PIC16F737-I Datasheet, PDF (191/276 Pages) Microchip Technology – 28/40/44-Pin, 8-Bit CMOS Flash Microcontrollers with 10-Bit A/D and nanoWatt Technology

PIC16F7X7
15.17.4 FAIL-SAFE OPTION
The Fail-Safe Clock Monitor (FSCM) is designed to
allow the device to continue to operate even in the
event of an oscillator failure.
FIGURE 15-14:
Peripheral
Clock
FSCM BLOCK DIAGRAM
Clock Monitor
Latch (CM)
(edge-triggered)
SQ
INTRC
Oscillator
÷ 64
31.25 kHz
488 Hz
(32 µs)
(2.048 ms)
CQ
Clock
Failure
Detected
The FSCM function is enabled by setting the FCMEN
bit in Configuration Word Register 2.
In the event of an oscillator failure, the FSCM will
generate an oscillator fail interrupt and will switch the
system clock over to the internal oscillator. The system
will continue to come from the internal oscillator until
the Fail-Safe condition is exited. The Fail-Safe
condition is exited with either a Reset, the execution of
a SLEEP instruction or a write to the SCS bits of a
different value.
The frequency of the internal oscillator will depend
upon the value contained in the IRCF bits. Another
clock source can be selected via the IRCF and the
SCS bits of the OSCCON register.
FIGURE 15-15: FSCM TIMING DIAGRAM
Sample Clock
(488 Hz)
System
Clock
Output
CM Output
(Q)
OSCFIF
The FSCM sample clock is generated by dividing the
INTRC clock by 64. This will allow enough time
between FSCM sample clocks for a system clock edge
to occur.
On the rising edge of the postscaled clock, the
monitoring latch (CM = 0) will be cleared. On a falling
edge of the primary or secondary system clock, the
monitoring latch will be set (CM = 1). In the event that
a falling edge of the postscaled clock occurs and the
monitoring latch is not set, a clock failure has been
detected.
While in Fail-Safe mode, a Reset will exit the Fail-Safe
condition. If the primary clock source is configured for
a crystal, the OST timer will wait for the 1024 clock
cycles for the OST time-out and the device will
continue running from the internal oscillator until the
OST is complete. A SLEEP instruction, or a write to the
SCS bits (where SCS bits do not = 00), can be
performed to put the device into a low-power mode.
If Reset occurs while in Fail-Safe mode and the
primary clock source is EC or RC, then the device will
immediately switch back to EC or RC mode.
Note:
Two-Speed Start-up is automatically
enabled when the Fail-Safe option is
enabled.
15.17.4.1 Fail-Safe in Low-Power Mode
A change of SCS<1:0> or the SLEEP instruction will
end the Fail-Safe condition. The system clock will
default to the source selected by the SCS bits, which
is either T1OSC, INTRC or none (Sleep mode). How-
ever, the FSCM will continue to monitor the system
clock. If the secondary clock fails, the device will
immediately switch to the internal oscillator clock. If
OSFIE is set, an interrupt will be generated.
Oscillator
Failure
Failure
Detected
Note:
CM Test
CM Test
CM Test
The system clock is normally at a much higher frequency than the sample clock. The relative frequencies in
this example have been chosen for clarity.
 2004 Microchip Technology Inc.
DS30498C-page 189