Safe Cockpit Controller

Driver assistance technologies and infotainment, displayed on high performance graphics, have become competitive arenas for car manufacturers. As a result, the automotive industry focusses on development of the cockpit controller. This central computing unit brings together consumer electronics, driver information, convenience features and driver assistance systems on a single chip. These systems inform, assist, navigate and turn driving into an integrated driving experience.

OpenSynergy offers the precise technology to enable this combination of different functions on a single System-on-Chip (SoC). Customers can integrate and run multi-purpose operating systems, such as Linux and Android along with real-time OS or AUTOSAR-compliant software, on OpenSynergy’s COQOS Hypervisor SDK.

The hypervisor, as a key component of COQOS Hypervisor SDK, creates a secure separation between the software systems by generating secure virtual machines (VMs). Software systems for the instrument cluster, the infotainment systems, the Advanced Driver Assistance Systems or the AUTOSAR software, are integrated separately into each of these VMs. Computer-intensive programs for high-resolution graphics can be used as well as fast booting and real-time functions.

Some elements of the instrument cluster are safety critical and require a qualification up to ASIL-B, such as warnings about airbag failure, brakes, ABS, engine failure, etc. OpenSynergy has integrated a Linux subsystem in a second VM on the COQOS Hypervisor. It is used to render all graphical elements for the instrument cluster, including the safety-critical tell tales. In a further separate VM, a small safety component with a monitoring function has been integrated on a RTOS subsystem. This monitoring feature developed by OpenSynergy verifies the safety critical elements represented by the digital instrument cluster.

By separating the instrument cluster software and guard mechanism into different VMs, this safety feature is protected from interference. In case of any software failure in the VM running the instrument cluster, the guard mechanism would activate near-immediate recovery of the instrument cluster.

Cockpit Controller based on Linux with special consideration to safety

Cockpit Controller Integrating IVI with Instrument Cluster - Dual Linux on Renesas R-Car H3

Shared Graphics Module for Multi-display Cockpits