Building a Locker Control Board
Table
| Subsystem | Failure Mode | Effect | Severity | Mitigation |
|---|---|---|---|---|
| 12/24 V input | Reverse/overvoltage/transient | Board damage or unsafe heating | 7 | Input fuse and TVS; add reverse polarity protection before release |
| MOSFET output | Shorted MOSFET | Lock remains energized | 8 | Firmware timeout, per-channel current monitoring in future revision, rated MOSFET thermal design |
| Firmware | Multiple locks energized simultaneously | Overcurrent, brownout, overheating | 8 | Limit active channels in firmware based on measured lock current |
| Flyback clamp | Missing/failed diode | High voltage transient, MOSFET damage, EMI | 7 | One flyback diode per channel; verify orientation and voltage/current rating |
| State input | Incorrect polarity or threshold assumption | Firmware reads locked/unlocked state backwards or misses faults | 7 | Validate each lock model on bench; document asserted polarity; add firmware configurable inversion |
| State input optocoupler | Input resistor overheating at 24 V | Reliability loss or local heating | 6 | Use 0.25 W 4.7 kΩ resistors and verify temperature at 24 V continuous state signal |
| CAN link | Corrupted command | Wrong lock activation | 6 | Add command CRC/authentication and timeout behavior in firmware |
| Regulator | 3.3 V failure | Controller reset or stuck outputs | 6 | Shift-register OE default disabled and MOSFET gate pulldowns keep outputs off |
Scope
Priority Actions