SFFSB11 December   2025 TCAN843-Q1

 

  1.   1
  2.   Trademarks
  3. 1Overview
  4. 2Functional Safety Failure In Time (FIT) Rates
  5. 3Failure Mode Distribution (FMD)
  6. 4Pin Failure Mode Analysis (Pin FMA)
  7. 5Revision History

Pin Failure Mode Analysis (Pin FMA)

This section provides a failure mode analysis (FMA) for the pins of the TCAN843-Q1. The failure modes covered in this document include the typical pin-by-pin failure scenarios:

Table 4-2 through Table 4-7 also indicate how these pin conditions can affect the device as per the failure effects classification in Table 4-1.

Table 4-1 TI Classification of Failure Effects
ClassFailure Effects
APotential device damage that affects functionality.
BNo device damage, but loss of functionality.
CNo device damage, but performance degradation.
DNo device damage, no impact to functionality or performance.

Figure 4-1 shows the D (SOIC, 14) pin diagram. Figure 4-2 shows the DMT (VSON, 14) pin diagram. Figure 4-3 shows the DYY (SOT, 14) pin diagram.

For a detailed description of the device pins please refer to the Pin Configuration and Functions section in the TCAN843-Q1 datasheet.

TCAN843-Q1 D (SOIC, 14) Pin DiagramFigure 4-1 D (SOIC, 14) Pin Diagram
TCAN843-Q1 DMT (VSON,
                                                  14) Pin DiagramFigure 4-2 DMT (VSON, 14) Pin Diagram
TCAN843-Q1 DYY (SOT, 14) Pin DiagramFigure 4-3 DYY (SOT, 14) Pin Diagram

Following are the assumptions of use and the device configuration assumed for the pin FMA in this section:

  • VCC = 4.5V to 5.5V
  • VSUP = 4.5V to 28V
  • VIO = 2.9V to 5.5V
Table 4-2 Pin FMA for Device Pins Short-Circuited to Ground
Pin NamePin No.Description of Potential Failure EffectsFailure Effect Class
TXD1The TXD pin becomes biased dominant indefinitely. The device enters dominant time-out mode and is unable to transmit data.B
GND2None.D
VCC3The CAN transmitter is not powered and the device enters sleep mode. There is a high current draw from the external regulator supplying to the VCC pin.B
RXD4The RXD output is biased recessive indefinitely. The host is unable to receive data from the bus.B
VIO5The device enters sleep mode. The transceiver is passive on the bus. There is a high current draw from the external regulator that supplies to VIO.B
EN6The EN pin becomes biased low. The device is not able to enter normal mode and is unable to communicate.B
INH7High ISUP current can occur. The INH pin can be damaged and indication from sleep mode transition is not available.A
nFAULT8The nFAULT pin is biased low indefinitely, which indicates a fault indefinitely to the MCU.B
WAKE9The WAKE pin is biased low indefinitely, and the device is not able to utilize the local wake-up function.B
VSUP10The device becomes unpowered. There is high current flowing from the source supplying to the VSUP pin (battery) to ground.B
NC11None.D
CANL12The VO(REC) specification is violated, and EMC performance potentially degrades.C
CANH13The device cannot drive the dominant bit to the bus, so communication is not possible.B
nSTB14The nSTB pin becomes biased low indefinitely. The transceiver is unable to enter normal mode and is unable to communicate. B
Thermal Pad-None.D
Note: The VSON package includes a thermal pad.
Table 4-3 Pin FMA for Device Pins Open-Circuited
Pin NamePin No.Description of Potential Failure EffectsFailure Effect Class
TXD1The TXD pin defaults to a recessive bias. The driver is always recessive and the system is unable to transmit data.B
GND2The device becomes unpowered.B
VCC3The CAN transmitter is not powered and the device enters sleep mode. There is a high current draw from the external regulator supplying to the VCC pin.B
RXD4The MCU is unable to receive data from the transceiver.B
VIO5The device enters protected mode.B
EN6The EN pin defaults to a logic-low bias. The device is not able to enter normal mode and is unable to communicate.B
INH7The system power control is potentially affected.C
nFAULT8The MCU becomes unable to monitor faults in the system.B
WAKE9The local wake-up function is not able to be used.B
VSUP10The device becomes unpowered.B
NC11None.D
CANL12The device cannot drive dominant on the bus and is unable to communicate.B
CANH13The device cannot drive dominant on the bus and is unable to communicate.B
nSTB14The nSTB defaults to a logic-low bias. The device is not able to enter normal mode and is unable to communicate.B
Thermal Pad-None.D
Note: The VSON package includes a thermal pad.
Table 4-4 Pin FMA for Device Pins Short-Circuited to Adjacent Pin
Pin NamePin No.Shorted toDescription of Potential Failure EffectsFailure Effect Class
TXD1GNDThe TXD pin is biased dominant indefinitely. The device enters dominant time-out mode and is unable to transmit data.B
GND2VCCThe CAN transmitter is not powered and the device enters sleep mode. There is a high current draw from the external regulator supplying to the VCC pin.B
VCC3RXDThe RXD output becomes biased recessive indefinitely. The controller is unable to receive data from CAN bus.B
RXD4VIOThe RXD output becomes biased recessive indefinitely. The controller is unable to receive data from CAN bus.B
VIO5ENThe EN pin becomes biased high indefinitely. The device is unable to enter standby and silent mode.B
EN6INHThere is an absolute maximum violation on the EN pin, except in sleep mode. The transceiver can be damaged.A
nFAULT8WAKEThere is a potential absolute maximum violation on the nFAULT pin if WAKE is biased high. The transceiver can be damaged.A
WAKE9VSUPThe WAKE pin becomes biased high indefinitely. The local wake-up function is not able to be used.B
VSUP10NCNone.D
NC11CANLNone.D
CANL12CANHThe CAN bus becomes stuck recessive. Communication is not possible. IOS current can be reached on the CANH or CANL pins.B
CANH13nSTBThe driver and receiver turn off when the CAN bus is recessive. The device potentially does not enter normal mode.B
Note: The VSON package includes a thermal pad. All device pins are adjacent to the thermal pad. The behavior of the device, when pins are shorted to the thermal pad, depends on the net that is connected to the thermal pad.
Table 4-5 Pin FMA for Device Pins Short-Circuited to VCC
Pin NamePin No.Description of Potential Failure EffectsFailure Effect Class
TXD1The TXD pin becomes biased recessive indefinitely. The device is unable to transmit data.B
GND2The CAN transmitter is not powered and the device enters sleep mode. There is a high current draw from the external regulator supplying to the VCC pin.B
VCC3None.D
RXD4The RXD output becomes biased recessive indefinitely. The controller is unable to receive data from CAN bus.B
VIO5The I/O pins operate as 5V inputs and outputs. The microcontroller can be damaged if VCC > VIO.C
EN6The EN pin becomes biased high indefinitely. The device is unable to enter standby and silent mode.B
INH7The INH pin is biased at VCC voltage. The system potentially does not wake up. High current draw from the INH pin is possible.B
nFAULT8The nFAULT pin becomes biased high indefinitely. The transceiver is unable to report faults.B
WAKE9The local wake-up function is not able to be used.B
VSUP10The power rails of the system are short-circuited. Damage to the transceiver potentially occurs depending on the stronger power source if the absolute maximum rating of VCC is exceeded.

A

NC11None.D
CANL12IOS current can be reached. The CAN bus can potentially become stuck recessive, and the device is unable to drive a dominant signal onto the bus.B
CANH13The VO(REC) specification is violated, and EMC performance potentially degrades.C
nSTB14The nSTB pin becomes biased high indefinitely. The transceiver is unable to enter standby and sleep mode.B
Table 4-6 Pin FMA for Device Pins Short-Circuited to VSUP
Pin NamePin No.Description of Potential Failure EffectsFailure Effect Class
TXD1An absolute maximum violation occurs and the transceiver can be damaged.A
GND2The device becomes unpowered, and high ISUP current potentially occurs.B
VCC3An absolute maximum violation occurs and the transceiver can be damaged.A
RXD4An absolute maximum violation occurs and the transceiver can be damaged.A
VIO5An absolute maximum violation occurs and the transceiver can be damaged.A
EN6An absolute maximum violation occurs and the transceiver can be damaged.A
INH7The INH pin becomes stuck at the VSUP level. The external regulator potentially does not enter low-power mode once the transceiver transitions to sleep mode.D
nFAULT8An absolute maximum violation occurs and the transceiver can be damaged.A
WAKE9The WAKE pin becomes biased high. The local wake-up function is not able to be used.B
VSUP10None.D
NC11None.D
CANL12IOS current can be reached. The bus becomes stuck recessive, and communication is not possible.B
CANH13The VO(REC) specification is violated, and EMC performance potentially degrades. There is an increased likelihood of communication errors on the CAN bus.C
nSTB14An absolute maximum violation occurs and the transceiver can be damaged.A
Table 4-7 Pin FMA for Device Pins Short-Circuited to VIO
Pin NamePin No.Description of Potential Failure EffectsFailure Effect Class
TXD1The TXD pin becomes biased recessive indefinitely. The device is unable to transmit data.B
GND2The device enters low-power mode. There is a high current draw from the external regulator supplying to the VIO pin.B
VCC3If VIO < UVCC, an undervoltage condition potentially occurs on VCC.C
RXD4The RXD output becomes biased recessive indefinitely. The controller is unable to receive data from CAN bus.B
VIO5None.D
EN6The EN pin becomes biased high indefinitely. The device is unable to enter standby and silent mode.B
INH7The INH pin is biased at VIO voltage. The system potentially does not wake up. High current draw from the INH pin is possible.

A

nFAULT8The nFAULT pin becomes biased high indefinitely. The transceiver is unable to report faults.B
WAKE9The local wake-up function is not able to be used.B
VSUP10The power rails of the system are short-circuited. Damage to the transceiver potentially occurs, depending on the stronger power source, if the absolute maximum rating of VIO is exceeded.

A

NC11None.D
CANL12IOS current can be reached. The CAN bus potentially becomes stuck recessive, and the device is unable to drive a dominant signal onto the bus.B
CANH13The VO(REC) specification is violated, and EMC performance potentially degrades.C
nSTB14The nSTB pin becomes biased high indefinitely. The transceiver is unable to enter standby and sleep mode.B