TTControl has designed the HY-TTC 500 product family as a high-end electronic control solution to satisfy needs for a wide range of applications, such as construction and agricultural machines. The freely programmable high-end controllers with a dual-core ARM Cortex-R4 lockstep processor are protected by a compact, automotive-style housing suited for harsh environments.
The controllers fulfill safety requirements up to SIL 2 (IEC 61508)/PL d (ISO 13849) and can be programmed either in C or in CODESYS. The safety certified CODESYS Safety SIL 2 speeds up application validation significantly, according to TTControl.
An extensive I/O set with various configuration options makes the HY-TTC 500 controllers suitable particularly adaptable. For example, a group of eight I/O pins can be individually configured for use as voltage output, digital output, or analog input. Another application is to build up a centralized architecture using one HY-TTC 500 controller for the whole vehicle. Commissioning time can be improved by using Ethernet for download and debugging purposes.
The majority of run-time tests that are needed to achieve the diagnostic coverage required for SIL 2/PL d is performed in the hardware by the dual-core lockstep CPU and its safety companion. Therefore, almost the full processor power is available for the application. The available memory protection mechanisms allow it to execute safety and non-safety software on the same ECU without interference. The time-consuming validation of non-safe software is therefore no longer necessary.
Safe data communication is achieved by the standardized CANopen safety protocol. In case of safety-relevant failure, outputs can be shut-off in three groups allowing limp-home functionality.