July, 2009

AZ151 Industrial Network Protocols (Part 2) Industrial Control Alexandra Dopplinger Global Industrial Segment Lead – Factory Automation & Drives

TM Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. Agenda

►Previously discussed in “Industrial Network Protocols (Part 1)” • Factory Automation Market ƒ Target Applications

ƒ Freescale Alignment with Market Trends ƒ Industrial Network Protocols used in Factory Automation Applications – Market Overview – Freescale and Protocol Vendor Support • Protocol Description, Solutions and Enablement

ƒ Industrial Protocols

, CANopen, DeviceNet, RTU

►Protocol Description, Solutions and Enablement • Industrial Protocols ƒ PROFINET, EtherNet/IP, Modbus TCP, EtherCAT

• Industrial Wireless Protocols ƒ ZigBee®, WirelessHART™, ISA100.11a

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 2 World Market – Industrial Protocols

2005 2010 CAGR Industrial Nodes 13.5 M 24.8 M 13%

Market Share (2010) > 20% > 10% < 10% Network Protocols Ethernet PROFIBUS, Others DeviceNet, AS- Interface, Foundation Fieldbus, CC-Link

►Market share change from 2005 to 2010: • Ethernet (all versions) +8% • Modbus RTU (non-Ethernet version) -3%

• CAN -2%

• Others +/- 1% Source: IMS Research, November 2006

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 3 Most Significant Industrial Network Protocols

Field Bus (Discrete or I/O oriented) * Most popular fieldbus solution. 23.3M 1.6 Mu PROFINET nodes installed by nodes installed by 2007; 24% growth 2008; 40% growth (PTO 2009) (PTO 2008). Supported by Siemens. Supported by Siemens. CIP on CAN. Very CIP application layer on Ethernet. popular and still growing. Growing fast. Supported by Rockwell. Supported by Rockwell. Modbus RTU is a widely used fieldbus Modbus TCP/IP is a widely used solution, but losing share. Ethernet solution, but growing less Developed by Schneider. rapidly in many markets (Schneider) Very popular SAE-sponsored standard May dominate due to technology and but losing share in factory automation ease of use. Predict >1 Mu by 2011. CAN market Supported by Beckhoff.

►Standard Ethernet TCP/IP protocols most common of Ethernet-based nodes • 6.5 Mu Ethernet TCP/IP nodes installed by 2006; 24 Mu by 2011; CAGR 24.3% ►Many deterministic industrial Ethernet protocols use a form of IEEE® 1588 IEEE® 1588 • For clock synchronization through the Ethernet network

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 4 Real-time Determinism in Industrial Networks Target Applications Protocols

IRT • Motor Drives IRT • Deterministic • Synchronized Servos < 1 IRTus Jitter < 1Deterministic ms Cycle Time < 1 ms Cycle Time • Conveyor belts RT Deterministic RT • Picker arms 1Jitter to 100 matters ms Cycle for Sync Time • PLCs, I/O Control 1 to 100 ms Cycle Time

NRT • Sensors NRT Non-deterministicNon-deterministic • Valves Jitter> 100 doesn’tms Cycle matter Time • Data scanner > 100 ms Cycle Time • Inventory Number of Applications Management IEEE® 1588 VERY Jitter sensitive; Cycle Time does not matter

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 5 Industrial Ethernet Protocols

PROFINET, EtherNet/IP™, Modbus TCP, EtherCAT

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 6 Common Traits of Industrial Ethernet Protocols

►Customers love Ethernet Technology PROFINET EtherNet/IP™ Modbus EtherCAT TCP • Commercial technology • Globally understood Largest Siemens Rockwell Schneider Beckhoff • Common network Supplier Automation Electric architecture

Multi- Profibus ODVA Modbus ETG ►IT integration vendor International IDA • IP Functionality Consortium • Known Factory PROFINET CIP™ RTPS Shared • Low installation costs* Automation IO Frame

►High speed High PROFINET CIP Sync™ None Shared performanc IRT (IEEE 1588) Frame • Moves a lot of data e Motion (timestamp)

►Integrated wired/wireless Standard Yes Yes Yes Master Yes • Many wireless options IEEE 802.3 PHY MAC? IRT requires IEEE 1588 for Slaves ►Modular automation ASIC some apps need ASIC

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 7 Industrial Ethernet Support Options

PROFINET RT 10/100 Ethernet Managed xMII Modbus TCP MII 10/100/1G 10/100 Ethernet EtherNet/IP PHY switch for Ethernet PHY multiple Ethernet MAC with CIP Sync (EtherCAT Master) 10/100 Ethernet (integrated 3-port IEEE1588 timestamp PHY to support daisy chained network PROFINET RT topology)** Modbus TCP 10/100 Ethernet PCI/PCIe FPGA EtherNet/IP PHY Altera Cyclone CIP Sync Xylinx EtherCAT Master EtherCAT Slave 8/16 parallel SERCOS III (PROFINET RT) bus I/F or SPI (PROFINET IRT) uP Ertec200/400 (IRT +) PCI PROFINET RT/IRT

PROFINET RT 8/16 parallel Hilscher netX bus I/F EtherNet/IP EtherCAT Master EtherCAT Slave SERCOS III

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 8 Ethernet Hardware Timestamp Support

► Hardware timestamp protocols adopted in many applications • IEEE 1588 clock sync protocol widely used ƒ Initially for industrial automation and test ƒ Version 2 for telecom, networking, aerospace, and power distribution • IEEE 802.1AS audio video bridging emerging for multimedia applications ƒ Consumer, networking and automotive applications

►Many Freescale processors have MAC-layer hardware timestamp for nanosecond-level clock sync accuracy • Multiple clock options, flexible frame detection, trigger inputs and outputs • Some PowerQUICC and all QorIQ™ processors ƒ MPC8360, MPC8358 and future QUICC Engine-based devices ƒ MPC831x, MPC837x, MPC857x, MPC8536 and future eTSEC-based devices ƒ P2010, P2020 and all future QorIQ devices • National Semiconductor Precision PHYTER® can be used with any device that doesn’t already have MAC-layer hardware timestamp

► IXXAT IEEE 1588 protocol stack supports PowerQUICC and ColdFire platforms with or without hardware timestamp PHY • FREE evaluation software at www.ixxat.com

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 9 10/100/1000 Ethernet – PROFINET

►Ethernet compliant for component-based automation • Configure with standard office tools like SNMP • Or continue using legacy PROFIBUS tools • Browser-based monitoring • Remote configuration and maintenance • Advanced se curity and wireless technology

►Supports existing legacy fieldbus systems • No need to obsolete existing equipment www.us.profibus.com ►Continuous innovation based on new specifications • PROFIsafe and PROFIdrive

►Advantages ►Key Points • Very robust • PROFINET RT (Real-time) runs on any • Integrates several fieldbus types ƒ PROFIBUS, DeviceNet™, standar d Ethernet hardware Interbus, Modbus, AS-Interface, ►Disadv antages Foundation Fieldbus, IEC61158-2 • Typically runs on high-performance 32-bit processor • Supports real-time IO, peer-to- • Uses large memory peer communication, motion • Complex to commission control, vertical integration, • PROFINET IRT needs custom ASIC safety, security

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 10 PROFINET Supports Different Real-Time Requirements

Standard Factory Motion Control Communication Automation Application NRT RT IRT

100ms 10ms <1ms TCP/IP Real-Time: IRT

Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 11 PROFINET Non-Real-Time (NRT) and Real-Time (RT)

1. Open TCP/IP channel •Device parameterization •Reading of diagnostics data •Loading of interconnections •Negotiation of the communication channel for user data

2. Real-time channel (RT) •High-performance transmission •Cyclic data Event-controlled signals

Criteria NRT RT Cycle time NRT 1 msec 250 µsec Jitter <1 µsec <1 µsec Number of nodes 70 150 35 Simultaneously 9 MB/sec 6 MB/sec 6 MB/sec transferable TCP/IP data

Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 12 PROFINET Isochronous Real-time (IRT)

►Isochronous means functionality delivered by each occurs precisely at the same time for each cycle • For applications like motion control • 150 axes of motion possible

ƒ More than any other

Ethernet solution

►Time slicing makes highly efficient use of standard Ethernet telegram • 250 ns response

►Customer ASIC required

Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 13 Industrial Control, Networking and HMI – PROFINET Support

High-End Networking P2020 QorIQ* MPC8640 1000 DMIPS and up P2010 QorIQ 4W - 10 W > $20 P1020 QorIQ* MPC8536 MPC8544 P1011 QorIQ High-End PLC/PAC MPC837x 500 – 1500 DMIPS MPC8360 Pin Compatible < 2.5 W – 5 W > $15

P10xx QorIQ PLC/PAC and HMI MPC5121e/23 300 – 800 DMIPS i.MX51x < 1.5 W MPC8314/15 < $10 - 20 MPC5xxx MPC8313 i.MX35x

i.MX27L I/O Control i.MX25x 200 – 400 DMIPS MCF5445x Power® < 1 W MCF532x ARM® < $10 ColdFire® Process Control MCF5xxx LCD Control ~100 DMIPS MCF52235 MCF5225x < 0.5 W < $5 MPC551x* 2 0 0 8 2 0 0 9

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 14 10/100/1000 Ethernet – EtherNet/IP™

►Defacto standard based on Rockwell CIP™ • Open and certified by Open DeviceNet™ Vendor Association (ODVA) • More than 280 registered ODVA members • Client/server scanner/adapter model (like DeviceNet) ►Based on Ethernet IEEE 802.3 datalink/physical layers • Encapsulation layer connects EtherNet/IP to www.odva.com standard TCP/IP and UDP/IP • Messages encapsulated with unlimited data length ►Advantages ►Key Points • Supports unlimited number of nodes • Application layer on Ethernet • Standard set of services and messaging • CIP object-based representation • Can be used in parallel with other Internet • Two message types:

protocols, e.g. HTTP, FTP, SMTP, etc. ƒ I/O Messaging is simple I/O data exchange ►Disadvantages – Both sides agree on message contents • Needs RTOS and TCP/IP protocol stack ƒ Explicit Messaging is transfer of • 32-bit processors (50 MHz) recommended specific data • Needs 32 to 256 KB RAM (# connections) – Packet contains message ID • Needs 64 to 128 KB ROM (CIP Profile)

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 15 Common Industrial Protocol (CIP) Overview

Encoders User Device I/O Encoders Valves Drives SEMI Others Profiles

Application CIP Application Layer Application Object Library

Presentation CIP Data Management Services Explicit Messages, I/O Messages

Session CIP Message Routing, Connection Management

Encapsulation Transport DeviceNet ControlNet TCP UDP Transport Transport Network IP Future: CAN ControlNet Ethernet ??? Data Link CSMA/NBA CTDMA CSMA/CD DeviceNet ControlNet Ethernet Physical Link Physical Layer Physical Layer Physical Layer

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 16 CIP Sync, EtherNet/IP

►Frame priorities

CIP Sync Frame with priority

After passing the switch Ethernet frame without priority Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 17 EtherNet/IP Object Model Ethernet Network • EtherNet/IP object model Connection Object very similar to DeviceNet ASCII Data Object • DeviceNet Object replaced DeviceNet Object Assembly by Ethernet and TCP/IP Object Modbus Master Object Object Identity Modbus Slave Object Object Semi Pneu AC Position Other Discrete IO Application Devices Valve Drives ControllersProfilers Analog IO Object Layer Object Application Object Library CIP

Application CIP Application Layer Explicit, I/O, Routing Layer

Encapsulation Transport DEVICENET CONTROLNET UPD TCP Future ? Data Link IP

Physical CAN CONTROLNET ETHERNET Future ? Layer

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 18 Industrial Control, Networking and HMI – EtherNet/IP Support

High-End Networking P2020 QorIQ* MPC8640 1000 DMIPS and up P2010 QorIQ 4W - 10 W > $20 P1020 QorIQ* MPC8536 MPC8544 P1011 QorIQ High-End PLC/PAC MPC837x 500 – 1500 DMIPS MPC8360 Pin Compatible < 2.5 W – 5 W > $15

P10xx QorIQ PLC/PAC and HMI MPC5121e/23 300 – 800 DMIPS i.MX51x < 1.5 W MPC8314/15 < $10 - 20 MPC5xxx MPC8313 i.MX35x

i.MX27L I/O Control i.MX25x 200 – 400 DMIPS MCF5445x Power® < 1 W MCF532x ARM® < $10 ColdFire® Process Control MCF5xxx LCD Control ~100 DMIPS MCF52235 MCF5225x < 0.5 W < $5 MPC551x* 2 0 0 8 2 0 0 9

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 19 10/100/1000 Ethernet – Modbus TCP

►Open defacto standard developed by Modicon in 1979 • Most widely used network protocol in industrial manufacturing ƒ Over seven million nodes ƒ Common denominator between disparate manufacturers ►Master-slave/client-server communication • Transfers discrete/analog I/O and register www.modbus.com data

►Advantages ►Key Points • Very simple to implement • Coil register representation • Off-the-shelf tools • Supported by many HMIs and PLCs • Small command set is easy

►Disadv antages to implement

• Higher cost than other fieldbus options • Both client/server available • Not deterministic • Supported by almost • No bus power everyone • Traditional master/slave model

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 20 Modbus TCP Structure

►Operates on TCP/IP USER APPLICATION

► Communication Modbus Client Modbus Backend Only non real-time version is Application Layer Interface Interface available Modbus Client Modbus Server ►Does not offer determinism

TCP Management

Stack Connection Parmeterization Management Access CS and Flow Control Resource Management

TCP/IP Stack

Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 21 Industrial Control, Networking and HMI – Modbus TCP/IP Support

High-End Networking P2020 QorIQ* MPC8640 1000 DMIPS and up P2010 QorIQ 4W - 10 W > $20 P1020 QorIQ* MPC8536 MPC8544 P1011 QorIQ High-End PLC/PAC MPC837x 500 – 1500 DMIPS MPC8360 Pin Compatible < 2.5 W – 5 W > $15

P10xx QorIQ PLC/PAC and HMI MPC5121e/23 300 – 800 DMIPS i.MX51x < 1.5 W MPC8314/15 < $10 - 20 MPC5xxx MPC8313 i.MX35x

i.MX27L I/O Control i.MX25x 200 – 400 DMIPS MCF5445x Power® < 1 W MCF532x ARM® < $10 ColdFire® Process Control MCF5xxx LCD Control ~100 DMIPS MCF52235 MCF5225x < 0.5 W < $5 MPC551x* 2 0 0 8 2 0 0 9

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 22 10/100 Ethernet Ring – EtherCAT

► ETHERnet for Control Automation Technology • Uses standard Ethernet IEEE 802.3 frames with real-time features

► Slave devices network with a master in ring topology • Data from each device extracted and packed into Ethernet data packet that exists on the entire ring • Devices pass messages through master before sending to anot her device • Separate “e-bus” eliminates 1 µs delays in each slave

► Uses TwinCAT, CANopen and SERCOS application www..org layers

►Advantages ►Key Points • Very simple to implement and use • Two different PHYs may be used • Full duplex data transmission ƒ 100BaseT has good robustness/EMC • Data removal/insertion in ƒ LVDS/E-Bus has low robustness/EMC message ►Disadvantages • 64 KB data in every slave • Slaves must use ASIC or FPGA ƒ Standard Ethernet interface latency too high • Multiple commands per packet

• No gigabit Ethernet support • Slaves look like huge pool of • Technology completely defined and controlled by Beckhoff memory

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 23 EtherCAT Structure

Master Slaves

Tx

Rx

Ethernet

Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 24 Functional Principle is Ethernet On-The-Fly

Slave Device Slave Device

EtherCAT Slave EtherCAT Slave Controller Controller

►Process data extracted and inserted on-the-fly ►Process data size per slave almost unlimited • 1 bit…60 Kbyte, if needed using several frames ►Compilation of process data can change in each cycle

• e.g. ultra short cycle time for axis, and longer cycles for I/O update are possible ►In addition asynchronous, event-triggered communication

Slide provided by IXXAT

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 25 EtherCAT Format

►EtherCAT uses Standard Ethernet Frames (IEEE 802.3) ►Master is Ethernet MAC without co-processor or special hardware • Fully transparent for other Ethernet protocols ►Internet technologies (TCP/IP, FTP, Web server, etc.) • Does not restrict real-time capabilities, even with 100 µs cycle time • No large time gaps for rare traffic needed ►Full tool access to devices at real-time operation – with and without TCP/IP

48-bit 48-bit 16-bit 16-bit 32-bit Destination Source EtherType Header … CRC Embedded in Standard Ethernet Frame, EtherType 0x88A4 1..n EtherCAT Datagrams

11-bit 1-bit 4-bit Length Res. Type 0 11 12 15

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 26 Industrial Control, Networking and HMI – EtherCAT Master Support

High-End Networking 1000 DMIPS and up 4W - 10 W ►EtherCAT master can run on many > $20 processors with Ethernet MAC

High-End PLC/PAC ►EtherCAT slave can run on 500 – 1500 DMIPS MPC8360 < 2.5 W – 5 W processors with programmable > $15 QUICC Engine controller

► PowerQUICC MPC8360, PLC/PAC and HMI MPC8323 processors 300 – 800 DMIPS ► Need to develop EtherCAT < 1.5 W microcode < $10 - 20 MPC8323

I/O Control 200 – 400 DMIPS Power® < 1 W ARM® < $10 ColdFire® Process Control LCD Control ~100 DMIPS < 0.5 W < $5 2 0 0 8 2 0 0 9

Freescale Confidential Proprietary. Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All TM other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2007. 27 Industrial Ethernet Support Options PowerQUICC PowerQUICC PowerQUICC ColdFire/PPC mobileGT TSEC (MPC8347) eTSEC QUICC Engine +IEEE1588 FEC MPC52xx MPC5121 Existing ColdFire MPC8313 MPC8360/58 MCF5441x with FEC (PROFINET RT) (PROFINET IRT) (IRT +) Phoenix Contact PROFINET RT Modbus TCP Ethernet I/P FPGA - Altera CIPSync Cyclone EtherCAT Master Xilinx EtherCAT Slave SERCOS III

Siemens PROFINET RT/IRT Ertec200/400

PROFINET RT Ethernet I/P Hilscher EtherCAT Master netX EtherCAT Slave SERCOS III

Ethernet PHY with 1588 h/w PROFINET RT Modbus TCP Ethernet I/P CIPSyna Ethernet PHY EtherCAT MAster

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 28 Industrial Wireless Protocols

ZigBee®, WirelessHART™ and ISA100.11a

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 29 The IEEE 802.xx Wireless Space ►IEEE® 802.15.4 breaks the “bigger and faster” mold to address the unique needs of monitoring and control

► Machine-to- WWAN IEEE 802.22 machine ► Low cost IEEE 802.20 ► Low power WMAN ► Low duty cycle WiMAX

► Small packets 802.16 ► Fast power-on

latency Range WLAN WiFi

► Self-forming, 802.11 self-healing mesh networking 802.15.4 Bluetooth Millimeter-wave WPAN 802.15.1 802.15.3c

0.01 0.1 1 10 100 2000 Data Rate (Mbps)

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 30 IEEE 802.15.4 Applications

WirelessHART™ Industrial Control

Building Control Proprietary Smart ZigBee® Networks Energy Cost (802.15.4 and SMAC) Home Control Medical Security Monitoring ZigBee® RF4CE Remote Control Gaming and

Toys

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 31 802.15.4 Market Summary

► Market maturing • Approximately 12 million chipsets in 2008, 25 million cumulative ƒ 292 million chipsets in 2012 • Freescale #1 for 2008 with 61% market share (In-Stat 2008)

► Technology Advantages • Optimized for low duty cycle applications ƒ Longer battery life (months to years) • Interference avoidance

► Becoming the foundation for many protocol stacks • ZigBee® technology, WirelessHART™ technology, ISA 100.11a protocol stack, RF4CE consortium

► Majority of market wants global 2.4GHz solution • Over 80% of market expected to be 2.4 GHz ƒ 98%+ of 2007 volume based on 2.4 GHz ƒ 900 MHz better propagation being offset by PA/LNA for 2.4 GHZ

ƒ Higher volumes will drive lower cost for 2.4GHz solution • Sub 1GHz may get traction from release of 802.15.4 2006 and future release of 802.15.4c and 802.15.4d

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 32 Comparing Industrial Wireless Technologies

Technology Pros Cons ZigBee® Protocol ►General market appeal ►Not cost effective for high ►Lots of backing in Smart Energy volume consumer space ►Complex ►Products in market today ►Not “Industrial Grade” SP100.11a ►Deterministic ►More costly components ►Immune to multipath required ►Sleeping routers ►Object structure in application ►CSMA and TDMA tunable layer adds structure which ►Multiple fieldbus support developers might view as too ►IPv6 support restrictive WirelessHART™ ►Deterministic ►More costly components Specification ►Immune to multipath required ►Sleeping routers ►TDMA mode only ►Existing wired devices in market

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 33 Industrial Wireless – ZigBee®

► ZigBee Alliance >292 members, www..org • 49% Americas, 28% EMEA, 23% Asia

► Used by applications to monitor and control energy • 70% ZigBee adopters are metering and utility companies

► “ZigBee 2007” is latest version released Jan/09 • Targets industrial and commercial environments • Freescale offers both ZigBee and ZigBee Pro c ompliant platforms

►Advantages ►Key Points • Robust IEEE 802.15.4 PHY/MAC • Standard based on 802.15.4 ƒ Reliable data despite noise, interference • • Reliable self-healing mesh networks Defines network, security and

ƒ Scalable to thousands of devices application software layers

ƒ Secure symmetric key with AES-128 • Supports multiple network • Low cost stacks ƒ Multi-year life on AA batteries

• Interoperable platform conformance • Will incorporate IETF certification 6LowPAN for IPv6

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 34 ZigBee® Solutions

►MC13224 is the ideal platform for ZigBee

• Flexible memory configuration ƒ Enough on-chip memory to run entire stack and application profile

• RAM-based ƒ Allows firmware upgrade without external storage such as EEPROM ƒ Can update Flash directly

• Lower RX and TX power consumption ƒ Ideal for battery applications

• Highly integrated package reduces design time and cost. ƒ Reduces design complexity and through reduced integrated RF front end ƒ Reduces total cost through lower component count and smaller board space

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 35 MC1322x Platform in a Package (PiP)

24 MHz (Typical) 32.768 KHz (Optional)

Timer RF Clock & Module ► Integrated 2.4 GHz transceiver with 32-bit Oscillator/PLL Reset & Module SCI/UART CPU Clock Generation (CRM) Module • 802.15.4 Compliant transceiver SCI/UART Module • ARM7TDMI up to 26Mhz Analog Digital CPU Complex TX Modem ARM7 SSI/I2S 802.15.4 TDMI-S Module ► Lowest power TX/RX TX Balun MAC 32-bit Switch Modem 2 • Significant power reduction – up to 45% Accelerator CPU I C RX (MACA) Module • 22 mA Rx & 29 mA Tx with radio and MCU Analog Modem Bus RX Interface & Keyboard Interface ► Plenty of memory for ZigBee Applications IEEE® 802.15.4 Transceiver Memory Arbitrator SPI • ROM, Flash, RAM Advanced ARM Interface Security 64 GPIO 64 GPIO to to Up Up Interrupt ► Improved RF performance Module GPIO (ASM) Controller Control • -96 dBm sensitivity (DCD mode) MC1322X Block Diagram (AITC) • -100 dBm (NCD mode, +3-4 mA current) SPI 12-bit FLASH 96 KB ADC • +4 dBm power output Module RAM Analog (SPIF) 12-bit ► Hardware accelerator reduces MCU overhead Power 80 KB Buses Data & Address ADC Management ROM & 128 KB • MAC accelerator Battery JTAG & Buck Voltage Serial Monitor Nexus • AES 128-bit hardware encryption/decryption Converter Regulation FLASH ► Best in class peripherals • UART, SPI, KBI, 8 channel 12-bit ADC, 4x16-bit timer, I2C, SSI (I2S), 64 GPIO ► Unique platform in a package • RF matching in package • Requires power, crystal and 50 Ohm antenna • 9.5 mm x 9.5 mm 99-pin LGA

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 36 Industrial Wireless – WirelessHART

►WirelessHART standard completed 2007 • Targets industrial process and control • Extends HART protocol to secure IEEE 802.15.4 wireless technology (2.4 GHz) • Increases robustness to interference and multipath noise

►Transparently integrates wired/wireless devices • Maintains HART user experience ƒ Works with existing HART tools, applications and installed devices • Focuses on reliability and co-existence

►Advantages ►Key Points • Robust and secure • Connects existing “Wired” ƒ Adds channel hopping HART device to wirelessly ƒ Higher default transmit power +10dBm transmit diagnostic and ƒ Mesh calibration information – Flexible network organization, redundant • Not ideal for low cost paths, self organizing and self healing applications ƒ Dynamic bandwidth allocation

ƒ AES-128 ciphers and keys

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 37 Industrial Wireless – ISA100.11a

►ISA100.11a working group to release family of open wireless standards 2H/09 • Targets process automation now • Future factory/ and discrete manufacturing

►Optimized for sensors, actuators, automation devices, wireless workers, first responders and wireless infrastructure networks • Unified application interface maintains interoperability with wired plant infrastructure networks

►Advantages ►Key Points • Reliable low-power communication • Defines OSI layers (PHY, • Automatically adaptive mesh network DLL, etc.), security and

ƒ Mesh, star-mesh and star topologies management including

ƒ Self-organizing intelligence network and device config • Robust security • Low complexity, robust to ƒ AES128 block cipher for messages interference, low power ƒ Exchange of secret keys and unique consumption and cost device identifiers for authentication

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 38 ISA100.11a Universality Promise

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 39 Comparing Industrial Wireless Features Feature ZigBee Protocol SP100 WirelessHART Consumer and Target Market Industrial Industrial Commercial Smart Energy, Process Control, Target Applications Industrial Control Building Automation Factory Automation 802.15.4 2003 2006 2006 Channel Hopping/Agility Agility - 2007 Spec Hopping Hopping Topology Mesh, Tree Mesh, Tree Mesh Device Type FFD, RFD FFD, RFD FFD Battery Life Best Better* Good Not yet, Sleeping Routers Addressed in Future Yes Yes Spec Latency 4ms 10ms 10ms Channel Blacklist / Preferred channel Blacklist Blacklist Preferred Channels Encryption AES128 AES128 AES128 Cost Low Medium High Message Priority (QOS) No Yes Yes Certification Program Yes Yes Yes

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 40 WirelessHART and ISA100.11a Solutions

►MC1321x ideal for SMAC, IEEE 802.15.4, SynkroRF and RF4CE • Integrates MC13202 2.4 GHz transceiver with 8-bit MC9S08GT MCU in a single System in Package (SiP)

• Fully compliant 802.15.4 platform • Low cost solution for applications that do not require full ZigBee mesh networks

►Memory Scalability • Three flash memory configurations available to optimize solution cost based on application requirements

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 41 MC1321x Overview ► MCU Features • 40 MHz HCS08 low-voltage, low-power core • Flash and memory dependent on part Analog HCS08 Background • Receiver CPU Multiple 16-bit timers Debug • Up to 38 GPIO RFIC Module • 8-bit port keyboard interrupt (KBI) Timers • 8-channel 10-bit analog-to-digital converter (ADC) Tx/Rx Frequency FLASH 8-ch • SCI interface supporting up to 115.2 kBaud Switch Generator Memory 10-bit • I2C with 100 kbps maximum bus loading Digital ADC • Low-voltage detection Control

Digital Transceiver Digital Logic • In-circuit debug and Flash programming Analog RAM 2 x SCI • Common on-chip processor (COP) watchdog timer Transmitter

39 GPIO to Up ► RF Features Low IIC • Voltage 802.15.4 compliant 2.4 GHz RF transceiver Buffer RAM ƒ 250 kbps O-PQSK modulation Interrupt ƒ 16 selectable channels 16-bit • Auto-trim feature for crystal accuracy IRQ RAM Keyboard Timers Arbiter Arbiter ƒ Eliminate need for external variable capacitors Interrupt ƒ Allows for automated production frequency calibration COP • Programmable from -27 dBm to +3 dBm Power Voltage Internal Clock Gen • RX sensitivity of -92 dBm Management Regulators • Integrated Transmit/Receive switch ƒ Supports single-ended or full differential operation Features MC13211 MC13212 MC13213 ► Features Protocol Stack SMAC SMAC SMAC • -40 to +85 degrees C operating temperature IEEE 802.15.4 IEEE 802.15.4 • 2V to 3.4V SynkroRF • Low external component count ZigBee ƒ Requires a single 16 MHz crystal ƒ Programmable frequency clock output for MCU Memory 16 KB 32 KB Flash 60 KB Flash • 9x9x1 mm 71-pin LGA package • RoHS compliant Flash 1KB 2 KB RAM 4KB RAM ► Availability RAM

• Shipping in volume since September 2006 2009 1K SRP $3.10 $3.38 $3.71

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 42 Summary

► Freescale aligns with Factory Automation market requirements

► Many devices support both legacy fieldbus and industrial Ethernet protocols • PowerQUICC®, QorIQ™, mobileGT®, i.MX and ColdFire® processors • Solutions, enablement and 3rd party protocol stacks available ƒ PROFIBUS, CANopen, DeviceNet™, Modbus RTU ƒ PROFINET, EtherNet/IP™, Modbus TCP, EtherCAT

ƒ ZigBee®, WirelessHART™, ISA100.11a

► Devices are ruggedized with long life and reliability • Industrial products ship 10+years, with high quality and strong customer support • Processor performance from 80 to >3000 DMIPS, for fanless operation at -40C to 85C ambient

► Energy Efficiency • MPU <1 W max @ 400 DMIPS with on-chip power management • MPU <4 W max @ >1000 DMIPS with on-chip power management

► Cost-effective on-chip safety and security • Protect against IP cloning, network data hacking and soft errors

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 43 Q&A

►Thank you for attending this presentation. We’ll now take a few moments for the audience’s questions and then we’ll begin the question and answer session.

Freescale Confidential and Proprietary Information - Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2008. TM 44 Related Session Resources Sessions Session ID Title AZ120 Industrial Network Protocols (Part 1): Industrial Control AZ131 Industrial Control and Networking Roadmap AE107 IEEE® 802.15.4 Protocol Options Overview

Freescale™ and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or TM service names are the property of their respective owners. © Freescale Semiconductor, Inc. 2009. 45 TM