LIN Master with High-Side Switch (Smart Pull-Up & Protection)
← Back to: Automotive Fieldbuses: CAN / LIN / FlexRay
A LIN Master with a High-Side Switch makes the master pull-up a controllable power + signal element, not just a resistor.
By shaping edges, limiting fault current, preserving wake/hold-up behavior, and exposing counters for attribution, it turns “bench OK, vehicle fails” into measurable and repeatable engineering decisions.
H2-1 · Definition & Scope Guard (What this page is / isn’t)
A LIN Master with High-Side Switch integrates a smart pull-up path (high-side switch + controlled R/diode/RC network), over-current protection, diagnostics, and often hold-up support, so the master-side edge shape, fault energy, and wake behavior remain predictable on real harnesses.
What it is (master-side building blocks)
- HS switch in the pull-up path — controls how VBAT feeds the bus during recessive and transitions.
- Controlled pull-up network (R/diode/RC) — shapes edge rate and robustness vs EMC trade-offs.
- Current limit + fault response — foldback/hiccup/thermal behavior to survive shorts and abuse.
- Diagnostics — fault bits + counters + wake attribution for serviceability.
- Optional hold-up — improves survivability through VBAT dips (crank/start-stop) and brownout recovery consistency.
What this page helps decide
- Pull-up strength vs edge shaping: control emissions without losing margin on worst harness CBUS.
- Over-current strategy: limit energy (thermal) yet recover deterministically after faults.
- Wake robustness: define filtering and wake attribution to suppress false-wake storms.
- Hold-up targets: guarantee consistent behavior through VBAT dips and brownout edges.
What to measure / log (minimum schema)
- VBAT / VDD: dips, recovery time, reset reason code (POR/BOD/WDT).
- LIN waveform snapshots: edge transitions on worst harness + temperature corners.
- Fault history: over-current count, thermal events, latch/auto-retry behavior.
- Wake attribution: bus/local/timer source + false-wake rate (X/day).
Not here (route to sibling pages)
- LIN protocol, frames, scheduling → see LIN Master/Controller.
- Slave-side electrical behavior and generic transceiver details → see LIN Transceiver.
- System-level surge/ISO pulse protection stacks (TVS, ISO 7637 planning) → see EMC / Protection & Co-Design.
Pass criteria (placeholders)
- False-wake rate: < X events/day on worst harness + temperature corners.
- Fault recovery: recover to normal bus operation within Y ms after short removal.
- VBAT dip robustness: no stuck-dominant; communication resumes within Z ms after VBAT recovery.
H2-2 · Where it sits in ECU topology (Master role & harness reality)
This page focuses on the master-side electrical responsibility on real vehicle harnesses: the pull-up path is the first-order lever for edge shape, robustness, wake reliability, and fault energy.
Bucket A · Body/Comfort networks (many nodes + long harness)
- Harness reality: long trunks, stubs, and many node inputs increase effective CBUS.
- Master must control: pull-up strength and slew so the bus stays readable without pushing emissions.
- What to log: waveform snapshots on worst harness, retries, and bus activity windows.
- Pass criteria: stable communication on max node count and max harness length across temperature (X/Y).
Bucket B · VBAT dips (start-stop, cold crank, load steps)
- Power reality: VBAT droops and recovery edges can desynchronize wake windows and reset states.
- Master must control: brownout behavior and recovery consistency (no stuck-dominant, deterministic re-entry).
- What to log: VBAT/VDD, reset reason, wake reason, and time-to-healthy-bus after recovery.
- Pass criteria: recovery within Z ms; no false wake storms during dip/recovery.
Bucket C · Serviceability (false wake, intermittent faults)
- Service reality: intermittent bus issues must be attributable (bus vs local vs power).
- Master must control: wake filtering and fault state exposure (bits + counters + timestamps).
- What to log: over-current/thermal counts, wake reason codes, and event rate histograms.
- Pass criteria: false-wake < X/day; fault recovery success > Y% across corner cases.
Not here (kept intentionally brief)
Node-count planning, gateway wake policies, and upper-layer diagnostics workflows are referenced only as context and routed to dedicated pages.
H2-3 · Smart Pull-Up Path Model (HS switch + R/diode/RC network)
Treat the master-side pull-up as an equivalent electrical path that sets edge shape, steady-state current, and fault energy on a real harness. The goal is not perfect math; it is consistent measurement points and direction-correct estimates that explain field behavior.
Equivalent path (what current actually does)
Model the recessive pull-up path as: VBAT → HS switch (RDS(on)) → pull-up network (R/diode/RC) → LIN bus. The bus itself is a load dominated by CBUS (harness + node inputs) plus node leakage and clamp paths. This model is sufficient to locate the dominant contributors to slow edges, margin loss, and repeatability issues.
Quantified knobs (minimum parameter set)
- REQ: effective pull-up resistance seen by the bus (includes network + RDS(on) contributions).
- RDS(on): HS switch path resistance and its temperature sensitivity (edge/bus-high drift).
- CBUS: harness + node input capacitance; increases with node count and stub length.
- VBAT corner: low/high supply corners (cold crank vs load dump proximity) that shift current and thresholds.
- IPK / IDOM: peak pull-up current vs dominant-phase current; used to sanity-check limit settings.
- Measurement points: VBAT, VBUS, and I (shunt/proxy current-limit telemetry) on the same time base.
Direction-only estimates (use for sanity checks)
Dominant current magnitude (order-of-magnitude): IDOM ≈ (VBAT − VBUS,DOM) / REQ
Use to verify that current-limit settings do not unintentionally collapse dominant margin on worst harness corners.
Edge sensitivity to harness capacitance (trend only): tr ~ REQ · CBUS
Use to explain why “more nodes/longer harness” slows edges; confirm final margin with real harness measurement.
Measurement hooks (to close the loop)
- VBAT: record supply corner and dip/recovery edges on the same capture as the bus.
- VBUS: capture both recessive edges and dominant levels on worst harness and temperature corners.
- I proxy: shunt or device telemetry for current-limit events; correlate to retries and wake anomalies.
- CBUS surrogate: compare configurations (node count/stub length) as controlled experiments; avoid guessing.
Not here (kept narrow on purpose)
Full transceiver-level waveform specifications and protocol timing rules are routed to the dedicated LIN Transceiver page.
H2-4 · Current Limit, Over-Current Protection & Thermal Behavior
Over-current handling is not a binary feature. It is a state machine that determines how much energy is dumped during shorts, how the device recovers, and whether the bus returns to a consistent “healthy” state without false wake storms or degraded edges.
Protection behaviors (describe by outcomes, not vendors)
- Fixed current limit: clamps current; thermal headroom decides survival time under sustained fault.
- Foldback: reduces current after detection; improves thermal survivability but may reduce dominant margin.
- Hiccup (auto-retry): cycles on/off; reduces average power but can create periodic bus disturbances.
- Thermal shutdown: turns off when T exceeds TSD; recovery depends on hysteresis and cooling conditions.
Digital fields that must be defined (minimum schema)
- ILIMIT: limit magnitude (and foldback profile if applicable).
- tLIMIT: time-to-action (and any timers that gate retries).
- TSD and hysteresis: thermal shutdown threshold and recovery behavior.
- Auto-retry policy: hiccup period, max retries, cool-down requirements.
- Latch/clear conditions: what clears fault state (time, voltage, temperature, register action).
- Counters: over-current count, thermal count, and “recover-to-healthy-bus time” for serviceability.
Why these fields matter: they distinguish “a fault happened” from “the system returns to a known-good state”. Without consistent attribution, intermittent issues become un-debuggable.
Design decisions (risk-managed trade-offs)
- Limit too low → dominant level and wake robustness can degrade on worst CBUS and low VBAT corners.
- Limit too high → higher fault energy and thermal stress; increases risk of post-stress drift and intermittent failures.
- Recovery consistency → define clear conditions and verify “recover-to-healthy-bus” time is bounded (Y ms placeholder).
Not here (system-level compliance)
ISO pulse compliance, load-dump planning, and external protection stack design are routed to EMC / Protection & Co-Design. This section stays focused on current limiting, thermal behavior, and deterministic recovery.
Pass criteria (placeholders)
- Recover-to-healthy-bus: < Y ms after short removal, across temperature corners.
- No stuck-dominant: bus returns to recessive without manual intervention.
- Event attribution: over-current/thermal counters reflect real events (no window/definition mismatch).
H2-5 · Hold-up Behavior (keep-alive, cranking dip, brownout)
Hold-up is used to keep the master-side state predictable through VBAT dips (cranking/start-stop), so the bus does not suffer from reset-induced false wakes, missed wake windows, or misleading diagnostics.
Hold-up targets (behavior, not voltage bragging)
- No reset storm: avoid uncontrolled POR/BOD cycles that change wake behavior.
- No false wake cascade: prevent dip/recovery edges from being interpreted as bus activity.
- No missed wake window: ensure recovery timing stays within the expected wake/sleep policy.
- No stuck-dominant: after recovery, the bus must return to a healthy recessive state.
Minimum sizing framework (direction-only)
Hold-up capacitor (minimum estimate): Chold ≥ Iload · Δt / ΔV
- Iload: critical-domain current that must remain stable (the part that prevents unpredictable resets).
- Δt: the required ride-through time for the dip profile (crank/start-stop window).
- ΔV: usable voltage window above brownout threshold (do not use full rail swing).
This estimate is for sizing direction only; final behavior must be verified on a real dip/recovery profile with synchronized logging.
What to measure & record (minimum dataset)
- Brownout threshold: BOD level and hysteresis; document the effective threshold in-system.
- Reset reason: POR / BOD / WDT; avoid “unknown reset” classifications.
- Dip profile: VBAT min, duration, recovery slope; capture VBAT and VDD on the same time base.
- Post-recovery bus state: stuck-dominant check + recover-to-healthy-bus time (Y ms placeholder).
Not here (power-domain strategy)
Detailed SBC power-domain policies, watchdog architecture, and reset-tree design are routed to SBC integrating LIN. This section stays focused on hold-up sizing, brownout thresholds, and post-dip bus behavior.
Pass criteria (placeholders)
- Recover-to-healthy-bus: < Y ms after dip recovery, across temperature corners.
- No false wake spike: false-wake rate remains < X/day during dip/recovery campaigns.
- Reset attribution: POR/BOD/WDT classification matches observed thresholds and timing (no ambiguity).
H2-6 · Sleep/Wake & Wake Robustness (false wake, wake attribution)
Wake robustness depends on consistent attribution. Define how bus activity is detected, how it is filtered, and how a wake reason is latched and counted, so false wakes can be isolated by temperature, harness, nodes, and power behavior.
Wake sources (master-side attribution only)
- Bus wake: activity detected by a bus comparator; sensitive to edge noise and dip/recovery artifacts.
- Local wake: local input/event triggers a wake; must be distinguishable from bus-triggered wakes.
- Timer/gateway wake: scheduled wake; should produce an explicit reason code for diagnostics.
Digital definitions (minimum vocabulary)
- Wake reason code: fixed enumeration for bus/local/timer; must be stable across software versions.
- Wake filter window: time window and rule set used to accept/reject activity as a wake event.
- Debounce: minimum persistence requirement that suppresses spikes and ringing artifacts.
- Bus activity counter: defined counting window and conditions (avoid denominator mismatch across logs).
False-wake triage path (repeatable)
- Bucket by reason: group events by wake reason code (bus/local/timer) before any hypothesis.
- Layer by conditions: temperature, harness configuration, node count, and VBAT dip profiles.
- Align window definitions: filter window, debounce, and counter windows must match across logs.
- Correlate to captures: bus waveform + event log on the same time base to confirm the root bucket.
Not here (other bus ecosystems)
CAN partial networking is a CAN subsystem topic and is intentionally excluded from this LIN master page.
Pass criteria (placeholders)
- False wake: < X events/day across temperature and harness corners.
- Attribution coverage: 100% of wakes have a valid reason code (no “unknown wake”).
- Counter consistency: bus activity counter uses a fixed window and definition across builds.
H2-7 · Signal Quality Knobs (slew/edge, symmetry, Cbus sensitivity)
The master side can shape the bus edge and symmetry, but every knob moves multiple outcomes. The goal is to pass EMC while keeping communication margin and wake behavior stable across harness and temperature corners.
Knobs available on the master side (minimum set)
- Slew control: controls dv/dt on edges; trades EMI vs sampling margin and wake sensitivity.
- Pull-up strength: effective REQ and pull-up current; trades margin vs emissions and fault energy.
- Transition shape: dominant↔recessive behavior influenced by HS switch behavior and shaping components.
- RC/diode paths: used to damp ringing/overshoot or provide a controlled fast path (describe by behavior).
Harness / CBUS coupling (what changes in the field)
CBUS increases (longer harness, more nodes, longer stubs) → edges slow down → sampling margin and retry rates can degrade.
Edges too fast → radiated emissions rise and wake detection becomes more sensitive to ringing and dip/recovery artifacts.
Treat CBUS as a real system variable. Verify final behavior on representative harness configurations, not only on a bench short cable.
Knob-to-effect rules (directional)
- Slew slower → EMI ↓ ; margin may ↓ on high CBUS corners; wake sensitivity often improves.
- Pull-up stronger → margin ↑ ; EMI ↑ ; fault energy ↑ (short events become harsher).
- RC shaping stronger → ringing ↓ ; EMI ↓ ; over-shaping risks long tails and sampling issues.
- Symmetry drift (temp/VBAT) → window narrows; verify both edges and steady levels across corners.
Required A/B comparisons (minimum experiment matrix)
- Short vs long harness: compare edges, overshoot/undershoot, retries, and bus activity counts.
- Cold vs hot: include pull-up strength drift and symmetry changes; log error/retry statistics.
- Few vs many nodes: treat node count and stubs as a controlled variable for CBUS.
- Same time base: waveform capture and counters must share a synchronized timestamp window definition.
Log schema (minimum): edge metrics (t_r/t_f + overshoot), retry/error counters, wake counters, and EMC pass/fail margin.
Not here (external protection selection)
TVS arrays, common-mode chokes, and protection/termination component selection details are routed to EMC / Protection & Co-Design. This section stays on master-side knobs and measurement closure.
H2-8 · Diagnostics, Safety Hooks & Serviceability
A LIN master becomes serviceable when faults are attributable. Expose a minimal set of fault bits and counters, define window and clear rules, and tie events to a timestamp so field issues can be reproduced and closed.
Recommended diagnostic set (grouped)
Bus
open/short • stuck dominant • bus activity counter
Fault
over-current events • thermal events • latch status
Power
brownout resets • reset reason (POR/BOD/WDT)
Wake
wake reason code • wake counts • false wake counts
Serviceability rules (hard requirements)
- Every wake has a reason: no “unknown wake” category allowed.
- Every fault has clear rules: time/voltage/temp/register conditions must be defined.
- Windows are defined: counter windows and filter windows must be documented and stable.
- Events are time-aligned: timestamp (or window id) must enable correlation with waveform capture.
Safety hooks (hooks only, not a full safety case)
- Fault injection points: exercise OC, brownout, stuck dominant, and wake filters in validation.
- Coverage thinking: detect → record → recover; ensure each step is observable.
- Independent monitoring hook: correlate reset reason and wake reason for consistency checks.
Pass criteria (placeholders)
- False wake: < X/day (across temperature and harness corners).
- OC recovery success: > Y% (defined as recovery to healthy bus within Z ms).
- Post-brownout recovery: communication restored < Z ms after recovery.
Not here (upper-layer diagnostics)
Upper-layer UDS/DoIP procedures and network-management workflows are routed to gateway/diagnostics pages. This section stays on device-level bits, counters, and event logging.
H2-9 · Layout & Hardware Integration (placement, return paths, hooks)
Layout determines whether the master pull-up and protection behavior remains stable on a real harness. Keep the HS switch/pull-up loop close to the LIN pin, maintain a continuous return path, and expose hooks to correlate bus symptoms with power and fault events.
Placement priorities (master-side only)
- Interface zone first: keep connector-facing protection and the LIN pin loop short to control parasitics.
- HS switch + pull-up network close to LIN: treat the pull-up path as part of the waveform, not “just power.”
- Decoupling close to the active domain: keep high di/dt return currents away from wake/fault sensing references.
Return paths & partition (predictable current loops)
Interface zone
LIN pin + protection + HS pull-up loop. Keep returns continuous under the LIN trace.
Power zone
VBAT input, key decoupling, optional sense elements. Keep high di/dt loops tight to avoid injecting ground bounce.
Digital zone
MCU/logging. Prevent interface-zone returns from crossing sensitive digital references.
Do not diagnose from the wrong place: waveform and return path behavior must be checked near the LIN pin, not at a distant node.
Measurement hooks (minimum set)
- VBAT: capture dip/recovery profiles that can trigger protection or reset chains.
- VDD: correlate brownout thresholds to reset reason and bus symptoms.
- LIN (near pin): validate edge/overshoot where parasitics are actually applied.
- FAULT: latch timing for OC/thermal events; prevents “silent” degradations.
- WAKE: attribute false wakes to bus vs local sources.
- Reset reason strap/state: POR/BOD/WDT attribution must be observable and consistent.
Typical pitfalls (fast checks)
Protection too far from connector
Symptom: bench looks OK, vehicle shows bursts/EMI hot spots. Check LIN at the pin and compare to a far-node probe.
Broken return under LIN trace
Symptom: intermittent errors, wake sensitivity, temperature dependence. Verify continuity of the return plane and loop area.
Wrong measurement point
Symptom: “scope looks clean” but real harness fails. Align VBAT/VDD/LIN/FAULT/WAKE on the same time base.
Not here (full EMC parts and clauses)
Detailed EMC component parameters and standard clause mapping are routed to EMC / Protection & Co-Design. This section focuses on master-side placement, returns, and measurement hooks.
H2-10 · Validation Plan (bench → harness → vehicle) + correlation rules
Validation must be staged. Bench stability is only a starting point; harness and vehicle corners change Cbus, noise, and power behavior. Use a fixed log schema and time-aligned correlation rules so vehicle failures can be reproduced and closed.
Three-stage funnel (what each stage proves)
- Stage 1 — Bench (short cable): tune knobs into a stable region and freeze measurement windows and counters.
- Stage 2 — Harness (representative): validate CBUS sensitivity on worst length and max node count.
- Stage 3 — Vehicle (real disturbance): validate wake/hold-up/reset attribution under VBAT dips and temperature corners.
Correlation rules (time-base hard rules)
- One time base: waveform capture window = error/retry counter window = wake window.
- Wake event schema: timestamp + reason code + window id (no ambiguous wake bucket).
- Reset attribution: reset reason must correlate to VBAT/VDD threshold evidence.
- Fixed denominators: define the denominator of “rate” metrics (per time, per frame, per window).
Minimum must-do checklist (do not skip)
- Cold/hot: capture symmetry drift and margin changes across temperature corners.
- Low/high VBAT: include dip/recovery profiles; correlate to reset and wake attribution.
- Max nodes + worst harness length: treat CBUS as a controlled worst case.
- Repeated wake cycles: stress wake filters and counters; quantify false wake rate (X/day placeholder).
Stage gates (placeholders)
Stage 1 — Bench
Stable waveform shape + low retry/error count under controlled conditions.
Stage 2 — Harness
Worst harness and max nodes remain stable (no margin collapse).
Stage 3 — Vehicle
False wake < X/day; post-brownout recovery < Z ms; attribution = 100%.
Vehicle failure triage (first order)
- Reset reason + VBAT/VDD: confirm whether brownout/reset changed bus behavior.
- Wake reason + filter window: bucket false wakes by bus vs local vs timer sources.
- LIN waveform at the pin: check edge/tail/ringing on the real harness corner.
- Counters and denominators: ensure retry/error metrics use fixed windows and definitions.
Not here (production ATE station details)
Detailed ATE station design and factory test workflows are excluded here. This section defines bench-to-vehicle validation stages and time-aligned correlation rules.
H2-11 · Engineering checklist (Design → Bring-up → Production)
This gate-based checklist prevents the common “bench OK, vehicle fails” trap by forcing consistent definitions, measurable thresholds, and reproducible fault injections for the master pull-up / HS-switch path.
Design gate (freeze numbers + definitions)
- Freeze pull-up model: RPU target, diode/RC topology, HS-switch type (fixed limit / foldback / hiccup), and dominant timeout policy.
- Define numeric fields: I_LIMIT, TSD, retry policy, wake filter window, wake reason code mapping, brownout thresholds and reset reasons.
- Acceptance waveform template: test points (VBAT / VDD / LIN / FAULT / INH), probe bandwidth note, and pass/fail screenshot rules.
- Protection footprint decision: LIN TVS/ESD location and parasitic allowance near connector.
Bring-up gate (correlate on real harness)
- Harness A/B compare: short vs long, max node count, worst stub; re-measure rise/fall and retry/error stats with the same log schema.
- 48h soak for false wake: temperature sweep + VBAT disturbance; record wake attribution (bus/local/timer) and event counters.
- Brownout recovery check: scripted VBAT dips; verify reset reason latches and “bus state after recovery” (no stuck dominant).
Production gate (fault injection + time-to-recover)
- Inject faults (sample basis): LIN short-to-GND, LIN short-to-VBAT, open-line, “dominant stuck”; log counters and thermal/overcurrent events.
- Recovery thresholds: recovery time < X ms, retry count < Y, and no persistent wake storms.
- Counter consistency: ECU log counters match bus monitor counters within ±Z% over a defined time window.
Concrete MPN examples to anchor the checklist (verify package/suffix/grade)
- LIN transceiver: TI TLIN1029-Q1 / TLIN1029A-Q1; NXP TJA1021; onsemi NCV7420.
- INH-based master pull-up control: Microchip ATA663211; onsemi NCV7462; ST L99PM62XP; NXP MC33910.
- Discrete HS switch: TI TPS1H100-Q1 / TPS1HB16-Q1; Infineon BTS4140N; ST VNQ7003SY.
- LIN port protection: Littelfuse AQ24-01FTG; Nexperia PESD1LIN (NRND reference).
- Pull-up path passives: Vishay CRCW12061K00FKEA (1 kΩ example), Nexperia BAV99W (diode example).
- Hold-up caps: Panasonic EEH-ZS1V471P (470 µF example) + TDK C3225X7S1H106K250AB (10 µF MLCC example).
H2-12 · Applications (where a master HS pull-up pays off)
This block is most valuable when the master is responsible for edge control, fault containment, and wake attribution across a noisy vehicle power environment and a long, variable harness.
Common ECU buckets (and the “why”)
Reference implementation bundles (MPN examples; verify suffix/package/grade)
- LIN PHY: TI TLIN1029-Q1 (or TLIN1029A-Q1).
- HS switch: TI TPS1H100-Q1 (adjustable limit) or TPS1HB16-Q1.
- Protection: Littelfuse AQ24-01FTG (TVS array) near connector.
- Pull-up path: Vishay CRCW12061K00FKEA (RPU example) + Nexperia BAV99W (diode example).
- LIN PHY: NXP TJA1021 (master pull-up via external R + diode between INH/VBAT and LIN).
- Alternative: Microchip ATA663211 (INH can switch master pull-up resistor).
- Hold-up: Panasonic EEH-ZS1V471P + MLCC (e.g., TDK C3225X7S1H106K250AB).
- SBC: onsemi NCV7462 (LIN/CAN + HS/LS + INH for pull-up/reg).
- PMIC: ST L99PM62XP (HS switch controllable to disconnect pull-up resistor).
- LIN SBC: NXP MC33910 (LIN + high-side drivers + SPI diagnostics).
H2-13 · IC selection logic (integrated HS pull-up vs external HS switch)
Selection is driven by measurable constraints: VBAT range, fault behavior, sleep current, wake robustness, diagnostics richness, and how much edge control is required to meet emissions without losing margin.
Must-have specs (use as a “scorecard” field list)
- VBAT & fault range: operating window, bus short tolerance, reverse battery strategy.
- Current limit behavior: fixed / foldback / hiccup, limit accuracy, and retry policy (time + counters).
- Thermal behavior: TSD threshold and recovery, “latched” vs “auto-retry”, and post-fault bus state.
- Sleep & wake: Iq_sleep, wake filters, wake reason attribution, and false-wake rate tracking.
- Diagnostics: event counters, fault registers, reset reason visibility, and injection hooks for safety cases.
- Edge knobs: slew control granularity, pull-up strength options, and sensitivity to C_bus.
Decision tree (with concrete MPN anchors)
Minimal “selection scorecard” output (copy/paste fields)
- Topology: Discrete / INH-based / SBC(PMIC)
- VBAT_min / VBAT_max / reverse policy
- I_LIMIT (typ/min/max) + type (fixed/foldback/hiccup)
- TSD threshold + recovery + latch policy
- Iq_sleep + wake filter window + false-wake target (X/day)
- Wake reason codes + event counters list
- Edge knobs: slew levels, pull-up strength options
- Hold-up: C_hold value + brownout threshold + recover time (X ms)
- Protection: TVS/ESD MPN + placement rule
Recommended topics you might also need
Request a Quote
H2-13 · FAQs (Smart pull-up + HS switch, data-driven triage)
Each answer follows a fixed 4-line structure: Likely cause / Quick check / Fix / Pass criteria. Use consistent denominators and time windows to avoid “metric illusions.”
Minimal logging schema (recommended fields)
- timestamp + window_id (fixed window length: W ms)
- wake_reason_code (bus/local/timer) + wake_filter_window_ms
- reset_reason (POR/BOD/WDT) + VBAT/VDD min within the same window
- oc_event_count, tsd_event_count, hiccup_cycles (if applicable)
- retry_count (per N frames) + bus_activity_count
- Waveform snapshots at LIN pin + probe note (bandwidth, reference point)
Short-to-GND happened once, and the bus became “more fragile” later—what is the first history check?
Quick check: correlate oc_event_count/tsd_event_count with waveform snapshots at LIN pin within the same window_id.
Fix: clear latch condition correctly, enforce cool-down policy, and re-validate pull-up behavior after a fault injection drill (short-to-GND).
Pass criteria: post-fault waveform returns to baseline and retry_count < X per 10k frames over Y minutes (same harness, same nodes).
Bench is stable, but the vehicle shows random false wakes—bus noise, VBAT dips, or filter window?
Quick check: bucket events by wake_reason_code and overlay with VBAT_min/VDD_min per window_id.
Fix: tighten wake filtering/debounce, improve hold-up margin if dips align, and validate on worst harness (max nodes + worst stub).
Pass criteria: false_wake_rate < X/day over Y days at cold/hot corners with unchanged denominators.
After cranking, some nodes miss the first frame—brownout reset or insufficient hold-up?
Quick check: confirm reset_reason and VBAT/VDD droop curves around the missed-frame timestamp (same time axis as bus activity).
Fix: increase hold-up (C_hold or load reduction), tune brownout thresholds/policy, and enforce “bus idle before first schedule” after recovery.
Pass criteria: after a scripted dip, first-frame success > X% across N cycles and recovery completes < Y ms (p95).
Dominant looks “OK” on the scope, but retries increase—Cbus shift or pull-up strength?
Quick check: compare rise/fall and tail behavior on worst harness vs bench while logging retry_count per N frames in the same window definition.
Fix: re-tune slew/pull-up strength for the worst harness and verify dominant/recessive thresholds at temperature corners.
Pass criteria: retry_count < X per 10k frames over Y minutes on worst harness + max nodes.
Over-current trips during normal dominant—Rpu too small or Ilimit too low?
Quick check: capture dominant current proxy (shunt/ISENSE if available) and align it with oc_event_count at max VBAT corner.
Fix: adjust pull-up equivalent strength (R/diode topology) or raise Ilimit within thermal and harness constraints; re-run fault and dominant stress tests.
Pass criteria: oc_event_count = 0 during normal operation over Y hours, while communication margin remains stable on worst harness.
Wake works at room temperature but fails at cold—what is the first corner check?
Quick check: compare cold vs room VBAT_min, edge shape at LIN pin, and wake_filter_window_ms behavior for identical wake stimuli.
Fix: increase wake robustness (filter tuning, edge strength within EMI limits) and validate on worst harness under cold VBAT profile.
Pass criteria: wake_success > X% across N attempts at cold corner, with false_wake_rate < Y/day.
Two harnesses behave differently, failing only with long stubs—edge shaping or protocol?
Quick check: measure LIN pin waveform on the failing harness and compare overshoot/tail vs the passing harness under the same node count.
Fix: re-tune slew/pull-up strength and enforce stub length control; validate again with max nodes + worst stub conditions.
Pass criteria: on the failing harness, retry_count < X per 10k frames and waveform tails stay within the acceptance template.
Changing slew fixes EMC but breaks communication—what is the first margin check?
Quick check: compare worst-harness retry statistics before/after slew change and inspect rise/fall vs the acceptance template at the LIN pin.
Fix: choose a slew level that passes EMC while keeping worst-harness margin; if needed, adjust pull-up strength rather than only slowing edges.
Pass criteria: EMC pass and retry_count < X per 10k frames at worst harness + cold VBAT profile.
Service logs show wake storms but no DTC—what is the first consistency check?
Quick check: verify window_id, window length, and whether counts are per-window or cumulative; cross-check with a bus monitor over the same timebase.
Fix: standardize counter definitions and ensure DTC thresholds use the same denominator (per W ms window / per hour / per day).
Pass criteria: monitor vs ECU counters agree within ±X% and wake reason distribution is stable across Y hours.
After ESD testing, communication still works but wake becomes noisy—what is the first suspect?
Quick check: compare pre/post ESD false_wake_rate and measure LIN recessive level/leakage behavior under identical conditions.
Fix: inspect protection placement/return paths, replace suspect components, and tighten wake filtering if leakage cannot be eliminated.
Pass criteria: post-ESD false_wake_rate < X/day and recessive level remains within the acceptance template across Y hours.
The high-side switch runs hot in sleep—what is the first electrical path to check?
Quick check: measure sleep current and verify HS control state; confirm whether LIN pull-up is physically disconnected as intended during sleep.
Fix: correct sleep gating logic, remove unintended paths, and validate against the worst-case VBAT corner for leakage/heat.
Pass criteria: Iq_sleep < X µA (or mA) and case temperature rise < Y °C over Z hours.
Recovery time varies widely after faults—what is the first timing definition to audit?
Quick check: define recovery markers (fault detect → HS re-enable → first successful frame) and log them with a single window_id and timestamp base.
Fix: standardize recovery state machine timing and ensure latch-clear policy is deterministic; re-run fault injection across corners.
Pass criteria: recovery time p95 < X ms and max < Y ms across N injections (short-to-GND/VBAT/open).
Data note: keep denominators fixed (per window / per 10k frames / per day) to make “before vs after” comparisons valid.