7.Nuclei ASIL B_D RISC V IP Automotive implementation challenges and solutions.pdf

1、Nuclei ASIL-B/D Automotive RISC-V IP Neil Fan,Nuclei Automotive Business Developement Manager目录/Contents0102NA300&NA90003NA Customer CasesISO 26262 Compliant Development2芯来科技RISC-V处理器IP产品图Public2025 Nuclei System Technology Co.,Ltd.3芯来科技芯来科技，从本土，从本土创业创业，从零开始，从零开始，跻跻身行身行业业第一梯第一梯队队4中国地区Market Share Le

2、aderPublic2025 Nuclei System Technology Co.,Ltd.芯来科技简介Public2025 Nuclei System Technology Co.,Ltd.501ISO 26262 Compliant Development6Functional Safety-ISO 26262ASIL comes from Functional Safety,ISO 26262Absence of unacceptable risk due to hazards cause by malfunctioning behavior of E/E(electrical/el

3、ectronic)systems.Root causes for malfunctioning behavior:Systematic errors(during specification,development,manufacturing,)Random hardware faults(during operation in the field)Foreseeable operational errors and misuse(during operation)Original from Mentor&NXPPublic2025 Nuclei System Technology Co.,L

4、td.7ASIL DASIL CASIL B(ASIL A)SPFM 99%97%90%60%not normativeLFM 90%80%60%n/aASIL LevelRandom hardware failure target values*)D 10-8 h-1 (10 FIT)C 10-7 h-1 (100 FIT)(B)10-7 h-1 (100 FIT)(A)10-6 h-1 (1000 FIT)not normative*Target values from ISO 26262-5Quantitative ASIL effect on IP designDetect&Contr

5、ol failureEffective safety mechanism to handle transient&permanent faultsVerification of safety mechansim to achieve target values from ISO 26262-5Public2025 Nuclei System Technology Co.,Ltd.8Safety Mechanisms on CPU IP designMasterCoreShadowCoreCMPThe Dual-core lockstep cores executing the same cod

6、e,then their outputs and key internal states are compared every cycle;Any mismatch will generate a fault by the comparison unitDual-Core LockstepImplementing error correction code(ECC)on ILM,DLM,I/D-Cache with enhanced address and multi-bit error coverageSTLProviding STL(software test library)SRAM E