SM CODE
ADC_SM_0
Addressed fault model
Refer to NVIC_SM_0
Dependency on
Device
configuration
Refer to NVIC_SM_0
Initialization
Refer to NVIC_SM_0
Periodicity
Refer to NVIC_SM_0
Test for the diagnostic
Refer to NVIC_SM_0
Multiple-fault protection
Refer to NVIC_SM_0
Recommendations and known limitations
Refer to NVIC_SM_0
Table 73.
ADC_SM_1
SM CODE
ADC_SM_1
Description
Multiple acquisition by
Application software
Ownership
End user
Detailed implementation
This method implements a timing information redundancy by executing multiple acquisitions
on the same input signal. Multiple acquisition data are then combined by a filter algorithm to
determine the signal correct value.
Error reporting
Depends on implementation
Fault detection time
Depends on implementation
Addressed fault model
Depends on implementation
Dependency on
Device
configuration
None
Initialization
Depends on implementation
Periodicity
Continuous
Test for the diagnostic
Not applicable
Multiple-fault protection
CPU_SM_0: Periodic core self-test software
Recommendations and known limitations
It is highly probable that this recommendation is satisfied by design by
End userApplication
software
. Usage of multiple acquisitions followed by average operations is a common
technique in industrial applications exposed to electromagnetic interference on sensor lines.
Table 74.
ADC_SM_2
SM CODE
ADC_SM_2
Description
Range check by
Application software
Ownership
End user
Detailed implementation
The guidelines for the implementation of the method are the following:
•
The expected range of the data to be acquired are investigated and adequately
documented. Note that in a well-designed application it is improbable that during
normal operation an input signal has a very near or over the upper and lower rail limit
(saturation in signal acquisition).
•
If
Application software
is aware of the state of the system, this information is to be used
in the range check implementation. For example, if the ADC value is the measurement
of a current through a power load, reading an abnormal value such as a current flowing
in opposite direction versus the load supply may indicate a fault in the acquisition
module.
•
As the ADC module is shared between different possible external sources, the
combination of plausibility checks on the different signals acquired can help to cover
the whole input range in a very efficient way.
Error reporting
Depends on implementation
Fault detection time
Depends on implementation
UM2305
Hardware and software diagnostics
UM2305
-
Rev 10
page 46/110