new lpc families for protecting connected applications · 2015-07-23 · new lpc families for...

9
COVER PAGE SUBTITLE PLACEHOLDER COMPANY CONFIDENTIAL New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers February 24, 2015

Upload: others

Post on 07-Jul-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

COVER PAGE SUBTITLE PLACEHOLDER

COMPANY CONFIDENTIAL

New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers February 24, 2015

Page 2: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

•  Worried that your embedded code is vulnerable to attack or theft?

•  Concerned about unauthorized access to your data messages?

•  Need to add fast bulk data encryption or decryption without slowing down communications?

Introducing the LPC18Sxx and LPC43Sxx Families of Microcontrollers •  Highest-performance LPC MCUs with high-speed connectivity and advanced peripherals

•  Integrates security features to protect application code and data communications

•  Can be seamlessly integrated with an NXP A-Series secure element to protect and manage platform credentials and authentication keys

Connectivity increases the threat to your application code, data, and device integrity

2.

Page 3: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

How much protection is enough?

MCUs  for  embedded  applica.ons   LPC18Sxx/LPC43Sxx  MCUs  

Handles  AES  keys    

Genera.on   •   So3ware  RNG   •  True  RNG   •  Cer.fied  True  RNG  

Storage   •  Flash  •  Encrypted  in  OTP  unique  per  device.  

•  Not  so3ware  readable.  

•  Extrac.on  proof  using  banking-­‐grade  security.    

Prevents  so=ware  tampering  (so3ware  integrity)  

•  Code  read  protec.on  

•  Code  read  protec.on    

•  Code  read  protec.on    •  Secure  boot  

•  Secure  boot  with  FW  signatures  verifica.on  

•  Secure  firmware  update  

Establishes  secure  connecGon  (message  confiden.ality)  

•  So3ware  authen.ca.on   •  So3ware  authen.ca.on  

•  Hardware-­‐accelerated  tamper  proof  authen.ca.on  and  setup  of  session  keys  

Secures  bulk  message    transfers  

•  AES  so3ware  encryp.on  

•  AES  hardware-­‐accelerated  encryp.on  

•  AES  hardware-­‐accelerated  encryp.on  with  tamper  protec.on  

+ A7 secure element + security hardware + security software

SECURITY SPECTRUM

KE

Y B

EN

EFI

T

3.

Page 4: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

New LPC18Sxx and LPC43Sxx MCU Families

•  Same LPC18xx & LPC43xx features •  High-performance ARM Cortex-M cores: •  Large internal memories and support for external

memory expansion •  Multiple high-speed connectivity and display

•  Plus features for protecting data communications & application code •  Hardware-accelerated AES-128 encryption

engine for fast bulk encryption •  Two 128-bit non-volatile OTP memories for

storage of encrypted, hardware-randomized AES keys to prevent cloning

•  True random number generator for unique key creation

•  Boot ROM drivers supporting secure boot of authenticated, encrypted firmware image

•  Code read protection (CRP) prevents unauthorized access to internal Flash

4

LPC43Sxx

Page 5: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

Consumer •  Aftermarket automotive

accessories including telematics, data collectors, and navigation

•  Mini printers •  White goods HMI •  Audio accessories/Musical

instruments •  Thermostats

Industrial •  Secure industrial gateway •  Industrial controls •  Industrial automation •  Diagnostic equipment •  Electronic instruments •  Industrial automation

Medical & Fitness •  Blood glucose meters •  Medication Tracking

Energy Metering •  Smart grid hub •  Smart metering •  Diagnostic

equipment

LPC18Sxx & LPC43Sxx Applications •  Used standalone, with partner software, or paired with an

NXP A-Series secure element

5.

Page 6: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

LPC18S57  

Program and data memory expansion

LPC43S30  

LPC18S/43S Use Case Examples

Secure IoT Gateway •  High-speed encrypted connectivity via

Ethernet or WiFi with hardware AES •  Secure boot protects software IP •  TRNG for secure session keys •  Optional smart card chip for

enhanced security •  Add an A7 secure element for secure

key storage and authentication

Smart Meter Communications Hub •  Secure boot protects code in QSPI •  Fast bulk encryption limits time

connected to cellular network •  A7 Series secure element

protects meter against physical attacks attempting to extract or determine keys

Secure key storage and authentication

RAM  

I2C

AES engine

Cortex-­‐M4F  

SPI AES

engine

USART

PHY

USB

I2C

LCD Wireless dongle

NFC

Smartcard

TFT display Cortex-­‐M3  

Flash  &  RAM  

Cortex-­‐M0  

EMC

SPIFI Quad SPI Flash

SDRAM

secure boot

A7/A8 Secure Element

secure bulk encryption SPI

Ethernet PHY

HAN

Ethernet TRNG

OTP keys

6.

Page 7: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

Secure IoT Gateway: Medication Tracking

ESL Smart Solutions and Future Technology present the SMARTpack, an asset tracking device connected to the cloud •  Allows real-time patient usage information to be tracked via a

tablet or smart phone •  Uses a wide range of NXP technologies •  MCU, NFC, Interface Products,

Standard Products

Cypherbridge Systems uCRYPT™ library utilizes MCU’s AES engine for real-time encryption •  uSSL secures all data before it’s sent to ESL’s

EventMan Cloud™ •  uLoad validates the legitimacy of firmware updates •  uFile encrypts the local file system of the EMap™

7.

Page 8: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers

Development Tools LPCXpresso43S37 & 18S37 evaluation boards

LPC43S37 or LPC18S37 MCU

A7001CM secure element

OM13076: LPCXpresso18S37 board OM13073: LPCXpresso43S37 board

Quad SPI flash

Ethernet PHY High speed USB debug probe (Link2)

LPC general-purpose shield •  SPI connected 128x64 mono LCD •  Temperature sensor •  Joystick and 4 LEDs via port expander •  BMI160 accelerometer + gyroscope •  Potentiometer

WiFi module (SDIO)

Ethernet RJ45

PMOD Expansion Connector

8.

SDIO socket

Virtual Kit with LPCXpresso board + Connectivity Shield + WiFi module

Page 9: New LPC Families for Protecting Connected Applications · 2015-07-23 · New LPC Families for Protecting Connected Applications Introducing the LPC18Sxx & LPC43Sxx Microcontrollers