System-on-a-chip with fragmentable chips integrated into a land motor vehicle – Chip for autonomous driving

Abstract

The invention relates to an electronic circuit (17; 21; 23; 19) comprising a system-on-chip configured for the centralized processing of operating data of a land motor vehicle (F1; F2; F3), the centralized system being capable of receiving a plurality of fragmentable chips, and a system-on-chip configured for the autonomous driving of the land motor vehicle, hereinafter referred to as the autonomous driving system (A1; A2), the autonomous driving system being capable of receiving a plurality of fragmentable chips. FIG. 3

Description

Title of the invention: System-on-chip with fragmentable chips integrated in a motorized land vehicle - Chip for autonomous driving

[0001] The present invention belongs to the field of electronics on board a motor land vehicle. It relates in particular to a system on chip comprising at least one fragmentable chip, the system being integrated on a motor land vehicle.

[0002] "Land motor vehicle" means any type of vehicle such as a motor vehicle, a moped, an airplane, a train, a motorcycle, a storage robot in a warehouse, etc.

[0003] The term "system on chip" means any complete system embedded on a single integrated circuit. A system on chip forms a complete computer system and comprises substantially all the sub-components necessary for the execution of a given general function, without the system on chip needing to resort to other external components. In one embodiment, a system on chip comprises all the sub-components necessary for the execution of a given general function with the exception of the power supply (battery). In another embodiment, the system on chip comprises exactly all the sub-components necessary for the execution of a given general function. The dimensions of a system on chip are naturally very small compared to a nesting of conventional electronic components, and do not exceed 5 cm in length and / or width. In English, a system on chip is translated as "system on chip", frequently abbreviated to SoC.

[0004] A "fragmentable chip" is an electronic subcomponent integrated on a system on chip and dedicated to a more specific function than the general function provided by a system on chip. In English, a fragmentable chip is translated as "chiplet".

[0005] A fragmentable chip comprises a die, which is an English term that can be translated as elementary component in French, and which is a small rectangular piece resulting from the cutting of a slice of semiconductor material, called a wafer in English, on which an integrated circuit has been manufactured. By extension, "die" designates the integrated circuit itself without its package.

[0006] Historically, the introduction of electronic components into motorized land vehicles has been achieved by stacking independent electronic systems. Stacking these systems could generate many difficulties, mainly due to the fact that the data from one system was not understandable to another. vehicle system.

[0007] To solve this difficulty, it has been proposed to integrate a central high-performance computer grouping together as many computer operations carried out on the vehicle as possible. The electronic circuits of such computers generally include systems on a chip.

[0008] Various functions are performed by a vehicle's high-performance computer, including: - A set of basic functions including, for example, the processing, at the application level, of data exchanged with devices external to the vehicle using different networks (5G for example). - A set of functions related to autonomous driving. "Autonomous driving" of an "autonomous vehicle" means any process capable of assisting the driving of the vehicle. The process may consist of partially or totally steering the vehicle or providing any type of assistance to a natural person driving the vehicle. The process thus covers all autonomous driving, from level 0 to level 5 in the OICA scale, for International Organization of Motor Vehicle Manufacturers. - A set of functions related to infotainment, consisting for example of broadcasting different media (audio, video for example) in the vehicle.

[0009] Depending on the range level and the options chosen in a vehicle, the desired performance for the above-mentioned functions varies. The performance level of the systems on chip integrated in high-performance computers is adapted to the desired performance level for these functions according to a so-called "monolithic" approach.

[0010] The monolithic approach consists of designing a specific system-on-chip for each desired maximum performance level for a function. Thus, for example, designing a system-on-chip for entry-level functions is completely different from designing a system-on-chip for advanced autonomous driving functions.

[0011] The monolithic realization of systems on chip in the field of land motor vehicles, and in particular in the automotive field, poses several problems: - A cost problem: the explosion in computing needs requires either systems-on-chip with large die areas (>300mm2), or a set of systems-on-chip to address the needs. These two options are incompatible with the profitability sought in the automotive sector. - An integration problem: the multiplicity of systems on chip necessary to address computational needs requires a multiplicity of computers high-performance computers to house them, or high-performance computers that are complex to cool, which cause integration problems within the vehicle (for example, currently it is necessary to provide three high-performance computers with five systems on a chip for an L3 autonomy level). - A design problem, or scalability: it is necessary to design a system on chip by need (range level / desired function), without possible design synergy between the different systems on chips. - A validation problem: some critical functions such as autonomous driving require high levels of safety, both at the software and hardware levels. However, with the monolithic approach, it is necessary to validate the safety of each system-on-chip (and there are many different ones depending on the desired range / function levels), without the validation work carried out for one of the systems-on-chip being able to be reused by another system-on-chip.

[0012] The present invention improves the situation.

[0013] To this end, a first aspect of the invention relates to an electronic circuit comprising a system on chip configured for the centralized processing of operating data of a land motor vehicle, said system on chip being hereinafter called a centralized system, the centralized system being capable of receiving a plurality of fragmentable chips, the centralized system comprising a basic fragmentable chip comprising: - at least two processors configured to operate in a blocked-step mode, in which each processor executes the same operation at the same time in order to identify an error; - a communication port between fragmentable chips, the port being configured for the transmission and reception of at least one signal between the base chip and another fragmentable chip of the centralized system, the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters;

[0014] the electronic circuit further comprising a system on chip configured for autonomous driving of the land motor vehicle, hereinafter called system for autonomous driving, the system for autonomous driving being capable of receiving a plurality of fragmentable chips, the system for autonomous driving comprising a fragmentable chip for autonomous driving comprising: - at least two processors configured to operate according to the blocked step mode; - two communication ports between fragmentable chips, each of the ports being configured for the transmission and reception of at least one signal between the chip for autonomous driving and another fragmentable chip of the system for autonomous driving, the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters;

[0015] wherein the centralized system and the autonomous driving system each comprise a system-on-chip communication port, the port being configured for transmitting and receiving at least one signal between the centralized system and the autonomous driving system.

[0016] The basic and autonomous driving chips provide the basic and autonomous driving software functions of the vehicle at low cost with the right level of safety while leaving open the possibility of easily extending the performance of the system-on-chip.

[0017] Indeed, on the one hand, the basic chips and those for autonomous driving include processors with simultaneous redundancy, lockstep in English, which meet the minimum safety requirements required for driving a car (regulatory driving aids such as reading speed limit signs). In concrete terms, the basic chip thus equipped will be able to have its ASIL D approval validated. The Automotive Safety Integrity Level (ASIL) is a risk classification system defined by the ISO 26262 standard - Functional safety of road vehicles.

[0018] On the other hand, the presence on the chip for autonomous driving of the two very short-range ports allows the addition of other fragmentable chips within the system-on-chip for autonomous driving without compromising on performance. Indeed, the short-range ports are optimized to operate at very high speeds with limited consumption.

[0019] The system on chip therefore becomes scalable in that it makes it possible, simply, to increase its performance by connecting new fragmentable chips to the two short-range ports of the chip for autonomous driving.

[0020] Compared to a conventional system where conventional electronic components are not grouped into a component with reduced dimensions (the system on chip), the systems on chip according to the invention greatly simplify the physical integration within the vehicle.

[0021] The presence of at least two short-range ports on the chip for autonomous driving presents the best performance-cost compromise. Indeed, the presence of a single port would limit the improvements of the system-on-chip to the addition of a single direct connection between a new fragmentable chip and the chip for autonomous driving. In particular, it has been identified that the presence of four chips for autonomous driving makes it possible to achieve the desired levels of autonomy. (L3 / L4).

[0022] In one embodiment, the base chip comprises at least two short-range communication ports.

[0023] In one embodiment, the system for autonomous driving comprises two fragmentable chips for autonomous driving as described above, the fragmentable chips for autonomous driving being connected within the system for autonomous driving by a connection between one of the two ports between fragmentable chips of a first of the two fragmentable chips for autonomous driving to one of the two ports between fragmentable chips of the second of the two fragmentable chips.

[0024] In one embodiment, the autonomous driving system comprises exactly four fragmentable chips, each of which is connected to two other fragmentable autonomous driving chips of the autonomous driving system by its two interfragable chip communication ports.

[0025] In one embodiment, the communication ports between fragmentable chips are configured such that the physical interconnection between the fragmentable chips comprises a two-dimensional organic substrate.

[0026] In one embodiment, the centralized system further comprising a graphic fragmentable chip comprising: - a generic calculator on a graphics processor capable of performing at least 1.5 Tera floating point operations per second; - a communication port between fragmentable chips, the port being configured for the transmission and reception of the signal between the base chip and the graphics chip, the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters;

[0027] the system further comprising a physical connection between the base chip port and the graphics chip port.

[0028] In one embodiment, the centralized system comprises a second fragmentable graphics chip identical to the aforementioned graphics chip.

[0029] A second aspect of the invention relates to a land motor vehicle comprising the electronic circuit according to the first aspect of the invention.

[0030] Other characteristics and advantages of the invention will appear on examining the detailed description below, and the appended drawings in which:

[0031] [Fig-1] is a diagram illustrating the industrial constraints linked to the development high-performance computers within a motorized land vehicle according to several embodiments of the invention;

[0032] [Fig.2] is a general diagram illustrating electronic architectures of computers high performance within a land motor vehicle in several modes of realization of the invention;

[0033] [Fig.3] is a summary diagram illustrating electronic architectures of high-performance computers within a motorized land vehicle according to several embodiments of the invention;

[0034] [Fig.4] is a diagram illustrating a basic fragmentable chip of a system-on-chip configured for centralized processing of operating data of a land motor vehicle, according to one embodiment of the invention;

[0035] [Fig.5] is a diagram illustrating a system-on-chip configured for autonomous driving of a land motor vehicle, according to one embodiment of the invention

[0036] [Fig.6] is a diagram illustrating a graphical fragmentable chip of a system on chip, according to an embodiment of the invention.

[0037] The invention is described below in its non-limiting application to the case of a motor vehicle. Other applications, for example on a truck or a moped, are conceivable.

[0038] [Fig.l] is a diagram illustrating the industrial constraints linked to the development of high-performance computers within a motorized land vehicle according to several embodiments of the invention.

[0039] The x-axis represents the level of performance required for autonomous driving. The performance required for autonomous driving increases as you move to the right of the axis.

[0040] "Autonomous driving" of an "autonomous vehicle" means any method capable of assisting the driving of the vehicle. The method may thus consist of partially or totally steering the vehicle or providing any type of assistance to a natural person driving the vehicle. The method thus covers all autonomous driving, from level 0 to level 5 in the OICA scale, for International Organization of Motor Vehicle Manufacturers. An acronym commonly used to designate autonomous driving is AD AS, for advanced driver-assistance Systems in English, or advanced driving assistance system in French.

[0041] The y-axis represents the required performance level for infotainment functions. The required performance for infotainment increases as one moves up the axis. "Infotainment" means any function related to the entertainment of at least one occupant of the vehicle, such as the broadcasting of audio, video or olfactory media. An acronym used to designate infotainment is IVI, for in-vehicle infotainment in English.

[0042] Three performance levels, NTRY, entry-level, HGH, mid-range and PREM for high-end are present. Level L3 / L4 corresponds to driving autonomous level 3 or 4.

[0043] The diagram shown in [Fig.l] illustrates the relevant combinations of IVI and AD AS requirements.

[0044] The foundations of the heart of a centralized architecture, for example with the use of one or more high-performance computers (HPCs), are mainly dictated by the processing / computation needs in AD AS and IVI. Some combinations make little sense (for example, blocks 1 where one function is high-end and the other low-end).

[0045] It is necessary to find the best partitioning of electronic components that meets the needs, and in particular the IVI and AD AS needs. The boundary between the HGH level and L3 / L4 of the AD AS needs is notable and chosen in the following manner: it is defined where the AD AS system needs redundancy with a primary channel and an independent secondary channel (block 5 where operational safety is key).

[0046] The volume aspect of the levels is an essential point for the optimization of this partitioning. Thus the L3 / L4 AD AS and PREM IVI levels, blocks 11, 13 and 15, are not very voluminous while the 9 NTRY / NTRY combination constitutes the bulk of the volume (block 3). Blocks 7, 17 and 19 represent moderate needs.

[0047] [Fig.2] is an overall diagram illustrating electronic architectures high-performance computers within a motorized land vehicle according to several embodiments of the invention.

[0048] [Fig.2] illustrates the different possible electronic configurations of at least an electronic circuit, also called a high-performance computer or HPC, included in the motor vehicle. The details of said circuits are then given with reference to [Fig.3].

[0049] In some configurations, the vehicle comprises only one electronic circuit, for example for electronic circuits 9, 7, 19, 17 or 11. In other configurations, such as configurations 13 and 15, the vehicle comprises several electronic circuits. In configuration 13, the vehicle comprises electronic circuits 23 and 21. In configuration 15, the vehicle comprises electronic circuits 21.

[0050] Each of the electronic circuits comprises in one embodiment at least one memory 27 with double data rate, or DDR for double data rate in English.

[0051] [Fig. 3] is a summary diagram illustrating electronic architectures of high-performance computers within a land motor vehicle according to several embodiments of the invention.

[0052] In all embodiments of the invention, the vehicle comprises at least one electronic circuit. The electronic circuit comprises at least one system on chip configured for the centralized processing of vehicle operating data, said system on chip being hereinafter referred to as a centralized system. The centralized system is capable of receiving a plurality of fragmentable chips, and comprises at least one basic fragmentable chip 32 also described with reference to [Fig.4] below.

[0053] Different embodiments corresponding to different possible electronic architectures are described below.

[0054] A possibility not covered by the present invention is the electronic circuit 9, for example referenced HPC 0, comprises a system on chip F1 configured for the centralized processing of vehicle operating data, which comprises the chip 32. In one embodiment, F1 only comprises a basic fragmentable chip, the chip 32.

[0055] A possibility not covered by the present invention is the electronic circuit 7, for example referenced HPC D, comprises a system on chip F2 configured for the centralized processing of vehicle operating data, which comprises the chip 32 and a graphic fragmentable chip 35, hereinafter described with reference to [Fig.6].

[0056] In one embodiment of the invention, the electronic circuit 19, for example referenced HPC E, comprises the system on chip F1 comprising the chip 32, and a system on chip A1 configured for autonomous driving of the land motor vehicle. The system A1 comprises a fragmentable chip 37 for autonomous driving.

[0057] In one embodiment of the invention, the electronic circuit 17, for example referenced HPC A, comprises the system on chip F2 comprising the base chip 32 and the graphics chip 35, and the system on chip A1 for autonomous driving comprising the chip 37.

[0058] In one embodiment of the invention, the electronic circuit 21, for example referenced HPC B, comprises the system on chip F2 comprising the chip 32 and the graphics chip 35, and a system on chip A2 configured for autonomous driving. The system A2 comprises four fragmentable chips 37 for autonomous driving.

[0059] In one embodiment of the invention, the electronic circuit 23, for example referenced HPC C, comprises a system on chip F3 comprising the chip 32 and two graphics chips 35. The circuit 23 further comprises the system on chip A2 configured for autonomous driving and comprises four chips 37 for autonomous driving.

[0060] Thus, the centralized system may or may not include another fragmentable chip than the base chip 32. In all embodiments, the chip 32 includes at least one communication port between fragmentable chips. In an embodiment described below, the base chip includes two communication ports between fragmentable chips. In some of these embodiments, one or both communication ports between fragmentable chips are not connected to other fragmentable chips. of the centralized system.

[0061] Each communication port between fragmentable chips is configured for the transmission and reception of at least one signal between the base chip 32 and another fragmentable chip of the centralized system (actually present on the centralized system or not), the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters.

[0062] Signals configured to be transmitted over a distance of at most 30 millimeters can be transmitted with high performance levels and low required energy. The configuration of signals configured to be transmitted over a distance of at most 30 millimeters is known to those skilled in the art and is for example detailed in the UCIe standard: “Universal Chiplet Interconnect Express (UCIe) Specification Revision 1.0” and in particular in point 5.0.

[0063] In [Fig. 3], connections between communication ports between fragmentable chips are shown in solid lines (Chplt Com line) and connections between communication ports between systems on chip are shown in dotted lines (SoC Com line). The connections between communication ports between fragmentable chips are therefore not greater than a distance of 30 millimeters.

[0064] “Useful data” means any type of data containing information used by a vehicle functionality.

[0065] In one embodiment, the communication ports between fragmentable chips are UCIe ports, registered trademark, for Universal Chiplet Interconnect Express in English and universal express interconnection for fragmentable chip in French, at least compatible with the UCIe standard: “Universal Chiplet Interconnect Express (UCIe) Specification Revision 1.0”.

[0066] In one embodiment, the communication ports between systems on a chip are PCIe ports, registered trademark, for Peripheral Component Interconnect Express in English and express interconnection for peripheral component in French, at least compatible with the PCIe standard: “PCI Express® Base Specification Revision 6.1”.

[0067] In one embodiment, the ports are configured so that the physical interconnection between the base chip and the other fragmentable chip of the centralized system comprises a two-dimensional organic substrate. In one embodiment, each port comprises at least 16 pins for the physical interconnection.

[0068] The foundation of the proposed architecture is based on an HPC with a monolithic fusion system-on-chip (single die) that addresses the NTRY / NTRY level to optimize the cost of this high-volume level. This system-on-chip is built around a "base" die that will be reused in a chiplet approach on subsequent versions. Thus, this "base" die will benefit from additional volume than a monolithic approach by level would not have allowed.

[0069] In addition to the "base" die, the higher levels are covered by the addition of "adas" and "ivi" chiplet(s) to cover the additional adas and infotainment needs respectively. Thus the transition from the entry level to high will require the addition of an additional "adas" or "ivi" chiplet.

[0070] Similarly, the transition from the NTRY / HGH or HGH / NTRY level to HGH / HGH requires the addition of the necessary ivi or adas chiplet.

[0071] Also, PREM / HGH level coverage is made possible by the addition of an additional ivi chiplet, i.e. a combination of a “base” die, an “adas” die and 2 “ivi” dies.

[0072] The transition to the L3 / L4 level requires a significant addition of computing resources to the system, which must be separated into two independent subsystems for safety reasons. This dual need is covered by two HPCs, each offering a combination of four ADAS chiplets, one IVI chiplet, and one base chiplet distributed across two SoCs. The advantage of grouping the ADAS chiplets within a single SoC is that it offers a dual advantage: on the one hand, it offers the distribution of the power to be dissipated across two SoCs, but it also allows the range of ADAS SoCs to be developed independently of the rest of the system.

[0073] Other advantages appear in this partitioning of SoCs and HPCs. - Reuse of the HPC housing - Reuse of the database which allows to minimize validation across levels. - Ability to upgrade ADA SoCs faster than the rest of the system

[0074] The size of the 3 chiplets used in this partitioning remains on an optimal yield surface (<200mm2 at 5nm to obtain good yield). In this exercise the target sizes remain below 100mm2.

[0075] [Fig.4] illustrates the basic fragmentable chip 32, according to an embodiment of the invention.

[0076] The chip 32 comprises at least two processors configured to operate in a simultaneous redundancy mode, in which each processor executes the same operation at the same time in order to identify an error.

[0077] This document refers to two processors operating in a simultaneous redundancy mode. This terminology (two processors) is equivalent to a terminology in which a single processor is referred to where the execution cores operate in a locked phase in which each core executes the same operation at the same time in order to identify an error.

[0078] Such processors with simultaneous redundancy, also called lockstep mode in English, make ASIL D validation possible, shown in bold in [Fig.4] at block 69. In one embodiment, the simultaneous redundancy mode further comprises physical or software isolation of the clock systems and / or the power supply or compatibility with a fast wake-up mode.

[0079] Chip 32 includes: - A central processing unit (CPU) block 72 configured to perform a wide variety of operations. In one embodiment, the block 72 comprises a cache memory greater than 12 megabits and / or computing performance between 50 and 500 kdmips, preferably 118 kdmips. The dmips is a unit of measurement of processor performance relating to one million operations per second of the dhrystone type. - A block 74 of a neural processing unit (NPU), comprising an artificial intelligence accelerator configured to process between 10 and 100 Tera operations (Tops) relating to the execution of neural networks dedicated to image recognition per second, preferably 50 Tops. In one embodiment, the NPU comprises a cache memory greater than 15 megabits. - A block 76 of a GPU graphical processing unit, comprising a generic calculator on a graphics processor capable of performing between 100 and 500 billion floating point operations per second (Gflops), preferably 300 Gflops. In one embodiment, the GPU is configured to be compatible with a virtualization mode, that is to say that it can be operated in several independent virtual instances.

[0080] Several embodiments are possible with regard to the integration of the simultaneous redundancy processors. In a preferred embodiment, the chip 32 further comprises a safety block (not shown) comprising the simultaneous redundancy processors which are in charge of operations critical to operational safety (typically the decisions at the origin of the autonomous driving instructions or operations linked to the fusion of data from the sensors for autonomous driving). In one embodiment, the two processors are included in at least one of the components or component blocks 72, 74 and / or 76.

[0081] The chip 32 further comprises at least the two ports 61 and 63 for communication between fragmentable chips. Each communication port between fragmentable chips is configured for the transmission and reception of at least one signal comprising the useful data and configured to be transmitted over a distance of at most 30 millimeters.

[0082] In one embodiment, the chip 32 further comprises at least the two ports 65 and 67 for communication between systems on a chip. In one embodiment, the Port 65 is configured for data exchange at a rate between 8 and 32 GBps and port 67 for a rate between 1 and 8 GBps.

[0083] In one embodiment, the base chip 32 further comprises at least one low-speed port 71 for connection with a serial system bus. The serial system bus is for example of the CAN type for controller area network. In one embodiment, the port 71 comprises three sub-ports of the CAN-FD type, registered trademark, for Controller Area Network Flexible Data-Rate.

[0084] Chip 32 is the most complete of the fragmentable chips presented here because it addresses the AD AS and infotainment domains for the NTRY levels. In one embodiment, chip 32 also includes gateway functions for the vehicle's internal communication networks. In one embodiment, chip 32 also provides the necessary connectivity (I / O) for the NTRY level but also the following ones.

[0085] The chip 32 also provides the high-speed interconnection necessary for the expansion of the system through the ports between systems on chip, for example of the PCIe type, for an interSoC expansion and the two ports 61 and 62 for a multiDie expansion. This interconnection is not necessary at the NTRY level but required for the expansion of the system on the higher levels. This surplus Silicon (and therefore additional cost) is largely offset by the volume effect provided by the higher levels.

[0086] [Fig.5] illustrates the fragmentable chip 37 for autonomous driving, according to one embodiment of the invention.

[0087] The chip 37 comprises at least two processors configured to operate in simultaneous redundancy mode.

[0088] This document refers to two processors operating in a simultaneous redundancy mode. This terminology (two processors) is equivalent to a terminology in which a single processor is referred to where the execution cores operate in a locked phase in which each core executes the same operation at the same time in order to identify an error.

[0089] As for the base chip 32, such simultaneous redundancy processors make possible the ASIL D validation, represented in bold in [Fig.5] at block 84. In one embodiment, the simultaneous redundancy mode further comprises isolation, physical or software, of the clock systems and / or the power supply or even compatibility with a fast wake-up mode.

[0090] Chip 37 includes: - A central processing unit (CPU) block 86 configured to perform a wide variety of operations. In one embodiment, block 72 includes a cache memory greater than 6 mega bits and / or computing performance between 10 and 200 kdmips, preferably 63 kdmips. - A block 88 of a neural processing unit (NPU), comprising an artificial intelligence accelerator configured to process between 50 and 500 tera operations relating to the execution of neural networks dedicated to image recognition per second, preferably 79 tera operations relating to the execution of neural networks dedicated to image recognition per second. In one embodiment, the NPU comprises a cache memory greater than 33 megabits.

[0091] Several embodiments are possible with regard to the integration of the processors with simultaneous redundancy. In a preferred embodiment, the chip 37 further comprises a safety block (not shown) comprising the processors with simultaneous redundancy which are in charge of operations critical with regard to operational safety (typically the decisions at the origin of the autonomous driving instructions or operations linked to the fusion of data from the sensors for autonomous driving). In one embodiment, the two processors are included in at least one of the components or blocks of components 86 and / or 88.

[0092] The chip 37 further comprises at least the two ports 78 and 80 for communication between fragmentable chips. Each communication port between fragmentable chips is configured for the transmission and reception of at least one signal comprising the useful data and configured to be transmitted over a distance of at most 30 millimeters.

[0093] In one embodiment, the chip 32 further comprises a port 82 for communication between systems on a chip.

[0094] Chip 37 provides a set of extensions dedicated to the execution of autonomous driving systems: - Mainly massively parallel computing resources (NPU 74) - High-performance processors (CPU 86) with a good level of security - Means related to vision (not shown, for example with a processor for image signal processing (ISP, for Image Signal Processor in English) - A local DDR memory interface (not shown) to relieve the centralized system of the numerous memory-processor round trips linked to this AD AS activity.

[0095] [Fig.6] illustrates the fragmentable graphics chip 35, according to one embodiment of the invention.

[0096] The chip 35 comprises at least one processor configured to ensure an ASIL B security level (block 92). Such a security level involves verification processes of a significant level, but less than for the ASIL D level of the chips 32 and 37. Thus, it is conceivable for an ASIL B level to have error checking processes, or introduction of redundancy, only in software. For example, an ASIL B level does not involve specific hardware such as two processors configured to operate in simultaneous redundancy mode.

[0097] Chip 35 comprises: - A central processing unit (CPU) block 94 configured to perform a wide variety of operations. In one embodiment, block 94 includes a cache memory greater than 19 megabits and / or computing performance between 50 and 500 kdmips, preferably 185 kdmips. - A block 98 of a neural processing unit (NPU), comprising an artificial intelligence accelerator configured to process between 10 and 100 Tera operations (Tops) relating to the execution of neural networks dedicated to image recognition per second, preferably 54 Tera operations relating to the execution of neural networks dedicated to image recognition per second. In one embodiment, the NPU comprises a cache memory greater than 22 megabits. - A GPU block 96, for graphical processing unit in English, comprising a generic calculator on a graphics processor capable of performing between 1 and 5 terabytes of floating point operations per second (Tflops), preferably greater than 1.5 Tflops. In one embodiment, the GPU is configured to be compatible with a virtualization mode, that is to say that it can be operated in several independent virtual instances.

[0098] Several embodiments are possible with regard to the integration of the processor having ASIL B security. In a preferred embodiment, the chip 35 further comprises a security block (not shown) comprising the processor having ASIL B security (typically the operations critical from the cybersecurity point of view). In one embodiment, the ASIL B processor is included in at least one of the components or component blocks 94, 96 and / or 98.

[0099] In one embodiment, the graphics chip further comprises a memory interface configured to receive a double data rate synchronous dynamic random access memory which, in one embodiment, is dedicated to storing graphics data generated by the generic calculator on graphics processor.

[0100] The chip 35 further comprises at least one port 90 for communication between fragmentable chips. The port 90 for communication between fragmentable chips is configured for the transmission and reception of at least one signal comprising the useful data and configured to be transmitted over a distance of at most 30 millimeters.

[0101] Chip 35 thus provides a set of extensions dedicated to the execution of cockpit / infotainment oriented tasks: - Mainly graphics computing means (GPU) - Performance processors (CPU performance) and safety (ASIL B). - An NPU for supporting dedicated cockpit artificial intelligence functions. - A local DDR memory interface to offload the centralized system from movements related to the graphic part.

[0102] The present invention is not limited to the embodiments described above as examples; it extends to other variants.

[0103] Thus, an embodiment has been described in which the invention was implemented for a motor vehicle. The invention can however be implemented with any type of land motor vehicle such as a scooter, a train or a motorized wheelbarrow.

[0104] Furthermore, this document refers to two processors operating in a simultaneous redundancy mode. This terminology (two processors) is equivalent to a terminology in which a single processor is referred to where the execution cores operate in a locked phase in which each core executes the same operation at the same time in order to identify an error.

Claims

1. Claims Electronic circuit (17; 21; 23; 19) comprising a system on chip configured for the centralized processing of operating data of a land motor vehicle, said system on chip being hereinafter called centralized system (F1; F2; F3), the centralized system being capable of receiving a plurality of fragmentable chips, the centralized system comprising a basic fragmentable chip (32) comprising: - at least two processors configured to operate in a blocked-step mode, in which each processor executes the same operation at the same time in order to identify an error; - a port (61) for communication between fragmentable chips, the port being configured for the transmission and reception of at least one signal between the base chip and another fragmentable chip of the centralized system, the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters; the electronic circuit further comprising a system on chip configured for autonomous driving of the land motor vehicle, hereinafter called system for autonomous driving (A1; A2), the system for autonomous driving being capable of receiving a plurality of fragmentable chips, the system for autonomous driving comprising a fragmentable chip for autonomous driving (37) comprising: - at least two processors configured to operate in blocked-step mode; - two communication ports (78; 80) between fragmentable chips, each of the ports being configured for the transmission and reception of at least one signal between the chip for autonomous driving and another fragmentable chip of the system for autonomous driving, the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters; wherein the base chip and the chip for autonomous driving each comprise a communication port between systems on a chip (65; 67; 82), the port being configured for the transmission and reception of at least one signal between the centralized system and the system for autonomous driving.

2. An electronic circuit according to claim 1, wherein the system for autonomous driving comprises two fragmentable chips for autonomous driving according to claim 1, the fragmentable chips for autonomous driving being connected within the system for autonomous driving by a connection between one of the two fragmentable inter-chip ports of a first of the two fragmentable chips for autonomous driving to one of the two fragmentable inter-chip ports of the second of the two fragmentable chips.

3. An electronic circuit according to claim 2, wherein the autonomous driving system (A2) comprises exactly four fragmentable chips, each being connected to two other fragmentable chips for autonomous driving of the autonomous driving system by its two communication ports between fragmentable chips.

4. Electronic circuit according to one of the preceding claims, in which the communication ports between fragmentable chips are configured so that the physical interconnection between the fragmentable chips comprises a two-dimensional organic substrate.

5. Electronic circuit according to one of the preceding claims, the centralized system (F2; F3) further comprising a graphic fragmentable chip comprising: - a generic calculator on a graphic processor capable of performing at least 1.5 Tera floating point operations per second; - a communication port between fragmentable chips, the port being configured for the transmission and reception of the signal between the base chip and the graphic chip, the signal comprising useful data and being configured to be transmitted over a distance of at most 30 millimeters; the system further comprising a physical connection between the port of the base chip and the port of the graphic chip.

6. An electronic circuit according to claim 5, wherein the centralized system comprises a second fragmentable graphics chip identical to the graphics chip of claim 5.

7. Motor land vehicle comprising the electronic circuit according to one of the preceding claims.

Images