Virtual electronic control units in autosar

Patent metadata

Field	Value
Publication number	US-11403148-B2
Application number	US-201916713077-A
Country	US
Kind code	B2
Filing date	Dec 13, 2019
Priority date	Dec 18, 2018
Publication date	Aug 2, 2022
Grant date	Aug 2, 2022

Abstract

An electronic control unit includes a plurality of cores. The electronic control unit hosts, by virtualization, a plurality of partitions including a first and a second partition. Each of the partitions is assigned to at least one of the cores. The first partition is implemented to run, on its at least one core, an AUTOSAR architecture platform instance providing AUTOSAR basic software services. The second partition is implemented to run, on its at least one core, AUTOSAR software components. A partition interface couples the first and second partitions such that the AUTOSAR software components are run as part of said AUTOSAR architecture platform instance implemented in the first partition.

First claim

The invention claimed is:

1. An electronic control unit comprising a plurality of cores, wherein:
the electronic control unit hosts a plurality of partitions including at least a first partition and a second partition;
the first partition is assigned to only one first core of said cores;
the second partition is assigned to only one second core of said cores;
the first partition is implemented to run an automotive open system architecture platform instance on the first core, the automotive open system architecture platform including an operating system configured for providing basic software services, wherein the first partition is the only one of the partitions implemented to run the automotive open system architecture platform instance providing the basic software services and wherein the first partition is the only one of the partitions which acts as a data interface for routing communications such that all data transfer between any of the plurality of partitions is routed through the first partition;
the second partition is implemented to run automotive open system architecture software components that need the basic software services provided by the first partition on the first core to fulfill respective functions of the software components; and
a partition interface couples the first and second partitions such that the software components are run as part of said automotive open system architecture platform instance implemented in the first partition.

2. The electronic control unit of claim 1 , wherein the partitions include a third partition that is assigned to only one third core of said cores, the third partition is implemented to run automotive open system architecture software components, and wherein a partition interface couples the first and third partitions such that the software components of the third partition are run as part of said automotive open system architecture platform instance implemented in the first partition.

3. The electronic control unit of claim 2 , wherein
the automotive open system software components of the second partition and the automotive open system software components of the third partition are implemented by separately memory flashing the respective partitions, and
flash memory addresses and address ranges of the first, second and third partitions are fixed and remain fixed between said flashing.

4. The electronic control unit according to claim 2 , wherein
said partition interface coupling the first and second partitions is implemented as a proxy software component of the automotive open system architecture platform instance,
and/or
said partition interface coupling the first and third partitions is implemented as a proxy software component of the automotive open system architecture platform instance.

5. The electronic control unit according to claim 2 , wherein one of the software components of the second partition communicates with one of the software components of the third partition through the first partition via said partition interfaces coupling the first and second partitions, and the first and third partitions.

6. The electronic control unit according to claim 1 , wherein
the operating system is configured for scheduling and/or time monitoring execution of the software components, and
said operating system is configured to schedule and/or time monitor a software component running on the second core and/or the third core.

7. The electronic control unit of claim 6 , wherein
said operating system is provided with fixed start addresses of software components running on the second core or the third core, such as to schedule execution of the respective software components.

8. The electronic control unit according to claim 1 , wherein every one of the plurality of partitions is assigned to only a respective one of said cores.

9. The electronic control unit of claim 1 , wherein the basic software services provided by the first partition and used by the software components of the second partition include services arranged in an automotive open system basic software: service layer, electronic control unit abstraction layer, microcontroller abstraction layer and/or complex drivers layer.

10. The electronic control unit according to claim 1 , wherein there are n second partitions and a total of n+1 partitions, wherein n is an integer greater than zero.

11. A method of executing automotive open system software components, the method comprising:
hosting a plurality of partitions including a first partition and a second partition; assigning the first partition to only one first core of an electronic control unit including a plurality of cores;
implementing the first partition to run, on the first core, an automotive open system architecture platform instance including an operating system configured for providing basic software services, wherein the first partition is the only one of the partitions implemented to run the automotive open system architecture platform instance providing the basic software services;
assigning the second partition to only one second core of the cores;
implementing the second partition to run, on the second core, automotive open system architecture software components that need the basic software services provided by the first partition on the first core to fulfill respective functions of the software components;
coupling the first and second partitions such that the software components are run as part of said automotive open system architecture platform instance implemented in the first partition; and
using only the first partition as a data interface for routing communications such that all data transfer between any of the plurality of partitions is routed through the first partition.

12. The method of claim 11 , further comprising:
assigning a third partition to at only one third core of the cores;
changing only one of the second partition or the third partition, wherein all partition interfaces remain unchanged; and
performing a binary comparison of software of the unchanged one of the second partition or the third partition to verify that the unchanged one of the second partition or the third partition has not been changed.

13. The method of claim 12 , further comprising:
changing the data interface and/or a partition interface;
changing only one of the second partition or the third partition; and
performing a binary comparison of the software of the unchanged one of the second partition or the third partition to verify that the unchanged one of the second partition or the third partition has not been changed.

14. The method of claim 12 , further comprising
performing the binary comparison and a test of the changed one of the second partition or the third partition.

15. The method of claim 11 , wherein there are n second partitions and a total of n+1 partitions, wherein n is an integer greater than zero.

Assignees

• Aptiv Tech Ltd

Inventors

• Lenz Arne
• Schäfer Andreas
• Hänsel Sven
• Neusser Max

Classifications

• G05B23/0221 Primary

  Preprocessing measurements, e.g. data collection rate adjustment; Standardization of measurements; Time series or signal analysis, e.g. frequency analysis or wavelets; Trustworthiness of measurements; Indexes therefor; Measurements using easily measured parameters to estimate parameters difficult to measure; Virtual sensor creation; De-noising; Sensor fusion; Unconventional preprocessing inherently present in specific fault detection methods like PCA-based methods · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• G06F9/541

  via adapters, e.g. between incompatible applications · CPC title

• G06F9/5077 Primary

  Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455) · CPC title

• G06F2009/45575

  Starting, stopping, suspending or resuming virtual machine instances · CPC title