Fault-Tolerant CAN/LIN Fail-Safe System Basis Chip

UJA1061TW

The UJA1061 fail-safe System Basis Chip (SBC) replaces basic discrete components that are common in every Electronic Control Unit (ECU) with a Controller Area Network (CAN) and a Local Interconnect Network (LIN) interface. The fail-safe SBC supports all networking applications that control various power and sensor peripherals by using fault-tolerant CAN as the main network interface and LIN as a local sub-bus. The fail-safe SBC contains the following integrated devices:

  • ISO11898-3 compliant fault-tolerant CAN transceiver, interoperable with TJA1054,TJA1054A and TJA1055
  • LIN transceiver compliant with LIN 2.0 and SAE J2602, and compatible with LIN 1.3
  • Advanced independent watchdog
  • Dedicated voltage regulators for microcontroller and CAN transceiver
  • Serial peripheral interface (full duplex)
  • Local wake-up input port
  • Inhibit/limp-home output port

In addition to the advantages of integrating these common ECU functions in a single package, the fail-safe SBC offers an intelligent combination of system-specific functions such as:

  • Advanced low-power concept
  • Safe and controlled system start-up behavior
  • Advanced fail-safe system behavior that prevents any conceivable deadlock
  • Detailed status reporting on system and subsystem levels

The UJA1061 is designed to be used in combination with a microcontroller that incorporates a CAN controller. The fail-safe SBC ensures that the microcontroller is always started up in a defined manner. In failure situations, the fail-safe SBC will maintain microcontroller functionality for as long as possible to provide full monitoring and a software-driven fall-back operation. The UJA1061 is designed for 14 V single power supply architectures and for 14 V and 42 V dual power supply architectures.

See product image

Product Details

Select a section:

Features

2.1 General
  • Contains a full set of CAN and LIN ECU functions:
    • CAN transceiver and LIN transceiver
    • Voltage regulator for the microcontroller (3.3 V or 5.0 V)
    • Separate voltage regulator for the CAN transceiver (5 V)
    • Enhanced window watchdog with on-chip oscillator
    • Serial Peripheral Interface (SPI) for the microcontroller
    • ECU power management system
    • Fully integrated autonomous fail-safe system
  • Designed for automotive applications:
    • Supports 14 V, 24 V and 42 V architectures
    • Excellent ElectroMagnetic Compatibility (EMC) performance
    • ±8 kV ElectroStatic Discharge (ESD) protection Human Body Model (HBM) for off-board pins
    • ±6 kV ElectroStatic Discharge (ESD) protection IEC 61000-4-2 for off-board pins
    • ±60 V short-circuit proof CAN/LIN-bus pins
    • Battery and CAN/LIN-bus pins are protected against transients in accordance with ISO 7637
    • Very low sleep current
  • Supports remote flash programming via the CAN-bus
  • Small 6.1 mm × 11 mm HTSSOP32 package with low thermal resistance

CAN transceiver

  • ISO 11898-3 compliant fault-tolerant CAN transceiver
  • Enhanced error signalling and reporting
  • Dedicated low dropout voltage regulator for the CAN-bus:
    • Independent from microcontroller supply
    • Guarded by CAN-bus failure management
    • Significantly improves EMC performance
  • Partial networking option with global wake-up feature, allows selective CAN-bus communication without waking up sleeping nodes
  • Bus connections are truly floating when power is off
  • Ground shift detection

LIN transceiver

  • LIN 2.0 compliant LIN transceiver
  • Enhanced error signalling and reporting
  • Downward compatible with LIN 1.3 and the TJA1020

Power management

  • Smart operating modes and power management modes
  • Cyclic wake-up capability in Standby and Sleep modes
  • Local wake-up input with cyclic supply feature
  • Remote wake-up capability via the CAN-bus and LIN-bus
  • External voltage regulators can easily be incorporated in the power supply system (flexible and fail-safe)
  • 42 V battery-related high-side switch for driving external loads such as relays and wake-up switches
  • Intelligent maskable interrupt output

Fail-safe features

  • Safe and predictable behavior under all conditions
  • Programmable fail-safe coded window and time-out watchdog with on-chip oscillator, guaranteeing autonomous fail-safe system supervision
  • Fail-safe coded 16-bit SPI interface for the microcontroller
  • Global enable pin for the control of safety-critical hardware
  • Detection and detailed reporting of failures:
    • On-chip oscillator failure and watchdog alerts
    • Voltage regulator undervoltages
    • CAN and LIN-bus failures (short-circuits and open-circuit bus wires)
    • TXD and RXD clamping situations and short-circuits
    • Clamped or open reset line
    • SPI message errors
    • Overtemperature warning
    • ECU ground shift (two selectable thresholds)
  • Rigorous error handling based on diagnostics
  • 23 bits of access-protected RAM is available e.g. for logging of cyclic problems
  • Reporting in a single SPI message; no assembly of multiple SPI frames needed
  • limp-home output signal for activating application hardware in case system enters Fail-safe mode (e.g. for switching on warning lights)
  • Fail-safe coded activation of Software development mode and Flash mode
  • One SPI readable device type identification
  • Software-initiated system reset

Documentation

Quick reference to our documentation types.

Filters

3 documents

Support

What do you need help with?

Search