SFFS508 September   2022 AFE881H1

 

  1.   Trademarks
  2. 1Overview
  3. 2Functional Safety Failure In Time (FIT) Rates
  4. 3Failure Mode Distribution (FMD)
  5. 4Pin Failure Mode Analysis (Pin FMA)

Pin Failure Mode Analysis (Pin FMA)

This section provides a failure mode analysis (FMA) for the pins of the AFE881H1. The failure modes covered in this document include the typical pin-by-pin failure scenarios:

Table 4-2 through Table 4-5 also indicate how these pin conditions can affect the device as per the failure effects classification in Table 4-1.

Table 4-1 TI Classification of Failure Effects
ClassFailure Effects
APotential device damage that affects functionality.
BNo device damage, but loss of functionality.
CNo device damage, but performance degradation.
DNo device damage, no impact to functionality or performance.

Figure 4-1 shows the AFE881H1 pin diagram. For a detailed description of the device pins, see the Pin Configuration and Functions section in the AFE881H1 data sheet.

Figure 4-1 Pin Diagram

Following are the assumptions of use and the device configuration assumed for the pin FMA in this section:

  • At least two SPI devices are present on the SPI bus.
  • VDD and IOVDD use the same supply voltage.
  • 'Short circuit to GND' means short to GND = REF_GND.
  • 'Short circuit to Power' means short to PVDD = IOVDD = 3.3 V.
Table 4-2 Pin FMA for Device Pins Short-Circuited to Ground
Pin Name Pin No. Description of Potential Failure Effects Failure Effect Class
UARTIN 1 UARTIN forced low. No UART communication to the device. SPI communication is possible. B
UARTOUT 2 UARTOUT forced low. No UART communication from the device. SPI communication is possible. An increase in supply current can be observed. Device damage is possible if UARTOUT is connected to ground for an extended period of time. A
CD 3 CD pin forced low. Shorting pin to ground can increase supply current, and carrier detection is not functional. Device damage is possible if the pin is connected to ground for an extended period of time. HART communication is not functional. A
RTS 4 RTS pin forced low. HART communication is not functional. B
REF_EN 5 REF_EN forced low. The internal reference is not enabled, and the device does not have the proper output if the internal reference is used. The device operates normally if an external reference is used. B
RESET 6 RESET is forced low. The device is held in reset and is not functional. B
SCLK 7 SCLK forced low. No SPI communication with the device. UART communication is possible. B
SDI 8 SDI forced low. No SPI communication to the device. UART communication is possible. B
SDO 9 SDO forced low. No SPI communication from the device. UART communication is possible. An increase in supply current can be observed. Device damage is possible if SDO is connected to ground for an extended period of time. A
CS 10 CS forced low. No SPI communication with the device. UART communication is possible. B
CLK_OUT 11 CLK_OUT forced low; internal oscillator disabled. If internal oscillator is disabled, CLK_OUT pin appears as Hi-Z, and the device operates normally. D
CLK_OUT forced low; internal oscillator enabled. Increase in supply current when CLK_OUT is enabled. Device damage is possible if CLK_OUT is enabled for an extended period of time. A
IOVDD 12 IOVDD supply grounded. The device is not powered and not functional. Verify that the absolute maximum ratings for all pins of the device are met; otherwise, device damage is possible. A
VDD 13 VDD supply grounded. The device is not functional. The internal LDO is shorted to ground. Shorting pin to ground can increase supply current. Device damage is possible if the pin is connected to ground for an extended period of time. A
GND 14 No effect. Normal operation. D
AIN0 15 AIN0 forced low. Conversion results for ADC0 are incorrect. B
POL_SEL/AIN1 16 POL_SEL/AIN1 forced low; ADC SPECIAL_CFG.AIN1_ENB set to 1. Conversion results for AIN1 are incorrect. B
POL_SEL/AIN1 forced low; ADC SPECIAL_CFG.AIN1_ENB set to 0. POL_SEL can be set to the wrong polarity depending on the selected DAC VOUT alarm voltage (ALMV_POL). B
PVDD 17 PVDD supply grounded. The device is not powered and not functional. Verify that the absolute maximum ratings for all pins of the device are met; otherwise, device damage is possible. A
VOUT 18 VOUT forced low. DAC output is shorted and not functional. Shorting the pin to ground can increase supply current. B
VREFIO 19 VREFIO forced low; internal reference disabled, external reference connected. The DAC output is incorrect and not functional. B
VREFIO forced low; internal reference enabled. Shorting the pin to ground can increase supply current. Device damage is possible if the internal reference is enabled and VREFIO is connected to ground for an extended period of time. A
REF_GND 20 No effect. Normal operation. D
RX_IN 21 RX_IN pin forced low. HART communication can be disrupted or not functional. B
RX_INF 22 RX_INF pin forced low. HART communication can be disrupted or not functional. B
MOD_OUT 23 MOD_OUT pin forced low. Shorting the pin to ground can increase supply current. HART communication is not functional. Device damage is possible if pin is connected to GND for an extended period of time. A
ALARM 24 ALARM pin forced low. Pin is not functional. B
Table 4-3 Pin FMA for Device Pins Open-Circuited
Pin Name Pin No. Description of Potential Failure Effects Failure Effect Class
UARTIN 1 UARTIN input is undetermined. No UART communication to the device. SPI communication is possible. B
UARTOUT 2 UARTOUT output is undetermined. No UART communication from the device. SPI communication is possible. B
CD 3 CD output is undetermined. HART communication is not functional. B
RTS 4 RTS output undetermined. HART communication is not functional. B
REF_EN 5 REF_EN input is undetermined; external reference not connected. Device functionality is undetermined. The reference can operate normally or be disabled. B
REF_EN input is undetermined; external reference connected. Device damage is possible if an external reference drives VREFIO. A
RESET 6 RESET input is undetermined. Device functionality is undetermined. The device can operate normally or be held in reset. B
SCLK 7 SCLK input is undetermined. No SPI communication with the device. UART communication is possible. B
SDI 8 SDI input is undetermined. No SPI communication to the device. UART communication is possible. B
SDO 9 SDO output is undetermined. No SPI communication from the device. UART communication is possible. B
CS 10 CS input is undetermined. No SPI communication with the device. UART communication is possible. B
CLK_OUT 11 CLK_OUT is unconnected. The device operates normally but the oscillator clock is not available. B
IOVDD 12 IOVDD supply is unconnected. The device is not powered and not functional if all external digital pins are held low. The device can power up through internal ESD diodes to IOVDD if voltages greater than the power-on reset threshold of the device are present on any of the digital pins. Device functionality is undetermined. B
VDD 13 Output of LDO is unconnected. Without connection to capacitor, output can oscillate and device functionality is undetermined. B
GND 14 Device functionality is undetermined. The device can be unpowered or connected to ground internally to be powered. B
AIN0 15 AIN0 input is undetermined. The conversion results of ADC0 are undetermined. B
POL_SEL/AIN1 16 ADC SPECIAL_CFG.AIN1_ENB set to 1. The conversion results of AIN1 are undetermined. B
ADC SPECIAL_CFG.AIN1_ENB set to 0. The POL_SEL input is undetermined. POL_SEL can be set to the wrong polarity depending on the selected DAC VOUT alarm voltage (ALMV_POL). B
PVDD 17 PVDD supply is unconnected. The device is not powered and not functional if all external pins are held low. The device can power up through internal ESD diodes to PVDD if voltages greater than the power-on reset threshold of the device are present on any of the digital pins. Device functionality is undetermined. B
VOUT 18 VOUT is unconnected. DAC output floating. B
VREFIO 19 VREFIO is unconnected. With internal reference enabled, output can oscillate without load capacitance. B
VREFIO is unconnected. When using an external reference, the DAC reference is disconnected. The DAC output is incorrect. B
REF_GND 20 REF_GND is unconnected. The device reference does not set to proper voltage. The DAC output is incorrect. B
RX_IN 21 If RX_IN is the intended HART input, then the RX_IN output is undetermined. HART communication is not functional. B
If RX_INF is the intended HART input, then RX_IN is left open-circuited. The device operates normally. D
RX_INF 22 If RX_IN is the intended HART input, then the required 680-pF capacitor for RX_INF to GND is unconnected. HART communication is not functional. B
If RX_INF is the intended HART input, then RX_INF is unconnected. HART communication is not functional. B
MOD_OUT 23 MOD_OUT is unconnected. HART communication is not functional. B
ALARM 24 ALARM is unconnected. No ALARM communication back to controller is possible. B
Table 4-4 Pin FMA for Device Pins Short-Circuited to Adjacent Pin
Pin Name Pin No. Shorted to Description of Potential Failure Effects Failure Effect Class
UARTIN 1 UARTOUT UART communication contention. SPI communication is possible. An increase in supply current can be observed if the driver of UARTIN drives UARTOUT. Device damage is possible if connected for an extended period of time. A
UARTOUT 2 CD Contention between UARTOUT pin and CD pin. HART and UART communication can be disrupted or not functional. Device damage is possible if connected for an extended period of time. A
CD 3 RTS Contention between CD pin and RTS pin. HART communication can be disrupted or not functional. Device damage is possible if connected for an extended period of time. A
RTS 4 REF_EN Contention between RTS pin and REF_EN pin. HART communication can be disrupted or not functional. DAC output can be incorrect. B
REF_EN 5 RESET REF_EN undetermined; internal reference intended. The device operates normally with the RESET pin set high. Reference is disabled as RESET is set low. B
REF_EN undetermined; external reference connected. An external reference can damage the device if connected to VREFIO for an extended period of time. A
RESET 6 SCLK SPI communication corrupted. No SPI communication with the device. UART communication is possible. B
SCLK 7 SDI SPI communication corrupted. No SPI communication with the device.UART communication is possible. B
SDI 8 SDO SPI communication corrupted. No SPI communication with the device. UART communication is possible. An increase in supply current can be observed if the driver of SDI drives SDO. Device damage is possible if connected for an extended period of time. A
SDO 9 CS SPI communication corrupted. No SPI communication with the device. UART communication is possible. An increase in supply current can be observed if the driver of CS drives SDO. Device damage is possible if connected for an extended period of time. A
CS 10 CLK_OUT CLK_OUT disabled. The CLK_OUT pin appears as Hi-Z and does not interfere with CS and SPI communication. D
CLK_OUT enabled. SPI communication corrupted. No SPI communication with the device. UART communication is possible. An increase in supply current can be observed if the driver of CS drives CLK_OUT. Device damage is possible if connected for an extended period of time. A
CLK_OUT 11 IOVDD CLK_OUT disabled. The CLK_OUT pin appears as Hi-Z and does not interfere with IOVDD. D
CLK_OUT enabled. An increase in supply current is possible when CLK_OUT tries to drive low against IOVDD. Device damage is possible if connected for an extended period of time. A
IOVDD 12 VDD The device can be damaged when VDD is driven to a voltage beyond 2.2 V. A
VDD 13 GND The device is not functional. The internal LDO is shorted to ground. Shorting the pin to ground can increase supply current. Device damage is possible if the pin is connected to GND for an extended period of time. A
GND 14 AIN0 AIN0 forced low. Conversion results for AIN0 are incorrect. B
AIN0 15 POL_SEL/AIN1 AIN0 and POL_SEL/AIN1 voltages undetermined; SPECIAL_CFG.AIN1_ENB set to 1. Either or both ADC conversion results for AIN0 and AIN1 can be incorrect. B
AIN0 and POL_SEL/AIN1 voltages are undetermined; SPECIAL_CFG.AIN1_ENB is set to 0. POL_SEL can be set to the wrong polarity depending on the selected DAC VOUT alarm voltage (ALMV_POL). B
POL_SEL/AIN1 16 PVDD POL_SEL/AIN1 forced high; SPECIAL_CFG.AIN1_ENB set to 1. Conversion results for AIN1 are incorrect. B
POL_SEL/AIN1 forced high; ADC SPECIAL_CFG.AIN1_ENB set to 0. POL_SEL can be set to the wrong polarity depending on the selected DAC VOUT alarm voltage (ALMV_POL). B
PVDD 17 VOUT VOUT shorted to PVDD. DAC output is shorted and not functional. Shorting the pin to PVDD can increase supply current. Device damage is possible if connected for an extended period of time. A
VOUT 18 VREFIO DAC reference voltage and DAC output voltage are undetermined, and the DAC is not functional. Shorting VOUT to VREFIO can increase supply current. Device damage is possible if connected for an extended period of time. A
VREFIO 19 REF_GND VREFIO forced low; external reference connected. The DAC output is incorrect and not functional. B
VREFIO forced low; internal reference enabled. The DAC output is incorrect and not functional. Shorting the pin to ground can increase the supply current. Device damage is possible if the internal reference is enabled and the pin is connected to GND for an extended period of time. A
REF_GND 20 RX_IN RX_IN pin forced low. DAC output can be incorrect. HART communication is not functional. B
RX_IN 21 RX_INF Incorrect setup for HART input of the device. HART communication can be disrupted or not functional. B
RX_INF 22 MOD_OUT Contention between HART input and output. HART communication is not functional. Device damage is possible if pin is connected to GND for an extended period of time. A
MOD_OUT 23 ALARM Contention between MOD_OUT pin and ALARM pin. HART communication is not functional. ALARM indications are not functional. B
ALARM 24 UARTIN ALARM pin not functional and UART communication contention. SPI communication is possible. An increase in supply current can be observed if UARTIN pulls high and open-drain ALARM pulls low. Device damage is possible if connected for an extended period of time. A
Table 4-5 Pin FMA for Device Pins Short-Circuited to PVDD and IOVDD
Pin Name Pin No. Description of Potential Failure Effects Failure Effect Class
UARTIN 1 UARTIN forced high. No UART communication to the device. SPI communication is possible. B
UARTOUT 2 UARTOUT forced high. No UART communication from the device. SPI communication is possible. An increase in supply current can be observed. Device damage is possible if UARTOUT is connected to supply for extended period of time. A
CD 3 CD pin forced high. Shorting the pin to supply can increase the supply current. Device damage is possible if the pin is connected to supply for an extended period of time. A
RTS 4 RTS pin forced high. HART communication is not functional. B
REF_EN 5 REF_EN forced high. If the internal reference is selected, the device operates normally. D
REF_EN forced high. If external reference is connected, device damage is possible if external reference drives VREFIO. A
RESET 6 RESET is forced high. The device cannot be reset using the RESET pin, but operates normally. B
SCLK 7 SCLK forced high. No SPI communication with the device. UART communication is possible. B
SDI 8 SDI forced high. No SPI communication to the device. UART communication is possible. B
SDO 9 SDO forced high. No SPI communication from the device. UART communication is possible. An increase in supply current can be observed. Device damage is possible if SDO is connected to supply for an extended period of time. A
CS 10 CS forced high. No SPI communication with the device. UART communication is possible. The device operates normally when used in UART communication mode. B
CLK_OUT 11 CLK_OUT disabled. The CLK_OUT pin appears as Hi-Z and does not interfere with the supply. D
CLK_OUT enabled. An increase in supply current is possible when CLK_OUT tries to drive low against the supply. Device damage is possible if connected for an extended period of time. A
IOVDD 12 For this case, IOVDD = PVDD = 3.3 V. No effect. Normal operation. D
VDD 13 VDD driven to supply. The device can be damaged when VDD is driven to a voltage beyond 2.2 V. A
GND 14 GND tied to supply. The device is not powered and not functional. The supply can draw excessive current. Verify that the absolute maximum ratings for all pins of the device are met; otherwise, device damage is possible. A
AIN0 15 AIN0 forced high. The conversion results for ADC0 are incorrect. B
POL_SEL/AIN1 16 POL_SEL/AIN1 forced high; SPECIAL_CFG.AIN1_ENB set to 1. The conversion results for AIN1 are incorrect. B
POL_SEL/AIN1 forced high; SPECIAL_CFG.AIN1_ENB set to 0. POL_SEL can be set to the wrong polarity depending on the selected DAC VOUT alarm voltage (ALMV_POL). B
PVDD 17 No effect. Normal operation. D
VOUT 18 VOUT shorted to supply. The DAC output is shorted and not functional. Shorting the pin to supply can increase the supply current. B
VREFIO 19 VREFIO shorted to supply. The DAC output is not functional. Shorting the pin to supply can increase the supply current. Device damage is possible if the pin is connected to supply. A
REF_GND 20 REF_GND shorted to supply. The DAC is not functional. The supply can draw excessive current. Verify that the absolute maximum ratings for all pins of the device are met; otherwise, device damage is possible. A
RX_IN 21 RX_IN pin forced high. HART communication can be disrupted and not functional. Supply can draw excessive current. Device damage is possible if pin is connected to supply. A
RX_INF 22 RX_INF pin forced high. HART communication can be disrupted and not functional. Supply can draw excessive current. Device damage is possible if pin is connected to supply. A
MOD_OUT 23 MOD_OUT pin forced high. HART communication not functional. Supply can draw excessive current. Device damage is possible if pin is connected to supply. A
ALARM 24 ALARM pin forced high. The pin is not functional. Open-drain ALARM pin can be damaged during alarm if directly connected to PVDD. A