Embedded virtualization is a key technology for the future of automotive systems. Virtualization makes it possible to allocate the resources of a processor to multiple safely separated applications and operating systems. This is an effective approach to redesign the vehicle electronics architecture, take full advantage of the performance of processors and address the growing complexity of software-defined functions. What was previously possible on application processors in infotainment and connectivity now also comes to the real-time processors and microcontrollers required in other vehicle domains. A new hypervisor platform opens up many opportunities for the next generation of increasingly automated cars.
The industry has developed very powerful microcontrollers to run as many functions as possible on one piece of hardware. This simplifies network complexity and reduces costs and the weight of the vehicle. For this consolidation of software systems, the market offers various solutions based on different methods. One approach is to isolate the consolidated functions and prevent interference of software systems with different requirements and safety levels by virtualization with hardware support: Functions integrated into the operating system are allocated to different memory areas, creating a “spatial” separation. The segmentation then ensures that the functions do not interfere with each other. This means that simply by integrating a software package on a chip with hardware virtualization, it is already possible to integrate applications with different functional safety requirements.
With this approach, the entire functions of a domain (e.g., body, cockpit, ADAS) can run together and simultaneously on a single ECU. Thanks to the high performance of the latest microcontrollers, the number of integrated functions can still be expanded to a relevant extent. Future architectures will favor the spatial aggregation of functions, i.e., zonal computers because in this way the cabling throughout the vehicle is reduced. Thanks to the virtual devices that OpenSynergy offers on its COQOS Hypervisor SDK in addition to the hypervisor, the systems here communicate without additional hardware.
For the development of these virtual devices, OpenSynergy has been an active member of the OASIS Open consortium since 2018 and specifies the most important devices according to the open VIRTIO standard.
In the car, there is not only one single zone, but in fact several zones defined into several logical blocks, which consolidate the functionalities for each physical area. This means that there are zonal computers in the front, center, and rear of the vehicle, which are connected via a central gateway. The central gateway thus acts as a central block, forwarding data reliably, securely protected against attacks, and at high speed.
An example of an application is COQOS Hypervisor SDK running on the processor of a Zonal Front Computer. Within this zone, all the functions of the body, IO aggregation, power distribution, and part of the ADAS sensors can be consolidated there. This consolidation of different applications comes in the background with a strict separation requirement on all the levels across the firmware. This means that e.g., safety, timing, or security cannot be impeded, nor can the functionality of the particular application be reduced. Also, the swap to a new firmware image cannot influence the execution of the functionalities that coexist inside the microcontroller.
To a certain extent, classic AUTOSAR already provides such separation, even supporting several ASIL-levels, without the need of a hypervisor. AUTOSAR provides separation at the level of the operating system and the applications consist of individual software-components. However, in complex software systems, the configuration of AUTOSAR becomes extremely complex as the behavior of the operating system and the services in the basic-software needs to be defined centrally, which breaks modularity. AUTOSAR also requires all applications to follow the AUTOSAR standard, even to the same version. Finally, the result of the AUTOSAR development process is a monolithic system that does not allow for modular software updates.
The hypervisor adds an additional level of decoupling, supporting a critical first level of separation in development, configuration, integration and software update. Within one virtual machine, an AUTOSAR-based system (providing a second level of separation) will be used in many cases. Several virtual machines can run different systems with different AUTOSAR implementations or even non-AUTOSAR-compliant software.
The use of virtualization technology brings numerous advantages for the integration of software systems in the vehicle:
Embedded virtualization, already in production on application processors, in-vehicle domains such as connectivity and infotainment, is now coming to microcontrollers and real-time processors. This technology will enable the integration of more complex software functions on domain controllers that cannot only use application processors. The new generations of microcontrollers have built-in hardware extensions. COQOS Hypervisor SDK for real-time processors picks up the hardware virtualization and extends it to make virtualization easier and more effective. With this virtualization technology automotive manufacturers can reliably execute multiple functions and various software services on a single piece of hardware, securely separated from other functions.
COQOS Hypervisor SDK for real-time processors on STM Stellar Integration MCUs
By loading the video, you agree to Vimeo’s privacy policy.
Learn more
COQOS Hypervisor SDK for real-time processors on STM Stellar Integration MCUs
By loading the video, you agree to Vimeo’s privacy policy.
Learn more