Reliability & Safety Analysis Omar Team 8 Robert Toepfer Trent Nelson Mike Cianciarulo Josh Wildey

Criticality High Low Irreparable damage Possible user injury Longer room mapping time Loss of room mapping Loss of image recognition

Components A: power subsystem B: drive subsystem 5V LDO B: drive subsystem motors C: software subsystem (and supporting components) Microcontroller

5V LDO A1 Output = 0V -Battery fails -LDO fails -Doesn’t run # Failure Mode Possible Causes Failure Effects Method of Detection Criticality A1 Output = 0V -Battery fails -LDO fails -Doesn’t run -Power LED off Low A2 Output > 5V -Potential damage to components -Smoke -Excess heat High A3 Input short -Contact of conductive surface with PCB -Component Damage -User injury -Fire -Battery explodes

Motors B1 Windings fail -Insulation fails -Windings break # Failure Mode Possible Causes Failure Effects Method of Detection Criticality B1 Windings fail -Insulation fails -Windings break -Motor(s) stop -Vehicle stops -Possible smoke Low B2 Brushes fail -Wear -High input current

Microcontroller (ATmega32) # Failure Mode Possible Causes Failure Effects Method of Detection Criticality C1 No communication with Gumstix -Failed interconnect -VCC out of range -Dead port pins -Failure to map room -Failure to determine new heading after obstacle detected -Vehicle stops after detecting obstacle Low C2 No communication with sensors -Failure to detect obstacles -Vehicle crashes -Fire High

Questions?