Zoom

HY-TTC 500 product family

Save as PDF

The HY-TTC 500 product family is a high-end electronic control solution equipped for upcoming needs. The controller with its powerful TMS570 dual-core lockstep CPU is designed for use in demanding safety-relevant automotive applications. The HY-TTC 580 and the HY-TTC 540 fulfill safety requirements up to SIL 2 (IEC 61508) / PL d (EN ISO 13849). They are part of a complete and compatible product family and can be programmed either in C or in Codesys® Safety SIL 2.

Key Benefits:

  • High performance: 32 bit dual-core lockstep CPU with 180 MHz and floating point unit, 12 bit ADCs
  • Extensive I/O set with multiple software configuration options per pin
  • Open programming environment C, Codesys® V3.x and Codesys® V3.x Safety SIL 2, SAFERTOS® Integration
  • IEC 61508 (SIL 2) and EN ISO 13849 (PL d) TÜV certified
  • Connectivity: Up to 7 CAN interfaces
  • Ethernet
  • Up to 2,3 MB RAM / 11 MB Flash

Flexibility and Usability:

The extensive I/O set with various configuration options makes the HY-TTC 500 controllers suitable for a wide range of high-end applications: For example, a group of 8 I/O pins can be individually configured for use as PVG output, voltage output, digital output or analog input. Commissioning time can be improved by using Ethernet for download and debugging purposes.

Safety:

A high percentage of the run-time tests that are needed to achieve the diagnostic coverage required for SIL 2 / PL d is performed in hardware by the dual-core lockstep CPU and its safety companion. This keeps much more processing power available for the application in comparison with solutions that implement the safety measures in software. The available memory protection mechanisms allow to execute safety and non-safety software on the same ECU without interference. The time-consuming validation of non-safety software is therefore no longer necessary. Safe data communication is achieved by the standardized CANopen® Safety protocol of the control units. In case of a safety-relevant failure, outputs can be shut off in 3 groups allowing limp-home functionality. The safety certified Codesys® Safety SIL 2 with its validated compiler and code generator speeds up application development significantly.

As an extension of the C-programming environment, the SAFERTOS® integration improves the traditional way of designing and writing an ECU application, allowing the split of the “main loop” user application into multiple working tasks that run until they are interrupted by a higher-priority task, blocked (waiting for an external event) or until a time limit expires. The real-time OS specific functionality has been extended with control application specific features, like run-time separation into safety-critical and other tasks, a monitoring concept for ensuring timely execution of all tasks and application task ownership of any HY-TTC 500 I/O port used. The efficient inter-task communication and synchronization mechanism using queue implementation permits data to be safely transferred between tasks.

Product Features (HY-TTC 580)

CPU core

  • 32 bit TI TMS570, ARM cortex-R4F based, dual-core lockstep CPU and memory protection for safety-relevant applications, 180 MHzHSM (Hardware Security Module)
  • 3 MB int. flash, 256 KB int. RAM, 2 MB ext. RAM
  • 8 MB ext. flash
  • 64 KB ext. EEPROM
  • Safety Companion

Interfaces:

  • 7 x CAN, up to 1 Mbit/s
  • 1 x Ethernet, up to 10 Mbit/s for download and debugging
  • 1 x RS-232
  • 1 x LIN serial interface

Sensor Supply:

  • 1 x sensor supply 5 - 10 V / max. 2,5 W / configurable by SW in 1 V steps
  • 2 x sensor supplies 5 V / max. 500 mA

RTC:

  • 1 x RTC

Internal:

  • Internal monitoring of board temperature, sensor supply and supply voltage Power-On via K15 or Wakeup-Pin

Software:

  • C-Programming / Codesys® Safety SIL 2 / Codesys®

Functional Safety:

  • IEC 61508 SIL 2
  • EN ISO 13849 PL d

For more information: https://www.ttcontrol.com/products/electronic-control-units/safety-certified-controllers/hy-ttc-500-family