An embedded hypervisor for safety-relevant automotive E/E-systems

Reinhardt, Dominik; Morgan, Gary

doi:10.1109/sies.2014.6871203

Cited by 47 publications

(14 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Automotive operating systems with similar goals include microkernels from Elektrobit [14], PharOS [15], as well as the ETAS hypervisor [16]. Similarly, there are many systemsoftware solutions for avionics, including POK [17] and XtratuM [18].…”

Section: Related Workmentioning

confidence: 99%

AUTOBEST: a united AUTOSAR-OS and ARINC 653 kernel

Zuepke

Bommert

Lohmann

2015

21st IEEE Real-Time and Embedded Technology and Applications Symposium

View full text Add to dashboard Cite

Abstract-This paper presents AUTOBEST, a united AUTOSAR-OS and ARINC 653 RTOS kernel that addresses the requirements of both automotive and avionics domains. We show that their domain-specific requirements have a common basis and can be implemented with a small partitioning microkernel-based design on embedded microcontrollers with memory protection (MPU) support. While both, AUTOSAR and ARINC 653, use a unified task model in the kernel, we address their differences in dedicated user space libraries. Based on the kernel abstractions of futexes and lazy priority switching, these libraries provide domain specific synchronization mechanisms. Our results show that thereby it is possible to get the best of both worlds: AUTOBEST combines avionics safety with the resource-efficiency known from automotive systems.

show abstract

Section: Related Workmentioning

confidence: 99%

AUTOBEST: a united AUTOSAR-OS and ARINC 653 kernel

Zuepke

Bommert

Lohmann

2015

21st IEEE Real-Time and Embedded Technology and Applications Symposium

View full text Add to dashboard Cite

show abstract

“…As an alternative to directly deploy an AUTOSAR software on the system, virtualization techniques can be used to consolidate multiple (existing) AUTOSAR ECU configurations on a single platform [27]. In general, with virtualization, a system can host several partitions where each partition acts as an independent virtual machine (VM).…”

Section: Virtualization Approachmentioning

confidence: 99%

“…Virtualization support for automotive systems is discussed in [2], [27]. OpenSynergy, as an industrial example, provides COQOS [6].…”

Section: Related Workmentioning

confidence: 99%

Investigation on AUTOSAR-Compliant Solutions for Many-Core Architectures

Becker

Dasari

Nélis

et al. 2015

2015 Euromicro Conference on Digital System Design

View full text Add to dashboard Cite

As of today, AUTOSAR is the de facto standard in the automotive industry, providing a common software architecture and development process for automotive applications. While this standard is originally written for singlecore operated Elec-tronic Control Units (ECU), new guidelines and recommendations have been added recently to provide support for multicore archi-tectures. This update came as a response to the steady increase of the number and complexity of the software functions embedded in modern vehicles, which call for the computing power of multicore execution environments. In this paper, we enumerate and analyze the design options and the challenges of porting AUTOSAR-based automotive applications onto multicore platforms. In particular, we investigate those options when considering the emerging many-core architectures that provide a more scalable environment than the traditional multicore systems. Such platforms are suitable to enable massive parallel execution, and their design is more suitable for partitioning and isolating the software components. Abstract-As of today, AUTOSAR is the de facto standard in the automotive industry, providing a common software architecture and development process for automotive applications. While this standard is originally written for singlecore operated Electronic Control Units (ECU), new guidelines and recommendations have been added recently to provide support for multicore architectures. This update came as a response to the steady increase of the number and complexity of the software functions embedded in modern vehicles, which call for the computing power of multicore execution environments. In this paper, we enumerate and analyze the design options and the challenges of porting AUTOSAR-based automotive applications onto multicore platforms. In particular, we investigate those options when considering the emerging manycore architectures that provide a more scalable environment than the traditional multicore systems. Such platforms are suitable to enable massive parallel execution, and their design is more suitable for partitioning and isolating the software components.

show abstract

“…Moreover, the pervasive connectivity of these devices in the modern Internet of Things (IoT) era significantly increases their attack surface [3,4]. Due to their myriad of applications and domains, ranging from consumer electronics to aerospace control systems, there is an increasing reliance on embedded devices that often have access to sensitive data and perform safety-critical operations [5][6][7]. Thus, two of the main challenges faced by modern embedded systems are those of security and safety.…”

Section: Introductionmentioning

confidence: 99%

“…In the case of aerospace systems, virtualization allows this consolidation to guarantee the Time and Space Partitioning (TSP) required for the reference Integrated Modular Avionics (IMA) architectures [14]. As for the automotive industry, it also allows for safe coexistence of safety-critical subsystems with real-time requirements and untrusted ones such as infotainment applications [6]. Finally, in the development of medical devices, which are becoming increasingly miniaturized, virtualization is being applied to consolidate their subsystems and isolate their critical life-supporting functionality from communication or interface software used for their control and configuration, many times operated by the patient himself.…”

Section: Introductionmentioning

confidence: 99%

μRTZVisor: A Secure and Safe Real-Time Hypervisor

et al. 2017

View full text Add to dashboard Cite

Virtualization has been deployed as a key enabling technology for coping with the ever growing complexity and heterogeneity of modern computing systems. However, on its own, classical virtualization is a poor match for modern endpoint embedded system requirements such as safety, security and real-time, which are our main target. Microkernel-based approaches to virtualization have been shown to bridge the gap between traditional and embedded virtualization. This notwithstanding, existent microkernel-based solutions follow a highly para-virtualized approach, which inherently requires a significant software engineering effort to adapt guest operating systems (OSes) to run as userland components. In this paper, we present µRTZVisor as a new TrustZone-assisted hypervisor that distinguishes itself from state-of-the-art TrustZone solutions by implementing a microkernel-like architecture while following an object-oriented approach. Contrarily to existing microkernel-based solutions, µRTZVisor is able to run nearly unmodified guest OSes, while, contrarily to existing TrustZone-assisted solutions, it provides a high degree of functionality and configurability, placing strong emphasis on the real-time support. Our hypervisor was deployed and evaluated on a Xilinx Zynq-based platform. Experiments demonstrate that the hypervisor presents a small trusted computing base size (approximately 60KB), and a performance overhead of less than 2% for a 10 ms guest-switching rate.

show abstract

An embedded hypervisor for safety-relevant automotive E/E-systems

Cited by 47 publications

References 17 publications

AUTOBEST: a united AUTOSAR-OS and ARINC 653 kernel

AUTOBEST: a united AUTOSAR-OS and ARINC 653 kernel

Investigation on AUTOSAR-Compliant Solutions for Many-Core Architectures

μRTZVisor: A Secure and Safe Real-Time Hypervisor

Contact Info

Product

Resources

About