AURIX 32-bit microcontrollers for automotive and industrial applications - Highly integrated and performance optimized Issue 2019
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
AURIX™ 32-bit microcontrollers for automotive and industrial applications Highly integrated and performance optimized Issue 2019 www.infineon.com/aurix
Contents TriCore™ family concept 4 AURIX™ for powertrain applications 29 Evolution of TriCore™ generations 5 AURIX™ for (H)EV applications 38 TriCore™ based product roadmap 6 AURIX™ for safety applications 45 AURIX™ product selector 7 AURIX™ for connectivity applications 59 PRO-SIL™ safety concept 8 AURIX™ for transportation applications 65 AURIX™ family housing options 9 AURIX™ for industrial applications 71 AURIX™ family system architecture 10 Tool partners 80 Peripheral highlights 15 AURIX™ security features 19 Embedded software (AUTOSAR etc.) 22 Development support 24 Multicore software development with AURIX™ 25 AURIX™ starter and application kits 26 AURIX™ and XMC PDH partners 28 3
Family highlights ››Compatibility and scalability ››Easy to use ››Lowest system cost ››Broad portfolio ››Industry benchmark system ››Certified to automotive standards performance Applications ››Powertrain domain controller ››Transfer case/torque vectoring Powertrain ››Gasoline direct injection ››eClutch ››Gasoline multi-port injection ››Start/stop alternator ››Diesel direct injection ››Auxiliaries ››Automatic transmission ››Motorcycle engine management Applications ››Battery management ››Inverter ››Off-board charging ››Low-voltage DC-DC (H)EV ››Charging station ››High-voltage DC-DC Applications ››Chassis domain control ››Short-range radar (24/60 GHz) system ››Electric Power Steering (EPS) ››Long-range radar (76/77 GHz) system Safety ››Active suspension control system ››LIDAR systems ››Advanced airbag system ››LED pixel lighting ››Braking ECU ››Sensor fusion ››Multi-purpose camera configuration ››eHorizon Applications ››Body domain controller ››In-vehicle wireless charger Connectivity ››Connected gateway ››Telematics ››Advanced body applications ››V2x communication Applications ››Commercial and ››Trucks Transportation Agricultural Vehicle (CAV) ››Drones ››Fun vehicle ››Avionics ››Transportation Applications ››Mobile controller ››Solar panel Multimarket Industrial & ››Inverter ››Robotics ››Wind turbine inverter ››Medical ››Servo drives ››Elevator 4
Evolution of TriCore™ generations In 1999, Infineon launched the first generation of the AUDO range of memories, peripheral sets, frequencies, tempera- (AUtomotive unifieD processOr) family. Based on a unified tures and packaging options. And all this with a high degree RISC/MCU/DSP processor core, this 32-bit TriCore™ micro- of compatibility across generations. controller was a computational power horse. And the com- pany has evolved and optimized the concept ever since – The TriCore™ success story now continues with the intro- culminating in what is now the sixth TriCore™ generation. duction of the AURIX™ multicore family. AURIX™ combines AUDO NG AURIX™ AURIX™ AUDO AUDO future AUDO MAX (Next generation) TC2xx TC3xx Thanks to its high real-time performance and embedded easy-to-use functional safety support, a strong increase safety and security features, the TriCore™ family is the in performance and a future-proven security solution in a ideal platform for a wide range of automotive applications. highly scalable product family. These include the control of combustion engines, electri cal and hybrid vehicles, transmission control units, chassis The new AURIX™ TC3xx family members are manufactured domains, braking systems, electric power steering sys- in a 40 nm embedded flash technology designed for ulti- tems, airbags, connectivity and advanced driver assistance mate reliability in harsh automotive environments. Further- systems to support the trend toward autonomous, clean more, the dual frontend concept ensures continuous supply. and connected cars. TriCore™-based products also deliver the versatility required for the industrial, CAV and trans As was the case with previous generations, safety software portation sector, excelling in optimized motor control is also available to help manufacturers meet SIL/ASIL safety applications and signal processing. Infineon’s broad prod- standards, as well as AUTOSAR libraries which Infineon uct portfolio allows engineers to choose from a wide has been developing since 2005. 5
TriCore™ based product roadmap Production Development AURIX™ AURIX™ Segment AUDO family TC2xx TC3xx 90 nm 65 nm 40 nm TC1798 TC39xXX 300 MHz, 4 MB TC29xTX 6x 300 MHz, 16 MB 3x 300 MHz, 8 MB TC39xXP TC29xTP 6x 300 MHz, 16 MB 3x 300 MHz, 8 MB TC3ExQP 4x 300 MHz, 12 MB High end TC27xTP 3x 200 MHz, 4 MB TC38xQP 4x 300 MHz, 10 MB TC1793 270 MHz, 4 MB TC37xTX 3x 300 MHz, 6 MB TC1791 TC290 TC37xTP 3x 300 MHz, 8 M 3x 300 MHz, 6 MB 240 MHz, 4 MB Bare die TC1746 TC270 TC3AxQA 180 MHz, 2.5 M 3x 200 MHz, 4 MB 3x 300 MHz, 4 MB Bare die Bare die TC26xD TC357TA Mid range 2x 200 MHz, 2.5 MB 3x 300 MHz, 4 MB TC1784 180 MHz, 2.5 MB TC1782 TC260 TC36xDP 2x 200 MHz, 2.5 M 2x 300 MHz, 4 MB 180 MHz, 2.5 MB Bare die TC1728 133 MHz, 1.5 MB TC23xLX 200 MHz, 2 MB TC33xDA 2x 200 MHz, 2 MB TC1724 80 MHz, 1.5 MB TC23xLP 200 MHz, 2 MB TC33xLP 200 MHz, 2 MB Low end TC22xL 133 MHz, 1 MB TC32x 160 MHz, 1 MB TC21xL 133 MHz, 0.5 MB Companion TLF35584 chips TLF35584 TLF30684 AURIX™ 1st generation AURIX™ 2nd generation Bare die 6
AURIX™ product selector AURIX™ TC3xx family product naming system Brand Device Primary Secondary option option SA K – TC 3 7 5 T P – 96 F 3 0 0 W Infineon product identifier Temperature range TriCore™ Architecture Series Package Core architecture Feature package Memory size Memory type Frequency Package type Temperature range Frequency K -40 ... +125°C 160 MHz L -40 ... +150°C 200 MHz 300 MHz Series Package class Core architecture Feature package Flash size code Package type code 9 series 9 516 – pin X Hexa core A ADAS extended memory 16 1 MB W LQFP 0.5 mm pitch 8 series 8 233 – pin Q Quad core E Emulation device 32 2 MB F TQFP 0.4 mm pitch 7 series 7 292 – pin T Triple core F Extended flash 64 4 MB S LFBGA 0.8 mm pitch 6 series 6 180 – pin D Dual core G Additional connectivity 96 6 MB No letter for bare die 3 series 5 176 – pin L Single core H ADAS standard feature 128 8 MB 2 series 4 144 – pin M MotionWise software 160 10 MB E series 3 100 – pin P Standard feature 192 12 MB A series 2 80 – pin T ADAS + emulation 256 16 MB 0 Bare die X Extended feature C, V, Z Customer specific AURIX™ TC2xx family product naming system Brand Device Primary Secondary option option SA K – TC 2 7 5 T – 64 F 20 0 N Infineon product identifier Temperature range TriCore™ Architecture Series Package Core architecture Feature package Memory size Memory type Frequency Package type Temperature range Frequency K -40 ... +125°C 160 MHz L -40 ... +150°C 200 MHz 300 MHz Series Package class Core architecture Feature package Flash size code Package type code 9 series 9 516 – pin T Triple core – Production device, no HSM 8 0.5 MB N CAN FD ISO frame 8 series 8 416 – pin D Dual core A ADAS enhanced, HSM enabled 16 1 MB W LQFP 0.5 mm pitch 7 series 7 292 – pin S Single core E Emulation device, no HSM 24 1.5 MB F TQFP 0.4 mm pitch 6 series 5 176 – pin L Single core with F Emulation device, HSM enabled 32 2 MB L BGA 1.0 mm pitch 3 series 4 144 – pin lockstep P Production device, HSM enabled 40 2.5 MB S LFBGA 0.8 mm pitch 2 series 3 100 – pin X Extended feature, HSM enabled 64 4 MB Q Fusion Quad QFP E series 2 80 – pin C Customer specific 96 6 MB 0.5 mm pitch A series 0 Bare die 128 8 MB 7
Infineon PRO-SIL™ The functional complexity and levels of integration of real- Infineon’s PRO-SIL™ trademark designates the Infineon time, safety-critical applications continue to increase. products that contain SIL-supporting (Safety Integrity Safety standards such as IEC 61508 and ISO 26262, man- Level) features. The purpose of SIL-supporting features date more robust products and functional safety concepts involves assisting the overall system design in attaining in automotive and industrial applications. the desired SIL (according to IEC 61508) or ASIL (according to ISO 26262) level for safety systems with high efficiency. Products with the PRO-SIL™ label will help you to select Infineon products. PRO-SIL™ highlights ››Broad hardware portfolio, including sensors and micro ››Infineon offers expert system integrator support for controllers, along with analog and power management achieving the required ASIL on system level ICs that provide SIL-supporting features ››Infineon’s PRO-SIL™ logo will guide you to our products ››An independent functional safety management organiza- (hardware, software, safety documentation) with SIL-sup- tion supports the ISO 26262 safety lifecycle porting features. Infineon’s activities result in simplified ››Safety documentation, such as a safety manual and safety integration in safety-related applications. analysis summary report, can be made available for dedi- cated PRO-SIL™ products (NDA may be required) Safety hardware Safety Safety features documentation software (optional) + + Safety-focused organization and project management Infineon quality management system Zero Defect culture www.infineon.com/prosil 8
AURIX™ family housing options Package information for maximum scalability LFBGA-516 BGA-416 LFBGA-292 25 27 17 0.8 1 0.8 27 25 17 0.8 0.8 1 BGA-180 LQFP-176 LQFP-144 26 22 12 0.8 22 12 26 0.5 0.8 0.5 0.5 0.5 TQFP-144 TQFP-100 TQFP-80 18 14 12 12 14 18 0.4 0.4 0.4 0.4 0.4 0.4 TriCore™ upgrade paths LFBGA-516 LFBGA-292 BGA scalability 25 x 25 mm 17 x 17 mm ››LFBGA-292 and LFBGA-516 are ball compatible so that customers can build one PCB for both packages www.infineon.com/packages 9
AURIX™ TC2xx family system architecture Powerful 1st generation AURIX™ TC2xx system architecture AURIX™ is Infineon’s current family of microcontrollers Customers wanting to reduce their time-to-market that serve the precise needs of the automotive industry in can now cut down their MCU safety development by 30%. terms of performance and safety. Its innovative multicore By the same token, a performance surplus of 50% up to architecture, based on up to three independent 32-bit 100% allows for more functionality and offers a sufficient TriCore™ CPUs, has been designed to meet the highest resource buffer for future requirements, keeping the power safety standards, while simultaneously increasing perfor- consumption on the single-core microcontroller level. mance significantly. While protecting IP, and preventing theft and fraud, AURIX™ provides an already built-in hardware security module. Using the AURIX™ platform, automotive developers will be able to control powertrain and safety applications with Thanks to its special feature set, AURIX™ is the perfect one single MCU platform. Developments using AURIX™ match for powertrain applications (including hybrid and will require less effort to achieve the ASIL-D standard than electrical vehicles) as well as safety applications (such as with a classical lockstep architecture. steering, braking, airbag and advanced driver assistance systems). PMU FPU LMU DMI PMI TriCore™ overlay Data flash Progr. Progr. 1.6P BROM RAM flash flash key flash SRI cross bar Diverse Diverse lockstep core lockstep core Bridge SDMA OCDS FPU FPU DMI DMI PMI PMI stand-by overlay TriCore™ TriCore™ overlay 1.6P 1.6E System peripheral bus Ports System peripheral bus HSM PLL ERAY GPT12x CCU6x PLL & HSSL BCU STM SCU GTM DS-ADCx ADCx EVR MultiCAN+ Ethernet ASCLINx FlexRay QSPIx MSCx SENT PSI5 IOM FCE I2C 5 or 3.3 V single supply 10
AURIX™ TC2xx family system architecture AURIX™ TC2xx family package scalability 9x Series TC297 TC298 TC299 up to 8 MB 300 MHz 300 MHz 300 MHz 7x Series TC275 TC277 up to 4 MB 200 MHz 200 MHz 6x Series TC264 TC265 TC267 up to 2.5 MB 200 MHz 200 MHz 200 MHz 3x Series TC233 TC234 TC237 up to 2 MB 200 MHz 200 MHz 200 MHz 2x Series TC222 TC223 TC224 up to 1 MB 133 MHz 133 MHz 133 MHz 1x Series TC212 TC213 TC214 up to 512 KB 133 MHz 133 MHz 133 MHz Flash TQFP-144 TQFP-80 TQFP-100 LQFP-176 LFBGA-292 BGA-416 LFBGA-516 Package LQFP-144 Upgrade/downgrade with pin-compatible packages ››The LFBGA-516 package is a superset of the LFBGA-292 ››Combination PCBs can be designed for I/O and feature upgrades ››Advanced package technologies deliver the best price/performance ratio ››Customers can choose between different devices in the same pin-compatible package 11
AURIX™ TC3xx family system architecture Scalable 2nd generation AURIX™ TC3xx system architecture The latest AURIX™ TC3xx microcontrollers are also well-suited The AURIX™ TC3xx combines performance with a powerful for safety-critical applications to support clean, autonomous safety architecture and offers enhanced security with the and connected cars. Ranging from classic airbag, braking and second-generation HSM with asymmetric cryptography power steering to fail-operational systems supported by sen- accelerators and Full EVITA support. This combination sor-based systems using radar, LIDAR or camera technologies. makes the family the ideal fit for domain control and data fusion applications supporting the next levels of autono- The implemented connectivity features, in combination mous driving. with the highest level of security, enable connected cars with applications such as a telematics unit, connected gate- The AURIX™ TC3xx family is pin compatible with the AURIX™ way or in-vehicle wireless charging for portable devices. TC2xx family and offers increased flash memory sizes of up to 16 MByte, over 6 MByte of integrated RAM and up to To make the car clean, the new family is well-suited to new six TriCore™ 1.62 embedded cores, each with a full clock systems in electrical and hybrid drives – specifically hybrid frequency of 300 MHz. New features include a new radar domain control, inverter control, battery management, processing sub-system with up to two dedicated Signal onboard charger and DC-DC converters, in addition to Processing Units (SPU), Gigabit Ethernet, additional CAN FD engine management and transmission control systems. and LIN interfaces and an eMMC interface for external flash. Lockstep core Lockstep core Lockstep core Lockstep core CPU5 CPU4 TC 1.6P CPU3 CPU0 CPU2 CPU1 FPU SPU SPU 64 KB PSPR RIF RIF 32 KB PCACHE 240 KB DSPR 16 KB DCACHE Pflash Radar Dflash LMU DAM MCDS 0…5 MEM System resource interconnect Stand-by ctrl eMMC/SDIO Gbit SFI HSSL DMA HSDPM ETH bridge HSCT HSM MSC Port SCU IOM FCE System peripheral bus VADC MCM CAN ASC LIN DS ADC PSI5S SENT CCU6 ERAY QSPI PSI5 GTM Secondary STM GPT I 2C Primary FCOMP 12
AURIX™ TC3xx family system architecture AURIX™ TC3xx architecture evolution from TC2xx to TC3xx IO pads all 5 V/3.3 V Checker core Checker core Checker core Safety Checker core › LBIST CPU5 › MBIST upgrade CPU4 CPU3 TC 1.6P CPU2 CPU0 CPU1 FPU SPU SPU PSPR, PCACHE RIF RIF DSPR, DCACHE Pflash Large Mini Dflash LMU DAM 0…5 MEM MCDS System resource interconnect eMMC/SDIO ETH SFI HSSL StdBy ctrl DMA HSDPM MAC bridge HSCT HSM MSC Port SCU IOM FCE System peripheral bus EVADC Secondary ADC E0S A0C ASC LIN CAN FD Primary ADC PSI5S SENT CCU6 ERAY QSPI PSI5 GTM STM GPT I2C FCOMP Performance ADC Stand-by control unit › New TriCore™ 162 generation › Improvement of existing ADC › Low-power modes › New instructions › Reduction of capacitive load › Up to 6 CPUs at 300 MHz › New direct flash access path HSM: Full EVITA compliance Delta-sigma Ethernet › New accelerators ECC256/SHA256 › Enhanced concept › 1 Gbit/s ETH › Available on all devices › QoS services › Remote DMA ADAS Memories eMMC/SDIO › New HW accelerator concept - › Larger SRAM › External NAND flash IF SPU (Signal Processing Unit) › SRAM/flash ratio increased › Enhanced MPU 13
AURIX™ TC3xx family system architecture AURIX™ TC3xx package scalability 6x 9xA Series TC397XA 300 MHz 16 MB 300 MHz 6x 9x Series Sense and Compute TC397X TC399X 300 MHz 16 MB Control and Actuate 300 MHz 300 MHz 4x Ex Series TC3E7QX 300 MHz 12 MB 300 MHz 4x 8x Series TC387Q TC389Q 300 MHz 10 MB 300 MHz 300 MHz 3x 7xX Series TC377TX 300 MHz 6 MB 300 MHz 3x 7x Series TC375T TC377T 300 MHz 6 MB 300 MHz 300 MHz 2x 6x Series TC364D TC366D TC365D TC367D 300 MHz 4 MB 300 MHz 300 MHz 300 MHz 300 MHz 4x Ax Series TC3A8Q TC3A7Q 300 MHz 4 MB 300 MHz 300 MHz 3x 5xA Series TC356TA TC357TA 300 MHz 4 MB 300 MHz 300 MHz 2x 3xA Series TC336DA TC337DA 300 MHz 2 MB 300 MHz 300 MHz 1x 3x Series TC332L TC333L TC334L TC336L TC337L 200 MHz1) 2 MB 200 MHz1) 200 MHz1) 200 MHz1) 200 MHz1) 200 MHz1) 1x 2x Series TC322L TC323L TC324L TC327L 160 MHz 1 MB 160 MHz 160 MHz 160 MHz 160 MHz Flash LQFP-144 TQFP-80 TQFP-100 BGA-180 LQFP-176 BGA-233 LFBGA-292 LFBGA-516 Package TQFP-144 1) An option of 300 MHz is also available ›› Advanced package technologies deliver the best price/performance ratio ›› Customers can choose between different devices in the same pin-compatible package MCU scalability Safety/security concept › Performance and flash › ISO 26262 compliance › Pin compatibility › Hardware security support › Binary-compatible cores › IEC61508 compliant AURIX™ TC3xx Connectivity Power consumption › Ethernet: up to 2x 1 GB › On-chip SC DC-DC high-efficiency power supply › CAN FD: up to 12 channels › Integrated stand-by controller › LIN: up to 24 channels › eMMC IF 14
Peripheral highlights Multi-AUTOSAR OS support on one microcontroller ››AURIX™ provides a memory protection system for each ››The hypervisor can arbitrate/grant/deny access and core plus an additional distributed hardware-based therefore provide paravirtualization of mixed-criticality resource management system tasks in a unified sub-system architecture with a minimal ››Each peripheral and shared SRAM has a resource manage- CPU overhead ment unit that works as a local access protection mecha- ››AURIX™ therefore provides the ability to run mixed-crit- nism to grant or deny access icality software requiring real-time access while still ››When combined with the memory protection system, this enforcing encapsulation and freedom of interference hardware can be used to prevent selected direct access between cores, even when the cores are not running time from certain tasks or cores to peripherals or regions and memory-protected operating systems of SRAMs and instead redirect the attempted access to a hypervisor function Safety ... APP APP ... ... agent Safety monitor AUTOSAR Hypervisor Supervisor/user AURIX™ AURIX™ protection system overview ››Hardware support for freedom of interference ––Between software components ––Between hardware parts ––Between hardware parts and software components ››Timing protection APP APP APP APP APP APP AUTOSAR AUTOSAR AUTOSAR core 0 core 1 core 2 Hypervisor Hardware 15
Peripheral highlights Infineon® diverse lockstep concept ››Lockstep architecture designed to control and mitigate ››Careful design of lockstep comparator common cause factors ››Main core and diverse lockstep core run the same software ––Physical isolation in parallel to detect computational errors ––Instruction-level execution diversity: 2-cycle delay ››Like normal locksteps, both cores are physically separated ––Circuit-level design and timing diversity and have a time delay between their execution ››Layout-level diversity ››Diverse lockstep core has been additionally transformed ››Diversity controlled and verified by state‑of‑the‑art to provide architectural hardware diversity and further design methods reduce common cause failures ››Special design of clock and reset networks BUS BUS Main core Delay Delay Compare Lockstep Delay Delay core Error Lockstep CPU Lockstep AURIX™ family communication innovation AURIX™ Multi-CAN/CAN FD ››Up to 20 CAN nodes with FD support available AURIX™ ISO 11898-6 transceiver ››CAN standard V2.0 B active support ››AURIX™ family support ISO 11898-1 DIS 2015 ››Resonator ready with asynchronous operation and choice of clock source ››Frequency scaling without baud rate change ››Energy saving: pretended networking and partial networking (ISO 11898-6 transceiver support) support (also in CAN FD mode) ››Safety support: countable total amount of bus errors ››Message objects can be freely assigned among the nodes ››Configurable FIFO length, automatic gateway mode support ››Acceptance mask filtering for each message object 16
AURIX™ Ethernet module Key highlight features AURIX™ TC3xx TriCore™ x TriCore™ 3 Ethernet MAC filter TriCore™ 1 TriCore™ 2 ››MAC/VLAN/protocol filter for fast frame processing RAM RAM Data Data QoS ››8 queues/DMAs for frame separation CPU Status CPU Status ››4 transmit/4 receive Control Control ››IEEE 802.1AS (for IEEE 1588-2008) ››Shapers for bandwidth control ––802.1 credit-based shaper SRI crossbar ––Time-aware shaper Ethernet QoS MAC DMAs DMAs Interfaces ››MII/RMII for 100 MBaud Queues Queues ››RGMII for 1 GBaud Freedom from interference Shaper Filter ››DMA operation → separated by hardware ››No impact of queue operation on other queues, DMAs etc. ››Independent control of each queue xMII ››Status/control in RAM → fast direct stack access 100/1000 Mbps “Remote DMA” – fast data copy – RAM to RAM ››Data transfer by DMA with no CPU required for transfer ››Transfers triggered by hardware or by software ››Transfers are hardware protected (in AURIX™) ››Full-duplex transfers, low latency mode ››All Ethernet standards and conformance tests are valid SOME/IP “AVB” DoIP IEEE 1722 IEEE 802.1Q control Software implementation, “Stacks” TCP/UDP IEEE 802.1AS IEEE 802.1Qav IEEE 802.1Qbv prelim. Precision IPv4/IPv6 Time Protocol Credit-based Time-based (PTP) shaper shaper Hardware implementation, available in AURIX™ TC3xx Clock sync, time stamp Protocol filter VLAN filter MAC filter 17
AURIX™ TC3xx stand-by controller Low power consumption, higher energy efficiency, easy implementation AURIX™ TC3xx MCU Stand-by Performance domain 8-bit MCU domain Internal bus Stand-by controller 8-bit MCU 70 kHz – 20 MHz Port 33 2 K boot ROM T0 and T1 UART 320 Byte RAM Port 34 8 K XRAM CAN FD + arbiter wake-up filter SCU SSC 4 channel WDG T2 CCU 8-bit ADC WTC JTAG/DAP Features and benefits Application recommendation ››Feature available across whole AURIX™ TC3xx family ››Enhanced availability: continue a limited set of ››Integrated 8-bit MCU (ISO 26262 QM module) functions while the main CPUs are rebooting after a ››Stand-alone operation reset (typ. watchdog reset) ––Separate power supply at core and IOs ››Steering and braking comfort: temporary torque supply ––Separate clock during main MCU ––Separate GPIOs ››Stand-by operation: extremely low-power operation while ››Standard tooling support enabling fast design-in the vehicle is parked ››Real-time clock for periodic wake-up ››(H)EV battery management: monitor the battery’s state-of- ››Flexible choice of peripherals: LIN/SPI heath and charge over a long parking period, e.g. vacation ››Shared I/O with performance domain ››Keyless-go: trigger main MCU for key communication ››Extremely low current consumption ~ µA range ››Fuel leakage supervision: on-board diagnostics and moni- toring of tank pressure, e.g. while parked eMMC/SDIO interface on 2 standard protocols supported ››SDIO 2.0 Protocol unit ––6 pins: 4 data, CLK, CMD ––3.3 V, 50 MHz max. clock Command CMD DMA and ››eMMC interrupt FIFO buffer control unit Peripheral bus ––10 pins: 8 data, CLK, CMD control Bus interface IO port ––3.3 V, 20 MHz Data D0-7 control unit Use cases Clock Module ››External serial NAND-flash generation control and registers Clock CLK ››Wi-Fi modems control ››Camera modules 18
AURIX™ security features AURIX™ security hardware Infineon’s AURIX™ 32-bit microcontroller family, with its embed- Customer benefits ded Hardware Security Module (HSM), is a perfect fit for auto- ››Secured platform – HSM provides a secured platform, motive applications where secure on-board communication is separated from the rest of the microcontroller by a fire- required. Infineon not only offers a scalable portfolio of compat- wall, thereby creating a trusted execution environment. ible AURIX™ devices with integrated HSM, but also the necessary ››Security standard compliance – AURIX™ HSM fulfills SHE software packages and support services. Furthermore, a best- HIS and EVITA Medium standards, while the 2nd genera- in-class solution for automotive security can be achieved by tion AURIX™ HSM supports up to Full EVITA. In addition to combining AURIX™ microcontrollers with an Infineon embedded fulfilling the aforementioned standards, HSM generations SIM (eSIM) and Infineon tamper-proof secure elements (TPM). provide additional functionalities. ››Backward compatibility – AURIX™ security solutions are AURIX™ Hardware Security Module (HSM) backward compatible with the security SHE HIS imple- HSM provides a secure computing platform, consisting of a mentations in previous TriCore™ based microcontroller 32-bit CPU, special access-protected memory for storing the families. Furthermore, the 2nd generation AURIX™ HSM is cryptographic keys and unique subscriber identifiers and backward compatible with the 1st generation HSM. dedicated hardware accelerators for the various automotive ››Security differentiation – customized secure OEM or security use cases. A firewall separates HSM from the rest of tier1 crypto apps can be processed within a trusted HSM the AURIX™ microcontroller. execution environment, therefore allowing an indepen- dent HSM-specific software code review with reference to The AURIX™ hardware security module offers a highly flexi- the huge application host software from multiple parties. ble and programmable solution based on: This helps to harden the security level by reliably avoiding ››Crypto and algorithm agility via software to support cus- potential security backdoors. tomer-specific solutions powered by a 32-bits CPU ››Convergence of security and safety – AURIX™ micro- ››AIS31-compliant True Random Number Generator (TRNG) controllers address both functional safety as well as with high random entropy over lifetime IT-security requirements, making sure they are properly ››State-of-the-art AES-128 hardware accelerator matching integrated and don’t conflict with one another. performance for automotive protocols ››Secured failure analysis – AURIX™ HSM offers a 256-bit ››State-of-the-art PKC ECC 256 hardware accelerator for password for debugger access protection to prevent asymmetric encryption (only 2nd generation AURIX™ HSM) unauthorized access to the debugging resources. ››State-of-the-art HASH SHA2-256 hardware accelerator for hashing (only 2nd generation AURIX™ HSM) Typical use cases ››Secured key storage provided by a separated HSM-SFLASH ››Secured boot portion. Alternative secure key storage feasible in dedi- ››Secured on-board communication cated HSM-PFLASH sections. ››Software Over the Air (SOTA) updates ››IP and tuning protection ››Diagnostics via OBD/protected FAR flow/debug protection ››Immobilizer www.infineon.com/aurix-security-solutions 19
AURIX™ security features AURIX™ security hardware AURIX™ hardware security module – anchor of trust thanks to separated logical protection domain Trusted execution environment HSM domain Flash TriCore™ 0 TriCore™ 1 HSM 32-bit MCU SRAM Boot SRAM Bridge ROM AES-128 Firewall PKC ECC 2561) HASH Peripherals Peripherals Peripherals SHA 21) TRNG Timers and watchdog Full EVITA On-board COM External COM 1) Only TC3xx HSM domain creates a trusted execution environment Root of trust functions ››32-bit ARM® MCU separated by security firewall ››Integrity monitoring ››Background integrity checks of host application ––Secure boot, on-the-fly checks ››Secure key storage ––Protected data and program flash ››Strong key generation –– AIS31-compliant True Random Number Generator (TRNG) ››Crypto accelerators ––Symmetric: hardware AES-128 ––Asymmetric: hardware ECC-256, SHA-2 www.infineon.com/aurix-security-solutions 20
Infineon’s AURIX™ 32-bit microcontroller family offers a wide and interacts with the TriCore™ host core. SHE+ comes with portfolio of compatible devices with an embedded Hardware the AUTOSAR CRY interface for integrating the HSM security Security Module (HSM), which offers cost-efficient solutions for features into an automotive application, including interface all typical automotive security applications. The SHE+ driver to AUTOSAR, communication from TriCore™ to HSM and vice controls the hardware security peripheral in the HSM domain versa, key storage functionality and security peripheral drivers. TC3xx crypto driver SHE HIS HSM SHE+ TC2xx via partners Key management 10 keys 20 keys Configurable Symmetric hardware-based AES-128-bit (ECB, l l data encryption/decryption CBC) MAC generation/verification Optional l l Safe MAC verification – l l Random number management SHE PRNG l l Secure boot Optional l l Debug access – Enhanced by HSM debug options Enhanced by HSM debug options Other SHE services l l l software-based RSA1024 Asymmetric encryption/decryption – – software-based ECC256 Typical applications Tuning protection Immobilizer Possible extensions, depending on specific tier 1/OEM use case Secure-on-board communication Key management l l l Symmetric l l l data encryption/decryption MAC generation/verification l l l Safe MAC verification (optional) (optional) Random number management l l l Secure boot (optional) (optional) (optional) Debug access (for development) (for development) (for development) Other SHE services l l l Asymmetric encryption/decryption l l l www.infineon.com/aurix-security-solutions 21
Embedded software Infineon software product overview Software Tools Appl. software Modeling Application software tools Libraries Applications driver System software Operation software Security driver Safety driver (services, OS, communication, Configuration memory manager etc.) tools Microcontroller abstraction drivers HW Hardware Focus areas Via 3rd parties ››Microcontroller abstract drivers ››Libraries ––AUTOSAR MCAL (includes Multicore support) ––DSP library ››Safety drivers ––iLLD low-level peripheral drives ––PRO-SIL™ SafeTcore (AUDO MAX) ––LAPACK math library ––PRO-SIL™ SafeTlib (AURIX™ TC2xx) ››Free TriCore™ tools ––PRO-SIL™ SBST Software-Based Self-Test ––Free TriCore™ entry tool chain (AURIX™ TC3xx) ––Altium free tools for TriCore™/AURIX™ ––Safety libraries for AURIX™ TC3xx via software partners ––Free TASKING VX-toolset for AURIX™ ››Security software ––Free TASKING Pin Mapper for AURIX™ ––SHE+ driver (AURIX™ TC2xx) ––Infineon tools ––AUTOSAR crypto driver (AURIX™ TC3xx) via ––MemTool software partners ––DAS tool interface ––Intrusion Detection Prevention Systems (IDPS) via software partners Note: List of all SW and tool partner can be find on page 80. ››System software ––AUTOSAR BSW via software partners ––RTOS, communication stocks, etc. for industrial applica- tions via software partners Standardized driver Documented product release Compatibility and reduced Easy to use time-to-market Qualified release Efficient implementation Compliant with CMM L3, MC-ISAR Lowest resource consumption lower development cost Application independence Free evaluation version From chassis through body From sales contact to powertrain 22
Infineon AUTOSAR MCAL drivers MC-ISAR TC2xx/TC3xx product overview Device AURIX™ TC2xx AURIX™ TC3xx Safety claim at product release AUTOSAR version 4.0.3 4.2.2 TC3xx MCAL drivers MC-ISAR Basic ››MCU ››MCU ››ASIL B functionality claim package ››WDG ››WDG ––Except for CAN, CabTrcv, ››GPT ››GPT LIN ››SPI ››SPI ›› D process to ensure ASIL ››Port ››Port freedom from interference ››DIO ››DIO in memory space ››ICU ››ICU (supporting GTM → new CCU6 and ››PWM GPT12) ››ADC ››PWM (supporting GTM → new CCU6) ››CAN ››ADC (feture set 3) ››CanTrcv ››CAN ››LIN ››CanTrcv ››FLS ››LIN ››FEE ››FLS ››BFX ››FEE (feture set 2) ››CRC ››OCU – new ››BFX ››CRC MC-ISA COM ››FlexRay (not for TC22x, 1x) ››FlexRay ››ASIL D process to ensure enchanced ››Ethernet (for ASRv4 only, ››Ethernet freedom from interference package not for TC23x, 2x, 1x) in memory space MCISAR MCD ››UART, MSC (not for TC23x, ››CD: new production release DS-ADC, SMU ››ASIL B functionality claim MCAL complex 2x,1x), DMA, FLSloader ››CD: DMA, FLSloader, UART ––Except for CAN, CabTrcv, drivers LIN ››ASIL D process to ensure freedom from interference in memory space ››Demo code only for: HSSL ››DEMOCD (demo code/App note – not ››No safety claim (not for TC23x, 2x, 1x), released for production): HSSL, SENT, I²C, SENT, I²C (not for TC23x, IOM, STM, IRQ 2x, 1x), STM, DS-AC (not for TC23x, 2x, 1x), SMU, IOM Configuration tool Tresos Tresos Compiler ››TASKING 4.2r2 ››Migrate to TASKING 6.2r2 ››Windriver Diab 5.9.2.0+p ››HighTec GNU 4.9.2.0 ››HighTec GNU 4.6.3.0 ››Windriver v5.9.6.4 or v5.9.6.6 (still tbd.) ››Greenhills (version to be defined) for TC38x, TC35x, TC36x (availability on request) Delivery package Source code, Documentation Source code, Documentation 23
Development support Emulation device AURIX™ highlights ››Emulation devices (ED) are a very powerful solution ››Up to 4 MByte RAM for calibration with the same access for calibration, measurement, rapid prototyping and speed as on-chip flash debugging ››Automotive measurement bandwidth (XCP) 15/30 MByte/s ››Emulation logic and RAM are added next to the via regular 2/3-pin DAP interface unchanged Production Device (PD) part on the same chip ››Cost-optimized PD, feature-rich ED ››Same package for ED and PD, and a minimum or no additional external circuitry, allow a ›› highly cost-optimized ECU design ››Proven solution with broad tool support from leading automotive and debug tool vendors Trace and measurement Contemporary vehicles are designed to meet rising market Multicore Debug Solution (MCDS) demands for engine performance, engine responsiveness, torque, drivability, fuel economy and emissions. Key features Infineon’s proven Multicore Debug Solution (MCDS) enables ››Tracing of CPUs, buses, performance events and manufacturers to design and optimize features to peripheral internal states support these automotive trends. Unique MCDS features ››Real time, cycle accurate and in parallel include the fully time-aligned parallel trace of many ››Up to 1 MByte on-chip trace RAM (40 Gbit/s bandwidth) different on-chip sources, along with its highly powerful ››Very powerful trigger capabilities trigger capabilities. ››No additional pins needed besides the DAP interface ››New Compact Function Trace (CFT) mode for continuous program trace via DAP ››New fine-grained data trace qualification for automotive measurement 24
Multicore software development with AURIX™ The right partner for each development stage Due to increasing performance demands in the automotive specialized in multicore software development. Infineon’s industry, multicore architectures are becoming ever multicore partners can offer the best multicore expertise more popular. The AURIX™ microcontroller family offers and tools on the market for each stage of the software all the benefits of real-time hardware while supporting design process, covering everything from the initial multi a multicore architecture capable of both asymmetrical and core knowledge acquisition phase right up to final opti symmetrical multi-processing, and enabling the creation mization of the multicore software. of ASIL-D systems for automotive applications. Infineon proactively addresses the challenges of multicore Despite the fact that multicore architectures provide per- software development by offering special AURIX™ – formance benefits, they also result in challenges with dedicated literature and training for multicore software regard to software (SW) development. At Infineon, we fully development. Furthermore, Infineon also participates understand the increasing performance demands across in the organization of dedicated conferences, such as multiple applications, as well as the challenges that cus- the EMCC (Embedded Multi-Core Conference) tomers face when designing multicore software. To enable http://www.multicore-conference.com where various customers to achieve optimal performance when using car manufacturers and suppliers share their experiences, the powerful AURIX™ architecture, Infineon has built up a challenges and latest findings from the field of multicore network of strong partnerships with companies highly architecture. Multicore know-how Multicore SW design Multicore SW development MCAL Multicore support Multicore performance evaluation Multicore SW optimization 25
AURIX™ starter and application kits Infineon starter kits – 32-bit microcontrollers Triboards Infineon Tricore™ family starter kits are powerful evalua- tion systems that enable evaluation and development well before the target hardware is available. They offer a solid platform for both hardware and software engineers to eval- uate and prototype designs that are closely aligned with their final applications. Application kits To simplify the development of your own application, the kit comes with a variety of on-board components, including a highly integrated software development environment that gives you everything you need to compile, debug, and flash your AURIX™ multicore application, such as radar, Arduino, gateway and safety. System application kits The system application kits provide a quick jump-start to typical microcontroller applications, such as motor control, radar etc. These reference design kits provide faster design-in support for end applications by providing a reference board, application software, tooling and documentation. www.infineon.com/aurix-kits 26
TASKING Pin Mapper The Pin Mapper can save a substantial amount of time for developers and provides assurance that no pin conflicts exist. In addition, the pin mapper generates a data file for PCB design, eliminating the chance for errors when passing data manually. Benefits of the TASKING Pin Mapper for AURIX™ ››The Pin Mapper tool reduces developer time and costs, ››The Pin Mapper reduces miscommunication between while improving the quality of results. individuals and teams by creating all project files from ››Configuration takes place via an intuitive eclipse based one source. The Pin Mapper creates: GUI with built-in knowledge about AURIX™ devices and ––Device initialization code in ISO-C format packages. This saves the developer from the tedious task ––A spreadsheet (CVS) file for project documentation of consulting piles of device manuals and maintaining ––A schematic symbol block that can be imported by PCB configuration settings in spreadsheets. design tools such as Altium Designer ››Configuration errors/conflicts are detected at entry time and can be either automatically resolved by the built-in conflicts Supported TriCore™ devices solver or solved manually. Whereas traditionally such errors ››AURIX™ family (TC22x, TC23x, TC26x, TC27x, TC29x) remain hidden until code has been generated and is tested. ››AURIX™ 2G family (TC38x, TC39x,...) Free TriCore™ entry tool chain This free-of-charge entry tool chain provides all the features required to develop and test software for TriCore™ and AURIX™. The tool can be used with all available TriCore™ and AURIX™ starter kits and application boards. Key features ››High-performance GNU C compiler ››Eclipse-based IDE ››Integrated source-level debugger ››Project wizard to easily define the project properties ››On-chip flash programming support for device and board support For further information on TriCore™ tools, please visit www.infineon.com/aurix-tools 27
AURIX™ and XMC™ PDH partners Preferred Design Houses (PDH) and software resellers Optimized open market customer support set up for systems using AURIX™ and XMC™, including software and other Infineon’s products, such as power products, sensor products and modules. Our partners are trained to use AURIX™ and XMC™. Classic ››1st level customer support covering ››Driving design at customer Infineon products/solutions ››Basic training for design teams at customer (Free of charge) ›› Technical interface and support to the customer ››24 h response time to the customer ››Project management and project-specific ››Software testing application support ››Support for project-specific Premium ›› Specification of general software architecture, functional safety engineering (Consultancy mode) defining required layers, control and ››Project-specific support for security solution data flow structure etc. ››Safety support To be agreed between ›› Specification and implementation of ››Security support customers and PDH custom device drivers ››Multicore support ››Optimization of software components with regard to speed/code size Optimized regional and application-specific presence Global EMEA Support capabilities MicroFuzzy TBS AUTOSAR • • • • • • • • • • • • • • • • • • Motor control • • • • • • • • • • • • • • • • • • • Lighting • • • • • • • • • • • • • • • • PFC/power conversion • • • • • • • • • • • • • • • • AURIX™ general support HW • • • • • • • • • • • • • • • • • • • • AURIX™ general support SW • • • • • • • • • • • • • • • • • • • • • • Safety support IEC 61508 • • • • • • • • • • • • • • • • • Safety support ISO 26262 • • • • • • • • • • • • • • • • • • Security support/SHE+ • • • • • • • • • • • • • • • • • XMC™ general support HW • • • • • • • • • • • • • • • • • • • XMC™ general support SW • • • • • • • • • • • • • • • • • • • Class B classification • • • • • • • • • • • • • Capacitive sensing with XMC™ • • • • • • • • • • • • Secure boot for XMC™ • • • • • • • • • • • • • • 24 GHz radar • • • • 77 GHz radar • • • • Americas China Korea Basic • Essential principles and elementary Support capabilities know-how to support a customer, provision of basic training for design teams AUTOSAR • • • • • • • Motor control • • • • • • • Lighting • • • • • • • PFC/power conversion AURIX™ general support HW • • • • • • • • • • • • • • Advanced • AURIX™ general support SW • • • • • • • High-level project-specific application Safety support IEC 61508 • • • • • • • Safety support ISO 26262 • • • • • • • support/consulting Security support/SHE+ • • • • • • • XMC™ general support HW • • • • • • • XMC™ general support SW • • • • • • • Class B classification Capacitive sensing with XMC™ • • • • • • • • • • • • • • • • • • • • Expert • Secure boot for XMC™ Extensive knowledge and 24 GHz radar • • • • 77 GHz radar • • • • ability to fully support development www.infineon.com/pdh 28
AURIX™ for powertrain and (H)EV applications Energy efficiency for combustion engine vehicles Electronic automotive components are key to raising fuel bustion technologies such as Homogeneous Charge Com- efficiency levels and cutting emissions. The latest environ- pression Ignition (HCCI) as well as in direct injection, smart ment protection agency standards – Euro 5 and Euro 6 for turbocharger and valve actuation applications. They are passenger cars and Euro 3 and Euro 4 for motorcycles – are also ideal for a range of innovative transmission technolo- driving developments in advanced engine management. gies such as Double Clutch Transmission (DCT) and modern TriCore™ based products can be found in improved com- Continuous Variable Transmission (CVT). Powertrain solutions for (H)EV While excelling in fuel economy, being fun to drive and Often seen as the master micro in battery balancing reducing CO2 emissions, Hybrid Electric Vehicles (HEV) and topology, the TriCore™ AURIX™ family proposes a 32-bit Electric Vehicles (EV) have the drawbacks of a higher cost, stand-by domain combined with an integrated 8-bit limited drive-range and safety concerns (e.g. risk of battery stand-by controller, essential for battery balancing under over-charging). Thanks to their high performance, func- low-power mode (e.g. vacation parking). As cross-border tional integration and application-based software support, charging becomes popular, AURIX™ has increased its SRAM TriCore™ products are the ideal solution for (H)EV motor to Flash ratio to enable various charging protocols. Infineon drives. TriCore™ offers a CPU load of less than 3% at 300 MHz is the market leader in providing Hardware Security Module frequency for the complete Field-Oriented Control (FOC) (HSM), a feature that prevents the main CPU from illegal algorithm. The TriCore™ AURIX™ family offers multicore manipulation, making the billing for battery charging more architecture, allowing inverter control, hybrid torque man- trustworthy. agement and DC-DC conversion to be done within one single microcontroller. Nevertheless, the TriCore™ AURIX™ family has built-in resolver functionality, saving customers the cost of implementing an external resolver IC. www.infineon.com/powertrain 29
AURIX™ for powertrain applications Driving Domain Controller (DDC) Application example +12 V from battery Safety system power supply TLF35582 Safety watchdog CAN FD CAN transceivers CAN FD TLE6250/50 TLE7250 32-bit MCU Multicore AURIX™ TC3xx Ethernet Ethernet transceiver Automotive instrumentation ports › Production device = 10 MB/sec › Engineering = 250 MB/sec The DDC acts as the orchestrator of the powertrain, chassis and safety ECUs, having the primary task of supervising, syn- chronizing and monitoring these domains. The specific tasks carried out by the DDC include the human-machine interface, torque coordination, driving strategy control, cruise control, charging coordination, thermal management, environment models, predictive functions, safety and fail-operational, as well as firewall and security. The DDC optimizes the energy management of the motion domain in order to increase the driving distance, performance and efficiency of the vehicle. Application features System benefits ››TriCore™ DSP functionality ››Family concept with PIN and software compatibility, ››Best-in-class performance: up to 6 TriCore™ with up to for maximum re-use and fast go-to-market 300 MHz per core, up to 2400 DMIP ASIL-D capable per ››Rich legacy peripherals (CAN FD, LIN, …) for integrated microcontroller gateway application ››Up to 16-MB eFlash to support A/B swap SOTA ››HSSL connectivity for direct coupling with SoC Suggested products ››Ethernet up to 1 Gbit/s for fast connection to network ››TC29x and SoC ››TC37xTX ››External memory interface (eMMC) for data logging ››TC38xQP ››ISO 26262 compliance to support safety requirements up ››TC39xXx to ASIL-D ››Availability of AUTOSAR 4.x www.infineon.com/driving-domain-controller 30
AURIX™ for powertrain applications Gasoline direct injection Application example Engine management Battery (KL30) Typical partitioning for GDI discrete and solenoid Key (KL15) Safety system power supply TLF35584 Safety watchdog 4x Low-side ignition Ignition plugs IPG20N10S4L-35A IPD26N06S2L-35 Pedal position HSM AUIRLL2705 OptiMOS™ GDI driver TLE4997E2/98C3/98P3 MOSFET 6x Solenoid injectors EGR: throttle position TLE4997E2/98C3/98P3 Fuel level TLE4997E2/98C3/98P3 H-Bridge for throttle 8 A ch. (eGas) throttle TLE8209-2SA Swirl/tumble flap TLE4997E2/98C3/98P3 General-purpose 5 A ch. Turbocharger Throttle position 32-bit MCU H-Bridge wastegate TLE4998S3/S3C/S4 Multicore/ TLE9201SG Lockstep Temperature AURIX™ 5 A ch. H-bridge for EGR EGR throttle TLE9201SG Barometric pressure KP234, KP253 Low-side driver PWM, current sense 2x Manifold air pressure O2 TLE8102SG KP214N2611 AUIPS2041L KP229E2701 Knock sensor(s) Low-side driver 8x On-off outputs Relays In-cylinder pressure TLE8108EM sensors 4x Solenoids Lambda sensor WT 2x Low-side driver Solenoid Crankshaft PWM outputs TLE8718SA 4x TLE5025C E6747 TLE4921-5U Relays FlexRay LIN transceiver 2ch. 2x … transceiver … TLE7259-3GE MIL Camshaft TLE9251VSJ TLE9221SX TLE7259-3LE TLE4986 TLE9250XSJ Lamp Powertrain CAN Thanks to its state-of-the-art safety features, the TriCore™ AURIX™ family enables systems to achieve the highest safety level up to ASIL-D. The scalable AURIX™ family includes the GTM, the de-facto industry standard timing module that sup- ports highly complex engine management, while meeting the market’s most stringent emissions regulations. Application features System benefits ››Direct injection ››Microcontroller with best-in-class real-time performance ››Scalable software-based knock detection ››Scalable platform – performance, memory size and I/Os ››Variable valve control ››Committed to reduce CO2 by 20% ››Throttle and EGR control ››Anti-theft protection and tuning protection ››Turbocharging ››Increased knock detection accuracy via DS-ADC ››Catalyst after-treatment ››Enhanced communication (Ethernet) ››Start/stop system ››Dedicated peripherals for powertrain ››Supports safety levels up to ASIL-D Suggested products ››TC26x ››TC27x www.infineon.com/gasolineengine 31
You can also read