Vehicle-mounted dual-computing-platform domain isolation test method, device and related equipment

Abstract

Embodiments of the present application provide a kind of vehicle-mounted double computing platform domain isolation test method, device and related equipment, it is related to the technical field of vehicle-mounted communication.The method comprises: based on the preset fault test rule, the transmission power of optical distribution network is controlled to attenuate, and simultaneously, service flow data is injected into optical distribution network;According to fixed statistical time window, the service frame arrival amount of arrival first computing platform and arrival second computing platform is respectively counted;Based on service frame arrival amount and corresponding arrival baseline, the domain isolation degree of first computing platform and the domain isolation degree of second computing platform are respectively calculated;Based on the domain isolation degree of first computing platform, the domain isolation degree of second computing platform and isolation degree threshold, domain isolation test result is generated.The method is used to reach the effect of physical level domain isolation test to vehicle-mounted double computing platform.

Description

Technical Field

[0001] This application relates to the technical field of vehicle communication, and in particular to a method, apparatus and related equipment for testing domain isolation of a dual computing platform in a vehicle. Background Technology

[0002] With the rapid development of autonomous driving technology, the electronic and electrical architecture of vehicles is gradually evolving towards distributed, high-bandwidth, and low-latency architectures. A typical characteristic is the deployment of the intelligent driving computing platform responsible for perception, decision-making, and control, and the cockpit computing platform responsible for display, interaction, and entertainment, as two independent, physically isolated computing units. These two computing platforms are interconnected via a vehicle-mounted optical communication backbone based on a Passive Optical Network (PON), carrying safety-related P0 / P1 services and non-safety-related P2 / P3 services. Therefore, it is necessary to test whether these two computing platforms can achieve physical-level domain isolation.

[0003] Currently, there are no relevant physical domain isolation testing methods. Therefore, how to perform physical domain isolation testing on in-vehicle dual computing platforms is an urgent problem to be solved. Summary of the Invention

[0004] This application provides a method, apparatus, and related equipment for testing domain isolation of a vehicle-mounted dual computing platform, which can achieve the effect of physical-level domain isolation testing of a vehicle-mounted dual computing platform.

[0005] In a first aspect, embodiments of this application provide a method for testing domain isolation of an onboard dual computing platform, including:

[0006] Based on preset fault test rules, the transmission power of the optical distribution network is attenuated, and service flow data is injected into the optical distribution network at the same time. There are multiple optical distribution networks, which are connected to the first computing platform and the second computing platform respectively through corresponding optical line terminals. The service flow data includes multiple service frames.

[0007] According to a fixed statistical time window, the number of service frames arriving at the first computing platform and the number of service frames arriving at the second computing platform are counted separately.

[0008] Based on the number of service frames arriving and the corresponding arrival baseline, the domain isolation of the first computing platform and the domain isolation of the second computing platform are calculated respectively.

[0009] Domain isolation test results are generated based on the domain isolation of the first computing platform, the domain isolation of the second computing platform, and the isolation threshold.

[0010] In one possible implementation, the transmission power of the optical distribution network is attenuated based on preset fault test rules, including:

[0011] Based on preset fault test rules, determine the attenuation start time, attenuation end time, and attenuation ratio for any optical distribution network.

[0012] Based on the attenuation start time, attenuation end time, and attenuation ratio, attenuation control instructions are generated. These instructions are used to control the programmable optical attenuator array to attenuate transmission power. The programmable optical attenuator array is located between the uplink and the optical line terminal of the optical distribution network.

[0013] In one possible implementation, the method further includes:

[0014] Based on preset fault test rules, a time synchronization instruction is generated. The time synchronization instruction is used to timestamp the programmable optical attenuator array and the traffic generator. The traffic generator is used to generate service flow data.

[0015] In one possible implementation, the arrival volume of service frames reaching the first computing platform and the arrival volume of service frames reaching the second computing platform are counted separately according to a fixed statistical time window, including:

[0016] Within the first time interval, the number of first service frames arriving at the first computing platform and the number of second service frames arriving at the second computing platform are counted within each fixed statistical time window; wherein, the fixed statistical time window is shorter than the first time interval, and the first time interval is the time interval from the attenuation start time to the attenuation end time.

[0017] Calculate the average number of multiple first service frames and the average number of multiple second service frames within the first time interval, respectively.

[0018] The average number of first service frames is recorded as the service frame arrival volume of the first computing platform, and the average number of second service frames is recorded as the service frame arrival volume of the second computing platform.

[0019] In one possible implementation, the method further includes:

[0020] Within the second time interval, service flow data is injected into the optical distribution network before transmission power attenuation, and the number of third service frames arriving at the first computing platform and the number of fourth service frames arriving at the second computing platform are counted within each fixed statistical time window; wherein, the fixed statistical time window is shorter than the second time interval.

[0021] Calculate the average number of multiple third service frames and the average number of multiple fourth service frames within the second time interval, respectively.

[0022] The average number of third service frames is recorded as the arrival baseline of the first computing platform, and the average number of fourth service frames is recorded as the arrival baseline of the second computing platform.

[0023] In one possible implementation, the method further includes:

[0024] When an optical signal loss information is received from any optical line terminal, the corresponding optical line terminal is recorded as the target optical line terminal.

[0025] When a service frame uploaded by the target optical line terminal is received again, and the number of service frames is continuous, or when the service frames received again meet the preset continuous arrival condition within the preset time window, the timestamp of the lost optical signal information is recorded as the switching start time, and the timestamp of the first service frame received again is recorded as the switching end time.

[0026] The switching time is determined based on the switching start time and switching end time;

[0027] Based on the switchover time and time threshold, fault switchover test results are generated.

[0028] In one possible implementation, the method further includes:

[0029] The timestamp of any service frame in the statistical service flow data when it is injected into the optical distribution network is recorded as the transmission start time;

[0030] The timestamp of when the service frame arrives at the first or second computing platform is recorded as the transmission end time;

[0031] The transmission delay is determined based on the transmission start time and transmission end time.

[0032] Based on transmission latency and latency threshold, latency test results are generated.

[0033] In one possible implementation, the latency threshold is determined by the average, median, or quantile of the transmission latency of all service frames within a fixed statistical time window.

[0034] Secondly, embodiments of this application provide an on-board dual computing platform domain isolation test device, comprising:

[0035] The injection module is used to control the attenuation of the transmission power of the optical distribution network based on preset fault test rules, and simultaneously inject service flow data into the optical distribution network; wherein, there are multiple optical distribution networks, which are connected to the first computing platform and the second computing platform respectively through corresponding optical line terminals, and the service flow data includes multiple service frames;

[0036] The statistics module is used to count the number of service frames arriving at the first computing platform and the second computing platform according to a fixed statistical time window.

[0037] The calculation module is used to calculate the domain isolation of the first computing platform and the domain isolation of the second computing platform based on the number of service frames arriving and the corresponding arrival baseline.

[0038] The result generation module is used to generate domain isolation test results based on the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, and the isolation degree threshold.

[0039] In one possible implementation, the injection module specifically includes:

[0040] The attenuation determination submodule is used to determine the attenuation start time, attenuation end time, and attenuation ratio for any optical distribution network based on preset fault test rules.

[0041] The instruction generation submodule is used to generate attenuation control instructions based on the attenuation start time, attenuation end time, and attenuation ratio. The attenuation control instructions are used to control the programmable optical attenuator array to attenuate the transmission power. The programmable optical attenuator array is set between the uplink and the optical line terminal of the optical distribution network.

[0042] In one possible implementation, the device further includes:

[0043] The synchronization module is used to generate time synchronization instructions based on preset fault test rules. The time synchronization instructions are used to perform timestamp synchronization on the programmable optical attenuator array and the traffic generator, and the traffic generator is used to generate service flow data.

[0044] In one possible implementation, the statistics module specifically includes:

[0045] The service frame statistics submodule is used to count the number of first service frames arriving at the first computing platform and the number of second service frames arriving at the second computing platform within each fixed statistical time window in the first time interval; wherein, the fixed statistical time window is shorter than the first time interval, and the first time interval is the time interval from the attenuation start time to the attenuation end time.

[0046] The average value calculation submodule is used to calculate the average value of the number of multiple first service frames and the average value of the number of multiple second service frames within the first time interval, respectively.

[0047] The arrival confirmation submodule is used to record the average number of first service frames as the service frame arrival amount of the first computing platform, and the average number of second service frames as the service frame arrival amount of the second computing platform.

[0048] In one possible implementation, the statistics module is further configured to inject service flow data into the optical distribution network before transmission power attenuation within the second time interval, and to count the number of third service frames arriving at the first computing platform and the number of fourth service frames arriving at the second computing platform within each fixed statistical time window; wherein the fixed statistical time window is shorter than the second time interval.

[0049] The calculation module is also used to calculate the average number of multiple third service frames and the average number of multiple fourth service frames within the second time interval, respectively.

[0050] The device also includes a baseline determination module, which is used to record the average number of third service frames as the arrival baseline of the first computing platform and the average number of fourth service frames as the arrival baseline of the second computing platform.

[0051] In one possible implementation, the device further includes:

[0052] The terminal determination module is used to record the corresponding optical line terminal as the target optical line terminal when it receives optical signal loss information uploaded by any optical line terminal.

[0053] The first-time determination module is used to record the timestamp of the lost optical signal information as the switching start time and the timestamp of the first service frame received again as the switching end time when the service frame uploaded by the target optical line terminal is received again and the number of service frames is continuous, or when the service frames received again meet the preset continuous arrival condition within the preset time window.

[0054] The first-time determination module is also used to determine the switching time based on the switching start time and switching end time;

[0055] The results generation module is also used to generate fault switching test results based on the switching time and time threshold.

[0056] In one possible implementation, the device further includes:

[0057] The second time determination module is used to count the timestamp of any service frame in the service flow data when it is injected into the optical distribution network, and record it as the transmission start time.

[0058] The second time determination module is also used to count the timestamp when the service frame arrives at the first computing platform or the second computing platform, and record it as the transmission end time;

[0059] The second time determination module is also used to determine the transmission delay based on the transmission start time and transmission end time;

[0060] The results generation module is also used to generate latency test results based on transmission latency and latency threshold.

[0061] In one possible implementation, the latency threshold is determined by the average, median, or quantile of the transmission latency of all service frames within a fixed statistical time window.

[0062] Thirdly, embodiments of this application provide an electronic device, including: a memory and a processor;

[0063] The memory stores the instructions that the computer executes;

[0064] The processor executes computer execution instructions stored in memory, causing the processor to perform the first aspect and / or various possible implementations of the first aspect as described above.

[0065] Fourthly, embodiments of this application provide a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the first aspect and / or various possible implementations of the first aspect.

[0066] Fifthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the first aspect and / or various possible implementations of the first aspect.

[0067] The vehicle-mounted dual computing platform domain isolation testing method, apparatus, and related equipment provided in this application embodiment attenuate the transmission power of multiple optical distribution networks based on preset fault test rules, and simultaneously inject service flow data containing multiple service frames into the optical distribution networks. This allows for the acquisition of service frame arrival status between the first and second computing platforms under conditions of concurrent communication and fault disturbances close to the dual computing platforms. Subsequently, the arrival volume of service frames arriving at the first and second computing platforms is counted according to a fixed statistical time window, and the domain isolation degree of the two computing platforms is calculated based on the corresponding arrival baseline, enabling a quantitative characterization of the isolation effect between platforms. Finally, domain isolation test results are generated based on the domain isolation degree of the first and second computing platforms and the isolation degree threshold, achieving the effect of physical-level domain isolation testing of the vehicle-mounted dual computing platform. This achieves accurate verification of the domain isolation performance of the vehicle-mounted dual computing platform and improves the consistency between the test results and actual vehicle operating conditions. Attached Figure Description

[0068] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0069] Figure 1 A flowchart illustrating the domain isolation testing method for the on-board dual computing platform provided in this application. Figure 1 ;

[0070] Figure 2 A flowchart illustrating the domain isolation testing method for the on-board dual computing platform provided in this application. Figure 2 ;

[0071] Figure 3 Schematic diagram of the structure of the vehicle-mounted dual computing platform domain isolation test device provided in this application Figure 1 ;

[0072] Figure 4 Schematic diagram of the structure of the vehicle-mounted dual computing platform domain isolation test device provided in this application Figure 2 ;

[0073] Figure 5 A schematic diagram of the structure of the electronic device provided in this application.

[0074] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0075] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application.

[0076] Automotive optical communication testing technology is applied to the verification of the electronic and electrical architecture of intelligent connected vehicles, especially suitable for dual-computing platform scenarios where the intelligent driving computing platform and the cockpit computing platform are interconnected through an automotive optical communication backbone network. During the mass production access, bench testing, and after-sales feedback processes of complete vehicles, it is necessary to verify the communication status of the intelligent driving computing platform and the cockpit computing platform connected to multiple optical distribution networks to confirm whether the service transmission between the platforms is stable and does not interfere with each other.

[0077] Existing testing schemes typically focus on link connectivity, optical power, bit error rate, or general network connectivity. By applying static test conditions to the optical link and observing the communication results on each platform side, the usability of the vehicular optical communication network is determined. In some scenarios, service traffic is also injected into the vehicle's online environment to simulate the concurrent transmission of intelligent driving services and cockpit services.

[0078] However, most of the above solutions can only obtain single parameters or coarse-grained network performance, making it difficult to compare the service arrival status of the intelligent driving computing platform and the cockpit computing platform in the same window and with the same caliber when multiple optical distribution networks carry services in parallel, and it is difficult to determine whether true physical-level isolation is achieved.

[0079] Especially when link power attenuation and concurrent service injection coexist, existing methods are difficult to accurately reflect whether changes in services on one platform are caused by service competition or link anomalies on the other side, and it is also difficult to form quantifiable evaluation results of inter-platform isolation.

[0080] Furthermore, it is difficult to determine whether the failover within this platform can be completed within the expected time (e.g., 100ms) without affecting the other platform when any Optical Line Terminal (OLT) module or Optical Distribution Network (ODN) uplink fails.

[0081] In view of this, how to accurately quantify and verify the physical isolation of a dual-computing platform vehicle optical communication system has become an urgent technical problem to be solved.

[0082] To address the aforementioned issues, this application provides a method for testing domain isolation of a vehicle-mounted dual computing platform. This method involves attenuating the transmission power of multiple optical distribution networks based on preset fault testing rules, while simultaneously injecting service flow data into the optical distribution networks. Then, according to a fixed statistical time window, the arrival volume of service frames reaching the first computing platform and the second computing platform are counted separately. The domain isolation degree of the two platforms is calculated based on the corresponding arrival baselines. Finally, domain isolation test results are generated based on the domain isolation degree and isolation threshold of the two platforms.

[0083] This method is applicable to vehicle-mounted optical communication architectures where multiple optical distribution networks are connected to a first computing platform and a second computing platform respectively through corresponding optical line terminals, so as to provide quantifiable verification evidence of the isolation effect between the two platforms.

[0084] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0085] Figure 1 A flowchart illustrating the domain isolation testing method for the on-board dual computing platform provided in this application. Figure 1 ,like Figure 1 As shown, the method includes:

[0086] S101. Based on preset fault test rules, control the transmission power of the optical distribution network to attenuate, and simultaneously inject service flow data into the optical distribution network; wherein, there are multiple optical distribution networks, and the multiple optical distribution networks are connected to the first computing platform and the second computing platform respectively through corresponding optical line terminals, and the service flow data includes multiple service frames.

[0087] For example, the entity performing the above method can be an in-vehicle optical communication test controller, a test server integrated into a bench system, or a dedicated test device with optical link control and traffic injection functions.

[0088] As an optical communication network object that carries service flow data transmission, the optical distribution network (ODN) is arranged according to the actual electronic and electrical architecture of the vehicle in this embodiment. Multiple ODNs are connected to the first computing platform and the second computing platform through corresponding optical line terminals (OLTs).

[0089] In this embodiment of the application, the first computing platform can be set as an intelligent driving computing platform and the second computing platform can be set as a cockpit computing platform.

[0090] The Optical Line Terminal (OLT) is used to complete photoelectric conversion, link access, and platform-side service frame forwarding. The test controller connects to relevant test equipment through a management interface, thus forming a unified and controlled test path. Transmission power is used to characterize the optical signal transmission strength in the Optical Distribution Network (ODN).

[0091] In this embodiment, the transmission power is adjusted according to the preset fault test rules. This can be achieved by setting up an optical switch matrix or a programmable optical attenuator array between the uplink fiber of the optical distribution network (ODN) and the optical line terminal (OLT), and applying programmable preset fault test rules to a single uplink to simulate faults such as transmission power attenuation or instantaneous link disconnection.

[0092] Transmission power attenuation is used to simulate gradual link degradation. Meanwhile, optical power and bit error rate will gradually deteriorate as the attenuation value changes. Link degradation alarms may appear first, and protection or optical line terminal (OLT) loss of optical signal (LOS) may occur only after the degradation has deepened. Instantaneous link disconnection is hard cut-off / hard loss of light, which usually triggers LOS directly.

[0093] Accordingly, the preset fault test rules can include one or more of the following: optical signal loss (LOS), programmable attenuation, uplink momentary disconnection, and OLT scheduler soft reset. The corresponding use case set U should contain at least the following eight categories:

[0094] U1: Baseline domain isolation (no faults, only high bandwidth bursts on the cockpit platform).

[0095] U2: Intelligent Driving ODN Uplink OLT Optical Module LOS Fault Injection.

[0096] U3: Intelligent Driving ODN uplink fiber optic injection with 6dB attenuation.

[0097] U4: Injection of LOS fault in the cockpit ODN uplink OLT optical module.

[0098] U5: 6dB attenuation injection of uplink fiber in the cockpit ODN.

[0099] U6: The P0 business of the intelligent driving platform and the P2 business of the cockpit platform occurred simultaneously.

[0100] U7: OLT scheduler reset (soft reset).

[0101] U8: Dual faults (one LOS injected on each different platform).

[0102] The preset fault test rule is used to indicate the power attenuation strategy to be executed. Based on the rule, the transmission power of one or more optical distribution networks (ODNs) changes according to a predetermined pattern. At the same time, during the period when the power attenuation is effective, service flow data is continuously injected into the optical distribution network. The service flow data consists of multiple service frames. The service frame may contain frame sequence number, timestamp, source identifier, destination identifier, service category and check field, so that arrival counting and home identification can be completed on the two computing platform sides later.

[0103] In one example, a test mapping relationship is first established between multiple optical distribution networks (ODNs) and two computing platforms, and a link identifier is assigned to the optical line terminal (OLT) corresponding to each ODN. Subsequently, the test controller (execution entity) reads the preset fault test rules and performs test scheduling in conjunction with the service flow data injection requirements.

[0104] In one possible embodiment, the transmission power attenuation can be carried out in a continuous variation manner, that is, gradually reducing the transmission power or increasing the line attenuation within a set test period to simulate gradual link degradation; or it can be carried out in a step variation manner, that is, switching to the target attenuation state (such as instantaneous disconnection) within a control cycle to simulate instantaneous fault.

[0105] Correspondingly, service flow data injection and power attenuation are executed concurrently, ensuring that fault disturbances and service transmission occur on the same timeline. Service flow data can be sent at a constant speed according to a preset bandwidth, or it can be generated cyclically according to a preset frame length set. It can also carry different service priority fields in the same test round to cover concurrent scenarios of intelligent driving services and cockpit services.

[0106] When the aforementioned multi-frame service is transmitted, it enters the corresponding optical distribution network (ODN) according to the link identifier, and is then sent to the first computing platform or the second computing platform via the optical line terminal (OLT).

[0107] In this embodiment, under the same fault rules and injection rhythm, the two computing platforms can form comparable service reception results under disturbance conditions, thereby providing a unified input for subsequent statistics. Through the above step S101, controlled transmission power attenuation is applied to multiple optical distribution networks (ODNs) and service flow data is injected synchronously, so that the test scenario simultaneously includes link disturbance factors and service concurrency factors, obtaining an observation basis consistent with the actual operating conditions of the dual computing platforms.

[0108] S102. According to the fixed statistical time window, count the number of service frames arriving at the first computing platform and the number of service frames arriving at the second computing platform respectively.

[0109] For example, a fixed statistical time window is used to segment and count the arrival volume of service frames to ensure that the first computing platform and the second computing platform use the same statistical caliber. Both the first computing platform and the second computing platform are the test objects, respectively receiving service frames from the corresponding optical distribution network (ODN), and reporting frame arrival information through their respective platform-side receive buffers, driver interfaces, or test acquisition agents.

[0110] The service frame arrival count represents the number of service frames arriving at a certain computing platform within a fixed statistical time window, or a statistical result determined based on that number. When each service frame arrives at the platform, its relevant information can be extracted by the acquisition agent and written to the local counting buffer. When a service frame falls within the current fixed statistical time window, the counter is incremented by one, thus forming the first service frame count corresponding to the first computing platform and the second service frame count corresponding to the second computing platform.

[0111] In the embodiments of this application, the statistics of service frame arrivals can also refer to the arrivals of the target service flow summarized by a fixed statistical window time W under a unified nanosecond time base. Preferably, it is the number of service frames that successfully arrive at the computing platform system and chip (SoC) side within a unit window, or it can be equivalently expressed as the number of effective payload bytes or throughput within a unit window.

[0112] In one example, the fixed statistical time window can be set to other equal duration windows such as 10 milliseconds, 20 milliseconds, 50 milliseconds, or 100 milliseconds, and can be continuously slid or sequentially segmented throughout the entire test period. If the sliding method is used, the window is updated and the statistics are recalculated after each preset step period; if the segmented method is used, each window is closed independently and the count result is output once.

[0113] By using equal-length discrete windows for statistics, at the end of each window, the first computing platform reports the number of service frames it received within that window, and the second computing platform synchronously reports the number of service frames it received within the same window. The test controller (execution subject) stores the two sets of counting results under the same window number in pairs.

[0114] After statistical processing of the arriving service frames, the arrival counts for the first and second computing platforms are obtained respectively. If no service frames are received within a certain window, the arrival count for that window is recorded as zero. The arrival counts for the first and second computing platforms are output independently and stored in association with their respective platform identifiers, link identifiers, and window numbers.

[0115] Based on the above process, the service reception status of the two computing platforms within the same statistical period is converted into directly comparable quantitative indicators. The arrival status of service frames on the two platforms is synchronously measured through a unified time window, establishing the same window and same caliber data foundation required for subsequent domain isolation degree calculation.

[0116] S103. Based on the number of service frames arriving and the corresponding arrival baseline, calculate the domain isolation of the first computing platform and the domain isolation of the second computing platform respectively.

[0117] For example, the arrival baseline is used to represent the statistical baseline for service frame arrivals on a computing platform under baseline conditions. This arrival baseline is a predetermined baseline arrival quantity. The service frame arrival quantity is derived from the statistical results of the number of first service frames and the number of second service frames during fault testing, and the domain isolation degree is calculated by pairing the two with the corresponding arrival baseline for each platform.

[0118] Domain isolation measures the service arrival deviation of one computing platform relative to the baseline within the same time interval, under conditions of transmission power attenuation and service concurrency, while the transmission power of the optical distribution network of the second computing platform (cockpit computing platform) is attenuated. The corresponding calculation process is as follows:

[0119] 1) Within the time window t0 to t1, the average number of service frames arriving on the first computing platform (intelligent driving computing platform) is statistically analyzed to obtain the arrival baseline, denoted as E_base.

[0120] 2) Within the time window from t1 to t2, the transmission power of the optical distribution network of the second computing platform is attenuated, and the number of service frames arriving on the first computing platform within this time window is counted and denoted as E_stress.

[0121] 3) Calculate the deviation of the service frame arrival volume E_stress of the first computing platform relative to the arrival baseline E_base. First, calculate the absolute value of the difference between the service frame arrival volume E_stress and the arrival baseline E_base. Then, divide the absolute value of the difference by the arrival baseline E_base to obtain the deviation. Next, calculate the difference between 1 and the deviation, and convert this difference into a percentage. The converted percentage is the domain isolation degree of the first computing platform under the conditions of transmission power attenuation and service concurrency of the second computing platform.

[0122] In one example, domain isolation can also be calculated as a ratio. For example, the domain isolation of the first computing platform can be expressed as D1 = A1 / B1, and the domain isolation of the second computing platform can be expressed as D2 = A2 / B2, where A1 represents the number of service frames arriving on the first computing platform within the fault test window, B1 represents the arrival baseline corresponding to the first computing platform, A2 represents the number of service frames arriving on the second computing platform within the fault test window, and B2 represents the arrival baseline corresponding to the second computing platform.

[0123] If isolation needs to be expressed as a relative attenuation, it can also be converted to the form of 1 minus the above ratio based on the same data. The test controller should keep the formula consistent in this round of testing.

[0124] If the business flow data contains different priorities or different business categories, the arrival volume and arrival baseline can be counted separately according to the business category, and then the domain isolation degree can be calculated for each category. When finally outputting the platform-level result, the minimum value or weighted result is taken according to the preset rules.

[0125] In this embodiment, the domain isolation degree of the first computing platform and the domain isolation degree of the second computing platform are calculated independently, thereby preserving the difference in response between the two platforms under the same fault scenario.

[0126] Based on the above analysis, step S103 quantifies and compares the number of service frames arriving under fault conditions with the arrival baseline under the reference state, transforming the changes in service reception on the platform side into a calculable isolation index, thereby distinguishing the service maintenance status of the two computing platforms after the link is disturbed.

[0127] S104. Based on the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, and the isolation degree threshold, generate the domain isolation test results.

[0128] For example, the isolation threshold is used to determine whether the domain isolation test meets the requirements. It can be pre-configured by the test controller when the test task is created, or it can be imported from the vehicle platform communication specification, bench acceptance specification or regression test configuration file.

[0129] The domain isolation test result is used to indicate the final judgment of this test, including at least pass or fail information, and may also carry the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, the corresponding threshold, and the test round identifier.

[0130] After obtaining the domain isolation degree D1 of the first computing platform and the domain isolation degree D2 of the second computing platform output in step S103, the test controller compares the domain isolation degree of the two platforms with the isolation threshold T respectively. If a single threshold scheme is used, a pass result is generated when both D1 and D2 meet the threshold conditions; otherwise, a fail result is generated. If a dual threshold scheme is used, the thresholds of the first and second computing platforms are compared separately, and then the total result is output according to the test rules.

[0131] This embodiment uses a unified threshold method, such as setting it to 5%. The test controller completes the comparison of the results of the two platforms and writes them into the test report cache within the same judgment period.

[0132] It should be noted that different isolation calculation methods result in different isolation threshold values. The isolation threshold value can be set manually or converted according to the different isolation calculation methods mentioned above based on a unified standard.

[0133] In one example, the test controller first reads the isolation threshold T according to the test configuration, then receives the domain isolation D1 of the first computing platform and the domain isolation D2 of the second computing platform, and then executes the decision logic.

[0134] When domain isolation is expressed as the ratio of arrivals to baseline arrivals to represent service retention capability, the threshold T can represent the minimum allowable retention ratio. In this case, when D1≥T and D2≥T, the domain isolation test result is recorded as passed; when D1<T or D2<T, the domain isolation test result is recorded as failed.

[0135] After the above determination process is completed, the test controller can generate structured result data including test start time, end time, fault test rule number, optical distribution network (ODN) number of participating test participants, service frame arrival volume of each platform, arrival baseline of each platform, domain isolation of each platform, isolation threshold, and final determination conclusion, and output the result to the host computer interface, test log file, or vehicle test management system.

[0136] In one example, if a platform fails to meet the threshold condition in multiple consecutive statistical windows, the test controller can directly end the test early and output a failure conclusion; in addition, the test controller can complete sampling for the entire time period before making a unified judgment to retain complete trend data.

[0137] This application provides a method for testing domain isolation of a vehicle-mounted dual computing platform, comprising: controlling the attenuation of the transmission power of an optical distribution network (ODN) based on preset fault test rules, and simultaneously injecting service flow data into the ODN; wherein there are multiple ODNs, which are connected to a first computing platform and a second computing platform respectively through corresponding optical line terminals (OLTs), and the service flow data includes multiple service frames; according to a fixed statistical time window, the arrival volume of service frames arriving at the first computing platform and the second computing platform are counted respectively; based on the arrival volume of service frames and the corresponding arrival baseline, the domain isolation degree of the first computing platform and the domain isolation degree of the second computing platform are calculated respectively; based on the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, and the isolation degree threshold, a domain isolation test result is generated.

[0138] By using the method described in the embodiments of this application, controlled transmission power attenuation is applied to multiple optical distribution networks (ODNs) and multiple service frames are injected synchronously. The arrival volume of service frames of the two computing platforms is collected within a unified statistical time window. Then, the isolation degree of the respective arrival baseline computing domain is combined and a threshold judgment is performed, so that the isolation performance of the dual computing platform vehicle optical communication system can be quantitatively verified with a unified standard.

[0139] For scenarios where link power attenuation and concurrent services coexist, the changes in service arrival on the two platforms can be mapped to independent domain isolation indicators, and the final test results can be output accordingly. This achieves the effect of physical-level domain isolation testing of the vehicle-mounted dual computing platform, and realizes accurate verification of the domain isolation performance of the vehicle-mounted dual computing platform.

[0140] In one possible embodiment, the transmission power of the optical distribution network (ODN) is attenuated based on a preset fault test rule, including:

[0141] Based on preset fault test rules, determine the attenuation start time, attenuation end time, and attenuation ratio for any optical distribution network (ODN).

[0142] Based on the attenuation start time, attenuation end time, and attenuation ratio, attenuation control instructions are generated. These instructions are used to control the programmable optical attenuator array to attenuate the transmission power. The programmable optical attenuator array is located between the uplink of the optical distribution network (ODN) and the optical line terminal (OLT).

[0143] For example, the attenuation start time is used to define the start time of fault injection, the attenuation end time is used to define the end time of fault injection, and the attenuation ratio is used to define the power attenuation magnitude within the time period.

[0144] The programmable optical attenuator array consists of multiple independently addressable attenuation channels. Each attenuation channel can be implemented using a variable attenuator or an electronically controlled liquid crystal attenuation module, and can quantitatively adjust the input optical power of the corresponding optical path after receiving an attenuation control command.

[0145] In practical applications, other models of this component can also be selected, and this application embodiment does not limit this.

[0146] In one example, preset fault test rules can be pre-stored in the rule base of the test controller. The rule base records the fault scenario parameters, trigger time, and attenuation amplitude corresponding to different optical distribution networks (ODNs). After receiving the configuration to be tested, the test controller reads the corresponding rules based on the ODN identifier, converts the time and amplitude parameters into control messages that can be recognized by the programmable optical attenuator array, and then sends them to the array controller via Ethernet, serial bus, or optical module management interface.

[0147] The array controller then initiates timed scheduling based on the start and end times in the message, and drives the target attenuation channel into the set attenuation state when the attenuation start time arrives, and restores it to the baseline attenuation state when the attenuation end time arrives, thereby forming a controlled power reduction of the uplink.

[0148] In this embodiment, the test controller first establishes a unique attenuation level for any optical distribution network (ODN), and then generates a corresponding attenuation control command based on the level, so that the transmission power of the optical signal in the uplink is attenuated at a set ratio within a set window. At the same time, the service flow data in the link is transmitted to the corresponding computing platform via the optical line terminal (OLT).

[0149] In this way, fault injection during the domain isolation test process has clear time and amplitude boundaries, which can limit link disturbances in different optical distribution networks (ODNs) to a predetermined range.

[0150] With the above approach, the transmission power attenuation is driven by rules rather than triggered randomly. The attenuation timing and amplitude can be repeatedly executed, enabling multiple optical distribution networks (ODNs) to have consistent fault injection conditions under similar test scenarios. This provides a stable and comparable link status for subsequent service frame arrival statistics and domain isolation calculations.

[0151] In one possible embodiment, the method further includes:

[0152] Based on preset fault test rules, a time synchronization instruction is generated. The time synchronization instruction is used to timestamp the programmable optical attenuator array and the traffic generator. The traffic generator is used to generate service flow data.

[0153] For example, the time synchronization command is a control command used to uniformly calibrate the fault injection time and the service flow data generation time. It is generated according to the test time, duration and triggering order pre-configured in the preset fault test rules, and is sent to the programmable optical attenuator array and the traffic generator respectively, so that the two perform corresponding actions under the same time reference.

[0154] The programmable optical attenuator array is used to start transmission power attenuation at a preset synchronization time after receiving the time synchronization command; the flow generator is used to start generating service flow data at the same synchronization time, and inject the service flow data into the optical distribution network (ODN) under test after being timestamped.

[0155] The time synchronization command can be generated by the test controller based on a unified clock source. In this embodiment, a high-precision timestamp acquisition card can be set in the test controller, and a 1GHz counter (1ns precision) can be used uniformly.

[0156] The flow generator can be a configurable message generation device, which has preset frame length, frame interval and transmission rate parameters written inside, so as to output multiple service frames at the synchronization time and maintain a corresponding relationship with the attenuation action.

[0157] In one example, the test controller first determines the common time base of the attenuation action and the service flow data injection action based on the preset fault test rules, then generates a time synchronization instruction containing the synchronization start time and the duration of the hold, and sends the instruction to the programmable optical attenuator array and the traffic generator respectively.

[0158] Once the timestamps of both are aligned, attenuation control and service flow data generation are executed collaboratively within the same test window. This ensures that subsequent statistics on the arrival of service frames on the first and second computing platforms accurately correspond to the time intervals in which fault injection occurs. This allows the timing of attenuation control to align with the timing of service flow data injection, thereby improving the temporal and statistical consistency of the dual-computing-platform domain isolation test results.

[0159] In one possible embodiment, the arrival volume of service frames reaching the first computing platform and the arrival volume of service frames reaching the second computing platform are counted separately according to a fixed statistical time window, including:

[0160] Within the first time interval, the number of first service frames arriving at the first computing platform and the number of second service frames arriving at the second computing platform are counted within each fixed statistical time window; wherein, the fixed statistical time window is shorter than the first time interval, and the first time interval is the time interval from the attenuation start time to the attenuation end time.

[0161] Calculate the average number of first service frames corresponding to multiple fixed statistical time windows within the first time interval and the average number of second service frames corresponding to multiple fixed statistical time windows, respectively.

[0162] The average number of first service frames is recorded as the service frame arrival volume of the first computing platform, and the average number of second service frames is recorded as the service frame arrival volume of the second computing platform.

[0163] For example, the first time interval refers to the statistical interval during which the programmable optical attenuator array continuously applies power attenuation between the attenuation start time and the attenuation end time. The fixed statistical time window is the smallest time unit used for counting within this interval. The two work together to form multiple consecutive or equal-length statistical samples.

[0164] The first service frame count represents the frame count result arriving at the first computing platform within each fixed statistical time window, and the second service frame count represents the frame count result arriving at the second computing platform within the same fixed statistical time window. The statistics can be completed by the receiving side port counter, the protocol stack mirror counting module, or the message acquisition module.

[0165] In one example, statistics are triggered at the attenuation start time. Frame counts are sampled for each fixed statistical time window within the first time interval. The number of first and second service frames obtained from multiple windows are summed and divided by the number of windows to obtain the corresponding average value. This average value is used as the service frame arrival count for the first and second computing platforms within the attenuation interval as input to subsequent processing, thus ensuring that subsequent processing is based on a unified statistical standard.

[0166] By averaging the results of multiple windows within the same first time interval, the bias caused by service jitter, instantaneous congestion, or short-term frame drops within a single window can be reduced, making the representation of service frame arrivals more stable. Furthermore, since the service frame arrivals are obtained by statistically analyzing and averaging across windows, changes in frame arrivals on either platform during the attenuation process can be more smoothly reflected in the calculation results, thus providing a consistent and quantifiable input for dual-computing platform domain isolation testing.

[0167] In one possible embodiment, the method further includes:

[0168] Within the second time interval, service flow data is injected into the optical distribution network (ODN) before transmission power attenuation, and the number of third service frames arriving at the first computing platform and the number of fourth service frames arriving at the second computing platform are counted within each fixed statistical time window; wherein, the fixed statistical time window is shorter than the second time interval.

[0169] Calculate the average number of multiple third service frames and the average number of multiple fourth service frames within the second time interval, respectively.

[0170] The average number of third service frames is recorded as the arrival baseline of the first computing platform, and the average number of fourth service frames is recorded as the arrival baseline of the second computing platform.

[0171] For example, the second time interval is used to characterize the baseline statistical period before the transmission power attenuation is applied, during which service flow data is injected into the optical distribution network (ODN) in an unattenuated state to form a service arrival reference for the two computing platforms under normal link conditions.

[0172] A fixed statistical time window is used to count consecutively arriving service frames at equal intervals. The window length is shorter than the second time interval, so that multiple statistical samples that can be used for averaging can be formed within this interval. The number of third and fourth service frames corresponds to the frame count results arriving at the first and second computing platforms, respectively. Their statistical caliber is consistent with that of the subsequent attenuation stage, thereby ensuring that the baseline data is comparable to the number of service frames arriving.

[0173] In one example, a traffic generator can generate service flow data containing multiple service frames according to a preset frame interval, and send the service flow data to the optical distribution network (ODN) before the transmission power attenuation through the corresponding optical line terminal (OLT).

[0174] The first and second computing platforms respectively receive service frames from each optical distribution network (ODN) and monitor the links. At the end of each fixed statistical time window, they read the accumulated value in the frame count register to form the third and fourth service frame counts.

[0175] Subsequently, the arithmetic mean of the window counts within the second time interval is calculated to obtain the arrival baseline of the first computing platform and the arrival baseline of the second computing platform, which serve as reference values ​​in the subsequent domain isolation calculation.

[0176] By employing the above method, the arrival baseline is established under link conditions without power attenuation, reflecting the stable arrival levels of the dual computing platforms under normal service flow data injection conditions. Furthermore, since the baseline is obtained by averaging the count results within multiple fixed statistical time windows, random fluctuations within a single window can be smoothed, making subsequent comparisons with the arrival volume of service frames during the attenuation phase more consistent. Based on this baseline, further quantitative analysis of the arrival changes of the two platforms under power attenuation conditions can be performed, and test results corresponding to the domain isolation state can be output.

[0177] Figure 2 A flowchart illustrating the domain isolation testing method for the on-board dual computing platform provided in this application. Figure 2 ,like Figure 2 As shown, in this embodiment... Figure 1Based on the embodiments, the domain isolation test method for vehicle-mounted dual computing platforms is further described, and the method also includes:

[0178] S201. When optical signal loss information is received from any optical line terminal (OLT), the corresponding OLT is recorded as the target optical line terminal (OLT).

[0179] S202. When a service frame uploaded by the target optical line terminal (OLT) is received again and the number of service frames is continuous, or when the service frames received again meet the preset continuous arrival condition within the preset time window, the timestamp of the lost optical signal information is recorded as the switching start time and the timestamp of the first service frame received again is recorded as the switching end time.

[0180] S203. Determine the switching time based on the switching start time and switching end time;

[0181] S204. Based on the switching time and time threshold, generate the fault switching test results.

[0182] For example, optical signal loss information is used to characterize optical link interruption alarms detected by the optical line terminal (OLT), and the target OLT is used to identify the specific terminal where the alarm occurred. The service frame is the data transmission unit re-received by the target OLT after the fault. A preset time window is used to limit the observation interval corresponding to the continuous arrival determination. The switchover start time and switchover end time correspond to the fault alarm generation time and the arrival time of the first service recovery frame, respectively. A time threshold is used to limit whether the fault switchover performance meets the requirements.

[0183] Switchover time is used to characterize the time it takes for a service to recover from an interruption to normal reception. It is the time from when the target optical line terminal (OLT) reports the loss of optical signal (LOS) to the first moment when the corresponding service stream data arrives continuously again on the computing platform (SOC).

[0184] It should be noted that for scenarios simulating instantaneous link disconnection faults, the alarm time of the first optical signal loss (LOS) can be directly selected; while for scenarios simulating transmission power attenuation faults, the alarm time of the first link degradation that reaches the protection threshold should be selected. If the attenuation continues to deepen and eventually triggers LOS, this LOS can also be used as the starting point of the hard fault.

[0185] In one example, an optical line terminal (OLT) can generate optical signal loss information (LOS) based on the physical layer reception status, frame synchronization status, or link alarm status, and report this information along with a timestamp to the test controller. Upon receiving this information, the test controller identifies the corresponding terminal as the target OLT and continuously tracks the service frame reception status of the target OLT.

[0186] When the target optical line terminal (OLT) receives a service frame again and the frame sequence number is consecutive, or the consecutive arrival condition is met within the preset time window, the test controller records the alarm reporting time as the switching start time, records the arrival time of the first service frame as the switching end time, and determines the switching time based on the time difference between the two.

[0187] In this embodiment, the continuous arrival condition can be achieved by the consecutive frame sequence number, the consecutive frame count, or the frame arrival interval within a unit time meeting a preset range. The timestamp can be generated synchronously by a unified clock source to ensure that the calculation method for the switchover time between different terminals is consistent.

[0188] When the switching time is less than or equal to the time threshold, the test controller generates a fault switching test pass result; when the switching time is greater than the time threshold, a fault switching test fail result is generated. This result can be written to the test log and output to the host computer interface, serving as the basis for determining the fault recovery capability of the target optical line terminal (OLT).

[0189] By using the above method to locate the faulty object with optical signal loss information and to use the continuous arrival of service frames as the recovery criterion, the recovery time after the link interruption can be quantitatively evaluated, thus forming test conclusions that can be directly used for the performance verification of vehicle-mounted optical communication switching.

[0190] In one possible embodiment, the method further includes: counting the timestamp of any service frame in the service flow data when it is injected into the optical distribution network (ODN) and recording it as the transmission start time; counting the timestamp of the service frame when it arrives at the first computing platform or the second computing platform and recording it as the transmission end time; determining the transmission delay based on the transmission start time and the transmission end time; and generating a delay test result based on the transmission delay and a delay threshold.

[0191] For example, the transmission start time is used to record the moment when any service frame in the service flow data is injected into the optical distribution network (ODN), specifically the timestamp obtained by a unified time source when the traffic generator sends the service frame to the corresponding ODN.

[0192] The transmission end time is used to record the moment when the service frame arrives at the first or second computing platform. It can be a timestamp recorded by the receiving network card or protocol stack after the service frame has been fully received.

[0193] Transmission latency characterizes the end-to-end time taken for a single frame of service to travel from the injected optical distribution network (ODN) to the target computing platform. It can be determined by the difference between the transmission end time and the transmission start time. The latency threshold is used to determine whether the current transmission latency meets the test requirements. Its value can be pre-configured based on historical latency within a fixed statistical time window, preset service response requirements, or inter-platform communication performance indicators.

[0194] The latency threshold can also be taken as a certain percentage (such as 99.9%) of all valid samples in the test window. Here, a valid sample is the time difference between the sending timestamp of the same service frame at the traffic generator injection end and the receiving timestamp at the computing platform SOC side.

[0195] The latency test result is used to output a judgment on the transmission latency of the service frame. When the transmission latency is not greater than the latency threshold, the latency test result can be recorded as passed; otherwise, it is recorded as failed.

[0196] In one example, service flow data is injected into the optical distribution network (ODN) by a traffic generator according to a preset frame format. The traffic generator, programmable optical attenuator array, and two computing platforms are all connected to the same time synchronization source to ensure that the injection time and reception time of the same service frame correspond and match.

[0197] When calculating the start time of transmission, the hardware timestamp can be read at the transmission port of the optical distribution network (ODN) when the service frame enters, and the timestamp can be associated with and stored with the frame identifier of the service frame. When calculating the end time of transmission, the corresponding reception timestamp can be extracted based on the frame identifier after the service frame is received by the first or second computing platform, thereby forming a set of pairable start and end time data.

[0198] The transmission delay calculated based on this pairing time data can reflect the delay components jointly introduced by the optical distribution network (ODN) link transmission, optical line terminal (OLT) forwarding, and platform-side receiving and processing. The calculation results are compared with a preset delay threshold and the delay test results are output.

[0199] By establishing an end-to-end timestamp correspondence for a single service frame in the above manner, the optical communication link latency of the dual computing platform can be accurately quantified. This enables the output of clear latency judgment results under conditions of link power attenuation and concurrent service transmission, thereby providing a unified latency evaluation basis for the verification of dual-platform communication performance.

[0200] In one possible embodiment, the latency threshold is determined by the average, median, or quantile value of the transmission latency of all service frames within a fixed statistical time window.

[0201] For example, the transmission delay of each service frame is continuously collected within a fixed statistical time window, and the collection results are written into a delay sample set. When the average value is used to determine the delay threshold, the delay sample set is summed and then divided by the number of samples to obtain the threshold. When the median is used to determine the delay threshold, the delay sample set is sorted according to the delay magnitude and the sample value in the middle of the sorted position is taken as the threshold. When the quantile value is used to determine the delay threshold, the sample value at the corresponding quantile position of the sorted delay sample set is determined according to a preset ratio and taken as the threshold.

[0202] This latency threshold is then compared with the latency to be tested, and the latency test result is output. Since the threshold is directly derived from the actual latency distribution within the same fixed statistical time window, it can remain consistent with the current test data.

[0203] By first collecting service frame transmission latency data within a fixed statistical time window, and then generating a latency threshold based on the average, median, or a preset percentage of quantiles, this threshold is used as the latency judgment benchmark in subsequent tests. With this threshold determination method, the threshold does not depend on an external fixed constant but is updated synchronously with the latency distribution within the current test window. This allows the latency test results to more accurately correspond to the actual transmission status of the vehicular optical communication link under current fault injection and service concurrency conditions.

[0204] The domain isolation testing method for in-vehicle dual computing platforms proposed in this application is applicable to scenarios where domain isolation testing is performed on an in-vehicle dual computing platform test environment composed of multiple optical distribution networks (ODNs) during the mass production access testing phase of intelligent connected vehicles.

[0205] Taking an L2+ level intelligent passenger vehicle as the test object, each optical distribution network (ODN) is connected to the first computing platform and the second computing platform through the corresponding optical line terminal (OLT). The first computing platform can correspond to the intelligent driving computing platform, and the second computing platform can correspond to the cockpit computing platform.

[0206] The system is configured with four service levels: P0, P1, P2, and P3. Background load is categorized into three levels: low load (25% B_avail), medium load (60% B_avail), and high load (90% B_avail).

[0207] ODN1, ODN2, and ODN3 are connected to the two computing platforms through their respective optical line terminals (OLTs). Programmable optical attenuator arrays are set up between the uplink of each optical distribution network (ODN) and the corresponding OLT, and traffic generators are configured to generate service flow data.

[0208] At the start of the test, fault injection test cases for the uplink of the intelligent driving platform ODN2 are loaded according to the preset fault test rules, and time synchronization instructions are generated to perform timestamp synchronization on the programmable optical attenuator array and the flow generator. Time synchronization can be performed using the Precision Time Protocol (PTP), and the time base residual is controlled within 50 ns.

[0209] Meanwhile, for the optical distribution network (ODN) specified in the preset fault test rules, the corresponding attenuation start time, attenuation end time, and attenuation ratio are determined. For example, ODN2 is determined as the target optical distribution network (ODN), the start time is set to t1=5 s, the end time is set to t2=5.5 s, and an attenuation control command is generated based on the instantaneous disconnection fault requirement lasting 500 ms, so that the programmable optical attenuator array can perform attenuation control on the transmission power of the optical distribution network (ODN) within the specified time interval.

[0210] During the time interval before transmission power attenuation, i.e. before t1, the traffic generator injects service flow data containing multiple service frames into the optical distribution network (ODN). This time interval can be set to t0-t1, i.e., 0 s to 5 s.

[0211] Service flow data can be injected in a medium-load background flow mode, with a background load of 60% of available bandwidth. Among them, the intelligent driving platform service includes P0 service of 100 Mbps and P1 service of 6 Gbps, and the cockpit platform service includes P2 service of 12 Gbps and P3 service of 200 Mbps.

[0212] The executing entity counts the number of third service frames arriving at the first computing platform and the number of fourth service frames arriving at the second computing platform according to a fixed statistical time window. The fixed statistical time window is shorter than the time interval t0-t1 and can be used in conjunction with a high-precision timestamp acquisition mechanism to obtain the arrival event sequence within each window.

[0213] The average number of multiple third service frames obtained within each fixed statistical time window in the time interval t0-t1 is calculated, and this average number is recorded as the arrival baseline of the first computing platform; the average number of multiple fourth service frames is calculated, and this average number is recorded as the arrival baseline of the second computing platform.

[0214] After entering the time interval t1-t2 corresponding to the attenuation start time to the attenuation end time, while the programmable optical attenuator array reduces the transmission power of the target optical distribution network ODN according to the attenuation control command, the flow generator continues to inject service flow data into multiple optical distribution networks ODN.

[0215] Taking the ODN2 uplink as an example, during the period from 5 s to 5.5 s, the corresponding power attenuation control is applied to it for instantaneous disconnection, while the above P0 to P3 services are continuously injected.

[0216] Within the time interval t1-t2, the executing entity counts the number of first service frames arriving at the first computing platform and the number of second service frames arriving at the second computing platform in each fixed statistical time window. The entity then calculates the average of the number of first service frames and the number of second service frames within the time interval t1-t2. The former is recorded as the number of service frames arriving at the first computing platform, and the latter is recorded as the number of service frames arriving at the second computing platform.

[0217] Subsequently, the domain isolation degree of the first computing platform is calculated based on the number of service frames arriving on the first computing platform and the arrival baseline of the first computing platform. The domain isolation degree of the second computing platform is calculated based on the number of service frames arriving on the second computing platform and the arrival baseline of the second computing platform. Then, the domain isolation test results are generated by combining the isolation degree threshold.

[0218] In the test of the P0 / P1 service of the intelligent driving platform being interfered with by the high bandwidth burst service of the cockpit platform, the isolation threshold can be set to 95%. For example, based on the statistical results of the time interval t1-t2 and the time interval t0-t1, when the arrival deviation of the intelligent driving platform service is 1.2%, the corresponding domain isolation is 98.8%.

[0219] During the test, the executing entity can also monitor the status information reported by each optical line terminal (OLT). When it receives optical signal loss information (i.e., optical signal loss of os) uploaded by any OLT, it identifies that OLT as the target OLT.

[0220] Taking the optical line terminal (OLT) corresponding to the aforementioned ODN2 as an example, when the intelligent driving computing platform receives an optical signal loss (LOS) alarm at t1+8 ms, it determines the optical line terminal (OLT) corresponding to the alarm as the target optical line terminal (OLT).

[0221] When a service frame uploaded by the target optical line terminal (OLT) is received again, and the number of service frames is continuous, or when the service frames received again within the preset time window meet the preset continuous arrival condition, the timestamp of the lost optical signal information is recorded as the switching start time, and the timestamp of the first service frame received again is recorded as the switching end time.

[0222] If the intelligent driving computing platform resumes continuous service arrival within t1+72 ms and meets the condition of N consecutive frames without missing frames or meeting the preset continuous arrival condition, then the switchover time determined based on the switchover start time and switchover end time is 64 ms. Then, the fault switchover test result is generated based on the switchover time and the time threshold, where the time threshold can be set to 100 ms.

[0223] During service flow transmission, latency is also statistically analyzed. For any service frame in the service flow data, a timestamp is recorded when it is injected into the optical distribution network (ODN) and used as the transmission start time. A timestamp is also recorded when the service frame arrives at the first computing platform or the second computing platform and used as the transmission end time. The transmission latency of the service frame is determined based on the transmission start time and transmission end time. The latency threshold can be determined by the average, median, or quantile value of the transmission latency of all service frames within a fixed statistical time window.

[0224] In the vehicle-mounted graded service test, the end-to-end latency of services from P0 to P3 can be statistically analyzed separately, and the 99.9th percentile value can be used as the basis for determining the latency threshold. The determined transmission latency is then compared with the latency threshold to generate the latency test results.

[0225] For example, when the 99.9th percentile latency for P0 service is 1.8 ms, this value is compared with the latency budget for the corresponding service level, and recorded in the test report along with the domain isolation test results and fault failover test results. The report can be associated with VIN, software version, device batch, and test case configuration corresponding to the fault test rule.

[0226] Figure 3 This is a schematic diagram of the structure of the vehicle-mounted dual computing platform domain isolation test device provided in this application, as shown below. Figure 3 As shown, the vehicle-mounted dual computing platform domain isolation test device 30 provided in this embodiment includes:

[0227] The injection module 301 is used to control the attenuation of the transmission power of the optical distribution network (ODN) based on preset fault test rules, and simultaneously inject service flow data into the optical distribution network (ODN); wherein, there are multiple optical distribution network (ODNs), and the multiple optical distribution network (ODNs) are connected to the first computing platform and the second computing platform respectively through corresponding optical line terminals (OLTs), and the service flow data includes multiple service frames.

[0228] The statistics module 302 is used to count the number of service frames arriving at the first computing platform and the second computing platform according to a fixed statistical time window.

[0229] The calculation module 303 is used to calculate the domain isolation of the first calculation platform and the domain isolation of the second calculation platform based on the number of service frames arriving and the corresponding arrival baseline.

[0230] The result generation module 304 is used to generate domain isolation test results based on the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, and the isolation degree threshold.

[0231] The vehicle-mounted dual computing platform domain isolation test device 30 provided in this embodiment synchronously performs power attenuation and service flow injection on multiple optical distribution networks (ODNs) through the injection module 301. This can simultaneously construct link anomaly and concurrent bearing scenarios, thus more closely resembling the actual operating conditions of dual computing platforms. The statistics module 302 uses a fixed statistical time window to separately count the arrival volume of service frames on both platforms, ensuring that the data on both sides have a unified time caliber and a basis for comparison, thereby distinguishing whether service changes are due to link attenuation or mutual influence between platforms. The calculation module 303 calculates the domain isolation degree of the two platforms based on their respective arrival baselines, thus transforming the originally dispersed service arrival performance into a quantifiable isolation indicator. The result generation module 304 then combines the isolation degree threshold to output the domain isolation test results, thereby accurately verifying the isolation effect between the first and second computing platforms and improving the accuracy of the vehicle optical communication test in assessing system reliability and communication stability.

[0232] The vehicle-mounted dual computing platform domain isolation test device 30 provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0233] Figure 4 Schematic diagram of the structure of the vehicle-mounted dual computing platform domain isolation test device provided in this application Figure 2 ,like Figure 4 As shown, in this embodiment... Figure 3 Based on the embodiments, the vehicle-mounted dual computing platform domain isolation test device is described in detail. The device 40 includes:

[0234] The injection module 401 is used to control the attenuation of the transmission power of the optical distribution network (ODN) based on preset fault test rules, and simultaneously inject service flow data into the optical distribution network (ODN); wherein, there are multiple optical distribution network (ODNs), and the multiple optical distribution network (ODNs) are connected to the first computing platform and the second computing platform respectively through corresponding optical line terminals (OLTs), and the service flow data includes multiple service frames.

[0235] The statistics module 402 is used to count the number of service frames arriving at the first computing platform and the second computing platform according to a fixed statistical time window.

[0236] The calculation module 403 is used to calculate the domain isolation of the first calculation platform and the domain isolation of the second calculation platform based on the number of service frames arriving and the corresponding arrival baseline.

[0237] The result generation module 404 is used to generate domain isolation test results based on the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, and the isolation degree threshold.

[0238] In one possible implementation, the injection module 401 specifically includes:

[0239] The attenuation determination submodule 4011 is used to determine the attenuation start time, attenuation end time, and attenuation ratio for any optical distribution network ODN based on preset fault test rules.

[0240] The instruction generation submodule 4012 is used to generate attenuation control instructions based on the attenuation start time, attenuation end time, and attenuation ratio. The attenuation control instructions are used to control the programmable optical attenuator array to attenuate the transmission power. The programmable optical attenuator array is set between the uplink of the optical distribution network (ODN) and the optical line terminal (OLT).

[0241] In one possible implementation, the device 40 further includes:

[0242] The synchronization module 405 is used to generate time synchronization instructions based on preset fault test rules. The time synchronization instructions are used to perform timestamp synchronization on the programmable optical attenuator array and the traffic generator, and the traffic generator is used to generate service flow data.

[0243] In one possible implementation, the statistics module 402 specifically includes:

[0244] The service frame statistics submodule 4021 is used to count the number of first service frames arriving at the first computing platform and the number of second service frames arriving at the second computing platform within each fixed statistical time window in the first time interval; wherein, the fixed statistical time window is shorter than the first time interval, and the first time interval is the time interval from the attenuation start time to the attenuation end time.

[0245] The average value calculation submodule 4022 is used to calculate the average value of the number of multiple first service frames and the average value of the number of multiple second service frames within the first time interval, respectively.

[0246] The arrival confirmation submodule 4023 is used to record the average number of the first service frames as the service frame arrival amount of the first computing platform, and the average number of the second service frames as the service frame arrival amount of the second computing platform.

[0247] In one possible implementation, the statistics module 402 is further configured to inject service flow data into the optical distribution network (ODN) before transmission power attenuation within the second time interval, and to count the number of third service frames arriving at the first computing platform and the number of fourth service frames arriving at the second computing platform within each fixed statistical time window; wherein the fixed statistical time window is shorter than the second time interval.

[0248] The calculation module 403 is also used to calculate the average number of multiple third service frames and the average number of multiple fourth service frames within the second time interval, respectively.

[0249] The device 40 further includes a baseline determination module 406, which is used to record the average number of third service frames as the arrival baseline of the first computing platform and the average number of fourth service frames as the arrival baseline of the second computing platform.

[0250] In one possible implementation, the device 40 further includes:

[0251] The terminal determination module 407 is used to record the corresponding optical line terminal OLT as the target optical line terminal OLT when it receives optical signal loss information uploaded by any optical line terminal OLT.

[0252] The first-time determination module 408 is used to record the timestamp of the optical signal loss information as the switching start time and the timestamp of the first service frame received again as the switching end time when the service frame uploaded by the target optical line terminal OLT is received again and the number of service frames is continuous, or when the service frames received again meet the preset continuous arrival condition within the preset time window.

[0253] The first-time determination module 408 is also used to determine the switching time based on the switching start time and the switching end time;

[0254] The result generation module 404 is also used to generate fault switching test results based on the switching time and time threshold.

[0255] In one possible implementation, the device 40 further includes:

[0256] The second time determination module 409 is used to count the timestamp when any service frame in the service flow data is injected into the optical distribution network (ODN) and record it as the transmission start time.

[0257] The second time determination module 409 is also used to count the timestamp when the service frame arrives at the first computing platform or the second computing platform, and record it as the transmission end time;

[0258] The second time determination module 409 is also used to determine the transmission delay based on the transmission start time and the transmission end time;

[0259] The result generation module 404 is also used to generate latency test results based on transmission latency and latency threshold.

[0260] In one possible implementation, the latency threshold is determined by the average, median, or quantile of the transmission latency of all service frames within a fixed statistical time window.

[0261] The vehicle-mounted dual computing platform domain isolation test device 40 provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0262] Figure 5 A schematic diagram of the structure of the electronic device provided in this application. Figure 5 As shown, the electronic device 50 provided in this embodiment includes at least one processor 501 and a memory 502. Optionally, the electronic device 50 further includes a communication component 503. The processor 501, memory 502, and communication component 503 are connected via a bus 504.

[0263] In the specific implementation process, at least one processor 501 executes computer execution instructions stored in memory 502, causing at least one processor 501 to execute the above-mentioned vehicle-mounted dual computing platform domain isolation test method.

[0264] The specific implementation process of processor 501 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0265] The electronic device in this embodiment can be deployed in an in-vehicle optical communication test system, a bench control terminal, or a vehicle verification terminal. The memory stores the domain isolation test program, fault test rules, statistical time window parameters, and isolation threshold. The processor calls and executes the corresponding instructions to control the transmission power attenuation of multiple optical distribution networks (ODNs), service flow injection, and the statistics of service frame arrivals on the two computing platforms.

[0266] The processor further calculates the domain isolation degree of each domain based on the service frames arriving at the baseline of the first and second computing platforms, and outputs the domain isolation test results in combination with the isolation degree threshold. This enables unified quantitative verification of the isolation effect of the dual computing platform vehicle optical communication system, allowing the link anomaly and the impact of service competition to be distinguished. This improves the accuracy of judging communication stability and platform non-interference in vehicle mass production access, joint debugging and regression testing, and thus is more in line with actual operating conditions.

[0267] In the above embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0268] The memory may include random access memory (RAM) and non-volatile memory (NVM), such as at least one disk storage device.

[0269] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0270] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described in-vehicle dual computing platform domain isolation test method.

[0271] The computer program product in this application embodiment can be stored in a non-transitory computer-readable storage medium and deployed on vehicle-mounted test equipment, domain controller test terminal or bench control host, and executed by the processor as a dual computing platform domain isolation test method.

[0272] When the program runs, it can control the transmission power attenuation of multiple optical distribution networks (ODNs) according to preset fault test rules, and synchronously inject service flow data. Within a unified statistical time window, it counts the number of service frames arriving at the first and second computing platforms respectively, and then calculates the corresponding domain isolation degree by combining their respective arrival baselines. This unifies the originally scattered link status, service carrying status and platform receiving status into the same evaluation logic.

[0273] This enables the testing process to be repeatable, automatically judged, and quantifiable, thus accurately distinguishing between the impact of business competition and the impact of link anomalies. Therefore, it can provide a stable and consistent procedural implementation for verifying the isolation effect of dual-platform vehicle optical communication systems.

[0274] This application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the above-described vehicle-mounted dual computing platform domain isolation test method.

[0275] The computer-readable storage medium in this embodiment can be deployed in an on-board test terminal, bench controller, or server. After the processor calls the stored instructions, it can perform transmission power attenuation control, service flow injection, service frame arrival statistics under a fixed statistical time window, arrival baseline retrieval, and two-platform domain isolation calculation and test result generation for multiple optical distribution networks (ODNs). By embedding the test rule execution, service statistical analysis, and isolation judgment logic in the storage medium, the above-mentioned dual computing platform domain isolation test method can be stably reproduced in software, reducing differences in manual operation. This allows the same test caliber to be uniformly applied in mass production access, bench debugging, and after-sales regression scenarios, thereby improving the consistency, portability, and traceability of isolation verification results. Therefore, it can provide accurate and quantifiable isolation test support for the dual-platform interconnection architecture of on-board optical communication.

[0276] The aforementioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0277] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and the readable storage medium can exist as discrete components in the device.

[0278] The division of units is merely a logical functional division; in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0279] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0280] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0281] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0282] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0283] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope.

Claims

1. A method for testing domain isolation of a vehicle-mounted dual computing platform, characterized in that, include: Based on preset fault test rules, the transmission power of the optical distribution network is attenuated, and service flow data is injected into the optical distribution network at the same time; wherein, there are multiple optical distribution networks, and the multiple optical distribution networks are respectively connected to the first computing platform and the second computing platform through corresponding optical line terminals, and the service flow data includes multiple service frames; According to a fixed statistical time window, the number of service frames arriving at the first computing platform and the number of service frames arriving at the second computing platform are counted separately. Based on the number of service frames arriving and the corresponding arrival baseline, the domain isolation of the first computing platform and the domain isolation of the second computing platform are calculated respectively. Domain isolation test results are generated based on the domain isolation of the first computing platform, the domain isolation of the second computing platform, and the isolation threshold.

2. The method according to claim 1, characterized in that, The method of controlling the attenuation of the transmission power of the optical distribution network based on preset fault test rules includes: Based on the preset fault test rules, determine the attenuation start time, attenuation end time, and attenuation ratio for any optical distribution network. Based on the attenuation start time, the attenuation end time, and the attenuation ratio, an attenuation control command is generated. The attenuation control command is used to control the programmable optical attenuator array to attenuate the transmission power. The programmable optical attenuator array is disposed between the uplink of the optical distribution network and the optical line terminal.

3. The method according to claim 2, characterized in that, The method further includes: Based on the preset fault test rules, a time synchronization instruction is generated, wherein the time synchronization instruction is used to perform timestamp synchronization on the programmable optical attenuator array and the traffic generator, and the traffic generator is used to generate the service flow data.

4. The method according to claim 2, characterized in that, The step of counting the number of service frames arriving at the first computing platform and the second computing platform according to a fixed statistical time window includes: Within a first time interval, the number of first service frames arriving at the first computing platform and the number of second service frames arriving at the second computing platform are counted within each of the fixed statistical time windows; wherein, the fixed statistical time window is smaller than the first time interval, and the first time interval is the time interval from the attenuation start time to the attenuation end time. Calculate the average of the number of multiple first service frames and the average of the number of multiple second service frames within the first time interval, respectively. The average number of the first service frames is recorded as the service frame arrival amount of the first computing platform, and the average number of the second service frames is recorded as the service frame arrival amount of the second computing platform.

5. The method according to any one of claims 1-4, characterized in that, The method further includes: Within the second time interval, service flow data is injected into the optical distribution network before transmission power attenuation, and the number of third service frames arriving at the first computing platform and the number of fourth service frames arriving at the second computing platform are counted within each fixed statistical time window; wherein, the fixed statistical time window is shorter than the second time interval; Calculate the average number of multiple third service frames and the average number of multiple fourth service frames within the second time interval, respectively. The average number of the third service frames is recorded as the arrival baseline of the first computing platform, and the average number of the fourth service frames is recorded as the arrival baseline of the second computing platform.

6. The method according to any one of claims 1-4, characterized in that, The method further includes: When an optical signal loss information is received from any optical line terminal, the corresponding optical line terminal is recorded as the target optical line terminal. When a service frame uploaded by the target optical line terminal is received again, and the number of service frames is continuous, or when the service frames received again meet the preset continuous arrival condition within a preset time window, the timestamp of the optical signal loss information is recorded as the switching start time, and the timestamp of the first service frame received again is recorded as the switching end time. The switching time is determined based on the switching start time and the switching end time; Based on the switching time and time threshold, fault switching test results are generated.

7. The method according to any one of claims 1-4, characterized in that, The method further includes: The timestamp of any service frame in the service flow data when it is injected into the optical distribution network is recorded as the transmission start time. The timestamp of the service frame arriving at the first computing platform or the second computing platform is recorded as the transmission end time. The transmission delay is determined based on the transmission start time and the transmission end time. Based on the transmission delay and delay threshold, delay test results are generated.

8. The method according to claim 7, characterized in that, The latency threshold is determined by the average, median, or quantile value of the transmission latency of all service frames within the fixed statistical time window.

9. A vehicle-mounted dual computing platform domain isolation test device, characterized in that, include: An injection module is used to control the attenuation of the transmission power of the optical distribution network based on preset fault test rules, and simultaneously inject service flow data into the optical distribution network; wherein, there are multiple optical distribution networks, and the multiple optical distribution networks are respectively connected to the first computing platform and the second computing platform through corresponding optical line terminals, and the service flow data includes multiple service frames; The statistics module is used to count the number of service frames arriving at the first computing platform and the second computing platform according to a fixed statistical time window. The calculation module is used to calculate the domain isolation of the first computing platform and the domain isolation of the second computing platform based on the number of service frames arriving and the corresponding arrival baseline. The result generation module is used to generate domain isolation test results based on the domain isolation degree of the first computing platform, the domain isolation degree of the second computing platform, and the isolation degree threshold.

10. An electronic device, characterized in that, include: Memory, processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory, causing the processor to perform the method as described in any one of claims 1-8.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in any one of claims 1-8.

12. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the method described in any one of claims 1-8.

Images