Features • • • • • • • • • Low Current Consumption: IDD < 100 µA RC Oscillator Internal Reset During Power-up and Supply Voltage Drops (POR) “Short” Trigger Window for Active Mode, “Long” Trigger Window for Sleep Mode Cyclical Wake-up of the Microcontroller in Sleep Mode Trigger Input Single Wake-up Input Reset Output Enable Output Description The digital window watchdog timer, U5021M, is a CMOS integrated circuit. In applications where safety is critical, it is especially important to monitor the microcontroller. Normal microcontroller operation is indicated by a cyclically transmitted trigger signal, which is received by a window watchdog timer within a defined time window. A missing or a wrong trigger signal causes the watchdog timer to reset the microcontroller. The IC is tailored for microcontrollers which can work in both full-power and sleep mode. With an additional voltage monitoring (power-on reset and supply voltage drop reset), the U5021M offers a complete monitoring solution for microsystems in automotive and industrial applications. Digital Window Watchdog Timer U5021M Rev. 4756C–AUTO–09/04 Figure 1. Block Diagram with External Ciruit C VDD R1 VDD 10 nF 6 OSC 8 C1 RC Oscillator OSC Reset 5 Microcontroller State machine OSC Trigger 2 Mode 3 Wake-up 4 Input signal conditioning Enable Power-on reset POR 1 POR External switching circuitry Test logic 7 GND Pin Configuration Figure 2. Pinning SO8 2 WAKE-UP 1 8 OSC TRIG 2 7 GND MODE 3 6 VDD ENA 4 5 RESET U5021M 4756C–AUTO–09/04 U5021M Pin Description Pin Symbol Function 1 WAKE-UP 2 TRIG 3 MODE 4 ENA Enable output (push-pull) It is used for the control of peripheral components. It is activated after the processor triggers three times correctly. 5 RESET Reset output (open drain) Resets the processor in the case of a trigger error or if a wake-up pulse occurs during the long watchdog period. Wake-up input (pull-down resistor) There is one digitally debounced wake-up input. During the long watchdog window, each signal slope at the input initiates a reset pulse at pin 5. Trigger input (pull-up resistor) It is connected to the microprocessor’s trigger signal. Mode input (pull-up resistor) The processor’s mode signal initiates the switchover between the long and the short watchdog time. 6 VDD Supply voltage 7 GND Ground, reference voltage 8 OSC RC oscillator Functional Description Supply Voltage, Pin 6 The U5021M requires a stabilized supply voltage VDD = 5 V ±5% to comply with its electrical characteristics. An external buffer capacitor of C = 10 nF may be connected between pin 6 and GND. RC Oscillator, Pin 8 The clock frequency, f, can be adjusted by the components R1 and C1 according to the formula: 1 f = --t where t = 1.35 + 1.57 R1 (C1 + 0.01) R1 in kΩ, C1 in nF and t in µs The clock frequency determines all time periods of the logic part as shown in the table “Electrical Characteristics” under the subheading “Timing” on page 9. With an appropriate component selection, the clock frequency, f, is nearly independent of the supply voltage as shown in Figure 3 on page 4. Frequency tolerance ∆fmax = 10% with R1 ±1%, C1 = ±5% 3 4756C–AUTO–09/04 Figure 3. Period t versus R1, at C1 = 500 pF 1000.00 100.00 t (µs) 4.5 V 10.00 5.0 V 5.5 V C1 = 500 pF 1.00 1 10 100 1000 R1 (kΩ) Figure 4. Power-on Reset and Switch-over Mode Pin 6 VDD t0 t6 Pin 5 Reset Out t1 Mode Pin 3 Supply Voltage Monitoring, Pin 5 During ramp-up of the supply voltage and in the case of supply-voltage drops the integrated power-on reset (POR) circuitry sets the internal logic to a defined basic status and generates a reset pulse at the reset output, pin 5. A hysteresis in the POR threshold prevents the circuit from oscillating. During ramp-up of the supply voltage, the reset output stays active for a specified period of time (t0) in order to bring the microcontroller into its defined reset status (see Figure 4). Pin 5 has an open-drain output. Switch-over Mode Time, Pin 3 The switch-over mode time enables the synchronous operation of microcontroller and watchdog. When the power-on reset time has elapsed, the watchdog has to be switched to monitoring mode by the microcontroller by a “low” signal transmitted to the mode pin (pin 3) within the time-out period, t1. If the low signal does not occur within t1 (see Figure 4), the watchdog generates a reset pulse, t6, and t1 starts again. Microcontroller and watchdog are synchronized with the switch-over mode time, t1, each time a reset pulse is generated. 4 U5021M 4756C–AUTO–09/04 U5021M Microcontroller in Active Mode Monitoring with the “Short” Trigger Window After the switch-over mode the watchdog operates in short watchdog mode and expects a trigger pulse from the microcontroller within the defined time window, t3, (enable time). The watchdog generates a reset pulse which resets the microcontroller if • the trigger pulse duration is too long • the trigger pulse is within the disable time, t2 • there is no trigger pulse Figure 5 shows the pulse diagram with a missing trigger pulse. Figure 5. Pulse Diagram with no Trigger Pulse During the Short Watchdog Time Pin 6 VDD t0 t1 Pin 5 Reset out t3 t2 Mode Pin 3 Pin 2 Trigger Figure 6 on page 6 shows a correct trigger sequence. The positive edge of the trigger signal starts a new monitoring cycle with the disable time, t2. To ensure correct operation of the microcontroller, the watchdog needs to be triggered three times correctly before it sets its enable output. This feature is used to activate or deactivate safety-critical components which have to be switched to a certain condition (emergency status) in the case of a microcontroller malfunction. As soon as there is an incorrect trigger sequence, the enable signal is reset and it takes a sequence of three correct triggers before enable is active. Microcontroller in Sleep Mode Monitoring with the “Long” Trigger Window The long watchdog mode allows cyclical wake-up of the microcontroller during sleep mode. As in short watchdog mode, there is a disable time, t4, and an enable time, t5, in which a trigger signal is accepted. The watchdog can be switched from the short trigger window to the long trigger window with a “high” potential at the mode pin (pin 3). In contrast to the short watchdog mode, the time periods are now much longer and the enable output remains inactive so that other components can be switched off to effect a further decrease in current consumption. As soon as a wake-up signal at the wake-up input (pins 1) is detected, the long watchdog mode ends, a reset pulse wakes-up the sleeping microcontroller and the normal monitoring cycle starts with the mode switch-over time. 5 4756C–AUTO–09/04 Figure 6. Pulse Diagram of a Correct Trigger Sequence During the Short Watchdog Time Pin 6 VDD t0 t1 Pin 5 Reset out t3 t2 t2 Mode Pin 3 Pin 2 Trigger ttrig Pin 4 Enable Figure 7 shows the switch-over from the short to the long watchdog mode. The wake-up signal during the enable time, t5, activates a reset pulse, t6. The watchdog can be switched back from the long to the short watchdog mode with a low potential at the mode pin (pin 3). Figure 7. Pulse Diagram of the Long Watchdog Time t6 t1 Pin 5 Reset out Wake-up Pins 1 t4 t5 Pin 3 Mode t2 Trigger Enable 6 Pin 2 Pin 4 U5021M 4756C–AUTO–09/04 U5021M State Diagram The kernel of the watchdog is a finite state machine. Figure 8 shows the state diagram with all possible states and transmissions. Many transmissions are controlled by an internal timer. The numbers for the time-outs are the same as on the pulse diagrams. Figure 8. State Diagram Reset state time out t 0 mode = 1 mode = 0 Mode switch state Short window disable state mode = 0 time out t 4 time out t 2 time out t 1 trg_ok = 1 trg_ok = 1 mode = 1 time out t 6 Long window disable state mode = 0 Short window enable state trg = 0 Long window enable state time out t 3 trg_err = 1 trg_err = 1 Reset out state time out t 5 or wedge = 1 trg = 0 or wedge = 1 Note: "mode" and "trg" are the debounced input signals from the pins MODE and TRG trg_ok = 1 after the rising edge of the trg signal trg_err = 1 when the trg signal low period is too long wedge = 1 after detecting the debounced changing of a signal level from the WUP pin every state change restarts the internal timer 7 4756C–AUTO–09/04 Absolute Maximum Ratings Stresses beyond those listed under “Absolute Maximum Ratings” may cause permanent damage to the device. This is a stress rating only and functional operation of the device at these or any other conditions beyond those indicated in the operational sections of this specification is not implied. Exposure to absolute maximum rating conditions for extended periods may affect device reliability. Parameters Symbol Value Unit Supply voltage VDD 6.5 V Output current IOUT ±2 mA Input voltage VIN -0.4 V to VDD +0.4 V V Ambient temperature range Tamb -40 to +125 °C Storage temperature range Tstg -55 to +150 °C Symbol Value Unit RthJA 180 K/W Thermal Resistance Parameters Junction ambient Electrical Characteristics VDD = 5 V; Tamb = -40°C to +85°C; reference point is pin 7, unless otherwise specified Parameters Test Conditions Supply voltage Pin Symbol Min. 4.5 V µA 3.9 4.5 V VPOR2 3.8 4.4 V VPOR_hys 40 200 mV 0.1 VDD Current consumption IDD Power-on reset Release reset state with rising voltage 6 VPOR1 Get reset state with falling voltage 6 VDD = 1 V to VPOR1 IRST = -300 µA Inputs Unit 60 VDD 6 Reset level for low VDD Max. 5.5 6 R1 = 66 kΩ Power-on reset hysteresis Typ. VRST 1, 2, 3 Logical “high” VIH Logical “low” VIL Hysteresis V 1.6 V 0.6 1.4 V VIN -0.3 VDD + 0.3 V VIN_hys Input voltage range 3.4 Input current 2, 3 I IN1 5 20 µA Input current 1 I IN2 -20 -5 µA 4, 5 IOUT -2 2 mA 0.2 V Outputs Maximum output current Logical output “low” IOUT = -1 mA 4, 5 VOL Logical output “high” IOUT = -1 mA 4 VOH Leakage current VOUT = 5 V 5 Ileak 8 VDD 0.2 V 2 µA U5021M 4756C–AUTO–09/04 U5021M Electrical Characteristics (Continued) VDD = 5 V; Tamb = -40°C to +85°C; reference point is pin 7, unless otherwise specified Parameters Test Conditions Pin Symbol Min. Typ. Max. Unit 5 % 4 Cycle Timing R1 = 66 kΩ, C1 = 470 pF, VDD = 4.5 V to 5.5 V Frequency deviation(1) ∆f Debounce time 2, 3 3 Debounce time 1 96 128 Cycle ttrgmax 45 Power-up reset time to 201 Cycle Switch over mode time t1 1,112 Cycle t2 130 Cycle Cycle Maximum trigger pulse length Disable time Short watchdog window Cycle Enable time Short watchdog window t3 124 Disable time Long watchdog window t4 71,970 Cycle Enable time Long watchdog window t5 30,002 Cycle t6 40 Cycle Reset-out time Note: 1. Frequency deviation also depends on the tolerances of the external components Ordering Information Extended Type Number Package U5021M-NFP Remarks SO8 – Package Information Package SO8 Dimensions in mm 5.2 4.8 5.00 4.85 3.7 1.4 0.25 0.10 0.4 1.27 6.15 5.85 3.81 8 0.2 3.8 5 technical drawings according to DIN specifications 1 4 9 4756C–AUTO–09/04 Revision History Please note that the following page numbers referred to in this section refer to the specific revision mentioned, not to this document. Changes from Rev. 4756A-AUTO-11/03 to Rev. 4756B-AUTO-07/04 1. Electrical Characteristics Table, page 8, row “Reset capability” added Changes from Rev. 4756B-AUTO-07/04 to Rev. 4756C-AUTO-09/04 1. Electrical Characteristics Table, page 8, row “Reset capability” changed in “Reset level for low VDD“ 10 U5021M 4756C–AUTO–09/04 Atmel Corporation 2325 Orchard Parkway San Jose, CA 95131, USA Tel: 1(408) 441-0311 Fax: 1(408) 487-2600 Regional Headquarters Europe Atmel Sarl Route des Arsenaux 41 Case Postale 80 CH-1705 Fribourg Switzerland Tel: (41) 26-426-5555 Fax: (41) 26-426-5500 Asia Room 1219 Chinachem Golden Plaza 77 Mody Road Tsimshatsui East Kowloon Hong Kong Tel: (852) 2721-9778 Fax: (852) 2722-1369 Japan 9F, Tonetsu Shinkawa Bldg. 1-24-8 Shinkawa Chuo-ku, Tokyo 104-0033 Japan Tel: (81) 3-3523-3551 Fax: (81) 3-3523-7581 Atmel Operations Memory 2325 Orchard Parkway San Jose, CA 95131, USA Tel: 1(408) 441-0311 Fax: 1(408) 436-4314 RF/Automotive Theresienstrasse 2 Postfach 3535 74025 Heilbronn, Germany Tel: (49) 71-31-67-0 Fax: (49) 71-31-67-2340 Microcontrollers 2325 Orchard Parkway San Jose, CA 95131, USA Tel: 1(408) 441-0311 Fax: 1(408) 436-4314 La Chantrerie BP 70602 44306 Nantes Cedex 3, France Tel: (33) 2-40-18-18-18 Fax: (33) 2-40-18-19-60 ASIC/ASSP/Smart Cards 1150 East Cheyenne Mtn. Blvd. Colorado Springs, CO 80906, USA Tel: 1(719) 576-3300 Fax: 1(719) 540-1759 Biometrics/Imaging/Hi-Rel MPU/ High Speed Converters/RF Datacom Avenue de Rochepleine BP 123 38521 Saint-Egreve Cedex, France Tel: (33) 4-76-58-30-00 Fax: (33) 4-76-58-34-80 Zone Industrielle 13106 Rousset Cedex, France Tel: (33) 4-42-53-60-00 Fax: (33) 4-42-53-60-01 1150 East Cheyenne Mtn. Blvd. Colorado Springs, CO 80906, USA Tel: 1(719) 576-3300 Fax: 1(719) 540-1759 Scottish Enterprise Technology Park Maxwell Building East Kilbride G75 0QR, Scotland Tel: (44) 1355-803-000 Fax: (44) 1355-242-743 Literature Requests www.atmel.com/literature Disclaimer: Atmel Corporation makes no warranty for the use of its products, other than those expressly contained in the Company’s standard warranty which is detailed in Atmel’s Terms and Conditions located on the Company’s web site. The Company assumes no responsibility for any errors which may appear in this document, reserves the right to change devices or specifications detailed herein at any time without notice, and does not make any commitment to update the information contained herein. No licenses to patents or other intellectual property of Atmel are granted by the Company in connection with the sale of Atmel products, expressly or by implication. Atmel’s products are not authorized for use as critical components in life support devices or systems. © Atmel Corporation 2004. All rights reserved. Atmel ® and combinations thereof are the registered trademarks of Atmel Corporation or its subsidiaries. Other terms and product names may be the trademarks of others. Printed on recycled paper. 4756C–AUTO–09/04