10 th AUTOSAR Open Conference

Transcription

1 10 th AUTOSAR Open Conference Dr. Moritz Neukirchner Elektrobit Automotive GmbH Building Performance ECUs with Adaptive AUTOSAR AUTOSAR Nov-2017

2 Major market trends and their impact Trends Impact on E/E architecture Impact on SW architecture Industry need E-Mobility Shrink of powertrain reduces hw complexity Software complexity increase Central car computer approach Adaptive AUTOSAR is the base technology for Automated Driving Mobility Service High data volumes Safety meets performance Car-to-X connectivity Update over the air Safety on high performance ECUs Fail operational systems Holistic security approach Service-oriented architecture (SOA) Unsupervised partial updates safe secure flexible up-to-date high performance in-car computers. 2

3 Requirements for performance ECUs Software over the air updates Dynamic deployment Remote analytics and diagnostics Developer oriented, target independent environment Dependable systems New vehicles features Updates and patches Silent testing Migration from classic ECU to high performance controller (HPC) or backend Network accessible sensors & actuators Remote diagnostics Predictive diagnostic Fleet campaigns Environment independent software Easy qualification and deployment Small, encapsulated and exchangeable software services (mircoservice) Safety Security Availability Reliability Maintainability 3

4 Consolidated vehicle infrastructure architecture Smart Antenna UI Computing Cluster Gateway IO Concentrators, Actors, Sensors Smart Sensors Steering Braking Computing Cluster(s) Gigabit Ethernet Engine Battery Smart Sensors Back-end System Back-end Server Performance ECU Reliable ECU IO Concentrators 4

5 Use-case remote update Architectural principles: Central external connection Distribution of updates across multiple ECUs Smart Antenna Gateway Supporting features: Coordinated A/B Update across ECUs Secure communication lication containerization Layered security architecture Back-end System Back-end Server Performance ECU Reliable ECU IO Concentrators 5

6 Use-case ADAS Architectural principles : Separation between planning and mechatronic parts Hierarchical safety architecture Smart Antenna Gateway Supporting features: ASIL-B performance platform ASIL-D classic platform Hierarchical runtime supervision Back-end System Back-end Server Performance ECU Reliable ECU IO Concentrators 6

7 Adaptive AUTOSAR alone is not the solution. Neither is Classic.

8 High-performance computer Software architecture Complex New software CPU-intensive system on heterogeneous performance Takeover of controllers existing Update (safety-relevant) scheme for applications, Novel user functions: OS instances, vehicle hypervisor functions from functions: e.g. Store Classic AUTOSAR Distributed health management e.g. sensor fusion (SWCs) ECU state management spanning Adaptive and Classic instances Performance Partitions Secure startup, authentication Security Partition Safety-relevant vehicle functions, monitoring of performance partitions Safety Partition Adaptive AUTOSAR Adaptive AUTOSAR Classic AUTOSAR Trusted Execution Environment Classic AUTOSAR POSIX OS POSIX OS AUTOSAR OS Trusted OS AUTOSAR Safety OS Virtual Machine Virtual Machine Virtual Machine Hypervisor Secure Boot Performance s Safety s High-performance Computer 8

9 Example: Distributed updates Container Diagnostic Client Vehicle Functions Partition Container Update Service. Container Vehicle Function Privileged Partition Classic AUTOSAR Components Transfer Images/ Pass control Flashing of software Diagnostic Manager Software Configuration Manager Execution Manager Diagnostic Manager Dcm Adaptive AUTOSAR on Linux Adaptive AUTOSAR on Linux Classic AUTOSAR Hypervisor Bootloader Lockstep Safety OS. Safety Safety 9

10 Example: Distributed health management Container Container Vehicle Functions Partition Container Privileged Partition Classic AUTOSAR Components Monitor Vehicle Function Virtual Resources Vehicle Function Virtual Resources. Vehicle Function Virtual Resources Physical Resources WDG Control Execution manager Health Manager Diagnostic Manager Pesistency Manager Virtual Resources Health Manager Health Control Adaptive AUTOSAR on Linux Adaptive AUTOSAR on Linux Classic AUTOSAR Hypervisor Bootloader Lockstep Safety OS. Safety Safety 10

11 More aspects with relevant interaction ECU state management Coordinated shutdown/sleep Between multiple Adaptive and Classic instances Use of OS sleep states Hypervisor Network management With potentially virtualized Ethernet devices Logging, tracing, debugging and testing Relating multiple logs across ECUs for debugging complete event chains Compatibility of test tools across different stacks Synchronized debugging Security Architecture Secure boot Secure partial updates Secure communication Mostly involve dependencies between hardware, operating system, and AUTOSAR stack Must be compatible on the network 11

12 AUTOSAR as foundation for software systems Classic and Adaptive AUTOSAR form a foundation for complex automotive software systems System functionality must be established across individual AUTOSAR instances System properties must ensured through system architecture, particularly for Safety // Security // Reliability Software platform must be maintained beyond deployment of the vehicle 12

13 High-performance computer One-stop solution Performance Partitions Security Partition Safety Partition EB tresos Studio Configuration Code Generation EB corbos Adaptive EB corbos Adaptive EB tresos Auto Trusted Execution Environment EB tresos Auto EB corbos Studio Modelling lication Development EB corbos Linux QNX EB tresos Auto OS Trusted OS EB tresos Safety OS Integration Logging and Debugging EB corbos Hypervisor Secure Boot Integration and Qualification Services Performance s High-performance Computer Safety s Reference Architecture 13

14 Conclusion Adaptive AUTOSAR is not the solution for all performance controllers Performance controllers build on a software system architecture on the basis of AUTOSAR Use of proven reference architecture reduces risk in system design and integration Tooling and development environment are key to master complexity 14

15 10 th AUTOSAR Open Conference Thank you for your attention! Dr. Moritz Neukirchner - AUTOSAR - page 15