Post on 07-Jul-2020
COVER PAGE SUBTITLE PLACEHOLDER
COMPANY CONFIDENTIAL
New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers February 24, 2015
• Worried that your embedded code is vulnerable to attack or theft?
• Concerned about unauthorized access to your data messages?
• Need to add fast bulk data encryption or decryption without slowing down communications?
Introducing the LPC18Sxx and LPC43Sxx Families of Microcontrollers • Highest-performance LPC MCUs with high-speed connectivity and advanced peripherals
• Integrates security features to protect application code and data communications
• Can be seamlessly integrated with an NXP A-Series secure element to protect and manage platform credentials and authentication keys
Connectivity increases the threat to your application code, data, and device integrity
2.
How much protection is enough?
MCUs for embedded applica.ons LPC18Sxx/LPC43Sxx MCUs
Handles AES keys
Genera.on • So3ware RNG • True RNG • Cer.fied True RNG
Storage • Flash • Encrypted in OTP unique per device.
• Not so3ware readable.
• Extrac.on proof using banking-‐grade security.
Prevents so=ware tampering (so3ware integrity)
• Code read protec.on
• Code read protec.on
• Code read protec.on • Secure boot
• Secure boot with FW signatures verifica.on
• Secure firmware update
Establishes secure connecGon (message confiden.ality)
• So3ware authen.ca.on • So3ware authen.ca.on
• Hardware-‐accelerated tamper proof authen.ca.on and setup of session keys
Secures bulk message transfers
• AES so3ware encryp.on
• AES hardware-‐accelerated encryp.on
• AES hardware-‐accelerated encryp.on with tamper protec.on
+ A7 secure element + security hardware + security software
SECURITY SPECTRUM
KE
Y B
EN
EFI
T
3.
New LPC18Sxx and LPC43Sxx MCU Families
• Same LPC18xx & LPC43xx features • High-performance ARM Cortex-M cores: • Large internal memories and support for external
memory expansion • Multiple high-speed connectivity and display
• Plus features for protecting data communications & application code • Hardware-accelerated AES-128 encryption
engine for fast bulk encryption • Two 128-bit non-volatile OTP memories for
storage of encrypted, hardware-randomized AES keys to prevent cloning
• True random number generator for unique key creation
• Boot ROM drivers supporting secure boot of authenticated, encrypted firmware image
• Code read protection (CRP) prevents unauthorized access to internal Flash
4
LPC43Sxx
Consumer • Aftermarket automotive
accessories including telematics, data collectors, and navigation
• Mini printers • White goods HMI • Audio accessories/Musical
instruments • Thermostats
Industrial • Secure industrial gateway • Industrial controls • Industrial automation • Diagnostic equipment • Electronic instruments • Industrial automation
Medical & Fitness • Blood glucose meters • Medication Tracking
Energy Metering • Smart grid hub • Smart metering • Diagnostic
equipment
LPC18Sxx & LPC43Sxx Applications • Used standalone, with partner software, or paired with an
NXP A-Series secure element
5.
LPC18S57
Program and data memory expansion
LPC43S30
LPC18S/43S Use Case Examples
Secure IoT Gateway • High-speed encrypted connectivity via
Ethernet or WiFi with hardware AES • Secure boot protects software IP • TRNG for secure session keys • Optional smart card chip for
enhanced security • Add an A7 secure element for secure
key storage and authentication
Smart Meter Communications Hub • Secure boot protects code in QSPI • Fast bulk encryption limits time
connected to cellular network • A7 Series secure element
protects meter against physical attacks attempting to extract or determine keys
Secure key storage and authentication
RAM
I2C
AES engine
Cortex-‐M4F
SPI AES
engine
USART
PHY
USB
I2C
LCD Wireless dongle
NFC
Smartcard
TFT display Cortex-‐M3
Flash & RAM
Cortex-‐M0
EMC
SPIFI Quad SPI Flash
SDRAM
secure boot
A7/A8 Secure Element
secure bulk encryption SPI
Ethernet PHY
HAN
Ethernet TRNG
OTP keys
6.
Secure IoT Gateway: Medication Tracking
ESL Smart Solutions and Future Technology present the SMARTpack, an asset tracking device connected to the cloud • Allows real-time patient usage information to be tracked via a
tablet or smart phone • Uses a wide range of NXP technologies • MCU, NFC, Interface Products,
Standard Products
Cypherbridge Systems uCRYPT™ library utilizes MCU’s AES engine for real-time encryption • uSSL secures all data before it’s sent to ESL’s
EventMan Cloud™ • uLoad validates the legitimacy of firmware updates • uFile encrypts the local file system of the EMap™
7.
Development Tools LPCXpresso43S37 & 18S37 evaluation boards
LPC43S37 or LPC18S37 MCU
A7001CM secure element
OM13076: LPCXpresso18S37 board OM13073: LPCXpresso43S37 board
Quad SPI flash
Ethernet PHY High speed USB debug probe (Link2)
LPC general-purpose shield • SPI connected 128x64 mono LCD • Temperature sensor • Joystick and 4 LEDs via port expander • BMI160 accelerometer + gyroscope • Potentiometer
WiFi module (SDIO)
Ethernet RJ45
PMOD Expansion Connector
8.
SDIO socket
Virtual Kit with LPCXpresso board + Connectivity Shield + WiFi module