The L4969 is an integrated circuit containing 3 independent Voltage Regulators and a standard fault tolerant low speed CAN line interface in multipower
BCD3S process.
It integrat es all mai n l ocal functions for automot iv e body
electronic applications conn ected to a CAN bus.
Figure 1. Block Diagram
VS
V1
V2
V3
RX
TX
CANH
RTH
CANL
RTL
VREG 1
VREG 2
VREG 3
Fault tole ran t
low speed
CAN-transceiver
Watchdo g and
adjustable RC-O s cillator
Iden tifier Filter
Control and Status Memory
24 Bit SPI
NRESET
WAKE
NINT
SCLK
SIN
SOUT
August 2003
This is preliminary information on a new product now in development or undergoing evaluation. Details are subject to change without notice.
1/35
Page 2
L4969
Figure 2. Pin Connection
GND
V1
V2
V3
VS
CANH
RTL
CANL
RTH
GND
Table 1.
Pin Functions
Pin No. (PSO20)Pin No. (SO20)Pin Name Function
1, 10, 11, 205,6, 15, 16GNDPower Ground
27V1Microcontroller Supply Voltage
38V2Peripheral Supply Voltage
49V3Internal CAN Supply
510VSPower Supply
611CANHCANH Line Driver Output
712RTLCANL Termination Source
813CANLCANL Line Driver Output
914RTHCANH Termination Source
1217RXDAct. Low CAN Receive Dominant Data Output
1318TXDAct. Low CAN Transmit Dominant Data Input
1419SOUTSerial Data Output
1520SINSerial Data Input
161SCLKSerial Clock
172NRESAct. Low Reset Output
183NINTAct. Low Interrupt Request
194WAKEDual Edge Triggerable Wakeup Input
PSO20
GND
WAKE
NINT
NRES
SCLK
SIN
SOUT
TXD
RXD
GND
SCLK
NRES
NINT
WAKE
GND
GND
V1
V2
V3
VS
SO20
SIN
SOUT
TX
RX
GND
GND
RTH
CANL
RTL
CANH
Table 2. Thermal Data
SymbolParameterValueUnit
R
thj-amb
R
thj-case
Note: 1. Typical value soldered on a PC board wit h 8 cm2 copper ground plane (35µm thick).
Externally forced output voltage OUT1-0.3 ... VS+0.3, max +6.3V
Externally forced output voltage OUT2-0.3 ... VS+0.3V
Externally forced output voltage OUT3-0.3 ... VS+0.3, max +6.3V
Input voltage Logic inputs: SIN, SCLK, NRES-0.3 ... +7V
Input voltage WAKE-0.3 ... VS+0.3V
Voltage CANH line
Voltage CANL line
human body model with R = 1.5kW, C = 100pF and dischar ge voltage 200 0V,
corresponding to a maximum disch arge energy of 0.2mJ..
3
3
-28 ... +40V
-28 ... +40V
L4969
VSDC
VSTR
I
VOUT1...3
STG
J
OUT1
OUT2
OUT3
inli
inliW
canh
canl
Table 4. Electrical Characteristics
V
= 14V, Tj=-40°C to 150°C unless otherwise specified.
S
SymbolParameterTest ConditionsMin.Typ.Max.Unit
Supply Current
I
SSL
All Regulators off
(CANH Standby
I
SSLWK
V1 off, V2 off, V3 on
(CAN RX only)
I
SSB
I
S
V1 only (CAN Standby)Timer off (Standby #1)150250µA
All Regulators on,
(CAN active, TX high)
I
SCP
Additional Oscillator- and
Chargepumpcurrent at low VS
Voltage Regulator 1
V
01
V
DP1
V1 output voltage6V < VS < 28V
Dropout voltage 1@ VS=4.8VI
Timer off (Sleep #1)304060µA
Timer on (Sleep #2)7090135µA
RXonly46mA
Timer on (Standby #2)200300µA
Default (Standby #3)440600µA
I
OUT1
I
OUT2
= -100mA
= -10mA
120150mA
No CAN load.
VS = 6V; Timer Off5580100µA
= 6V; Timer On103050µA
V
S
4.955.1V
IO >-100mA
SO20 Package
6V < V
I
>-150mA
O
< 28V
S
4.955.1V
PSO20 Package
= -10mA0.00.0250.06V
OUT1
I
OUT1
= -100mA
0.00.250.6V
SO20 Package
I
OUT1
= -150mA
0.00.40.9V
PSO20 Package
3/35
Page 4
L4969
Table 4. Electrical Characteristics (continued)
V
= 14V, Tj=-40°C to 150°C unless otherwise specified.
S
SymbolParameterTest ConditionsMin.Typ.Max.Unit
V
OL01
I
LIM1
V
OLI1
T
OVT1
T
OTKL1
V
res
Voltage Regulator 2 and 3
V
O
V
DP
V
OLO
I
LIM
V
OLI
T
OVT
T
OTKL
VtrcV2 tracking offset6V < VS < 28V, I
Reset and Watchdog
t
OSC
t
WDC
t
RDnom
t
WDstart
Load regulation 1IO =-1mA to-100mA
01040mV
SO20 Package
=-1mA to -150mA
I
O
01040mV
PSO20 Package
Current limit 10.8V < V
< 4.5V, VS=6V,
O1
-180-400-800mA
SO20 Package
0.8V < V
O1
< 4.5V
-180-400-800mA
VS=14V,
PSO20 Package
Line regulation 16V < VS < 28V
I
= -1mA
O1
0530mV
Overtemp flag 16V < VS < 28V130140150°C
Thermal shutdown 16V < VS < 28V175185205°C
Min V1 reset threshold voltage RTC0 = 04.154.54.7V
RTC0 = 13.74.04.2V
Output voltage6V < VS < 28V
4.855.2V
IO >-100mA
SO20 Package
6V < V
I
>-150mA
O
< 28V
S
4.855.2V
PSO20 Package
Dropout voltageVS = 4.8V
= 100mA
I
O UT
0.00.250.6V
SO20 Package
I
O UT
= 150mA
0.00.40.9V
PSO20 Package
Load regulationIO =-1mA to -100mA
01040mV
SO20 Package
=-1mA to -150mA
I
O
01040mV
PSO20 Package
Current limit0.8V < V
< 4.5V, VS=6V,
O1
-180-400-800mA
SO20 Package
0.8V < V
O1
< 4.5V
-180-400-800mA
PSO20 Package
Line regulation6V < VS < 28V
I
= -5mA
OUT
0530mV
Overtemp flag6V < VS < 28V130140150°C
Thermal shutdown6V < VS < 28V150165180°C
(timeout)
Interframe Gap 5µs
SCLK frequency range0.250.51MHz
Sense comparator
6.07.28.0V
detection threshold
CANH groundshift
-1.5-1-0.6V
detection threshold
Nr of dom to rec edges on
Operating mode (EI_V)3Ed ges
CANL to detect permanent
rez CANH
Nr of dom to rec edges to
Operating mode (EI_V)3Ed ges
detect
recovery of CANH
500ns
L4969
µA
µA
µA
7/35
Page 8
L4969
Table 4. Electrical Characteristics (continued)
V
= 14V, Tj=-40°C to 150°C unless otherwise specified.
S
SymbolParameterTest ConditionsMin.Typ.Max.Unit
N
EdgeL
N
EdgeLR
t
EIII
t
EIIIR
t
EIV
t
EIVR
t
EVI
t
EVIR
t
EVII
t
EVIIR
t
EVIII
t
EVIIIR
t
FailTX
t
FailTXR
Wakeup
t
wuCAN
t
wuWK
Nr of dom to rec edges on
CANH to detect permanent
rez CANL
Nr of dom to rec edges to
detect
recovery of CANL
CANH to VS short circuit
detection time
CANH to VS short circuit
recovery time
CANL to GND short circuit
detection time
CANL to GND short circuit
recovery time
CANL to VS short circuit
detection time
CANL to VS short circuit
recovery time
CANL to CANH short circuit
detection time
CANL to CANH short circuit
recovery time
CANH to VDD short circuit
detection time
CANH to VDD short circuit
recovery time
TX permanent dominant
detection time (Fail safe)
TX permanent dominant
recovery time (Fail safe)
Minimum dominant time for
wake-up via CANH or CANL
Minimum pulse time for wakeup via WAKE
Operating mode (EII_IX)3Edges
Operating mode (EII_IX)3Edges
Operating mode (EIII)1 .623.6ms
Sleep/
1.623.6ms
standby mode (EIII)
Operating mode (EIII)0 .40.91.6
Sleep/
0.40.91.6
standby mode (EIII)
Operating mode (EIV)0.40.91.6ms
Sleep/
0.40.91.6ms
standby mode (EIV)
Operating mode (EIV)103050
Sleep/
0.40.91.6
standby mode (EIV)
Operating mode (EVI)0.40.91.6
Operating mode (EVI)200500750
Operating mode (EVII)0.40.91.6ms
Operating mode (EVII)103050
Operating mode (EVIII)1.61.83.6ms
Sleep/
1.61.83.6ms
standby mode (EVIII)
Operating mode (EVIII)0.40.91.6ms
Sleep/
0.40.91.6
standby mode (EVIII)
Operating mode (EX)0.40.91.6ms
Operating mode (EX)148
sleep/standby82238
sleep/standby82238
ms
ms
µs
ms
ms
µs
µs
ms
µs
µs
µs
8/35
Page 9
L4969
1FUNCTIONAL DESCRIPTION
1.1General Features
The L4969 is a monolithic integrated circuit which provides all main functions for an automotive body
CAN network.
It features two independent regulated v oltage supplies V1 and V2, an inter rupt and reset logic with internal cloc k
generator, Serial Interface and a low speed CAN-bus transceiver which is supplied by a separate third voltage
regulator (V3).
The device guarantees a clearly defined behavior in case of failure, to avoid permanent CAN bus errors.
The device operates in four basic modes, with additional programming for V1 Standbymodes in CTCR:
LP1, LP0
ModeV1 V2 V3Timer/WDCCAN-IF
Sleep #1Off Off OffOffStandby40ux,xNo Timer based wakeup
I
typ
(CTCR)
Remarks
Sleep #2Off Off Off
(*1)
Standby #1
Standby #2
Standby #3On Off OffOn (1MHz)Standby 440u0,0Watchdog or timer activ, POR default
RXOnlyOff Off OnOn (1MHz)RX-Only 4mAx,xActive during Busactivity to filter ID, auto-
NormalOn On OnOn (1MHz)Normal5mAx,xNo Currents from CAN or Regulators
(*1) Note, that in order to enter either Standby #1 or Standby #2 the Startup-Watchdog has to be acknowledged (see Chapter 1.2), in Standby
#1, the Window Watchdog has to be disabled as described in Chapter 2.5, to allow the decativation of the internal oscillator.
On Off OffOffStandby 170u1,1No Watchdog or Timer
(*1)
On Off Off
On (250KHz)
On (250KHz)
Standby80ux,xTimer active
Standby 210u1,0Watchdog or timer active
matic fall back to Sleep when Bus idle
1.1.1 V1 Output Voltage
The V1 regulator uses a DMOS transistor as an output stage. With this structure very low dropout voltage is
obtained. The dropout operation of the standby regulator is maintained down to 4V input supply voltage. The
output voltage is regulated up to the transient input supply voltage of 40V. With this feature no functional interruption due to overvoltage pulses is generated. The output 1 regulator is switched off in sleep mode.
1.1.2 V2 Output Voltage
The V2 regulator uses the same output structure as the output 1 regulator except to being short circuit proof to
VS, and to be rated for the output current of 200mA. The V2 output can be switched on and off through a dedicated enable bit in the control register. In addition a tracking option can be enabled to allow V2 follow V1 with
constant offset. This feature allows c onsistent A /D conver sion insi de the
µ
C (supplied by V 1) when the converted signals are referenced to V2. The maximum voltage that can be applied to V2 is VS + 0.3V up to a max VS
of 40V.
1.1.3 V3 Output Voltage
The third voltage regulator of the device generates the supply voltage for the internal logic and the CAN-transceiver. In operating mode it is capable of supplyi ng up to 200mA in order to guarantee the required short ci rcuit
current for the CAN_H driver. The sleep and operating modes are switched through a dedicated enable bit.
1.1.4 Internal Supply Voltage
A low power sleep mode regulator supplies the internal logic in sleep mode.
9/35
Page 10
L4969
1.2Power-Up, Initialization and Sleep mod e transitions
The following state-diagram illustrates the possible mode transitions inside the device.
As a prerequisite, a SPI-connection to the uC with the correct CRC-algorythms is required.
During the debug phase the NRES line can be forced high externally (connect to V1) to deactivate the startup
failure mechanis keeping V1 will alive.
Figure 3.
After POR, V1 up or externally forced reset
through low NRES, the STARTUP STATE is
entered
V1 Low
NRES Low
WAKEUP
STARTUP
V1 active
V2, V3, CAN off
WDC-ACK
Dependi g on th e value f rom the last
WDC-ACK, another one has to be
Writing to the WDCregister (WDC-ACK)
the NORMAL STATE is
entered.
written within the spec ified time frame
(SWDC[1:0]). A failure will activate
the STARTUP STATE
NORMAL MODE
WINDOW WDC
ACTIVE
WND SET
DISAR
SET
If during the last WDC-ACK WND has been set (after releasing
write lock , see d escription of Watc hdog Cont rol Register) th e Window wa tch do g is de act ivat e d, an d no uC sup erv ision is active.
NORMAL MODE
WINDOW WDC
DISABLED
The forced sleep mode is left upon wakeup through either CAN or edge on
WAKE. Appl ying a per manent wakeup ( i. e. bot h CAN-l ines domin ant) pr events V1 from being turned off (can be used during System debugging)
WAKEUP
Forcing NRES high externally, fail will not be incremented (Emulation)
STARTUP
t=320ms
FAILURE
fail = 7
RESET low
t=1ms
A missing ACK within 320ms will
initiate a STARTUP FAILURE
phase (RESET low).
WDC-FAIL
(fail ++)
If no WDC-ACK is recei ved within
seven retrials the voltage regulator
WDC-ACK
&
WDEN SET
The Window supervision can temporarily be deactivated for the time programmed during the
last WDC-ACK (WDT[3:0]). Upon rewriting
(WDC -AC K) or e xpiry of the time r, the NO R MAL
STATE is reentered.
V1 will be turned off by entering the
FORCED SLEEP state.
WDC-ACK
t=t
WIN2
WDC-OK
WINDOW
WATCHDOG
REFRESH
TIMEOUT | WDC-ACK
WDEN SET
TIMEOUT | WDC-ACK
FORCED SLEEP
V1 off
No Reset
TIMER
ACTIVEWDEN SET
(restart by double
WDC-ACK & WDEN)
Here the t imer ca n b e used to
generate time events (i.e.
wakeup uC from stop)
TIMER
ACTIVE
(restart by double
WDC-ACK & WDEN)
WAKEUP
&V1_UV
WAKEUP&V1_UV
10/35
WAKEUP
Programmed
SLEEP
V1 OFF
No Reset
DISAR
SET
Setti ng DI SAR ( see V ol t age Reg ul a t or Con t r ol R egi s te r ) Vol t ag e r e gu la t or V1 i s
turned off, and the output voltage is decreasing depending on the external load
and blocking capa citor .
Note, that during this transition no Reset will be generated (due to Debugmode).
Upon wakeup howewer NRES wil l be pulled low, if V1was below the programmable reset threshold (V1_UV).
Page 11
L4969
1.3CAN Transceiver
– Supports double wire unshielded busses
– Baud rate up to 125KBaud
– Short circuit protection (battery, ground, wires shorted)
– Single wire operation possible (automatic switching to single wire upon bus failures)
– Bus not loaded in case of unpowered transceiver
The CAN transceiver stage is able to transfer serial data on two independent communication wires either deferentially (n ormal operation) or in case of a single wi re fault on the remaining li ne. The physical bitcoding is done
using dominant (transmitter active) and overwritable recessive states. Too long dominant phases are detected
internally and further transmission is automatically disabled (malfunction of protocol unit does not affect communication on the bus, "fail-sa fe" - mechanism). For low current consu mption during bus inactiv ity a sleep mode
is available. The operating mode can be entered from the sleep mode either by local wake up (
tection of a dominant bit on the CAN-bus (external wake up).
Ten different errors on the physical buslines can be distinguished:
1.3.1 Detectable Physical Busline Failures
NType of ErrorsConditions
Errors caused by damage of the datalines or isolation
µ
C) or upon de-
ICANH wire interrupted (tied to Ground or termination)Edgecount difference > 3
IICANL wire interrupted (floating or tied termination)Edgecount difference > 3
IIICANH short circuit to V
IVCANL short circuit to GND (permanently dominant)V(CANL) < 3.1V & V(CANH)-V(CANL)
VCANH short circuit to GND (permanently recessive)Edgecount difference > 3
VICANL short circuit to V
VIICANL shorted to CANHV(CANH) - V(CANL) < -3.25V after
Errors caused by misbehavior of transceiver stage
VIII CANH short circuit to VDD (permanently dominant)V(CANH) > 1.8V & V(CANH) -
IXCANL short circuit to VDD (permanently recessive)Edgecount difference > 3
Errors caused by defective protocol unit
XCANH, CANL driven dominant for more than 1.3ms
(overvoltage condition)V(CANH) > 7.2V after 32us
BAT
< -3.25V after 1.3ms
(overvoltage condition)V(CANL) > 7.2V after 32us
BAT
1.3ms
V(CANL) < -3.25V after 2.5ms
Not all of the 10 different errors lead to a breakdown of the whole communication.
So the errors can be categorized into 'negligible', 'problematic' and 'severe':
11/35
Page 12
L4969
1.3.2 Neg ligible Errors
1.3.2.1
Error I and II (CANH or CANL interrupted but still tied to termination)
Error IV and VIII (CANH or CANL permanently dominant by short circuit)
Transmitter
In all cases above data can still be transmitted in differential mode.
1.3.2.2
Error I and II (CANH or CANL interrupted but still tied to termination)
Error V and IX (CANH or CANL permanently recessive by short circuit)
Receiver
In all cases above data can still be received in differential mode.
1.3.3Problematic Errors
1.3.3.1
Error III and VI (CANH or CANL show overvoltage condition by short circuit)
Transmitter
Data is transmitted using the remaining dataline (single wire)
1.3.3.2
Error III and VI (CANH or CANL show overvoltage condition by short circuit)
Receiver
Data is received using the remaining dataline (single wire)
1.3.4 Severe Errors
1.3.4.1
Error V and IX (CANH or CANL permanently recessive by short circuit)
Transmitter
Data is transmitted on the remaining dataline after short circuit detection
Error VII (CANH is shorted to CANL)
Data is transmitted on CANH or CANL after overcurrent was detected
Error X (attempt to transmit more than 10 successive dominant bits (at lowest bitrate specified)
Transmission is terminated (fail safe)
1.3.4.2
Error VII (CANH is shorted to CANL)
Receiver
Data is received on CANH or CANL after detection of permanent dominant state
Error IV and VIII (CANH or CANL permanently dominant by short circuit)
Data is received on CANH or CANL after short circuit was detected
Error X (reception of a sequence of dominant bits, violating the protocol rules)
Data is received normally, error is detected by protocol-unit
The error conditions is signaled issuing an error flag inside a dedicated register which is readable by the µC
through the serial interface. The information of the error type (I through X) is also stored into this register.
12/35
Page 13
L4969
1.4Oscillator
A low power oscillator provides an internal clock. In sleep mode (Watchdog active) the output frequency is
250kHz, if the Watchdog function is not requested, the internal Oscillator is switched off.
In standby and operating mode the os cill ator is r unning at 1MHz, and can be c alibrated i n a r ange from -16% to
+16% using the
1.5WatchdL4969og
A triple function programmable watchdog is integrated to perform the following tasks:
– Wakeup Watchdog:
When in sleep or standby mode the watchdog can generate a wakeup condition after a programmable period of time ranging from 80ms up to 45 minutes
– Startup Watchdog:
Upon V1 power-up or
ated periodically every 320ms for 2.5ms until activity of the
knowledge is received within 7 cycles (2.2sec). In this condition the device is forced into Sleep mode
until a Wakeup is detected and a startup cycle is reinitialized.
– Window Watchdog:
After passing the startup sequence, this watchdog request an ac knowledge by the
within a programmable timing fr ame, ranging from 2.5 ... 5ms up to 20 . .. 40ms. Upon a m issing or
misplaced acknowledge the Startup Watchdog is initialized.
µ
C-XTAL as a reference.
µC failure during SPI supervision (see SW-Wat chdog) a res et pulse is gener-
µC is detected (SPI sequence) or no ac-
µC via the SPI
1.6Reset
1.6.1 Powe r- on Re set
Upon Power-on (VS > 3.5V), the internal reset forces the device into a predefined power-on state (see 1.1):
Standby #3:V1 on V2 off V3 off,CAN-Standby mode, ID-Filter disabled, Startup Watchdog active
With VS below 5V the regulator V1 will follow VS with minimum drop. The
µ
C retrieves a reset if V1 is dropping
below a programmable voltage level of either 4.5V (default) or 4.0V. The programmed state of the L4969 remains unchanged. The act. low Resetpulse duration is fixed internally by an open-drain output stage to 1ms.
However, this time can be externally extended by an additional capacitance connect between NRESET and
GROUND which is then charged by the internal pull-up of typ. 120K. Depending on the Reset-Input-Threshold
of the uC (U
C
= -tD / (120E3 ln(1-UTR/V1))).
EXT
To obtain a reset-pulse duration of t
), the reqired Capacitance for a typical tD can be calculated as follows:
TR
= 50ms with UTR/V1 = 0.5, a Capacitance of C
D
= -50E-3 / (120E3 ln
EXT
0.5) = 600nF is required.
Figure 4.
V1
120K
NRES
C
EXT
to Reset Input of uC
1.6.2Un der volt age Rese t
Upon detection of a V1 voltage level below a programmable voltage level of either 4.5V (default) or 4.0V,the
NRES-pin is pulled low. Since this undervoltage detection is additionally sampled periodically every ms, the
NRES low time will be extended by up to 1 ms if V1 was low (V1
) at the sampling point (see below).
UV
13/35
Page 14
L4969
Figure 5.
1ms sampling
V1
UV
NRES
1.6.3Reset signalling during Sleepmode
When entering the sleep mode by writing 1 to DISAR in the VRCR register, the Voltageregulators and their references will be deactivated to allow minimum current consumption. By removing the V1 reference, the outputvoltage is no longer supervised and thus NO reset will be generated.
Now two scenarios are possible (see statediagram in chapter 1.2):
1) Wakeup with V1 still above reset threshold: V1 will be reactivated and Normal mode is resumed
2) Wakeup with V1 below reset threshold: V1 will be activated, NRES will go low and remain low until V1 is
above reset threshold and Startup mode is entered.
The scenario 2 is the most critical when used with uC that do not have their own POR circuitry.
In this case V1 will ramp down with an unknown application state.
To guarantee a proper shut off of an uC without an internal POR circuitry the following mechanism can be utilized: The L4969 uses a bidirectional Reset to detect a possible Watchdog failure of the uC. If this failure condition is detected, NRES will be forced low for 1 ms (with activated timer) or until a wakeup condition occurs
(WDEN bit in WDC register reset, thus RC-oscillator will be switched off during sleep).
Two methods can be used to allow a proper sleep transition:
- With Timer (WDEN=1): immediately after setting DISAR the uC has to program its WDC to generate a failure
causing the L496 9 to detect a low level on NRES foll owed by an automatic 1m s pulse ex tension. If V1 is ramping
down slow, Cext has to be defined in a way, that NRES will stay below the input threshold of the uC until V1 is
in a safe level.
- Without timer (WDEN=0): same proc edure as above, bu t uC has to generate a R eset within 1 ms after WDEN
has been cleared. NRES will then stay low, until a wakeup condition occurs.
Figure 6.
.
DISAR
REF REG
R1
V1
R2
NRES
WDC
1ms
RC-Osc
C
EXT
uC
L4969
1.7Identifier Fil ter
A 12-Bit CAN-ID-filter is implemented allowing wakeup via specific CAN-messages thus aiding the implementation of low power partial communication networks like standby diagnostics without the need to power-up the
whole network.
To guarantee the detection of the programmed Identifiers, the local RC-oscillator can be calibrated to allow the
programmable Bittime logic to extract the incoming stream with a maximum of tolerance over temperature deviation.
1.8Groun d Shift Detection
14/35
Page 15
L4969
In case of single wire communication via CANH the signal to noise ratio is low. Detecting the local ground shift
can be used as an additional indicator on the current signal quality. The information of the integrated ground
shift detector will be refreshed upon every falling edge on TX and can be read from the CAN Transceiver Status
Register (CTSR).
It will be set, if V(CANH) < -1V, reset if V(CANH > -1V) at the falling edge of TX.
1.9Thermal Protection
The device features three independent thermal warning circuits which moni tor the temperature of the V1 output,
the V2 output and the CAN_H and CAN_L drivers together with voltage regulator V3. Each circuit sets a separate overtemperature flag in a register which is read and writable by the serial interface. The overtemperature
flags cause an interrupt to the
enable registers. To enhance system security following strategy is chosen for thermal warning and shutdown:
– 3 independent warning flags are set at 140°C for V1, V2 and V3/CAN-Transceiver
– at 170°C V2 and V3 switched off
– at 200°C V1 is switched off
– V2 and V3 can be switched on again through the
– V1 can be switched on again at wake-up (Watchdog wake-up, CAN wake-up, external wake-up)
Note, that if no wakeup source is set for V1 a 1sec watchdog timeout will be established to enable a proper retry
cycle.
µ
C. The µC is able to switch V1, V2 and CAN drivers on and off through dedicated
µC
1.10 Serial Interface (SPI)
A standard serial p eripheral interfac e (SPI) is implemented to allow access to the internal register s of the L4969.
A total of 12 Registers with differen t datalengths ca n be directly read fr om or w ritten to, providi ng the req uested
address at the beginning of a dataframe. Upon every access to this interface, the content of the register currently
accessed is shifted out via SOUT. All operations are performed on the rising edge of SCLK.
If a frame is not completed, the interface is automatically reset after 1.5ms of SCLK idle time (auto timeout detection). If a message is corrupted ( additional or missi ng SCLK pulses), the appli cation softw are can detect thi s
by evaluating the returned value of the crc and force a communication gap of min 1.5ms to allow communicvation recovery. A corruption c an be caused during star tup of the uC and S PI initializ ation. The appli cation s hould
then wait at least 1.5ms after SPI init prior to starting the communication.
The dataframe format used described on the next page:
15/35
Page 16
L4969
1.10.1General Dataframe Format:
Figure 7.
SIN
7
SOUTADR/CMDDatafield 1 (R)Datafield 2/CRC (R)
SCLK
99AT0015
ADR/CMD
Datafield 1 (W/R)
0
15
0715
8823
Datafield 2/CRC (W/R)
23
15
15
Data is sampled on the rising edge of the clock and SOUT will change upon SCLK falling. SOUT will show a
copy of SIN for the Address/ C ommand field for initial data path checks. Independent of the command state,
SOUT will show the content of the register addressed. SIN contains either data to be written or arbitrary data
for all other operations. The transaction will be terminated with four bit of data followed by a 4-Bit wide CRC
(Cyclic Redundancy Check) as a result of either SIN related data or calculated automatically on data returned
via SOUT. Here the
µ
C has to provide the cor rect sequenc e in order to get the write command acti vated ins ide.
A CRC-failure is signall ed v ia N INT. For r eturned data the C RC c an als o be used to verify a succ essful tr ansfer.
1.10.2 Address/Command Field
Figure 8.
70
C0
Frame start sequence
always has to be
transmitted as 0 1
ADR310
ADR2ADR1
Addressfield specifying
the Control/Status word
to be accessed
ADR0C1
SPI command:
00: Read register
01: C le a r IFR
10: illegal command
11: Write register
The Address/Command field starts with a 2-Bit start sequence consisting of ‘01’. Any other sequence will lead
to a protocol error signalled via the NINT. The addressfield is specifying the register to be accessed. The SPI
command flags all ow in additi on to the normal r ead/write operation to clear the Interrupt flag regis ter after read.
16/35
Page 17
1.10.3 Datafield #1
Figure 9.
L4969
D7
D6
D5
D4D3
D2
D1D0
Lower 8 Bit of 12 Bit data
SIN: Data to write
99AT0017
SOUT: Data currently in selected register
Datafield #1 contains either the lower 8 bits of a 12-Bit frame or the complete byte of an 8-Bit transfer.
Note, that SOUT is always show ing the content of the register cur rently acc essed a nd not a c opy of SIN as during the Address/Command field.
1.10.4 Datafield #2/CRC
Figure 10.
D11
D10D9D8
CRC3CRC2CRC1CRC0
Upper 4 Bit of 12 Bit data (Zero if 8 Bit data)
CRC Check sequence
to be appended to tranferred data
Note that upon CRC check failure
no write operation will be performed
SIN: Data to write
SOUT: Data currently in selected register
99AT0018
SIN: CRC of SIN sequence
SOUT: CRC of SOUT sequence
Datafield #2 contains either the upper four bits of a 12-Bit frame or zeros in case of an 8-Bit transfer. This field
is followed by a four bit CRC sequence that is calculated based upon the polynom 0x11h (17 decimal). This
sequence is simply the remainder of a polynomial division performed on the data previously transferred. If the
CRC appended to the SIN sequence fails, any writing will be disabled and an error is signalled via NINT. Another
remainder is cal culated on the SOUT stream and appended accor ding ly t o all ow the appli cation software to validate the correctness of incoming data. To aid evaluation, the CRC checking can be turned off by writing arbitrary data with a valid CRC to address 15. CRC-checking will be reenabled upon another operation of this kind
(Toggled information).
The memory space is divided up into 16 different registers each being directly accessible using the SPI.
Each register contains specific information of a functional group.
In general al reserved bitpositions (‘RES’) have to be written with ‘0’.
Undefined bits are read as ‘0’ and cannot be overwritten.
In addition there is one register (CTSR) being read only, thus any write attempt will leave the register content
unchanged.
Certain interlock mechanism exist to prevent unwanted overwriting of important functions i.e. voltage regulators
or oscillator adjustments. These mechanisms are described with the functions of these registers.
*1) “shorted to ...”
18/35
Page 19
L4969
2CONTROL AND STATUS REGISTERS
The functionality of the device can be observed and controlled through a set of registers which are read and
writable by the serial interface.
2.1ADR 0: VRCR Voltage Regulator Control Register
Figure 11.
D7D0
EUV2EUV3ENV3ENV2DISAR
RTC0
TRC
RES
Has to be
Enable undervoltage
written as ‘0 ’.
detection on
Regulator #2 and #3
(see note below)
Set reset threshold value to 4.0V
Default value is ‘0’ (4.5V)
Enable Regulator #2 tracking option
to have V2 following V1 with constant offset
Default value is ‘0’ (disabled)
Enable Regulator #3 .
V3 will be activated by either setting ENV3 or
upon enabling of the CAN Lineinterface
Default value is ‘0’ (dis a ble d)
This bit will be automatically reset upon
Overtemperature from CANIF or Regulator #3
Disable all Regulators (Go to Sleep)
Note, that at least one Wakeup Source
without a pending wakeup is required
to enable access.
This bit will be automatically set upon
the system failures Overtemperature V1
or watchdog startup failure.
Note, that no reset will be generated
from low V1 during Sleep mode transition
The Reset line has to be forced low
externally, or through a window failure
DISAR will be cleared upon a valid
wakeup signal which is either defined
in GIEN or is forced to WAKE or CAN
after a system fail ure
Enable Regulator #2.
Default value is ‘0’ (disabled)
This bit will be automatically reset upon
Overtemperature at Regulator #2.
Note, that due to the large initial charging current of the output capacitors,
the activation of V2 AND V3 within the same command is not recommended
also leaving ENV2 or ENV3 set when setting DISAR can therefor not be
recommended (after wakeup V1 AND V2 or V3 would be turned on)
TRC
DISAR
REF
V1V3
Note, that when using the Undervoltage-detecti on, EUV2 and EUV3 have to be activated
DISAR
& ENV2
(DISAR
ACT) & T SDV3
V2
V3 will be activated upon VRCR.ENV3 or
CCTR.ACT without pending thermal shutdown
AFTER
& ENV3 |
V2 or V3 have
been turned on and settled (t > 1ms). Otherwise unwanted undervoltage can be detectected dur ing turn on of
the corresponding voltage regulator.
19/35
Page 20
L4969
2.2ADR 1: CTCR CAN-Transceiver Control Register
Figure 12.
D7D0
RESTXENACT
RESRES
LP2
LP1LP0
Standby-m ode control (V1 only, see 1.1)
CAN-Trans ceiver application control
0X : Standby / Sleep
reduce Osc-fr equency to 250KHz
enabl e Auto-Osc-Off
10 : Receive only mode A (Readback TX, if not EX)
11 : Normal Operat ion
Note, that TXEN is automatically reset upon
occurence of EX (TX permanent dominant)
and has to be reprogrammed after problem
correction to enter normal mode.
Reserved bits (‘RES’) have to be written as ‘0’.
Three basic operating modes are available using different logic combinations on ACT and TXEN. Each of these
modes in conjunction with other inputs has its unique combination of parameters inside the specification:
Program enable (read only)
Bit will be set after 'Finish cycle measurement',
and reset after register write
D0
0: 0%
1: -1%
RC Oscillator
Frequency Adjust
default value 10000
Note, that programming
is only enabled with PGEN set
Test cycle request
A low pulse on NINT
for a fixed period
of time can be requested
for XTAL synchronization
99AT0022
During normal operation the µC can set CG1 and CG0 to ‘01’ to force a 200Hz rectangular waveform on NINT
with 50% duty cycle. Note, that all other pending interrupts have to be cleared before.
After the XTAL driven timer of the
CG1 and CG0 have to be set to ‘10’ to disable the adjustment cycle on NINT. From the deviation calculated by
the
µ
C, the correction factor of the RC-oscillator -15% to + 16% can be reprogrammed with CG1 and CG0 set
to ‘00’ or ‘11’. (‘11’ can be used to indicate that calibration has already been performed).
Note, that overwriting this register is only valid, if the cycle measurement was started and terminated properly.
This can be tested by evaluating PGEN either prior to or during correction (Read back via SOUT).
Note also, that any write to the W DC register w ill reset the timer a nd thus reset the phase of the testcycle. Therefore a cyclic access to the window watchdog during the pulsewidth measurement has to be avoided and the
timer watchdog to be used instead (i.e. 1sec)
µ
C calculated the relative cycle time and the corresponding deviation,
00: No request (Adjustment disabled)
01: 2.5ms low cycle on NINT (repetitive)
10: Finish cycle measurement
11: No request (Adjustment disabled)
21/35
Page 22
L4969
Figure 15.
State transition during oscillator calibration
CG=01
“No Request”
Watchdog and Interrupt
has to be disabled
“2.5ms cycle
on NINT”
Start time measurement
at rising edge
CG=10CG=00
2.5ADR4: WDC Watchdog Control Register
Figure 16.
D7D0
SWT0WDT3SWT1WNDWDENWDT2WDT1WDT0
Disable
Window Watchdog,
only allowed with
PGEN set, see
previous table
for Osc adjust
Enable Wakeup Watchdog,
Window Watchdog will be
automatically deactivated
until wakeup watchdog expires
The Startup Watchdog is not programmable and will always generate a 1.0ms low cycle on NRESET followed
by a 320ms high cycle until an Acknowledgment will occur. If no Acknowldege is received after the 7th cycle,
the device will automatically be forced into Sleep mode.
Acknowledgment and Reset of Startup and Window Watchdog is automatically performed by overwriting
(or rewriting) this register.
Note, that with WDEN set, a cyclic setting of IFR.WKW after the programmed Wakeup time will occur.
2.5.1 Watchdog configuration:
22/35
Page 23
L4969
Figure 17.
POR
NRESET
forced low
externally
Wakeup
Prog
Sleep
Ack
Note: WR, writing to this address, will restart the timer
After power-on-reset of VS and V1 or wakeup from Sleep or NRESET being forced low externally, the Startup
Watchdog is active, supervising the proper startup of the V1 supplied uC. Upon missing SPI write operation to
the WDC register after 7 reset cycles (1ms active, 320ms high) the Sleep mode is entered.
Leaving the forced Sleep mode will be automatically performed upon wakeup via CAN, an edge on WAKE or
upon device powerup.
After successful startup, the W indow Watchdog supervision is activated, meaning, that the uC has to send an
acknowledge within a predefined, programmable w i ndow.
Upon failure, a reset is generated and the Startup Watchdog is reactivated.
If the Timer func tion is requ ested, t he window watchdog is deactivated until expiry o f the wakeup tim e, or rewriting of this register. Note, that any write to this register will reset the timer.
Ack
ExtWake
Startup
Wd
Window
Wd
CAN-Wake
missing Ack
(after 350ms)
missing
Ack
Timeout
WR
WR & WDEN
Forced
Sleep
Wakeup
Timer
2.5.2 Startup
Figure 18.
V1
1ms
NRESET
Startup Acknowledgement via SPI within 320ms
NRESET
Startup Acknowledgemen t via SPI within 640ms
NRESET
No Startup Acknowledgement via SPI within 2.3s (De vice will enter Sleep mode)
After powerup, the L4969 is expec ting the uC to send an ac knowledgement w ithin a predefined segmented timing frame of 7 x 320ms. A missing acknowledgement until after the 2.3s will force the device into sleep mode
until either external or CAN wakeup or POR cause a restart of the sequence above.
2.5.3 Window Watchdog
23/35
Page 24
L4969
Figure 19.
2,5 .. 20ms
50%
Early (late) Acknowlede supervision
5 .. 40ms
Early (late) Acknowlede supervision
Acknow ledge is restarting Window
After successful acknowledgement of the Startup sequence, the Window watchdog is automatically activated
and controlling proper uC activity by super vising an incoming acknowledge to ly within a predefined programmable window. Upon every acknowledge the watchdog is restarting the window.
24/35
Page 25
2.5.4 Wakeup Watchdog
Figure 20.
Window WdWindow WdTimer (80ms .. 45min)
L4969
restart tim e r
at any time
writing WDC twice
Timeout and resume Window Wd
NINT
Ack Window &
Start Timer
Interrupt active upon timeout (via GIEN)
If the Timer is activated during N ormal mode by setting WDEN in WDC, an “acknowledge-free” sequence is
started for a predefied programmable time. Window Watchdog activity is resumed after expiry of the timer.
To be able to detect the timeout, the corresponding interrupt enable must be set in GIEN.
This mode can also be used to allow a bootstrap loader mode with longer execution times than the maximum
specified window. Correct s tartup of this load er i s safely detected upon mi ssing r esponse following the timeout.
The timer can always be restarted by rewriting WDEN twice in WDC with a new timing.
25/35
Page 26
L4969
2.6ADR5: GIEN Global Interrupt Enable Register
Figure 21.
D7D0
EOVTEEWEUVIRESISETECWEWWEIFW
Enable Interrupt
upon CAN error
detection
Enable CAN
wakeup / Interrupt
Enable Interrupt
upon CAN error
recov ery
Enable
Interrupt
upon VS / VREG
Undervoltage
Enable Interrupt
upon Overtemp.
Warning
Enable Wakeup / Interrupt
via edge on WAKE
Enable Identifier
based wakeup / Interrupt
Enable Wakeup,/ Interrupt
via Watchdog
2.7ADR6: IFR Interrupt Flag Register
Figure 22.
D11D0
ESPI ISETIRESUV23
CAN Linefailure
detected (ISET)
remov e d (IRE S )
CRC- / Format
Error or SCL KTimeout detected
by SPI (non maskable)
Except ESPI all bits in this register are maskable in GIEN. Any mask ed bit will force NINT low until the register
content is reset (either explicitly or by SPI ‘clear register).
26/35
Page 27
2.8ADR7: CTSR CAN Transceiver Status Register
Figure 23.
Identifier of CAN Frame can be divided up into 6 segments numbered from ‘A’ to ‘F’.
For each segment a filter regis t er is im plemented, enabl ing different pass func tions on ever y two bit w ide block.
Segments A through C (ID01) are located at ADR 8 with MSB ‘C11’
Segments D through F (ID23) are located at ADR 9 with MSB ‘F11’
Note, that clearing a complete segment disables the whole filter.
Dominant to Rezessive
bitlength difference control
td = t
t
PSEG2
dom
- t
TD0
rez
t = 1u
Sample Point
99AT0030
The total bitlength equals the sum of 1 + PSEG1 + PSEG2 in units of µs.
The location of the sampling point is determined by the length of PSEG1.
At the start of frame (initial recessive to dominant edge) the bitlength counter is reset.
Upon every signal edge the counter will be lengthened or shortened according to location of the transition wi thin
the programmed boundaries of PSEG1 or PSEG2. If the edge lies within PSEG1 additional cycles are inserted
in order to shift the sampling point to a safe location after the settling of the input signal. If the signal transition
is located within PSEG2, this segment will be shortened accordingly with the goal of the next edge to lie at the
beginning of PSEG1.
The amount of cycles one segment is lengthened or shortened is determined by the type of edge (rec -> dom
or dom -> rec) and the programming of TD: The resynchronization jump width will be either set to ‘1’ (dom ->
rec edge) or to 1 + TD (rec -> dom edge).
Note, that the length of one timequanta depends on the offset of the on chip RC-oscillator and therefore on the
accuracy of calibration (see register RCADJ (ADR 3) for details on frequency correction)
29/35
Page 30
L4969
2.11 ADR 15: SYS System Status Register
Figure 26.
D7D0
STF
CRC-Checking
disabled
OTFWNDFSTATNCRCUCFW AKENPOR
Cold Start
after low VS
Reserved
status flag
(test only)
Warm start
Warm start
after V 1
Overtemp failure
Warm start
after leaving
prog. Sleep mode
after failure of
Window watchdog
Warm start
after 7 m i ss i n g
Ack during Startup
Warm start
after < 7 missing
Ack during Startup
The lower 6 bit of this register can be used to analyze the reason of startup (after NRESET low). This information
is valid until the first Watchdog-Acknowldge, and will then be reinitialized to 000001.
30/35
Page 31
3INTERRUPT MANAGEMENT
Figure 27.
L4969
D11D0
ESPI ISETIRESUV23
IFR
WKIFWKWWKCWKEOVT3OVT2 OVT1UVVS
EUVIRESISETECWEWW EIFW
EOVT
EEW
D7D0
GIEN
NINT
All Interrupt flags (in IFR) except ESPI can be masked in the global interrupt enable register (GIEN).
An Interrupt will be signalled by NINT going low until either the corresponding ma sk or the flag itself will be reset
by the applicati on software. A n auto reset functi on is avai lable for IFR, allow ing to remove all i nter rupt flags after
reading their state (see SPI).
31/35
Page 32
L4969
4REMARKS FOR APPLICATION
Figure 28. General circuit connection diagram
(1) “D and E1” do not include mold flash or protusions.
- Mold flash or protusions shall not exceed 0.15mm (0.00 6”)
- Critical dimensions: “E”, “G” and “a3”.
OUTLINE AND
MECHANICAL DATA
Weight:
1.9gr
JEDEC MO-166
PowerSO20
E2
NN
a2
b
h x 45
DETAIL A
e3
H
D
T
110
e
1120
E1
A
DETAIL B
PSO20MEC
R
lead
a3
Gage Plane
BOTTOM VIEW
E
DETAIL B
0.35
S
D1
L
c
a1
DETAIL A
slug
- C -
SEATING PLANE
GC
(COPLANARITY)
E3
0056635
34/35
Page 35
L4969
Information furnished is believed to be accurate and reliable. However, STMicroelectronics assumes no responsibility for the consequences
of use of such information nor for any infringement of patents or other rights of third parties which may result from its use. No license is granted
by implic ation or oth erwise unde r any patent or patent r i ghts of STMi croelectroni cs. Speci fications me ntioned in this publicat ion are subj ect
to change without notice. This publication supersedes and replaces all information previously supplied. STMicroelectronics products are not
authorized for use as crit i cal components in life support devices or sy st em s without express writt en approval of STMi croelectronics.
The ST logo is a registered trademark of STMicroelectronics