Automotive CAN Networking: How Innovation Will Keep It ...

Company Public – NXP, the NXP logo, and NXP secure connections for a smarter world are trademarks of NXP

B.V. All other product or service names are the property of their respective owners. © 2019 NXP B.V.

Director Strategy & Business Development

PL IVN

Francesco Sindaco

Automotive CAN Networking: How Innovation Will Keep It Relevant for Next-Generation Networks

June 2019 | Session #AMF-AUT-T3503

COMPANY PUBLIC 1

PCA82C250 – First Philips transceiver

(shipped >15Mpcs in 2018)

SJA1000 – Standalone CAN controller

(shipped >4Mpcs in 2018)

Gen-2 and Gen-3 launched

TJA1042, TJA1051 became standard in

the market

HS-CAN becomes dominant automotive

networking technology

CAN FD and Ethernet rolling out

Partial Networking defined and rolls out

Node explosion, increased competition

Mantis launched with benchmark EMC

NXP acknowledged market leader

1993 – 2000 2000 – 2010 2010 – 2020

Innovation, Support,

Reliability and Expertise

Portfolio, “No Hassle” Quality

and Supplyleads on

COMPANY PUBLIC 2

More than Just Products NXP Delivers a “No-hassle” Experience

Quality Business Continuity Shaping the Future

Seeing the world through the

eyes of our customers

Agile, robust industrial base

to serve a fast-growing market

25+ years of IVN dedication

Go-To expert for car-makers

Co-innovating with CarmakersManaging thousands of Tier1sHandling billions parts

COMPANY PUBLIC 3

PPM data based on ABCD3 products

In-Vehicle Networking Portfolio Size2012: 62 products

2018: >130 products

Manufacturing Base2012: Single source

2018: Dual and Quad source(60% of CAN products now multi-sourced)

QUADDUAL

-

5

10

15

20

25

50

60

70

80

90

100

2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018

Car Production (Mcars) Node Count

PP

M

PPM actual PPM Prognosis

NXP Delivers a “No-hassle” Experience30% Annual PPM Reduction on a Growing, Diversifying Portfolio

NXP nodes/car

COMPANY PUBLIC 4

Car Networks in TransformationTowards Self-Driving and User-Defined Vehicle

COMPANY PUBLIC 5

Car Networks in TransformationToday:

Flat

• Low bandwidth, flat and open network

• One application per module

Unfit to Future Mobility

Tomorrow:

Domains

Gateway

Connected

Infotainment

Connectivity

Domain

Controller

Domain

Controller

Body &

Comfort

Domain

ControllerDomain

Controller

ADAS

Autonomy

• Multi-apps aggregated in big processors• Gateway handles cross-domain high speed traffic

To Autonomous Car

Flat to

Hierarchical

(H) EV &

Powertrain

Domain

Controller

After Tomorrow:

Zones

• Domains virtualized by SW – enabling high flexibility

• Easy enable/disable or update functions

To User-Defined Car

Zonal

Gateway

Zonal

Gateway

Zonal

Gateway

Zonal

Gateway

Signal-based to

Service-based

Central

Brain(s)

COMPANY PUBLIC 6

Car Networks in TransformationToday:

Flat

Tomorrow:

Domains

Gateway

Connected

Infotainment

Connectivity

Domain

Controller

Domain

Controller

Body &

Comfort

Domain

ControllerDomain

Controller

ADAS

Autonomy

Flat to

Hierarchical

(H) EV &

Powertrain

Domain

Controller

After Tomorrow:

Zones

Zonal

Gateway

Zonal

Gateway

Zonal

Gateway

Zonal

Gateway

Signal-based to

Service-based

Central

Brain(s)

5Mb CAN

1Gb Ethernet

Firewall

security10Mb CAN/Eth

10Gb Ethernet

E2E

security

Full Traffic Engineering

1Mb CAN

100Mb Ethernet

NO

security

NO traffic engineering Basic TSN Switches

COMPANY PUBLIC 7

Connectivity

Driver Replacement

Drivetrain

In-Vehicle Experience

Secure

Gate

ways &

Netw

ork

s4G / 5G / 802.11

BTLE / Wi-Fi / NFC

1-10Gb+

100Mb

SerDes

Body & Comfort

Boost performances

of speed, robustness

and security

Automotive grade

quality

System security

Standardization

Functional Safety

New Networks

for Self-Driving

and User-

Defined Car

Enhanced

Conventional

Auto Networks

COMPANY PUBLIC 8

Connectivity

Driver Replacement

Drivetrain

In-Vehicle Experience

4G / 5G / 802.11

BTLE / Wi-Fi / NFC

1-10Gb+

100Mb

SerDes

Body & Comfort

Boost performances

of speed, robustness

and security

Automotive grade

quality

System security

Standardization

Functional Safety

New Networks

for Self-Driving

and User-

Defined Car

Enhanced

Conventional

Auto NetworksSecure

Gate

ways &

Netw

ork

s

COMPANY PUBLIC 9

IVN Standards by Application: Old and New Converging

ADAS

body

engine

chassis + safety

IVI

system

complexity

0.1 1 10 100 1000

CAN FD

LIN

PSI-DSI

100BASE-T1

1000BASE-T1

SerDes

FlexRay

network

complexityspeed

Today

AD Level 3+

COMPANY PUBLIC 10


Today

AD Level 3+

ADAS

body

engine

chassis + safety

IVI

system

complexity

0.1 1 10 100 1000

CAN FD

LIN

PSI-DSI

100BASE-T1

1000BASE-T1

SerDes

FlexRay

network

complexityspeed

10BASE-T1S

initial

COMPANY PUBLIC 11


Today

AD Level 3+

ADAS

body

engine

chassis + safety

IVI

system

complexity

0.1 1 10 100 1000

CAN FD

LIN

PSI-DSI

100BASE-T1

1000BASE-T1

SerDes

FlexRay

network

complexityspeed

10BASE-T1S

initial

10BASE-T1S

ambition

COMPANY PUBLIC 12


Today

AD Level 3+

ADAS

body

engine

chassis + safety

IVI

system

complexity

0.1 1 10 100 1000

CAN FD

LIN

PSI-DSI

100BASE-T1

1000BASE-T1SerDe

s

FlexRay

network

complexityspeed

10BASE-T1S

initial

10BASE-T1S

ambition

CAN XL

ambition

COMPANY PUBLIC 13

CAN Networks in TransformationStrong Baseline, Plus Innovative Features

COMPANY PUBLIC 14

NXP’s CAN PortfolioC

lassic

CA

N

Typ.

500kbps 12V Systems

12V VeLIO Certified

24V Systems

Basic Transceiver + Standby Mode + Dual Channel Sleep

ModePartial

Networking5V MCU 3V MCU 5V MCU 3V MCU 5V MCU 3V MCU

TJA1057G TJA1057G/3 TJA1044G TJA1044G/3 TJA1046 TJA1059 TJA1043 TJA1145

N/A N/A TJA1044V TJA1044V TJA1046V TJA1059 N/A TJA1145

TJA1051 TJA1051/3 TJA1042 TJA1042/3 TJA1059 TJA1059 TJA1043 TJA1145

= in Development= in Production

COMPANY PUBLIC 15

MANTIS TJA1057GT and TJA1044GT Family

NXP’s family of CAN transceivers for mainstream 12V applications:

• Full fit for CAN FD 5Mbps – guaranteed acc. ISO11898-2:2016 and SAE J2284-4/-5

• Excellent EMC – meeting IBEE Zwickau limits at 500kbps without choke, 2Mbps with choke

• Multi-sourced – internal, robust supply chain with dual and quad sourced options available

• VeLIO-support offered with –V option for Japanese market

• SO8 and HVSON8 (with wettable flanks) package options

Transceiver Type CAN-FD - 5MbpsCAN-FD - 5Mbps

+ VIO OptionVeLIO Compliance

Basic HS-CAN TJA1057GT(K)SO8 & HVSON8 packages

TJA1057GT(K)/3SO8 & HVSON8 packages

N/A

HS-CAN with Standby mode TJA1044GT(K)SO8 & HVSON8 packages

TJA1044GT(K)/3SO8 & HVSON8 packages

TJA1044VT(K)/3SO8 & HVSON8 packages

Dual-CAN with Standby mode TJA1046TKHVSON14 package

TJA1059TK TJA1046VTKHVSON14 package

S O U R C EQUAD

COMPANY PUBLIC 16

TJA144x HS-CAN Transceiver Family

Complete HS-CAN transceiver portfolio covering all functions:

• TJA1441A, -B: Basic HS-CAN transceivers with VIO option

• TJA1442A, -B: Standby HS-CAN transceivers with VIO option

• TJA1442C, -D: Pin-to-pin replacements of TLEx250 series

• TJA1443A: Sleep HS-CAN transceiver

• TJA1448A, -B: Dual HS-CAN transceiver with VIO option

• TJA1448C: Latching option for use in gateways

Full coverage of all CAN FD and Global requirements

• Full compliance to ISO11898-2:2016, SAE J2284-x and VeLIO

• CAN FD bit timing and EMC compliant up to 5Mbps

• Unified WUP filters (twake = 0.5 µs … 1.8 µs)

High quality and consistent performance of complete portfolio

• Identical CAN IP ensures consistent behaviour across all products

• Full gap-free specifications

• Grade-0 (150°C ambient) variants available

Available in SO8 and HVSON8 packages

Available in SO14 and HVSON14 packages

Status: Sampling Now

COMPANY PUBLIC 17


lassic

CA

N

Typ.

500kbps 12V Systems

12V VeLIO Certified

24V Systems

CA

N F

D

Beyo

nd 1

Mbps

Transceiver Requirements:• 5 Mbps bit timing guaranteed

• 2 Mbps EMC IBEE compliant

• C&S CAN FD IOPT compliant

Option: 1.8μs Wake-up Filter

Time (relevant for 2023+)

Grade 0

CAN Signal Improvement

Isolated CAN

Secure CAN

Secure CAN + Sig. Imp.


ModePartial






TJA1441B TJA1441A TJA1442B TJA1442A

TJA1448BTJA1448A

TJA1448CTJA1443A TJA1145A

N/A N/A

TJA1044G/3 TJA1044G/3

TJA1442B TJA1442A

On request On request TJR1442B TJR1442A On request On request TJR1443A Possible


COMPANY PUBLIC 18

CAN InnovationRe-thinking the CAN transceivers ready for tomorrow’s networks

COMPANY PUBLIC 19

NXP Strategy to Enable Can TransformationProvide a Unique Toolbox of Solutions for Each Major Problem

Solve speed issues Cross voltage domains Contain hack damages

Provide fast, silent transceivers

Suppress signal ringing

Mix 48V and 12V domains

Standardize EV battery comm

Police CAN traffic

Contain hacked host

Digital innovationAnalog innovation

Drop-in, basic cyber-protectionSimplify mild-hybrid and BMSDesign freedom @ 2Mbps and 5Mbps

INSERT

PICTURECAN

CAN FD

100k

1M

10M

Data

Rate

(Bps)

COMPANY PUBLIC 20

TJA146xThe CAN transceiver. Re-invented.

A pin-compatible replacement to conventional CAN

transceivers – no further application changes

Actively improves bus signals removing ringing and

plateau effects, and greatly increases bit symmetry

Large, complex topologies at 2+Mbpsreduced cabling, avoid splitting networks due to ringing

(reducing connectors and GW routing), easier diversity

Accelerated networks running 5-8Mbpstargeting ADAS applications on CAN FD, e.g. RADAR

Supported by full worst case simulation model

Backward compatible with conventional transceivers

COMPANY PUBLIC 21

Complex topologies efficient from cost and production perspective

create lots of ringing

2Mbps bit time = 500ns

0.5V

500kbps bit time = 2000ns

Demand for faster bit-rates significantly reduces time to dissipate ringing

forces simpler topologies

Ringing is highly relevant for CAN FD networks because two demands directly conflict with

each other:

CAN FD Creates Major Cable Tension

COMPANY PUBLIC 22

Network Setup:

5 stubs of 5m, connected with a star termination of 60Ω at the star

Observed node

Signal Improvement Measurements

COMPANY PUBLIC 23

CAN FD Communication at 500kbps

Classical CAN Transceiver TJA146x Transceiver

Ringing visible with Classical transceiver, causing toggling on RxD.

With TJA146x, bus is quickly stable and RXD remains clean.

TXD

RXD

Vdiff(bus)

COMPANY PUBLIC 24

Classical CAN Transceiver TJA146x Transceiver

Ringing visible with Classical transceiver, causing toggling on RxD during sample point!

With TJA146x, bus is quickly stable and RXD remains clean.

TXD

RXD

Vdiff(bus)

CAN FD Communication at 2Mbps

COMPANY PUBLIC 25

TJA146x – Product Family

• Family of CAN FD Signal Improvement products, pin-to-pin compatible to

standard 8-pin and 14-pin HS-CAN transceivers

• Compliant to ISO 11898-2:2016 and SAE J2284-x for backwards compatibility

− Supports new WUP filter twake = 0.5 to 1.8 µs

• Far superior bit timing symmetry enabling higher performance networks

− Propagation delay = 190ns vs. 255ns ISO requirement larger network support.

− Much tighter symmetry performance translating into supporting more severe topologies.

• AEC-Q100 Grade-0 versions planned

Product Name Package Function Replacement Target

TJA1462AT(K) SO8 and (HVSON8) Standby Mode TJA1042T, TJA1044GTK

TJA1462BT(K) SO8 and (HVSON8)Standby Mode with VIO

TJA1042T(K)/3, TJA1044GT(K)/3

TJA1463AT(K)SO14 and (HVSON14)

Sleep Mode with VIO TJA1043T(K)

COMPANY PUBLIC 26

Future Outlook: CAN-XL – Extension of CAN FD

500 kbps

2 Mbps

5 Mbps

8 Mbps

10 Mbps

TJA146x redefined the market in terms of possibilities. Next challenge: extend CAN FD’s payload limit.

Arbitration DATA (64 bytes)

CRC

43% saving

19% saving

8% saving

26% saving5 Mbps

Diminishing Returns

By Contrast:(simplified example only) Double Payload

COMPANY PUBLIC 27

Future Outlook: CAN-XL – Extension of CAN FD

Target Use-Cases of CAN-XL:

• Bit rates between 2 – 10Mbps, where 100Mbps is overblown and FlexRay too complex.

• Networks which don’t require deterministic or IP-based communication.

• Applications where bus topologies give major cost advantage.

Examples:

• Connection of peripherals, e.g. sensors and actuators requiring 1 - 10Mbps.

• Audio e.g. microphone for eCall.

• Fast end-node links in zonal architectures.

TJA146x redefined the market in terms of possibilities. Next challenge: extend CAN FD’s payload limit.

COMPANY PUBLIC 28= in Development= in Production

NXP’s CAN Transceiver PortfolioNXP’s CAN Portfolio

Cla

ssic

CA

N

Typ. 500kbps

12V Systems

12V VeLIO Certified

24V Systems

CA

N F

D

Beyond 1

Mbps




Option: 1.8μs Wake-up Filter Time

(relevant for 2023+)

Grade 0


Isolated CAN

Secure CAN

Basic Transceiver + Standby Mode + Dual ChannelSleep Mode Partial







TJA1448BTJA1448A


N/A N/A

TJA1044G/3 TJA1044G/3

TJA1442B TJA1442A


Possible Possible TJA1462B TJA1462A Possible Possible TJA1463A Possible

TJA1052i Considered Considered Considered Considered

COMPANY PUBLIC 29

Secure CAN Transceiver

COMPANY PUBLIC 30

Did You Know?

>10

Vehicle hacks

published since 2015

1.4 M

Vehicle recalled

in the largest

incident to date

CAN-LEVEL security is an insurance against intrusion

Why now?

Wireless Interfaces

enable scalable attacks

250 M connected

vehicles on the

road in 2020

Why is it possible?

High System Complexity

implies high vulnerability

Up to 150 ECUs per car,

up to 200 M lines of

software code

Why hacking?

Valuable Data

attracts hackers

Car-generated data may

become a USD 750 B market

by 2030

Why does it affect?

Abusing ingenuous ECU

forces unintended behavior

Immediate intrusion

prevention is hard to

guarantee

Note: Most reported security incidents are safety critical due to capability to control the targeted ECU.

COMPANY PUBLIC 31

#1 Objective: no functional hazards

on mission-critical ECUs

Collaterals:

System availability ensured

Information received / processed trustworthy

Cyber-security is the mean to establish

availability and trust in the system

Driver Substitution

Powertrain &

Vehicle Dynamics

Connectivity

Driver Experience

Body & Comfort

Gate

wa

y

No Safety Without Security

COMPANY PUBLIC 32

NXP Secure CAN Transceiver TJA115xIntrusion Containment System

• Simple CAN transceiver replacement

− No Software - purely hardware based solution.

− Secure In-field reconfiguration possible

• Intrusion detection & prevention (IDS / IPS)

− On-the-fly CAN ID filtering (TX) and bus-guarding (RX) based on user configurable white & black list, preventing Spoofing & Tampering

− Support for Reporting & Logging

• Flooding prevention (DoS)

− Threshold on message transmission: leaky bucket strategy weighted on frame size

TJA115x CAN Transceiver

CAN

TXD

RXD

Host Leaky Bucket

TX

White List

RX

Black List

Message ID filtering

ID

ID

CAN supervisor protecting

• Own messages and

• Own bus behavior

Protecting & helping

the target of a hack

Guarantees legitimate senders

without cryptography

COMPANY PUBLIC 33

TJA115x – Spoofing Prevention – Transmit Path

• ECU 2 gets compromised and pretends to be another ECU (Spoofing)

• Only messages with ECU 2 legitimate ID can pass the TJA115x hardware filter!

• TJA115x TX Whitelist stops transmission of any non-legitimate ID from ECU 2

ID 0x400

ECU 2ECU 1

TJA

11

5x

CA

N P

HY

TX

White List

RX

Black List

ECU 3

Norm

al

CA

N P

HY

ID 0x400

Waiting for:ID 0x300

ID 0x400

TJA115x protects the network against sending non-legitimate ID´s

MC

U

CA

N C

trl.

MC

U

CA

N C

trl.

ID 0

x100

ID 0

x400

ID 0

x300

ID 0

x200

ID 0

x500

ID 0

x800

ID 0

x700

ID 0

x600

ID 0

x900

MC

U

CA

N C

trl.

ID 0

x400

ID 0

x100

ID 0

x400

ID 0

x300

ID 0

x200

ID 0

x500

ID 0

x800

ID 0

x700

ID 0

x600

ID 0

x900

ID 0

x400

ID 0

x400

ID 0

x100

ID 0

x200

ID 0

x500

ID 0

x800

ID 0

x700

ID 0

x600

ID 0

x900

ID 0

x300

Norm

al

CA

N P

HY

COMPANY PUBLIC 34

TJA115x - Spoofing Prevention – Receive Path• Compromised ECU 1 pretends to be another ECU (Spoofing)

• TJA115x RX Blacklist guards it´s own legitimate ID on the bus by detection and elimination with active error flag

TJA115x protects the network by guarding its own ID

ECU 1 ECU 2

TJA

11

5x

CA

N P

HY

MC

U

CA

N C

trl.

TX

White List

RX

Black List

ECU 3

Norm

al

CA

N P

HY

MC

U

CA

N C

trl.

ID 0

x100

ID 0

x400

ID 0

x300

ID 0

x200

ID 0

x500

ID 0

x800

ID 0

x700

ID 0

x600

ID 0

x900

Norm

al

CA

N P

HY

MC

U

CA

N C

trl.

ID 0

x400

ID 0

x100

ID 0

x400

ID 0

x300

ID 0

x200

ID 0

x500

ID 0

x800

ID 0

x700

ID 0

x600

ID 0

x900

ERROR

ID 0

x400

Invalidate non-legitimate Message

ER

RO

RID

0x400

ID 0

x400

ID 0

x100

ID 0

x200

ID 0

x500

ID 0

x800

ID 0

x700

ID 0

x600

ID 0

x900

ID 0

x300

Waiting for:ID 0x300

ID 0x400

COMPANY PUBLIC 35

ECU1

ECU4

ECU3

ECU2

Gateway

Firewalling

Flooding

Protection

Legacy

New Platforms

IDPS

Support

ECU1

ECU4

ECU3

ECU2

Gateway

Monitor

New PlatformsNew Platforms

ECU1

ECU4

ECU3

ECU2

Gateway

Offloading MCU

Saving Bandwidth

Saving keys

ECU1

ECU4

ECU3

ECU2

Gateway

Immediate protection

By HW – No SW!

Legacy

New Platforms

Confirmed OEM Use Cases

COMPANY PUBLIC 36

TJA115x Helps Reducing MCU Cost MCU Selection Based on Most Effective Performance Cost Ratio

Service/

Function

Security(Auth.)

Buffer

Normal

operation

Flooding attack

(rogue crypto traffic).

Keeping the receiving

node fully busy with

verification of messages!

Security(Auth.)

Service/

Function

Security(Auth.)

Service/

Function

Required MCU

adjustment to keep

full Service/Function

at flooding attack

MCU Cost Adder on

all receiver nodes

to cover for DoS due

to flooding!

Security(Auth.)

Service/

Function

Buffer

Security

Auth.Buffer

Service/

Function

Buffer

MCU Cost reduction on

all receiver nodes

due to lower

requirements

Reduction/

Denial of Service

Higher

Performance

required

MCU Cost

reduction due to

TJA115x

Higher CostConsequences:

Replacing

CAN on

Flooding

(Sender) node

with TJA115x

Re

qu

ire

d M

CU

Pe

rfo

rma

nce

:

COMPANY PUBLIC 37

TJA115x Helps for OTA Service for Legacy ECUsRequest for Legacy ECUs, Which Do Not Have a Strong Security Mechanism

• Place TJA115x at OTA Manager (Sender/Updater)

• CAN ID to address the OTA Client is part of the

BBL of the OTA Manager TJA115x

− Nobody else, other than the OTA Manager, can

update the OTA client

• OTA Client update is only possible by a trusted

OTA manager

− Running on authentic code following secure boot

− Enabling the CAN ID to address the OTA Client

only volatile in TWL – removing again before

closing config session

ECU1

ECU4

ECU3

ECU2

Update

Manager

ECU1

ECU4

ECU3

ECU2

Update

Manager

COMPANY PUBLIC 38

TJA115x Product Family

• Family of products to enable simple replacement:

− Without touching any Software

− Independent of any MCU

• Fully automotive qualified vs. AEC-Q100

• Operating temperature: -40 °C – 125 °C ambient

• Concept silicon and FPGAs available

38

Sleep Mode

TJA1153TK n.c.

Standby Mode

Normal Mode – To be covered with Stby

Partial Netw. - Planned for next generation

Product in development – timing subject to change

Type Package DescriptionReplacement Target for 12V applications

TJA1152AT SO8 8-pin TRX with Standby mode and VIO TJA1042T/3, TJA1049T/3, TJA1044T/3

TJA1152BT SO8 8-pin TRX with Standby mode TJA1042T, TJA1049T, TJA1044T

TJA1153ATK HVSON14 14-pin TRX with Sleep mode and VIO TJA1043TK

COMPANY PUBLIC 39


lassic

CA

N

Typ.

500kbps 12V Systems

12V VeLIO Certified

24V Systems

CA

N F

D

Beyo

nd 1

Mbps




Option: 1.8μs Wake-up Filter

Time (relevant for 2023+)

Grade 0


Isolated CAN

Secure CAN

Secure CAN + Sig. Imp.


ModePartial







TJA1448BTJA1448A


N/A N/A

TJA1044G/3 TJA1044G/3

TJA1442B TJA1442A



TJA1052i Considered Considered Considered Considered


Possible Possible Possible Possible Possible Possible Possible Possible


COMPANY PUBLIC 40

Final Message

• CAN is everywhere – and will remain with boosted

performances Security – Speed – CAN-XL

• NXP leads today on innovation, quality and “no hassle”

• Moving forward, it will continue to be our innovation

that differentiates doing business with NXP

Broad Portfolio

Expert Innovator

Supply chain

Excellence

Quality

Automotive CAN Networking: How Innovation Will Keep It ...

Documents

Transcript of Automotive CAN Networking: How Innovation Will Keep It ...