migrating to can fd - vector: software + services for … · · 2017-02-22rf power transistors...
Post on 15-Apr-2018
217 Views
Preview:
TRANSCRIPT
Tony Adamson Marketing Director – CAN / LIN / FlexRay
MIGRATING TO CAN FD
2 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 2 2
Agenda WHO ARE WE
CAR NETWORKS UNDER TRANSFORMATION
SPEED
SECURITY
OUR MISSION AND STRATEGY
3 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 3 3
Agenda WHO ARE WE
CAR NETWORKS UNDER TRANSFORMATION
SPEED
SECURITY
OUR MISSION AND STRATEGY
4 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
#1 Communications Processors #1 RF Power Transistors #1 Automotive Radar #1 Automotive Safety2 #2 MCUs
#1 SECURE
IDENTIFICATION
#1 AUTOMOTIVE
#1 RF POWER
TRANSISTORS
#1 COMMUNICATIONS
PROCESSORS
#1 SMALL SIGNAL
DISCRETES
#1 BROAD-BASED
MCUs1
#1 Secure Identification #1 Car Entertainment #1 In-Vehicle Networking #1 Secure Car Access #1 Smart Card MCUs #1 Small Signal Discretes
EXPANDED SOLUTIONS FOR OUR CUSTOMERS
Sources: HIS, ABI Research, Strategy Analytics, The Linley Group (1) MCU market excluding Automotive (2) Automotive Analog and Sensors in Airbag, Braking, Radar, and TPMS applications
5 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Leading market from the start, driving all new standards
In-Vehicle Networking: our position and offering
(CO-)INVENTED MOST IVN SOLUTIONS
>6B NXP NODES IN THE MARKET
13 NXP NODES IN EACH NEW CAR
CO-DEVELOPER WITH MOST OEMS
>20 YEARS OF PRODUCTION SINCE 1ST CAN
DRIVING NEW STANDARDS
A complete portfolio for present and future networks
CAN/ LIN Networking – Gen purpose
System Basis Chip
Mini LIN System
Basis Chip
Multi LIN Channel
LIN Transceiver
Mini CAN System
Basis Chip
Multi CAN Channel
CAN / FD Transceiver
4X Star Coupler
FR Transceiver
100BASET1Switch
100BASET1PHY
Inte
grat
ion
Leve
l
Communication speed
Focusing on big markets
Driven by performance
• Standard, high-volume functions • Not investing in app-specific • Scalable approach
• Power Efficiency, EMC • Functional Safety, robustness • From IVN to System solution
Support OEM needs
CAN/ LIN Functional Safety (ASIL-D) System
Basis Chip
6 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 6 6
Agenda WHO ARE WE
CAR NETWORKS UNDER TRANSFORMATION
SPEED
SECURITY
OUR MISSION AND STRATEGY
7 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Tomorrow: Self-driving, Connected Vehicles
Big Data
Cellular
Radar
Car access
Sensors
ADAS
Sensor Fusion
Camera, LiDAR
Secure Connected, Self-Driving Cars will Save >1,3M Road fatalities globally
Broadcast
Network
Portable devices
Security
8 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Speed and Security Transforming Car Networks
IVN TODAY • Dominated by classic CAN • No security • Few gateways • Squeezed systems (bandwidth,
topology, CPU, EMC) • Simple nodes
IVN TOMORROW • CAN FD, Ethernet and more • IDS and Crypto security • Central and Domain gateways • Tighter EMC specs • Wider topology range • Smart nodes
CHALLENGES • Major investments in network re-architecture • Strong security not possible on CAN 2.0 • CAN FD hampered by ringing and EMC • Lack of CAN FD and Secure MCUs
NXP’s Strategy: ENABLE THE TRANSITION
9
Car Networks in Transformation LIN
Gb+ Ethernet 100Mbps Ethernet
FlexRay CAN-FD
Ethernet Switch
KEY
LIN CAN FR other ETH
Powertrain / Transmission Domain
Safety / Chassis Domain
Body Domain
Infotainment Domain
ADAS Domain
OBD Port
BMS
ECU
ECU
…
Steer
Susp
…
ESP
…
ECU
… ECU
ECU
ECU
… ECU
ECU
Body Controller
(BCU)
…
Door
Roof
Seat
Engine
Gearbox
ECU
DSRC (V2X)
Central Gateway
Sensor Fusion
NAD / TCU
Nav/IVI Radio
Vision Radar
Cameras
… Amp Front Display
Rear Display
Speakers
…
NAD / TCU
«new» domains allow innovative architecture Task: make it Auto, Sustainably
auto backbone requires evolutionary approach Task: move to 2M, add security
10 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 10 10
Agenda WHO ARE WE
CAR NETWORKS UNDER TRANSFORMATION
SPEED
SECURITY
OUR MISSION AND STRATEGY
11 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
CAN with Flexible Datarate: 10 times faster, minimum effort
Implementation Cost per Node
Dat
a-ra
te (b
it/s)
10 K
100 K
1 M
10 M
100 M
PSI5
LIN
CAN
CAN FD
FlexRay
Ethernet Broad-R Reach
Sensors / Embedded Control MM / ADAS
• Technical editor of new ISO specification
• Transceivers guaranteed at 2 and 5 Mbps
• Providing top EMC at faster bitrates
• Providing total simulation environment for network validation
• Created FD PASSIVE partial networking extension for simple ECU flashing implementation.
• Invented FD SHIELD for true CAN and CAN FD interoperation on the same bus
NXP in the driving seat
12 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
NXP HS-CAN PORTFOLIO - STANDARD FUNCTIONS:Battery System
MCU voltage
NXP HS-CAN PORTFOLIO - ADVANCED POWER MODES:
12V and 24V Support TJA1043 TJA1145 TJA1145/ FDIN PRODUCTION IN PRODUCTION IN PRODUCTION
TJA1042/ 3IN PRODUCTION IN PRODUCTION
Sleep Partial Networking FD-Passive
Full 24V Support
Commercial Vehicles
5V TJA1051 TJA1042 TJA1059IN PRODUCTION IN PRODUCTION IN PRODUCTION
3V3Pin 5: VIO
TJA1051/ 3
IN PRODUCTION
3V3Pin 5: VIO
TJA1057G/ 3 TJA1044G/ 3IN PRODUCTION IN DEVELOPMENT - SAMPLES: Q3-16 / SOP: Q4-16
Basic Standby Dual-Standby
12V Optimised
Passenger Vehicles
5V TJA1057G TJA1044G TJA1046IN PRODUCTION IN PRODUCTION
MbpsHVSON
MbpsHVSON
MbpsHVSON
MbpsHVSON
HVSONHVSON
MbpsHVSON
HVSON
HVSONHVSON HVSONMbps Mbps
Mbps
Mbps
Mbps
Mbps
Mbps
Mbps
REASONS TO PROMOTE: HVSON Mbps MbpsMbps
Parts internallydual sourced
Chokeless EMC performance
HVSON package option available
Max 1Mbps bit rate for HS-CAN
Supports max 2 / 5Mbps CAN FD
NXP HS-CAN Portfolio Supporting 5Mbps
Q2-17
13 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
WHAT DOES 5MBPS GUARANTEED MEAN?
ΔtRec = tBit(RXD) − tBit(Bus)
Example from transceiver datasheet:
Parameter Symbol Min (ns) Max (ns)
Transmitted recessive bit width at 2 Mbit/s tBit(Bus) 435 530
Received recessive bit width at 2 Mbit/s tBit(RXD) 400 550
Receiver timing symmetry at 2 Mbit/s ΔtRec −65 +40
Transmitted recessive bit width at 5 Mbit/s tBit(Bus) 155 210
Received recessive bit width at 5 Mbit/s tBit(RXD) 120 220
Receiver timing symmetry at 5 Mbit/s ΔtRec −45 +15
14 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Smart CAN Nodes: more intelligence for CAN
CAN Transceiver
CAN FD BUS MONITOR
CAN BUS MONITOR
FD SHIELD
PARTIAL NETWORKING ENERGY SAVING,
FAST ECU FLASHING
RE-USE CAN ECUs IN CAN FD
NETWORKS
Ultra-low Emission, Ultra-low Power, 5Mbps CAN cell
CAN FD controller
CAN decoder
FULL 5MBPS PORTFOLIO
15 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Migration to CAN FD: NXP provides bridge function FD Shield allows mixing of old and new MCUs on same bus
• CORE PROBLEM: CAN FD and “Classic” CAN nodes cannot be mixed
• Enforces split on technology, not function: • Sub-optimal wiring • Additional gateway routing • Complicated security policies • Challenge in MCU availability
• FD Shield allows legacy Classic CAN ECUs to co-exist with CAN FD ECUs, avoiding challenges.
• 100% drop-in replacement CAN transceiver: no further HW or SW changes.
• Fully ISO and AUTOSAR compliant.
CAN FD ECU
CAN FD ECU
Legacy CAN ECU
MCU CAN FD Capable
TRX 5 Mbps Capable
MCU Classic
CAN
TRX 1 Mbps Capable
CANH
CANL
CANH
CANL
MCU CAN FD Capable
TRX 5 Mbps Capable
16 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Example of different use cases for FD Shield Gateway
EPS
Cl ECU
Chassis ADAS Power Train
Gateway
EPS Cl
TCU
ECU
Chassis ADAS Power Train
TCU
Build a Domain-Driven architecture Optimize branches to minimize ringings
Apply an easier CAN Bus Security 16.
Gateway
Chassis ADAS
Manage transition in MCU availability Be able to keep legacy ECUs in FD IVNs
Without FD Shield
With FD Shield
Power Train
Gateway
Chassis ADAS Power Train
Without FD Shield
With FD Shield
“Fast Branch”
17 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
18 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
19 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Unchanged
20 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 20 20
Agenda WHO ARE WE
CAR NETWORKS UNDER TRANSFORMATION
SPEED
SECURITY
OUR MISSION AND STRATEGY
21 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Wha
t’s N
ext ?
Ever Increasing Events For Car Hacking
Tesla Model S (again): REMOTE hack of body domain
22 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
4 Layers to Securing a Car Layer 2: Secure Gateway Domain isolation, firewall/filter, centralized intrusion detection (IDS)
OBD
TCU
Gateway Safety domain
Comfort domain
SE
IVI
Body
Braking Powertrain
Cluster
ADAS
Layer 1: Secure Interface Secure M2M authentication, secure key storage
OBD Body
TCU Braking Powertrain
Cluster IVI
ADAS SE
Layer 3: Secure Network Message authentication, CAN ID killer, distributed intrusion detection (IDS)
OBD
TCU SE
IVI Safety domain
Comfort domain
Body
Braking Powertrain
Cluster
ADAS
Gateway
Layer 4: Secure Processing Secure boot, run time integrity, OTA updates
OBD
TCU
Gateway
SE
IVI Safety domain
Comfort domain
Body
Braking Powertrain
Cluster
ADAS
23 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
Smart CAN Nodes: more intelligence for CAN
CAN Transceiver
CAN FD BUS MONITOR
ID / FRAME / RATE CONTROL
Security In built CAN PHY (Full HSM)
CAN BUS MONITOR
FD SHIELD
Basic IPS
ECU and Network Security
PARTIAL NETWORKING ENERGY SAVING,
FAST ECU FLASHING
RE-USE CAN ECUs IN CAN FD
NETWORKS
CAN/ CAN FD NETWORK SECURITY
CAN, CAN FD NETWORK SECURITY
Ultra-low Emission, Ultra-low Power, 5Mbps CAN cell
HW Crypto Accelerators
Programmable Core Secure Storage
Set of policies stored in memory
CAN FD controller
CAN decoder
FULL 5MBPS PORTFOLIO
24 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
STINGER is a drop-in replacement solution for CAN and CAN FD networks to contain the effects of a hack – focusing on two kinds of attack:
1. Contain spoofing attacks, based on on-the-fly ID monitoring.
STINGER – SECURE-ASSIST TRANSCEIVER
CAN ID
ID
ID
ID White-listing on TXD Protects bus from Host MCU “spoof” attack. Host MCU cannot trigger diagnostics session.
ID Monitoring on CAN bus Polices other ECUs that “spoof” this ECU.
RXD MCU TRX
TXD ID
MSG-ID1 MSG-ID2 . . .
MSG-ID3 MSG-ID4 . . .
BUS LIMIT
25 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
STINGER is a drop-in replacement solution for CAN and CAN FD networks to contain the effects of a hack – focusing on two kinds of attack:
2. Contain denial-of-service attacks to allow network communication to take place
STINGER – SECURE-ASSIST TRANSCEIVER
CAN
RXD MCU TRX
TXD
MSG-ID1 MSG-ID2 . . .
MSG-ID3 MSG-ID4 . . .
Flooding Prevention Host MCU cannot hijack / flood the bus to disrupt
communications.
26 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 26 26
Agenda WHO ARE WE
CAR NETWORKS UNDER TRANSFORMATION
SPEED
SECURITY
OUR MISSION AND STRATEGY
27
Car Networks in Transformation LIN
Gb+ Ethernet 100Mbps Ethernet
FlexRay CAN-FD
Ethernet Switch
KEY
LIN CAN FR other ETH
Powertrain / Transmission Domain
Safety / Chassis Domain
Body Domain
Infotainment Domain
ADAS Domain
OBD Port
BMS
ECU
ECU
…
Steer
Susp
…
ESP
…
ECU
… ECU
ECU
ECU
… ECU
ECU
Body Controller
(BCU)
…
Door
Roof
Seat
Engine
Gearbox
ECU
DSRC (V2X)
Central Gateway
Sensor Fusion
NAD / TCU
Nav/IVI Radio
Vision Radar
Cameras
… Amp Front Display
Rear Display
Speakers
…
NAD / TCU
«new» domains allow innovative architecture Task: make it Auto, Sustainably
auto backbone requires evolutionary approach Task: move to 2M, add security
28 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
NXP role: enable Carmakers re-designing their Networks Support CAN FD, facilitate Gateway architectures, True Automotive Ethernet
CAN migration to CAN FD
New challenges on topologies, EMC,
speed, MCU availability
Central Gateways, Body Controllers
Need for compact, scalable solutions
High power Security threat
Ethernet enabling hyperconnectivity
Auto-native
solution Inter-operable
Scalable
• FULLY SCALABLE PORTFOLIO: Lowest (stand alone) to Highest (Full Ethernet AVB Infotainment systems)
• SMART TRANSCEIVERS: faster, higher EMC performances, intelligent security and filtering functions
• SYSTEM BASIS CHIPS: Developing integrated solutions for Gateways, BCMs and peripheral modules
• ETHERNET: Releasing solid native automotive portfolio
• FUTURE IVN: Co-defining new standards, future IVNs
• ALL THIS, IN PARTNERSHIP WITH KEY OEMS
29 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016
top related