:
:
.
~
NO.
RSST Failure Mode, Effects, and Cr-iticality Analysis
REV. NO.
ATM 878 PAGE
1
DATE
5/28/70
This A TM 878, releases the Failure Mode, Effects, and Criticality Analysis for the Resettable Solid State Timer (RSST) into the Bendix documentation system. The major change between this document and corresponding documents as released by Gulton is the basic failure rate used in this ATM for the RCA CD4000 family of COS/MOS Fets. Bendix Reliability arrived at a more realistic failure_ rate in view of test data received from RCA frdm two·separate tests. The major effect that this change has upon all related documentation is that the COS/MOS counters now have the highest probability of failure of any part used in the RSST. This changes the criticality rankings of the parts covered by this document. The COS/MOS counters now have the highest criticality ranking of any part used in the RSST.
Prepared by Lee MosK:owitz ALSEP Reliabili
Approved by
J.v
S. J. Ellison Manager, ALSEP Reliability
OF
27
NO.
I
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
RELIABILITY GOAL
a. 996 PART, COMPONENT, UNIT, CIRCUIT ITEM, SET OR BOX DESCRIPTION
A2 Eaa78 COSMOS MSI Counter
MISSION PHASE(S)
Gulton DSD
STATEMENT OF THE ASSUMED FAILU.RE
---·A3 Eaa78 COSMOS MSI Counter
PAGE
SUPPLIER NAME
Fixed Output Stops Counting Fails to Reset Fix"d Output Stops Counting Fails to Reset
FAILURE MODE
Fixed Output Stops Counting Fails to Reset
Fails Low (Pin 4) --;--·-----. ·-Fails High (Pin4)
Fails Low (Pin 4) ·-·-,--- ..
----
Fails High (Pin 4) Fails Low (Pin 4)
AS Eaa78 COSMOS MSI Counter
Fixed output Stops counting Fails to Reset
ASSY DWG OR SK REFERENCE
IORIGINATQR
CK 13877-aa1.A
I
Fails High (Pin 4) Fails Low (Pin 4)
~·-
• I 1
Loss of Clock
.jl.!aI:1a
a. 5
Counter Stops
!
a.s
Los a of Clock
a.s
Counter Stops
!Liaia • :. ! ! ! • '• i !!
il.:aia j j_
a.s
a.s
: : I I I j i :a!ai4isla I~ !! i j j
i !.io!a 1 I. I :
.i8ja . i !. 1 j , 1 1' 1 "• • • jj!iOia~!oia !ll
•
P'
00.
•
•
1
-L~-i-+-~ ! j
!
•
•
:
:
I
! :
~~ j-r:~-s of 3 montb output, and 18 hour output s•1oss of 3 month output and 18 hour output
•
0.
•
:
! i
I •
•: •
!
, :
Loss of 3 !L!aia month/output, ! ; i and 18 hour ou u~I 0 !I If counter stops p.jaja one minute j output will ~ ! 1 0 • 0 also be lost ! '1 i i. ! ;
!!
a.
fTTI .:i4n ; . a 1a Is !a
•I II
--·--· ---··--....
-,~._._
FAILURE PROBABILITY x loS (Q),
•
I
:
0
:
I
•
ilL I LI I
!-~pI" iSla
!·
II
, ,
IIn I• !•
i
,
;
! i·P !" ~ ~ :0 I
I
ji,
1 : 1' I I
i :! II •
!•
1
1
:
I I :
I
!•
j 1 i
'
II :! .l
:
! 1 .i
l
iLia
i·
J· .
:
: : iLia
1 1
I
1
I
'
l
l
j
:
:
•
•
. 1
: l
-~-
.
1
l
!
iI 1
! j
I! l
1
I
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
OF
I
; I
... aa24
••
bl'
i
J
I· .,
Use quad output relay drivers with four 1 sec to 3 month counters. Add redundant
1i
I;
!
I • • j
:
I •
1
•· j 1 1 iI iI 1 i !i ! I ; I l I
I'
I
I
I
:
!
~
'I.
••
I
I !I ij i1 1~ Ia~~, . ,~ I •
I
I I
~
j :: : II I : ii i I!i i ! j l ! ·l0ifli4
1
...••• 1
; : 'I
!I .; I
I
l 1 j ! 1: i i 1 i I
----·- ·---.:.-r-L.+· i i i i
!I
I
I
I
I
:. ; I I1 : :; I I :••l!I :'
I l; iI !i i; Ii :! i !
·
0
! i ! II i !• •i !I
i
~
-.
.. •
t,
l
!:
I
I
•
·Pia!Z~
! ii : i :I i l II ' I : :! ! I
:
I:
It :
! ! j .. _, 1 :1' I i I : i i• ! .1a;atzj4
I
outp~~
3
•.p. I 2140 1• Ij 11 '
1'
il
Use quad relay drivers with four 1 sec to 3 mont counters Add redundant decoder for 18 hour output
RANK IRELIABILITY FOR MODEL CODE ASSY IDENTIFICATION
~h!l.2i4. 1 II 1 i. 11 •'I' I . I 1 1 • I 1 •
externally
one minute and 18 hour outputs
PAGES
RSST
r.
lI a!2:4
I
!i
Redundant 16KHz to 1 sec c ounte 1 s. 1Hzsignalcouldbe used to 1 un counter
r
!I :,
i
Z7
ASSEMB LY NAME
PROBABILITY CRITICALITY PRODUCT (a) x (E) x (Q) x lOS
Redundant 16 KHz to 1 sec Counters_
:
pr ~ ~~~ I
I :'
970-7
•
l j
! i ---~--------
I
2
I I
DATE !SUBSYSTEM NAME INITIAL 9 22 69 . REVISION 11l1al69
Rel
SYSTEM EFFECT ON ASSEMBLY' EFFECT (all · NUltfER
Fails High (Pin 4 )a. 5
.
A4 Eaa78 COSMOS MSI Counter
IREV.-NO
I
I
: ~ i ~ .
ili
I 1
i I! i !
z_
SHEET _ _
Of
__2L
NO.
I
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
1
RELIABILITY GOAL
0. 996
rl'e~~·s~~MJ'~~~~T6~~~~!PC.:~oc;.p 1 T
SUPPLIER NAME
MISSION PHASE(S)
I
ASSY DWG OR SK REFERENCE
Gulton DSD
STATEMENT OF THE ASSUMED FAILU.RE
A6 E0078 COSMOS MSI Counter
Fixed output Stops Counting Fails to Reset
Fails High (Pin 4)
Fails Low (Pin 4)
0. 50
output and 18 (hour output if lcounter stops. 0.
5~
..... ·· -- · ------A7 E0078 COSMOS MSI Counter
Fixed output Stops counting Fails to reset
Fails High (Pin 7)
Fails Low
AS E0078
I Loss of 3 month
0.50
"
·---o effect. edundant ounter will [ ause 3 month utput to occur
0. 50 Loss of 3 month utput
• I ' ; i ; lf
qo
j j i
! ii : ! !
A9 E0078
Stops counting
AlO E0078 COSMOS MSI Counter
Fails to Reset
Fails High (Pin 4)
Fails Low (Pin 4)
0.50
(Q)_
I
I
i·
I pp 14,!8 jo
:I
.
iiI
i·i .
!! ! i : !
1
i
Use quad output relay drivers with four 1 sec to 3 montr counters. Add redundant decoder for 18 hour output
!! o~o~ l!
:I
i ii •
I.
=
I
•
•.
+-1
I
I
L~ ~ 14 0~ io
IIpp i i: ~
)1i0!0 1!
i
l : ! !
~
i 1i,ojo
,S:O
,
i: .
i ;
p~ ~ , ~ i
Ip
: 1
(Q)
X
Use quad output relay drivers with four 1 sec to 3 montb counters. Use quad redundant drivers
p ''Use quad redundant counter and relay drivers
I
I
'
j
:
i
1
! .b oiz:4 1
i I ' I " i:ir1; 1
,
:I I!
.lo1o~io •
I
I
I--·---35
j
i•
! I;i! I:I i i .. o~~l4 il iI
i i
'I
:' i
!
i
i
i
.~b~~ .. '
. I. I:
~
.!0 ~i4
:!
ij
i : iI
iI li
J
I
I : t i I:
I I, .I
ii
RANK 'RELIABILITY FOR MODEL COOE ASSY IDENTIFICATION
5 '10
! I i I!
!i
ll
X
1l!7Tfi: 1/ i [ ·P1°i2 i4
I;
i
.
(E)
!
counter and relay J
X
PAGES
RSST
t'
i ii
! II
(a)
27
OF
ASSEMBLY NAME
PROBABILITY CRITICALITY PRODUCT
None
I
!I
970-7
DESIGN COMPENSATI ON TO ELIMINATE THE FAILURE MODE
t· t·..
! HO:O
-1--------f~-~~
0.50 (Loss of3 month (output
,o5
! !i i L iO io j8 !o lTT+!-+1 : ' , +.-+1 : -----
i Ii
! i!
Fixed output
FAILURE PROBABILITY x
(E)
(a)
3
T
Rel
SYSTEM EFFECT ON ASSEMBLY I ~~:g~~
FAILURE MODE
PAGE DATE SUBSYSTEM NAM!' INITIAL 9/22/69 REVISION 11/10/69
ORIGI NATO_R·
CK 13877-001A
IREV.NO
I'
1i l:
:: 'I
Ii
II .I •
I
I'
i l
!!
I:
!i
II,
! I
ii SHE~T _3_
OF _2_7_
1REV.~NO
NO.
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
RELIABILITY I SUPPLIER NAME GOAL
0.996
rNM~· S~~M6~~worfd~i pCfro~UIT
l
MISSION PHASE(S)
Gulton DSD
STATEMENT OF THE ASSUMED FAILURE
l lcK 13877-00IA
ASSY DWG OR SK REFERENCE
PAGE ORIGI NATqR·
Rel
SYSTEM EFFECT ON ASSEMBLY( ~~~~~ 't:)
FAILURE
MODE
OF
4
DATE !SUBSYSTEM NAME INITIAL 9/22/69 . REVISION 11/10/69
FAILURE PROBABILITY
• loS
(Q)
I
27
PAGES
ASSEMBLY NAME
RSST
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
RANK ~ReLIABILITY FOR MODEL CODE ASSY IOENTIFICA TION
35
CR CR CR CR CR CR
26
Shorts and Opens
Fails Low (Pin 7)
0.5
Short
0.8
27
Loss of 3 month counter
min. output will occur
28 29 30 31
at intervals up to 1 sec. A4 counter may speed up or stop. 18 hour output will occur early at a higher PRF
IN 3595 Diodes
Open
0.2
1 min. and 18 hour outpute will occur early
1l.ob
ii i
i I i !
·-----_.,..
..
r--·-----
RSST
Redundant Zeners
-----
Quad Resistors
···~-- ....... -~J
.....
'< ~-
RANK FOR ASSY
RELIABILITY
~~N\~,:j~~~ION
------- f-· 22
. 000005
.......
PAGES
27
PROBABILITY CRITICALITY PRODUCT (a) x (E) X (Q) X 1r
-- r - · - - - - -------
No effect slight change Ref voltage for reset
OF
rSSEMB LY NAME
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
Open
RCR07
CR4
FAILURE PROBABILITY X
I. 00
Short
··--·
SYSTEM EFFECT NUMBER (E)
Loss of Ref voltage for reset. Will lose initial reset an timer may go early
Open
.. f---------..·-··---..----.....
Rei
0. 80
·-·--·--- -------------
PAGE 20 DATE SUBSYSTEM NAM!! INITIAL 9/22/69 REVISION !!/!0/69
ORIGI NATO.R.
Short
IN4572A
CR2, CR3 IN914
I
IREV.NO
19 ,..
........,,..,.._
f---.. ··-~
. 0000045
21
. 0000005
28
... _....
_
·····--·+---·-··-·----...--.. Quad Resistors
00004
8
. 00001
14
970-?A SHEET
___12.
01'
_£__
~REV.~NO
NO.
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
SUPPLIER NAME
ASSY DWG OR SK REFERENCE TORIGI NATQR.
Gulton DSD
·FNM~·s~~M&~~~~T6~:l!~iPC.:Fo'i.UIT
CK 13877-001A
STATEMENT OF THE ASSUMED FAILU.RE
Rll, Rl2 RCR07
CR5 IN3595
Shorts and Opens
Shorts and Op~ns
(E)
fSUBSYSTEM HAM!'
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
(Q)
OF
I PROBABILITY CRITICALITY PRODUCT (a) x (E) x (Q) x 1g5
RANK rELIABILITY MODEL CODE IDENTIFICATION
FOR 1ASSY
Increase in outf 010 put tel em level for counter.
• 00000
None
• 00000005
34
Open
0.90
Next to last 3 1 o5o month counter stage looks like it is alway low.
• 000005
Quad Resistors
.00000225
24
Short
o. 10
Next to last 3 1050 month counter stage looks like it is low always.
• 000005
Quad Resistors
• 00000025
30
Open
0.90
Increase in out-1 010 put tele level for counter
• 000005
• 00000045
29
I.
00005
I
Quad Diodes
PAGES
RSST
o. 10
·;~~~-;~-~nd Opens ·----,ffi:o;;-----~:-sol~-~wi{i'"~ hoo
27
TASSEMB Ly NAME
~~~\~I~N 11/10 I 6
FAILURE PROBABILITY
• ,gS
9/22/69
Short
t . 00;~·--~--t-..- - - - - 1
loaded, Loss oJ power off._ Hole on time. '-.. Counter may stop. Open
970-7A '
DATE
Re1,
SYSTEM EFFECT ON ASSEMBLY I ~~~~~
FAILURE MODE
(a)
R9, RlO RCR07
21
PAGE TMISSION PHASE(S)
0. 20
J Next
to last counter stage looks high all the time,
050
• 00005
• 000005
19
SHEET~
OF
27
I
tREY. NO
NO.
I
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
RELIABILITY GOAL
0. 996
rr"£~~·sW\~~~~~T6~fc!~iP1'Fo'i.UIT
SUPPLIER NAME
riSSION PHASE(S)
JASSY DWG OR SK REFERENCE
FAILURE MODE
STATEMENT OF THE .ASSUME.D FAILU.RE
EFFECT ON ASSEMBLY
(a)
Shorts and Opens
Rl7 RCR07
Short and Opens
Q6 2N2222A
IPAGE DATE 9/22/69
ORIGI NATQR
CK 13877-00lA
Gulton DSD
Shorts and Opens
Q5 2N2907A
I
SYSTEM EFFECT NUMBER (E)
FAILURE PROBABILITY X
Jcf
(Q).
C-E Short
0. 80 Reset will be on all the time. Loss of all outputs.
100
• 00009
C-E Open
·a. 10
Loss ofinitial
100
B-E Open
0. 10 Reset counter may go early
100
Short
o. 10
100
• 000005
Open
0. 90 Q6 may turn on and cause reset loss of outputs
100
• 000005
C-E Short
0. 80 Reset is present at all times. Loss of all outputs.
100
• 00009
C-E Open
0. 10 Loss of reset 3 month output
100
B-E Open
0. 10 may come early
100
Loss ofinitial Reset counter may go early and 3 month signal will be early
DESIGN COMPENSA Tl ON TO ELIMINATE THE FAILURE MODE
Redundant Transistors
RSST PROBABILITY CRITICALITY PRODUCT
(a) X (!)X (Q) X 105
RANK FOR ASSY
'000072
7
• 00009
• 000009
15
• 00009
.000009
15
• 0000005
28
• 0000045
21
Quad Resistors
Redundant Transistors
PAGES
rSSEMB LY NAME
~~~\~I~N 11/10/69
Rel.
27
OF
22
SUBSYSTEM NAM)ii
• 000072
7
• 00009
.000009
15
• 00009
.000009
15
RELIABILITY MODEL CODE IDENTIFICATION
.
970-7A
SHEET ~
OF _ ) , ] _
NO.
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET RELIABILITY rUPPLIER NAME GOAL
ASSY FAILURE DESCRIPTION
0. 996
1 iNM~·si~M&~~~~T6~rc!~iPCf~o~UIT
rSSY DWG OR SK REFERENCE
CR6 IN914
FAILURE MODE
STATEMENT OF THE ASSUMED FAILU.RE
Q7
Shorts .and Opens
Shorts and Opens
EFFECT ON ASSEMBLY
970-7A
SYSTEM EFFECT NUMBER (E)
FAILURE PROBABILITY X (Ql.
loS
rUBSYSTEM
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
NAM~
OF
27
PAGES
rSSEMB LY NAME
RSST PROBABILITY CRITICALITY PRODUCT (a) x (E) x (Q) a 105
RANK FOR ASSY
o. 10
No effect Redundant Resistor
000
• 000005
None
• 00000
35
Open
0.90
100
• 000005
Qual Resistors
• 0000045
21
' S~ort
Reset will be present all the time. Loss of all ou!J>uts.
0.80
Probably no effect
000
• 00005
None
• 00000
35
Open
0.20
Loss of manual 100 reset
• 00005
Quad Diodes
• 00001
14
C-E Short
0.80
Loss ofinitial 100 reset. Counter may go early.
• 00009
Redundant Transistors
• 000072
7
C-E Open
o. 10
Reset on all the time
100
• 00009
• 000009
15
Loss of all outputs
100
. 00009
. 000009
15
B-E Open Shorts and Opens
Rei.
9/22/69 ~N~~~I~I~N 11/1 0 /6 9
rATE
Short
2N2222A
R20, R21 RCR07
rRIGI NATO.R.
CK 13877-00IA
Gulton DSD
Shorts and Opens
23
PAGE riSSION PHASE(S)
(a)
RIB, Rl9 RCR07
I•REV. NO
Short
o. 10
Load down power supply with loss of all outputs
100
. 000005
Redundant Quad Resistors
. 0000005
28
Open
0.90
No effect Redundant Resistor
000
• 000005
None
• 00000
35
SHEET
..2.1_
RELIABILITY MODEL COD! IDENTIFICATION
OF
_2_7__
NO.
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
RELIABILITY GOAL
o. 996 ·rleRM~,S~~M&~~~~T6~f~~~PC:.:ro~UIT
SUPPLIER NAME
I
PAGE
MISSION PHASE(S)
ASSY DWG OR SK REFERENCE
CK13877-001A
Gulton DSD F"ILURE MODE
STATEMENT OF THE ASSUMED F"ILU.RE
EFFECT ON ASSEMBLY
(a)
CR8 1N914
Short and Opens
ORIGINAToR
Rel. SYSTEM EFFECT NUMBER (E)
FAILURE PROBABILITY • loS (Q).
Short
0.80
Manual reset may not work.
100
• 00005
Open
0.20
100 Reset will be on all the time. Loss of all outputs.
• 00005
D-S Short C-E Short
0.80
Loss of reset possible early output of 3 month counter
100
• 00029
D-S Open C-E Open
o. 10
No effect Redundant transistors
000
G-D Open B-E Open
o. 10
Loss of reset possible early output of 3 month counter
Short
o. 10
No effect, Redundant Resistor
0.90
DATE 9(22/69
~~~\~ION
SUBSYSTEM
IREV.NO
24
N"M~
27
OF
11/10/69
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
Redundant Diodes
PAGES
ASSEMBLY NAME
RSST PROBABILITY CRITICALITY PRODUCT (a) x (E)x (Q)x
1oS
RANK FOR ASSY
• 00004
8
• 00001
14
RELIABILITY MODEL CODE IDE NT IfiCA TION
,, QS J-FET Q22 U2154 2N2222A
R22, R23 RCR07
Shorts and Opens
Shorts and Opens
Open
970-7A
' . Redundant FGTS and transistors
• 000232
4
• 00029
• 00000
35
100
• 00029
• 000029
10
000
• 000005
None
• 00000
35
Loss of reset, 100 3 month counter may go early
• 000005
Qual Resistors
. 0000045
21
'
SHEET ~
Of _2_7_
NO.
I
I
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
RELIABILITY GOAL
0. 996 PART, COMPONENT, UNIT, CIRCUIT .ITEM, SET OR BOX DESCRIPTION
SUPPLIER NAME
I
PAGE
MISSION PHASE(S)
rSSY DWG OR SK REFERENCE
Gulton DSD
STATEMENT OF THE ASSUMED FAILURE
C9 CAP CKR06
CR42 1N3595
Shorts and Opens
Shorts
~nd
Opens
Shorts and Opens
ORIGINATqR
CK 13877-001A FAILURE MODE
EFFECT ON ASSEMBLY
(a)
C5 HRDM CAP
IREV.NO
D~~~~M22/69 REVISION
Re1. SYSTEM EFFECT NUMBER (E)
FAILURE PROBABILITY
x~o5
(Q)
OF
25
SUBSYSTEM NAM~
11/10/6 9
DESIGN COMPENSATION TO ELIMINATE THE FAILURE MODE
PAGES
27
rSSEMB LY NAME
RSST PROBABILITY CRITICALITY PRODUCT (a) • (E). (Q). 105
RANK FOR ASSY
Short
0.90
Loss of reset 3 month counte may go early
100
• 000023
Eliminate Part or Series Caps
. 0000207
11
Open
0. 10
Loss of some 010 noise immunity for reset
• 000023
Eliminate Part
. 0000023
31
Short
o. 90
Loss of reset 100 3 mounth counte may go early
• 000005
Redundant CAPS
• 0000045
21
Open
o. 10
Loss of some 010 noise immunity on reset line
• 000005
. 00000005
34
Short
0.80
Loss of counter 100 supply voltage loss of all outputs
• 00005
Quad Diodes
• 00004
Open
0.20
Reset line can 010 exceed VDD supply possible damage to counter, but not likely
• 00005
Eliminate Clamp Diode
• 000001
RELIABILITY MODEL CODE IDENTIFICATION
8
26
970-7A SHEET
_lL
OF
_]J_
NO.
I l
FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS WORKSHEET ASSY FAILURE DESCRIPTION
·rNM~·s~~M&~~~~T6~r~~iP_uts,
100
• 000005
• 000001
26
o. 10
Loss of clock signal loss of all outputs.
100
• 000005
.0000005
28
0,90
Loss of power of hold count capability,
050
• 000005
• 00000225
24
Redundant Resistors
PAGES
SHEET
...1:J..._
OP
_E.__
