New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for...

Post on 07-Jul-2020

2 views 0 download

Transcript of New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for...

COVER PAGE SUBTITLE PLACEHOLDER

COMPANY CONFIDENTIAL

New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers February 24, 2015

•  Worried that your embedded code is vulnerable to attack or theft?

•  Concerned about unauthorized access to your data messages?

•  Need to add fast bulk data encryption or decryption without slowing down communications?

Introducing the LPC18Sxx and LPC43Sxx Families of Microcontrollers •  Highest-performance LPC MCUs with high-speed connectivity and advanced peripherals

•  Integrates security features to protect application code and data communications

•  Can be seamlessly integrated with an NXP A-Series secure element to protect and manage platform credentials and authentication keys

Connectivity increases the threat to your application code, data, and device integrity

2.

How much protection is enough?

MCUs  for  embedded  applica.ons   LPC18Sxx/LPC43Sxx  MCUs  

Handles  AES  keys    

Genera.on   •   So3ware  RNG   •  True  RNG   •  Cer.fied  True  RNG  

Storage   •  Flash  •  Encrypted  in  OTP  unique  per  device.  

•  Not  so3ware  readable.  

•  Extrac.on  proof  using  banking-­‐grade  security.    

Prevents  so=ware  tampering  (so3ware  integrity)  

•  Code  read  protec.on  

•  Code  read  protec.on    

•  Code  read  protec.on    •  Secure  boot  

•  Secure  boot  with  FW  signatures  verifica.on  

•  Secure  firmware  update  

Establishes  secure  connecGon  (message  confiden.ality)  

•  So3ware  authen.ca.on   •  So3ware  authen.ca.on  

•  Hardware-­‐accelerated  tamper  proof  authen.ca.on  and  setup  of  session  keys  

Secures  bulk  message    transfers  

•  AES  so3ware  encryp.on  

•  AES  hardware-­‐accelerated  encryp.on  

•  AES  hardware-­‐accelerated  encryp.on  with  tamper  protec.on  

+ A7 secure element + security hardware + security software

SECURITY SPECTRUM

KE

Y B

EN

EFI

T

3.

New LPC18Sxx and LPC43Sxx MCU Families

•  Same LPC18xx & LPC43xx features •  High-performance ARM Cortex-M cores: •  Large internal memories and support for external

memory expansion •  Multiple high-speed connectivity and display

•  Plus features for protecting data communications & application code •  Hardware-accelerated AES-128 encryption

engine for fast bulk encryption •  Two 128-bit non-volatile OTP memories for

storage of encrypted, hardware-randomized AES keys to prevent cloning

•  True random number generator for unique key creation

•  Boot ROM drivers supporting secure boot of authenticated, encrypted firmware image

•  Code read protection (CRP) prevents unauthorized access to internal Flash

4

LPC43Sxx

Consumer •  Aftermarket automotive

accessories including telematics, data collectors, and navigation

•  Mini printers •  White goods HMI •  Audio accessories/Musical

instruments •  Thermostats

Industrial •  Secure industrial gateway •  Industrial controls •  Industrial automation •  Diagnostic equipment •  Electronic instruments •  Industrial automation

Medical & Fitness •  Blood glucose meters •  Medication Tracking

Energy Metering •  Smart grid hub •  Smart metering •  Diagnostic

equipment

LPC18Sxx & LPC43Sxx Applications •  Used standalone, with partner software, or paired with an

NXP A-Series secure element

5.

LPC18S57  

Program and data memory expansion

LPC43S30  

LPC18S/43S Use Case Examples

Secure IoT Gateway •  High-speed encrypted connectivity via

Ethernet or WiFi with hardware AES •  Secure boot protects software IP •  TRNG for secure session keys •  Optional smart card chip for

enhanced security •  Add an A7 secure element for secure

key storage and authentication

Smart Meter Communications Hub •  Secure boot protects code in QSPI •  Fast bulk encryption limits time

connected to cellular network •  A7 Series secure element

protects meter against physical attacks attempting to extract or determine keys

Secure key storage and authentication

RAM  

I2C

AES engine

Cortex-­‐M4F  

SPI AES

engine

USART

PHY

USB

I2C

LCD Wireless dongle

NFC

Smartcard

TFT display Cortex-­‐M3  

Flash  &  RAM  

Cortex-­‐M0  

EMC

SPIFI Quad SPI Flash

SDRAM

secure boot

A7/A8 Secure Element

secure bulk encryption SPI

Ethernet PHY

HAN

Ethernet TRNG

OTP keys

6.

Secure IoT Gateway: Medication Tracking

ESL Smart Solutions and Future Technology present the SMARTpack, an asset tracking device connected to the cloud •  Allows real-time patient usage information to be tracked via a

tablet or smart phone •  Uses a wide range of NXP technologies •  MCU, NFC, Interface Products,

Standard Products

Cypherbridge Systems uCRYPT™ library utilizes MCU’s AES engine for real-time encryption •  uSSL secures all data before it’s sent to ESL’s

EventMan Cloud™ •  uLoad validates the legitimacy of firmware updates •  uFile encrypts the local file system of the EMap™

7.

Development Tools LPCXpresso43S37 & 18S37 evaluation boards

LPC43S37 or LPC18S37 MCU

A7001CM secure element

OM13076: LPCXpresso18S37 board OM13073: LPCXpresso43S37 board

Quad SPI flash

Ethernet PHY High speed USB debug probe (Link2)

LPC general-purpose shield •  SPI connected 128x64 mono LCD •  Temperature sensor •  Joystick and 4 LEDs via port expander •  BMI160 accelerometer + gyroscope •  Potentiometer

WiFi module (SDIO)

Ethernet RJ45

PMOD Expansion Connector

8.

SDIO socket

Virtual Kit with LPCXpresso board + Connectivity Shield + WiFi module