Functional Safety for Industrial and Automotive Applications, Part 1 EUF-IND-T0589
Total Page:16
File Type:pdf, Size:1020Kb
Functional Safety for Industrial and Automotive Applications, Part 1 EUF-IND-T0589 Roger Ungerer | Field Application Engineer JUNE.2014 TM External Use Agenda • Primary MCU Family for Functional Safety − Qorivva MCUs: Born for the Road • Qorivva MCUs: Driving Industrial Safety • Qorivva MCUs: Meets Some ofNew the ImageSafety Productsto go here • SafeAssure: Functional Safety • SafeAssure Program TM External Use 1 A Global Leader in Microcontrollers and Digital Networking Processors Five Core Product Four Primary Groups Markets Microcontrollers Automotive Digital Networking Networking Automotive MCU >50 Year Legacy Industrial >5,500 Engineers Analog >6,100 Patent Families RF Consumer TM External Use 2 Several Platforms Key to Making the World a Healthier, Safer Place • Active Safety Systems • Connected Home • Advanced Driver • Portable Medical Assistance • Factory Automation • Radar, Vision Systems Systems • Functional Safety We See a Healthier, Safer Population TM External Use 3 Qorivva MCUs: Born for the Road TM External Use 4 Freescale has shipped over 200 million 32-bit Power Architecture™ MCUs, helping make cars smarter and safer TM External Use 5 We help put 160,000 new cars on the road every day TM External Use 6 The Auto Industry is Evolving Rapidly New technologies Electrification of powertrain Active vehicle safety The connected car Microcontroller performance requirements accelerating rapidly Multicore processing for safety and performance Integrated memory doubling every technology generation Safety requirements across many new applications Fault tolerant/ fault recognition systems for braking, steering, powertrain and all the newest advanced driver assist solutions Reducing power consumption becoming critical Up to 100+ ECUs having an impact TM External Use 7 Automotive System Trends for ASIL Levels Front View Smart Rear View Camera System Camera System No valid video Instrument No valid video sensor data Brake Lights Cluster sensor data ASIL B Loss of Brake Speedometer not ASIL B Lights available ASIL B ASIL B Rear Lights Active Failure on both Suspension sides Suspension ASIL A oscillates ASIL B to C Airbag System Inadvertent 77GHz Deployment RADAR ACC ASIL D Inadvertent Electric Power Braking Steering ASIL C Self-steering ASIL D Engine Management Braking and Unwanted vehicle Stability Systems acceleration Driving Lights Unintended full ASIL C to D Failure power brake on both sides ASIL D ASIL B Source: Freescale: Expectations based on global customer feedback TM External Use 8 Qorivva Microcontrollers Unleashing the Power of Automotive Innovation ••••••• ••••• ••••••• ••• ••••• ••••••• ••••• ••••••• ••• ••••• TM External Use 9 Qorivva Means… Innovation Designed for With our newest MCUs built Automotive on 55nm process technology, Built on industry-leading you get triple- and quad-core Power Architecture devices that significantly technology, Qorivva MCUs improve power efficiency and Qorivva MCUs offer quality, plus configurable performance leadership built on peripheral sets to design Power Architecture exactly what you need Unprecedented High-Quality Portfolio Scalability Choose from hundreds of The Qorivva portfolio offers 32-bit Power Architecture scalable solutions for MCUs with peripheral sets powertrain, body and optimized for a full range of chassis & safety applications, automotive applications and a enabling streamlined tools and focus on quality and long-term development environments reliability Scalable, highly integrated solutions built on the industry’s most powerful automotive architecture TM External Use 10 AEC Q100 Largest portfolio with automotive qualification grade High temperature for space constraint applications • Fuel, oil, water pumps, sensor and actuators… 125˚C Low135˚ C+PPM All Freescale BenefitExtended of one of the AutomotiveAutomotive MCU MCU are lowesttemperature PPM level up to in supportcertified up AEC to 125Q100˚C the135 industry˚C+ ambient targeting on ambient temperature severalzero product defects lines (S08SG,performance S12G, S12ZV, Qorivva) TM External Use 11 Qorivva MCUs: Driving Industrial Safety TM External Use 12 Challenges for Complex Industrial Control Applications • Advanced control algorithms • Safety regulations • Harsh conditions • Quality and reliability • Improved efficiency New Image to go here • Reduced development time Motion control, power generation, • Lower system cost clinical medical, aerospace and defense, motor drives, renewable energy, robotics and more • Component longevity TM External Use 13 Broad Portfolio Mark Leading IP • S08 MCUs • Analogue • 16/32bit DSC • Wireless IP • 32bit Kinetis • Low Power • 32bit Qorivva • Memory Technology Enablement • MQX RTOS • SafeAssure Program (Qorivva) • CodeWarrior IDE • Reference Designs & • Freemaster Analysis Tool Demos • Bare Metal stacks, Drivers, Libraries • Freescale Tower System • 3rd Parties Product Design Quality Longevity Support TM External Use 14 Qorivva MCUs: Meet Some of the Safety Products TM External Use 15 MPC5643L (90nm) PMU PowerPC™ Debug PowerPC™ PMU • Core − 120MHz PowerPC ISA Dual e200 zen4 core SWT e200 JTAG e200 SWT − 4K 2-way / 4-way I-cache MCM SPE SPE MCM − Safety enhanced Cores + SPE + VLE + MMU Nexus STM STM − Dual Parallel or Lock Step configuration + HW/SW VLE VLE monitoring INTC MMU MMU INTC • Memory FlexRay − 1MByte RWW Flash with ECC CACHECACHE CACHECACHE − 128 KByte SRAM with ECC eDMA RC eDMA − EE emulation − Dual crossbar with MPUs Cross Bar Switch Cross Bar Switch • I/O − 2 x FlexCAN (32 message buffers each) Memory Protection Unit Memory Protection Unit − 1 x FlexRay (64 msg. buffers) − 2 x LINFlex RC RC − 3 x DSPI I/O I/O − 1 x External clock output Bridge 1M 128K Bridge − 2 x FlexPWM (2 x 12 channels) FLASH SRAM − 3 x eTimer modules (3 x 6 channels) (ECC) (ECC) − Dual ADC (16 channels each, 12bit), 1 S/H per ADC RC − 1 x Cross-triggering unit for motor control • System − 2 x 16 Channels eDMA − Autonomous Fault Collection and Control Unit − CRC computing unit FlexPWM FlexCAN − 3 x DSPI Software watchdog timer (inc. window mode, flow TSENS LINFlex eTimer FCCU ADC CTU monitoring) 2 x 3 x 2 x 2 x 2 − 2 x Junction temperature sensor − Nexus debug interface (up to N3) − FM-PLL + FlexRay PLL I/O System − 3.3 V Single supply with external and internal ballast Communications Communications transistor − 3.3 V I/Os (ADC 5 V capable) − 144 LQFP / 257 MAPBGA 14 x 14 0.8mm pitch − Tj = 150°C TM External Use 16 MPC5744P (55nm) PMU PowerPC™ Debug • Core PowerPC™ − Dual up to 200 MHz PowerTM ISA e200 zen4 core ( Z420) e200 SWT e200 JTAG − 32 bit Reg File, 64 bit BIU with E2E ECC, − 64kB RAM of D-LMEM with MPU for fast context switch + MCM DLMEM Safety Nexus/ local data Checker − 8KB 2-way I-cache / 4KB 2-way D-Cache STM VLE Aurora VLE − 1x Scalar FPU (compiler supported) per core INTC I/D-cache CACHES-FPU − Safety enhanced Cores – VLE only Safe − No Signal processing unit extension + NO MMU Ethernet CACHES-FPU Safety Lake eDMA − Delayed Lock Step configuration only SIPI FlexRay • Memory − 2.5 MBytes NVM with ECC (with add. Safety measure for address). Cross Bar Switch –E2E ECC (Addr+Data) − 64kB EEE (Data Flash) available incl. ECC − Up to 384 Kbyte global system SRAM with ECC (Addr + Memory Protection Unit – 32 regions Data) • I/O − 3 x FlexCAN (64+2x32 message buffers) Multi Ported I/O SRAM Ctrl I/O − 1 x FlexRay (Dual Channel 64 msg. buffers) Flash ctrl − 2 x LINFlex (Uart/Lin protocol driver) Bridge Bridge − 4 x DSPI (4 cs each) 384 KB 2.5 M − 2x FlexPWM (2x 12ch for 2 independent Motors Controlled) SRAM FLASH (I/D) − 3 x eTimer modules (18 channel total) (A+D ECC) (A+D ECC) − 4 x SAR ADC – 1MS/s target 5V input capable − 2 x Cross-triggering unit for motor control automatism Crossbar Slaves − 2x SENT − Ethernet (257BGA only) • System 2 x 2 x TSENS FlexPWM − Interprocessor I/F SIPI (– approx 300Mbaud) 2 x SENT FlexCAN 4 x DSPI LINFlex 2x CTU eTimer FCCU ADC − Safe DMA 2 x 3 x 2 x 4 x 3 − Fault Collection unit, WDG, T-sens, & CRC computing unit − Nexus debug interface – Aurora − Dual-PLL (Peripheral + System Core) I/O System − 3.3 V Single supply: internal regulator with external power stage or External supply − 3.3 V I/Os (ADC 5 V capable) − 144 LQFP / 257 MAPBGA 0.8 mm pitch − Tj = 150°C . Extended Temperature at 165”C Option (separate P/N) TM External Use 17 SafeAssure: Functional Safety TM External Use 18 Functional Safety Defined • Functional safety is the absence of − Systematic: failures, related in a deterministic unreasonable risk due to hazards way to a certain cause, that can only be eliminated by a change of the design or caused by malfunctioning behavior of manufacturing process, operational procedures, electrical/electronic systems documentation or other relevant factors − Hazards: potential source of harm − Random: failures that can occur unpredictably − Harm: physical injury or damage to the during the lifetime of a hardware element and health of people that follow a probability distribution TM External Use 19 Auto Example: Body System Architecture – Window Lift • Arbeitskreis ‘Lieferanten’ V3 − Gefaehrdungsanalyse und Risikoeinshaetzung der Wesentliche PKW-Funktionen • One of the working groups set up to standardize electronic systems and products in the automotive industry − Made up of system developers − Carried out a Hazard Analysis and Risk Assessment of vehicle systems − AK_L_2009_06_07_Referenzliste • Two hazards and their ASIL rating were identified for window lift (and sunroof) TM External Use 20 Auto Example: The Body System Architecture – Window