Generating alternative data for use in cases where verification is negative in an automobile

Abstract

The invention relates to a system arrangement which generates alternative data which can be used if the transmitted data is verified as negative, i.e. if the transmitted data is identified as incorrect. According to the invention, the data is duplicated at particularly suitable locations and is redundantly transmitted and correspondingly encoded. In a particular combination of features, various security mechanisms are integrated and linked in a synergistic manner so that particularly secure data transmission in a vehicle is guaranteed. The invention specifically addresses the safety requirements and hardware conditions in a vehicle, which is not the case for packet-switched communication, for example. The coding makes it possible for the receiver to identify that there can be an error with regard to the data integrity or that the data has been incorrectly transmitted or not transmitted at all. If this is identified, the redundantly transmitted data can be used on the receiver side and the data transmission is not impaired overall. The invention also relates to a method which makes it possible to provide or operate a suitable configuration of the system arrangement. Furthermore, a computer program product is proposed which has control commands which execute the method or provide or operate the system arrangement.

Description

[0001] This invention relates to a system arrangement that generates alternative data that can be used in the event that the transmitted data is verified as negative (i.e., in the event that the transmitted data is identified as incorrect). According to the invention, data is copied at particularly suitable locations and is transmitted redundantly and decoded accordingly. Various security mechanisms are integrated and linked in a cooperative manner in a specific combination of features to ensure particularly secure data transmission in vehicles. This invention specifically addresses the security requirements and hardware conditions in transportation vehicles, which are not the case for, for example, packet-switched communications. The decoding allows the receiver to identify potential errors regarding data integrity or whether data has been transmitted incorrectly or not at all. If this is identified, the redundantly transmitted data can be used at the receiver side, and the overall data transmission is not compromised. The invention also relates to a method that enables the provision or operation of a suitable configuration of the system arrangement. Furthermore, a computer program product having control commands for performing the method or providing or operating the system arrangement is proposed.

[0002] Typically, there is no packet-switched data transmission in automobiles; instead, components are hardwired or hard-decoded, and therefore there is no executable dynamic packet switching or sequential or serial data communication. Automobiles have particularly stringent requirements for data integrity, and it must be ensured at all times that the transmitted data is received completely and correctly at the receiving end. Safety functions with exceptionally high fail-safety and reliability are typically implemented in automobiles. Another requirement in automobiles is to minimize technical complexity and reduce weight. Especially in electric vehicles, the increased energy requirements impact driving range, which must be avoided at all costs. Furthermore, conventional packet-switched transmission technologies cannot be used in automobiles because these technologies typically do not meet latency requirements or require too much effort for dynamic packet switching transmission. The required effort includes providing components for selecting dynamic data paths, which is not necessary in automobiles.

[0003] Existing technologies view layer models as hierarchical organizational structures. These models are used to divide complex systems into manageable layers or hierarchies, each with specific tasks and responsibilities. These layers work together to achieve the overall functionality of the system. An existing example of a layered model is the OSI (Open Systems Interconnection) model used in packet-switched network technologies. The OSI model consists of seven layers, each performing a specific task related to communication between computers and devices. The layers range from the physical connectivity layer to the application layer, with each layer built upon the services of the layers below it.

[0004] It is known from existing technology that redundant transmission is necessary for potentially incorrectly transmitted data. This redundancy also generates replacement data, where prior art has the negative consequence that data may be corrupted before replication. In this way, redundant replacement data is generated that still contains errors. The disadvantage of this approach is the significant technical effort required to replicate the data and the corresponding network load, which does not provide any added value. Therefore, conventional methods do not consider the underlying architecture or application domain and incorrectly assume that correct data is available, yet redundant data also contains errors. In this way, a process considered reliable under existing technology is created, however, the process continues to deliver incorrect data.

[0005] Data integrity generally refers to the accuracy, reliability, and consistency of data in an information system or database. Data integrity ensures that data remains correct during storage, transmission, and processing, and is not unintentionally or maliciously altered. Ensuring data integrity is crucial for ensuring the reliability and usefulness of information, especially in safety-critical applications such as automobiles.

[0006] Furthermore, so-called forward error correction is known in the prior art. Forward error correction (FEC) is an error correction method that adds extra redundant information to the data. This redundancy allows the receiver to identify and correct errors without having to retransmit packets. FEC is commonly used in high-speed Ethernet connections such as 10 Gigabit Ethernet (10GbE) to ensure data integrity.

[0007] Error correction mechanisms play a crucial role in ensuring reliable data transmission in a network. These mechanisms help detect, isolate, and correct transmission errors to maintain data integrity. This is especially critical in mission-critical environments that transmit large amounts of data, where error correction mechanisms are essential for maintaining connection quality.

[0008] Furthermore, it is generally known from existing technologies that data transmission via serial data channels is often subject to errors. To address this issue, existing technologies recognize various encoding methods, such as line decoding. This is also known as wire decoding.

[0009] Existing technology recognizes the problem of data transmission failures via serial communication links and stipulates providing forward error correction to line-decoded data. Therefore, existing technology addresses the error correction problem by providing a non-line-decoded supplement, i.e., forward error correction, to line-decoded data, but this forward error correction is not line-decoded. Consequently, the existing technology suffers from the following problem: even with line decoding, the individual metadata is not transmitted in decoded form, and therefore the advantages of line decoding cannot be applied to all transmitted data. This, in turn, represents a source of error. Existing technology sometimes addresses this problem by separately encoding the forward error correction data and then transmitting it. This results in additional work, and new forward error correction must be computed to guarantee the line-decoded forward error correction data. This, in turn, generates additional effort and also results in non-line-decoded forward error correction.

[0010] Generally speaking, prior art suffers from the following problem: it does not adequately analyze which point in the system layout or at which location in the process it is particularly advantageous to replicate and transmit data. Therefore, even in the case of redundant data transmission, prior art does not provide any reliable method to ensure data integrity.

[0011] Another drawback of existing technologies is that copying and transmitting data requires significant technical effort. A method or system arrangement that works particularly efficiently, or at the hardware level, is desired.

[0012] Furthermore, prior art methods for transmitting packet-based data are not applicable because they are based on a completely different network architecture that must ensure dynamic packet switching. This means that the resulting prior art methods require additional security mechanisms, such as sequential or serial data transmission.

[0013] Therefore, the object of the present invention is to provide a system arrangement specifically for providing alternative data in automobiles. The system arrangement should be designed to be particularly efficient and robust against errors. Another object of the present invention is to provide a method for a corresponding configuration or a computer program product having control commands for implementing said method or providing or operating said system arrangement.

[0014] The problem is solved by the features of claim 1. Further advantageous embodiments are given in the sub-claims.

[0015] Therefore, a system arrangement is proposed for generating alternative data in the event that the verification of data to be transmitted during serial data transmission in a vehicle is negative. The system arrangement includes: a physical application device configured to encapsulate application data in cells of a predefined cell format, wherein the application data is received through a first number of input interfaces of the application device and redundantly output to a cell multiplexing device through a multiple of the first number of redundant output interfaces of the application device, and wherein additional application data is received through a second number of input interfaces of the application device and output to the cell multiplexing device through a second number of non-redundant output interfaces of the application device; and a cell multiplexing device including, for each output interface of the application device, a receive interface configured to receive the application data encapsulated in cells, wherein the cell multiplexing device is configured to forward the application data encapsulated in cells to a data transmission device, the data transmission device providing forward error correction to the application data.

[0016] According to the present invention, replacement data is generated on the transmitter side, and said replacement data is used to utilize the transmitted data in the event of faulty transmission or decoding errors. Therefore, the replacement data is data used when the receiver cannot correctly receive the transmitted data. The receiver can verify the received data (i.e., check whether the received data is correct), and if the verification or check is negative, the replacement data can be used. This means that the replacement data is not only used to check the correctness of the actual data, but also (in addition or alternatively) to check the actual data through forward error correction. If the actual data is transmitted correctly, the replacement data can be discarded. If forward error correction produces a positive verification or a positive check, the replacement data is deleted or no longer considered.

[0017] Because of serial data transmission, according to one aspect of the invention, individual data packets cannot overtake other data packets. This can occur, for example, during packet-oriented transmission, and data is retransmitted, for example, when a predefined time period expires. Therefore, according to the invention, no additional information regarding the sequence of data packets is required. Serial data transmission is carried out via a wired medium, such as electrically or via optical fiber.

[0018] Therefore, the proposed invention is particularly advantageous for use in automobiles, where the fastest and error-free data transmission is required. According to the invention, the proposed system arrangement can be provided as a whole, i.e., all components are hardwired to each other and cannot be separated non-destructively. This represents an advantage over prior art and implies that known methods from packet-switched transmissions or Internet technologies cannot be used.

[0019] The system is configured with a physical application device that receives data from a signal source at the application layer. According to one aspect of the invention, this signal source may be, for example, an imaging device connected to the application device via an HDMI and / or display port. Therefore, the application device may have several inputs or interfaces. Potentially security-critical data that must be securely transmitted to the receiver is provided herein.

[0020] According to one aspect of the invention, application data is encapsulated in cells according to a predefined cell format. This means that the data can be re-decoded, or the data remains unchanged with only additional information added. For example, the data format or cell format may allow header data, such as describing virtual paths, to be added to the data. Even if the proposed system arrangement is hardwired, existing data paths can still be dynamically switched, for which a path table must be provided. However, the order in which the devices pass through is always the same. Addressing can be performed on existing physical paths only for different virtual paths without having to change the order of the devices in the flowchart.

[0021] According to the present invention, different input interfaces are provided in the application device. For example, a first port is used as an input interface, and a second port is also used as an input interface. The first input interface can provide particularly security-critical information, which is then transmitted to a large number of output interfaces. Within the application device, data is copied, received at the input interfaces, and output at output interfaces in multiples of the number of input interfaces.

[0022] Therefore, the multiple related to the number of input and output interfaces refers to a multiple factor of the number of available output interfaces relative to the number of input interfaces. For example, if one input interface is provided, the multiple could be two or (in another example) three output interfaces available. If two input interfaces exist, in one example, it could be three or six output interfaces. This ensures that the amount of data is replicated at the same ratio as the number of output interfaces. The multiple must be designed such that the number of output interfaces is at least two to be considered a multiple. This does not necessarily have to be an integer multiple. For example, two input interfaces can also correspond to three output interfaces. The typical case here is one input interface and two output interfaces. Therefore, the minimum multiple factor of two is for one input interface. However, if two input interfaces exist, a multiple factor of 1.5 can also apply. The only important thing here is that the number of input interfaces does not correspond to the number of output interfaces, and logically, only an integer number of input and output interfaces exist.

[0023] Therefore, the application device receives data packets or application data, and this data is implicitly copied according to the number of output interfaces. This ensures efficient generation of redundant replacement data without requiring significant computational power. The hardware interconnects of the application device alone ensure redundant data forwarding. Therefore, this circuit is particularly robust and error-resistant because no separate logic needs to be implemented.

[0024] Data is redundantly output to a cell demultiplexing device, which then receives the encapsulated or encoded data. This device has the same number of receive interfaces as the application device has the same number of output interfaces. Communication between the two devices can be via a communication medium such as a data line or at least one contact. This data channel can also be designed so that a virtual communication path can be set on the data channel.

[0025] In addition, additional application data is received via a second number of input interfaces of the application device. This data may be non-security critical and therefore does not require redundant transmission. This data may also be encoded according to a cell format, and forward error correction may be added to this data. This data is simply transmitted through the application device without being redundantly forwarded. Therefore, for these input interfaces, there is an equal number of output interfaces. This could be one interface, or, for example, two, three, or four interfaces. This data is also output to a cell multiplexing device, but this is done without duplication.

[0026] Generally, application data can be modified or processed within the application device. Therefore, this data is still referred to as application data and is encoded in cells according to the specified cell format. Furthermore, additional data can be added to the application data; this additional data is not limited to frame data (such as header data) but can also include additional user data. This means that the application data can still be used as application data, but it has been edited and / or expanded or reduced.

[0027] According to the invention, it is particularly advantageous that data replication occurs between the application device and the cell multiplexing device. Therefore, according to the invention, it is recognized that data must be replicated particularly early in the processing chain, as the data is highly likely to be unchanged at this time. This produces the following advantages over prior art: unnecessary intermediate processing steps are avoided, and data is only saved or replicated afterward. The proposed invention is based on a three-layer model, rather than the conventional seven-layer model. Therefore, conventional layer models are not used, specifically because these layer models are used for packet-switched data transmission. Thus, while prior art generally accepts data replication, the present invention combines error correction with replication in a coordinated manner, and the special location within the device produces the following special technical effect: the system arrangement as a whole is highly fault-resistant because data is replicated at the beginning of the processing.

[0028] According to one aspect of the invention, the output interface and / or input interface each exist as a physical interface. This has the advantages that the input interface can be implemented as a conventional port, and the physical configuration of the input and output interfaces allows application data to be copied without computer-implemented or dynamic logic. Therefore, instead of providing a processor for copying data, application devices can be interconnected so that the application devices copy data solely based on the interconnection. This results in a fault-resistant method that does not allow for data forgery. There are also advantages in terms of processing time and the technical effort required to provide the proposed system arrangement.

[0029] According to one aspect of the invention, application data is transmitted from an application device to a cell multiplexing device and / or from a cell multiplexing device to a data transmission device via virtual communication paths. This has the advantages that physical communication channels can be optimally utilized, and various virtual channels can be set up via a single physical channel, and these virtual channels can also be controlled individually. This allows for optimization of virtual paths, for example, in terms of bandwidth utilization. Furthermore, the proposed system arrangement is particularly hardware efficient because it is not necessary to create a separate physical channel for each channel.

[0030] According to another aspect of the invention, the cell format provides at least one source identifier for frame data and / or virtual paths used for data transmission. This has the advantage that the cell format can specify via which virtual channel the data is transmitted, which can be done, for example, using a channel identifier. Additionally or alternatively, a source identifier can also be specified, which thus specifies the interface from which the data originates, and therefore allows tracking of which data was initially involved. The source identifier can also define the interface and thus specify which path to select from the source. The path can also be a virtual channel or path, or a physical path. For example, virtual paths can be numbered sequentially, such that each path is assigned an identifier or value. Furthermore, forward error correction can also be stored in the frame data.

[0031] According to another aspect of the invention, the cell format provides numerical values ​​that identify virtual paths for data transmission. This has the advantage that virtual paths can be identified through a simple process, and that it is already possible to determine which virtual path to select within the application device.

[0032] According to another aspect of the invention, up to 128 virtual paths for data transmission can be established between the application device and the cell multiplexing device. This has the advantages that virtual paths can be identified on a byte-by-byte basis, and furthermore, it will be empirically determined that 128 virtual paths are sufficient in a vehicle. In this way, virtual paths can be identified efficiently.

[0033] According to another aspect of the invention, a data transmission device is coupled to a data receiving device, the data receiving device being configured to receive application data and further configured to check each forward error correction, wherein, in the case of a negative forward error correction check, the erroneous application data is replaced with redundantly transmitted application data. This has the advantage that the data receiving device can check the correctness of the data transmission because all data or application data and / or cells are provided with forward error correction. Therefore, in the case of redundant application data, a first unit of application data can be verified by the forward error correction code, i.e., its authenticity is checked, and if the forward error correction identifies the data as incorrect, replacement data, i.e., a unit of the second redundantly transmitted application data, can be used. This second application data is also provided with forward error correction, so that it is possible to identify whether the data has been transmitted correctly.

[0034] According to another aspect of the invention, the data receiving device has a cell demultiplexing device that forwards incoming cell-based application data to an application device of the data receiving device via a virtual path. This has the advantage that an application device is also provided on the receiver side, corresponding to the application device on the transmitter side, and thus the two application devices can communicate with each other. For example, the transmitter device of the receiver device can be designed similarly, and thus the received data is transmitted through the same device in the reverse manner as on the transmitter side. Again, it is advantageous to check the data as late as possible, because the data is transmitted to the application device on the receiver side along with forward error correction, and thus the forward error correction can be carried to the end of the processing and any errors can be identified.

[0035] According to another aspect of the invention, each cell is encoded with forward error correction. This has the advantage that all data is provided with forward error correction, and therefore not only can corresponding errors be identified, but errors can also be corrected. If this is not feasible at the receiver side, according to the invention, replacement data is provided, which can then be checked for correctness, and then the replacement data can replace the actual data. This ensures that error-free data is always transmitted, and this error-free data can also be checked.

[0036] According to another aspect of the invention, redundant application data is transmitted between the data transmission device and the data receiving device via a separate communication medium. This has the advantage that faults in the communication medium (e.g., a cable) can also be identified or corrected. If one communication medium is defective, another communication medium is always available, and replacement data can be sent via this communication medium. Therefore, fault robustness also exists in the transmission path.

[0037] According to another aspect of the invention, the application device, cell multiplexing device, and / or data transmission device are physically designed. This has the advantage of creating a particularly efficient hardware architecture that is both fault-resistant and high-performing. This is especially advantageous in automotive applications.

[0038] According to another aspect of the invention, the first number of redundant output interfaces is exactly two. This has the advantage that data is always transmitted in duplicate, even in the case of a single application data instance, there are two application data instances, one corresponding to the actual data and the second instance representing the replacement data.

[0039] In this configuration, data transmission is ensured through a combination of several mechanisms working together. The data to be transmitted is provided with forward error correction, which enables the receiver to determine whether the data has been correctly received, or allows the receiver to correct the data. If the data verification is negative, replacement data is used, which is also provided with forward error correction. In this way, the integrity of the data can also be checked, and if the first data is unavailable, the replacement data is used. Furthermore, according to the invention, it is particularly advantageous that the first data is transmitted via a first transmission medium and the second data is transmitted via a second, different communication medium. This ensures that the data is always available simultaneously, which distinguishes the invention from packet switching methods, and also ensures the selection of a correct and functioning transmission channel.

[0040] If data is received incorrectly at the receiver and cannot be corrected by forward error correction, this could be due to various steps in the transmission process. Therefore, this invention ensures that, in the event of a defective transmission medium, alternative data is provided via a different, separate transmission medium. In this way, errors not only related to data processing are avoided, but also, in particular, at least one functional transmission medium is available. The process only terminates if both transmission media fail. However, this situation is uncommon, and usually only temporary failures or damage to the transmission media occur. This ensures that, in the event of errors actually identified due to forward error correction, redundant transmission channels can be used to transmit replacement data.

[0041] According to the invention, multiple protections are therefore proposed, in which data is redundantly encoded and individual security mechanisms work together to enable forward error correction to also be used to select redundant transmission channels or redundant transmission media. If the receiver detects a fault in the first data, a second data transmission medium ensures that replacement data is available, which can then also be verified using forward error correction. The combination of these features yields the following advantages over prior art: creating a robust method or robust system arrangement that can be provided with minimal technical effort. Furthermore, the invention provides the possibility of implementing security mechanisms entirely on a hardware-based basis. For example, data can be copied in a manner that automatically repeats or replicates data on the transmitter side, and this interconnection can be particularly advantageously performed simply by interconnecting input interfaces to output interfaces. According to the invention, therefore, the number of output interfaces can be greater than the number of input interfaces. In this way, data copying is not performed through computational steps, but rather the mechanism can be interconnected on the hardware side, and thus possesses particularly high fault tolerance and fail-safety.

[0042] According to the present invention, a transmission apparatus is provided that receives a first data unit and a second data unit, and forwards the first data unit and the second data unit. For this purpose, the first transmitted data is copied in such a manner that a first instance of these data units is created, and a second identical instance of these first data units is created. The second data unit is a data unit that does not require redundant transmission. Therefore, according to the present invention, data units with particularly security criticality (i.e., the first data unit) and data units with ordinary security requirements can be distinguished. The latter can then be forwarded without copying (i.e., non-redundantly).

[0043] Data units themselves can be forwarded or encoded, and specifically can be divided into any number of segments. These segments can be individual cells. Forward error correction is calculated for the data units, enabling the data receiver to use this forward error correction to check the correctness of the received data and correct it if necessary. Therefore, forward error correction can be associated with the data unit itself or with individual segments. If the data unit is segmented, each segment can receive forward error correction. Data units may also have frame data (such as header data) that stores the calculated forward error correction. In this way, the corresponding format can be specified.

[0044] Individual data transmission media can be contacts or cables. Therefore, the transmission medium can be an electrical medium, an optical medium, or a waveguide. Individual data transmission media are typically independent of each other. Therefore, it is advantageous to electromagnetically shield the corresponding transmission media and / or ensure that the second medium continues to function normally in the event of a failure of the first medium. This means that individual transmission media should not exist as a single contact or a single cable. This does not contradict the fact that, for example, two transmission media are arranged on a common circuit board. This means that individual transmission media are not themselves virtual paths on the same transmission medium. However, virtual paths can typically operate on each transmission medium within a single transmission medium.

[0045] To ensure that the receiver device correctly receives data even in the event of a channel failure or impairment, a first instance of the first data unit is transmitted via a communication medium, and a second instance (i.e., the same redundant data) is transmitted via a second communication medium. At the receiver side, an accompanying forward error correction code can be used to identify whether the data can be transmitted correctly. If not, this may be due to a data processing failure or a damaged transmission channel. According to the invention, errors can be identified without further error searching. Therefore, the receiver device attempts to repair the received data unit using the transmitted forward error correction code, but this is generally impossible. This is due to the inherent limitations of forward error correction. Although forward error correction can usually correct small errors (e.g., individual bit errors), it cannot be unlimited. If this is not possible, it is particularly advantageous that the redundant data (i.e., the second instance) can be transmitted via the second data transmission channel. This is done in any case because serial or sequential communication (i.e., non-packet-based communication) is particularly preferred. It is advantageous here to transmit the first and second instances of the data unit simultaneously, if possible, to ensure that when the first instance of the data unit is discarded, the second instance of the data unit already exists.

[0046] Forward error correction codes can now be used to check a second instance of the data unit, and in the event of a negative verification (i.e., if the data transmission is incorrect), the forward error correction codes can be used to correct the second instance. This means that if the first instance of the data unit is transmitted incorrectly, the second instance can be checked and corrected if necessary. Therefore, the two communication channels work together using corresponding forward error correction. If the correction of the first instance fails, the second instance transmitted via the second channel can still be checked and corrected if necessary. If the transmission of the first instance fails, the second instance can be used as replacement data. Therefore, the first instance is discarded, and the processing of the second instance continues without delay.

[0047] The second encoded data unit can optionally be transmitted to the receiving device via one of two data transmission media. Therefore, any data transmission medium can be selected, or the second data unit can be fragmented and transmitted via one or more data transmission segments as needed. Thus, for example, the second data unit is transmitted via the first communication path, and these second data units are transmitted via the second communication path once other second data units become available. Therefore, according to the invention, the second data unit can optionally be transmitted via one data transmission medium, regardless of where the data units in the first data unit are transmitted. In this way, load balancing can be performed in a manner that always selects the more advantageous transmission medium. One metric for selecting the data transmission medium can be, for example, checking latency or bandwidth availability, and then sending the second data unit via the data transmission medium currently having advantageous parameters. If, for example, it is identified that the first data unit is consistently transmitted incorrectly via a certain transmission medium, another data transmission medium can be selected for the second data unit. The selection in this case is not static, but can also be dynamically changed for the second data unit during runtime.

[0048] According to one aspect of the invention, the system arrangement is configured to load balance relative to the bandwidth and / or delay specifications of the two data transmission media. This has the advantage that a suitable data transmission medium can be selected for the transmission of the corresponding data. Since parameters may change during operation, the optional selection also implies that data units can also be transmitted via another data transmission medium during operation. This is particularly suitable for second data units that can be transmitted via a first channel or a second channel.

[0049] According to another aspect of the invention, the transmission of decoded data units via the data transmission medium is sequential. This has the advantages of ensuring efficient and fast data transmission and eliminating the need for additional logic or intermediate components as in the case of packet switching. According to one aspect of the invention, sequential can also mean serial. Thus, this means that the data is sequentially connected, rather than packaged in a way that allows one packet to overtake another. For example, data segments or data units can also be numbered consecutively and always arrive in the expected order.

[0050] According to another aspect of the invention, the receiving unit is configured to use forward error correction to check and / or correct the correctness of a first instance and / or a second instance of the data unit. This has the advantages that errors themselves can be identified, and furthermore, errors can be corrected based on forward error correction. Typically, checking the forward error correction of the second instance of the data unit is only necessary if the verification of the first data unit fails. It can then be checked whether the second instance has been correctly transmitted, whether the second instance can be corrected if necessary, and whether the second instance can still be used to replace the first data unit in the first instance.

[0051] According to another aspect of the invention, the receiving unit is configured to consider a second instance of the data unit in the event that a first instance of the data unit has not been transmitted correctly. This has the advantage that a valid data unit is always present, and the first data unit can then be discarded. Due to the possibility of serial or sequential transmission, the second instance of the data unit can coexist with the first instance of the data unit in the receiver. In this way, the data of the first instance can be replaced with the data of the second instance in real time without any delay.

[0052] According to another aspect of the invention, the receiving unit is configured to consider a second instance of the data unit even if a first instance of the data unit has not been transmitted. This has the advantage that data units transmitted via different data lines can be taken into account, thus avoiding potential errors or damage to the first data transmission medium. Even if the first data transmission medium is damaged or fails to operate as intended, the second transmission medium is likely to operate normally. According to the invention, a first instance of the data unit can also be transmitted via a first data channel or via a first transmission medium, and a second instance can be transmitted via a second transmission medium, wherein another channel is selected for another first instance of the data unit, and therefore a first channel is also selected for another second instance of the data unit. Thus, dynamic switching between individual data units is possible during operation. For example, if there are five first instances of the first data unit and therefore five instances of the second data unit, in each case, the first instance can be transmitted via one of the data transmission media. The channel or transmission medium can be changed for the next instance of the data unit. This means transmitting the first and second instances alternately via the transmission medium, and thus it is possible to check which channel or which data transmission medium is operating according to the specification. If, for example, there are five instances of the first data unit, these instances can be transmitted alternately up and down with reference to the figures depicted in the illustrations. Therefore, this also applies to other instances where redundant data can be transmitted alternately via the first or second channel.

[0053] According to another aspect of the invention, the data unit is divided into information cells, and forward error correction is attached to each information cell. This has the advantage that the data unit as a whole does not need to be provided with forward error correction, but rather the data unit can be subdivided, and each subdivision receives forward error correction independently. This allows for the introduction of fine-grained forward error correction, thereby increasing the possibility of error correction. This is because forward error correction is only related to smaller segments of the data unit, and therefore only smaller signal sequences or bit sequences need to be protected.

[0054] According to another aspect of the invention, decoding includes line decoding. This has the advantage of producing a very robust signal sequence, which also guarantees stable data transmission. Therefore, additional security mechanisms can be advantageously integrated into existing combinations of functional FRs. For example, according to the invention, data units can be decomposed into smaller words and lines can be encoded in a particularly advantageous manner. Line decoding is also referred to as wire decoding and will be used synonymously herein.

[0055] According to another aspect of the invention, data transmission can be performed via virtual paths. This has the advantage that multiple virtual paths can be operated on the physical transmission medium, the multiple virtual paths operating independently of each other but within the constraints of the physical data path. Thus, for example, a first data unit and a second data unit can be transmitted together on the same physical layer (i.e., the same physical transmission medium), wherein a first virtual path is provided for the first data unit on a physical communication path, and another virtual path is provided for the second data unit on the same physical transmission medium.

[0056] According to another aspect of the invention, the data transmission media are each cable-connected. This has the advantage of creating transmission channels that can be separated particularly easily, i.e., the first data transmission medium does not affect the second data transmission medium. For this purpose, electromagnetic shielding may be required, for example. This ensures that the first and second data units are actually transmitted separately from each other, i.e., without interference.

[0057] According to another aspect of the invention, the transmission parameters and their tolerance ranges of all data units are cumulatively specified in both data transmission media. This has the advantage that the system arrangement as a whole must be subject to certain required performance according to the specifications, and therefore, certain characteristics or parameters must be ensured for the transmission media. For example, a certain delay time or bandwidth may be required, which must be provided by the system arrangement as a whole (i.e., cumulatively).

[0058] According to another aspect of the invention, each data transmission medium supports 15 gigabits per second. This has the advantage that sufficient bandwidth is available, and therefore 30 gigabits per second of data can be transmitted in its entirety. Empirical studies have shown that this is particularly advantageous in automobiles. Of course, faster data cables could also be provided, but this would involve greater technical effort.

[0059] The problem is further addressed by a method for generating alternative data in the event that the verification of data transmitted in serial data transmission in a vehicle is negative. The method includes: providing a physical application device configured to encapsulate application data in cells of a predefined cell format, wherein the application data is received through a first number of input interfaces of the application device and redundantly output to a cell multiplexing device through a multiple of the first number of redundant output interfaces, and wherein additional application data is received through a second number of input interfaces of the application device and output to the cell multiplexing device through a second number of non-redundant output interfaces of the application device; and providing a cell multiplexing device, wherein for each output interface of the application device, the cell multiplexing device includes a receive interface adapted to receive the application data encapsulated in cells, the cell multiplexing device being adapted to forward the application data encapsulated in cells to a data transmission device, the data transmission device providing forward error correction to the application data.

[0060] The problem is also solved by a computer program product having control instructions for implementing the proposed method or operating the proposed apparatus.

[0061] According to the invention, it is particularly advantageous that the method can be used to operate the proposed apparatus and units. Furthermore, the proposed apparatus and units are suitable for implementing the method according to the invention. Therefore, in each case, the apparatus implements structural features suitable for performing the corresponding method. However, the structural features can also be designed as process steps. The proposed method also provides steps for implementing the functions of the structural features. Furthermore, physical components can also be provided virtually or virtualized.

[0062] Further advantages, features, and details of the invention are provided in the following description, wherein various aspects of the invention are described in detail with reference to the accompanying drawings. Features mentioned in the claims and description may be essential to the invention individually or in any combination. Similarly, features mentioned above and further described herein may be used individually or in any combination. Functionally similar or identical parts or components are sometimes provided with the same reference numerals. The terms “left,” “right,” “top,” and “bottom” as used in the description of embodiments refer to drawings in one orientation having generally legible figure titles or generally legible reference numerals. The embodiments shown and described should not be construed as conclusive, but rather as exemplary in nature for explaining the invention. The detailed description is intended to provide information to those skilled in the art; therefore, known circuits, structures, and methods are not shown or explained in detail in the description so as not to hinder understanding of this description. The drawings show:

[0063] Figure 1 A schematic hierarchical model of an architecture for use in a system arrangement for generating alternative data, according to one aspect of the present invention;

[0064] Figure 2 A schematic block diagram of a proposed system arrangement for generating alternative data according to one aspect of the present invention;

[0065] Figure 3 Further schematic block diagram of the proposed system arrangement for generating alternative data according to one aspect of the present invention;

[0066] Figure 4 Further schematic block diagram of the proposed system arrangement for generating alternative data according to one aspect of the present invention;

[0067] Figure 5 The information data format according to one aspect of the present invention; and

[0068] Figure 6 A schematic flowchart of a proposed method for generating alternative data in the event that the verification of data to be transmitted in automotive serial data transmission is negative, according to another aspect of the present invention.

[0069] The accompanying drawings partially illustrate parameters familiar to those skilled in the art using English names, and these parameters are used as parameters and should not be translated in this manner.

[0070] Figure 1A schematic block diagram of a usable architecture according to one aspect of the invention is shown. For this purpose, three layers are shown twice; these three layers are similar but opposite, and the communication path extends downwards from the transmitter on the left-hand side and upwards to the receiver on the right-hand side. Applications APP 1, 2, and 3 communicating with the application on the receiver side are shown at the top. The application device is shown in the upper left corner, the cell multiplexing device is shown below the application device, and at the physical layer, the data transmission device is shown below the cell multiplexing device. On the left, on the transmitter side, this data transmission device is referred to as the physical transmitter; and on the right, the data receiving device is referred to as the physical receiver.

[0071] According to the invention, it is recognized that it is precisely in this architecture (i.e., not in a seven-layer architecture) that data should be multiplied or repeated between the first two upper layers in a particularly advantageous manner. This ensures redundant encoding of application data at a particularly early stage on the upper layer (i.e., the layer between the application device and the cell multiplexing device). On the receiver side (in this case, on the right), error checking or correction data is also provided between the cell multiplexing device and the application device in the upper right corner.

[0072] The layers, from top to bottom, can also be referred to as the Application Adaptation Layer (AAL), Cell Layer (ACL), and Physical Layer (APL), which are application adaptation layers (application devices), cell layers (cell multiplexing devices or cell demultiplexing devices), and physical layers (data transmission devices).

[0073] The virtual path layer consists of a physical layer, a cell layer, and an application adaptation layer. The physical layer comprises a transport sublayer and a physical medium sublayer. The application adaptation layer includes a segmentation and reassembly sublayer as well as functions for adapting data formats to corresponding applications.

[0074] The primary task of the physical layer is to establish physical connections to other physical layers. This connection should always be understood as bidirectional. Theoretically, this connection can be implemented using a wide variety of media. In practice, two serial differential GBps connections are used. At this layer, wire decoding is performed, empty cells are inserted to decouple the cell rate from the link rate, and the cell stream is integrated into the serial frame.

[0075] In the cell layer, segmented data (cell payload) from the segmentation and reassembly sublayers above are assembled into complete cells with headers, VP identifiers, and CRC, or CRC checks are performed on the cells, and the payload is forwarded to the segmentation and reassembly sublayers. This is also where various cell streams are multiplexed for application-customized functions or where cell payloads based on VP identifiers are distributed to application-customized functions (feed-in / feed-out).

[0076] The multiplexing and demultiplexing of cell streams in repeaters and demultiplexers (forwarders) also takes place at the cell layer.

[0077] The task of the application adaptation layer is to adapt the data of the application interface to the format of the user data field of the information cell and transmit the control information to the remote end, or to use the control information from the remote end for adaptation (clock generation, frame construction).

[0078] Figure 2 A schematic block diagram of a system arrangement according to one aspect of the invention is shown. The first three units of the proposed system arrangement are shown on the left-hand side, where the leftmost block represents an application device, the middle block represents a cell multiplexing device, and the right-hand block represents a data transmission device. The proposed invention can be implemented using the first two left-hand blocks, where data is redundantly transmitted between the first and second blocks. Two applications (i.e., application 1 and application 2) are shown on the left-hand side, where each application transmits data to the leftmost application device via an input interface (i.e., a port). The first unit or application device is designed such that the first unit or application device redundantly transmits data for the first application and non-redundantly transmits application data for the second application. This means that the upper arrow for data transmission between the application device and the cell multiplexing device can also be entered multiple times. Only two paths are shown here, namely the upper path for redundant data and the lower path for non-redundant data. As shown in the cell multiplexing device, the cell multiplexing device may have several input interfaces or data receiving interfaces. Therefore, cell 1 or more cells 1 are transmitted multiple times, while cell 2 or more cells 2 are transmitted once. In addition, each cell in the application device is provided with forward error correction.

[0079] like Figure 2 As can be seen, the data is copied in an early stage, i.e., after the first device on the far left. Therefore, according to the invention, it is particularly advantageous that the data is still available here and is likely to be intact. In the third unit (i.e., the data transmission device), the data lines are encoded and / or provided with forward error correction.

[0080] Therefore, the first three devices represent transmitters, and according to Figure 1 The architecture shown is used for design. Figure 2 The central ring represents the transmission medium through which data is transmitted from the transmitter to the receiver on the right. Only two devices are schematically shown on the right, but these devices could also be designed as three in the same manner as the transmitter. On the far right, data available at the end of processing for applications 1 and 2 is shown. Due to redundant transmission, data can be used multiple times using forward error correction, and thus, for example, information cell 1 can be checked for correctness, and replacement data can be used if the correctness check is negative.

[0081] Figure 3The diagram illustrates the proposed invention, and specifically, a schematic block diagram of the system arrangement, in which the system arrangement can be achieved using only two left-hand blocks. The other blocks (i.e., blocks 3, 4, 5, and 6) are optional.

[0082] As shown here, two applications are provided on the left-hand side, where application 1 provides application data, which is redundantly transmitted to the cell multiplexing device. This is indicated by two arrows. Application 2 supplies non-redundant data, which is therefore transmitted with one arrow. The arrow can be a transmission medium or at least a contact. A virtual data path can be implemented here. The transmitter is shown on the left-hand side, and the receiver is shown on the right-hand side, where the two sides can be similarly but in reverse. Thus, on the receiver side, the application device is shown on the right, the cell demultiplexing device is shown in the middle, and the data receiving device is shown on the left. Data is transmitted from left to right as described in the figures and is used by applications 1 and 2 on the right-hand side.

[0083] Figure 4 A schematic overview of the proposed system arrangement is also shown, in which two transmission media are now illustrated. This means, for example, that the upper transmission medium can transmit redundant application data, and the lower channel (i.e., the lower communication medium) can transmit redundant instances of this application data. This ensures that the transmission path is also redundant, and that if one channel is damaged or fails, replacement data is transmitted via the other channel. Non-redundant application data can optionally be transmitted via one of the channels. Different cells of non-redundant data can also be transmitted via different communication media. Thus, according to the invention, redundant data channels are created in a particularly advantageous manner, achieving a balance in terms of utilization.

[0084] If, for example, the transmission of application data is corrupted or incorrect, this can be identified and corrected using forward error correction. However, if data is unavailable due to a communication channel failure, replacement data is used, which is always available because a second communication channel is used for this replacement data. In the unlikely event that both communication media fail, the process terminates, which is also identified. This means not only copying the application data but also transmitting it separately via a dedicated data channel, which further increases error robustness.

[0085] Figure 5 A schematic structure of the target format according to one aspect of the invention is shown. In the upper right corner, a field is shown that describes, for example, a virtual path (VP) and provides a numerical value. This numerical value describes the virtual channel through which cells are to be transmitted. In the lower left corner is an abbreviation for Cyclic Redundancy Check (CRC). Other data fields may be additional frame data or user data, which is preferably transmitted in the largest field. Therefore, Figure 5An example of decoded cells with frame data is shown. The cells are encoded according to the provided cell format. Therefore, Figure 5 The diagram illustrates decoded application data, which is decoded into cell format and thus provides additional information beyond user data. Virtual paths enable redundant data transmission, for example, allowing application data encapsulated in cells to be transmitted via a first virtual path, and the same data (i.e., replacement data) to be transmitted via another virtual path. Therefore, as... Figure 5 As shown, the encapsulated application data can be used multiple times based on this information element, where only the fields of the virtual path need to be adapted.

[0086] Figure 6 A schematic flowchart illustrates a method for generating alternative data in the event that the verification of data transmitted in a serial data transmission in an automobile is negative. The method includes: providing 100 physical application devices configured to encapsulate application data 102 in cells of a predefined cell format, wherein the application data is received 101 through a first number of input interfaces of the application devices and redundantly output 103 to a cell multiplexing device through a multiple of the first number of redundant output interfaces of the application devices, wherein additional application data is received 104 through a second number of input interfaces of the application devices, and a second number of non-redundant output interfaces of the application devices are output to the cell multiplexing device 105; and providing 106 a cell multiplexing device, wherein for each output interface of the application devices, the cell multiplexing device includes a receive interface arranged to receive 107 the application data encapsulated in cells, the cell multiplexing device is arranged to forward 108 the application data encapsulated in cells to a data transmission device, and the data transmission device provides forward error correction 109 to the application data.

[0087] Therefore, a system arrangement for ensuring data transmission is proposed, the system arrangement comprising: a transmission device arranged to redundantly encode a first data unit into a first instance of the first data unit and a second identical and therefore redundant instance of the first data unit, and further arranged to encode a second data unit, wherein forward error correction is added in each case of all encodings; and exactly two physical separate data transmission media communicatively coupled to the transmission device and the receiving device, the transmission device arranged to transmit the first instance of the first data unit only via one data transmission medium and the second instance of the first data unit only via the corresponding other data transmission medium, and further arranged to transmit the second encoded data unit to the receiving device via any one of the two data transmission media.

Claims

1. A system arrangement for generating alternative data to use in the event that the verification of data to be transmitted in serial data transmission in a vehicle is negative, comprising: - A physical application device, arranged to encapsulate application data into cells of a predefined cell format, wherein the application data is received through a first number of input interfaces of the application device and redundantly output to a cell multiplexing device through a multiple of the first number of redundant output interfaces of the application device, and wherein additional application data is received through a second number of input interfaces of the application device and output to the cell multiplexing device through a second number of non-redundant output interfaces of the application device; and - The cell multiplexing device includes a receiving interface arranged to receive application data encapsulated in a cell for each output interface of the application device, the cell multiplexing device being arranged to forward the application data encapsulated in the cell to a data transmission device, the data transmission device providing forward error correction to the application data.

2. The system layout according to claim 1, characterized in that: The output interface and / or the input interface each exist as physical, non-intersecting interfaces.

3. The system arrangement according to claim 1 or 2, characterized in that: The application data is sent from the application device to the cell multiplexing device via a virtual communication path.

4. The system arrangement according to any one of the preceding claims, characterized in that: The cell format provides frame data and / or at least one source identifier for a virtual path used for data transmission.

5. The system arrangement according to any one of the preceding claims, characterized in that: The cell format provides numerical values ​​that identify the virtual path for data transmission.

6. The system arrangement according to any one of the preceding claims, characterized in that: Up to 128 virtual paths for data transmission can be set between the application device and the cell multiplexing device.

7. The system arrangement according to any one of the preceding claims, characterized in that: The data transmission device is coupled to the data receiving device, which is configured to receive the application data and is also configured to check each forward error correction and, if the forward error correction check is negative, replace the incorrect application data with redundantly transmitted application data.

8. The system layout according to claim 7, characterized in that: The data receiving device has a cell demultiplexing device, which forwards application data to the application device of the data receiving device through a virtual path.

9. The system arrangement according to any one of the preceding claims, characterized in that: Each cell is decoded with forward error correction.

10. The system arrangement according to any one of the preceding claims, characterized in that: The redundant application data is transmitted between the data transmission device and the data receiving device via a separate communication medium.

11. The system arrangement according to any one of the preceding claims, characterized in that: The application device, the cell multiplexing device, and / or the data transmission device are physically configured.

12. The system arrangement according to any one of the preceding claims, characterized in that: The first number of redundant output interfaces is exactly two times.

13. A method for generating alternative data in the event that the verification of data transmitted in a serial data transmission in a vehicle is negative, comprising: - Provides (100) a physical application device, the physical application device being arranged to encapsulate (102) application data into cells of a predefined cell format, wherein the application data is received (101) through a first number of input interfaces of the application device and redundantly output (103) to a cell multiplexing device through a multiple of the first number of redundant output interfaces of the application device, and wherein additional application data is received (104) through a second number of input interfaces of the application device, and the second number of non-redundant output interfaces of the application device are output to the cell multiplexing device (105); and - Provide (106) the cell multiplexing device, the cell multiplexing device including a receiving interface adapted to receive (107) the application data encapsulated in a cell for each output interface of the application device, the cell multiplexing device being adapted to forward (108) the application data encapsulated in a cell to a data transmission device, the data transmission device providing (109) forward error correction to the application data.

14. A computer program product comprising instructions that, when executed by at least one computer, cause the computer to perform the steps of the method of claim 13.

15. A computer-readable storage medium comprising instructions that, when executed by at least one computer, cause the computer to perform the steps of the method according to claim 13.

Images