Qorivva
| POWER, PowerPC, and Power ISA architectures |
|---|
| NXP (formerly Freescale and Motorola) |
| IBM |
|
| IBM/Nintendo |
| Other |
| Related links |
| Cancelled in gray, historic in italic |
Qorivva is a line of Power Architecture-based microcontrollers from Freescale built around one or more Power Architecture e200 cores. Within this line are a number of products specifically targeted for Functional Safety applications. The hardware-based fault detection and correction features found within this line include dual cores that may run in lock-step, full path ECC, automated self-testing of memory and logic, peripheral redundancy, and monitor/checker cores.
Qorivva Processor Families
Freescale has selected the following families of MPC5xxx processors for inclusion in the program targeting automotive, commercial, industrial, and aerospace applications, wherein assurances of correctness and safety are primary requirements.
MPC57xx Family
- See also MPC57xx.
The MPC57xx Family is intended by its manufacturer to support achievement of system compliance with functional safety standards, ISO 26262 in particular.[1] Freescale's SafeAssure Functional Safety Program includes all members of this family. Within that program, the MPC57xx are the primary microcontrollers targeted for safety-critical automotive applications. Each product in this family features a matched pair of e200 cores intended for primary computation, but also incorporate at least one other e200 core in a support role (e.g., interface coprocessor or "Safety Checker"). To support attainment of higher levels of fault tolerance (such as those expected in the context of ASIL D), the paired e200 cores may be configured to operate as dual lockstep processors. (An exception is MPC5748G whose cores may not be lock-stepped and as such is intended by the manufacturer to only support attainment of the less critical ASIL B.) [2]
Notably, the MPC5777M embodies three e200z7 cores at 300 MHz in a computational shell, two of which may be operated in lock step, and a forth core, an e200z4, which is used for peripheral control.
Additional built-in hardware mechanisms particular to this family:
- "End to End Error Code Correction" (e2eECC) - all memory storage and internal transfers may be protected by error correction encoding having a Hamming Distance of 4,[3] that distance providing automatic single bit-flip error correction and double bit-flip error detection.[4]
- Built-In Self Tests of Logic and Memory (LBIST and MBIST, respectively) (normally boot-time operations)
MPC56xx and MPC55xx Families
Products in these families each embody one or more e200 cores (usually of different versions).
In this family, only the MPC567xK, MPC564xL, and MPC560xP are identified as part of Freescale's SafeAssure Functional Safety Program. Of these, only the MCP5643L features lock-step cores and is the only member of the family explicitly offered in support of ISO 26262. [5]
The MPC5643L is notable for Freescale's claims that it is the first automotive microcontroller to be certified by an independent accredited assessor (exida) as compliant with the relevant MCU requirements of the automotive functional safety standard ISO 26262.[6] [7] exdica confirms that the Freescale microcontroller MPC5643L has been assessed per the relevant requirements regarding microcontroller development and verification & validation of ISO 26262 : 2011 Parts 2, 4, 5, 7, 8, 9 and 10 (to the extent applicable) and meets requirements providing Systematic Integrity ASIL D.[8] Freescale's related press release states, "[The MPC5643L] is suitable for use for all automotive safety integrity levels (ASIL), up to and including the most stringent level, ASIL D."[9]
See also
Contemporary Microcontrollers similar to the MPC5643L:
A number of products have been contemporaneously developed with comparable features; e.g., dual lock-stepable 32-bit cores, Error-correcting code memory, built-in self-test, ASIL D orientation:
| * TMS570LSxxx | dual lockstep Cortex-R4F cores |
| * V850E/Px | dual lockstep V850E cores |
| * MB9BF500 | dual lockstep Cortex-M3 cores |
| * LPC17xx | dual lockstep Cortex-M3 cores |
| * TC27xT | triple TricoreTM cores, two in lockstep (cf., MPC57xx) |
| Dual Dissimilar 32-bit cores (Master/Monitor), not lock-stepable: | |
| * LPC40xx | one each Cortex-M4 & Cortex-M0 cores (cf., MPC5xxx) |
References
- ^ "News Release: Freescale Qorivva Microcontroller is First Automotive MCU to Receive ISO 26262 Functional Safety Standard Certification (Freescale SafeAssure program: Functional Safety. Simplified.)". Retrieved 2013-07-24.
- ^ "SafeAssure Functional Safety Program". Freescale. Retrieved 2013-07-24.
- ^ Arun Mishra, Freescale Semiconductor. "Functional safety implementations in modern MCUs". Design How-To. EE Times.
- ^ Digital Broadcasting. Ohmsha, Ltd. 1998. p. 73.
{{cite book}}: Cite uses deprecated parameter|authors=(help) - ^ "SafeAssure Functional Safety Program". Freescale. Retrieved 2013-07-24.
- ^ Costlow, Terry. "Standards up for safety". SAE Vehicle Engineering Online. SAE. Retrieved 2013-07-25.
- ^ Day, John. "An industry first in functional safety". Mentor Blogs. Mentor Graphics. Retrieved 2013-07-24.
- ^ "Certificate FREESCALE 1108067 P0026 C001" (PDF). exdida Certification S.A. Retrieved 2013-07-24.
- ^ "New Release: Freescale Qorivva Microcontroller is First Automotive MCU to Receive ISO 26262 Functional Safety Standard Certification". Freescale. Retrieved 2013-07-24.