MIGRATING TO CAN FD - Vector: Software + Services for … · · 2017-02-22RF Power Transistors #1. Automotive Radar #1. ... Switch . 100BASET1 PHY . Integration Level. Communication

Tony Adamson Marketing Director – CAN / LIN / FlexRay

MIGRATING TO CAN FD

2 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016 2 2

Agenda WHO ARE WE

CAR NETWORKS UNDER TRANSFORMATION

SPEED

SECURITY

OUR MISSION AND STRATEGY


Agenda WHO ARE WE


SPEED

SECURITY


4 VECTOR CAN FD SYMPOSIUM FEBRUARY 16, 2016

#1 Communications Processors #1 RF Power Transistors #1 Automotive Radar #1 Automotive Safety2 #2 MCUs

#1 SECURE

IDENTIFICATION

#1 AUTOMOTIVE

#1 RF POWER

TRANSISTORS

#1 COMMUNICATIONS

PROCESSORS

#1 SMALL SIGNAL

DISCRETES

#1 BROAD-BASED

MCUs1

#1 Secure Identification #1 Car Entertainment #1 In-Vehicle Networking #1 Secure Car Access #1 Smart Card MCUs #1 Small Signal Discretes

EXPANDED SOLUTIONS FOR OUR CUSTOMERS

Sources: HIS, ABI Research, Strategy Analytics, The Linley Group (1) MCU market excluding Automotive (2) Automotive Analog and Sensors in Airbag, Braking, Radar, and TPMS applications


Leading market from the start, driving all new standards

In-Vehicle Networking: our position and offering

(CO-)INVENTED MOST IVN SOLUTIONS

>6B NXP NODES IN THE MARKET

13 NXP NODES IN EACH NEW CAR

CO-DEVELOPER WITH MOST OEMS

>20 YEARS OF PRODUCTION SINCE 1ST CAN

DRIVING NEW STANDARDS

A complete portfolio for present and future networks

CAN/ LIN Networking – Gen purpose

System Basis Chip

Mini LIN System

Basis Chip

Multi LIN Channel

LIN Transceiver

Mini CAN System

Basis Chip

Multi CAN Channel

CAN / FD Transceiver

4X Star Coupler

FR Transceiver

100BASET1Switch

100BASET1PHY

Inte

grat

ion

Leve

l

Communication speed

Focusing on big markets

Driven by performance

• Standard, high-volume functions • Not investing in app-specific • Scalable approach

• Power Efficiency, EMC • Functional Safety, robustness • From IVN to System solution

Support OEM needs

CAN/ LIN Functional Safety (ASIL-D) System

Basis Chip


Agenda WHO ARE WE


SPEED

SECURITY



Tomorrow: Self-driving, Connected Vehicles

Big Data

Cellular

Radar

Car access

Sensors

ADAS

Sensor Fusion

Camera, LiDAR

Secure Connected, Self-Driving Cars will Save >1,3M Road fatalities globally

Broadcast

Network

Portable devices

Security


Speed and Security Transforming Car Networks

IVN TODAY • Dominated by classic CAN • No security • Few gateways • Squeezed systems (bandwidth,

topology, CPU, EMC) • Simple nodes

IVN TOMORROW • CAN FD, Ethernet and more • IDS and Crypto security • Central and Domain gateways • Tighter EMC specs • Wider topology range • Smart nodes

CHALLENGES • Major investments in network re-architecture • Strong security not possible on CAN 2.0 • CAN FD hampered by ringing and EMC • Lack of CAN FD and Secure MCUs

NXP’s Strategy: ENABLE THE TRANSITION

9

Car Networks in Transformation LIN

Gb+ Ethernet 100Mbps Ethernet

FlexRay CAN-FD

Ethernet Switch

KEY

LIN CAN FR other ETH

Powertrain / Transmission Domain

Safety / Chassis Domain

Body Domain

Infotainment Domain

ADAS Domain

OBD Port

BMS

ECU

ECU

…

Steer

Susp

…

ESP

…

ECU

… ECU

ECU

ECU

… ECU

ECU

Body Controller

(BCU)

…

Door

Roof

Seat

Engine

Gearbox

ECU

DSRC (V2X)

Central Gateway

Sensor Fusion

NAD / TCU

Nav/IVI Radio

Vision Radar

Cameras

… Amp Front Display

Rear Display

Speakers

…

NAD / TCU

«new» domains allow innovative architecture Task: make it Auto, Sustainably

auto backbone requires evolutionary approach Task: move to 2M, add security


Agenda WHO ARE WE


SPEED

SECURITY



CAN with Flexible Datarate: 10 times faster, minimum effort

Implementation Cost per Node

Dat

a-ra

te (b

it/s)

10 K

100 K

1 M

10 M

100 M

PSI5

LIN

CAN

CAN FD

FlexRay

Ethernet Broad-R Reach

Sensors / Embedded Control MM / ADAS

• Technical editor of new ISO specification

• Transceivers guaranteed at 2 and 5 Mbps

• Providing top EMC at faster bitrates

• Providing total simulation environment for network validation

• Created FD PASSIVE partial networking extension for simple ECU flashing implementation.

• Invented FD SHIELD for true CAN and CAN FD interoperation on the same bus

NXP in the driving seat


NXP HS-CAN PORTFOLIO - STANDARD FUNCTIONS:Battery System

MCU voltage

NXP HS-CAN PORTFOLIO - ADVANCED POWER MODES:

12V and 24V Support TJA1043 TJA1145 TJA1145/ FDIN PRODUCTION IN PRODUCTION IN PRODUCTION

TJA1042/ 3IN PRODUCTION IN PRODUCTION

Sleep Partial Networking FD-Passive

Full 24V Support

Commercial Vehicles

5V TJA1051 TJA1042 TJA1059IN PRODUCTION IN PRODUCTION IN PRODUCTION

3V3Pin 5: VIO

TJA1051/ 3

IN PRODUCTION

3V3Pin 5: VIO

TJA1057G/ 3 TJA1044G/ 3IN PRODUCTION IN DEVELOPMENT - SAMPLES: Q3-16 / SOP: Q4-16

Basic Standby Dual-Standby

12V Optimised

Passenger Vehicles

5V TJA1057G TJA1044G TJA1046IN PRODUCTION IN PRODUCTION

MbpsHVSON

MbpsHVSON

MbpsHVSON

MbpsHVSON

HVSONHVSON

MbpsHVSON

HVSON

HVSONHVSON HVSONMbps Mbps

Mbps

Mbps

Mbps

Mbps

Mbps

Mbps

REASONS TO PROMOTE: HVSON Mbps MbpsMbps

Parts internallydual sourced

Chokeless EMC performance

HVSON package option available

Max 1Mbps bit rate for HS-CAN

Supports max 2 / 5Mbps CAN FD

NXP HS-CAN Portfolio Supporting 5Mbps

Q2-17


WHAT DOES 5MBPS GUARANTEED MEAN?

ΔtRec = tBit(RXD) − tBit(Bus)

Example from transceiver datasheet:

Parameter Symbol Min (ns) Max (ns)

Transmitted recessive bit width at 2 Mbit/s tBit(Bus) 435 530

Received recessive bit width at 2 Mbit/s tBit(RXD) 400 550

Receiver timing symmetry at 2 Mbit/s ΔtRec −65 +40

Transmitted recessive bit width at 5 Mbit/s tBit(Bus) 155 210

Received recessive bit width at 5 Mbit/s tBit(RXD) 120 220

Receiver timing symmetry at 5 Mbit/s ΔtRec −45 +15


Smart CAN Nodes: more intelligence for CAN

CAN Transceiver

CAN FD BUS MONITOR

CAN BUS MONITOR

FD SHIELD

PARTIAL NETWORKING ENERGY SAVING,

FAST ECU FLASHING

RE-USE CAN ECUs IN CAN FD

NETWORKS

Ultra-low Emission, Ultra-low Power, 5Mbps CAN cell

CAN FD controller

CAN decoder

FULL 5MBPS PORTFOLIO


Migration to CAN FD: NXP provides bridge function FD Shield allows mixing of old and new MCUs on same bus

• CORE PROBLEM: CAN FD and “Classic” CAN nodes cannot be mixed

• Enforces split on technology, not function: • Sub-optimal wiring • Additional gateway routing • Complicated security policies • Challenge in MCU availability

• FD Shield allows legacy Classic CAN ECUs to co-exist with CAN FD ECUs, avoiding challenges.

• 100% drop-in replacement CAN transceiver: no further HW or SW changes.

• Fully ISO and AUTOSAR compliant.

CAN FD ECU

CAN FD ECU

Legacy CAN ECU

MCU CAN FD Capable

TRX 5 Mbps Capable

MCU Classic

CAN

TRX 1 Mbps Capable

CANH

CANL

CANH

CANL

MCU CAN FD Capable

TRX 5 Mbps Capable


Example of different use cases for FD Shield Gateway

EPS

Cl ECU

Chassis ADAS Power Train

Gateway

EPS Cl

TCU

ECU


TCU

Build a Domain-Driven architecture Optimize branches to minimize ringings

Apply an easier CAN Bus Security 16.

Gateway

Chassis ADAS

Manage transition in MCU availability Be able to keep legacy ECUs in FD IVNs

Without FD Shield

With FD Shield

Power Train

Gateway


Without FD Shield

With FD Shield

“Fast Branch”




Unchanged


Agenda WHO ARE WE


SPEED

SECURITY



Wha

t’s N

ext ?

Ever Increasing Events For Car Hacking

Tesla Model S (again): REMOTE hack of body domain


4 Layers to Securing a Car Layer 2: Secure Gateway Domain isolation, firewall/filter, centralized intrusion detection (IDS)

OBD

TCU

Gateway Safety domain

Comfort domain

SE

IVI

Body

Braking Powertrain

Cluster

ADAS

Layer 1: Secure Interface Secure M2M authentication, secure key storage

OBD Body

TCU Braking Powertrain

Cluster IVI

ADAS SE

Layer 3: Secure Network Message authentication, CAN ID killer, distributed intrusion detection (IDS)

OBD

TCU SE

IVI Safety domain

Comfort domain

Body

Braking Powertrain

Cluster

ADAS

Gateway

Layer 4: Secure Processing Secure boot, run time integrity, OTA updates

OBD

TCU

Gateway

SE

IVI Safety domain

Comfort domain

Body

Braking Powertrain

Cluster

ADAS


Smart CAN Nodes: more intelligence for CAN

CAN Transceiver

CAN FD BUS MONITOR

ID / FRAME / RATE CONTROL

Security In built CAN PHY (Full HSM)

CAN BUS MONITOR

FD SHIELD

Basic IPS

ECU and Network Security

PARTIAL NETWORKING ENERGY SAVING,

FAST ECU FLASHING

RE-USE CAN ECUs IN CAN FD

NETWORKS

CAN/ CAN FD NETWORK SECURITY

CAN, CAN FD NETWORK SECURITY

Ultra-low Emission, Ultra-low Power, 5Mbps CAN cell

HW Crypto Accelerators

Programmable Core Secure Storage

Set of policies stored in memory

CAN FD controller

CAN decoder

FULL 5MBPS PORTFOLIO


STINGER is a drop-in replacement solution for CAN and CAN FD networks to contain the effects of a hack – focusing on two kinds of attack:

1. Contain spoofing attacks, based on on-the-fly ID monitoring.

STINGER – SECURE-ASSIST TRANSCEIVER

CAN ID

ID

ID

ID White-listing on TXD Protects bus from Host MCU “spoof” attack. Host MCU cannot trigger diagnostics session.

ID Monitoring on CAN bus Polices other ECUs that “spoof” this ECU.

RXD MCU TRX

TXD ID

MSG-ID1 MSG-ID2 . . .


BUS LIMIT


STINGER is a drop-in replacement solution for CAN and CAN FD networks to contain the effects of a hack – focusing on two kinds of attack:

2. Contain denial-of-service attacks to allow network communication to take place

STINGER – SECURE-ASSIST TRANSCEIVER

CAN

RXD MCU TRX

TXD



Flooding Prevention Host MCU cannot hijack / flood the bus to disrupt

communications.


Agenda WHO ARE WE


SPEED

SECURITY


27

Car Networks in Transformation LIN

Gb+ Ethernet 100Mbps Ethernet

FlexRay CAN-FD

Ethernet Switch

KEY

LIN CAN FR other ETH

Powertrain / Transmission Domain

Safety / Chassis Domain

Body Domain

Infotainment Domain

ADAS Domain

OBD Port

BMS

ECU

ECU

…

Steer

Susp

…

ESP

…

ECU

… ECU

ECU

ECU

… ECU

ECU

Body Controller

(BCU)

…

Door

Roof

Seat

Engine

Gearbox

ECU

DSRC (V2X)

Central Gateway

Sensor Fusion

NAD / TCU

Nav/IVI Radio

Vision Radar

Cameras

… Amp Front Display

Rear Display

Speakers

…

NAD / TCU

«new» domains allow innovative architecture Task: make it Auto, Sustainably

auto backbone requires evolutionary approach Task: move to 2M, add security


NXP role: enable Carmakers re-designing their Networks Support CAN FD, facilitate Gateway architectures, True Automotive Ethernet

CAN migration to CAN FD

New challenges on topologies, EMC,

speed, MCU availability

Central Gateways, Body Controllers

Need for compact, scalable solutions

High power Security threat

Ethernet enabling hyperconnectivity

Auto-native

solution Inter-operable

Scalable

• FULLY SCALABLE PORTFOLIO: Lowest (stand alone) to Highest (Full Ethernet AVB Infotainment systems)

• SMART TRANSCEIVERS: faster, higher EMC performances, intelligent security and filtering functions

• SYSTEM BASIS CHIPS: Developing integrated solutions for Gateways, BCMs and peripheral modules

• ETHERNET: Releasing solid native automotive portfolio

• FUTURE IVN: Co-defining new standards, future IVNs

• ALL THIS, IN PARTNERSHIP WITH KEY OEMS


Documents

MIGRATING TO CAN FD - Vector: Software + Services for … · · 2017-02-22RF Power Transistors #1. Automotive Radar #1. ... Switch . 100BASET1 PHY . Integration Level. Communication