Signal processing device and vehicle display device including the same

Abstract

The invention relates to a signal processing device and a vehicle display device having the same. A signal processing apparatus according to an embodiment of the present invention includes: a processor that performs signal processing for a display mounted on a vehicle; the processor executes the server virtual machine and the at least one guest virtual machine on a hypervisor within the processor; the server virtual machine transmits the security key to the first client virtual machine through a first communication mode or a second communication mode different from the first communication mode; the server virtual machine transmits data encrypted in correspondence with the security key to the first guest virtual machine by means of the second communication method. Therefore, the security during data transmission can be enhanced.

Description

Technical Field

[0001] The present invention relates to a signal processing apparatus and a vehicle display device having the signal processing apparatus, and more specifically, to a signal processing apparatus capable of enhancing the security of data transmission and a vehicle display device having the signal processing apparatus. Background Technology

[0002] A vehicle is a device that moves in the direction desired by the user. For example, a car can be cited as a representative example.

[0003] On the other hand, in order to facilitate the use of the vehicle, a vehicle display device is installed inside the vehicle.

[0004] For example, displays are configured in clusters to show various information. On the other hand, in order to display vehicle driving information, it is becoming a trend to install various displays in vehicles, such as AVN (Audio Video Navigation) displays, in addition to clusters.

[0005] As mentioned above, there is a problem that the signal processing for the displays becomes more complex as the number of displays in a vehicle display device increases.

[0006] In particular, signal processing within the signal processing device used for displays becomes more complex, and the security of data transmission may become a significant issue. Summary of the Invention

[0007] The problem that the invention aims to solve

[0008] The problem solved by the present invention is to provide a signal processing device that can enhance the security of data transmission and a display device for a vehicle having the signal processing device.

[0009] On the other hand, another problem solved by the present invention is to provide a signal processing apparatus capable of enhancing the security of data transmission by utilizing a plurality of virtual machines, and a display device for a vehicle having the signal processing apparatus.

[0010] On the other hand, another problem solved by the present invention is to provide a signal processing device that can enhance the security when receiving data from an external server, and a display device for a vehicle having the signal processing device.

[0011] On the other hand, another problem solved by the present invention is to provide a signal processing device that can enhance the security of data transmission even when multiple virtual machines are driven by different operating systems, and a display device for a vehicle having the signal processing device.

[0012] Technical solutions to the problem

[0013] A signal processing apparatus according to an embodiment of the present invention for achieving the above objectives includes: a processor that performs signal processing for a display mounted on a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a management program within the processor; the server virtual machine transmitting a security key to a first client virtual machine via a first communication method or a second communication method different from the first communication method; and the server virtual machine transmitting data encrypted corresponding to the security key to the first client virtual machine via the second communication method.

[0014] On the other hand, the first communication method can be interface communication; the second communication method can be SOME / IP (Scalable service-oriented middleware over IP) communication.

[0015] On the other hand, the server virtual machine can transmit security keys to a plurality of guest virtual machines through a first communication method or a second communication method; the server virtual machine can transmit data encrypted with respect to the security keys to a plurality of guest virtual machines through the second communication method.

[0016] On the other hand, the server virtual machine can transmit data related to the first application being executed to at least one guest virtual machine through a first communication method; the server virtual machine can transmit data related to the second application being executed to at least one guest virtual machine through a second communication method.

[0017] On the other hand, the first client virtual machine can output a first image corresponding to data related to the first application received through the first communication method; the first client virtual machine can output a second image corresponding to data related to the second application received through the second communication method onto the first image.

[0018] On the other hand, server virtual machines and guest virtual machines can execute a routing manager for transmitting data based on a second communication method.

[0019] On the other hand, when the server virtual machine receives an authentication request from the first client virtual machine, it can encrypt the security key based on the public key received from the first client virtual machine, and transmit the encrypted security key to the first client virtual machine through the first communication method or the second communication method.

[0020] On the other hand, when the server virtual machine receives an authentication request from the first client virtual machine, if the certificate is valid, it can encrypt the security key based on the public key received from the first client virtual machine and transmit the encrypted security key to the first client virtual machine through the first communication method or the second communication method.

[0021] On the other hand, when the server virtual machine receives an authentication request from the first client virtual machine, if the certificate is invalid, it can transmit a message including the invalid certificate to the first client virtual machine through either the first communication method or the second communication method.

[0022] On the other hand, the server virtual machine can receive location information data, camera data, or sensor data; the server virtual machine can transmit the location information data, camera data, or sensor data encrypted with the security key to the first client virtual machine through a second communication method.

[0023] On the other hand, the server virtual machine or the first client virtual machine can execute the security interface in active mode and the security interface in standby mode.

[0024] On the other hand, the active mode security interface can connect to the active mode security interfaces of other connected virtual machines or other signal processing devices; the standby mode security interface can monitor the queue status.

[0025] On the other hand, the first or second guest virtual machine can output an image in the first mode, and if it receives mode switching data, it outputs an image in the second mode.

[0026] On the other hand, the first or second client virtual machine can output the image in the first mode, and if it receives view switching data, it can output the image in the second mode; the first or second client virtual machine can output the image in the first mode, and if it receives data with an importance level of more than a specified value, it can output the image in the third mode.

[0027] On the other hand, the first guest virtual machine among the plurality of guest virtual machines can act for the first display, and the second guest virtual machine among the plurality of guest virtual machines can act for the second display.

[0028] The signal processing apparatus of one embodiment of the present invention may further include: a secure storage device for storing an electronic signature and a public key of an external server; and a secure execution unit for receiving encrypted data from the server, decrypting the encrypted data from the server based on the server's electronic signature and public key, and transmitting the decrypted data to at least one of a server virtual machine and a plurality of client virtual machines.

[0029] Another embodiment of the signal processing apparatus of the present invention includes: a processor that performs signal processing for a display, the display being mounted in a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a management program within the processor; the server virtual machine transmitting data related to a first application to a first client virtual machine via a first communication method; the first client virtual machine outputting a first image corresponding to the data related to the first application received via the first communication method; and the first client virtual machine outputting a second image corresponding to the data related to a second application received via a second communication method onto the first image.

[0030] The vehicle display device of this invention includes: a first display; a second display; and a signal processing device including a processor, the processor performing signal processing for the first display and the second display; the signal processing device including a processor, the processor performing signal processing for the display, the display being mounted in a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a management program within the processor; the server virtual machine transmitting a security key to the first client virtual machine via a first communication method or a second communication method different from the first communication method; the server virtual machine transmitting data encrypted corresponding to the security key to the first client virtual machine via the second communication method.

[0031] Another embodiment of the vehicle display device of the present invention includes: a first display; a second display; and a signal processing device including a processor, the processor performing signal processing for the first display and the second display; the signal processing device including a processor, the processor performing signal processing for the display, the display being mounted in a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a hypervisor within the processor; the server virtual machine transmitting data related to a first application to the first client virtual machine via a first communication method; the first client virtual machine outputting a first image corresponding to the data related to the first application received via the first communication method; the first client virtual machine outputting a second image corresponding to the data related to a second application received via a second communication method onto the first image.

[0032] Invention Effects

[0033] An embodiment of the signal processing apparatus of the present invention includes: a processor that performs signal processing for a display mounted on a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a management program within the processor; the server virtual machine transmitting a security key to a first client virtual machine via a first communication method or a second communication method different from the first communication method; and the server virtual machine transmitting data encrypted corresponding to the security key to the first client virtual machine via the second communication method. This enhances the security of data transmission. In particular, it allows for the use of multiple virtual machines to enhance the security of data transmission. Furthermore, even if the multiple virtual machines are driven by different operating systems, the security of data transmission can still be enhanced.

[0034] On the other hand, the first communication method can be interface communication; the second communication method can be SOME / IP (Scalable Service-Oriented Middleware over IP) communication. Therefore, data can be transmitted based on various communication methods, enhancing the security of data transmission. In particular, it enhances the security of data transmission in SOME / IP communication.

[0035] On the other hand, the server virtual machine can transmit security keys to a plurality of guest virtual machines through either the first or the second communication method; the server virtual machine can also transmit data encrypted with the security keys to a plurality of guest virtual machines through the second communication method. This enhances the security of data transmission.

[0036] On the other hand, the server virtual machine can transmit data related to the executing first application to at least one guest virtual machine through a first communication method; the server virtual machine can also transmit data related to the executing second application to at least one guest virtual machine through a second communication method. This enhances the security of data transmission.

[0037] On the other hand, the first client virtual machine can output a first image corresponding to data related to a first application received via a first communication method; the first client virtual machine can also output a second image corresponding to data related to a second application received via a second communication method onto the first image. Thus, it is possible to overlay a second image onto the first image while enhancing security during data transmission.

[0038] On the other hand, the server virtual machine and the guest virtual machine can execute a routing manager, which is used to transmit data based on the second communication method. This enhances the security of data transmission.

[0039] On the other hand, when the server virtual machine receives an authentication request from the first client virtual machine, it can encrypt the security key based on the public key received from the first client virtual machine, and transmit the encrypted security key to the first client virtual machine through either the first communication method or the second communication method. This enhances the security of data transmission.

[0040] On the other hand, when the server virtual machine receives an authentication request from the first client virtual machine, if the certificate is valid, it can encrypt the security key based on the public key received from the first client virtual machine, and transmit the encrypted security key to the first client virtual machine via either the first or second communication method. This enhances the security of data transmission.

[0041] On the other hand, when the server virtual machine receives an authentication request from the first client virtual machine, if the certificate is invalid, it can transmit a message indicating that the certificate is invalid to the first client virtual machine through either the first or second communication method. This enhances the security of data transmission.

[0042] On the other hand, the server virtual machine can receive location information data, camera data, or sensor data; the server virtual machine transmits the location information data, camera data, or sensor data, encrypted with a security key, to the first client virtual machine via a second communication method. This enhances the security of data transmission of location information data, camera data, or sensor data.

[0043] On the other hand, the server virtual machine or the first client virtual machine can execute both active-mode and standby-mode security interfaces. This enhances the security of data transmission.

[0044] On the other hand, the active-mode security interface can connect to the active-mode security interfaces of other connected virtual machines or other signal processing devices; the standby-mode security interface can monitor the queue status. This enhances the security of data transmission.

[0045] On the other hand, either the first or second guest virtual machine can output an image in the first mode, and if it receives mode switching data, it outputs an image in the second mode. Thus, it is possible to display an image corresponding to the mode switch.

[0046] On the other hand, either the first or second client virtual machine can output an image in the first mode, and if it receives view switching data, it can output an image in the second mode; either the first or second client virtual machine can output an image in the first mode, and if it receives data with an importance level of a specified value or higher, it can output an image in the third mode. Thus, it is possible to display images corresponding to mode switching or importance levels.

[0047] On the other hand, the first guest virtual machine among the plurality of guest virtual machines can operate for the first display, and the second guest virtual machine among the plurality of guest virtual machines can operate for the second display. Thus, it is possible to control the display on an individual virtual machine basis.

[0048] The signal processing apparatus of one embodiment of the present invention may further include: a secure storage device for storing the electronic signature and public key of an external server; and a secure execution unit for receiving encrypted data from the server, decrypting the encrypted data from the server based on the server's electronic signature and public key, and transmitting the decrypted data to at least one of a server virtual machine and a plurality of client virtual machines. This enhances the security of receiving data from an external server.

[0049] Another embodiment of the signal processing apparatus of the present invention includes: a processor that performs signal processing for a display mounted in a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a management program within the processor; the server virtual machine transmitting data related to a first application to a first client virtual machine via a first communication method; the first client virtual machine outputting a first image corresponding to the data related to the first application received via the first communication method; and the first client virtual machine outputting a second image corresponding to data related to a second application received via a second communication method onto the first image. Thus, while enhancing the security of data transmission, a second image can be overlaid on the first image.

[0050] The vehicle display device of this invention includes: a first display; a second display; and a signal processing device including a processor, the processor performing signal processing for the first and second displays; the signal processing device including a processor, the processor performing signal processing for the displays, the displays being mounted in a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a management program within the processor; the server virtual machine transmitting a security key to the first client virtual machine via a first communication method or a second communication method different from the first communication method; the server virtual machine transmitting data encrypted corresponding to the security key to the first client virtual machine via the second communication method. This enhances the security of data transmission. In particular, it is possible to utilize a plurality of virtual machines to enhance the security of data transmission.

[0051] Another embodiment of the vehicle display device of the present invention includes: a first display; a second display; and a signal processing device including a processor that performs signal processing for the first and second displays; the signal processing device including a processor that performs signal processing for the displays, the displays being mounted in a vehicle; the processor executing a server virtual machine and at least one client virtual machine on a hypervisor within the processor; the server virtual machine transmitting data related to a first application to the first client virtual machine via a first communication method; the first client virtual machine outputting a first image corresponding to the data related to the first application received via the first communication method; the first client virtual machine outputting a second image corresponding to the data related to a second application received via a second communication method onto the first image. Thus, while enhancing the security of data transmission, a second image can be overlaid on the first image. Attached Figure Description

[0052] Figure 1a This is a diagram showing an example of the exterior and interior of a vehicle.

[0053] Figure 1b This is another example showing the interior of a vehicle.

[0054] Figure 2 This is a diagram showing the appearance of a vehicle display device according to an embodiment of the present invention.

[0055] Figure 3 Examples Figure 2 An example of an internal block diagram of a vehicle display device.

[0056] Figure 4 This is a diagram illustrating the system driven in a signal processing apparatus related to the present invention.

[0057] Figure 5 This is a diagram illustrating an example of a driving system in the signal processing apparatus of the present invention.

[0058] Figure 6 This is a diagram illustrating the operation of the driving system in the signal processing apparatus of the present invention.

[0059] Figure 7 This is a diagram illustrating the driving system in the signal processing apparatus according to an embodiment of the present invention.

[0060] Figures 8a to 13b It is used for explanation Figure 7 The image. Detailed Implementation

[0061] The present invention will now be described in more detail with reference to the accompanying drawings.

[0062] The suffixes “module” and “section” used in the following description for the constituent elements are assigned only for the convenience of writing the specification and do not have any particularly important meaning or function in themselves. Therefore, the terms “module” and “section” can be used interchangeably.

[0063] Figure 1a This is a diagram showing an example of the exterior and interior of a vehicle.

[0064] Referring to the attached diagram, the vehicle 200 is driven by a plurality of wheels 103FR, 103FL, 103RL... and a steering wheel 150. The plurality of wheels 103FR, 103FL, 103RL... are rotated by a power source, while the steering wheel 150 is used to adjust the direction of travel of the vehicle 200.

[0065] On the other hand, the vehicle 200 may also have a camera 195 for acquiring images of the front of the vehicle.

[0066] On the other hand, the interior of the vehicle 200 may have a plurality of displays 180a, 180b for displaying images, information, etc.

[0067] exist Figure 1a In the example, multiple displays 180a and 180b are shown, including a cluster display 180a and an AVN (Audio Video Navigation) display 180b. In addition, a HUD (Head-Up Display) may also be included.

[0068] On the other hand, the AVN (Audio Video Navigation) display 180b can also be named the Central Information Display.

[0069] On the other hand, the vehicle 200 described in this specification can encompass concepts such as a vehicle having an engine as a power source, a hybrid vehicle having both an engine and an electric motor as a power source, and an electric vehicle having an electric motor as a power source.

[0070] Figure 1b This is another example showing the interior of a vehicle.

[0071] Referring to the attached diagram, the vehicle interior may be equipped with a cluster display 180a, an AVN (Audio Video Navigation) display 180b, a rear seat entertainment display 180c, 180d, and a rearview mirror display (not shown).

[0072] Figure 2This is a diagram showing the appearance of a vehicle display device according to an embodiment of the present invention.

[0073] The vehicle display device 100 of this embodiment may include: a plurality of displays 180a to 180b; and a signal processing device 170, which performs signal processing for displaying images, information, etc. on the plurality of displays 180a to 180b.

[0074] Among the plurality of displays 180a to 180b, the first display 180a may be a cluster display 180a for displaying driving status, operation information, etc., and the second display 180b may be an AVN (Audio Video Navigation) display 180b for displaying vehicle operation information, navigation maps, various entertainment information or images.

[0075] The signal processing device 170 has a processor 175, which can execute a first virtual machine to a third virtual machine 520 to 540 on a hypervisor 505 within the processor 175.

[0076] The first virtual machine 520, acting as a server virtual machine, can control the second virtual machine 530 and the third virtual machine 540, which act as guest virtual machines.

[0077] On the other hand, the second virtual machine can be named the first guest virtual machine (Guest Virtual Machine), and the third virtual machine can be named the second guest virtual machine.

[0078] The first guest virtual machine 530 can act for the first display 180a, and the second guest virtual machine 540 can act for the second display 180b.

[0079] On the other hand, in order to transmit the same data to the first client virtual machine 530 and the second client virtual machine 540, the server virtual machine 520 within the processor 175 can be controlled to set up a shared memory 508 based on the hypervisor 505. Thus, the same information or the same image can be displayed synchronously on the first display 180a and the second display 180b within the vehicle.

[0080] On the other hand, the server virtual machine 520 within the processor 175 can receive and process wheel speed sensor data, and transmit the processed wheel speed sensor data to at least one of the first client virtual machine 530 and the second client virtual machine 540. Thus, wheel speed sensor data can be shared with at least one virtual machine, etc.

[0081] On the other hand, the vehicle display device 100 of the present invention may also include a rear seat entertainment display 180c for displaying driving status information, simple navigation information, various entertainment information or images.

[0082] The signal processing device 170 can execute an additional third client virtual machine (not shown) in addition to the server virtual machine 520 and a plurality of client virtual machines 530-540 on the hypervisor 505 within the processor 175, thereby controlling the RSE (Rear Seat Entertainment) display 180c.

[0083] Therefore, various displays 180a to 180c can be controlled using a single signal processing device 170.

[0084] On the other hand, some of the multiple displays 180a-180c can operate based on the Linux operating system (LinuxOS), while others can operate based on the Web operating system (WebOS).

[0085] The signal processing device 170 of this embodiment can be controlled to synchronously display the same information or the same image even on displays 180a to 180c that operate under various operating systems (OS).

[0086] Figure 3 An example of an internal block diagram of a vehicle display device according to an embodiment of the present invention is shown.

[0087] Referring to the accompanying drawings, the vehicle display device 100 of the present invention may include an input unit 110, a communication unit 120, an interface 130, a memory 140, a signal processing device 170, a plurality of displays 180a to 180c, an audio output unit 185, and a power supply unit 190.

[0088] The input unit 110 may have physical buttons, pads, etc. for key input, touch input, etc.

[0089] On the other hand, the input unit 110 may have a microphone (not shown) for user voice input.

[0090] The communication unit 120 can exchange data wirelessly with the mobile terminal 800 or the server 900.

[0091] In particular, the communication unit 120 can exchange data wirelessly with the vehicle driver's mobile terminal. Various wireless data communication methods can be used, such as Bluetooth, WiFi (Wireless-Fidelity), WiFi Direct, and APiX.

[0092] The communication unit 120 can receive weather information and road traffic information from the mobile terminal 800 or the server 900, such as TPEG (Transport Protocol Expert Group) information. For this purpose, the communication unit 120 may include a mobile communication module (not shown).

[0093] Interface 130 can receive sensor information from ECU (electronic control unit) 770 or sensor device 760 and transmit the received information to signal processing device 170.

[0094] Here, the sensor information may include at least one of the following: vehicle direction information, vehicle position information (GPS information), vehicle angle information, vehicle speed information, vehicle acceleration information, vehicle tilt information, vehicle forward / reverse information, battery information, fuel information, tire information, headlight information, vehicle interior temperature information, and vehicle interior humidity information.

[0095] This sensor information can be obtained from heading sensors, yaw sensors, gyroscope sensors, position modules, vehicle forward / reverse sensors, wheel sensors, vehicle speed sensors, vehicle tilt sensors, battery sensors, fuel sensors, tire sensors, steering sensors based on steering wheel rotation, interior temperature sensors, and interior humidity sensors. On the other hand, the position module may include a GPS module for receiving GPS (Global Positioning System) information.

[0096] On the other hand, interface 130 can receive frontal image data, side image data, rear image data, and distance information of obstacles around the vehicle from camera 195 or lidar (not shown), and transmit the received information to signal processing device 170.

[0097] The memory 140 can store various data for the entire operation of the vehicle display device 100, such as programs for processing or control of the signal processing device 170.

[0098] For example, memory 140 may store data about the hypervisor, server virtual machine 520, and multiple guest virtual machines that are to be run within processor 175.

[0099] The audio output unit 185 converts the electrical signal from the signal processing device 170 into an audio signal and outputs it. For this purpose, a speaker or the like may be included.

[0100] The power supply unit 190 can supply the power required for the operation of each component through the control of the signal processing device 170. In particular, the power supply unit 190 can receive power from the battery or the like inside the vehicle.

[0101] The signal processing device 170 controls the entire operation of each unit within the vehicle display device 100.

[0102] For example, signal processing device 170 may include processor 175 that performs signal processing for vehicle displays 180a, 180b.

[0103] Processor 175 can execute management programs ( Figure 5 (505), and can be executed in the management program ( Figure 5 The server virtual machine 520 and multiple client virtual machines 530-540 are executed on the 505).

[0104] At this time, the first guest virtual machine 530 can act for the first display 180a, and the second guest virtual machine 540 can act for the second display 180b.

[0105] For example, the server virtual machine 520 within the processor 175 can receive vehicle sensor data, location information data, camera image data, audio data, or touch input data, and then process or manipulate it before outputting it. By distinguishing between data processed only in a legacy virtual machine and data processed in the server virtual machine 520, data processing can be performed efficiently. In particular, by performing most of the data processing in the server virtual machine 520, 1:N data sharing can be achieved.

[0106] As another example, server virtual machine 520 can directly receive and process CAN (Controller Area Network) communication data, audio data, broadcast data, USB (Universal Serial Bus) data, and wireless communication data for the first client virtual machine to the second client virtual machine 530-540.

[0107] Furthermore, the server virtual machine 520 can transfer the processed data to the first guest virtual machine to the second guest virtual machine 530-540.

[0108] Therefore, among the server virtual machine 520 and the plurality of client virtual machines 530-540, only the server virtual machine 520 receives communication data, external input data, and performs signal processing, thereby reducing the signal processing burden on the other virtual machines and effectively implementing the interface for external input data and communication data. Furthermore, it enables 1:N data communication, thus achieving synchronization during data sharing.

[0109] On the other hand, the server virtual machine 520 can be controlled to record data in the shared memory 508 and share the same data with the first client virtual machine 530 and the second client virtual machine 540.

[0110] For example, server virtual machine 520 can be controlled to record vehicle sensor data, location information data, camera image data, or touch input data in shared memory 508, and share the same data with first client virtual machine 530 and second client virtual machine 540. This enables 1:N data sharing.

[0111] As a result, by performing most of the data processing on the server virtual machine 520, 1:N data sharing can be achieved.

[0112] On the other hand, the server virtual machine 520 within the processor 175 can be controlled to set up a shared memory 508 based on the hypervisor 505 in order to transmit the same data to the first client virtual machine 530 and the second client virtual machine 540.

[0113] That is, the server virtual machine 520 within the processor 175 can utilize the shared memory 508 based on the hypervisor 505 to synchronize the same data and transmit it to the first client virtual machine 530 and the second client virtual machine 540. Thus, the same image can be simultaneously displayed on multiple displays 180a-180b within the vehicle.

[0114] On the other hand, the signal processing device 170 can process various signals such as audio signals, image signals, and data signals. Therefore, the signal processing device 170 can be implemented as a system on chip (SOC).

[0115] Figure 4 This is a diagram illustrating the system driven in a signal processing apparatus related to the present invention.

[0116] Referring to the attached diagram, Figure 4 This is a diagram illustrating the use of virtual machines for cluster monitor 180a and AVN monitor 180b, respectively.

[0117] Figure 4 The system 400 driven in the signal processing device illustrates the case where a cluster virtual machine 430 and an AVN virtual machine 440 are executed on a hypervisor 405 within a processor 175.

[0118] on the other hand, Figure 4 The system 400 driven in the signal processing device illustrates a case where a legacy virtual machine 410 is also executed on the hypervisor 405 within the processor 175.

[0119] The legacy virtual machine 410 has an interface 412 for data communication with memory 140 and an interface 413 for Ethernet communication.

[0120] On the other hand, the cluster virtual machine 430 may have an interface 431 for CAN communication, an interface 432 for communication with the interface 412 of the legacy virtual machine 410, and an interface 433 for communication with the interface 413 of the legacy virtual machine 410.

[0121] On the other hand, the AVN virtual machine 440 may have an interface 441 for input and output of audio data, broadcast data, USB data, and wireless communication data, an interface 442 for communication with the interface 412 of the legacy virtual machine 410, and an interface 443 for communication with the interface 413 of the legacy virtual machine 410.

[0122] According to this system 400, CAN communication data is only input and output in the cluster virtual machine 430, thus the disadvantage is that CAN communication data cannot be used in the AVN virtual machine 440.

[0123] In addition, according to Figure 4 In System 400, audio data, broadcast data, USB data, and wireless communication data are only input and output in AVN virtual machine 440, thus the drawback is that the above data cannot be used in cluster virtual machine 430.

[0124] On the other hand, in order to input and output memory data and Ethernet communication data to the legacy virtual machine 410, the cluster virtual machine 430 and the cluster virtual machine 432 need to have separate interfaces 431, 432, 441, and 442 respectively.

[0125] Therefore, this invention proposes methods for improving... Figure 4 The system's solution. That is, with... Figure 4Unlike other virtual machines, virtual machines are divided into server virtual machines (520) and guest virtual machines. Server virtual machines (520) handle input / output of various memory and communication data, while guest virtual machines do not. For details, please refer to... Figure 5 And the following content will be described.

[0126] Figure 5 This is a diagram illustrating an example of a driving system in the signal processing apparatus of the present invention.

[0127] Referring to the attached diagram, Figure 5 System 500 illustrates a scenario where a server virtual machine 520, a first client virtual machine 530, and a second client virtual machine 540 are executed on a management program 505 within a processor 175 in a signal processing device 170.

[0128] The first guest virtual machine 530 may be a virtual machine used for the cluster display 180a, and the second guest virtual machine 540 may be a virtual machine used for the AVN display 180b.

[0129] That is, the first client virtual machine 530 and the second client virtual machine 540 can respectively perform image rendering for the cluster display 180a and the AVN display 180b.

[0130] On the other hand, Figure 5 In the system 500 driven by the signal processing device 170, an example is shown where a legacy virtual machine 510 is also executed on the hypervisor 505 within the processor 175.

[0131] The traditional virtual machine 510 has an interface 511 for data communication and Ethernet communication with the memory 140.

[0132] On the other hand, the traditional virtual machine 510 may also have an interface 512 (virtio-backend interface) for data communication with the first guest virtual machine to the second guest virtual machines 530 and 540.

[0133] The server virtual machine 520 may have: an interface 521 for input / output of audio data, broadcast data, USB data, and wireless communication data; and an input / output server interface 522 for data communication with the client virtual machine.

[0134] That is, the server virtual machine 520, which is the server virtual machine 520, can provide I / O that is difficult to virtualize to multiple guest virtual machines, such as the first guest virtual machine to the second guest virtual machine 530, 540, etc., through standard virtualization technology (VirtIO).

[0135] On the other hand, the server virtual machine 520, as the server virtual machine 520, controls broadcast data, audio data, etc. at the supervisor level and provides them to multiple guest virtual machines, such as the first guest virtual machine to the second guest virtual machine 530, 540, etc.

[0136] On the other hand, the server virtual machine 520, which is a server virtual machine 520, can process vehicle data, sensor data, vehicle surrounding information, etc., and provide the processed data or information to a plurality of client virtual machines, such as the first client virtual machine to the second client virtual machine 530, 540, etc.

[0137] On the other hand, the server virtual machine 520 can provide services such as vehicle data processing and audio routing management (Supervisory Services).

[0138] Next, the first client virtual machine 530 may have: an input / output client interface 532 for data communication with the server virtual machine 520; and APIs 533 for controlling the input / output client interface 532.

[0139] Additionally, the first guest virtual machine 530 may have an interface (virtio-backend interface) for data communication with the traditional virtual machine 510.

[0140] The first guest virtual machine 530 can receive memory data based on communication with memory 140 and Ethernet data based on Ethernet communication from the interface (virtio-backend interface) 512 of the traditional virtual machine 510 via the interface (virtio-backend interface).

[0141] Next, the second client virtual machine 540 may have: an input / output client interface 542 for data communication with the server virtual machine 520; and APIs 543 for controlling the input / output client interface 542.

[0142] Additionally, the second guest virtual machine 540 may have an interface (virtio-backend interface) for data communication with the traditional virtual machine 510.

[0143] The second guest virtual machine 540 can receive memory data based on communication with memory 140 and Ethernet data based on Ethernet communication from the interface (virtio-backend interface) 512 of the traditional virtual machine 510 via the interface (virtio-backend interface).

[0144] On the other hand, with Figure 5 In contrast, the legacy virtual machine 510 can also be set up within the server virtual machine 520.

[0145] According to this system 500, although CAN communication data such as sensor data is only input and output on the server virtual machine 520, it can be provided to multiple client virtual machines, such as from the first client virtual machine to the second client virtual machines 530, 540, etc., through data processing performed on the server virtual machine 520. Therefore, 1:N data communication based on processing on the server virtual machine 520 can be realized.

[0146] In addition, according to Figure 5 Although system 500 only inputs and outputs audio data, broadcast data, USB data, and wireless communication data on server virtual machine 520, it can provide these data to multiple guest virtual machines, such as from the first guest virtual machine to the second guest virtual machines 530 and 540, through data processing performed on server virtual machine 520. Therefore, 1:N data communication based on processing on server virtual machine 520 can be achieved.

[0147] On the other hand, Figure 5 In system 500, the first guest virtual machine to the second guest virtual machine 530 and 540 can be based on different OS actions.

[0148] For example, the first guest virtual machine 540 can operate based on Linux OS (Linux operating system), and the second guest virtual machine 540 can operate based on Web OS (web operating system).

[0149] Even though the first guest virtual machine and the second guest virtual machines 530 and 540 operate on different OSes, the server virtual machine 520 also sets up a shared memory 508 based on the hypervisor 505 for data sharing. Therefore, even though the first guest virtual machine and the second guest virtual machine 530 and 540 operate on different operating systems, they can synchronize and share the same data or the same images. Ultimately, the same data or the same images can be displayed synchronously on multiple displays 180a and 180b.

[0150] On the other hand, in addition to the shared memory 508 and the processor 175, the signal processing device 170 may also include a secure storage device 509, which stores the electronic signature and public key of the external server 900.

[0151] On the other hand, the signal processing apparatus 170 may also include a security execution unit (TEE) that receives encrypted data from the server 900, decrypts the encrypted data from the server 900 based on the server 900's electronic signature and public key, and transmits the decrypted data to at least one of the server virtual machine 520 and a plurality of client virtual machines 530, 540.

[0152] On the other hand, as shown in the figure, the safety execution unit TEE can also be executed in the processor 175 within the signal processing device 170.

[0153] The Security Execution Unit (TEE) may also include: a Policy Manager (PM) configured to modify data shared with the First Guest Virtual Machine 530 and the Second Guest Virtual Machine 540 according to a sharing policy; and an Interface (SS) for exchanging data with the Secure Storage Device 509.

[0154] On the other hand, the server virtual machine 520 and the plurality of client virtual machines 530 and 540 can respectively execute security interfaces 525, 535 and 545, which are used to decrypt received encrypted data or transmit encrypted data.

[0155] Figure 6 This is a diagram illustrating the operation of the driving system in the signal processing apparatus of the present invention.

[0156] according to Figure 6 In system 500, the processor 175 in the signal processing device 170 executes a server virtual machine 520 and a plurality of client virtual machines 530-540 on the management program 505 in the processor 175. The server virtual machine 520 in the processor 175 can transmit data to the first client virtual machine 530 and the second client virtual machine 540.

[0157] For example, the same data can be transmitted from server virtual machine 520 to first client virtual machine 530 and second client virtual machine 540, as an example of using the same image data. Thus, the same image can be simultaneously displayed on multiple displays 180a-180b within the vehicle.

[0158] On the other hand, according to Figure 6In system 500, the processor 175 in the signal processing device 170 executes a server virtual machine 520 and a plurality of client virtual machines 530-540 on the management program 505 in the processor 175. The server virtual machine 520 in the processor 175 can synchronously transmit the same data to the first client virtual machine 530 and the second client virtual machine 540.

[0159] For example, examples of the same data include CAN communication data, audio data, broadcast data, USB data, wireless communication data, location information data, or touch data. Therefore, the same data can be displayed simultaneously on multiple displays 180a-180b within the vehicle.

[0160] On the other hand, the server virtual machine 520 within the processor 175 can receive and process location information data that changes with movement, and provide it to the first client virtual machine 530 or the second client virtual machine 540. Thus, 1:N data communication can be achieved using shared memory, instead of 1:1 data communication between multiple virtual machines.

[0161] On the other hand, the first guest virtual machine 530 and the second guest virtual machine 540 can be driven by different operating systems. Thus, even if multiple virtual machines 520, 530, and 540 are driven by different operating systems, high-speed data communication can still be performed.

[0162] On the other hand, although not in Figure 6 The conventional virtual machine 510 can synchronously transmit memory data from memory 140 and Ethernet data based on Ethernet communication to the first guest virtual machine 530 and the second guest virtual machine 540. That is, it can perform 1:N data communication of memory data or Ethernet data. Thus, the same data can be transmitted synchronously.

[0163] On the other hand, the server virtual machine 520 within the processor 175, as a supervisory service, can execute system manager, display manager, etc.

[0164] On the other hand, the server virtual machine 520 within the processor 175 is a system-based service that can execute vehicle information services, location information services, camera services, AUTSAR (Automotive Open System Architecture), Bluetooth communication services, broadcast services, WiFi services, audio services, touch services, and more.

[0165] On the other hand, with Figure 5Similarly, in addition to the shared memory 508 and the processor 175, the signal processing device 170 may also include a secure storage device 509, which stores the electronic signature and public key of the external server 900.

[0166] On the other hand, the signal processing apparatus 170 may also include a security execution unit (TEE) that receives encrypted data from the server 900, decrypts the encrypted data from the server 900 based on the server 900's electronic signature and public key, and transmits the decrypted data to at least one of the server virtual machine 520 and a plurality of client virtual machines 530, 540.

[0167] On the other hand, as shown in the figure, the safety execution unit TEE can also be executed in the processor 175 within the signal processing device 170.

[0168] The Security Execution Unit (TEE) may also include: a Policy Manager (PM) configured to modify data shared with the First Guest Virtual Machine 530 and the Second Guest Virtual Machine 540 according to a sharing policy; and an Interface (SS) for exchanging data with the Secure Storage Device 509.

[0169] On the other hand, the server virtual machine 520 and the plurality of client virtual machines 530 and 540 can respectively execute security interfaces 525, 535 and 545, which are used to decrypt received encrypted data or transmit encrypted data.

[0170] Figure 7 This is a diagram illustrating the driving system in the signal processing apparatus according to an embodiment of the present invention.

[0171] Referring to the accompanying drawings, a signal processing apparatus 170 according to an embodiment of the present invention includes a processor 175, which performs signal processing for a display installed in a vehicle.

[0172] On the other hand, processor 175 executes server virtual machine 520 and multiple client virtual machines 530, 540 on hypervisor 505 within processor 175.

[0173] The first client virtual machine 530 of the plurality of client virtual machines 530 and 540 operates for the first display 180a, and the second client virtual machine 540 of the plurality of client virtual machines 530 and 540 operates for the second display 180b.

[0174] On the other hand, in one embodiment of the present invention, the server virtual machine 520 transmits a security key to the first client virtual machine 530 via a first communication method or a second communication method different from the first communication method, and transmits data encrypted corresponding to the security key to the first client virtual machine 530 via the second communication method. This enhances the security of data transmission. In particular, multiple virtual machines can be used to enhance the security of data transmission. Furthermore, even if multiple virtual machines are driven by different operating systems, the security of data transmission can still be enhanced.

[0175] On the other hand, the first communication method can be interface communication, and the second communication method can be SOME / IP (Scalable service-oriented middleware over IP) communication. Therefore, data can be transmitted based on various communication methods, enhancing the security of data transmission. In particular, it enhances the security of data transmission in SOME / IP communication.

[0176] On the other hand, the server virtual machine 520 can transmit security keys to a plurality of guest virtual machines 523 and 540 through either the first or the second communication method, and can transmit data encrypted with respect to the security keys to the plurality of guest virtual machines 523 and 540 through the second communication method. This enhances the security of data transmission.

[0177] On the other hand, the server virtual machine 520 can transmit security keys to a plurality of guest virtual machines 523 and 540 through either the first or the second communication method, and can transmit data encrypted with respect to the security keys to the plurality of guest virtual machines 523 and 540 through the second communication method. This enhances the security of data transmission.

[0178] On the other hand, server virtual machine 520 and guest virtual machines 530 and 540 can respectively execute routing managers SBa, SBb, and SBc for data transmission based on the second communication method. This enhances the security of data transmission.

[0179] On the other hand, each of the server virtual machine 520 and the plurality of client virtual machines 530, 540 can execute secure interfaces 525, 535, 545 for decrypting received encrypted data or transmitting encrypted data.

[0180] On the other hand, security interfaces 525, 535, and 545 can also be named interface daemon.

[0181] On the other hand, each of the security interfaces 525, 535, and 545 can execute security managers TEma, TEmb, and TEmc for exchanging data with the security execution unit TEE, and routing managers SBa, SBb, and SBc for transmitting or receiving data encrypted based on the second communication method.

[0182] At this point, the routing managers SBa, SBb, and SBc act as SOME / IP routing managers and can perform communication based on UDP or TCP.

[0183] On the other hand, SOME / IP-based communication methods may be vulnerable in terms of security. Therefore, in this invention, encrypted data is transmitted using a security key during SOME / IP-based communication.

[0184] Therefore, the route managers SBa, SBb, and SBc can transmit or receive encrypted data, including both headers and payloads. This enhances the security of data transmission, particularly in SOME / IP communication.

[0185] On the other hand, even if the first guest virtual machine 530 and the second guest virtual machine 540 operate under different operating systems, the server virtual machine 520 can still transmit or receive encrypted data using a security key. Therefore, even if the first guest virtual machine 530 and the second guest virtual machine 540 operate under different operating systems, the server virtual machine 520 can enhance the security of data transmission.

[0186] On the other hand, the server virtual machine 520 can transmit data related to the executed first application to at least one guest virtual machine 530 or 540 via a first communication method, and can transmit data related to the executed second application to at least one guest virtual machine 530 or 540 via a second communication method. This enhances the security of data transmission.

[0187] On the other hand, the first guest virtual machine 530 can output a first image corresponding to data related to a first application received via a first communication method, and can output a second image corresponding to data related to a second application received via a second communication method onto the first image. Thus, it is possible to overlay a second image onto the first image while enhancing security during data transmission.

[0188] On the other hand, the server virtual machine 520 can receive location information data, camera data, or sensor data, and transmit the location information data, camera data, or sensor data encrypted with a security key to the first client virtual machine 530 via a second communication method. This enhances the security of data transmission of location information data, camera data, or sensor data.

[0189] The diagram illustrates a server virtual machine 520 transmitting a security key, including an encrypted symmetric key, to a first client virtual machine 530 and a second client virtual machine 540 via a first communication method.

[0190] Therefore, the first client virtual machine 530 and the second client virtual machine 540 can receive the encrypted symmetric key and use the symmetric key to decrypt the encrypted data received through the second communication method.

[0191] On the other hand, the security key can be updated.

[0192] For example, server virtual machine 520 can update the security key when the vehicle starts.

[0193] Alternatively, server virtual machine 520 can update the security key while the vehicle is in motion.

[0194] Alternatively, the server virtual machine 520 can update the security key when the received message count reaches a specified number.

[0195] On the other hand, the symmetric key is updated, and the server virtual machine 520 can transmit a security key including the encrypted symmetric key to at least one of the first client virtual machine 530 and the second client virtual machine 540 at a first time point, and can transmit a security key including the encrypted and updated symmetric key to at least one of the first client virtual machine 530 and the second client virtual machine 540 at a second time point after the first time point. Thus, the security of data transmission can be enhanced based on the updated security key.

[0196] For example, server virtual machine 520 can generate and update the symmetric key as a random key value at specified intervals.

[0197] Furthermore, the server virtual machine 520 can transmit a security key, including the updated symmetric key, to a security interface 535 or 545 within at least one of the first client virtual machine 530 and the second client virtual machine 540. This enhances the security of data transmission based on the updated security key.

[0198] On the other hand, in order to transmit the same data to the first client virtual machine 530 and the second client virtual machine 540, the server virtual machine 520 can transmit a security key to the first client virtual machine 530 and the second client virtual machine 540 through a first communication method, and transmit data encrypted with the security key through a second communication method. This enhances the security of transmitting the same data while simultaneously transmitting the same data.

[0199] On the other hand, the first guest virtual machine 530 and the second guest virtual machine 540 can decrypt the received encrypted data based on the security key. This enhances the security of data transmission.

[0200] On the other hand, a server 900 according to an embodiment of the present invention may include a hash value generation unit 911 and an electronic signature generation unit 913.

[0201] The hash value generation unit 911 can generate binary hash values ​​for the security interfaces 525, 535, and 545 of each virtual machine 520, 530, and 540, and the electronic signature generation unit 913 can execute electronic signatures based on the generated hash values.

[0202] On the other hand, the signal processing apparatus 170 of one embodiment of the present invention may also include a secure storage device 509 for storing the electronic signature and public key of the external server 900.

[0203] On the other hand, the signal processing apparatus 170 of one embodiment of the present invention can execute a secure execution unit (TEE), which receives encrypted data from a server 900, decrypts the encrypted data from the server 900 based on the server 900's electronic signature and public key, and transmits the decrypted data to at least one of a server virtual machine 520 and a plurality of client virtual machines 530 and 540.

[0204] On the other hand, the signal processing apparatus 170 of one embodiment of the present invention may also include a hardware-based security execution unit (TEE).

[0205] Specifically, the signal processing apparatus 170 of one embodiment of the present invention may further include a security execution unit (TEE), which receives encrypted data from an external server 900, decrypts the encrypted data from the server 900 based on the server 900's electronic signature and public key, and transmits the decrypted data to at least one of a server virtual machine 520 and a plurality of client virtual machines 530 and 540.

[0206] This allows for enhanced security when receiving data from an external server (900) while simultaneously transmitting data to internal virtual machines.

[0207] On the other hand, the Security Execution Unit (TEE) may include: a Policy Manager (PM) configured to change the data shared with the First Guest Virtual Machine 530 and the Second Guest Virtual Machine 540 according to the sharing policy; and an Interface (SS) for exchanging data with the Secure Storage Device 509.

[0208] On the other hand, among the server virtual machine 520, the first client virtual machine 530, and the second client virtual machine 540, only the server virtual machine 520 can receive external input data and communication data. Therefore, the interface for external input data and communication data can be effectively implemented.

[0209] At this time, the server virtual machine 520 can share external input data or communication data with at least one of the first client virtual machine 530 and the second client virtual machine 540.

[0210] To this end, the server virtual machine 520 encrypts external input data or communication data, and transmits the encrypted external input data or communication data to at least one of the first client virtual machine 530 and the second client virtual machine 540 through a second communication method.

[0211] Correspondingly, at least one of the first guest virtual machine 530 and the second guest virtual machine 540 can decrypt the received external input data or communication data via a second communication method based on the security key received through the first communication method. This effectively enables the interface between external input data and communication data.

[0212] On the other hand, the verifier VFR, which is executed within the hypervisor 505, can be executed in the server virtual machine 520.

[0213] On the other hand, integrity verification can be performed on server virtual machine 520 and multiple client virtual machines 530 and 540.

[0214] Specifically, the verifier VFR within the hypervisor 505 receives the electronic signatures, hash values, and public keys of the various security interfaces 525, 535, and 545 within the server virtual machine 520 and multiple client virtual machines 530 and 540, as well as the public key of the external server 900. Based on the public key of the server 900 and the electronic signatures of the various security interfaces 525, 535, and 545, it calculates the hash value and compares the calculated hash value with the received hash value. It can also perform integrity verification on the server virtual machine 520 and the multiple client virtual machines 530 and 540. This enhances the security of data transmission to virtual machines whose integrity has been verified.

[0215] For example, if the server virtual machine 520 and the first client virtual machine 530 are verified for integrity by the verifier VFR executed within the hypervisor 505, the server virtual machine 520 can be determined to be a valid virtual machine.

[0216] On the other hand, if the integrity of the second guest virtual machine 540 is not verified, the server virtual machine 520 can determine that the second guest virtual machine 540 is an invalid virtual machine.

[0217] Furthermore, the server virtual machine 520 can transmit the security key to the first client virtual machine 530 through the first communication method, but does not need to transmit the security key to the second client virtual machine 540.

[0218] On the other hand, the server virtual machine 520 can transmit encrypted data to the first guest virtual machine 530 via a second communication method, but not to the second guest virtual machine 540. This enhances security when transmitting data to a virtual machine whose integrity has been verified.

[0219] As an example, when the authenticator VFR executed within the hypervisor 505 verifies the integrity of the server virtual machine 520, the first client virtual machine 530, and the second client virtual machine 540, the server virtual machine 520 can transmit a security key to the first client virtual machine 530 and the second client virtual machine 540 via a first communication method.

[0220] Furthermore, the server virtual machine 520 can transmit encrypted data to the first guest virtual machine 530 and the second guest virtual machine 540 via a second communication method. This enhances security when transmitting data to virtual machines whose integrity has been verified.

[0221] The diagram illustrates a scenario where the Policy Manager (PM) within the Security Execution Unit (TEE) shares a shared policy or a topic based on the shared policy with the various security interfaces 525, 535, and 545 within server virtual machine 520, the first guest virtual machine, and the second guest virtual machines 530 and 540.

[0222] Depending on the sharing policy or the topic based on the sharing policy, the data transmitted to the various security interfaces 525, 535, and 545 within the server virtual machine 520, the first guest virtual machine, and the second guest virtual machines 530 and 540 may differ.

[0223] On the other hand, the security interface 525 within the server virtual machine 520 may include: a security manager TEma for data exchange with the security execution unit TEE; and a routing manager SBa for encrypted data transmission.

[0224] Similarly, the security interfaces 535 and 545 within the first guest virtual machine to the second guest virtual machine 530 and 540 may respectively include: security managers TEmb and TEmc for data exchange with the security execution unit TEE; and routing managers SBb and SBc for receiving encrypted data from the server virtual machine 520.

[0225] On the other hand, Ars in the diagram can be named the secure world, and Arn can be named the normal world. That is, the Security Execution Unit (TEE) can be the secure world, while the hypervisor 505 and the various virtual machines 520, 530, and 540 can be the normal world.

[0226] Figures 8a to 13b It is used for explanation Figure 7 The image.

[0227] first, Figure 8a This is a diagram illustrating an example of a communication path between guest virtual machines.

[0228] Referring to the attached diagram, the first guest virtual machine 530 can execute the security interface 535, the first application CAa, and the second application Ana.

[0229] The second guest virtual machine 540 can execute security interface 545, the third application CAb, and the fourth application Anb.

[0230] On the other hand, the first application CAa and the third application CAb can be interface-based applications, while the second application Ana and the fourth application Anb can be SOME / IP-based applications.

[0231] Correspondingly, the first application CAa and the third application CAb can be executed on the interface clients Ica and Icb, while the second application Ana and the fourth application Anb can be executed on the SOME / IP agents SIa and Sib.

[0232] On the other hand, the security interface 535 within the first guest virtual machine 530 can execute the daemoncore 536, the translator proxy 537, and the route manager 538.

[0233] On the other hand, the security interface 545 within the second guest virtual machine 540 can execute the daemon core 546, converter agent 547, and route manager 548.

[0234] Referring to the attached diagram, the first application CAa and the third application CAb can exchange data along the Pathc path via an interface communication method, which serves as the first communication method.

[0235] The diagram illustrates the Pathc path, which passes through the daemon core 536, converter agent 537, and route manager 538 in the first guest virtual machine 530, and the route manager 548, converter agent 547, and daemon core 536 in the second guest virtual machine 540.

[0236] On the other hand, via SOME / IP communication as a second communication method, the second application Ana and the fourth application Anb can exchange data along the Patha path.

[0237] The diagram illustrates a Patha path that passes through the routing manager 538 in the first guest virtual machine 530 and the routing manager 548 in the second guest virtual machine 540.

[0238] On the other hand, communication between the first application CAa and the fourth application Anb, or between the second application Ana and the third application CAb, can be performed along the Pathb path.

[0239] On the other hand, the first guest virtual machine 530 and the second guest virtual machine 540 can be virtual machines based on different operating systems.

[0240] For example, the first guest virtual machine 530 can be a virtual machine based on the QNX operating system, and the second guest virtual machine 540 can be a virtual machine based on the Linux operating system.

[0241] Figure 8b This is a diagram illustrating an example of the communication method within the first guest virtual machine.

[0242] Referring to the attached diagram, the first application CAa, which runs within the first guest virtual machine 530, can transmit data to the second application Ana through the daemon core 536, the translator proxy 537, and the route manager 538.

[0243] At this point, the first application CAa can be an interface-based application, and the second application Ana can be a SOME / IP-based application.

[0244] Correspondingly, the first application CAa can be executed on the interface clients Ica and Icb, and the second application Ana can be executed on the SOME / IP proxy SIa and Sib.

[0245] Figure 8c This is another example of a communication path between guest virtual machines.

[0246] Referring to the attached diagram, the internal structures of the first guest virtual machine 530 and the second guest virtual machine 540 are respectively... Figure 8a They are the same, but there is a difference in configuring shared memory 508 between the first guest virtual machine 530 and the second guest virtual machine 540.

[0247] That is, when sharing data between the first guest virtual machine 530 and the second guest virtual machine 540, the shared memory 508 can be used.

[0248] Figure 8d It is a diagram used to illustrate data sharing based on a shared symmetric key.

[0249] Referring to the attached diagram, the security interface 535 in the first client virtual machine 530 requests authentication from the security interface 525 in the server virtual machine 520 via the first communication method (S1140).

[0250] Next, the security interface 525 within the server virtual machine 520 verifies the validity of the certificate of the security interface 535 within the first client virtual machine 530 requesting authentication (S1142).

[0251] Furthermore, the security interface 525 within the server virtual machine 520 is used as the public key of the security interface 535 within the first client virtual machine 530 of the other party to encrypt the symmetric key used for encrypting the sending and receiving (S1144).

[0252] Next, the security interface 525 in the server virtual machine 520 transmits the encrypted symmetric key to the security interface 535 in the first client virtual machine 530 via the first communication method (S1146).

[0253] Next, the security interface 535 within the first guest virtual machine 530 decrypts the data using the personal key and obtains the symmetric key (S1148).

[0254] Furthermore, the security interface 535 within the first client virtual machine 530 requests a data subscription from the security interface 525 within the server virtual machine 520 (S1150).

[0255] Correspondingly, the security interface 525 within the server virtual machine 520 encrypts the data using a symmetric key (S1151), and transmits the encrypted data to the security interface 535 within the first client virtual machine 530 via a second communication method (S1152).

[0256] Next, the security interface 535 within the first guest virtual machine 530 decrypts the encrypted data using a symmetric key (S1154).

[0257] On the other hand, the security interface 535 in the second client virtual machine 540 and the security interface 525 in the server virtual machine 520 can perform mutual authentication requests (S1156).

[0258] On the other hand, the security interface 545 in the second client virtual machine 540 requests a data subscription from the security interface 525 in the server virtual machine 520 (S1158).

[0259] Correspondingly, the security interface 525 in the server virtual machine 520 encrypts the data with a symmetric key (S1159), and transmits the encrypted data to the security interface 535 in the first guest virtual machine 530 and the security interface 545 in the second guest virtual machine 540 through the second communication method (S1160).

[0260] On the other hand, the security interface 525 within the server virtual machine 520 can generate new symmetric keys as random key values ​​at specified intervals.

[0261] That is, the security interface 525 within the server virtual machine 520 can update the symmetric key.

[0262] Furthermore, the security interface 525 within the server virtual machine 520 transmits the encrypted updated symmetric key to the security interface 535 within the first guest virtual machine 530 and the security interface 545 within the second guest virtual machine 540 (S1162).

[0263] Figure 8e This is an example Figure 8d A diagram showing the format of messages such as authentication requests or subscription requests.

[0264] Referring to the attached diagram, messages such as authentication requests or subscription requests may include message ID, request ID, flag information or reserved information, type information, and M / Q / C information in the interface header.

[0265] On the other hand, the M / Q / C information in the interface header may include extension bits.

[0266] For example, the reserved information [0x00] can indicate finding a server virtual machine (Find Server VM), [0x01] can indicate offering a server virtual machine (Offer Server VM), [0x02] can indicate requesting capability (Request capability), and [0x03] can indicate request capability ACK (Request capability ACK).

[0267] On the other hand, the Type information [0x00] can indicate Find Service, [0x01] can indicate Offer Service, [0x02] can indicate Request Service, [0x03] can indicate Request Service ACK, [0x04] can indicate Find Event group, [0x05] can indicate Publish Event group, [0x06] can indicate Subscribe Event group, and [0x07] can indicate Subscribe Event group ACK.

[0268] On the other hand, the extension bit [0x00] can represent only IxF, and the extension bit [0x01] can represent IxF with SOME / IP.

[0269] On the other hand, the server virtual machine 520 can be controlled to modify the data shared with the first client virtual machine 530 and the second client virtual machine 540 according to the sharing policy. Thus, it is possible to distinguish the transmitted data based on the sharing policy.

[0270] On the other hand, server virtual machine 520 can configure the data shared with the first client virtual machine 530 and the second client virtual machine 540 based on the update of the sharing policy. Thus, the data to be transmitted can be configured based on the update of the sharing policy.

[0271] On the other hand, the server virtual machine 520 can be controlled to receive location information data, camera data, or sensor data, and according to the sharing policy, transmit location information data to the first guest virtual machine 530 using the shared memory 508, and is controlled not to transmit location information data to the second guest virtual machine 540. Thus, the transmitted data can be distinguished based on the sharing policy.

[0272] On the other hand, the server virtual machine 520 can be controlled to transmit location information data to the first guest virtual machine 530 and the second guest virtual machine 540 using the shared memory 508 according to the update of the sharing policy. Thus, the data to be transmitted can be set based on the update of the sharing policy.

[0273] Figure 9a This is a diagram illustrating the use of a shared symmetric key.

[0274] Referring to the attached diagram, the security interface 535 in the first guest virtual machine 530 or the security interface 545 in the second guest virtual machine 540 requests authentication from the security interface 525 in the server virtual machine 520 (S1210).

[0275] Correspondingly, server virtual machine 520 verifies the validity of the certificate (S1215).

[0276] When the certificate is valid, the server virtual machine 520 uses the other party's public key to encrypt the symmetric key for data transmission and reception (S1220).

[0277] Furthermore, the server virtual machine 520 can transmit a security key, including an encrypted symmetric key, as a response message to the first client virtual machine 530 or the second client virtual machine 540 via the first communication method (S1225).

[0278] On the other hand, if the certificate is invalid in step S1215, the server virtual machine 520 may transmit a response message indicating that the certificate of the first client virtual machine 530 or the second client virtual machine 540 is invalid (S1283).

[0279] That is, according to Figure 9a When the server virtual machine 520 receives an authentication request from the first client virtual machine 530, it can encrypt the security key based on the public key received from the first client virtual machine 530, and transmit the encrypted security key to the first client virtual machine 530 through a first communication method or a second communication method. This enhances the security of data transmission.

[0280] On the other hand, when the server virtual machine 520 receives an authentication request from the first client virtual machine 530, if the certificate is valid, it can encrypt the security key based on the public key received from the first client virtual machine 530, and transmit the encrypted security key to the first client virtual machine 530 through either the first communication method or the second communication method. This enhances the security of data transmission.

[0281] On the other hand, when the server virtual machine 520 receives an authentication request from the first client virtual machine 530, if the certificate is invalid, it can transmit a message indicating that the certificate is invalid to the first client virtual machine 530 through either the first or second communication method. This enhances the security of data transmission.

[0282] Figure 9b This is a diagram illustrating data sharing using symmetric keys.

[0283] Referring to the attached diagram, the first client virtual machine 530 or the second client virtual machine 540 receives data published by the server virtual machine 520, etc. (S1250).

[0284] The first client virtual machine 530 or the second client virtual machine 540 confirms whether it has subscribed to the topic (S1255). If so, it confirms whether the received data is important information (S1260). If so, it confirms whether to retain the symmetric key (S1265). If so, it decrypts the received data using the retained symmetric key (S1270).

[0285] Furthermore, the first client virtual machine 530 or the second client virtual machine 540 transmits the decrypted data to the subscribed application, etc., through the second communication method (S1275).

[0286] On the other hand, if the data received in step 1260 does not contain important information, it can be directly passed to applications that subscribe to the data, etc., without decryption, since it is not encrypted.

[0287] On the other hand, step S1260 can be a step of determining whether the importance level is above a specified value.

[0288] For example, if the importance level is above the specified value, step 1265 can be executed; if it is below the specified value, step 1275 S1275 can be executed.

[0289] As mentioned above, according to Figure 9b Data can be shared via a second communication method using a secure key, including a symmetric key.

[0290] On the other hand, even if a fault or failure occurs in the security interfaces 525, 535, and 545 within virtual machines 520, 530, and 540, the functions can still be performed normally or partially.

[0291] There is a need to find solutions to reduce connection and data loss when using security interfaces 525, 535, 545 and interface clients in the event of application faults or failures.

[0292] On the other hand, server virtual machine 520, first client virtual machine 530, or second client virtual machine 540 can execute active mode security interfaces and standby mode security interfaces.

[0293] On the other hand, the active-mode security interface can connect to the active-mode security interfaces of other connected virtual machines or other signal processing devices, while the standby-mode security interface can monitor the queue status. (See also...) Figures 10a to 10c Describe it.

[0294] Figure 10aThis is a diagram used to illustrate the operation of a security interface. In particular, Figure 10a This is a diagram used to illustrate the operation of the security interface of the first guest virtual machine 530 or the second guest virtual machine 540.

[0295] Referring to the attached diagram, the first guest virtual machine 530 can execute the active mode security interface 535, the standby mode security interface, and the application program Caa on the interface client ICa.

[0296] On the other hand, the second guest virtual machine 540 can execute the active mode security interface 545, the standby mode security interface, and the application CAb on the interface client ICb.

[0297] The security interface 535 within the first client virtual machine 530 can determine whether to use the data information queue 1320 based on the type, subject, or importance of the data sent or received from the application CAa.

[0298] On the other hand, the security interface 535 within the first client virtual machine 530 can be controlled to store data between security interfaces or between applications and security interfaces, or topics subscribed to by applications, etc., into the topic queue 1310.

[0299] On the other hand, the security interface 535 within the first guest virtual machine 530 can determine the data recovery argument value based on the importance of the data when the application CAa subscribes.

[0300] On the other hand, the security interface 535 within the first guest virtual machine 530 can be controlled to perform actions such as whether to use or update the data information queue 1320 based on the data recovery argument value.

[0301] On the other hand, the server virtual machine 520 can manage the status of the active mode security interface 535 and the standby mode security interface.

[0302] The security interface 545 within the second guest virtual machine 540 can determine whether to use the data information queue 1340 based on the type, subject, or importance of the data sent or received from the application CAb.

[0303] On the other hand, the security interface 545 within the second client virtual machine 540 can be controlled to store data between security interfaces or between applications and security interfaces, or topics subscribed to by applications, etc., into the topic queue 1330.

[0304] On the other hand, the security interface 545 within the second guest virtual machine 540 can determine the data recovery argument value based on the importance of the data when the application CAb subscribes.

[0305] On the other hand, the security interface 545 within the second guest virtual machine 540 can be controlled to perform actions such as whether to use or update the data information queue 1340 based on the data recovery argument value.

[0306] On the other hand, server virtual machine 520 can manage the status of security interface 545 in active mode and security interface in standby mode.

[0307] Figure 10b This diagram illustrates the connection management of the security interface.

[0308] Referring to the accompanying drawings, the first guest virtual machine 530 can execute an active mode security interface 535 for sending or receiving data and a standby mode security interface (SA1) for use as an alternative in the event of errors such as connection failure.

[0309] On the other hand, the active mode security interface 535 is connected to the active mode security interface within the second guest virtual machine 540, ready to send or receive data (SA2).

[0310] Next, the data information based on the connection between the security interfaces is updated in topic queue 1310, and the security interface in standby mode monitors the status of this queue (SA3).

[0311] Next, if the application CAa connects to the active mode security interface 535, the interface client ICa summarizes the connection information of the active mode security interface and the standby mode security interface (SA4).

[0312] Furthermore, this connection information is updated in topic queue 1310.

[0313] Next, if an error occurs in the active mode security interface 535 during the sending or receiving of data, the standby mode security interface is activated to active mode and takes action after acknowledging the topic queue 1310 (SA5).

[0314] On the other hand, according to the order of SA1 to SA5, when a connection error occurs, the state or mode of the security interface changes, and the corresponding action is performed according to each mode (SA6).

[0315] Figure 10c This is a diagram illustrating the data management of the security interface.

[0316] Referring to the attached diagram, when the application CAa in the first guest virtual machine 530 subscribes, it can input an On / Off value for the Data recovery Argument and transmit it (SB1).

[0317] Next, the active mode security interface 535 can confirm the on or off value (SB2) of the topic and the data recovery argument.

[0318] Next, the active mode security interface 535 confirms the data recovery argument value and, if enabled, stores the data in the data information queue 1320.

[0319] For example, if a connection failure occurs at security interface 535, the data information is updated after security interface 535 recovers, and only information after the recovery time can be transmitted.

[0320] Next, after the data is sent through security interface 535, the data reception result (SB3) of security interface 545 within the second guest virtual machine 540 is returned.

[0321] Next, if the security interface 535 receives the reception result, it will perform an update operation (SB4) such as deleting the corresponding data in the data information queue 1320.

[0322] Figure 11a This is a flowchart illustrating mode switching in a virtual machine.

[0323] Referring to the attached diagram, the first client virtual machine 530 or the second client virtual machine 540 determines whether to receive mode switching data (S1410).

[0324] At this time, the mode switching data can be received from the server virtual machine 520.

[0325] For example, when the server virtual machine 520 receives input signals such as user input, the server virtual machine 520 can transmit mode switching data to the first client virtual machine 530 or the second client virtual machine 540.

[0326] For example, if the server virtual machine 520 needs to switch modes on the first display 180, it can transmit mode switching data to the first client virtual machine 530.

[0327] Next, the first guest virtual machine 530 that receives the mode switching data determines whether it needs to be transmitted to other guest virtual machines 540 (S1420). If necessary, the mode switching data can be transmitted to applications, etc., in the second guest virtual machine 540 (S1435).

[0328] On the other hand, in step S1420 of step 1520, when there is no need to transmit to other guest virtual machines 540, the first guest virtual machine 530 activates the active mode security interface 535 and the standby mode security interface (S1425).

[0329] Furthermore, the activated security interface can verify the data in data queue 1340 (S1430). The verified data can then be used to perform a mode switch.

[0330] Figure 11b It is used for explanation Figure 11a The image.

[0331] Refer to the attached diagram, as follows Figure 11b As shown, either the first guest virtual machine 530 or the second guest virtual machine 540 outputs an image 1460 in the first mode. Then, upon receiving mode switching data, it can switch modes and output an image 1470 in the second mode. Thus, the image corresponding to the mode switch can be displayed.

[0332] On the other hand, the first mode in the diagram can be the classic mode, and the second mode can be the enhanced mode.

[0333] Figure 12a This is a flowchart illustrating view switching in a virtual machine.

[0334] Referring to the attached diagram, the first client virtual machine 530 or the second client virtual machine 540 determines whether to receive view switching data (S1510).

[0335] At this time, the view switching data can be received from the server virtual machine 520.

[0336] For example, when the server virtual machine 520 receives input signals such as user input, the server virtual machine 520 can transmit view switching data to the first client virtual machine 530 or the second client virtual machine 540.

[0337] For example, if the server virtual machine 520 needs to switch views on the first display 180, it can transmit view switching data to the first client virtual machine 530.

[0338] Next, the first guest virtual machine 530 that receives the view switching data determines whether it needs to be transmitted to the guest virtual machine 540 (S1520). If necessary, the view switching data can be transmitted to the application in the second guest virtual machine 540 (S1535).

[0339] On the other hand, in step S1520, when there is no need to transmit to other guest virtual machines 540, the first guest virtual machine 530 activates the active mode security interface 535 and the standby mode security interface (S1525).

[0340] Furthermore, the activated security interface can verify the data in the data information queue 1340 and determine whether the data needs to be transmitted (S1530). If so, a view switch can be performed.

[0341] For example, if the activated security interface contains data with an importance level above a specified value, a view switch will be performed.

[0342] Figure 12b It is used for explanation Figure 12a The image.

[0343] Referring to the attached diagram, the first client virtual machine 530 or the second client virtual machine 540 outputs the first mode image 1560, and then, upon receiving view switching data, can output the second mode image 1570.

[0344] At this point, the first mode can be a two-dimensional (2D) mode, and the second mode can be a three-dimensional (3D) mode.

[0345] On the other hand, when the first client virtual machine 530 or the second client virtual machine 540 receives data with an importance level of a specified value or higher, it can output the image 1580 in the third mode.

[0346] That is, the first client virtual machine 530 or the second client virtual machine 540 can be controlled to display important data such as traffic signs when receiving data with an importance level of more than a specified value.

[0347] Figure 13a This is a diagram illustrating an example of the operation of the safety interface between the first signal processing device 170a and the second signal processing device 170b.

[0348] Referring to the accompanying drawings, the first signal processing device 170a can execute a security interface 1615a, an application program 1610a, a data information queue 1630a, and a configuration file 1620a.

[0349] The second signal processing device 170b can execute a security interface 1615b, an application program 1610b, a data information queue 1630b, and a configuration file 1620b.

[0350] Figure 13b This is another example of the operation of the safety interface between the first signal processing device 170a and the second signal processing device 170b.

[0351] and Figure 13a compared to, Figure 13b As a dual structure, there are differences in how the two security interfaces are implemented.

[0352] Referring to the accompanying drawings, the first signal processing device 170a can execute the active board security interface 1715a, the standby mode security interface, the application program 1710a, the data information queue 1740a, and the configuration file 1720a.

[0353] The second signal processing device 170b can execute the active board security interface 1715b, the standby mode security interface, the application program 1710b, the data information queue 1740b, and the configuration file 1720b.

[0354] On the other hand, the preferred embodiments of the present invention have been described above with reference to the accompanying drawings. However, the present invention is not limited to the specific embodiments described above. Without departing from the technical concept of the present invention as claimed in the claims, those skilled in the art can make various modifications to it. Such modifications should not be understood separately from the technical concept or prospect of the present invention.

Claims

1. A signal processing apparatus, wherein, include: A processor that performs signal processing for a display mounted in a vehicle; The processor executes a server virtual machine and at least one guest virtual machine on the hypervisor within the processor. The server virtual machine transmits a security key to the first client virtual machine through a first communication method or a second communication method different from the first communication method; The server virtual machine transmits the encrypted data corresponding to the security key to the first client virtual machine through the second communication method.

2. The signal processing apparatus according to claim 1, wherein, The first communication method is interface communication; The second communication method is SOME / IP communication.

3. The signal processing apparatus according to claim 1, wherein, The server virtual machine transmits the security key to a plurality of client virtual machines through the first communication method or the second communication method; The server virtual machine transmits data encrypted with the security key to a plurality of client virtual machines via the second communication method.

4. The signal processing apparatus according to claim 1, wherein, The server virtual machine transmits data related to the executed first application to at least one guest virtual machine through the first communication method; The server virtual machine transmits data related to the executed second application to at least one client virtual machine via the second communication method.

5. The signal processing apparatus according to claim 4, wherein, The first client virtual machine outputs a first image corresponding to data related to the first application received via the first communication method; The first client virtual machine outputs a second image corresponding to data related to the second application received via the second communication method onto the first image.

6. The signal processing apparatus according to claim 1, wherein, The server virtual machine and the client virtual machine execute a routing manager, which is used to transmit data based on the second communication method.

7. The signal processing apparatus according to claim 1, wherein, When the server virtual machine receives an authentication request from the first client virtual machine, it encrypts the security key based on the public key received from the first client virtual machine, and transmits the encrypted security key to the first client virtual machine through the first communication method or the second communication method.

8. The signal processing apparatus according to claim 1, wherein, When the server virtual machine receives an authentication request from the first client virtual machine, if the certificate is valid, it encrypts the security key based on the public key received from the first client virtual machine, and transmits the encrypted security key to the first client virtual machine through the first communication method or the second communication method.

9. The signal processing apparatus according to claim 1, wherein, When the server virtual machine receives an authentication request from the first client virtual machine, if the certificate is invalid, it will transmit a message indicating that the certificate is invalid to the first client virtual machine through either the first communication method or the second communication method.

10. The signal processing apparatus according to claim 1, wherein, The server virtual machine receives location information data, camera data, or sensor data; The server virtual machine transmits location information data, camera data, or sensing data encrypted with the security key to the first client virtual machine via the second communication method.

11. The signal processing apparatus according to claim 1, wherein, The server virtual machine or the first client virtual machine executes the security interface in active mode and the security interface in standby mode.

12. The signal processing apparatus according to claim 11, wherein, The active mode security interface is connected to the active mode security interfaces of other connected virtual machines or other signal processing devices. The standby mode security interface monitors the queue status.

13. The signal processing apparatus according to claim 1, wherein, The first or second guest virtual machine outputs an image in the first mode; if it receives mode switching data, it outputs an image in the second mode.

14. The signal processing apparatus according to claim 1, wherein, The first or second guest virtual machine outputs an image in the first mode; if view switching data is received, it outputs an image in the second mode. The first or second guest virtual machine outputs an image in the first mode. If it receives data with an importance level of more than a specified value, it outputs an image in the third mode.

15. The signal processing apparatus according to claim 1, wherein, A first client virtual machine among the plurality of said client virtual machines operates for a first display, and a second client virtual machine among the plurality of said client virtual machines operates for a second display.

16. The signal processing apparatus according to claim 1, wherein, Also includes: Secure storage device for storing electronic signatures and public keys from external servers; as well as The security execution unit receives encrypted data from the server, decrypts the encrypted data from the server based on the server's electronic signature and public key, and transmits the decrypted data to at least one of the server virtual machine and a plurality of client virtual machines.

17. A signal processing apparatus, wherein, include: A processor that performs signal processing for a display mounted in a vehicle; The processor executes a server virtual machine and at least one guest virtual machine on the hypervisor within the processor. The server virtual machine transmits data related to the first application to the first client virtual machine through a first communication method; The first client virtual machine outputs a first image corresponding to data related to the first application received via the first communication method; The first client virtual machine outputs a second image corresponding to data related to the second application received via the second communication method onto the first image.

18. The signal processing apparatus according to claim 17, wherein, The first communication method is interface communication; The second communication method is SOME / IP communication.

19. A display device for a vehicle, characterized in that, include: First display; Second display; as well as A signal processing apparatus, including a processor, the processor performing signal processing for the first display and the second display; The signal processing apparatus includes the signal processing apparatus according to any one of claims 1 to 18.

Images