Highly integrated and performance optimized 32-bit microcontrollers for automotive and industrial applications
www.infineon.com/aurix Contents
TriCore™ family concept 3
Evolution of TriCore™ generations 4
TriCore™ based product roadmap 5
PRO-SIL™ safety concept 6
AURIX™ family system architecture 7
Embedded software (AUTOSAR etc.) 15
Development support 17
AURIX™ for powertrain applications 20
AURIX™ for safety applications 30
AURIX™ for connectivity applications 40
AURIX™ for transportation applications 44
AURIX™ for industrial applications 46
Tool partners 51
2 Family highlights ››Compatibility and scalability ››Lowest system cost ››Industry benchmark system performance ››Easy to use ››Broad portfolio ››Certified to automotive standards
Applications ››Dry double clutch transmission – ››Gasoline direct injection hydraulic control ››Gasoline multi-port Injection ››Dry double clutch transmission – ››Diesel direct injection electrical control
Powertrain ››Automatic transmission – ››Integrated (H)EV control hydraulic control ››(H)EV battery management system
Applications ››Multi-purpose camera configuration ››Chassis domain control ››Short-range radar (24 GHz) system ››Electric Power Steering (EPS) ››Long-range radar (76/77 GHz) system ››Active suspension control system Safety ››Advanced airbag system ››Braking ECU
Applications ››V2x communication ››Body domain controller ››eHorizon ››Connected gateway ››Advanced body applications Telematics including software update
Connectivity ›› over the air
Applications ››Commercial and Agricultural Vehicle (CAV) ››Fun vehicle ››Transportation Transportation ››Trucks
Applications ››Mobile controller ››Inverter ››Wind turbine inverter ››Solar panel Industrial & Multimarket
3 Evolution of TriCore™ generations
In 1999, Infineon launched the first generation of the AUDO The TriCore™ success story continues with the introduc- (AUtomotive unifieD processOr) family. Based on a unified tion of the AURIX™ multicore family. AURIX™ combines RISC/MCU/DSP processor core, this 32-bit TriCore™ micro‑ easy‑to‑use functional safety support, a strong increase controller was a computational power horse. And the in performance and a future-proven security solution in a company has evolved and optimized the concept ever since highly scalable product family. – culminating in what is now the fifth TriCore™ generation.
AUDO NG AUDO (Next generation) AUDO future AUDO MAX AURIX™
With its high real-time performance, embedded safety and The new AURIX™ family members are manufactured in a security features, the TriCore™ family is the ideal platform 65nm embedded Flash technology designed for ultimate for a wide range of automotive applications such as the reliability in harsh automotive environments. Furthermore, control of combustion engines, electrical and hybrid vehi- the dual frontend concept ensures continuous supply. cles, transmission control units, chassis domains, braking systems, electric power steering systems, airbags and As was the case with previous generations, safety software advanced driver assistance systems. TriCore™-based prod- is also available to help manufacturers meet SIL/ ASIL safe- ucts also deliver the versatility required for the industrial ty standards, as well as AUTOSAR libraries which Infineon sector, excelling in optimized motor control applications has been developing since 2005. and signal processing. Infineon’s broad product portfolio allows engineers to choose from a wide range of memories, peripheral sets, frequencies, temperatures and packaging options. And all this with a high degree of compatibility across generations.
4 TriCore™ based product roadmap
Production Development
Segment AUDO family AURIX™ family AURIX™ family
130 nm 90 nm 65 nm 65 nm
TC1798 TC29x 300 MHz, 4 MB 300 MHz, 8 M
TC290 TC1797 Bare die 180 MHz, 4 MB High end TC27x 200 MHz, 4 M TC1793 270 MHz, 4 MB
TC270 TC1791 200 MHz, 4 M 240 MHz, 4 MB Bare die
TC1746 180 MHz, 2.5 M Bare die TC1768 133 MHz, 3 M Bare die TC26x 200 MHz, 2.5 M Mid range TC1784 180 MHz, 2.5 MB TC260 200 MHz, 2.5 M TC1782 Bare die 180 MHz, 2.5 MB
TC1767 80/133 MHz, 2 MB TC23x 200 MHz, 2 M
TC1728 133 MHz, 1.5 MB
TC1724 80 MHz, 1.5 MB
Low end TC22x 133 MHz, 1 M
TC1736 TC21x 80 MHz, 1 MB 100 MHz, 0.5 M
Companion CIC61508 ICs Safety IC
Production Development Concept / on request
5 PRO-SIL™
Infineon’s PRO-SIL™ program, designed to protect
The functional complexity and levels of integration of PRO-SIL™ highlights real-time safety-critical applications continue to increase ››Broad hardware portfolio from sensors to microcon- exponentially. In addition, the product life cycle of these trollers, along with analog and power management ICs applications has to meet stringent safety standards. Norms providing SIL-supporting features. such as IEC 61508 and ISO 26262 mandate more robust ››For ISO 26262 PRO-SIL™ products, safety concepts are and comprehensive product development processes and in place to enable the required safety measures, testing, functional safety concepts in automotive and industrial monitoring and diagnostics capabilities for your safety applications. architecture. ››Comprehensive safety software packages for seamless Infineon’s PRO-SIL™ safety program is designed to ease integration are in place, such as the SafeTlib software for and speed up your automotive and industrial design to Infineon’s AURIX™ microcontroller family comply with such standards. Across the full certification ››Full range of support services – from consulting and spectrum from Safety Integrity Levels (SIL) 1 to 4 and design advice, including training, documentation and Automotive Safety Integrity Levels (ASIL) A to D, our end- technical support – can be provided. to-end PRO-SIL™ approach will help you select the right ››Safety-focused organization and project management hardware, software and functional safety concepts to meet based on Infineon’s zero defect program, safety culture your design and compliance needs. and quality management system are in place.
Infineon’s PRO-SIL™ logo guides you to our products (HW, SW, safety documentation) with SIL-supporting fea- tures. These products will simplify the implementation of customers’ system design and improve time-to-market in achieving the desired functional safety level compliance.
Scalability Compliant to Enables system design in line with IEC 61508, ISO 26262, ISO 25119 dierent IEC 61508 and ISO 26262 ASIL CMM level 3
High diagnostic coverage Application independence Satisfy requirement for startup From chassis through body and runtime testing to powertrain
AUTOSAR supported Free evaluation version Standard AUTOSAR can be used From sales contact
www.infineon.com/prosil
6 AURIX™ family system architecture
AURIX™ is Infineon’s brand new family of microcontrollers Customers wanting to reduce their time-to-market can serving exactly the needs of the automotive industry in now cut down their MCU safety development by 30%. terms of performance and safety. Its innovative multicore By the same token, a performance surplus of 50% up to architecture, based on up to three independent 32-bit 100% allows for more functionality and offers a sufficient TriCore™ CPUs, has been designed to meet the highest resource buffer for future requirements, keeping the pow- safety standards while significantly increasing performance er consumption on the single-core microcontroller level. at the same time. While protecting IP, and preventing theft and fraud, AURIX™ provides an already built-in hardware security module. Using the AURIX™ platform, automotive developers will be able to control powertrain and safety applications with With its special feature set, AURIX™ is the perfect match for one single MCU platform. Developments using AURIX™ powertrain applications (including hybrid and electrical will require less effort to achieve the ASIL-D standard than vehicles) as well as safety applications (such as steering, with a classical lockstep architecture. braking, airbag and advanced driver assistance systems).
PMU FPU LMU
DMI PMI Data flash TriCore™ overlay Progr. Progr. BROM 1.6P flash flash RAM key flash
SRI cross bar
Diverse Diverse Lockstep core Lockstep core
Bridge SDMA OCDS FPU FPU DMI DMI PMI PMI standby overlay TriCore™ TriCore™ overlay 1.6P 1.6E
System peripheral bus Ports
HSM AY L M U6x
GTM SS SCU ST BCU PLL & CC GPT12x
PLL ER DS-ADCx
System peripheral bus System peripheral ADCx
EVR E C 2 I FC IO MH PSI5 SENT MSCx 5 V or 3.3 V QSPIx FlexRay ASCLINx Ethernet
MultiCAN+ single supply
7 AURIX™ family package scalability
LQFP-144 TQFP-80 TQFP-100 LQFP-176 LFBGA-292 BGA-416 LFBGA-516 TQFP-144
9x series up to 8 MB TC297 TC298 TC299 max. SRAM 2.75 MB triple-core
7x series up to 4 MB TC275 TC277 max. SRAM 472 KB triple-core
6x series up to 2.5 MB TC264 TC265 TC267 max. SRAM 752 KB dual-core 3x series up to 2 MB max. SRAM 708 KB TC233 TC234 TC237 Lockstep-core
2x series up to 1 MB max. SRAM 96 KB TC222 TC223 TC224 Lockstep-core
1x series up to 512 KB max. SRAM 56 KB TC212 TC213 TC214 Lockstep-core
Upgrade/downgrade with pin-compatible packages
››Advanced package technologies deliver the best price/performance ratio ››Customers can choose between different devices in the same pin-compatible package
TriCore™ upgrade paths
LFBGA-516 LFBGA-292 BGA scalability
25 x 25 mm 17 x 17 mm
››LFBGA-292 and LFBGA-516 are ball compatible so that customers can build one PCB for both packages
8 Package information1)
LFBGA-516 BGA-416
25 27 1 0.8 27 25
0.8 1
LFBGA-292 LQFP-176
26 17 17 26 0.8 0.5
0.8 0.5
LQFP-144 TQFP-144
22 18 22 18 0.4 0.5 0.4 0.5
TQFP-100 TQFP-80
16 14 14 16 0.4 0.4 0.4 0.4
1) For further information on Infineon packages, please visit our internet site at www.infineon.com/packages
9 Infineon® diverse lockstep concept
››Lockstep architecture designed to control and mitigate ››Careful design of lockstep comparator common cause factors ››Main core and diverse lockstep core run the same software ––Physical isolation in parallel to detect computational errors ––Instruction-level execution diversity: 2-cycle delay ››Like normal locksteps, both cores are physically separated ––Circuit-level design & timing diversity and have a time delay between their execution ››Layout-level diversity ››Diverse lockstep core has been additionally transformed to ››Diversity controlled and verified by state‑of‑the‑art provide architectural hardware diversity and further reduce design methods common cause failures ››Special design of clock & reset networks
BUS
BUS Main Core Delay Delay Compare Lockstep Delay Delay core
Error Lockstep Lockstep CPU
10 Multi-AUTOSAR OS support on one microcontroller
››AURIX™ provides a memory protection system for each ››The hypervisor can arbitrate/grant/deny access and core plus an additional distributed hardware-based therefore provide paravirtualization of mixed-criticality resource management system tasks in an unified sub-system architecture with a mini- ››Each peripheral and shared SRAM has a resource manage- mal CPU overhead ment unit that works as a local access protection mecha- ››AURIX™ therefore provides the ability to run mixed-crit- nism to allow or deny access icality software requiring real-time access while still ››When combined with the memory protection system, this enforcing encapsulation and freedom of interference hardware can be used to prevent selected direct access between cores, even when the cores are not running time from certain tasks or cores to peripherals or regions of and memory-protected operating systems SRAMs and instead redirect the attempted access to a hypervisor function
Safety APP APP agent ......
Safety monitor AUTOSAR
Hypervisor Supervisor/user
AURIX™
AURIX™ protection system overview
››Hardware support for freedom of interference ––Between SW components ––Between HW parts ––Between HW parts & SW components ››Timing protection
APP APP APP APP APP APP
AUTOSAR AUTOSAR AUTOSAR core 0 core 1 core 2
Hypervisor
Hardware
11 AURIX™ family communication innovation
AURIX™ MultiCAN Up to 6 CAN nodes with FD support available AURIX™ ›› ISO 11898-6 transceiver ››CAN standard V2.0 B active support ››ISO11898-1 FDIS 2014 CAN-FD ››Specific AURIX™ variants support ISO11898-1 DIS 2015 ››Resonator ready with asynchronous operation and choice of clock source ››Frequency scaling without baud rate change ››Energy saving: pretended networking and partial networking (ISO11898-6 transceiver support) support (also in CAN FD mode) ››Safety support: total amount of bus errors countable ››Message objects can be freely assigned among the nodes ››Configurable FIFO length, automatic gateway mode support ››Acceptance mask filtering for each message object
Ethernet
Highlights ››MAC integrated in µC ››IEEE 802.3-2002 for Ethernet with support of MCU core IP, TCP/IP, UDP ... ››Real-time stamping support (IEEE 1588-2008) Internal bus for clock synchronization ››Standard MII and RMII interfaces to PHY Automotive Ethernet module ››Fast Ethernet w/ 100 Mbit (1588 MAC) ››AUTOSAR V4 features supported IEEE 802.3 ››Automatic CRC checksum and padding support “Standard” ETH module
››AVB support 1588 real-time extension
MII / RMII interface
ETH PHY (transceiver) or multiport switch
12 AURIX™ family offers a complete roadmap for automotive security
Typical use cases TQFP-100 TQFP-144 LQFP-176 LFBGA-292 LFBGA-516 Bare Die ››Secure on-board communication ››Tuning protection TC297T TC299T TC290T 9x series 270 MHz 270 MHz 270 MHz up to 8 MB Immobilizer HSM HSM HSM ›› ››Secure SW update TC275T TC277T TC270T 7x series 200 MHz 200 MHz 200 MHz up to 4 MB HSM HSM HSM
TC233L TC234L TC237L 3x series 200 MHz 200 MHz 200 MHz up to 2 MB HSM HSM HSM
High-end engine & transmission management Mid-range engine & transmission management ADAS & sensor fusion domain control (H)EV System High-end brake and EPS domain control (H)EV system
EPS airbag brake systems ADAS
AURIX™ hardware security module – anchor of trust thanks to separated logical protection domain
AURIX™ Hardware Security Module (HSM) A highly flexible and programmable Flash TriCore™ 0TriCore™ 1 ›› 32-bit CPU solution ––AES128 and TRNG implemented SRAM in HW Boot ––Customer-specific requirements, SRAM Bridge ROM
Firewall AES such as HASH or asymmetric encryp 128 tion, can be implemented in software TRNG ››Offers the performance required to encrypt/decrypt e.g. Ethernet traffic Peripherals Peripherals Peripherals Timer ››Secure key storage provided by sepa- HSM domain rated HSM-DFLASH portion Trusted execution environment ––Alternative secure key storage feasible in dedicated HSM-PFLASH sections ››SHE+ software The SHE+ driver controls the hardware security peripheral in the HSM domain and interacts with the TriCore™ host core. SHE+ offers the AUTOSAR CRY inter- face for integrating the HSM security features into an automotive application, including interface to AUTOSAR, communication from TriCore™ to HSM and vice versa, key storage functionality and security peripheral drivers.
13 AURIX™ security software
Infineon’s AURIX™ 32-bit microcontroller family offers a core. SHE+ comes with the AUTOSAR CRY interface for wide portfolio of compatible devices with embedded integrating the HSM security features into an automotive Hardware Security Module (HSM), which offers cost-efficient application, including interface to AUTOSAR, communi- solutions for all typical automotive security applications. cation from TriCore™ to HSM and vice versa, key storage The SHE+ driver controls the hardware security peripheral functionality and security peripheral drivers. in the HSM domain and interacts with the TriCore™ host
HIS SHE HSM SHE+ V1 HSM SHE+ envisioned Key management 10 keys 20 keys Configurable
Symmetric HW-based AES-128-bit (ECB, CBC) HW-based AES-128-bit l data encryption / decryption (ECB, CBC, OFB, CFB, CTR, XTC, GCM)
MAC generation / verification l l l
Safe MAC verification – l l
Random number management SHE PRNG SHE PRNG TRNG l
Secure boot l – l
Debug access – – Enhanced by HSM debug options
Other SHE services l l l
Asymmetric – – SW-based RSA1024 encryption / decryption SW-based ECC256
Typical applications Tuning protection Immobilizer Possible extensions, depending on specific tier1 / OEM use case
Secure-on-board communication
Key management l l l
Symmetric l l l data encryption / decryption
MAC generation / verification l l l
Safe MAC verification (optional) (optional)
Random number management l l l
Secure boot (optional) (optional) (optional)
Debug access (for development) (for development) (for development)
Other SHE services l l l
Asymmetric (optional in future) (optional in future) (optional in future) encryption / decryption
14 Embedded software
TriCore™ performance
Real-life application benchmark (software controlling a four-cylinder diesel engine)
228%
170% 152% 140% 128% 113% 100% 100%
46%
TC1767 TC1797 TC1782 TC1791/ TC1791 TC1793 TC1798 TC27x TC29x TC1793 1x TC16E& TC1.3.1 TC1.3.1 TC1.3.1 TC1.6 TC1.6 TC1.6 TC1.6 1x TC16P 2x TC16P @ 80 MHz @ 180 MHz @ 180 MHz @ 200 MHz @ 240 MHz @ 270 MHz @ 300 MHz @ 200 MHz @ 300 MHz
Assuming a multicore performance gain of 1.5 times
Infineon software product overview
So wareTools
Application so ware s tool Modeling
System so ware
(services, OS, communication, Libraries memory manager etc.) s Safety driver Safety Security driver tool Microcontroller Applications driver
abstraction drivers Configuration
Via 3rd parties Hardware HW so ware Operation Appl. so ware Focus areas
››Microcontroller abstraction drivers ››System software ––AUTOSAR MCAL ››Configuration tool ––DAVE™ ––DAVE™ ››Safety drivers ››Libraries ––PRO-SIL™ SafeTcore (AUDO MAX) ––DSP library ––PRO-SIL™ SafeTlib (AURIX™) ››Tools ››Security Driver ––MemTool etc. ––SHE+ driver
15 Infineon AUTOSAR MCAL drivers
MC-ISAR product overview Application layer
AUTOSAR runtime environment (RTE)
Memory Communication System services services services Application layer AUTOSAR runtime environmentI/O hardware (RTE) Complex device Memory Communication On-board abstraction driver abstraction Memoryabstraction Communication device System services services services abstraction FEE CanTrcv I/O hardware Complex device Memory Communication abstraction driver On-board abstraction abstraction device FLS abstraction FEE CanTrcv boot- MCU WDG GPT FLS SPI LIN CAN RT ADCPWMICUDIOPO UART MSC DMA loader FlexRay Ethernet etc. FLS boot- MCU WDG GPT FLS MCALSPI LIN CAN RT ADCPWMICUDIOPO MCALUA ComplexRT MSC DriverDMA loader FlexRay Ethernet etc. Microcontroller MCAL MCAL Complex Driver Infineon MC-ISAR Drivers (MicroController Infineon So ware ARchitecture) Enabled via Partners Microcontroller
Infineon MC-ISAR Drivers (MicroController Infineon So ware ARchitecture) Enabled via Partners
MC-ISAR MicroController – Infineon So ware ARchitecture MC-ISAR: MCU, WDG, GPT, SPI, PORT, DIO, ICU, PWM, ADC MC-ISAR COM Basic: MC-ISAR CAN, CanTrcv, LINMicroController – Infineon So ware ARchitecture MC-ISAR COM Enhanced:MC-ISAR: FlexRay, EthernetMCU, WDG, GPT, SPI, PORT, DIO, ICU, PWM, ADC MC-ISAR COM Basic: CAN, CanTrcv, LIN MC-ISAR MEM: FLASH, FEE MC-ISAR COM Enhanced: FlexRay, Ethernet MC-ISAR CD: MC-ISARUA MEM:RT, MSC, DMA, FLSL FLASH,oa FEEder for AURIX™ MC-ISAR DEMOCD: MC-ISAR HSSL, CD: SENT, I2C, STUAM,RT ,DS-ADC, MSC, DMA, SM FLSLU, IOMoader for for AURIX™ AURIX™ as demo code MC-ISAR DEMOCD: HSSL, SENT, I2C, STM, DS-ADC, SMU, IOM for AURIX™ as demo code
››Supported AUTOSAR releases and devices ››Complex driver for non-standardized ––V2.0: AUDO NG (TC1796, TC1766 ) modules (for TriCore™) ––V2.1, V3.0: XC2287, AUDO Future ››CMM L3 process (TC1797, TC1767), AUDO S ››AUTOSAR BSW suite via partners: ––V3.1, V3.2: XC2000, AUDO MAX elektrobit, vector, KPIT, ETAS ––V4.03: AUDO MAX ››Delivery packages include: source code, user manual, ––V3.2, V4.03: AURIX™ Tresos configuration tool ––ISO 26262 support
Standardized driver Documented product Compatibility and reduced release time-to-market Easy to use
Qualified release E icient implementation Compliant with CMM L3, MC-ISAR Lowest resource lower development cost consumption
Free evaluation version Application independence From sales contact From chassis through body to powertrain
16 Development support
Emulation device
››Emulation devices (ED) are a very powerful solution AURIX™ highlights for calibration, measurement, rapid prototyping and ››Up to 2 Mbyte RAM for calibration with same access speed debugging as on-chip flash ››Emulation logic and RAM are added next to the un- ››Automotive measurement bandwidth (XCP) 15/30 Mbyte/s changed Production Device (PD) part on the same chip via regular 2/3-pin DAP interface ››Cost-optimized PD, feature-rich ED ››Same package for ED and PD and minimum or no addi- tional external circuitry allows highly cost-optimized ECU design ››Proven solution with broad tool support by leading automotive and debug tool vendors
Trace and measurement
Today’s vehicles are designed to meet rising market de- Multicore Debug Solution (MCDS) mands for engine performance, engine responsiveness, torque, drivability, fuel economy and emissions. Infineon’s Key features proven Multicore Debug Solution (MCDS) enables manu- ››Tracing of CPUs, busses, performance events and facturers to design and optimize features to support these peripheral internal states automotive trends. Unique MCDS features include the fully ››Real-time, cycle-accurate and in parallel time-aligned parallel trace of many different on-chip sourc- ››Up to 1 Mbyte on-chip trace RAM (40 Gbit/s bandwidth) es and its highly powerful trigger capabilities. ››Very powerful trigger capabilities ››No additional pins needed besides the DAP interface ››New Compact Function Trace (CFT) mode for continuous program trace via DAP ››New fine-grained data trace qualification for automotive measurement
17 AURIX™ starter and application kits
Infineon Technologies AG starter kits – 32-bit microcontrollers
Triboards
Infineon Tricore™ family starter kits are powerful evalua- tion systems that enable evaluation and development well before the target hardware is available. They offer a solid platform for both hardware and software engineers to eval- uate and prototype designs that are closely aligned with their final applications.
Application kits
To simplify the development of your own application, the kit comes with a variety of on-board components, including a highly integrated software development environment that gives you everything you need to compile, debug, and flash your AURIX™ multicore application.
System application kits
The system application kits provide a quick jump-start to typical microcontroller applications such as motor control, radar etc. These reference design kits provide faster design-in support for end applications by providing a reference board, application software, tooling and documentation.
www.infineon.com/AURIX-kits
18 ACT– AURIX™ configuration tool
ACT is a powerful tool that helps engineers to jump-start GUI programming of Infineon microcontrollers. Pinning data Key feature Driver config. data OS config. data ››Altium TASKING VX TriCore™ lite version
including build-in Generation of configuration files Driver files ––AURIX™ pin mapping incl. interactive package view + OS ––AURIX™ iLLD (Low-Level Driver) Various configuration .c and .h files ––AURIX™ OSEK Selected drivers source files OS Source files
Free TriCore™ entry tool chain Key features ››Eclipse based IDE This free of charge tooling entry tool chain provides all ››Project wizard to easy define the project properties for required features to develop and test software for TriCore™ device and board support and AURIX™. The tool can be used with all available TriCore™ ››High-performance GNU C compiler and AURIX™ starter kits and application boards. ››Integrated source level debugger ››On-chip flash programming support For further information on TriCore™ Tools, please visit: www.infineon.com/tricore-tools
Preferred Design Houses (PDH)
Optimized open-market customer support set up for systems using AURlX™, including software and other Infineon products such as power products, sensor products and modules. They are trained to provide application- and product-specific support.
››1st level customer support ensuring ››Driving design @ customer Classic Infineon products/solutions ››Basic training for design teams @ customer (Free of charge) ››Technical interface and support ››24 h response time to the customer to the customer
››Project management & project-specific ››Software testing application support ››Support of project-specific Premium ››Specification of general SW architecture, functional safety engineering (Consultancy mode) defining required layers, control and ››Project-specific support of data flow structure etc. security solution To be agreed between ››Specification and implementation of ››Safety support customers and PDH custom device drivers ››Security support ››Optimization of software components ››Multicore support with regard to speed/code size
Design houses:
For more information, please visit: www.infineon.com/pdh
19 AURIX™ for powertrain applications
Energy efficiency for combustion engine vehicles
Electronic automotive components are key to raising fuel cy, for the complete Field-Oriented Control (FOC) algo- efficiency levels and cutting emissions. The latest environ- rithm. TriCore™ AURIX™ family offers multicore architec- ment protection agency standards – Euro 5 and Euro 6 for ture, allowing inverter control, hybrid torque management passenger cars and Euro 3 and Euro 4 for motorcycles – are and DC/DC conversion to be done within one single micro- driving developments in advanced engine management. controller. Nevertheless, the TriCore™ AURIX™ family has TriCore™ based products can be found in improved com- built-in resolver functionality, saving customers the cost of bustion technologies such as Homogeneous Charge Com- implementing an external resolver IC. pression Ignition (HCCI) as well as in direct injection, smart turbocharger and valve actuation applications. They are Often seen as master micro in battery balancing topology, also ideal for a range of innovative transmission technolo- the TriCore™ AURIX™ family proposes a 32-bit standby gies such as Double Clutch Transmission (DCT) and modern domain combined with an integrated 8-bit standby control- Continuous Variable Transmission (CVT). ler, essential for battery balancing under low power mode (e.g. holiday parking). Infineon is market leader in offering Hardware Security Module (HSM), a feature that prevents Driving hybrid and electrification the main CPU from illegal manipulation, making the billing for battery charging more trustworthy. While excelling in fuel economy, being fun-to-drive and
reducing CO2 emissions, Hybrid Electric Vehicles (HEV) and Electric Vehicles (EV) have the drawbacks of higher cost, AURIX™ security hardware limited drive-range and safety concerns (e.g. risk of battery over-charging). TriCore™ products, with their high per- Infineon’s AURIX™ 32-bit microcontroller family offers a formance, functional integration and application-based wide portfolio of compatible devices, with embedded SW support, are the ideal solution for (H)EV motor drives. Hardware Security Module (HSM), which offer cost-efficient TriCore™ offers less than 3% CPU load at 300 MHz frequen- solutions for all typical automotive security applications.
20 Hardware Security Module (HSM) tion environment and therefore allow independent HSM HSM provides a secure computing platform, consisting of specific SW code review in reference to the huge applica- a 32‑bit CPU, special access-protected memory for storing tion host SW from multiple parties. This helps to harden the cryptographic key and the unique subscriber identifiers, the security level by reliably avoiding potential security a hardware accelerator for the state-of-the-art AES-128 en- backdoors. cryption that can be operated in different modes and spe- ››Convergence of security and safety – AURIX™ microcon- cific hardware for generation of random numbers. A firewall trollers address both functional safety as well as IT-securi- separates HSM from the rest of AURIX™ microcontroller. ty requirements, making sure those are properly integrat- ››A highly flexible and programmable solution ed and not conflicting with one another. ››AES-128 HW accelerator matching performance for ››Secure process – Infineon can provide a secure person- automotive protocols alization flow. 1st personalization step usually happens ››Crypto- and Algorithm Agility by software at the Tier1, where initial HSM SW and optional transpor- ››AIS31 compliant True Random Number Generator (TRNG) tation key(s) are injected to the ECU. 2nd personalization with high random entropy over lifetime step happens at the OEM, where a car specific Individual key(s) are injected. AURIX™ HSM offers device specific, Customer benefits individual random read-only key. Read-only key can be ››Secure platform – HSM provides a secure platform, sep- used for injected keys and make them invisible for the arated from the rest of the microcontrollers by a firewall, application SW layer. thereby creating a trusted execution environment. ››Secure failure analysis – for the purpose of preventing ››Security standard compliance – AURIX™ HSM fulfills SHE unpermitted debug access, AURIX™ HSM offers 256-bit HIS and Evita Medium standards as well as provide some password for debugger access protection. It is possible additional functionalities. to create car specific debugger password, which can be ››Backward compatibility – AURIX™ security solutions are stored in OEM/Tier1 data base or generated by secret backward compatible to security SHE HIS implementa- algorithm. Destructive debugger entry functionality tions in previous TriCore™ based microcontroller families. opens debugger access but initiates a persistent destruc- ››Security differentiation - customized secure OEM or Tier1 tive action – device gets inoperable in native ECU car crypto apps can be processed within trusted HSM execu- environment.
21 AURIX™ for powertrain applications
Gasoline direct injection
Application example
Safety system supply Engine management Typical partitioning for GDI discrete & solenoid Battery (KL30) StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 Key (KL15) LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state watchdog TLF35584 controller
4x
5 V/0.15 A 5 V/0.15 A 5 V/0.15 A 5 V/0.2 15 A pk. Low-side ignition Ignition plugs 5 V/0.15 A 5 V/0.15 mA 3.3 V or 5 V/10 A 3.3 V or 5 V/0.6
Pedal position TLE4997/98 4x 4x HSM 3/10 A EGR-throttle position QSPI Solenoid TLE4997/98 injectors GDI driver
60x OptiMOS™
SAR IPD20N06S4L-14
Fuel level IPG20N10S4L-35A TLE4997/98 32-bit Multicore/Lockstep Swirl/tumble flap H-bridge for throttle 8 A ch. MCU (eGas) throttle TLE4997/98 TLE8209-2SA AURIX™ Throttle position e.g. TC27xT General purpose 5 A ch. Turbo charger TLE4998S 4 MB/200 MHz H-bridge waste gate TLE9102SG Temperature 6x DS sensor(s) H-bridge for EGR 5 A ch. EGR throttle Barometric pressure TLE9102SG KP23x, KP25x LS-switch Flex Manifold air pressure SENT PWM, current sense 2x 5/9 A KP21x, KP22x, KP27x1) O2 Flex02 TLE8102SG Knock sensor(s) PSI5 Ethernet HSSL LS-switch Flex8 In-cylinder pressure 8x 0.5 A On-o outputs Relays sensors 2x E-Ray TLE8108EM GTM MSB Lambda sensor 4x ASCLIN CAN 4x 2.6 A Solenoid Crankshaft 2x 2.6 A VVT TLE502x/492x LS-switch Flex PWM outputs Solenoid Camshaft 2 ch. Flex18 4x 1.7 A CAN ……FlexRay LIN TLE4986 TLE7250G TLE9221SX TLE7259-3GE TLE8718SA Relays 2x 1 A MIL Powertrain CAN Lamp 1) In development
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level up to ASIL-D. The scalable AURIX™ family includes the GTM, the de-facto industry standard timing module that supports highly complex engine management, while meeting the market’s most stringent emissions regulations.
Application features System benefits ››Direct injection ››Microcontroller with best-in-class real-time performance ››Scalable software-based knock detection ››Scalable platform – performance, memory size and I/Os ››Variable valve control ››Committed to reduce CO2 by 20% ››Throttle and EGR control ››Anti-theft protection and tuning protection ››Turbo charging ››Increased knock detection accuracy via DS-ADC ››Catalyst after treatment ››Enhanced communication (Ethernet) ››Start/stop system ››Dedicated peripherals for powertrain
Suggested products ››TC27x – TriCore™ 32-bit microcontroller ››TC26x – TriCore™ 32-bit microcontroller
22 AURIX™ for powertrain applications
Gasoline multi-port injection – discrete solution
Application example
Safety system supply Engine management Typical partitioning for up to 6 cyl. Battery (KL30) StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 MPI w. discrete "Flex" Key (KL15) LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state watchdog TLF35584 controller
Sensor supply Safety watchdog TLE4250-2 A 5 V/0.15 A 5 V/0.15 A 5 V/0.2 CIC61508 4x 2x 5 V/0.05 A A 5 V/0.15 mA 3.3 V or 5 V/10 A 3.3 V or 5 V/0.6 15 A pk. Ignition driver Ignition plugs Pedal position TLE4997/98 General purpose 4x 5 A ch. H-bridge EGR EGR-throttle position QSPI TLE9102SG TLE4997/98 50x General purpose SAR 5 A ch. Turbo charger Fuel level H-bridge TLE4997/98 32-bit waste gate Multicore/Lockstep TLE9102SG Swirl/tumble flap MCU H-bridge for throttle 8 A ch. (eGas) throttle TLE4997/98 AURIX™ TLE8209-2SA Throttle position e.g. TC26xD LS-switch Flex TLE4998S 2.5 MB/200 MHz PWM, current sense 2x 5/9 A 3x DS O2 Temperature Flex2 sensor(s) TLE8102SG
Barometric pressure LS-switch Flex8 4x 0.5 A KP23x, KP25x On-o outputs Relays TLE8108EM Manifold air pressure SENT KP21x, KP22x, KP27x1) 4x 2.6 A MPI injectors
VVT Knock sensor(s) PSI5 Ethernet HSSL Canister purge 2x 2.6 A valve In-cylinder pressure 2x LS-switch Flex E-Ray sensors MSB PWM outputs EGR-throttle GTM Flex18 Swirl/tumble Lambda sensor 5x TLE8718SA flap ASCLIN CAN 4x 1.7 A Cranksha Relays optional VR 2x 1 A MIL Crankshaft 2 ch. CAN LIN Lamp TLE502x/492x TLE7250GVIO TLE7259-3GE Camshaft TLE4986 Powertrain CAN 1) In development
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level up to ASIL-D. The scalable AURIX™ family includes the GTM, the de-facto industry standard timing module that supports highly complex engine management, while meeting the market’s most stringent emissions regulations.
Application features System benefits ››Gasoline port injection ››Scalable platform – performance, memory size and I/Os ››Scalable software-based knock detection ››Single voltage supply (EVR) ››Throttle and EGR control ››Focus on reducing CO2 ››Catalyst after treatment ››Easy migration from ultra low-end to mid-range ››Start/stop systems applications ››Cost-optimized for entry segment ››Best tool/partner support for all development phases within V-cycle
Suggested products ››TC265 – TriCore™ 32-bit microcontroller ››TC264 – TriCore™ 32-bit microcontroller
23 AURIX™ for powertrain applications
Diesel direct injection
Application example
Engine management Safety system supply Typical partitioning for DDI discrete Battery (KL30) StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 Key (KL15) LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state watchdog TLF35584 controller
5 V/0.15 A 5 V/0.15 A 5 V/0.15 A 5 V/0.2 PROFET™ 6x 8 A BTS500x0-1EGA Glow plugs
5 V/0.15 A 5 V/0.15 mA 3.3 V or 5 V/10 A 3.3 V or 5 V/0.6 BTS500x0-1TMA/B BTS500x0-1TEA/B Pedal position TLE4997/98 6x HSM Fast IGBT 6x 8 A EGR-throttle position QSPI Piezo injectors TLE4997/98 e.g. IHD04N60RA/ 84x IDH06N60RA Fuel level SAR TLE4997/98 32-bit H-bridge for throttle 8 A ch. (eGas) throttle Multicore/Lockstep TLE8209-2SA Swirl/tumble flap MCU TLE4997/98 General purpose AURIX™ 5 A ch. Turbo charger H-bridge Throttle position e.g. TC29xT waste gate TLE4998S 8 MB/300 MHz TLE9102SG Temperature 10x DS H-bridge for EGR 5 A ch. EGR throttle sensor(s) TLE9102SG
Barometric pressure LS-switch Flex KP23x, KP25x PWM, current sense 2x 5/9 A O2 Flex02 Manifold air pressure SENT TLE8102SG KP21x, KP22x, KP27x1)
LS-Switch Flex8 Knock sensor(s) PSI5 4x 0.5 A On-o outputs Relays Ethernet HSSL TLE8108EM In-cylinder pressure sensors 2x 3x E-Ray MSB GTM 4x 2.6 A Solenoids Lambda sensor 6x ASCLIN VVT CAN LS-switch Flex 2x 2.6 A Crankshaft PWM outputs Solenoid TLE502x/492x Flex18 4x 1.7 A TLE8718SA Relays Camshaft CAN FlexRay LIN 2 ch. 2x 1 A TLE4986 …… MIL TLE7250G TLE9221SX TLE7259-3GE Lamp Powertrain CAN 1) In development
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level up to ASIL-D. The scalable AURIX™ family includes the GTM, the de-facto industry standard timing module that supports highly complex engine management, while meeting the market’s most stringent emissions regulations.
Application features System benefits ››Direct injection (piezo/magnetic) ››Microcontroller with best-in-class real-time performance ››In-cylinder pressure measurement ››Scalable platform – performance, memory size and I/Os ››Hardware-supported security enhancements ››Committed to reduce NOx and particulate matter in line ››Throttle and EGR control with Euro 6 standard ››Turbo charging ››Hardware-supported IP/anti-theft protection and tuning ››Diesel particulate filter protection ››‘Blue’ after-treatment support (e.g. urea-based SCR) ››Increased accuracy with in-cylinder pressure sensing via DS-ADC ››Enhanced communication (Ethernet) Suggested products ››Dedicated peripherals for powertrain ››TC29x – TriCore™ 32-bit microcontroller ››TC27x – TriCore™ 32-bit microcontroller
24 AURIX™ for powertrain applications
Automatic transmission – hydraulic control
Application example
Safety system supply 9-speed automatic transmission Typical partitioning for constant current control Battery (KL30) StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 Key (KL15) LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state watchdog TLF35584 controller 5 V/0.15 A 5 V/0.15 A 5 V/0.15 A 5 V/0.2 5 V/0.15 A 5 V/0.15 mA 3.3 V or 5 V/10 A 3.3 V or 5 V/0.6
1x 6x Low-side driver Vehicle speed out HSM QSPI Input sha speed 84x TLE4951/54 ADC High-side driver 1x 32-bit MCU PROFET ™ family Solenoid supply Output sha speed Multicore/Lockstep BTS6133D TLE4951/54 AURIX™ MCU LS-switch Flex 10x 4x 2 A Hill hold multi-channel ON/OFF solenoids DS TLE4998C3 TLE8104
Constant current Variable force PRNDL switches 3x 1.2 A control solenoid/ TLE4964 SENT TLE82453SA proportional valve PSIS Tap up / tap down Constant current Variable force switches Ethernet HSSL 3x 1.2 A control solenoid/ 2x 3x TLE82453SA proportional valve Temperature GTM E-Ray MSB censor or 6x TLE8242-2L ASCLIN CAN & 3x IPG20N06S4L-26
TLE9250SJ1)
Powertrain FlexRay FlexRay CAN LIN TLE9221SX TLE7250G TLE7259-3GE
Diagnostic/instrumentation CAN Diagnostic/ instrumentation 1) In development
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level up to ASIL-D. The rich scalability of the AURIX™ family permits a platform approach that meets the needs of a range of transmission system demands. Furthermore, the hot temperature package and bare die solutions enable AURIX™ to be used in both attached and integrated control units.
Application features System benefits ››Smooth gear shifting ››Improved and fast clutch control ››Closely coupled with engine control via high-speed ››Supports Safety Level up to ASIL-D CAN/CAN-FD/FlexRay link ››Security module HSM to prevent tampering ››Support of four 3-phase DC-brushless E-drives ››Hot bare die supports modular temperature-optimized ››TC270: high microcontroller junction bare die TCU design temperature ››Hot bare die capabilities enable microcontrollers to be ››TC275/TC277: extended ambient temperature range to placed wherever they are needed in the system meet harsh environment requirements ››Scalable product offering ensures perfect fit for individual application needs Suggested products ››TC29x – TriCore™ 32-bit microcontroller ››TC27x – TriCore™ 32-bit microcontroller ››TC270 – Bare die TriCore™ 32-bit microcontroller
25 AURIX™ for powertrain applications
Dry double clutch transmission – hydraulic control
Application example
Safety system supply 7-speed double clutch transmission Typical partitioning for constant current control Battery (KL30) StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 Key (KL15) LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state watchdog TLF35584 controller 5 V/0.15 A 5 V/0.15 A 5 V/0.15 A 5 V/0.2 5 V/0.15 A 5 V/0.15 mA 3.3 V or 5 V/10 A 3.3 V or 5 V/0.6
Input sha speed High-side driver 1x 4x Solenoid supply TLE4953/54 HSM PROFET™ family QSPI 60x Output sha speed ADC TLE4953/54 LS-switch Flex 4x 2 A 32-bit MCU multi-channel ON/OFF solenoids Hill hold Multicore/Lockstep TLE8104 TLE4998C3 AURIX™ Constant current 3x 1.2 A Variable force PRNDL switches 6x control solenoid/ TLE4964 DS TLE82453SA proportional valve
Constant current Variable force Shi position sensor 3x 1.2 A control solenoid/ TLE4997E2 SENT TLE82453SA proportional valve PSIS System pressure or Ethernet HSSL TLE8242-2L & 3x IPG20N06S4L-26 Clutch pressure E-Ray 2x GTM MSB
4x High-current Temperature ASCLIN sensor CAN half bridge M BTN89xx Hydraulic pump
TLE9250SJ1)
Powertrain FlexRay FlexRay CAN LIN TLE9221SX TLE7250G TLE7259-3GE
Diagnostic/instrumentation CAN Diagnostic/ instrumentation 1) In development
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level up to ASIL-D. The rich scalability of the AURIX™ family permits a platform approach that meets the needs of a range of transmission system demands. Furthermore, the hot temperature package and bare die solutions enable AURIX™ to be used in both attached and integrated control units.
Application features System benefits ››Ultra-fast gear switching ››Improved fast clutch control ››Closely coupled with engine control via ››Supports safety level up to ASIL-D high-speed CAN/CAN-FD/FlexRay link ››Feature set optimized for wet and dry DCT designs ››Support of four 3-phase DC-brushless E-drives (dry-DCT) ››Continuous torque on wheels ensures a sportive driving ››High microcontroller junction bare die temperature experience ››Hot bare die capabilities enable microcontrollers to be Suggested products placed directly where they are needed in the system ››TC275 – TriCore™ 32-bit microcontroller ››Hot bare die supports modular temperature- ››TC270 – Bare die TriCore™ 32-bit microcontroller optimized TCU designs
26 AURIX™ for powertrain applications
Dry double clutch transmission – electrical control
Application example
Safety system supply 7-speed double clutch transmission Typical partitioning for constant current control Battery (KL30) StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 Key (KL15) LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state Battery (KL30) watchdog TLF35584 controller Key (KL15)
3-phase Rotor position driver IC M iGMR sensor 5 V/0.15 A 5 V/0.15 A 5 V/0.15 A 5 V/0.2 TLE718xx TLE5012B 1st 5 V/0.15 A 5 V/0.15 mA 3.3 V or 5 V/10 A 3.3 V or 5 V/0.6 clutch PRNDL switches TLE4964/66 4x HSM QSPI 60x Shi position sensor SAR TLE4997/98
32-bit MCU 3-phase Rotor position Temperature Multicore/Lockstep driver IC iGMR sensor sensor M AURIX™ TLE718xx TLE5012B 2nd clutch Rotor position 6x iGMR sensor DS TLE5009 TLE5012B
SENT
PSIS 3-phase Rotor position driver IC M iGMR sensor Ethernet HSSL TLE718xx TLE5012B Even E-Ray 2x gears GTM MSB
4x ASCLIN CAN
TLE9250SJ1) 3-phase Rotor position driver IC iGMR sensor Powertrain M TLE718xx TLE5012B FlexRay FlexRay CAN LIN Odd TLE9221SX TLE7250G TLE7259-3GE gears
OptiMOS™-T2 40V 24x IPD90N04S4-04 Diagnostic/instrumentation CAN Diagnostic/ instrumentation 1) In development
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level up to ASIL-D. The rich scalability of the AURIX™ family permits a platform approach that meets the needs of a range of transmission system demands. Furthermore, the hot temperature package and bare die solutions enable AURIX™ to be used in both attached and integrated control units.
Application features System benefits ››Ultra-fast gear switching ››Improved fast clutch control ››Closely coupled with engine control via high-speed ››Supports safety level up to ASIL-D CAN/CAN-FD/FlexRay link ››Feature set optimized for wet and dry DCT designs ››Support of four 3-phase DC-brushless E-drives (dry-DCT) ››Continuous torque on wheels ensures a sportive driving ››High microcontroller junction bare die temperature experience ››Hot bare die capabilities enable microcontrollers to be Suggested products placed directly where they are needed in the system ››TC275 – TriCore™ 32-bit microcontroller ››Hot bare die supports a modular temperature- ››TC270 – Bare die TriCore™ 32-bit microcontroller optimized TCU design ››Infineon e-motor driver
27 AURIX™ for powertrain applications
Integrated (H)EV control
Application example
Hybrid electric control 32-bit Transmission Multicore/Lockstep MCU AURIX™
FD
PMSM 4x CAN Diverse Lockstep core PWM A IGBT N PWM EiceSIL™ 1x FlexRay GTM hybrid pack driver IC BC PWM 1 or 2 S
DC/DC converter 1x Ethernet
PWM Trigger
ADC 200 MHz 8x CPU1 SAR-ADC Diverse Lockstep core Resolver 200 MHz CPU0 Motor control PWM generation hybrid domain control space vector Speed 6x DC/DC converter modulation & 200 MHz DS-ADC resolver speed & position CPU2 position
Synchronized 3-phase Resolver interface current measurement
The inverter controls the electric motor via an electric drivetrain. It resembles the Engine Management System (EMS) in vehicles with an internal combustion engine. It is seen as a key component in determining (H)EV drive behavior. The inverter captures energy released through regenerative braking and feeds this back to the battery. As a result, the range of the vehicle is directly related to the efficiency of the inverter. A safe, highly efficient inverter control system is crucial to the quality of driving.
Application features System benefits ››Multicore & lockstep architecture ››ISO 26262 ASIL-C/D compliant ››DS-ADC-enabled direct resolver-to-microcontroller ››No resolver IC needed, lower system cost ››Superior performance ››Enables sub-system integration ››Customized PWM pattern generation (driving HCU + inverter + DC/DC) ››Fine motor tuning Suggested products ››TC29x – TriCore™ 32-bit microcontroller ››TC27x – TriCore™ 32-bit microcontroller
28 AURIX™ for powertrain applications
(H)EV battery management system
Application example
ASIC SPI 32-bit #6 Multicore/Lockstep MCU IBCB AURIX™
ASIC SPI #5
FD IBCB
2.5MB Flash ASIC SPI 240KB RAM #4 4x CAN Diverse PWM Lockstep core IBCB PWM 1x FlexRay GTM ASIC SPI PWM #3 4x QSPI
1x I2C IBCB
SPI ASIC 200 MHz SAR-ADC #2 CPU1 200 MHz CPU0 IBCB
ASIC SPI #1 8-bit DS-ADC standby -200 V controller +200 V
The battery management system controls the battery state during charging and discharging. Intelligent functionality is needed to extend the battery lifetime, which has a considerable impact on the total cost of ownership. The State of Health (SoH), State of Charge (SoC) and Depth of Discharge (DoD) of the battery is permanently monitored.
Application features System benefits ››Multicore & lockstep core architecture ››ISO 26262 compliant ››Fast communication interface ››Ring topology in event of failure ››Integrated low-power 8-bit standby controller ››Balancing & monitoring over long parking period ››HW Security Module (HSM) ››Charge-billing verification
Suggested products ››TC27x – TriCore™ 32-bit microcontroller ››TC26x – TriCore™ 32-bit microcontroller
29
AURIX™ for safety applications
AURIX™ for safety applications
AURIX™ made for safety
The AURIX™ architecture ISO 26262 compliant process Furthermore, Infineon extends the microcontroller safety is designed to efficiently meet ASIL-D on an application roadmap with devices dedicated to the Advanced Driver level. The platform uses up to 2 cores in TriCore™ diverse Assistance System (ADAS) segment, such as radar or cam- lockstep core technology, a diverse lockstep architecture era applications. Innovation has been focused on system combined with cutting-edge safety technology, such as partitioning in order to further integrate system function- safe internal communication buses or distributed memory ality and consequently reduce the complexity and area, protection system. Innovative encapsulation techniques providing our customers with highly optimized solutions. allow the integration of software with various safety levels The new devices include high‑ speed interfaces, integrated (QM to ASIL-D) from different sources, thereby significantly hardware acceleration and enhanced ECU validation and reducing system complexity. Thanks to this optimized ap- instrumentation tools. All ADAS devices support ISO 26262 proach, multiple applications and operating systems (such safety methodology, meaning that they can be involved in as steering, braking, airbag and advanced driver assistance automatic decisions to assist drivers, such as emergency systems) are seamlessly hosted on an unified platform. braking. This leads to productivity gains of up to 30%, resulting in a smaller development outlay and reduced time-to-market for our customers.
AURIX™ made for scalability
Thanks to its market-leading expertise, Infineon has trans- with 8 MB of embedded Flash to a 200 MHz triple core with lated customer demands for individual scalability into 4 MB of embedded Flash to a 200 MHz dual-core device a universal product roadmap. Designed to optimize its with 2.5 MB of embedded Flash right down to 130 MHz and customers’ investment, the AURIX™ family comes with a 80 MHz single-core and single-core lockstep devices with comprehensive range of fully modular components, there- 1.5 MB, 1 MB and 0.5 MB of embedded Flash. The package by ensuring long-term design flexibility. The devices range portfolio includes a BGA-516 package with a ball-compati- in the ultra high-end from a 300 MHz triple-core device ble BGA-292 package (I/O subset), and compatible QFP‑176, QFP-144, QFP‑100 to QFP-80 packages.
31 AURIX™ for safety applications
Chassis domain control
Application example
+12 V from battery
4x Chassis Steering angle Wheel speed Safety system supply domain sensor sensor StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 controller LDO Tracker 2 2x iGMR Wheel speed sensor sensor UV/OV/error-monitoring TLE5012B TLE4941/42 Window/Q&A- Safe state TLE4943(AK) watchdog TLF35584 controller TLE5041 (GMR) VSens VTx VMCU WD Steering 4x speed angle CAN Inertia Vehicle Chassis CAN-bus transceiver sensors stability control TLE7250G 32-bit ECU TLE6251D Multicore TLE9250SJ1)2) Lockstep X Electric MCU power steering AURIX™ Y ECU 2–4x Z Steering Pos. sensor Position toque Linear hall Sensor TLE4997/98 interface Torque sensor TLE2012B ωx
TLE4997/98(D) Vehicle level ωy TLE4906 FlexRay transceiver ωz TLE9221SX TLE9222PX1)
1) In development 2) CAN FD support FlexRay
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level ASIL-D, which is already required in contemporary domain control systems. The latest diverse lockstep technology with clock delay (diverse lockstep core) reduces the software overhead significantly and enables fast time-to-market. Thanks to a scalable multicore system and innovative encapsulation techniques, this supports the integration of software with mixed-criticality levels from different sources, thereby allowing multiple applications and operating systems to be seam- lessly hosted on an unified platform.
Application features System benefits ››TriCore™ DSP functionality ››Advanced communication with FlexRay and Ethernet ››Best-in-class performance: triple TriCore™ ››Highest available performance with integrated FPU with up to 300 MHz per core ››Flexible DMA unit ››Supporting floating point and fix point with all cores ››Scalability over Flash, RAM and peripherals ››Up to 2.7 MB of internal RAM ››Proven safety concept to support ISO 26262 ››Communication peripherals: CAN, LIN, FlexRay, Ethernet ››Innovative supply concept leads to best‑in‑class ››Innovative single supply 5 V or 3.3 V power consumption ››External memory interface ››ISO 26262 conformance to support Suggested products safety requirements up to ASIL-D ››TC29x ››Availability of AUTOSAR 4.x ››TC27x
32 AURIX™ for safety applications
Electric Power Steering (EPS)
Application example
+12 V from battery
Safety system supply StBy- µC-LDO Ref-LDO Com-LDO Tracker 1 LDO Tracker 2 UV/OV/error-monitoring Window/Q&A- Safe state watchdog TLF35584 controller
VSens VTx WD VMCU
32-bit 3-phase Multicore driver IC Lockstep Rotor position Torque sensor Steering MCU TLE7183 iGMR sensor torque AURIX™ TLE7185 TLE5009/12B TLE4997/98(D) TLE7189 M TLE5309 TLE4906 TLE9180 Electric family power steering ECU Current sense (shunt substitute) TLE4997/98 CAN OptiMOS™-T2 FlexRay transceiver 8x IPLU300N04S4-R7 transceiver TLE7250G TLE9221SX TLE6251D Rotor position/current sense TLE9222PX1) TLE9250SJ1) 2) 1) In development 2) CAN FD support HS-CAN FlexRay
The new TriCore™ family AURIX™ with state-of-the-art safety features enables systems to achieve the highest safety level ASIL-D, which is already required in contemporary steering systems. The latest diverse lockstep technology with clock delay (diverse lockstep core) reduces the software overhead significantly and enables fast time-to-market. Its rich scalability meets a variety of different electric power steering system demands.
Application features System benefits ››Flash 512 KB–8 MB ››Scalability over Flash, RAM and peripherals offering the ››Performance from 133 MHz–3x 300 MHz best cost-performance ratio ››Ta = -40 °C … 145 °C ››Serves all kinds of EPS systems, such as column or ››Dedicated peripheral set: LIN, CAN, SPI, FlexRay , Ethernet belt drive ››Advanced timer unit for totally flexible PWM generation ››Proven safety concept to support ISO 26262 and hardware input capture ››Innovative supply concept leads to best‑in‑class power ››Redundant flexible 12-bit ADC consumption ››Hardware SENT interface for low CPU load ››Hardware-focused safety concept for reduced SW Suggested products overhead ››TC26x ››Safety software: Infineon SafeTcore library ››TC23x ››ISO 26262 conformance to support ››TC22x safety requirements up to ASIL-D ››Availability of AUTOSAR 4.x
33 AURIX™ for safety applications
Active suspension control system
Application example