Powerful Safety Controllers for High-End Applications
The TTC 500 family consists of high-end safety control units designed to satisfy upcoming needs for a wide range of high-end applications like construction and agricultural machines.
The freely programmable high-end controllers with a powerful dual-core ARM Cortex®-R4 lockstep processor are protected by a compact, automotive-style housing suited for harsh environments. The safety controllers fulfill requirements up to SIL 2 (EN 61508) / PL d (EN ISO 13849) / AgPL d (ISO 25119)* / ASIL C (ISO 26262)* – and can be programmed either in C or in CODESYS®. The safety certified CODESYS® Safety SIL 2 speeds up application validation of the certified controller significantly.
The extensive I/O set with various configuration options makes the TTC 500 control units suitable for a wide range of high-end applications: For example, a group of 8 I/O pins can be individually configured for use as voltage output, digital output or analog input. Another use case is to build up a centralized architecture using one of the TTC 500 safety controllers for the whole vehicle. Ethernet and BroadR-Reach® connectivity is available both for the customer application and download and debugging purposes.
The majority of run-time tests that is needed to achieve the diagnostic coverage required for SIL 2 / PL d / AgPL d / ASIL C is performed in hardware by the dual-core lockstep CPU and its safety companion. This ensures that much more processing power remains available for the application in comparison to solutions that implement safety measures in software. The available memory protection mechanisms allow to execute safety and non-safety software on the same safety control unit without interference. The time-consuming validation of non-safe software is therefore no longer necessary. Safe data communication is achieved by the standardized CANopen® Safety protocol of the control units. In case of safety-relevant failure, outputs can be shut-off in 3 groups allowing limp-home functionality.
As an extension of the C-programming environment, the SAFERTOS® integration improves the traditional way of designing and writing an ECU application, allowing the split of the “main loop” user application into multiple working tasks that run until they are interrupted by a higher-priority task, blocked (waiting for an external event) or until a time limit expired. The real-time OS specific functionality has been extended with control application specific features, like run-time separation into safe- and non-safe tasks, a monitoring concept for ensuring timely execution of all tasks and application task ownership of any TTC 500 I/O port used. The efficient inter-task communication and synchronization mechanism using queue implementation permits data to be safely transferred between tasks.
TTC 500 control units are available in five variants, TTC 508, TTC 510, TTC 540, TTC 580 and TTC 590, with different I/O sets and interfaces to meet the different requirements of the OEMs for a high-end controller.
* available for C-programming only
| Product | CPU | Number I/Os (Max. Iout=2...4A) | Field Bus / Interfaces | Safety Certifcation / SIL Level | Programming Support |
|---|---|---|---|---|---|
3 cores, 32 bit, 300 MHz |
Up to 20 inputs (analog, digital, timer, SENT) |
4 x CAN |
IEC 61508 SIL2 |
C programming, |
|
3 cores, 32 bit, 300 MHz |
Up to 20 inputs (analog, digital, timer, SENT) |
4 x CAN |
IEC 61508 SIL2 |
C programming, |
|
3 cores, 32 bit, 300 MHz |
Up to 20 inputs (analog, digital, timer, SENT) |
4 x CAN |
IEC 61508 SIL2 |
C programming, |
|
6 cores, 32-bit, 300 MHz |
Up to 20 inputs (analog, digital, timer, SENT) |
4 x CAN |
IEC 61508 SIL2 |
C programming, |
|
32-bit, |
36 inputs (analog, digital, timer) |
6 x CAN, |
EN 61508 SIL 2 + |
CODESYS Safety SIL 2, |
|
32-bit, |
36 inputs (analog, digital, timer) |
7 x CAN, |
EN 61508 SIL 2 + |
CODESYS Safety SIL 2, |
|
32-bit, |
52 inputs (analog, digital, timer) |
4 x CAN |
EN 61508 SIL 2 + |
CODESYS Safety SIL 2, |
|
32-bit, |
44 inputs (analog, digital, timer) |
3 x CAN |
EN 61508 SIL 2 + |
CODESYS Safety SIL 2, |
|
32-bit, |
44 inputs (analog, digital, timer) |
2 x CAN |
EN 61508 SIL 2 + |
C programming |
|
16/32 bit, |
28 inputs (analog & digital), |
4 x CAN, |
EN ISO 13849 PL d* |
CODESYS, |
|
16/32 bit, |
28 inputs (analog & digital), |
2 x CAN, |
CODESYS |
||
16/32 bit, |
14 inputs (analog & timer), 16 outputs (analog, digital, |
2 x CAN |
EN ISO 13849 PL d |
C programming |
|
16/32 bit, |
14 inputs (analog & timer), 16 outputs (analog, digital, |
2 x CAN |
CODESYS |
||
16/32 bit, |
14 inputs (analog & timer), 16 outputs (analog, digital, |
1 x CAN |
EN ISO 13849 PL c |
C programming |
|
16/32 bit, |
14 inputs (analog & timer), 16 outputs (analog, digital, |
1 x CAN |
C programming |
3 cores, 32 bit, 300 MHz
Up to 20 inputs (analog, digital, timer, SENT)
36 outputs
4 x CAN
1x CAN ISOBUS
1 x CAN (wake-up capable)
1 x LIN
IEC 61508 SIL2
EN ISO 13849 PL d
ISO 25119 AgPL d SRL2
ISO 26262 ASIL C
ISO 19014 MPL d
C programming,
CODESYS** Safety SIL 2 including support for CANopen Safey Master
3 cores, 32 bit, 300 MHz
Up to 20 inputs (analog, digital, timer, SENT)
40 outputs
4 x CAN
1x CAN ISOBUS
1 x CAN (wake-up capable)
2 x 100BASE-T1
1 x LIN
IEC 61508 SIL2
EN ISO 13849 PL d
ISO 25119 AgPL d SRL2
ISO 26262 ASIL C
ISO 19014 MPL d
C programming,
CODESYS** Safety SIL 2 including support for CANopen Safey Master
3 cores, 32 bit, 300 MHz
Up to 20 inputs (analog, digital, timer, SENT)
40 outputs
4 x CAN
1x CAN ISOBUS
1 x CAN (wake-up capable)
2 x 100BASE-TX
1 x LIN
IEC 61508 SIL2
EN ISO 13849 PL d
ISO 25119 AgPL d SRL2
ISO 26262 ASIL C
ISO 19014 MPL d
C programming,
CODESYS** Safety SIL 2 including support for CANopen Safey Master
6 cores, 32-bit, 300 MHz
Up to 20 inputs (analog, digital, timer, SENT)
40 outputs
4 x CAN
1x CAN ISOBUS
1 x CAN (wake-up capable)
2 x 100BASE-TX
1 x LIN
IEC 61508 SIL2
EN ISO 13849 PL d
ISO 25119 AgPL d SRL2
ISO 26262 ASIL C
ISO 19014 MPL d
C programming,
CODESYS** Safety SIL 2 including support for CANopen Safey Master
32-bit,
180 MHz
36 inputs (analog, digital, timer)
60 outputs (36 x PWM with current feedback)
6 x CAN,
1x CAN ISOBUS,
1 x BroadR-Reach®,
1 x LIN,
1 x RS-232
EN 61508 SIL 2 +
EN ISO 13849 PL d +
ISO 25119 AgPL d* +
ISO 26262 ASIL C*
CODESYS Safety SIL 2,
C programming,
SAFERTOS® integration
32-bit,
180 MHz
36 inputs (analog, digital, timer)
60 outputs (36 x PWM with current feedback)
7 x CAN,
1 x Ethernet,
1 x LIN,
1 x RS-232
EN 61508 SIL 2 +
EN ISO 13849 PL d +
ISO 25119 AgPL d* +
ISO 26262 ASIL C*
CODESYS Safety SIL 2,
C programming,
SAFERTOS integration
32-bit,
180 MHz
52 inputs (analog, digital, timer)
44 outputs (28 x PWM with current feedback)
4 x CAN
EN 61508 SIL 2 +
EN ISO 13849 PL d +
ISO 25119 AgPL d* +
ISO 26262 ASIL C*
CODESYS Safety SIL 2,
C programming,
SAFERTOS integration
32-bit,
180 MHz
44 inputs (analog, digital, timer)
40 outputs (16 x PWM with current feedback)
3 x CAN
1x LIN
EN 61508 SIL 2 +
EN ISO 13849 PL d +
ISO 25119 AgPL d* +
ISO 26262 ASIL C*
CODESYS Safety SIL 2,
C programming,
SAFERTOS integration
32-bit,
180 MHz
44 inputs (analog, digital, timer)
32 outputs (10 x PWM with current measurement)
2 x CAN
1x CAN ISOBUS
1 x BroadR-Reach®
EN 61508 SIL 2 +
EN ISO 13849 PL d +
ISO 25119 AgPL d* +
ISO 26262 ASIL C*
C programming
16/32 bit,
80 MHz
28 inputs (analog & digital),
20 outputs (8 x PWM, 4 PWM with current feedback)
4 x CAN,
1 x LIN,
1 x RS 232
EN ISO 13849 PL d*
CODESYS,
C programming
16/32 bit,
80 MHz
28 inputs (analog & digital),
20 outputs (8 x PWM, 4 PWM with current feedback)
2 x CAN,
1 x LIN,
1 x RS 232
CODESYS
16/32 bit,
80 MHz
14 inputs (analog & timer), 16 outputs (analog, digital,
voltage, PVG and 8 x PWM,
6 with current feedback)
2 x CAN
EN ISO 13849 PL d
C programming
16/32 bit,
80 MHz
14 inputs (analog & timer), 16 outputs (analog, digital,
voltage, PVG and 8 x PWM,
6 with current feedback)
2 x CAN
CODESYS
C programming
16/32 bit,
80 MHz
14 inputs (analog & timer), 16 outputs (analog, digital,
voltage, PVG and 8 x PWM,
6 with current feedback)
1 x CAN
EN ISO 13849 PL c
C programming
16/32 bit,
80 MHz
14 inputs (analog & timer), 16 outputs (analog, digital,
voltage, PVG and 8 x PWM,
6 with current feedback)
1 x CAN
C programming
* available for C-programming only; ** upcoming
