NEWS Volkswagen pays $80m for Ballard fuel cell technology

Volkswagen has paid the automotive sector, US$24-40m. Over the mentation partner for ve - around US$80m to Bal - along with the outstand - full six years, the contract hicle manufacturers. The monthly magazine for automotive electronics engineers lard Power Systems for ing progress made to date has an estimated value of “This news from an - automotive-related fuel in our work with Volk - US$80-112m and in - other top global auto Issue 15 cell IP and a two-year ex - swagen Group on its fuel cludes a further optional manufacturer will stimu - Freescale paves way for March 2015 tension of an engineering cell car programmes.” two-year extension. late wider public and in - IN THIS services contract. These The extension till The IP sale has pleased dustry interest in fuel cell autonomous driving are the fuel cell IP assets March 2019 of the long- Intelligent Energy, which technologies,” said James previously acquired from term engineering services now considers itself the Batchelor, managing Automotive vision SoC launched at Mobile World Congress in Barcelona ISSUE United Technologies. agreement has an incre - leading independent fuel director of motive at Page 2: Volkswagen Freescale raised the bar “Audi, VW and the mental value estimated at cell developer and imple - Intelligent Energy. buys fuel cell Volkswagen Group are for autonomous driving at technology Stella shines in Crunchies Awards this month’s Mobile very pleased with the ac - quisition of a world-class World Congress in Page 3: Vehicle Barcelona with an auto - automotive fuel cell Electronics patent portfolio,” said motive vision SoC that it conference agenda claims has the requisite Block diagram of S32V automotive vision SoC Ulrich Hackenberg, tech - reliability, safety and se - nical development man - Page 6: invests ager at Audi. “We believe curity to automate and co- needs to satisfy security vice to interpret and dis - in self-drive cars pilot a self-aware car. and reliability issues.” tinguish between road that this portfolio, to - The chip, which will be He said devices for hazards and pedestrian gether with the combined Page 7: Verification fuel cell skills and expert - sampling from July this these types of applica - risk. using requirements year, is initially targeted tions had to last for 15 to Under ISO 26262, the ise of our group and Bal - at adas applications such 20 years with zero defect chip is a safety element lard, will underpin our Page 12: Security ability to play a leading as autonomous emer - reliability and meet stan - out of context but with connected cars gency braking, lane dards such as ISO 26262. McAuslin said it included role in fuel cell automo - tive development and departure correction, “We think at Freescale most of the features Page 16: Road pedestrian protection and we are positioned to ad - needed. commercialisation.” modelling for Ballard will retain a sensor fusion to combine dress these challenges,” “We put the hardware simulation data from cameras and he said. on chip for dynamic self royalty-free licence to use Stella, the world’s first solar-powered family car project, took home the sensors all around the car. The S32V device inte - test,” he said. “We pro - the IP transferred to Volk - Palne 17: Computer prestigious Best Technology Achievement award at the eighth annual “Sensor fusion takes in - grates Cognivue Apex vide automotive grade in - swagen in bus and non- moves from plane to Crunchies Awards, hosted by TechCrunch in San Francisco. The car uses puts from sensors, cam - image processor technol - terfaces such as Can, automotive applications trains various NXP technologies including microcontrollers and secure V2X eras, radar and ultrasonics ogy and four Arm Cortex- Flexray and Automotive as well as for limited pre- communications. and uses that to make a A53 cores. The software Ethernet. We also provide commercial purposes in Page 22: Volvo’s “It’s fantastic that we have won,” said Tom Selten, captain of Solar 3D model of the car,” platform includes the security encryption on automotive applications. autonomous Team Eindhoven. “Receiving the award means we are recognised among said Allan McAuslin, Green Hills Integrity real- chip. If an infotainment Randy MacEwen, Bal - driving project giants and there is a great potential for our family car of the future.” Freescale’s product man - time operating system head unit fails, you can lard president and CEO, He said the team was working on designing a new solar family car with ager for adas devices. and Neusoft’s real-time still drive safely but that said: “Extension of the Page 23: Product a range of 1500km. The four-seater is being designed from scratch and “That can be used to object recognition algo - can’t happen with pedes - engineering services con - news will be equipped – like Stella – with aV2V and V2I transmitter, developed achieve crash avoidance rithms to detect partial trian detection. You can’t tract reflects a growing by NXP. measures. This means it objects, allowing the de - take shortcuts.” positive sentiment to - Page 28: Contact wards fuel cells within details vehicle-electronics.biz Vehicle Electronics March 2015, Page 2 NEWS NEWS Focus on education at Gesture Arm and Green Hills collaborate Vehicle Electronics event partners to create performance record A partnership that teams The programme for the to-glass latency that is Videantis’ low-power vi - Arm and Green Hills vestment in supporting having received certifi - inaugural Vehicle Elec - neither optimal nor sion processing IP plat - Software have collabo - and working with its de - cates by accredited inde - tronics conference next tightly controlled. That is form with Gestigon’s rated on an optimised velopment tools ecosys - pendent agencies TÜV month is coming together a big problem for systems skeleton tracking and ges - compiler for the Cortex- tem is unrivalled,” said Nord and Exida at the with educational sessions to control the behaviour ture recognition algo - R5 processor that delivers Richard York, vice presi - highest levels of automo - that will benefit hardware of a moving vehicle, such rithms could bring claimed record-setting dent of embedded mar - tive and industrial func - and software engineers as adaptive cruise control, gesture and pose recogni - automotive performance, keting at Arm. “The tional safety, including working in the automo - lane change assistance tion technology to the au - enabling the processor to automotive and industrial ISO 26262 Asil D and tive sector. Tim Armitage and collision avoidance tomotive market. meet the needs of difficult markets are demanding IEC 61508 Sil4. This The keynote address systems.” “We’re excited to bring automotive applications. multi-sourced, powerful combined level of certifi - Richard York: “Major will be from Tim Ar - A team from Durham Gestigon’s unique and ac - EEMBC Labs has certi - and standardised MCUs cation and performance advantage.” mitage, associate director automotive industry of University – David curate skeleton tracking fied the Green Hills com - supported by well-estab - should let the Cortex-R5 of Arup, who will be talk - these ever decreasing Wood, Linzi Dodd, David and gesture control to our piler, v2015.1, as having lished tool chains such as deliver performance, Arm raise the bar for au - ing about the UK Auto - geometries that are pres - Etor and Claudio Balocco low-power, high-perfor - achieved a performance Green Hills. In an indus - safety and cost advan - tomotive and industrial drive project, which will ent from all silicon ven - – will look at the recovery mance vision platform,” score of 1.01EEMBC au - try where safety is a criti - tages to automotive sys - code performance on be testing autonomous dors. Andrew Coombes of energy from car ex - said Hans-Joachim Stol - tomarks/MHz on the Cor - cal success factor, the tems developers as it Arm processors,” said vehicles in Coventry and from Rapita Systems will haust pipe surfaces. Their berg, Videantis CEO. tex-R5 automotive MCUs reputation that Arm’s eliminates the need for Dan Mender, vice presi - Milton Keynes. Arup is be talking about ensuring proposed method will ex - “Gestigon is the global from Spansion. This rep - ecosystem enjoys with custom MCU architec - dent of business develop - the consortium leader for the correct timing behav - ploit the radiative heat market leader for gesture resents a 30% increase on top tier OEMs and suppli - tures. ment at Green Hills the project and Armitage iour of embedded soft - from the exhaust pipe sur - and skeleton recognition previous scores. ers is a major advantage.” “Green Hills Software Software. “Cortex-R5 is the programme direc - ware, an important aspect face, and so will not inter - for the automotive indus - “Processor and com - The Green Hills tool - is pleased to see our con - supports powerful per - tor. Other partners in the of automotive ECU de - fere with the gas flow try and we are eager to piler technology go hand chain has a strong func - tinued collaboration with formance and safety fea - consortium include Jag- velopment. dynamics in any way. jointly offer this to our in hand, and Arm’s in - tional safety pedigree – architecture specialists at tures that our latest uar Land Rover, Mira, Jim Thomas from TVS Speakers at Embedded customers.” compiler optimisations Ford, Thales, Tata Mo - will look at requirements Masterclass include Fer - More image sensors are unlock for customers tors, Oxbotica and RBM. driven verification and gus Duncan from Bitwise entering cars, including Vector buys stake in CSM choosing this industry- The conference is due test for ISO 26262. And on managing product depth-sensing technolo - proven processor in to be held at the NEC in Mark Pitchford from software development to gies. These can be used Vector Informatik has ac - and hardware products. Vector Informatik. “The performance-sensitive Birmingham, UK, from Lynx Software will ex - support long-term main - for skeleton tracking in - quired a 24.8% share of Vector is contributing partnership between Vec - markets.” 21 to 22 April 2015. It plain using a Posix com - tenance and optimal code side and around the car. Computer-Systeme- with its software tools for tor and CSM enables op - The Spansion Traveo will be part of National pliant rtos to improve re-use for product vari - The driver’s and passen - Messtechnik (CSM). online acquisition, analy - timal exchange of family of Cortex-R5 Electronics Week and hard real-time perform - ants and Jason Masters gers’ poses, behaviour, Though they will con - sis and management of know-how and close in - based automotive MCUs will be joined by Embed - ance and reduce glass-to- from Programming Re - and signals can be used tinue to operate as inde - measurement data. termeshing of their prod - builds on the Cortex-R4 ded Masterclass, with glass latency in adas and search on key drivers im - for gesture control but pendent companies, they “Especially in the field ucts. Our customers will based FCR4 family. each of the two days com - IVI applications. pacting return on also for more advanced, will work together on a of measurement technol - in turn benefit from this “An automark score of prising a half day for “Unfortunately, generic investment for static UX-focussed comfort and joint venture for long- ogy, requirements by ve - partnership in their proj - 192 for a cost-effective Masterclass and a half for versions of open source analysis tools. security features. term and sustainable de - hicle OEMs and ECU ects.” automotive grade MCU Vehicle Electronics. Linux are not designed There are still sponsor - Gestigon CEO Moritz velopment and sales. In suppliers have increased CSM is providing the at this price sets a new bar Jeff Loeliger, principal for in-vehicle use, and ship and exhibiting op - von Grotthuss said: “Both the future, users of meas - tremendously with regard measurement technology for affordable MCUs in staff engineer at Freescale that is particularly evident portunities available. For companies excel in their urement technology in to measurement data hardware – in particular body, driver information Semiconductor, will dis - in adas,” said Pitchford. details, email conference field of work and have al - automotive and commer - rates, reliability and flex - its rugged and compact and powertrain applica - cuss, as the silicon indus - “The lack of hard real- organiser Jayne Foster at ready built a significant cial vehicle development ibility of the development analogue measurement tions,” said Takeshi Fuse, try shrinks devices, what time functionality sees jayne@eventworkseu - customer network among should benefit from this tools that are used,” said modules for use in vehi - senior VP for automotive are the challenges for the them suffer a from glass- rope.com. tier ones and OEMs.” coordination for software Thomas Riegraf, CEO of cles and on test benches. MCUs at Spansion.

Page 3, March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 4 NEWS NEWS Tech Mahindra lands Acea commits to Sony invests in self-drive cars Spice certification lowering emissions Japanese electronics giant end of June 2016. A recent statement from securing profits” in these India-based Tech Mahin - tive Spice under the Following last month’s system for further reduc - Sony has invested ¥100m This will take place at the company said it saw businesses. dra’s automotive group Pathfinder scheme,” said publication of the Euro - ing CO 2 emissions,” said to buy a two per cent the company’s Nagasaki its traditional TV and The company says it has achieved Automotive Dorling. “This is a signif - pean Commission’s En - Erik Jonnaert, Acea sec - stake in ZMP, a Japanese Technology, Yamagata mobile communications plans to cease production Spice organisation capa - icant achievement and ergy Union proposal, the retary general. Acea ad - startup manufacturer of Technology and Ku - businesses as being of high-density semicon - bility level three certifica - reaffirms Tech Mahin - European Automobile vocates a system that robot cars. mamoto Technology cen - highly volatile and that it ductors at its Oita Tech - tion under the Pathfinder dra’s commitment to im - Manufacturers’ Associa - focuses on reducing over - Sony hopes to combine tres. The investment will placed “the highest prior - nology centre by March scheme for process capa - plementing best practices tion (Acea) re-stated its all CO 2 emissions from its experience with sensor be around ¥105bn. ity on curtailing risk and next year. bility and organisational in developing software commitment to contribut - all transport modes. technology with ZMP’s maturity. for automotive.” ing its fair share towards “For the automobile in - automotive knowledge to Day out for lorry of the future winners Assessors from Im - Karthikeyan Natarajan, lowering greenhouse gas dustry, this means we enter the self-driving car pronova in Sweden per - global head of integrated emissions, through more should not only focus on market, competing with formed the assessment, engineering at Tech fuel-efficient technology emissions from the vehi - the likes of Apple and led by Alec Dorling, prin - Mahindra, added: “This and continuing invest - cle itself, but also look at Google as well as major cipal assessor and inter - certification and signifi - ments into alternative other factors influencing established automotive national project leader of cant experience in the au - powertrains. emissions during the use manufacturers. the Spice ISO/IEC 15504 tomotive industry align us Europe’s cars, vans, lor - of the vehicle,” Jonnaert Though Sony is seeing standard and convener of to the challenges that the ries and buses meet the said. “This includes the a decline in its TV and the ISO group developing industry is facing and highest environmental carbon content of fuels, smart phone markets, it is ISO/IEC 15504. reaffirms our commit - standards in the world. driver behaviour, infra - still doing well in the “Tech Mahindra joins ment to deliver best in “We now need a wider structure and the age of camera sensor sector, and the select group of com - class services to our cus - debate involving all the car fleet.” it is this technology it panies that have achieved tomers in automotive stakeholders on a more He said Acea welcomed wants to adapt for au - certification to Automo - electronics.” balanced and effective the call for the swift de - tonomous vehicles. ployment of alternative Reports are rife that fuel re-charging infra - Apple is about to enter Itri to use ISO 26262 structure – essential for the self-driving car mar - the roll-out of alternative ket and Google’s research All three category winners, plus runners-up and a good number of vehicles. He also called in this field has been well entrants, to the Volvo Trucks’ ‘Truck of the Future 2050 Design Competi - to help Taiwan firms for the harmonisation publicised. tion’ recently enjoyed a visit to Volvo Group UK headquarters in War - of customer incentives Sony sees image sen - wick. As announced in December, the winners were Luo Tong Sim (under Taiwan’s Industrial Tech - ratio of electronic prod - development process of across EU member states sors as a major growth 11 years and pictured), Barry Llewellyn (11 to 18 years), who is from nology Research Institute ucts in automobiles had hardware, cut develop - to support the market up - area and has announced Dublin, and Rhys Guy Llewellyn (over 18 years). Two of the (Itri) has been awarded an continued to climb. But ment costs and help speed take of such vehicles. that it plans to invest in runners-up, George Goodfellow (11 to 18 years category) and Robert ISO 26262 certification for domestic automotive up the process of obtain - Electrification is one of both production capacity Hunt (over 18 years), were also there. for developing functional electronics manufactures, ing ISO certification. a basket of alternative and research and develop - The visit to Warwick was hosted by the executive team of Volvo Trucks, safety for automotive getting a coveted ISO According to Itri esti - technological options that ment to bolster its posi - headed by managing director Arne Knaben, who said he was “very electronics. 26262 certification took a mates, world automotive manufacturers are provid - tion in cmos image impressed” with the overall quality of not only the winners, but also the Chou Sheng-Lin, large investment of time electronics output will top ing. “Technological neu - sensors. 100 plus entries received, and the creative thinking that had gone into deputy general director of and manpower. US$300bn in 2019, of trality, which has enabled The company an - their design submissions. Itri‘s information and Itri, which has been which automotive safety manufacturers to develop nounced last month that it Most of the entrants produced their designs during the 2014 summer communications labora - training automotive func - electronic system will ac - a wide range of electric want to increase produc - holidays. Many reported that they had spent several weeks producing tories, said as industry gi - tional safety experts since count for US$24bn, an and non-electric alterna - tion capacity for image preliminary sketches and notes about their favoured design concepts. A ants such as Google and 2012, plans to play an ac - area of the strongest tives and has encouraged sensors from the present number of designs featured autonomous, driver-less lorries. Alternative Apple delved into auto - tive role in helping local growth in emerging elec - innovation, must remain a 60,000 to about 80,000 fuels and kinetic energy recycling also found favour. motive electronics, the manufacturers shorten the tronic markets. key principle,” he said. wafers a month by the

Page 5, March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 6 SOFTWARE TOOLS SOFTWARE TOOLS Between the lines

As applications such as lane keeping assist add to automotive complexity, Mike Bartley explains how to bring requirements driven verification to hardware

utomotive applications random and metric-drive verifica - such as lane keeping as - tion has helped greatly in driving sistants are leading to a down the number of bugs that lurk rapidly escalating system-on-chip in an SoC design by the time it A(SoC) design complexity, mean - needs to be taped out. The meth - ing engineers have to embrace a ods are effective at finding bugs number of verification methodolo - that traditional directed tests do gies to ensure a successful tape - not find. Metric-driven verifica - out. Many organisations involved tion focuses effort on parts of the in SoC design have evolved from design that risk being ignored and using verification environments prevents tests from concentrating based primarily on directed tests too much on functions that have to include constrained-random already been checked. But these Lane-keeping assist on Toyota Avensis techniques and, most recently, methods cannot satisfy all the metric-driven verification. needs of verification and ignore The inclusion of constrained- one essential part of the design:

Page 7, March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 8 SOFTWARE TOOLS SOFTWARE TOOLS

the requirements that the SoC functional requirement can be not just in terms of product qual - needs to satisfy. mapped to a demonstration of im - ity but time to market. With con - Requirements-driven verifica - plementation. Furthermore, any ventional approaches to tion has been a vital part of high- verification or test activity that SoC-design test and verification, reliability designs for decades, does not relate to a requirement the engineers responsible for providing a key part of the V- can be easily identified and ques - building the test harness need to model paradigm that these proj - tioned. If it is not needed, it can wait for implementation code. The ects employ. The V diagram be removed from the test database RDVT methodology makes it pos - describes the journey that the im - to avoid wasting resources. sible to shift a large amount of the plementation and verification As an example, consider an au - verification process left in the team needs to follow through a tomotive product that might have project. The provision of require - project. It starts with high-level a new requirement for a lane ments early in the cycle makes it requirements that are progres - keeping assistant, which provides possible to analyse the overall sively decomposed into system support to the driver to stay in structure of the design and the functions expressed in hardware lane. This is obviously a high- tests it requires and enable the and software. As these functions level requirement that can be bro - team to build an effective verifica - are assembled into subsystems ken down hierarchically to tion plan. and ultimately the final system, hardware requirements (for exam - The RDVT methodology im - along the rising edge of the V, ple, a video input stream) and proves management visibility of tests ensure that each function be - software requirements that can the project. As well as providing haves as expected. Finally, sys - identify the lane separation lines analysis of code coverage, metrics tem-level tests at the end of the V in the video input. These hardware can support the project managers tie back to the system-level re - and software requirements will be by showing how well the design is quirements. If those are satisfied, broken down further to atomic re - meeting its requirements over the design can proceed to quirements, which can be tested time. Used across multiple proj - production. individually. As those atomic re - ects, the metrics can help identify Similarly, for SoC designs, the quirements are then integrated, common or recurring issues, let - The complexity of Honda’s lane keeping assist (LKAS) system requirements driven verification combined requirements can be ting managers spot potential prob - and test (RDVT) methodology tested until it can finally demon - lems earlier in the cycle and have enables project progress to be strate that the requirement for a them addressed. use other than in military and executables, there are no tools that result in errors or even corruption tracked and analysed from the lane keeping assistant is working. Through RDVT, the project avionics projects where require - automatically track the results of of databases and maintaining perspective of the requirements of RDVT provide a number of ad - managers can understand verifica - ments traceability forms a major tests as they apply to require - good visibility of requirements the system. In this way, every vantages that can pay dividends tion status in terms of externally part of the standards that develop - ments. The common practice is to through the entire tree is difficult focussed customer requirements – ment teams are required by law to stop tracing requirements at the to achieve. IC design has a further how well the product will meet its follow. point at which tests are defined. problem due to its multidiscipli - goals – rather than less transparent In most projects that do not have Tools typically do not ensure that nary nature – the communications internal metrics. Because the met - strict legislative or contractual requirements have tests defined to across pre- and post-silicon views rics reflect the completeness of constraints, the interpretation of match them and that those tests and the software and system the design, RDVT support im - requirements can change during were successfully completed. This domains are complex. proved decision-making because the course of the project to reflect approach results in a gap between To enable RDVT, there is a clear they expose real-time data on the engineering realities – which can the requirements capture tools that need for tools to help automate project’s actual status and reduce include enhancements made pos - are commonly available and the the process of tying test results as the reliance on indirect measures sible by optimisations as much as results provided by test-focussed well as specifications to require - such as bug-detection rates. problems encountered during im - products. ments, and tracking results over A common criticism of the re - plementation. The manual mapping of docu - time to ensure changes to the de - quirements-driven approach is The lack of flexibility is made ments produced by test tools to re - sign do not cause results in re - that it is inflexible and often man - worse by a lack of automation. quirements is time-consuming and quirements from being untested in ually intensive. These aspects Even though a wide array is avail - prone to error. The translation or the final version. Such an environ - Fig. 1: The traditional V-shaped software development lifecycle have helped prevent widespread able for analysing source code and moving of the data involved can ment also needs to provide docu -

Page 9, March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 10 SOFTWARE TOOLS DRIVER ASSISTANCE

over time, RDVT are effective for Fig. 1: Typical V2X such projects. network implementation The adoption of any new tech - nique is not without its drawbacks and RDVT are no different. One potential obstacle for adopters is acquiring the discipline to write effective requirements at an early stage. However, organisations that raise such an objection have larger problems and are unlikely to be able to develop systems that meet unspecified requirements. Be - cause the team needs to set re - quirements early on, this additional phase may seem to in - crease costs. However, this early capture is likely to lead to savings Fig. 2: Dashboard gui for a tool that supports the in the overall development costs RDVT approach because bugs are more expensive to fix later in the cycle. RDVT mentations to prove that the im - during the lifecycle of a project provide a highly effective way of plementation met requirements for can be managed through direct ed - supporting the shift left in SoC audit purposes. iting within the tool or through a design and verification. Tools are now beginning to ap - partial import from a requirements Mike Bartley is founder and pear on the market that support tool. The tool performs an intelli - CEO of TVS the RDVT approach. These can be gent analysis of where in the hier - Who’s talking with whom? built on top of a relational data - archy a changed requirement base to track how a project is de - should fit and, if there is a match, Prem Arora provides an introduction to sage developed for safety applica - veloping over time for every compares all the attribute values tions, the network may also be feature and requirement, and how to look for changes. Any changes adas and the secure connected car used by other connected vehicle these features relate to the tests need to ensure that goals or sub- applications such as mobility or that are used to measure their features still satisfy the changed dvanced driver assistance mit safety related messages about weather. Additional messages progress. requirement, and will be flagged systems (adas) enable bet - a vehicle’s speed, heading, brake from vehicles or from the infra - The advantage of such tools is as suspect to ensure the user is ter situational awareness status, vehicle size and so on to structure may also be developed that they can be independent of pro-active in accepting that the re - and control to make driving easier other vehicles and receive the in the future. specific EDA tools and flows. quirement is satisfied and that key Aand safer. Adas technology can be same information about other ve - In terms of safety impacts, They can import requirements requirements are not missed as based on systems local to the car – hicles from these messages. Using based on a study conducted from from a range of sources, from project needs change. that is vehicle resident systems multi-hops to transmit messages 2004 to 2008, the National High - Excel spreadsheets through to the Support for partial imports and such as vision and camera sys - through other nodes, the V2X net - way Traffic Safety Administration output of specialised tools such as changing requirements means tems, and sensor technology – or work can communicate over long (NHTSA) estimates that 22 possi - Doors or Visure and many others. RDVT can support agile develop - can be based on smart, intercon - distances. This longer detection ble different crash scenarios can And through support for test stan - ment environments. Agile is an ef - nected networks as in the case of distance and ability to see around be prevented by a V2V network. dards such as UCDB and UCIS as fective way to develop products in vehicle-to-vehicle (V2V) or vehi - corners or through other vehicles This represents approximately 81 well as direct translation, test data an environment where the market cle-to-infrastructure (V2I) sys - helps V2X-equipped vehicles per - per cent of unimpaired light motor from multiple sources can be requirements are not clear and can tems, jointly known as V2X. ceive some threats sooner than vehicle crashes that can be incorporated into the RDVT evolve with the development. By V2X communications use on- sensors, cameras or radar can, and prevented. methodology. allowing requirements to change board dedicated short-range radio warn their drivers accordingly. Using 2004 to 2008 crash data, Mike Bartley Any changes to the requirement and modify the associated tests communications devices to trans - Apart from the basic safety mes - the approximate average number

Page 11 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 12 DRIVER ASSISTANCE DRIVER ASSISTANCE

of fatalities, injuries and property chaos across cities. asymmetric cryptographic tech - damage per year caused by these In addition to the concerns men - niques. 22 target light-vehicle pre-crash tioned above, users are also wor - Symmetric cryptography is scenarios are 27,000, 1,800,000 ried about privacy and ensuring often suitable for small networks and $7,300,000, respectively. that messages do not give away with limited number of nodes, With V2I, the potential safety the identity and location of the wherein the transmitter and re - advantages of a wide-scale imple - driver, with anonymous vehicular ceiver share a common key that is mentation are enormous. The fol - safety information only going to known by both sides in advance lowing is a list of V2I potential pre-authorised entities such as of any packet transmission. This safety applications: other vehicles. This is particularly key is used to verify the authentic - important to ensure wide scale ity of the data at the receiver via • Red light violation warning; adoption of V2X where users dynamically generated codes • Curve speed warning; should be able to feel confident (called message authentication • Stop sign gap assist; that the V2X system does not pro - codes, or macs), which are com - • Reduced speed zone warning; vide access to their personal data. puted based on the payload and • Spot weather information To prove authenticity, the sender the key to verify packet integrity warning; of a message must provide a and source. • Stop sign violation warning; unique identifier that can be veri - This method, although simple, is • Railroad crossing violation fied at the receiver to confirm that impossible to use in large net - warning; and the message comes from a true works such as large scale V2X be - • Oversize vehicle warning. source. Typically this is achieved cause either the same key must be by using either symmetric or used by all nodes – which pres - Warning alarms not only inform the vehicle and driver responsible for the safety violation, but Four out of five crashes could be prevented with V2V technology through the wireless link they can warn other nearby vehicles, for ents an unacceptable security risk node is authentic and not tam - cell to generate private keys are example cross-traffic when a red – or different keys must be used pered with? further secure because the state of light or stop sign is being run at a for each pair of nodes communi - The best possible solution to the the cell is wiped out at power off. blind corner, thus helping to pre - cating with each other – which is first part of the problem is to use The second part of the question vent collisions. unwieldy. biometric signatures of silicon ICs can be addressed by a public key In asymmetric cryptography, the based on small physical variations infrastructure (PKI). A PKI is a Securing V2X idea is to provide a scalable way in the manufacturing process of system for the creation, storage For the promise of V2X to be to connect as many nodes as the each device. These process varia - and distribution of digital certifi - realised, the system must ensure network may need. To achieve tions are never identical and can - cates that are used to verify that a two things: that messages origi - this, each node uses a private key not be cloned for any two ICs, and particular public key belongs to a nate from a trustworthy source; to sign each transmitted message thus provide a unique signature certain entity. The PKI creates and that a message isn’t modified digitally. This digital signature for each. Such signatures are digital certificates that map public between sender and receiver. can be verified by the receiver by called physically unclonable func - keys to entities, securely stores The problems originating from a using an associated public key, tions or PUFs. Besides being un - these certificates in a central failure of either of the two men - which is transmitted to all the re - clonable, PUF based keys are also repository and revokes them if tioned scenarios could lead to se - ceiving nodes. Apart from the fact very difficult to extract by a needed. rious consequences and loss of that this scales better than a sym - hacker because they are typically In a PKI system, a certificate au - metric cryptography scheme, it realised at the atomic level. ICs thority (CA) certifies all nodes by life. A bogus message could pro - Fig. 2: A: Sram start-up values are used to compute a private key also enables easier replacement of can base PUFs on several physical digitally signing their public keys vide false data about speed and di - made reliable with the aid of an activation code saved during the any faulty nodes. factors such as memory elements, using the CA’s own private key. rection of oncoming traffic and enrolment phase. B: From the private key, a public key is com - But this poses another question: logic delays and resistance. Sram- The most common public key cer - lead to accidents, whereas poten - puted and certified by the component manufacturer, giving each How does one ensure that the pri - based ICs that use the unique and tificate format is called X.509. tial data manipulation by miscre - component a verifiable globally-unique unclonable identity ants can cause traffic outages and vate and public key used by each random start-up state of an sram When a device transmits a mes -

Page 13 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 14 DRIVER ASSISTANCE SIMULATION & MODELLING

used to create a user PKI with the user’s own certificate authority or to enrol systems using them in the SCAN USA or European V2X PKIs. Because fielded systems such as vehicles are accessible by people DO having malicious intent, it is im - portant for the hardware to be able to protect the secret keys against s increasing numbers of various physical and side channel new vehicles are designed attacks, such as differential power to suit global markets, analysis (DPA). In addition to making the optimum design state-of-the-art key storage and Achoices at the outset has become key generation technologies such more difficult. Revisions to a ve - Every detail of a broken road Fig. 3: A chain-of-trust is created founded on the unclonable as PUFs and ECC, certain devices hicle to suit individual market surface is captured, making ride device identity established by the PUF including keys certified by come with a DPA pass through tastes late in a development pro - simulation on a specific route the component manufacturer, allowing each system integrator or patent licence. SoCs and FPGAs gramme can be costly, so manu - highly accurate operator to certify their own independent PKI are available that provide for se - facturers aim to avoid such issues cure, remote, DPA resistant update by testing as early as possible. A sage digitally signed by its private using a PKI scheme. Importantly, capabilities. A DPA pass through simulator allows a human driver To support this requirement, 100km; in 2014 it was more than key that message can be authenti - the effectiveness of this approach licence can additionally let users to experience the vehicle’s behav - RFpro is exploiting a break - 1000km; and this year we expect cated with the device’s public key. is highly dependent on the techni - harness the massive amount of iour in a virtual environment, long through in scanning technology to to build approximately 3000km of The device can also send its cal design decisions regarding computational capability in a before physical prototypes are capture road surfaces with better digital road models. The new X.509 certificate to all nodes re - how to implement this approach mainstream FPGA to accelerate available, but needs an accurate accuracy than ever before, and up technique isn’t just more detailed, ceiving its messages so they have in its given environment. The PKI transactions in a DPA safe road model to be really useful. to 50 times the level of detail. The it’s also faster, which allows the its public key. The X.509 certifi - V2X certificate authority issues manner using DPA countermea - As such, the latest surface scan - key development has been to re - scanners to drive at normal road cate including the device’s public many anonymous certificates per sures. V2X networks thus pro - ning technology can produce place the single pulse laser lidar speeds without impeding other key can be verified at the receiver year for each vehicle, to hinder tected will ensure safe and secure ultra-accurate digital road models. time-of-flight scanning process road users.” using the CA’s public key, which attempts to track the owner’s communications. This capability allows manufac - with a number of separate, phased The growing volumes of data is pre-placed in all the nodes and movements. turers to tailor chassis dynamics laser signals. Instead of waiting have led the company to switch to Prem Arora is director of is inherently trusted. Using this Devices are available that use on global vehicles for individual for each signal to return before cloud-based processing and stor - marketing at Microsemi scheme a proven, hierarchical, PUF technology to enable a PKI. markets, even before prototypes firing the next one, the controlled age, providing almost limitless certificate-based chain of trust can These devices provide a broad are available, significantly im - phasing allows the signals to be scope for further growth and en - be established because the signa - product roadmap with multiple IO proving development time and overlapped, increasing both the abling hundreds of CPU cores to ture applied by the transmitter can and fabric density options to allow costs. speed and quantity of data cap - work simultaneously on data pro - be verified by the receiver. This users to select a device that fits “We can capture and reproduce tured. cessing each project, further re - scheme also ensures that imposter their requirement. The sram PUF the differences between a frost- The company works with a core ducing timescales. machines can be easily detected. in these devices is used to estab - damaged Detroit highway, a group of regionally located scan - “Any vehicle manufacturer with According to the NHTSA, the lish a pre-configured certified bumpy minor road in Wales, a ning partners to provide global an established vehicle model and public key infrastructure option identity for each node in the net - smooth German autobahn or any coverage. All the partners have simulator can benefit from the (asymmetric key) using the signa - work with a certificate authority at other surface,” said simulator soft - added this latest phase-based road models produced using our ture method was deemed to offer the device level. These devices ware company RFpro’s technical scanning capability to the systems new digital road building capabil - the most effective approach to im - can also have built in crypto - director Chris Hoyle. “This means they use for RFpro’s road surveys. ity,” said Hoyle. “Even after pro - plementing communications secu - graphic capabilities such as hard - vehicle manufacturers located “As growing numbers of vehicle totype vehicles are available, the rity and trusted messaging for a ware accelerators for AES, SHA, anywhere in the world can evalu - makers ask us to reproduce their cost and logistical challenges of very large set of users. In addition HMAC and elliptic curve cryptog - ate their vehicle’s chassis re - favourite test route surfaces, our testing on roads in different conti - to providing a secure network, a raphy (ECC), plus a cryptographic sponse to any road type in a digital road modelling workload is nents can be reduced by the strate - PKI based system also provides grade true random number genera - realistic virtual environment, increasing rapidly,” said Hoyle. gic use of effective virtual Prem Arora an easy to scale infrastructure tor. These capabilities can also be without leaving the office.” “In 2012 we built just over testing.”

Page 15 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 16 IN-VEHICLE COMPUTERS IN-VEHICLE COMPUTERS From plane to train

How an in-vehicle computer originally developed for the Airbus A400M aircraft is helping train management in Australia

Page 17 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 18 IN-VEHICLE COMPUTERS IN-VEHICLE COMPUTERS

or rail operators, safety is a dundant processors onto a 6U implement it and the development trains and, finally, an increase in crucial factor. What has be - Compact PCI card and a VME bus costs. safety, see Fig. 2. come known as functional card. In addition to the three Originally developed for the The system controls vital and safety has seen new technologies Power PC-750 processors, redun - Airbus A400M aircraft and there - non-vital functions. The non-criti - Fin electronics ensuring ever-in - dancy has been implemented for fore protected against cosmic ra - cal section is implemented with a creasing reliability and safety in the main memory, the local power diation and in compliance with hybrid system, configured with trains and rail vehicles. In addi - supply, the clock and the flash aviation standard DO-245, the Compact PCI and Compact PCI- tion to the safety aspect, moderni - memory. The voter has been Compact PCI version of the card serial cards. The critical section is sation can also increase implemented as an IP core in is now also suitable for railway controlled by one or two of the cost-effectiveness and efficiency. Fig. 1: Structure of a 2oo3 system: a voter compares the an FPGA. use, and was the foundation of an threefold-redundant cards with a Automatic train operation results of the three redundant CPUs This requires much less power advanced train management sys - secure VxWorks certified operat - (ATO) and automatic train protec - and space than three individual tem (ATMS) in Australia. The ad - ing system. As the fail-safe CPU tion (ATP) play an important role cards and simplifies the software. vantages provided by the ATMS cards were certified according to in this. Automated operation has the safety and availability of the pact PCI, building a structure such The three Power PCs work in a include increased track use thanks Sil 4 in their own right, time and many advantages – accidents systems. Different redundancy as this is, mechanically speaking, so-called lock step architecture. to collision avoidance and there - costs were saved when certifying caused by human error are signifi - configurations can be used de - relatively simple – you simply The processors behave absolutely fore higher train frequency, the whole system. cantly reduced, maximum permit - pending on the desired outcome. triple all the cards. However, three synchronously. They constitute a greater schedule reliability, in - Compact and safe ted speeds can be fully exploited A 2oo3 or even a 2oo4 system is computers also need space, have single unit for the software – the creased flexibility and efficiency and train frequency on the tracks typically chosen by those who three times the power loss, and the redundancy is essentially invisi - of the rail network, cost savings After implementing most of the can be increased. wish to achieve a high level of software and the voter have to be ble. Therefore, the software itself thanks to lower fuel consumption, Compact PCI-based rail systems To guarantee reliable operation, safety and availability, see Fig. 1. more sophisticated. does not have to be redundant; fewer instances of track-side in 3U, it was only natural to trans - ATP systems monitor all relevant A voter is an integral part of this reduces the effort required to maintenance, decreased wear of fer the idea of on-board redun - Keeping it simple functions. Data from both systems such a complex system. It contin - are usually recorded in higher- uously compares and evaluates To meet the safety standards for level automatic train control sys - the calculated results. In cases of rail applications, such complex tems in the control centre, where inconsistency, the voter recog - structures are unavoidable. How - The computer was originally employees can intervene and take nises the defective CPU, but the ever, the systems are also required designed for the Airbus the appropriate action in case of system can continue to run with to be increasingly faster, more ad - A400M aircraft an emergency. the two remaining components. vanced, better and more cost-ef - Redundant computer structures If you use a modular system, for fective. And so the question arises are used to guarantee example Com - of how to achieve the same level of safety in less time and at a lower cost. The challenge is not to miss out on opportu - nities and to create clear ad - vantages over existing designs using new ideas. What would happen if every - thing could be a little bit more Fig. 2: compact and if the computer Advanced didn’t have to be constructed train using individual cards? If several manage - processors were accommodated ment system: the on one board? Would there then left section, in 6U, be enough space to handle over - controls all critical func - voltage? Could overheating be a tions; the remaining hybrid problem? system, in twofold 3U, controls the One company that has tried this non-critical functions is MEN Mikro. It has put three re -

Page 19 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 20 IN-VEHICLE COMPUTERS AUTONOMOUS DRIVING

tially, the cars will drive au - tonomously on selected roads Fig. 3: with suitable conditions, for ex - MTCS LOOK: ample without oncoming traffic, provides cyclists and pedestrians. not only NO HANDS “Making this complex system Sil 4- 99 per cent reliable is not good certified enough,” said Erik Coelingh, safety, but technical specialist at Volvo Cars. also an “You need to get much closer to open, 100 per cent before you can let application- self-driving cars mix with other ready road users. Here, we have a simi - platform lar approach to that of the aircraft industry. Backup systems will en - sure that autopilot will continue to function safely, also if an element of the system were to become dis - abled.” On the road, the complete tech - nology needs to handle even the most complicated scenarios, from dancy to an even more compact the final system. smooth commuting to heavy traf - format. Inspired by the opportunities Canopen and fic and emergency situations. And thus followed a 3U Com - posed by this compact rail com - Profinet. Communications be - “Just as good drivers would, po - pact PCI Plus IO SBC, with three puter, a concept for a complete Sil tween the units take place via olvo Cars claims to have based positioning systems and in - tentially critical situations are ap - Atom processors – but this 4-certified system for safe train real-time Ethernet and are ensured developed a complete sys - telligent braking and steering proached with sensible caution,” time with twofold redundancy. control was formed, and is in de - by safety protocols conforming to tem that makes it possible technologies. said Coelingh. “In a real emer - While two control processors velopment. EN 50159 (black channel). to integrate self-driving cars into “Autonomous driving will fun - gency, however, the car reacts form the safe control unit, an in - At the same time the modular If the overall system including Vreal traffic, with ordinary people damentally change the way we faster than most humans.“ dependent IO processor takes over train control system (MTCS) – see certification package for Sil 4 is in the driver’s seat. look at driving,” said Merten. “In When autonomous driving is no communications with the inter - Fig. 3 – not only claims to be an - not required, it is also possible to “We are entering uncharted ter - the future, you will be able to longer available – due to excep - faces. Two independent supervi - other fail-safe control for dedi - use just the fail-safe CPU cards ritory in the field of autonomous choose between autonomous and tional weather conditions, techni - sors check voltage, temperatures cated applications, but also offers with a certification package for driving,” said Peter Mertens, sen - active driving. This transforms cal malfunction or the end of the and frequencies, but also register an open, freely configurable plat - hardware and/or software or simi - ior vice president for R&D at everyday commuting from lost route has been reached – the internal errors in the relevant form for implementing different larly the fail-safe IOs. Volvo Car Group. “Taking the ex - time to quality time, opening up driver is prompted to take over processor and can, like the soft - individual functions or even con - citing step to a public pilot, with new opportunities for work and again. If the driver does not take Conclusion ware of every control processor, trolling a whole train. the ambition to enable ordinary pleasure.” over in time, the car will bring it - switch the card to a safe state. A With specially developed, The developers have understood people to sit behind the wheel in The autopilot system is designed self to a safe place to stop. discrete error-detection supervisor equally safe IO cards and a wide- the market requirements and have normal traffic on public roads, has to be reliable enough to allow the “Developing a complete techno - has also been assigned to the range power supply unit suitable done real pioneering work to meet never been done before.” car to take over every aspect of logical solution for self-driving FGPA, which controls communi - for railway use, the doubly redun - as many of the demands for train As the Drive Me project enters driving in autonomous mode. The cars is a major step,” said Coel - cations with the IO module. dant CPS card described earlier control systems as possible – safe, its second year, Volvo is moving main challenge is to design an au - ingh. “Once the public pilot is up With a QNX-BSP (Pikeos on re - forms the heart of the MTCS. compact, flexible and therefore rapidly towards the aim of placing topilot that is robust for traffic and running, it will provide us quest), both the hardware and Should the system be used as part cost-effective – specially tailored 100 self-driving cars in the hands scenarios as well as for technical with valuable knowledge about software are completely certified of an existing network infrastruc - to rail applications and thus con - of drivers on selected roads faults that may occur. implementing self-driving cars in according to Sil 4 – a correspon - ture, a slot can be used for con - forming to EN-50155 and suitably around Gothenburg by 2017. The It cannot be expected that the the traffic environment, and help ding certification package simpli - necting typical railway-related robust. All aboard for a safe, mod - key to making this leap is a com - driver is ready to intervene sud - us explore how they can con - fies the process considerably for Fieldbuses such as MVB, ern future! plex network of sensors, cloud- denly in a critical situation. Ini - tribute to sustainable mobility.”

Page 21 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 22 PRODUCTS PRODUCTS

opment tools support the 32bit MCUs improve API standard. Throttle position sensor A function automati - cluster experience cally corrects video out - put in accordance with for harsh environments elements of car design, A series of 32bit automo - such as windshields. The Available from TTI is a cycles for the D-shaft ver - tive microcontrollers for output video data can be Vishay throttle position sion, and more than five use in instrument clusters warped to fit an arbitrary sensor in hollow- and D- million cycles for the hol - that deliver easy-to- shape without frame shaft versions with Hall low-shaft version. The access information to delay. This lets head-up effect technology for ap - component provides con - support a safer and rich displays be added to the plications in harsh envi - tinuous performance for driving experience has instrument clusters. ronments. the life of the device with been introduced by Rene - There are functions for The Hall effect technol - no drift of linearity. sas Electronics. detecting system mal - ogy of the 981 HE device Spring-loaded versions For entry class and mid- tions, there are 22 prod - ables the creation of high- functions and monitoring gives it the ability to per - are also available. range vehicle systems, ucts in seven groups that precision animations on a functions that continu - form in conditions in - Supply voltage is 5V the RH850/D1x devices offer varieties of graphics large display to address ously verify information volving high-frequency ±10%, with other values integrate gauge control, and cost options. the requirement of mid- such as warnings. These vibrations up to 20G and available on request. Typ - graphics display and They provide software range cars, and also pro - functions also verify the shocks up to 50G over a ical supply current is functional safety in one reusability and scalability vides the power and gear position to ensure temperature range of -45 10mA, and 16mA for chip. They also enable to enable common plat - visibility for head-up dis - safety. to +125˚C. PWM output. output signals are also sensors, tilt control and scalable development and forms for instrument clus - plays. The engine sup - Samples are available With all electrical an - There is +20V over available. tilt positioning feedback, help designers implement ters. ports the Open VG 1.1 now. Mass production is gles available up to 360˚ voltage protection and - Applications include and suspension system instrument cluster sys - The graphics engine en - standard and HMI devel - scheduled for April 2016. with no dead band, the 10V reverse voltage foot pedal position sen - position sensors in ma - tems with reliable colour device has accurate lin - protection. The recom - sors, throttle position sen - rine, avionics, fork lift graphics LCDs. Development kit expanded for earity down to ±0.5%. mended load resistance is sors, steering position trucks, farm equipment, The MCUs incorporate The sensor offers a life 1kΩ for analogue and sensors, drive-by-wire, cranes and automotive up to 3.5Mbyte ram and MCU to include network support greater than ten million PWM output. Redundant lift and shuttle position environments. the company’s recently Synopsys has expanded its Virtualizer development kit for Renesas’ developed high-function - RH850 MCU family to include support for Ethernet AVB and Can-FD ality graphics engine sup - automotive network peripherals. The software development kit uses C0G capacitor range extended ported by a graphics RH850 virtual prototypes as a target with software debug and analysis library. These contribute Kemet has expanded its multilayer ceramic capac - claims is the world’s first pulse, high current, tran - tools. to a reduction in the commercial and automo - itors in C0G dielectric. 250V rated 0402 case size sient voltage suppression It enables automotive engineers designing electronic control units to amount of ram use and tive lines of surface This includes what it capacitors with values up and energy storage. start software development, integration and test months before hardware enable high-definition mount to 330pF. In addition, ca - The material used in is available. The Ethernet AVB and Can-FD models were developed LCDs without external pacitance offerings in these C0G devices elimi - through collaboration between Synopsys and Renesas. high-speed drams. This EIA 0603 to 2220 case nates piezoelectric noise, “The requirement for more communications bandwidth is requiring means systems can be de - size devices have been provides low ESR and tier one automotive suppliers and OEMs to deploy automotive network signed on low-cost, four- extended by over 30%. ESL, high thermal stabil - technologies such as Ethernet AVB and Can-FD,” said Naoki Yada, layer PCBs. To ensure These capacitors ity and no capacitance department manager at Renesas. upward scalability, vari - can be used in ap - decay with time. Avail - Can-FD extends the data rates of Can to 8Mbit/s. The Synopsys model ants with external dram plications such as able in commercial and can be integrated into any Synopsys VDK for RH850-based virtual pro - interfaces are available. critical timing, automotive grades, they totypes. It also integrates with Vector Canoe and rest-of-bus simulation By combining the com - tuning, decou - have a variety of termina - tools, enabling developers to work in a virtual environment that delivers mon basic functionality, pling, bypass, filtering, tion finish options includ - more debug and analysis capabilities than the physical environment. including gauge control blocking, circuits requir - ing matte tin, tin-lead and and in-car network func - ing low loss, circuits with gold.

Page 23 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 24 PRODUCTS PRODUCTS Heating elements warm electric vehicles Tool helps develop multi-sensor In contrast to tried and abling surface tempera - heating. PTC heating ele - tablishing a stable equi - tested heating elements tures of up to +250˚C to ments, connected in ar - librium. applications for 12V onboard power be achieved. Depending rays and installed in heat Depending on require - supplies, the Epcos PTC on the design, these ele - exchangers, suit this ap - ments, the elements can In launching Vadas De - flow is configured graph - elements from TDK are ments are suitable for safe plication as they are self- be manufactured in vari - veloper, Vector is intro - ically with a clearly for the considerably operation at up to 1kV. regulating. The flow of ous geometries and with ducing a tool for arranged layout. Visual higher voltage batteries in Whereas cars with com - current increases not only different electrical and developing multi-sensor Studio integration lets electric vehicles. bustion engines can use the temperature of these thermal properties. applications that has been users implement, debug The rated voltages of waste heat for heating the ceramic elements, but adopted by Baselabs. and test the application in these heating elements passenger compartment, also their resistance, thus It provides the infra - one tool. cover 200 to 500V, en - EVs require electrical limiting current and es - structure needed to de - They can develop data velop algorithms for fusion systems. The range Multi-radio modules suit in-car use driver assistance systems, of implementable appli - letting users develop, cations extends from ob - Automotive-grade, multi- RF front end, and con - concurrently. debug and test multi-sen - ject recognition by image radio modules from nects to its host via an The surface-mount sor applications quickly processing of sensor data U-Blox are for imple - SDIO 2.0 interface. module has a 14.8 by and conveniently. to sensor data fusion, for which can be seamlessly from Baselabs into its menting in-car wireless The dual-band Wifi ver - 14.8mm footprint and is In the development of example for multiple ob - integrated, gives develop - own tool chain, Vector is connectivity. Applica - sions (2.4 and 5GHz) re - 2.5mm high. Operating algorithms, the tool can ject tracking, as well as ers additional features for supporting the entire de - tions for the Ella-W1 se - duce interference temperature is -40 to acquire, visualise and re - adas functionality that is configuring and imple - velopment process for ries include hands-free problems from the +85˚C and they have au - play the data of all com - based on environment menting signal processing adas. While the primary telephony, in-car hot- crowded 2.4GHz band. tomotive qualification to monly used adas sensor perception. The tool is algorithms in data fusion. focus is on system devel - spots, rear view cameras nications over Wifi The modules operate si - VW 80000, ISO 16750-4, types – from cameras to also suited to the tasks of Other modules from opment, the Canape and gui mirroring. 802.11a/b/g/n, Bluetooth multaneously in client and European, USA and laser scanners – time syn - testing and evaluating C/C++ or Matlab and driver assistance option is The host-based, short- v3.0 + HS and Bluetooth (STA) and access point Canadian certifications. chronous to the bus mes - prototype systems. Simulink can be embed - used for validating object range transceiver mod - v2.1 + EDR. Each mod - (AP) mode, the latter en - Engineering samples sages. The modular Baselabs ded. recognition algorithms in ules provide simultaneous ule has an integrated mac, abling up to eight Wifi and development kits are The application’s data Create algorithm library, By adopting the tool the vehicle. and independent commu - baseband processor and clients to be connected available. Regulator ruggedised for high temperature Software development assessed

A fixed-voltage 5V linear ature changes from -55 to tion of high operating to ISO 26262 and IEC 61508 voltage regulator has +175˚C, line and load junction temperature and been ruggedised for high regulations. a low junction-to-case The Safe TI functional developed according to analysis test results, code have a test automation reliability and high tem - The chip is immune to thermal resistance re - safety software develop - TI’s certified software de - traceability to require - unit that uses the perature automotive and latch-up, resists ESD duces cooling require - ment process from Texas velopment process and ments, code coverage and LDRA unit and enables industrial applications. events up to 6kV (HBM) ments, for example by Instruments has been cer - are available for Hercules code quality metrics. users to re-execute in - The CMT-Antares from and is protected against using a smaller copper tified as suitable for de - microcontroller software They can reduce software cluded unit-level test Cissoid delivers up to short circuits and power thermal pad on the PCB. velopment of ISO 26262 components. These CSPs validation efforts and pro - cases in their environ - 200mA to the output load overloading by a current It is suitable for supply - and IEC 61508 compliant were developed to make vide work products that ment. from input voltages be - limiter. Over temperature +200˚C and 40V. ing automotive sensors software components. it easier for users of Her - assist in end system func - CSPs are available for tween 5.5 and 30V. The protection triggers above The device comes in a and actuators modules The process was assessed cules software to achieve tional safety certification. the Halcogen hardware output voltage is sta - +225˚C. Maximum ab - three-pin TO-263 plastic used close to the engine, by TÜV Nord. end system functional TI uses the LDRA suite abstraction layer code bilised to 5V ±5% includ - solute ratings for temper - package. The junction-to- the exhaust systems, In addition, Safe TI safety certification. of software analysis tools generator device drivers ing all possible variations ature and input voltage case thermal resistance is brakes, turbochargers and compliance support pack - The CSPs include static in the development of and the Safe TI diagnostic – initial accuracy, temper - extend, respectively, to 4.6˚C/W. The combina - exhaust gas recirculation. ages (CSPs) have been analysis and dynamic these CSPs, which also library.

Page 25 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 26 PRODUCTS PRODUCTS Drivers power Decoder and encoder combine exterior LEDs to provide bird’s eye view

LED drivers for low to ing output current reduc - A four-channel analogue Also incorporated are medium-power automo - tion, and a supply voltage video decoder with built- analogue anti-aliasing fil - tive exterior lighting ap - range of 5.5 to 40V. in analogue video en - ters on each channel input plications are available For devices with inte - coder for around-view to reduce component from Infineon. The Litix grated diagnostics, short parking assist applica - count further. Basic drivers are said to circuit, open load or diag - tions is available from “The decoder’s innova - reduce system complex - nostic-bus-between- Intersil. tive architecture and high ity and improve reliability devices functionality can Sensor IC has built-in The TW9984 can re - level of integration en - of turn indicator, tail, stop be chosen for LED chain place up to nine discrete ables an ultra-clear image and reverse LED lights. failure detection. The hysteresis detection components with a single to increase driver and They provide precise drivers are suitable for chip and can generate pedestrian safety, as well current control across a both centralised diagnosis The A1232 from Allegro coded into logic outputs 360˚ surround images for as avoid vehicle dam - wide voltage range. The – meaning the failure di - Microsystems is a Hall- representing the speed adas applications. camera was stationed di - A flexible digital output age,” said Philip Chesley, family consists of 15 pin- agnosis is controlled by effect speed and direction and direction of the tar - The device provides rectly above the vehicle. interface makes it easy senior VP at Intersil. compatible linear current the central body control sensor IC with built-in get. motorists with detailed, The monitor helps drivers for the designer to send AEC-Q100 qualified, it sources with one to three module – and for decen - hysteresis detection. The Factory trimming and high-quality video, en - visually confirm the vehi - the images to a processor integrates programmable output channels and cur - tralised diagnosis to en - sensitive temperature-sta - proprietary chopper sta - hancing their ability to cle’s position relative to that can then combine the automotive short diagnos - rent ratings from 60 to able real-time fault ble magnetic sensing de - bilisation and dynamic see objects not just be - surrounding objects for four images into a single tics – short-to-battery and 180mA. Versions support detection. In a decen - vice is for use in ring offset cancellation tech - hind the car but around easy manoeuvring and unified around-view short-to-ground detection diagnostic functions di - tralised architecture the magnet based speed and niques provide precise, the entire vehicle. An parking. image. The on-chip ana - – on each differential rectly at the LED’s point drivers communicate direction sensing systems symmetrical magnetic around-view monitor sys - It integrates four NTSC logue video encoder pro - input channel and sup - of load. This allows car with a microcontroller in harsh automotive and switch points over a wide tem processes video from and Pal analogue video vides the ability to ports 108MHz time mul - manufacturers to achieve that can be within the rear industrial environments. range of operating condi - four cameras and then decoders with 10bit transmit the combined tiplexed ITU-R BT.656 higher light quality. light or an extra-module It is the first device of tions. combines the four images ADCs to support four video as a standard ana - format to output four With parallel connec - near it. its kind with the ability to A built-in voltage regu - into a single bird’s-eye, analogue camera inputs logue composite signal to channels over a single tion of several drivers, Either way, the func - detect when it powers up lator, short-circuit pro - top-down view as if a simultaneously. the head unit display. 8bit data bus. load currents higher than tionality ensures that in the magnetic hysteresis tected outputs, internal the 180mA of individual faulty light functions can band. This reduces angle Zener clamps, reverse Editor and Publisher: © 2015 Vehicle Electronics devices can be realised. be quickly identified for accuracy error, which can battery protection, and a Steve Rogerson ISSN 2055-1177 There is overload and fast repair. This fulfils occur when edges are -40 to +150˚C operating [email protected] over-temperature protec - safety aspects and legal missed at start-up. range give the device the Vehicle Electronics is available to readers world - tion in all devices includ - requirements. The dual Hall elements ruggedness demanded by Advertising Manager: wide. It will be published approximately twelve Jayne Foster are spaced 1.63mm apart automotive applications. times a year in a digital-only format. All rights re - [email protected] and are photolithographi - Key applications in - served. No part of Vehicle Electronics may be re - cally aligned to within clude window lifts, sun - Web Site Manager: porduced or transmitted in any form or by any 1µm. roofs, sliding doors and Martin Wilson means, electronic or mechanical, including photo - The precise spacing of tail and trunk lift gates. It [email protected] copying or recording on any information storage the sensing elements is also suitable for non- system, without the written consent of the pub - eliminates a major manu - automotive applications Published by: Vehicle Electronics Magazine, lisher. The publisher cannot be held responsible facturing hurdle encoun - such as garage door open - 72 Westwood Road, Nottingham NG2 4FS, UK for loss or damge to unsolicited press releases or tered when using ers and window blinds. photographs. Views of contributors and advertis - Web site: vehicle-electronics.biz fine-pitch ring magnets. The device comes in an ers do not necessarily refelect the policy of Twitter: @velectronicsmag The signals from the dual eight-pin surface-mount Vehicle Electronics or those of the publisher. Hall elements are en - tssop. Page 27 , March 2015 Vehicle Electronics Vehicle Electronics March 2015, Page 28