An ECU input is a guard chain, not a single component. From the connector, the voltage travels through a TVS, a series diode, a filter, and finally lands on the pin of the MCU — and each guard stops a different pulse, with a different rating and a different failure mode. This article walks the chain from connector to MCU pin, maps each ISO 7637 pulse to the guard that stops it, gives the series diode and filter their quiet credit, shows why the last diode before the MCU is small but essential, and closes with the test and layout review that verifies the chain.
The Input Stage as a Guard Chain
The ECU input is best read as a chain of guards, with the connector at one end and the MCU pin at the other. Each guard has a job, and the chain only works when every element is sized for the pulse it is meant to stop.
The chain runs in a defined order. The TVS sits across the rail near the connector, conducting when the voltage exceeds its clamp level and absorbing the surge energy. The series diode sits in the power path behind it, allowing the correct polarity and blocking a reversed connection. The filter — series inductance and capacitance — sits next, rejecting the ripple and the high-frequency noise that the TVS cannot. And at the end, the last element before the MCU pin conditions the rail for the microcontroller itself. The ECU power design article and the co-design of rectifier and TVS article document the input stage; this article adds the pulse-to-guard mapping that makes the chain explicit.
The chain framing matters because it changes the failure diagnosis. A dead or resets-on-bump ECU is usually the chain failing at one link — the TVS undersized, the series diode over-stressed, the filter letting ripple through — and the pulse map in the next section identifies which link. Without the chain, the whole input stage is blamed; with it, the single guard is fixed.
The mapping is best read as the table that the design and the test both use:
| ISO 7637 class / event | What it looks like | Guard that stops it | Rating that matters |
|---|---|---|---|
| Slow load-dump spike | Tens of volts, tens to hundreds of ms | TVS | Pulse energy, clamp voltage |
| Fast inductive spike | Sharp, short, high dv/dt | TVS plus series diode | Clamp speed, reverse rating |
| Coupled / coupled transient | Medium duration, medium energy | TVS with margin | Clamp window, repeat capability |
| Continuous ripple / noise | Low amplitude, high frequency | Filter (L-C) | Cutoff, rejection depth |
| Reversed battery | Full reverse rail | Series diode | Reverse blocking, forward drop |
The table is the pulse-to-guard contract: each event names the guard and the rating that stops it, and the test section verifies each row by measuring the pin during the event. The surge and ESD testing article and the TVS selection guide provide the class definitions and the sizing method that the table’s rows assume.
The chain also answers the question of which surges belong where in the vehicle architecture. Some events are stopped at the rail, before the ECU; others must be stopped at the ECU because they are generated by the ECU’s own loads or by the wiring near it. The TVS at the ECU input is the last rail-level guard, and the pulse classes that reach it are the ones the vehicle-level protection did not absorb. The mapping therefore has a system dimension: a clean vehicle rail lets the ECU’s chain do less, while a harsh, lightly protected rail pushes the full pulse family to the ECU input and forces a heavier chain. The co-design of rectifier and TVS article treats this rail-versus-module split explicitly, and the automotive rail article covers the vehicle-side protection that the ECU chain assumes.
Reading the pulse map with the system in mind keeps the ECU chain honest: it is sized for what actually reaches the connector, and the verification includes the rail condition the module will live with. The chain that is sized for every possible event is over-built; the one sized for the mapped, rail-conditioned pulse family is the design that passes the test and fits the vehicle.
Pulse-to-Protection Mapping: Which Guard Stops Which Pulse
The ISO 7637 pulse family is the vocabulary of the ECU input, and each pulse class maps to the guard that stops it. The mapping is the core table of the article.
The slow, high-energy load-dump-like event — the alternator-driven spike that tens of volts and lasts — is stopped by the TVS, whose energy rating is sized against it. The fast inductive spikes, the sharp coupled transients, and the medium-duration pulses are divided between the TVS and the series diode: the TVS clamps the fast ones at the rail, and the series diode’s rating holds the ones that reach the power path. The ripple and the broadband noise are the filter’s domain, rejected by the inductance and the capacitance before the MCU. The surge and ESD testing article defines the ISO 7637 classes and the test waves, and the TVS selection guide sizes the clamp to the pulse map.
The mapping rule is energy versus speed. The TVS takes the energy events, the diode takes the polarity and the series-duty events, and the filter takes the frequency events; a guard sized for the wrong class is absent exactly when its class arrives. The chain works because each pulse class has a named home.
Series Diode and Filter: The Quiet Workers
The TVS gets the credit, and the series diode and filter do the quiet work. Their roles are less dramatic and no less essential, and they are the guards most often undersized.
The series diode’s job is the polarity gate: it conducts in the correct direction and blocks a reversed battery, protecting the ECU’s electronics from the reverse connection. Its forward drop is a real cost on the always-on rail, and its reverse ratings must hold the transient that reaches it. The filter’s job is the noise rejection: the series inductance and the shunt capacitance reject the ripple and the high-frequency content that would otherwise reach the MCU, and their cutoff is set against the rail’s ripple spectrum. The reverse-polarity protection article and the EMI filter design article cover the two roles; the ripple diagnosis guide treats the symptom when the filter is wrong.
The quiet workers fail quietly: an undersized series diode overheats on the always-on rail, and an ill-set filter lets the ripple through, both without a dramatic pop. The verification at the end — measuring the ripple at the MCU pin and the temperature of the diode — is what catches the quiet failures that a visual check never will.
The Last Diode Before the MCU: Small but Essential
The last element of the chain, the conditioning before the MCU pin, is easy to dismiss and hard to replace. The MCU is the most sensitive and the least tolerant part of the ECU, and the final guard exists for exactly that reason.
The MCU pin cannot see the residual ripple, the coupled noise, or the last transient that survives the earlier guards; a microcontroller resetting on a bump is the signature of the last element failing. The last guard is small — a small-conditioning element or a finely set RC — because the big energy is already gone; its job is the residual, the last percent of rejection, and the voltage conditioning that the MCU’s regulator needs. The ECU power design article and the co-design article document the pin-level protection and the layout that keeps it effective.
The design lesson is that the small guard is essential because it is the last defense: everything before it can be perfect and the ECU still resets if the last element is missing. The chain is only as strong as the last link, and the pin-level guard is where the ECU’s stability is actually decided.
Verifying the Chain: Test and Layout Review
The chain is verified by test and layout review, and the verification is what proves each guard did its job.
The test runs the ISO 7637 pulses at the connector and measures at the MCU pin: the spike at the pin should be clamped to the TVS level, the ripple should be below the filter’s budget, and the reverse-polarity test should confirm the series diode’s blocking. The layout review checks the physical reality: the TVS placed close to the connector, the filter before the sensitive pin, the loop areas small so the pulses do not radiate past the guards, and the ground discipline separating the power and signal returns. The surge and ESD testing article and the field reliability checklist turn the test and review into a release gate, and the PCB layout article covers the loop and ground discipline.
The verification closes the chain. The ECU input is a guard chain from connector to MCU pin: the TVS absorbs the energy pulses, the series diode blocks the reverse connection, the filter rejects the ripple, and the last small guard conditions the pin. Each guard is sized against its pulse class, tested at the pin, and reviewed in the layout, and the chain survives the vehicle’s rail because every link held. The automotive rectifier category supplies the parts the chain uses, and the ECU power design article is the field reference that closes the input-stage design.