
Semiconductor Group
34
1997-10-01
C540U
C541U
Fail Save Mechanisms
The C540U/C541U offers enhanced fail safe mechanisms, which allow an automatic recovery from
software upset or hardware failure :
– a programmable watchdog timer (WDT), with variable time-out period from 256
μ
s up to
approx. 0.55
μ
s at 12 MHz. The WDT is not available in the C540U.
– an oscillator watchdog (OWD) which monitors the on-chip oscillator and forces the
microcontroller into reset state in case the on-chip oscillator fails; it also provides the clock for
a fast internal reset after power-on.
The watchdog timer in the C517A is a 15-bit timer, which is incremented by a count rate of
f
OSC
/12
or
f
OSC
/192. The system clock of the C517A is divided by two prescalers, a divide-by-two and a
divide-by-16 prescaler which are selected by bit WDTPSEL (WDTREL.7). For programming of the
watchdog timer overflow rate, the upper 7 bit of the watchdog timer can be written.
Figure 8-18
shows the block diagram of the watchdog timer unit.
Figure 18
Block Diagram of the Watchdog Timer
The watchdog timer can be started by software (bit SWDT) but it cannot be stopped during active
mode of the C541U. If the software fails to refresh the running watchdog timer an internal reset will
be initiated on watchdog timer overflow. For refreshing of the watchdog timer the content of the SFR
WDTREL is transfered to the upper 7-bit of the watchdog timer. The refresh sequence consists of
two consequtive instructions which set the bits WDT and SWDT each. The reset cause (external
reset or reset caused by the watchdog) can be examined by software (flag WDTS). It must be noted,
however, that the watchdog timer is halted during the idle mode and power down mode of the
processor.
MCB03384
WDCON (COH
OSC
f
-
-
-
-
OWDS
WDTS
WDT
SWDT
2
16
14
0
7
8
WDTL
WDTH
/ 6
External HW Reset
Control Logic
6
7
0
WDT Reset-Request
WDTPSEL
WDTREL