Inverter Safety Unit

Monitoring unit for safety-related electric drive systems

With the increasing electrification of the drive train, new components are playing a more and more important role in system safety. Supervising the torque generated by the electric motor is crucial. Even in case of a failure the torque must remain under control since most systems do not have a clutch or any other mechanism that could mechanically disconnect the electric motor from the wheels. With the Inverter Safety Unit (ISU), TTTech Automotive has developed a modular monitoring unit for inverters which continuously monitors the torque generated by the connected electric motor by evaluating the electrical signals. In case of failure, the ISU brings the system to the safe state via internal and external shut-down paths. Specialized Variation of TTC 90 Hardware The ISU is a hardware variation of TTC 90 that is specialized according to ISO/DIS 26262 ASIL C, and which has an XC2287M and HC908 CPU core. The safety control unit uses a special sensor system and innovative algorithms to calculate the actual moment and independently detect errors that could cause safety goals to be breached.

KEY FEATURES/BENEFITS 80 MHz CPU for continuous torque monitoring and shut-down decision Comprehensive self-diagnostics Permanent mutual monitoring of main CPU and watchdog CPU ISO 26262, ASIL C certifiable Complements existing drive train components (developed according to QM) Customer-specific integration possible

Self-Contained Monitoring Unit If the deviation between the target and the actual moment is too great, the safe state of the electric power train is entered through internal and external shut-off paths. The ISU can be integrated into the power train as a self-contained monitoring unit, or be integrated into the inverter itself.

Features 80 MHz CPU for torque monitoring and shut-down decision 4 current sensors (hall effect) 6 configurable outputs (for shut-down paths) 2 CAN-interfaces 1 FlexRay-channel (optional) Inputs 3 x voltage measurement of motor phases (up to 288 Vp) 3 x current measurement of motor phases (up to 700 Ap) 1 x current measurement of DC current (up to 700 A) 2 digital inputs (optional for quadrature signal) 2 analog inputs (optional) Functional Safety System consisting of inverter und Inverter Safety Unit: ISO 26262 ASIL C

Bus Interfaces 2 x CAN, up to 1 Mbit/s optional: 1 x FlexRay 10 Mbit/s System CPU Infineon 16/32-bit XC2287M main CPU with Memory Protection Unit, 80 MHz, 832 kB int. Flash, 58 kB int. RAM 8 kB EEPROM Freescale HC908 watchdog CPU Outputs 3 digital outputs up to 1 A, high-side switches for external shut-down paths 2 of them configurable as inputs (optional) ON/OFF or PWM capability 3 digital outputs for internal shut-down paths to inverter

TTTech Automotive contact information Headquarter Europe, Austria Tel.: +43 1 585 65 38-5000 E-Mail: products@tttech-automotive.com Germany Tel.: +49 8458 39 7603-0 E-Mail: products@tttech-automotive.com

www.tttech-automotive.com
Asien, Japan Tel.: +81 45 470 1867 E-Mail: products@tttech-automotive.com

Copyright TTTech Automotive GmbH. All rights reserved. All trademarks are the property of their respective holders. To the extent possible under applicable law, TTTech Automotive GmbH hereby disclaims any and all liability for the content and use of this flyer.