The majority of run-time tests that is needed to achieve the diagnostic coverage required for SIL 2 / PL d is performed in hardware by the dual-core lockstep CPU and its safety companion. Therefore almost the full processor power is available for the application. The available memory protection mechanisms allows to execute safety and non-safety software on the same ECU without interference. The time-consuming validation of non-safe software is therefore no longer necessary. Safe data communication is achieved by the standardized CANopen Safety protocol. In case of safety-relevant failure outputs can be shut-off in 3 groups allowing limp-home functionality.
The extensive I/O set with various configuration options makes the HY-TTC 500 controllers suitable for a wide range of high-end applications: for example, a group of 8 I/O pins can be individually configured for use as voltage output, digital output or analogue input. Commissioning time can be improved by using Ethernet for download and debugging purposes.
Visit TTControl at www.ttcontrol.com