island region, RF Analog, SPI, CAN, etc.

with API Level details

36

Safety Manual

Provided under Safety

NDA

mmWave Devices

Page 37: Enabling Functional Safety for mmWave Sensors

Monitoring Application Notes

• This application note aims to help customers build their software to program and

use these APIs to achieve their end-product’s safety goals.

• This application note describes these monitoring mechanisms, explains the

programming options offered by the APIs.

• Illustrates example post-processing of the monitoring reports produced by these

APIs, and illustrates the reports in example programming conditions in TI’s

internal labs.

• Shared with customers under Safety NDA and via the mySecureSoftware Link.

37

TI Information – Selective Disclosure

SPRACN8: Using Monitoring Features in TI mmWave Radar Devices

Page 38: Enabling Functional Safety for mmWave Sensors

Agenda

• mmWave Device Introduction

• mmWave Functional Safety Concept

• Safety Features in mmWave devices

– Analog/RF modules with in-built monitors

– Digital modules

• Customer Safety Enablers

• SDL (Software Diagnostics Library)

• FMEA / FMEDA

• Monitoring Application notes

• Safety Manual

• TUV Functional Safety Certificates and assessment reports

• Q&A

38

Page 39: Enabling Functional Safety for mmWave Sensors

Q&A

39

TI Information – Selective Disclosure

Page 40: Enabling Functional Safety for mmWave Sensors
Page 41: Enabling Functional Safety for mmWave Sensors

SLYP674

Page 42: Enabling Functional Safety for mmWave Sensors

IMPORTANT NOTICE AND DISCLAIMER

TI PROVIDES TECHNICAL AND RELIABILITY DATA (INCLUDING DATASHEETS), DESIGN RESOURCES (INCLUDING REFERENCE DESIGNS), APPLICATION OR OTHER DESIGN ADVICE, WEB TOOLS, SAFETY INFORMATION, AND OTHER RESOURCES “AS IS” AND WITH ALL FAULTS, AND DISCLAIMS ALL WARRANTIES, EXPRESS AND IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT OF THIRD PARTY INTELLECTUAL PROPERTY RIGHTS.These resources are intended for skilled developers designing with TI products. You are solely responsible for (1) selecting the appropriate TI products for your application, (2) designing, validating and testing your application, and (3) ensuring your application meets applicable standards, and any other safety, security, or other requirements. These resources are subject to change without notice. TI grants you permission to use these resources only for development of an application that uses the TI products described in the resource. Other reproduction and display of these resources is prohibited. No license is granted to any other TI intellectual property right or to any third party intellectual property right. TI disclaims responsibility for, and you will fully indemnify TI and its representatives against, any claims, damages, costs, losses, and liabilities arising out of your use of these resources.TI’s products are provided subject to TI’s Terms of Sale (www.ti.com/legal/termsofsale.html) or other applicable terms available either on ti.com or provided in conjunction with such TI products. TI’s provision of these resources does not expand or otherwise alter TI’s applicable warranties or warranty disclaimers for TI products.

Mailing Address: Texas Instruments, Post Office Box 655303, Dallas, Texas 75265Copyright © 2020, Texas Instruments Incorporated