A QNX-based vehicle-mounted operating system and operating method

Abstract

The present disclosure relates to the technical field of vehicle-mounted operating system, and discloses a QNX-based vehicle-mounted operating system and an operating method, the system comprising: a kernel architecture module configured to provide a microkernel architecture of QNX, and configured to reserve underlying functions in the microkernel architecture, the underlying functions comprising: a real-time task scheduling mechanism, a dynamic content distribution mechanism and an inter-process communication mechanism; a system service library module configured to encapsulate the underlying functions, and configured to provide the underlying functions to an upper function module through an API interface; and the upper function module configured to call the API interface, and configured to realize corresponding external services based on the underlying functions.The QNX-based vehicle-mounted operating system provided by the present disclosure adopts the QNX microkernel architecture, so that the task scheduling can accurately and efficiently respond to various real-time requirements, and the real-time response capability of the vehicle-mounted operating system is improved.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of vehicle operating system, in particular to a vehicle operating system based on QNX and an operating method. BACKGROUND

[0002] With the development of technology, the intelligent development of automobiles has become an inevitable trend. Intelligent vehicles realize intelligent information exchange with people, vehicles, roads and the like through a vehicle operating system, so that the vehicle has intelligent environmental perception capability.

[0003] The vehicle operating system in the related art still has deficiencies in real-time response capability, which may cause operation failure of the vehicle and other problems. Therefore, how to improve the real-time response capability of the vehicle operating system and reduce the operation failure of the vehicle has become a problem to be solved. SUMMARY

[0004] Therefore, the present disclosure provides a vehicle operating system based on QNX and an operating method to solve the problem of how to improve the real-time response capability of the vehicle operating system and reduce the operation failure of the vehicle.

[0005] In one aspect, the present disclosure provides a vehicle operating system based on QNX, which includes a kernel architecture module, a system service library module and an upper layer function module. The kernel architecture module is configured to provide a microkernel architecture of QNX, and to reserve a bottom layer function in the microkernel architecture. The bottom layer function includes a real-time task scheduling mechanism, a dynamic content allocation mechanism and an inter-process communication mechanism. The system service library module is configured to encapsulate the bottom layer function, and to provide the bottom layer function to the upper layer function module through an API interface. The upper layer function module is configured to call the API interface, and to implement a corresponding external service based on the real-time task scheduling mechanism, the dynamic content allocation mechanism and the inter-process communication mechanism in the bottom layer function.

[0006] In another aspect, the present disclosure also provides an operating method. The method includes a kernel architecture module, which provides a microkernel architecture of QNX, and reserves a bottom layer function in the microkernel architecture. The bottom layer function includes a real-time task scheduling mechanism, a dynamic content allocation mechanism and an inter-process communication mechanism. A system service library module encapsulates the bottom layer function, and provides the bottom layer function to an upper layer function module through an API interface. The upper layer function module calls the API interface, and implements a corresponding external service based on the real-time task scheduling mechanism, the dynamic content allocation mechanism and the inter-process communication mechanism in the bottom layer function.

[0007] In another aspect, the present disclosure also provides a computer device, which includes a memory and a processor. The memory and the processor are communicatively connected with each other. The memory stores computer instructions. The processor implements the above-mentioned operating method by executing the computer instructions.

[0008] Another aspect of the present disclosure also provides a computer readable storage medium, having stored thereon computer instructions for causing a computer to implement the above-mentioned operation method.

[0009] By the QNX-based vehicle operating system and operation method of the above-mentioned embodiments of the present disclosure, by adopting the QNX microkernel architecture, the task scheduling can accurately and efficiently respond to various real-time requirements, and the real-time response capability of the vehicle operating system in the high-speed changing driving environment is improved.

[0010] In addition, by adopting the microkernel architecture, only the most basic underlying functions are retained in the kernel, and other functions are modularly encapsulated, so that the vehicle operating system can dynamically load and replace different upper function modules without affecting the kernel, improve the flexibility of the system, and further improve the real-time performance of the system. BRIEF DESCRIPTION OF DRAWINGS

[0011] In order to more clearly illustrate the technical solutions in the specific embodiments or related art of the present disclosure, the drawings needed to be used in the specific embodiments or related art description will be briefly introduced. Obviously, the drawings in the following description are some embodiments of the present disclosure, and those skilled in the art can also obtain other drawings according to these drawings without creative labor.

[0012] Figure 1 An exemplary schematic diagram of the architecture of a QNX-based vehicle operating system of an embodiment of the present disclosure is shown;

[0013] Figure 2 An exemplary schematic diagram of the architecture of a system service library module of a QNX-based vehicle operating system of an embodiment of the present disclosure is shown;

[0014] Figure 3 An exemplary schematic diagram of the architecture of an upper function module of a QNX-based vehicle operating system of an embodiment of the present disclosure is shown;

[0015] Figure 4 An exemplary schematic diagram of the architecture of a security encryption module of a QNX-based vehicle operating system of an embodiment of the present disclosure is shown;

[0016] Figure 5 An exemplary schematic diagram of the architecture of a communication network module of a QNX-based vehicle operating system of an embodiment of the present disclosure is shown;

[0017] Figure 6 An exemplary schematic diagram of the architecture of a graphical interface module of a QNX-based vehicle operating system of an embodiment of the present disclosure is shown;

[0018] Figure 7 An exemplary schematic diagram of an architecture of a QNX-based vehicle operating system domain controller module is shown according to an embodiment of the present disclosure;

[0019] Figure 8 An exemplary schematic diagram of an architecture of another QNX-based vehicle operating system upper layer function module is shown according to an embodiment of the present disclosure;

[0020] Figure 9 An exemplary schematic diagram of an architecture of another QNX-based vehicle operating system advanced driving assistance module, development tool and support module and ecosystem module is shown according to an embodiment of the present disclosure;

[0021] Figure 10 is a flow diagram of an operation method provided by an embodiment of the present disclosure;

[0022] Figure 11 is a detailed flow diagram of an operation method provided by an embodiment of the present disclosure;

[0023] Figure 12 is a structural schematic diagram of another supervisory device provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0024] With the development of mobile Internet, intelligent vehicles, as an innovative development direction of the automobile industry, are gradually popularized and changing the structure and functions of traditional vehicles. Intelligent vehicles add advanced sensors, controllers and actuators and other devices based on traditional vehicles, and realize intelligent information exchange with people, vehicles, roads and other through the vehicle-mounted sensing system and information terminals, so that the vehicle has intelligent environmental perception ability. Through intelligent analysis, intelligent vehicles can automatically judge the safe and dangerous state of driving, and autonomously drive according to user needs, and ultimately realize the purpose of replacing human operation.

[0025] In the related art, for example, in the patent document with publication number CN106891897A, a vehicle operating system, an intelligent vehicle and a vehicle control method are proposed, wherein the vehicle operating system comprises: an instruction generation module adapted to generate a plurality of control instructions based on received vehicle signals; an instruction classification module adapted to respectively assign corresponding processing levels to the control instructions; an instruction distribution module adapted to sequentially distribute the plurality of control instructions to corresponding processing modules in order from high to low processing level; and a processing module adapted to execute the corresponding control instructions.

[0026] However, in the related art vehicle operating system, the following technical problems still exist:

[0027] 1. The instruction hierarchy process requires judging, sorting and distributing each instruction, which may increase the system's processing latency, especially in high-concurrency task scenarios, where priority conflicts or scheduling queue blockages are likely to occur, thus affecting the system's real-time response capability.

[0028] 2. The system lacks a reasonable isolation mechanism, which may lead to multiple tasks sharing resources or data, causing mutual interference between tasks, triggering system anomalies, and thus reducing system security.

[0029] To address the aforementioned issues, various embodiments of this disclosure provide a QNX-based in-vehicle operating system. The system includes a kernel architecture module, a system service library module, and upper-layer functional modules. The kernel architecture module provides a QNX microkernel architecture, preserving underlying functionalities, including a real-time task scheduling mechanism, a dynamic content allocation mechanism, and an inter-process communication mechanism. The system service library module encapsulates these underlying functionalities and provides them to the upper-layer functional modules via API interfaces. The upper-layer functional modules call these API interfaces to implement corresponding external services based on the real-time task scheduling mechanism, dynamic content allocation mechanism, and inter-process communication mechanism within the underlying functionalities.

[0030] To make the objectives, technical solutions, and advantages of the embodiments of this disclosure clearer, the technical solutions of the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this disclosure, and not all embodiments. Based on the embodiments of this disclosure, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this disclosure.

[0031] refer to Figure 1 , Figure 1 An exemplary schematic diagram of the architecture of a QNX-based in-vehicle operating system according to an embodiment of this disclosure is shown. Figure 1 As shown, system 10 includes: kernel architecture module 101, system service library module 102, and upper-layer functional module 103, wherein:

[0032] Kernel architecture module 101 is used to provide the microkernel architecture of QNX, which retains the underlying functions, including: real-time task scheduling mechanism, dynamic content allocation mechanism and inter-process communication mechanism.

[0033] System service library module 102 is used to encapsulate the underlying functions and provide the underlying functions to the upper-level functional modules through API interfaces;

[0034] The upper layer function module 103 is configured to call the API interface, and implement the corresponding external service based on the real-time task scheduling mechanism, the dynamic content distribution mechanism and the inter-process communication mechanism in the underlying function.

[0035] In the embodiment, the QNX can be a real-time operating system based on a microkernel architecture. The microkernel architecture can mean that only the most basic operating system services are in the kernel of the system, and other functions run in the form of independent processes or services in the user space.

[0036] Further, the QNX-based vehicle-mounted operating system 10 can refer to an embedded operating system developed on the QNX operating system platform and specially used in the automotive field.

[0037] Further, the kernel architecture module 101 can refer to the kernel and infrastructure module, that is, the core module of the vehicle-mounted operating system 10 for providing underlying infrastructure services and operating system running. The system service library module 102 can refer to the system service and library module, which can be used as an intermediate layer of the system 10 to further encapsulate and extend the kernel function, provide standardized application programming interface (API) interfaces to the upper layer function module, and be used for calling and utilizing underlying resources and services. The upper layer function module 103 can be a specific application and function module in the vehicle-mounted operating system, and is used to implement external services and user interaction of the vehicle.

[0038] In one possible implementation, the kernel architecture module 101, the real-time task scheduling mechanism in the underlying function reserved in the microkernel architecture, can ensure that the tasks in the system 10 are arranged according to the priority, and respond to the task demand in real time by using the priority preemption scheduling.

[0039] The dynamic content distribution mechanism in the underlying function can allocate memory resources in real time according to the task demand, avoid memory waste, automatically release memory resources when the task is completed, and prevent memory leakage.

[0040] The inter-process communication mechanism in the underlying function can provide a data exchange and synchronization method between different processes, and ensure that the modules can work efficiently and cooperatively.

[0041] Here, the kernel architecture module 101 as the core of the system provides an efficient and reliable running environment for the upper layer function by being responsible for coordinating resources, task scheduling and communication. Through the real-time task scheduling mechanism, the dynamic content distribution mechanism and the inter-process communication mechanism, the real-time response capability, the memory usage efficiency and the inter-module collaboration performance of the system 10 are guaranteed.

[0042] The system service library module 102 can encapsulate the functions of the underlying kernel architecture through API interfaces, and provide the functions to the upper function modules in a standardized manner.

[0043] Here, each API interface can follow a unified calling specification to avoid problems caused by non-uniform calling methods. The calling of each API interface is subject to permission control to ensure that only authorized upper function modules 103 can access the corresponding functions.

[0044] The upper function modules 103 interact with the underlying functions in the kernel architecture module 101 by calling the API interfaces provided by the system service library module, and implement at least one external function.

[0045] As an example, the external function can include but is not limited to: information service, entertainment service, security service, control service, etc.

[0046] In the QNX-based vehicle-mounted operating system and operating method of the above-mentioned embodiments of the present disclosure, by adopting the QNX microkernel architecture, the task scheduling can accurately and efficiently respond to various real-time requirements, and the real-time response capability of the vehicle-mounted operating system in the high-speed changing driving environment is improved. By adopting the microkernel architecture, only the most basic underlying functions are retained in the kernel, and other functions are modularly encapsulated, so that the vehicle-mounted operating system can dynamically load and replace different upper function modules without affecting the kernel, improve the flexibility of the system, and further improve the real-time performance of the system.

[0047] In one possible implementation of the above-mentioned embodiments, the system service library module 102 includes: a process management unit 1021, a memory management unit 1022, a file management unit 1023, a library and API unit 1024, a POSIX library and graphics library unit 1025, wherein:

[0048] The process management unit 1021 is configured to manage the life cycle of at least one process and thread in the system, and the inter-process communication mechanism.

[0049] The memory allocation unit 1022 is configured to allocate memory resources for the process when the process is created by the process management unit 1021.

[0050] The file management unit 1023 is configured to obtain buffer memory from the memory allocation unit 1022, and read or write files in the storage device of the system based on the buffer memory.

[0051] The library and API unit 1024 is configured to provide a system call interface for interacting with the operating system and hardware.

[0052] The POSIX library and graphics library unit 1025 is configured to extend the system call interface, and provide a standardized API interface and graphics rendering support for the system call interface. The standardized API interface is in accordance with the POSIX standard, and the standardized API interface is used to call at least one of the process management unit 1021, the memory allocation unit 1022, and the file management unit 1023.

[0053] Reference Figure 2 , Figure 2 An exemplary schematic diagram of an architecture of a system service library module of a QNX-based in-vehicle operating system according to an embodiment of the present disclosure is shown. As shown in Figure 2 , the system service library module 102 includes a process management unit 1021, a memory management unit 1022, a file management unit 1023, a library and API unit 1024, and a POSIX library and graphics library unit 1025.

[0054] In this embodiment, the process management unit 1021 can be configured to manage the process and thread life cycle in the system, including the creation, scheduling, and destruction of processes, and inter-process communication mechanisms.

[0055] The process management unit 1021 can allocate memory resources through the memory allocation unit 1022 when creating a process, and can release memory resources through the memory allocation unit 1022 when destroying a process.

[0056] The memory allocation unit 1022 can be configured to dynamically allocate and reclaim memory resources in the system, and ensure that each process uses memory on demand.

[0057] The memory allocation unit 1022 allocates buffer memory for the file management unit 1023, so that the file management unit 1023 performs data read and write operations based on the buffer memory.

[0058] The file management unit 1023 can be configured to perform read and write operations on files in the storage device of the system 10.

[0059] The processes created by the process management unit 1021 need to complete file operation tasks through the file management unit 1023, such as processes reading configuration files and processes writing log information.

[0060] Further, the file management unit 1023 can be configured to support at least one file system. For example, the Journaled File System can be supported.

[0061] The library and API unit 1024 can be configured to provide a system call interface, so that the upper function module 103 can interact with the operating system and hardware.

[0062] The process management unit 1021, the memory allocation unit 1022, and the file management unit 1023 can implement corresponding process scheduling, memory allocation, and file reading and writing by calling the API interface provided by the library and API unit 1024.

[0063] Further, the API interface provided by the library and API unit 1024 can be extended by the POSIX library and graphics library unit 1025 to a standardized interface conforming to the POSIX standard, so as to have stronger cross-platform compatibility.

[0064] The POSIX library and graphics library unit 1025 can be used to provide a standardized API interface conforming to the POSIX standard and support graphics rendering functions.

[0065] The Portable Operating System Interface (POSIX) standard can be a set of open system interface specifications predefined to improve the portability and compatibility of the operating system.

[0066] Further, by providing a standardized API interface, cross-platform compatibility and development specifications can be ensured; by providing a graphics rendering function for implementing user interface design, smooth and beautiful interface display can be ensured.

[0067] As an example, in the process of displaying the dashboard of the vehicle in which the system 10 is located, the display buffer can be allocated by the memory management unit 1022 through the standardized API interface conforming to the POSIX standard in the POSIX library and graphics library unit 1025, and the rendering of the vehicle status can be completed by the graphics library in the POSIX library and graphics library unit 1025.

[0068] In the QNX-based vehicle-mounted operating system and operating method of the above-mentioned embodiments of the present disclosure, the process management unit 1021 realizes the modular design within the system through the inter-process communication mechanism, supports efficient and low-latency data exchange between different modules, and improves the overall operation efficiency and functional flexibility of the system. The memory management unit 1022 can dynamically allocate memory resources, so that the system resources can be flexibly allocated according to the needs, avoiding the problems of memory waste or shortage. The file management unit 1023 can provide file read-write functions, optimize the access efficiency of storage devices through the buffer mechanism, and reduce the delay of read-write operations. The library and API unit 1024 can shield the complexity of the underlying operating system and hardware by providing system call interfaces, so that the upper functional modules can conveniently call the underlying functions. The POSIX library and graphics library unit 1025 can support the implementation of complex image rendering functions, provide efficient support for user interfaces and display systems, improve the visualization capability and user experience of the system, and can also provide a consistent development environment to ensure the cross-platform compatibility of software and reduce the porting cost.

[0069] In one possible implementation of the above-mentioned embodiment, the upper functional module 103 includes at least one of the following: a security encryption module 1031, a communication network module 1032, a graphical interface module 1033, and a domain controller module 1034.

[0070] Reference Figure 3 , Figure 3 An exemplary schematic diagram of the architecture of an upper functional module of a QNX-based vehicle-mounted operating system according to an embodiment of the present disclosure is shown. As shown in Figure 3 The upper functional module 103 includes: a security encryption module 1031, a communication network module 1032, a graphical interface module 1033, and a domain controller module 1034.

[0071] In this embodiment, the security encryption module 1031 can be used to be responsible for the security protection of the system 10 and the vehicle;

[0072] The communication network module 1032 can be used to manage the communication network inside and outside the vehicle;

[0073] The graphical interface module 1033 can be used to provide user interaction interface and display functions;

[0074] The domain controller module 1034 can be used to manage the resources and task scheduling of different functional domains of the vehicle, and realize the integration and centralized control of the vehicle.

[0075] Among them, the graphical interface module 1033 can be used to support the development and operation of the instrument panel, the infotainment system and the touch display screen.

[0076] The functional domain of the vehicle can refer to dividing different functional modules of the vehicle into a plurality of relatively independent functional areas, each of which focuses on implementing a specific type of function.

[0077] As an example, the functional domain of the vehicle can include, but is not limited to, a power system domain, a chassis control domain, an infotainment domain, a communication network domain, etc.

[0078] The security encryption module 1031, the communication network module 1032, the graphical interface module 1033, and the domain controller module 1034 in the above-mentioned upper functional module 103 can call the underlying functions provided by the kernel architecture module 101 through the standardized API interface provided by the system service library module 102 to realize their respective upper functions.

[0079] In the QNX-based vehicle-mounted operating system and operating method of the above-mentioned embodiments of the present disclosure, by dividing complex vehicle functions into relatively independent modules, the system coupling degree is reduced, and the maintainability and scalability are enhanced. Each sub-module seamlessly cooperates based on the API interface and the underlying function, improving the overall efficiency and performance of the system.

[0080] In one possible implementation of the above-mentioned embodiments, the security encryption module 1031 includes a security authentication unit 1031a, a security partition unit 1031b, a network security unit 1031c, a protocol determination unit 1031d, and a security startup unit 1031e, wherein:

[0081] The security authentication unit 1031a is configured to verify the identity information of at least one of a user, a device, and an application program when processing sensitive data, and divide the identity information into a legal identity and an illegal identity;

[0082] The security partition unit 1031b is configured to perform spatial partitioning and temporal partitioning on the processing of critical functions and non-critical functions based on a preset partitioning result using hardware isolation and / or virtualization technology;

[0083] The protocol determination unit 1031c is configured to provide the network security unit 1031d with a data encryption protocol and a secure communication protocol;

[0084] The network security unit 1031d is configured to obtain a legal identity from the security authentication unit 1031a, authorize the legal identity based on the data encryption protocol and the secure communication protocol, and enable the legal identity to perform network communication;

[0085] The security startup unit 1031e is configured to determine whether there is an illegal identity in the system based on the security authentication unit 1031a, and start the system when it is determined that there is no illegal identity in the system.

[0086] Reference Figure 4 ,Figure 4 An exemplary schematic diagram of an architecture of a QNX-based vehicle operating system security encryption module is shown. As shown, the security encryption module 1031 includes a security authentication unit 1031a, a security partition unit 1031b, a network security unit 1031c, a protocol determination unit 1031d, and a security start unit 1031e. Figure 4

[0087] In this embodiment, the security authentication unit 1031a can be used to verify security-related identity information and divide the identity information into legal and illegal identities.

[0088] The security authentication unit 1031a verifies the identity of a user, device, application, etc., to ensure that only legal identities can access and operate sensitive data when processing such data.

[0089] Here, a legal identity can refer to a user, device, or application that has been authenticated, authorized, and confirmed to meet system security requirements.

[0090] An illegal identity can refer to a subject attempting to break through system security controls for unauthorized operations, or a malicious actor's fake identity. For example, illegal identities can include, but are not limited to, hacking, malware, and unauthorized external devices.

[0091] In one possible implementation, the domain controller module 1034 divides the functions in the system 10 into at least one function domain, which can be divided into critical functions and non-critical functions according to security requirements and operational risks.

[0092] The security partition unit 1031b can be used to spatially and temporally partition the processing of critical functions and non-critical functions based on the pre-set function domain division results using hardware isolation and / or virtualization technology to ensure that the operation of critical functions is not disturbed by other non-critical functions.

[0093] Here, a critical function can refer to a function that directly relates to system security, stability, reliability, or core task execution; if the above function is lost or damaged, it can cause the system to malfunction, even potentially endangering personnel safety or causing significant losses.

[0094] For example, critical functions can include, but are not limited to, automatic driving control, battery management system, and engine control unit.

[0095] A non-critical function can refer to a function that does not directly affect the security, stability, or core tasks of the system. Even if the above function fails or is interrupted, the system can continue to operate normally.

[0096] ​For example, non-critical functions can be, but are not limited to: in-vehicle entertainment system, navigation system, entertainment system.

[0097] The protocol determination unit 1031c can be used to determine and provide appropriate data encryption protocols and secure communication protocols for encrypting and protecting data exchange in the system.

[0098] The network security unit 1031d can be used to authorize the legal identity by receiving the legal identity information from the security authentication unit 1031a, using the data encryption protocol and the secure communication protocol determined by the protocol determination unit 1031c; the network security unit 1031d can allow the legal identity to communicate on the network after the legal identity is authenticated, to ensure the security of the communication process and avoid unauthorized access.

[0099] The secure boot unit 1031e can determine whether there is an illegal identity in the system by accessing the security authentication unit 1031a; if it is determined that there is an illegal identity, the boot process will be interrupted and the system 10 will not enter the normal state; if it is determined that there is no illegal identity, the system 10 is booted to ensure that the system 10 has complete security protection from the boot stage to prevent the system 10 from being maliciously tampered with or infected with viruses.

[0100] In the QNX-based in-vehicle operating system and operating method of the above-mentioned embodiments of the present disclosure, the various units in the security encryption module 1031 work together to ensure the multi-layer security protection of the system, thereby increasing the security of the in-vehicle system. Each unit works at different security levels, from identity verification to data encryption, to authorization and boot verification of network communication, which can ensure that the system can prevent potential security threats at each stage.

[0101] In one possible implementation of the above-mentioned embodiments, the communication network module 1032 includes: a network protocol stack unit 1032a, a TCP / IP unit 1032b, a vehicle internal communication unit 1032c, an inter-process communication unit 1032d, a message passing unit 1032e, and a shared memory unit 1032f, wherein:

[0102] The network protocol stack unit 1032a is used to support communication between the system 10 and an external network;

[0103] The TCP / IP unit 1032b is used to support communication between the system 10 and an external device or an external server;

[0104] The vehicle internal communication unit 1032c is used to manage communication between at least one module inside the system 10;

[0105] The inter-process communication unit 1032d is used to manage communication between at least one process in the system;

[0106] message passing unit 1032e, configured to process message passing between different processes, between different modules, or between different systems;

[0107] shared memory unit 1032f, configured to set a shared memory region between at least one process, and perform memory sharing by using the shared memory region.

[0108] Reference Figure 5 , Figure 5 An exemplary schematic diagram of an architecture of a communication network module of a QNX-based in-vehicle operating system according to an embodiment of the present disclosure is shown. As shown in Figure 5 The communication network module 1032 includes a network protocol stack unit 1032a, a TCP / IP unit 1032b, a vehicle internal communication unit 1032c, an inter-process communication unit 1032d, a message passing unit 1032e, and a shared memory unit 1032f.

[0109] In this embodiment, the network protocol stack in the network protocol stack unit 1032a can be a collection of different communication protocols that can determine how data is transmitted in a network, including operations such as encapsulation, transmission, and unpacking of data. Through the network protocol stack in the network protocol stack unit 1032a, the system 10 can send requests to or receive data from an external network.

[0110] The TCP / IP unit 1032b can be part of the network protocol stack in the network protocol stack unit 1032a, and can be used to support the system 10 to communicate with external devices or external servers through IP addresses and port numbers.

[0111] The Transmission Control Protocol / Internet Protocol (TCP / IP) family can include TCP and IP, and can be responsible for ensuring reliable transmission and correct routing of data in a network.

[0112] The vehicle internal communication unit 1032c can be used for information exchange and cooperation between at least one independent module within the system 10.

[0113] The inter-process communication unit 1032d can be used to manage data sharing and mutual cooperation between at least one process in the system 10 by using an Inter-Process Communication (IPC) mechanism, to ensure safe and effective exchange of information between different processes.

[0114] The message passing unit 1032e can be used to process message passing between different processes, between different modules, or between different systems;

[0115] The shared memory unit 1032f can be configured to provide a shared memory region for at least one process, so that different processes can directly access and exchange data through the shared memory region.

[0116] The shared memory region can be an efficient inter-process communication method, allowing processes to directly read and write memory without the need for other resources.

[0117] In one possible implementation, the network protocol stack unit 1032a and the TCP / IP unit 1032b are configured to handle the connection and data exchange of the system with external networks and external devices, while the vehicle internal communication unit 1032c, the inter-process communication unit 1032d, the message passing unit 1032e, and the shared memory unit 1032f are configured to handle data sharing and collaboration between internal modules and processes of the system.

[0118] In the QNX-based vehicle operating system and operating method of the above-mentioned embodiments of the present disclosure, the network protocol stack unit 1032a ensures the stability and security of data transmission over the network by providing standard communication protocol support. The TCP / IP unit 1032b ensures stable connection of the system with external hardware devices or remote servers, improving the scalability of the system. The vehicle internal communication unit 1032c ensures low-latency and high-bandwidth communication by managing data exchange between different modules within the vehicle system, ensuring real-time control capabilities of the vehicle. The inter-process communication unit 1032d ensures efficient exchange of information between different processes by managing communication between different processes, further improving the real-time performance of the system.

[0119] In one possible implementation of the above-mentioned embodiments, the graphical interface module 1033 includes a virtualization unit 1033a, a digital cockpit platform unit 1033b, an infotainment unit 1033c, and an instrument panel display unit 1033d, wherein:

[0120] The virtualization unit 1033a is configured to use virtualization technology to run at least one upper function module 103 in a corresponding virtual machine;

[0121] The digital cockpit platform unit 1033b is configured to display vehicle information, entertainment content, and navigation maps of the vehicle on which the system is located to the user based on a human-computer interaction interface;

[0122] The infotainment unit 1033c is configured to provide multimedia functions to the user based on a human-computer interaction interface;

[0123] The instrument panel display unit 1033d is configured to display state information, warning information, and key data information of the vehicle to the user.

[0124] ReferenceFigure 6 , Figure 6 An exemplary schematic diagram of an architecture of a QNX-based vehicle-mounted operating system graphical interface module is shown. As shown in Figure 6 The graphical interface module 1033 includes a virtualization unit 1033a, a digital cockpit platform unit 1033b, an infotainment unit 1033c, and an instrument panel display unit 1033d.

[0125] In this embodiment, the virtualization unit 1033a can be used to run multiple operating systems simultaneously using virtualization technology, so that each upper function module can run independently in its virtual environment, avoiding mutual interference and conflict of system resources.

[0126] The digital cockpit platform unit 1033b can be used to display vehicle information, entertainment content, and navigation maps, etc. to the user based on the human-computer interaction interface.

[0127] The digital cockpit platform unit 1033b can provide an intuitive interaction interface for the user, so that the driver and passenger can conveniently obtain information of the vehicle and the entertainment system.

[0128] The infotainment unit 1033c can be used to provide entertainment content and navigation information to the user with the help of the digital cockpit platform unit 1033b.

[0129] The instrument panel display unit 1033d can be used to provide the user with state information, warning information, and key data information of the vehicle with the help of the digital cockpit platform unit 1033b. The key data information can include but is not limited to vehicle speed, fuel quantity, engine temperature, etc.

[0130] In the QNX-based vehicle-mounted operating system and the operating method of the above-mentioned embodiments of the present disclosure, the virtualization unit 1033a achieves isolation and independent running of system modules by allocating each upper function module to an independent virtual machine, thereby improving the stability of the vehicle-mounted system. The virtualization technology can flexibly allocate various system resources, further improving the flexibility of the vehicle-mounted system. The cooperation of each unit enables seamless display of vehicle-mounted information and entertainment content, ensuring that the driver can obtain key information in real time and improving safety and driving experience.

[0131] In one possible implementation of the above-mentioned embodiments, the domain controller module 1034 includes a domain controller software 1034a, a centralized management module 1034b, and a high-performance computing module 1034c, wherein:

[0132] The domain controller software 1034a is configured to divide at least one function of a vehicle in which the system is located into a corresponding function domain.

[0133] The centralized management module 1034b is configured to uniformly manage at least one function domain of the vehicle.

[0134] The high-performance computing module 1034c is configured to process a computing-intensive task in the at least one function domain.

[0135] Reference Figure 7 , Figure 7 An exemplary schematic diagram of an architecture of a QNX-based vehicle-mounted operating system domain controller module is shown. As shown in the diagram, the domain controller module 1034 includes a domain controller software 1034a, a centralized management module 1034b, and a high-performance computing module 1034c. Figure 7

[0136] In this embodiment, the domain controller software 1034a can be the core of the domain controller module 1034, and can be configured to logically divide vehicle functions according to different functional requirements, and determine at least one function domain.

[0137] The centralized management module 1034b can be configured to uniformly manage multiple function domains of the vehicle, and to realize state monitoring, resource allocation and coordination of each function domain.

[0138] The centralized management module 1034b can ensure that each function of the vehicle can be orderly and reliably operated by means of the function domain division information provided by the domain controller software 1034a and through management of each function domain.

[0139] The centralized management module can also ensure that the processing of the computing-intensive task does not affect the normal operation of other function domains by means of the high-performance computing module 1034c.

[0140] The high-performance computing module 1034c is configured to process a computing-intensive task, which can be a task that requires a large amount of computing resources to complete.

[0141] For example, the computing-intensive task can include, but is not limited to, image and video processing, automatic driving algorithm, and sensor data processing.

[0142] Further, the high-performance computing module 1034c can provide computing capability support for the centralized management module 1034b, and when a computing-intensive task needs to be performed, the high-performance computing module 1034c can be scheduled to execute the task.

[0143] ​In the QNX-based vehicle operating system and operating method of the above-mentioned embodiments of the present disclosure, by dividing different functions into multiple function domains, the system can run different function modules without interfering with each other, enhancing the stability and scalability of the system. The cooperation of the centralized management module 1034b and the high-performance computing module 1034c can dynamically allocate computing resources according to the needs of tasks, ensuring that computationally intensive tasks are supported by sufficient computing power, while not affecting the normal operation of other function domains. This efficient resource management can improve the overall performance and response speed of the system.

[0144] In one possible implementation of the above-mentioned embodiments, the upper-layer function module 103 can further include: an advanced driving assistance module 1035, a development tool and support module 1036, and an ecosystem module 1037.

[0145] In this embodiment, the advanced driving assistance module 1035 can include: an ADAS platform 1035a, a sensor integration unit 1035b, an algorithm and decision unit 1036c.

[0146] The development tool and support module 1036 can include: a QNX software development platform 1036a, a development tool chain 1036b, a simulator and test tool 1036c, a document and community support module 1036d, a technical document unit 1036e, and a developer community 1036f.

[0147] The ecosystem module 1037 can include: a hardware support unit 1037a, a hardware platform compatibility unit 1037b, a software ecosystem unit 1037c, and a third-party application support unit 1037d.

[0148] Reference Figure 8 , Figure 8 Another example of the architecture of the upper-layer function module of the QNX-based vehicle operating system of the embodiments of the present disclosure is shown in the example of the schematic diagram. As shown in Figure 8 The upper-layer function module 103 can further include: an advanced driving assistance module 1035, a development tool and support module 1036, and an ecosystem module 1037.

[0149] Reference Figure 9 , Figure 9 Another example of the architecture of the upper-layer function module of the QNX-based vehicle operating system of the embodiments of the present disclosure is shown in the example of the schematic diagram. As shown in Figure 9As shown, the advanced driving assistance module 1035 can include an ADAS platform 1035a, a sensor integration unit 1035b, an algorithm and decision unit 1036c, and a development tool and support module 1036 can include a QNX software development platform 1036a, a development tool chain 1036b, a simulator and test tool 1036c, a document and community support module 1036d, a technical document unit 1036e, and a developer community 1036f. An ecosystem module 1037 can include a hardware support unit 1037a, a hardware platform compatibility unit 1037b, a software ecosystem unit 1037c, and a third-party application support unit 1037d.

[0150] The advanced driver assistance system (ADAS) platform 1035a can be the core infrastructure of the entire advanced driving assistance system 1035, responsible for coordinating the collaboration of various modules, resource allocation and management. The ADAS platform 1035a can be used to improve driving experience, enhance vehicle safety, and assist drivers in completing complex driving tasks through various sensors and algorithms.

[0151] The sensor integration unit 1035b can be the hardware part of the advanced driving assistance system 1035, which can be responsible for integrating information from different sensors, collecting data of the vehicle's surrounding environment through multiple sensors, fusing and preprocessing the raw data, and providing it to the algorithm and decision unit 1036c for further analysis and processing.

[0152] The sensor integration unit 1035b can include, but is not limited to, cameras, radars, and lidar sensors.

[0153] The algorithm and decision unit 1036c can be used to analyze the data collected by the sensor integration unit 1035b in depth, generate control instructions, and realize adaptive cruise control, lane keeping, automatic parking and other functions.

[0154] The development tool and support module 1036 can be used to support the development, debugging, testing and other work of the system, so that developers can more efficiently build and optimize the system.

[0155] The QNX software development platform 1036a can be a complete set of development environment based on the QNX operating system, providing a variety of development tools and resources necessary for developers to develop applications on the QNX operating system.

[0156] The development tool chain 1036b, which can be a collection of tools for developing, compiling, and debugging applications, can include a compiler, a debugger, and a linker. The tool chain can convert source code written by developers into machine code and debug it. The compiler compiles the code into an object program, and the debugger helps developers identify and fix errors during development.

[0157] The simulator and testing tool 1036c can be used to simulate system environments and perform functional verification. The technical documentation unit 1036e can be used to provide detailed documentation required by developers, helping them understand how to use development tools, libraries, and API interfaces. The developer community 1036f can be used to provide technical exchanges and problem solving. The ecosystem module 1037 can be used to provide hardware and software support for developers, facilitate the integration of third-party applications, and ensure system compatibility.

[0158] The hardware support unit 1037a can be used to provide drivers, hardware interface protocols, and configuration files for specific hardware devices to ensure that the system can run normally in different hardware environments. The hardware platform compatibility unit 1037b can ensure that the system can run across platforms by abstracting hardware differences. The software ecosystem unit 1037c can be used to provide support for operating systems, development platforms, libraries, and other software to ensure that the system can integrate with other software and services. The third-party application support unit 1037d can be used to ensure that the system can support and be compatible with third-party application software.

[0159] In the QNX-based in-vehicle operating system and operating method of the above embodiments of the present disclosure, the advanced driving assistance module 1035 improves the intelligence and automation level of the in-vehicle operating system, the development tools and support module 1036 provides developers with rich tools and resources, shortens the development cycle and improves the development efficiency and quality. The ecosystem module 1037 ensures the hardware compatibility, software ecosystem integration and third-party application support of the system, and enhances the scalability and flexibility of the system.

[0160] In one specific embodiment, referring to Figure 10 , Figure 10 is a flowchart of an operating method provided by an embodiment of the present disclosure, applied to the QNX-based in-vehicle operating system shown in the above Figure 1 , the flow of the method can include the following steps:

[0161] Step S1001, the kernel architecture module provides the microkernel architecture of QNX, and the microkernel architecture retains underlying functions, including real-time task scheduling mechanism, dynamic content allocation mechanism, and inter-process communication mechanism.

[0162] Step S1002, the system service library module encapsulates the underlying function, and provides the underlying function to the upper function module through an API interface.

[0163] Step S1003, the upper function module calls the API interface, and realizes the corresponding external service based on a real-time task scheduling mechanism, a dynamic content distribution mechanism and an inter-process communication mechanism in the underlying function.

[0164] In one embodiment, with reference to Figure 11 , Figure 11 is a detailed flowchart of an operation method provided by the embodiment of the present disclosure, and is applied to the QNX-based vehicle-mounted operating system shown in the above Figure 1 , and the flow of the method can include the following steps:

[0165] Step S1101, system architecture design;

[0166] Here, a modular and scalable QNX system architecture is designed;

[0167] Step S1102, hardware platform selection;

[0168] Here, a hardware platform suitable for the QNX system is selected;

[0169] Step S1103, operating system installation;

[0170] Here, the QNX operating system is installed in the hardware platform, that is, the operating system is installed using the Neutrino host installation disc provided by QNX;

[0171] Step S1104, system startup and configuration;

[0172] Here, the initial settings of the system are configured, and the operation interface is entered. After the system is started, the hardware configuration is automatically detected. No password is required for login in the system so as to quickly enter the root authority, which is suitable for debugging in the development stage;

[0173] Step S1105, process management and dynamic loading;

[0174] Here, the processes and the dynamic loading of the modules in the system are managed;

[0175] Step S1106, development environment building;

[0176] Here, the QNX software development platform is installed, the integrated development environment (IDE) is started, and the connection between the virtual machine and the IDE is configured;

[0177] Step S1107, software integration and testing;

[0178] Here, we import the pre-downloaded board support package (BSP) for compilation, and import the example demo for compilation and testing to verify whether the core functions meet the design requirements.

[0179] Step S1108, Network structure configuration;

[0180] Here, the network communication capabilities of the configuration system are discussed.

[0181] Step S1109, Virtualization technology support;

[0182] Here, multiple virtual machines are run on a single system-on-a-chip using the Hypervisor virtualization solution provided by the QNX system.

[0183] Please see Figure 12 , Figure 12 This is a schematic diagram of another QNX-based in-vehicle operating system provided in this disclosure embodiment, as shown below. Figure 12 As shown, the computer device includes one or more processors 10, memory 20, and interfaces for connecting the components, including high-speed interfaces and low-speed interfaces. The components communicate with each other via different buses and can be mounted on a common motherboard or otherwise installed as needed. The processors can process instructions executed within the computer device, including instructions stored in or on memory to display graphical information of a GUI on external input / output devices (such as display devices coupled to the interfaces). In some alternative implementations, multiple processors and / or multiple buses can be used with multiple memories and multiple memory modules, if desired. Similarly, multiple computer devices can be connected, each providing some of the necessary operations (e.g., as a server array, a group of blade servers, or a multiprocessor system). Figure 12 Take a processor 10 as an example.

[0184] Processor 10 may be a central processing unit, a network processor, or a combination thereof. Processor 10 may further include a hardware chip. The hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (PLD), or a combination thereof. The programmable logic device may be a complex programmable logic device (CAMP), a field-programmable gate array (FPGA), a general-purpose array logic (GDA), or any combination thereof.

[0185] The memory 20 stores instructions executable by at least one processor 10 to cause at least one processor 10 to perform the method shown in the above embodiments.

[0186] The memory 20 can include a program storage area and a data storage area. The program storage area can store an operating system, application programs required for at least one function, and the like. The data storage area can store data created according to usage of the computer device, and the like. In addition, the memory 20 can include a high-speed random access memory, and can also include a non-transitory memory such as at least one of a magnetic disk storage device, a flash memory device, or other non-transitory solid state memory device. In some alternative embodiments, the memory 20 can optionally include a memory that is remotely located with respect to the processor 10, and these remotely located memories can be connected to the computer device through a network. Examples of the network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0187] The memory 20 can include a volatile memory, such as a random access memory, and can also include a non-volatile memory, such as a flash memory, a hard disk, or a solid state disk. The memory 20 can also include a combination of the above-mentioned types of memories.

[0188] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30, and the output device 40 can be connected through a bus or other means, Figure 12 The connection through the bus is taken as an example.

[0189] The input device 30 can receive inputted digital or character information, and can also generate key signal inputs related to user settings and function controls of the computer device, such as a touch screen, a keypad, a mouse, a trackpad, a touchpad, a pointing stick, one or more mouse buttons, a trackball, a joystick, and the like. The output device 40 can include a display device, an auxiliary lighting device (e.g., an LED), a tactile feedback device (e.g., a vibration motor), and the like. The display device includes, but is not limited to, a liquid crystal display, a light emitting diode, a display, and a plasma display. In some alternative embodiments, the display device can be a touch screen.

[0190] The computer device also includes a communication interface 30 for communication of the computer device with other devices or communication networks.

[0191] The embodiments of the present disclosure further provide a computer readable storage medium, and the method according to the embodiments of the present disclosure can be implemented in hardware, firmware, or recorded in a storage medium, or be implemented as computer code originally stored in a remote storage medium or a non-transitory machine readable storage medium and downloaded through a network and stored in a local storage medium, so that the method described herein can be processed by such software on a storage medium using a general purpose computer, a special purpose processor, or programmable or special purpose hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only memory, a random access memory, a flash memory, a hard disk or a solid state disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that the computer, processor, microprocessor controller or programmable hardware includes a storage component that can store or receive software or computer code, when the software or computer code is accessed and executed by the computer, processor or hardware, the method shown in the above embodiments is implemented.

[0192] Part of the present disclosure can be applied as a computer program product, for example, computer program instructions, when executed by a computer, through the operation of the computer, the method and / or technical solutions according to the present disclosure can be called or provided. Those skilled in the art should understand that the form of computer program instructions in computer readable medium includes but is not limited to source file, executable file, installation package file, etc., accordingly, the way of computer program instructions executed by computer includes but is not limited to: the computer directly executes the instructions, or the computer compiles the instructions and then executes the corresponding compiled program, or the computer reads and executes the instructions, or the computer reads and installs the instructions and then executes the corresponding installed program. Here, the computer readable medium can be any available computer readable storage medium or communication medium accessible to the computer.

[0193] Although the embodiments of the present disclosure are described in conjunction with the accompanying drawings, various modifications and changes can be made by those skilled in the art without departing from the spirit and scope of the present disclosure, and such modifications and changes fall within the scope defined by the appended claims.

Claims

1. A QNX-based in-vehicle operating system, characterized by, The system comprises a kernel architecture module, a system service library module and an upper layer function module, wherein: the kernel architecture module is configured to provide a microkernel architecture of QNX, and reserve underlying functions in the microkernel architecture, the underlying functions comprising a real-time task scheduling mechanism, a dynamic content allocation mechanism and an inter-process communication mechanism; the system service library module is configured to encapsulate the underlying functions, and provide the underlying functions to the upper layer function module through an API interface; the upper layer function module is configured to call the API interface, and implement corresponding external services based on the real-time task scheduling mechanism, the dynamic content allocation mechanism and the inter-process communication mechanism in the underlying functions; the upper layer function module comprises at least one of a security encryption module, a communication network module, a graphical interface module and a domain controller module; the security encryption module comprises a security authentication unit, a security partition unit, a network security unit, a protocol determination unit and a security start unit, wherein: the security authentication unit is configured to verify identity information of at least one of a user, a device and an application program when processing sensitive data, and divide the identity information into legal identity and illegal identity; the security partition unit is configured to perform spatial partitioning and time partitioning on processing of critical functions and non-critical functions based on a preset partitioning result by using hardware isolation and / or virtualization technology; the protocol determination unit is configured to provide a data encryption protocol and a secure communication protocol to the network security unit; the network security unit is configured to obtain legal identity from the security authentication unit, authorize the legal identity based on the data encryption protocol and the secure communication protocol, and enable the legal identity to perform network communication; the security start unit is configured to determine whether there is illegal identity in the system based on the security authentication unit, and start the system when it is determined that there is no illegal identity in the system.

2. The system of claim 1, wherein, the system service library module comprises a process management unit, a memory management unit, a file management unit, a library and API unit, a POSIX library and a graphics library unit, wherein: the process management unit is configured to manage the life cycle of at least one process and thread in the system, and an inter-process communication mechanism; the memory allocation unit is configured to allocate memory resources for a process when the process is created by the process management unit; the file management unit is configured to obtain buffer memory from the memory allocation unit, and read or write a file in a storage device of the system based on the buffer memory; the library and API unit is configured to provide a system call interface for interacting with an operating system and hardware; the POSIX library and the graphics library unit are configured to extend the system call interface, and provide a standardized API interface and graphics rendering support for the system call interface; the standardized API interface conforms to the POSIX standard, and is used to call at least one of the process management unit, the memory allocation unit and the file management unit.

3. The system of claim 1, wherein, The communication network module comprises a network protocol stack unit, a TCP / IP unit, a vehicle internal communication unit, an inter-process communication unit, a message passing unit and a shared memory unit, wherein: the network protocol stack unit is configured to support communication between the system and an external network; the TCP / IP unit is configured to support communication between the system and an external device or an external server; the vehicle internal communication unit is configured to manage communication between at least two modules in the system; the inter-process communication unit is configured to manage communication between at least two processes in the system; the message passing unit is configured to process message passing between different processes, between different modules or between different systems; the shared memory unit is configured to set up a shared memory area between the at least two processes, and the at least two processes share memory by using the shared memory area.

4. The system of claim 1, wherein, The graphic interface module comprises a virtualization unit, a digital cockpit platform unit, an information entertainment unit and a dashboard display unit, wherein: the virtualization unit is configured to make at least one upper function module run in a corresponding virtual machine by using a virtualization technology; the digital cockpit platform unit is configured to display vehicle information, entertainment content and navigation maps of a vehicle in which the system is located to a user based on a human-computer interaction interface; the information entertainment unit is configured to provide multimedia functions to the user based on the human-computer interaction interface; the dashboard display unit is configured to display state information, warning information and key data information of the vehicle to the user.

5. The system of claim 1, wherein, The domain controller module comprises a domain controller software, a centralized management module and a high-performance computing module, wherein: the domain controller software is configured to divide at least one function of a vehicle in which the system is located into a corresponding function domain; the centralized management module is configured to uniformly manage at least one function domain of the vehicle; the high-performance computing module is configured to process a computing-intensive task in the at least one function domain.

6. A method of operation, characterized by, The method comprises: a kernel architecture module provides a microkernel architecture of QNX, and retains underlying functions in the microkernel architecture, wherein the underlying functions comprise a real-time task scheduling mechanism, a dynamic content allocation mechanism and an inter-process communication mechanism; a system service library module encapsulates the underlying functions, and provides the underlying functions to upper function modules through an API interface; the upper function modules call the API interface, and implement corresponding external services based on the real-time task scheduling mechanism, the dynamic content allocation mechanism and the inter-process communication mechanism in the underlying functions; wherein the upper function modules comprise at least one of the following: a security encryption module, a communication network module, a graphic interface module and a domain controller module; the security encryption module comprises a security authentication unit, a security partition unit, a network security unit, a protocol determination unit and a security start unit, wherein: the security authentication unit verifies identity information of at least one of a user, a device and an application program when processing sensitive data, and divides the identity information into legal identity and illegal identity; the security partition unit divides processing of a key function and a non-key function in space and time based on a preset division result by using hardware isolation and / or a virtualization technology. The protocol determination unit provides a data encryption protocol and a secure communication protocol to the network security unit; The network security unit obtains a legal identity from the security authentication unit, and authorizes the legal identity based on the data encryption protocol and the secure communication protocol, so that the legal identity performs network communication; The security starting unit determines whether there is an illegal identity in the system based on the security authentication unit, and starts the system when it is determined that there is no illegal identity in the system.

7. A computer device, comprising: Comprise: A memory and a processor, which are in communication connection with each other, and the memory stores computer instructions, and the processor executes the computer instructions to perform the operation method of claim 6.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer instructions, and the computer instructions are used to make the computer execute the operation method of claim 6.

Images