Company overview: Automotive + TTEthernet

Ensuring Reliable Networks

Company Overview &
Overview Deterministic
Ethernet

Dr. Markus Plankensteiner
Director Industrial Solutions
markus.plankensteiner@tttech.com

www.tttech.com Copyright © TTTech Computertechnik AG. All rights reserved. Page 1

Megatrend Safety Ensuring Reliable Networks

Safety Becomes Omnipresent

• Automotive: 50 million injuries, out of those 1.2 million were fatal injuries
(3.300 per day according to WHO 2010)
• Industrial: Manufacturers lose over $ 20 billion each year in safety incidents
(Norm Gilsdorf, President of Honeywell Process Solutions at Honeywell User
Group 2010)
• Civil Aviation: In 2010 there were 47.3 million flight hours and 22.3 million
departures with 9 serious accidents
• Smart and safe mega cities
• Medical systems and healthcare for aging populations
• By 2020 every second embedded device will be safety relevant


TTTech Vision based on
Safety Platform Ensuring Reliable Networks

TTTech Provides Electronic Robustness
to a More Electric World

High High
Availability Reliability
for Wind, for Smarter
Green and
Power & More Electric
Grid Vehicles on
Automation Land & in
the Air

Ethernet That Always Delivers


What do they have in common … Ensuring Reliable Networks

Boeing 787 NASA Orion

… Reliable Networks and Controls from TTTech

Audi A8 Prinoth Leitwolf


Since 1998 TTTech has
Developed Succesfully … Ensuring Reliable Networks

TTTech Konzern
Betriebsleistung 48%
• Unique time-triggered and 35 33
safety know-how pool of 230+ 30
28% 2011
employees 25 22,3

MEUR
20 17,4
• Dynamic growth 2010
15
• Strong equity position 2009
10
• International footprint 5
0
• 16 M€ invest in R&D in 2011 Years

• Case study coverage


Elements of the TTTech
Cross-Industry Safety Platform Ensuring Reliable Networks

Dependable Modular
Communication Safety
with Controllers
Chip IP, ASIC Cert Packages SafeExe, Cert Package
DO-254 DO-178B/C SafeCOM, Safety Manual
ISO 61508 SafeMon
App. 1 App. 2 App. 3 App. 4

SafeCrossCheck
Checkpoint Checkpoint
„SafeApp1“ „SafeApp2“

SafeDispatcher

E2E-Lib
SafeCOM

Bootloader

OS
RTE

SafeSelfCheck
Checkpoint
„SafeCDR“

System Memory Comm.
Comm. I/O Complex
Services Services Services Services Drivers

SafeHAL BSP

Tools & Test Equipm. CPU & Safety I/O Blocks &
Middleware & Switches Companion Drivers
Partition 1 Partition 2 Ta
Partition
Task Task Task Task
1A 1B 2A 2B 3 sk
Partition
Partition OS Partition OS 3A
OS

IMA OS
Core TTE-COM Layer
Message
OS TTE-API 653
ARINC Channel API
Library Core OS Services
TTE-PCI
T R B
T Driver
HardwareE
C


Cross-Industry Safety &
Certification Ensuring Reliable Networks

Design assurance standards are similiar across industries

DO 178B / 254 ISO 26262 EN/ISO 13849 IEC 61508

System approaches are different
Fail-Stop Fail-Operational



Focus Automotive


Automotive Production Program Reference
Audi A8 Ensuring Reliable Networks

Communication Software
• FlexRay, CAN, LIN, Tools
• Performance optimized

Communication Safety Software
• End-to-end safety on FlexRay and CAN
• ISO 26262 ASIL D

Process Optimization
• Automated ECU Validation
• Testbench automation

Premium Engineering
• 10 Mbit/s physical layer
• Stable parameterizing and interoperability
• Software integration and prototype support
• Diagnostics specification
• Representation in FlexRay Consortium

Audi A8, A6, A4, … VW Touareg, … Bentley Arnage, Continental


Automotive Portfolio Ensuring Reliable Networks

Reliable Networks and Safe Communication
Reliable Networks and Safe Communication

Embedded Safety Safety Hardware for Testing Tools
Software E-Vehicles
• AUTOSAR Safe up to ASIL D • Modulare Safety Platform • Data Logger
• SafeCOM • IEC 61508 / ISO 26262 • FlexRay Tools
• SIL 2-3

Networks & Engineering


AUTOSAR Safety Software
Cooperation with Vector Informatik Ensuring Reliable Networks

Microsar Safe
up to ASIL D
with TTTech
Safety Modules

• Safety Elements out of Context (SEooC) according ISO 26262
• TTTech safety modules integrated with Vector MICROSAR
AUTOSAR BSW
• Certified or certifiable up to ASIL-D
• Integration according to Integration Safety Manual (ASM)
• AUTOSAR 3.0/1, 4.0, CANbedded, MICROSAR Safe


Modular Safety Controller
Roadmap Ensuring Reliable Networks

Aerospace & Automotive Off-Highway Industrial
Railway Special Purpose
Markt Expertise

Modular Safety Controller Roadmap
VCU90 ASIL C VCU500 ASIL D ISU500 ASIL D
ISO 26262 ISO 26262 ISO 26262

ISU90 ASIL C TTC500 SIL 3 FP ASIL D
ISO 26262 EN 13849 Pl E ISO 26262
Automotive
ECU TTC100 / TTC200 TTC90 SIL 2 VGSF500 SIL 3 EVECU ASIL D
Background IEC 61508 SIL 2/3 EN 13849 Pl D Industrial ISO 26262

1990 2003 2008 2010 2011 2012

Customer Program Hybrid ASIL D
ISO 26262

Customer Program Chassis
ISO 26262 ASIL D

Customer Program EV
ISO 26262 ASIL D
Customer-Specific Safety Controller Roadmap


Inverter Safety Unit (ISU) Ensuring Reliable Networks


Electric Rear Wheel Drive Ensuring Reliable Networks

Safety Control Unit
• ISO 26262 ASIL-D
• Drive function including torque vectoring
• Safety algorithms for monitoring
• SOP 2015


Data Logging Solution Ensuring Reliable Networks

TTXDataLogger

Key Features
• Complete vehicle data logging (all)
• Filtered and triggered data logging (selective)
• Precise timestamp (1 µs resolution)
• Measurement and calibration (CCP / XCP)
• API for sending and receiving (freely programmable)
• Central access to all bus systems via Ethernet
• Multi-step intelligent power management (sleep / deep sleep)



TTEthernet – SAE AS6802


Integrated Service Delivery in a
Single Ethernet Network Ensuring Reliable Networks

Synchronous
• SAE AS6802 clock synch
(IEEE 1588 compatible)
• Real-time control
• Ultra-low latency
• Safety systems

Available and Safe
Streaming
Automotive Ethernet
• ARINC 664
• Rate-constrained
• Audio/video
• Sensor fusion

Ethernet (IP)
• IEEE 802.3 standard traffic
• Best effort (IP)


Encapsulated Data Streams for Safety
and Availability Ensuring Reliable Networks

ISO 26262 ASIL D
(IEC 61508 SIL 3)
Data Stream Encapsulation
• TTEthernet controls data rates and
arrival timing against pre-set allocation

Synchronous
Traffic
tables
• Policing of data rates is enforced by
the switch

Rate Constrained
Streaming Traffic
• Based on TDMA scheme with Available and Safe
clock-synchronization Automotive Ethernet

Background raffic
Safety Argument
Best Efforf
• Data streams of different functionality
are protected against each other and
• Data streams of different criticality are
protected against each other
• By encapsulation


Technology Openness Ensuring Reliable Networks


TTEthernet Algorithms are
Standardized with SAE Ensuring Reliable Networks

Standard has been approved!
AS6802 "Time-Triggered Ethernet" is published by SAE
on November 1, 2011
http://www.sae.org/technical/standards/AS6802


Time-Triggered Networking
with TTTech Ensuring Reliable Networks

"We look forward to realizing the potential of TTEthernet
technology development, which provides a high bandwidth
• High-integrity, avionics databus capability supporting future technology
insertion.“
deterministic NASA statement
data network
communications
across
the vehicle
• Guaranteed
latency and
response time
for critical
sensors and
actuators

TTEthernet in Safety Management
Systems for Oil Platforms Ensuring Reliable Networks

100 Mbit/s TTEthernet variant
used with software-based
endpoints


TTEthernet in Offshore Wind
Turbines Ensuring Reliable Networks



Automotive TTEthernet
Projects


OEM Projects (1) Ensuring Reliable Networks

• R&D project on validation of
TTEthernet for High-Definition
(HD)
• Lane detection, traffic sign
recognition and object
recognition
• TTEthernet switch with nodes
executing TTEthernet stack on
top of standard Ethernet
controller
• Camera application for HD
capturing, splitting, cropping,
encoding and transmission



Project 2
• Evaluation project with different topologies and traffic loads
• Comparison with MOST and standard Ethernet

Project 3
• Architecture study for infrastructure backbone
• Safety-critical and non safety-critical control applications
• Simulation model development

Project 4
• Evaluation of low-latency communication and compatibility with
AVB



Project 5
• Part 1: compatibility between TTEthernet, AVB and standard
Ethernet
• Part 2: partitioning, fault isolation and fault-tolerance
2 4

8

1 6 7
TTEthernet
TTEthernet Switch
Switch
`

3 5

TTEthernet
AVB



What Automotive OEMs Say


Communication Solutions and
Safety Electronics for Audi Ensuring Reliable Networks

„Leadership in electronics is key for AUDI AG.
Therefore, reliable, deterministic communication
solutions and safety electronics from TTTech are
essential building blocks for our innovation roadmap“

- Ricky Hudi
Senior Vice President Electric/Electronic Development



TTEthernet Products


TTEthernet Products – Overview

Chip IP Development Systems
• Switches and End Systems • TTEDevelopmentSystem 1 Gbit/s v2.0
• Certification Package (RTCA • TTEDevelopment System 100 Mbit/s
DO 254) Configuration & Verification Tooling
Development Equipment • TTEBuild,
TTE Build Network
Switches  TTEDev
Switch 1 Gbit/s 12 Ports Configuration
 TTEDev
Switch 100 Mbit/s A664
Endpoints  TTEPMC Card, TTEPCI Card
• TTELoad
 TTEXMC Card, TTEPCIe Card • TTEView
Test and Simulation Equipment • TTEVerify (certification RTCA DO 178B)
• TTEMonitoring Switch 1 Gbit/s 12+1 Embedded Software
Ports • TTEProtocol Layer, TTEDriver and TTEAPI
• TTEMonitoring System Library
• TTEEnd System A664 Dev&Test • TTECOM Layer ARINC 653
• TTESync Library

Page 49

TTEthernet Development
Systems Ensuring Reliable Networks

TTEDevelopment System 100 Mbit/s
• TTEDevelopment Switch with 8 x 100 Mbit/s ports
• Two end system PCs with software-based TTEthernet as
Linux driver
• Configuration tools, development tools, TTEthernet API,
manuals
• Extendable demo application
in source code

Order Number: HE01.00.0

Page 50


Safe and Available
Automotive Ethernet


Overview Ensuring Reliable Networks

• Automotive scenarios
• Integration of all traffic classes on Ethernet
• Buffering, partitioning
• Availability and safety
• Compatibility with standard Ethernet and AVB and
support for Broadcom PHY and other physical layers
• Chip IP and ASIC roadmap


Automotive Adoption
Scenarios for Ethernet Ensuring Reliable Networks

HU
Front-camera

Video
GW RSE
ECU

Diagnosis interface

Phase 1: Subsystem Level Phase 2: Architecture Level
• Ethernet at subsystem level • Ethernet backbone: integration
• Examples: camera links, driver of powertrain, chassis, body,
assistance system, multimedia multimedia, driver assistance, …
• One Ethernet switch chip per • Two or more Ethernet switch
car chips per car


Ethernet Requirements for
Phase 2 Ensuring Reliable Networks

Integration of all traffic classes on a single network
• Standard Ethernet traffic (IP)
• Multimedia (audio / video streaming)CAN CAN
Radio DVD
• Surround sensing (video, radar, …, streaming)
• Diagnostics, Car2x (IP)
Main Front Main Rear
• Control loops (real-time, synchronous) Controller
IR Controller
Switch RSE
Switch
Rear
Camera
Camera
(e.g. Chassis (e.g. Gateway)
• Safety (real-time, synchronous, ISO 26262 ASIL D)
Controller)

• …
Radar Body
Controller
FX FX


Ethernet Requirements for
Phase 2 Ensuring Reliable Networks

Integration of all traffic classes on a single network
• Standard Ethernet traffic (IP)
• Multi-Media (audio / video streaming)
• Surround sensing (video, radar, …, streaming)
• Diagnostics, Car2x (IP)
• Control Loops (real-time, synchronous)
• Safety (real-time, synchronous, ISO 26262 ASIL D)
•…

Availability
• Different traffic classes must not have adverse impact on each other
• Even if one or more senders or switches are faulty


Compatibility with AVB Ensuring Reliable Networks

1. Clock Synchronization
• 802.1AS clock synchronization frames can be sourced from AS6802
mechanisms  safety argument
2. Traffic Shaping & Bandwidth Allocation
• Policing and traffic shaping supported
(slight differences between AVB and
ARINC 664)
• Dynamic bandwidth allocation supported
(lockable entries for safety)

Next Steps Availability
Safety
(Partitioning)
• AVB compatibility: definition of automotive
subset
• Opportunity AVB Gen 2: making AVB safe and
available (partitioning)

Ethernet Chip IP Roadmap Ensuring Reliable Networks

Phoenix Line
Phoenix Switch Phoenix End System
• 12x 1000 Mbit/s • 3x 1000 Mbit/s
• ARINC 664 p7, SAE AS6802 (2-FT) • AS6802 (2-FT)
• Off-chip COM/MON support • ARINC 664 p7 (without UDP/IP)
• On-chip mgmt. module • PCI/PCI express

Switch Switch (V&V) Switch ASIC
• Stratix IV • Stratix IV • 3rd party (ITAR)
End System End System (V&V) End System ASIC
• Stratix IV • Stratix IV • 3rd party (ITAR)

Pegasus Line
• 180MHz
Pegasus Switch • 768k RAMPegasus End System
• 6x 10/100/1000 Mbit/s • 3 MB Flash 3x 10/100/1000 Mbit/s
•
• 20x 10/100 Mbit/s • 16 PWM, 88DO 254 DAL A / SIL3 / ASIL D
• I/O
• DO 254 DAL A / SIL3 / ASIL D • SAE AS6802 MAC layer (1-FT)
• ARINC 664 p7, SAE AS6802 (2-FT) • ARINC 664 p7 UDP/IP layer
• On-/Off-chip COM/MON • Ext. Memory up to 16 MB QDR
• Ext. Memory up to 32 MB QDR • 32 bit PCI express, 16 bit A/D
• 16 bit A/D Mgmt. CPU I/F

Switch (development) Switch (certification) Switch (production)
• Altera Stratix IV • Altera Stratix IV • ASIC

End System (development) End System (certification)
• Altera Cyclone IV • Altera Cyclone IV
under
available planned
development

2010 2011 2012 2013 2014

Page 61

Chip Roadmap Ensuring Reliable Networks

Phoenix Line (Gen 2) IP
• Switch, client: FPGA-based solution available, space, aero and
landsystem use (e.g. NASA)

Pegasus Line (Gen 3) IP
• Fully scalable IP for switch and client
(100 Mbit/s and 1 Gbit/s ports)
• Safety: ISO 26262 ASIL D, DO 254 DAL A, IEC 61508 SIL 3
• Automotive, industrial and aerospace applications
• ASICs planned for 2014
• Compatible with BroadR-Reach© PHY
• Prototypes available

Software-based clients possible on µCs with Ethernet MAC


Synchronous vs.
Asynchronous Communication


Ethernet = Asynchronous
Communication Ensuring Reliable Networks

X
Asynchronous Communication
 Transmission Points in Time are not predictable
 Transmission Latency and Jitter accumulate
 Number of Hops has a significant impact
 Usually solved by High Wire-Speeds & Low Utilization
and/or Priorities
 Problem of ”Indeterminism” remains

Adding Clock Synchronization to
E
Ethernet TT

E
TT

E
TT

Eth

E
TT

TT TT E
E E TT

E
TT
E
TT
Eth

Time Master
15
88

Enabler for Synchronous Operation:
88
15
 Synchronized Global Time
Eth
 Communication Schedule

Synchronous / Time-Triggered
Operation Ensuring Reliable Networks

Time-Division Multiple-Access Communication
Composable network
Complexity reduction and faster integration
Fault tolerant communication system

Node A send receive receive
t1 t2 t3

Node B receive send receive
t1 t2 t3

Node C receive receive send
t1 t2 t3 time
Slot


Synchronous Communication (TT)

Synchronous Communication

X

Exactly one order of messages Mi
(in contrast to PERM(Mi) in async. comm)

Single-Master Clock
E
Synchronization TT

E
TT

E
TT

Eth

E
TT

TT TT E
E E TT

E
TT
E
TT
Eth

Time Master
15
88

Enabler for Synchronous Comm.:
88
15
 Synchronized Global Time
Eth
 Communication Schedule

Fault-Tolerant Clock Synchronization
E
Time Master TT

E
TT

E
TT TT
E
TT
E

Eth

E
TT

TT TT E
Time Master E E TT

E
TT
E
TT
Eth
Time Master
15
88

Fault-tolerant synchronization services 88
15
are needed for establishing a safe
global time base Eth



TTEthernet Technical
Overview


Mixed-Criticality Systems Ensuring Reliable Networks

Open Networks
How to share system
resources
and partition critical and
non-critical distributed
Windows
PC
functions?
Windows
PC

Network
TTEthernet
Linux
Server

Standard IEEE802.3
Ethernet LAN
F2 F4 F1 F2 F3 F4

F1 F2 F3 F4
F1 F2 F4 Time and space Time and space
partitioned OS partitioned OS

Time and space
Time and space partitioned OS
partitioned OS
Safety-, Time- or Mission-Critical System

TTEthernet, a Communication
Infrastructure Ensuring Reliable Networks
Highlight: Flexible Integration
and COTS Backward Compatible
TTE TTE
ETH FX

TTE TTE
CAN

FX
CAN

FX
CAN

FX
CAN
<1 Mbit/sec
FX
< 10 Mbit/sec

TTP TTP TTP TTP
FX TTE TTE
1 Gbit/sec

100 Mbit/sec
TTE
TTE TTE TTE


TTEthernet for Mixed-Criticality
Systems Ensuring Reliable Networks

Enables robust partitioning of all computing and
networking resources in one system Application

• Fault-tolerant distributed clock
• Hard real-time communication Layer
(µs jitter, fixed latency) 3-7
• Host critical controls, video, audio, LAN, …

In parallel, two types of Ethernet communications:
Time-Triggered Extension
 Synchronous (TDMA-style) Communication: TT
 Asynchronous (event-triggered style): RC + BE Ethernet IEEE 802.3


Integrated Dataflow Example Ensuring Reliable Networks

TT BE TT BE TT BE t Dataflow – Integration
3ms cycle 3ms cycle 3ms cycle
- Time-Triggered (TT)
- Rate-Constrained (RC)
de
r - Standard Ethernet (BE)
en
S 1 Sw
it ch
/R ou er
ter eiv
R ec

r
de
en
S 2

TT TT RC BE TT TT BE BE TT RC TT TT BE t

TT BE BE TT RC TT BE 3ms cycle 3ms cycle 3ms cycle
t
2ms cycle 2ms cycle 2ms cycle 2ms cycle 2ms cycle 2ms cycle
2ms cycle

6ms Cluster Cycle

TTEthernet Switch is also capable of changing traffic types,
e.g. a message received as RC can be relayed as TT

Example: 1,000 Frames (Industrial-
Sized) 1

2

5
3
Dataflow Links are enumerated 4 6
on the x-axis

RC/BE frames are also integrated
during TT phases.
12 …
RC
TT

RC
TT
RC
TT
RC
TT

Time-Triggered Only Time-Triggered
+ Event-Triggered


Summary


TTEthernet Advantages Ensuring Reliable Networks

• Compatible to IEEE 802.3 standard Ethernet
• Compatible with other standards (IEEE 1588, ARINC 664 and
partially with AVB)
• Support for different traffic classes – scalability and flexibility
• Fault-isolation: faulty component cannot affect the whole system
• Fault-tolerance and redundancy management
• Integrated security mechanisms
• Protection against masquerading and Denial of Service (DoS)
• Fault tolerant clock synchronization including security
• Certified mechanisms (clock sync, …)
• Integration of many functions/applications in one network
• Open technology – published as SAE AS6802 standard, IEEE
standardization planned
• Mature technology proven in several production programs


www.tttech.com


Company overview: Automotive + TTEthernet

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Company overview: Automotive + TTEthernet

Similar to Company overview: Automotive + TTEthernet (20)

Recently uploaded

Recently uploaded (20)

Company overview: Automotive + TTEthernet