Securing Intelligent Industrial and Networking Devices

Transcription

1 Securing Intelligent Industrial and Networking Devices Cost-optimized QorIQ P1010 and P1014 microprocessors Franck Roux Network Processor Channel Marketing Freescale, the Freescale logo, AltiVec, C-5, CodeTEST, CodeWarrior, ColdFire, C-Ware, t he Energy Efficient Solutions logo, mobilegt, PowerQUICC, QorIQ, StarCore and Symphony are trademarks of Freescale Semiconductor, Inc., Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, ColdFire+, CoreNet, Flexis, Kinetis, MXC, Platform in a Package, Processor Expert, QorIQ Qonverge, Qorivva, QUICC Engine, SMAROS, TurboLink, VortiQa and Xtrinsic are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners Freescale Semiconductor, Inc.

2 P1010 Product Positioning P1010 Target Segments P1010 Product Value P1010 Collaterals 2

3 Smart, Efficient Networking Backbone for Trusted Connections 3 Tablets ereaders Smartbooks Mobile Devices Smartphone Residential Gateway Smart Meter Factory HMI Medical Devices Smart Energy Grid Telematics Auto Infotainment Machine to Machine Energy Gateways Human Collaboration Video/IP Phones Wireless Access Points Touchscreen Printers Mobile Computing Desktop Computing The P10xx SoC portfolio is broad reaching, with strong adoption across segments 3

4 Freescale security and assurance investment and commitment is unwavering The security engine (SEC4.x) is a mature fourth generation architecture Freescale has integrated security technology for both acceleration and trust on over 30 SoC s Freescale trust architecture is proven on previous SoCs in multiple applications Freescale has an extensive product investment in low end QorIQ 32-bit processors (P1020/11, P1021/12, P1022/13, P1023/17, P2020/10) which allows end customers to build a large number of product SKUs with a single investment Proven partnership program and reference designs MSBG, WLAN, and U reference designs allowing customer to connect with leading ODM partners for a quick time-to-market solution 4

5 Additional value for security, industrial and networking devices with cost-optimized QorIQ P1010 and P1014 microprocessors High performance Trust architecture Highly integrated Line rate performance Investment protection Flexible I/O for cost-optimized networking and industrial applications Software fast path acceleration Delivers up to line rate performance for IPv4 ideal for cost-sensitive networking applications Highly efficient core at 2.4 D/MIPs to MHz, can get more work done per clock cycle Hardware acceleration 64-bit SIMD DP floating point Security acceleration Key to establishing a trusted, secure system Prevents unauthorized code from being run on a system Secure debug interfaces, so access beyond the debug port can be disabled or conditionally allowed via a challenge response mechanism FlexCAN controllers Interface providing factory automation segment with an advantage to implement industrial application protocols Featuring DDR3 & DDR3L, SATA controllers, PCI Express, integrated flash controller, Gigabit Ethernet controllers with SGMII to reduce bill of materials and board size 5

6 QorIQ P5 P5020/P5010 Up to 2.2 GHz, <30W max, 64-bit core QorIQ P4 P4080/P4040 Up to 1.5 GHz, <30W max QorIQ P3 P3041 Up to 1.5 GHz, <15W max, QorIQ P2 P2040,P2041 P2020/P2010 Up to 1.5 GHz, <17W max QorIQ P1 New! P1010/P1014 P1020/P1011, P1025/P1016, P1021/P1012, P1024/P1015, P1022/P1013, P1023/P1017 Up to 1.2GHz, <5W max NEW! Network complexity driving need for more memory space (ie. routing tables) Size, weight, power and performance (SWaPP) Combining data + control plane with a many core solution Infrastructure consolidation leading to data + control plane Power constrained to < 15W Pervasive network connectivity with triple play convergence High integration for a cost-effective, low power platform Metro Carrier Edge Router Unified Threat Mgmt Service Provider Routers IMS Controller Converged Media Gateway VoIP Carrier-Class Media Gateway Integrated Services Router Network Admission Controls Radio Network Control SSL, IPSec, Firewall Wireless Media Gateway Network Attached Storage Storage Networks Serving Node Router Access Gateway Base Station Digital Video Surveillance 6

7 e500 v2dp, MHz 256 KB frontside L2 cache w/ecc, HW cache coherent bit physical addressing System unit 16/32-bit DDR3, 800 MHz data rate w/ecc Integrated SEC 4.x Lite Security Engine with secure boot Flash controller supporting NOR, SLC and MLC-based NAND devices One USB 2.0 controllers host/device support with integrated PHY SD/MMC card controller supporting booting from flash cards Software fast path acceleration with (3) 10/100/1000 Ethernet controllers w/ jumbo frame support, SGMII interface, IEEE 1588v2 support Two PCI Express 1.0a controllers operating up to 2.5 Gbps Two SATA controller, 3.0 Gb/S Two ecan3.0 controllers 4x UARTs, 2x I 2 Cs Process and package 45nm SOI 425-pin TEPBGA I (19 mm x 19 mm, 0.8 mm pitch) <3W power consumption Samples available at EBV Security Accel XOR TDM Accelerators e500 Core 32 KB I- Cache 32 KB D- Cache 3x VeTSEC P1014 product supports: 2 VeTSEC No FlexCAN controllers 16-bit DDR3 only No support for secure boot 256 KB L2 Coherency Module System System Bus Bus 1x DMA On-Chip Network 2x SATA x6 SerDes PCI Express Processor Interface Controller DDR3/3L, SDRAM Controller (IFC) Flash Controller Perf Mon, 2x DUART, MPIC 2x I 2 C, Timers USB2.0 w./ PHY SD/MMC SPI 2x ecan 3.0 PCI Express 7

8 8

9 Typical power dissipation in extended temp 9

10 P1010 P1014 P1011 P1015 P1020 P1024 P1012 P1016 P1021 P1025 P1022 P1013 P1023 P1017 CPU e500 up to 800 MHz * 32K I/D e500 up to 800 MHz * 32K I/D Dual e500 up to 800 MHz* 32K I/D Dual e to 800 MHz* 32K I/D Dual e to 800 MHz* 32K I/D Dual & single e500 up to 1200 MHz 32K I/D Dual & single e500 up to 800 MHz 32K I/D L2 Cache 256 KB DDR2/3 32-bit 256 KB DDR2/3 32-bit 256 KB DDR2/3 32-bit 256 KB DDR2/3 32/64-bit 256 KB DDR2/3 32/64-bit 256 KB DDR2/3 32/64-bit 256 KB DDR3 32-bit 10/100/1000 Ethernet (with IEEE1588v2) 3 w/(2) SGMII 3 w/(2) SGMII 3 w/(2) SGMII 3 w/ SGMII 3 w/ SGMII 2 w/ SGMII 2 w/(2) SGMII TDM Yes Yes Yes Yes Yes - - PCI-Exp 1.0a 2 controllers w/4 SERDES 2 controllers w/4 SERDES 2 controllers w/4 SERDES controllers w/6 SERDES 3 controllers w/4 SERDES USB2.0 1 plus PHY QUICC Engine Utopia L2 interface A support Utopia L2 interface A support - - Memory Card SD/MMC SD/MMC SD/MMC SD/MMC SD/MMC SD/MMC - Other Interfaces SPI, 2xI 2 C, 2xDUART, 2 Flex CAN SPI, 2xI 2 C, DUART SPI, 2xI 2 C, DUART SPI, 2xI 2 C, DUART SPI, 2xI 2 C, DUART Dual- SATA, LCD I/F, SPI, 2xI 2 C, DUART DPAA SPI, 2xI 2 C, DUART Accelerators SEC4.0 Lite SEC3.3 SEC3.3 SEC3.3 SEC3.3 SEC3.1 SEC4.2 Package 425 TePBGAI 689 TePBGAII 561 TePBGAI 689 TePBGAII 561 TePBGAI 689 TePBGAII 561 TePBGAI 689 TePBGII561 TePBGAI 689 TePBGAII 457 TePBGAII *P1015, P1024, P1016, P1025 scale to 667 MHz in a 561 TePBGA package 10

11 Network Attached Storage / Digital Video Surveillance Cost-Efficient Routing Applications 11 Hard Drives Flash Memory Ethernet Switch Flash Memory Video Card n PCIe PCI Express SATA IFC DDR3 P n To LAN PCI Express 3x GE IFC P1010E DDR3 To LAN To WAN GE PHY 2xGE USB+PHY SLIC Codec TDM USB SATA Hard Drive, Printer, or External CE Device UART, SPI, GPIO Hard Drive, Printer, or External CE Device DUART, SPI, GPIO (NAS/DVR) systems benefit from leading performance and integration (PCI Express and SATA interconnects), enabling higher storage throughput in low BOM systems. Industrial networking applications enjoy the unique product differentiation of a trusted architecture that enables complete code signing and secure boot. Coupled with the integration of industrial interfaces (CAN) and outstanding performance in a power envelope of less than 1.1W to provide the ingredients for the most innovative designs in the segment abg n Ethernet Switch To LAN Industrial Networking PCI Express 3x GE Hard Drive, Printer, or External CE Device USB Flash Security Boot P1010E CAN Memory UART, SPI, GPIO Cost-sensitive routing applications enjoy the benefits of software data path acceleration to increase networking performance. A small package (19 x 19 mm) and low power will enable low bill of materials fanless designs 11

12 On-chip L2 cache Supports stashing and line locking Multiple concurrent processor data busses 128-bit L2 read bus 128-bit write bus 64-bit DRAM read bus CPU performance monitor SoC-level performance monitor and trace buffer Independent core frequencies Significant improvement over previous generation 12

13 -Fast path software acceleration -Unique drivers that accelerate performance of IPv4, NAT firewall and IPSec 13

14 New IPs/blocks Integrated flash controller (IFC) replacing the elbc Integrated USB PHY first in 45nm devices Secure boot first in the P1 series DDR3L first in Freescale devices FlexCAN first in P1 series Sec 4.x first in P1 series 14

15 Integrated flash controller (replacement for elbc) Value: Functional muxing of pins between NAND 512 to 4K Bytes Page, NOR and GPCM Flash controller with four chip selects Support memory banks of size 64 KBytes to 4 GBytes Write protection capability 15

16 DDR memory controller Value: DDR3/DDR3L (lower power) with support for a 32-/16-bit data interface (32-bit without ECC and 16-bit with ECC), up to 800 Mbps data rate DDR3 memory controller 4 chip selects Four layer boards can be designed with discrete DDR memories Security engine (Sec 4.4) Value: SNOW, Kasumi and ARC4 Completely new IP for P1 family but similar to P4080 FlexCAN: Two CAN controllers providing factory automation segment with an advantage to implement industrial application protocols Value: Multimaster broadcast serial bus standard for connecting electronic control units 16

17 17 Home energy gateway/data concentrators Scalability in performance and cost to support different product SKUs and number of users Low power, simplified thermal design enabling fanless design for higher reliability Multimode radio support Flexibility to enable multiple product derivatives DDR2/3, Gigabit Ethernet, USB, TDM and PCI Express interconnects Wireless LAN FCC Class A certified, production-ready system Support for power-over-ethernet and N 3x3 MIMO Atheros and Ralink support for wireless Based on market-proven open source software VortiQa commercial software stacks Customizable applications depending on configuration Universal threat management Full-featured software platform with integrated networking protocols, VPN, stateful inspection firewall, wireless LAN security bundled with a simplified user interface High-performance VPN, IDS/IPS-based solution Comprehensive stateful packet inspection firewall certified by ICSA Labs Highly interoperable and standards-based VPN certified by ACSA Labs and VPNC 17

18 Documentation Reference manual, HW spec, errata (available under NDA) Design check list (available under NDA) Application notes (Refer to Freescale P1010 website) Reference designs P1010RDb-PA / resale $499/ Development environment Unified software development kit (USDK) CodeWarrior v8.8 18

19 Memory 1 GB DDR3 (8-bit x 4 chips), supports up to 8 GB on-board DDR3 SDRAM 32 MB (16-bit) NOR flash memory 32 MB SLC NAND flash memory 256 KB I 2 C EEPROM 128 MB SPI flash SD/MMC connector to interface with the SD memory card PCI Express One standard PCI Express connector One mini PCI Express connector SATA One internal SATA connected to G SATA 2 HDD One esata connector to rear panel USB 2.0 One USB 2.0 port connected via UI PHY to mini AB interface One USB 2.0 port directly connected to mini AB interface Three 10/100/1000 ports etsec 1 connected to RGMII PHY etsec 2 and 3 connected to SGMII PHY FlexCAN Two connectors for field bus interface Others DUART interface, terminated as RJ45 connectors JTAG for debugging IEEE 1588 v2 signals for test and measurement Mini ITX form factor 19

20 QorIQ P1 Platform Summary Aligned Instant, with industry on-the-go trends access and to customer the latest requirements Freescale information so Trust architecture customers prevents get the unauthorized answers they code want on running on the system spot. Low power for reduced energy consumption and BOM cost Low cost of ownership Broad portfolio of P1 platform processors provide pin- and softwarecompatibility for scalability and ease of migration Proven suite of reference designs and an extensive ecosystem of software providers enabling customers to invest in their own differentiating technology and IP Performance Highest DMIPS performance in the market Proven architecture via re-use of existing IP blocks Proven advanced 45nm SOI process technology for aggressive scaling of die size, power and performance 20

21