CodeMeter µEmbedded from Wibu-Systems enhances the standard tool chain to provide secure firmware updates or functional upgrades in embedded systems built around the XMC4000 microcontrollers made by Infineon Technologies. This ARM Cortex™ family features a huge set of connectivity peripherals and is designed for controls of industrial applications, especially in harsh environments. It predominantly addresses five target markets: factory automation, building automation, transportation, power and energy, and home and professional applications. What these have in common is the many and diverse security challenges they face. With CodeMeter µEmbedded, software developers of field programmable gate arrays and microcontrollers can protect their application code and intellectual property against reverse engineering and implement a license control system. The technology represents a practical answer to common security needs: How to protect intellectual property that is shared with a contractor from cloning, how to provide secure firmware upgrades in the field, how to make sure that only authorized devices are built in factory machines, or how to enable additional functionality in a microcontroller that is already operational in the field. The tools for the protection of the application code are fully integrated in the development platform DAVE™. The user-friendly dialogue frontend of CodeMeter µEmbedded created for the DAVE plugin is a great help also to those developers who have little cryptography skills in their arsenal. In one single dialogue, they are able to input all required security settings to guarantee the effective and thorough integrity protection of their machine code. Watch the webinar: https://youtu.be/QlJuBbG8wZs

1. μCodeMeter
Security Embedded in XMC4000
Marco Blume WIBU-SYSTEMS AG
Dirk Heinen Infineon AG
Embedded Security Cooperation

2. XMC Microcontroller
High Volume Production
ARM Cortex™ - M4 (with FPU)
• CPU Frequency up to 120MHz
• Timers CCU4, CCU8, POSIF
• USB / Up to 3x CAN / Up to 6x Serial Channels
• High Resolution PWM
• Interconnect Matrix
• 2x 12Bit ADC / 2x DAC
• TA = -40C to 125C
ARM Cortex™ - M0
• Core 32MHz / Peripherals up to 64MHz
• Capture Compare Units (CCU4)
• 2x Serial Channels
• 12Bit ADC
• Interconnect Matrix
• Secure Bootloader
• 1,8V – 5,5V Supply Voltage Range
• TA = -40C to 105C
Copyright © Infineon Technologies AG 2015. All rights reserved.OCTOBER 2014 PAGE 2
XMC1100
Up to 64kB Flash
TSOP16/38, VQFN24/40
+ 9ch LED Control (BCCU)
+ 3x Analog Comparators
XMC1200
Up to 200kB Flash
TSOP16/28/38, VQFN24/40
+ Math Co-Processor
+ CCU8 PWM Timer
+ Hall & Encoder I/F
XMC1300
Up to 200kB Flash
TSOP16/28/38, VQFN24/40
XMC4100/4200
Up to 256kB Flash / 40kB RAM
QFN48, TQFP64
XMC4400
Up to 512kB Flash / 80kB RAM
TQFP64 / TQFP100
+ 120MHz Core
+ Ethernet
+ ΔΣ Demodulator
XMC4500
Up to 1MB Flash / 160kB RAM
TQFP100 / TQFP144 / BGA144
+ EBU
+ SD Card
February 2015 Page 2

3. XMC Target Markets
 High through-
put and up-time
 Remote
monitoring
 Reliability and
quality
 Lifetime
 Security and
safety
 Interoperability
 Energy
efficiency
 Comfort and
ease of use
 Remote
monitoring
 Appealing
design and
form factors
 Interoperability
 Robustness
for harsh
environment
 Functional
safety
 Reliability
and quality
 Lifetime
 Energy
efficiency
 Robustness
for harsh
environment
 Up-time
 Form factor,
size and weight
 Platform
concept
 Copy protection
 Fast ramp-up
Factory
Automation
Building
Automation
Trans-
portation
Power
& Energy
Home &
Professional
Page 3February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
XMC Family / DAVE™

4. Security challenges
across XMC Target Markets
Factory
Automation
Building
Automation
Trans-
portation
Power
& Energy
Home &
Professional
Page 4February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
Security challenges vary among market segments
We need to update FW
of installed devices.
How to protect our IP?
How to protect from
cloning and reverse
engineering at our
contract manufacturer?Can we make an
after market
business with FW
function upgrades?
How to make sure
that only authorized
devices are built in?

5. Security challenges
across XMC Target Markets
Factory
Automation
Building
Automation
Trans-
portation
Power
& Energy
Home &
Professional
Page 5February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
Security challenges vary among market segments
We need to update FW
of installed devices.
How to protect our IP?
Can we make an
after market
business with FW
function upgrades?

6. µCodeMeter:
A cooperation on embedded security
Page 6February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
CodeMeter
Embedded
Driver
Personal Computer
Industrial PC
Embedded Device
Programmable Logic
Controller
Microcontroller
High
Power
Small
Size
CodeMeter
Runtime
µCodeMeter

7. µCodeMeter technology
integrated in DAVE™
Page 7February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
DAVE™ plug in
 One dialog for security
configuration
 Master key for encryption and
licensing safely stored in
CodeMeter dongle
 Individual settings fit customers
needs
 Integrated in build process

8. XMC4000
Flash Memory
Secure Firmware Updates
with µCodeMeter USE CASE 1
Page 8February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
FieldTrusted
Environment

9. XMC4000
Flash Memory
Secure Firmware Updates
with µCodeMeter USE CASE 1
Page 9February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
Firmware v1.0
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
FieldTrusted
Environment
Initial programming of
Firmware, Bootloader and
µCmActLicense by device
manufacturer

10. XMC4000
Flash Memory
Secure Firmware Updates
with µCodeMeter USE CASE 1
Page 10February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
Firmware v1.0
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
FieldTrusted
Environment
Firmware v1.0
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
delivery

11. Trusted
Environment
Secure Firmware Updates
with µCodeMeter USE CASE 1
Page 11February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
Field
Firmware v1.0
Firmware v2.0
Encrypted
Generation of encrypted
firmware file in DAVETM
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
DAVETM
µExProtector

12. Secure Firmware Updates
with µCodeMeter USE CASE 1
Page 12February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
Field
Firmware v2.0
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
Firmware update in the field.
Files are loaded and decrypted
by the SBSL
Trusted
Environment
Firmware v2.0
Encrypted
DAVETM
µExProtector
delivery

13. XMC4000
Flash Memory
Secure Function Upgrade
with µCodeMeter USE CASE 2
Page 13February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
FieldTrusted
Environment
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
Blocked function Blocked function

14. XMC4000
Flash Memory
Secure Function Upgrade
with µCodeMeter USE CASE 2
Page 14February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
FieldTrusted
Environment
CodeMeter License
Central
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
Blocked function Blocked function
µCmActLicense
Update
Generation of encrypted
µCmActLicense file.
License is bound to
individual hardware ID

15. XMC4000
Flash Memory
Secure Function Upgrade
with µCodeMeter USE CASE 2
Page 15February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
FieldTrusted
Environment
CodeMeter License
Central
µCmActLicense
SBSL
(Bootloader +
µCmE,
µExEngine)
Blocked function Enabled function
µCmActLicense
Update
delivery
µCmActLicense
Update
Function upgrade in the field.

16. Summary
µCodeMeter …
 … enhances the standard tool chain to provide
secure firmware updates or functional upgrades in embedded
systems built around XMC4000 microcontrollers.
 … is based on the market proven CodeMeter solution
for processor level control.
 … is an easy-to-use solution with state-of-the art cryptography.
 … is available early in Q4/2015 from Wibu-Systems.
Thank you for your attention!
More info: www.wibu.com/micro-codemeter
Page 16February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.

17. Page 17February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.