Signal processing device, regional signal processing device, regional signal processing device and vehicle communication device provided with the same

Abstract

The signal processing device of one embodiment of the present disclosure is provided with a processor that sets a verification path for verifying a service running in at least one of a plurality of regional signal processing devices, and a storage device that stores the verification path. The processor is controlled to set a verification path using at least part of the plurality of regional signal processing devices for verification of a first service running in a first regional signal processing device of the plurality of regional signal processing devices if a verification request for the first service is received, and transmit a verification execution command based on the verification path to the first regional signal processing device. Thus, verification of a service can be stably performed.

Description

Technical Field

[0001] This disclosure relates to a signal processing apparatus, a regional signal processing apparatus, and a vehicle communication apparatus equipped with the above-mentioned apparatus. More specifically, it relates to a signal processing apparatus, a regional signal processing apparatus, and a vehicle communication apparatus equipped with the above-mentioned apparatus that can reliably perform service verification. Background Technology

[0002] A vehicle is a device that enables its rider to move in a desired direction. A car is a representative example.

[0003] On the other hand, for the convenience of users of the vehicle, a vehicle signal processing device is installed inside the vehicle.

[0004] Vehicle signal processing units can run various services based on various sensor data from sensor devices or camera data from cameras.

[0005] On the other hand, various services running within a vehicle's signal processing unit may be forged or tampered with due to external attacks or other reasons.

[0006] Therefore, research is underway to verify various services within the signal processing device. Summary of the Invention

[0007] The problem that the invention aims to solve

[0008] The problem to be solved by this disclosure is to provide a signal processing apparatus, a regional signal processing apparatus, and a vehicle communication device equipped with the above-mentioned apparatus that can stably perform service verification.

[0009] Another problem to be solved by this disclosure is to provide a signal processing apparatus, a regional signal processing apparatus, and a vehicle communication apparatus equipped with the above-mentioned apparatus, which can stably perform verification of binary files that serve as runtime files.

[0010] Another issue to be addressed by this disclosure is to provide a signal processing apparatus, a regional signal processing apparatus, and a vehicle communication apparatus equipped with the above-mentioned apparatus that can stably operate a verified service.

[0011] Technical solutions to the problem

[0012] A signal processing apparatus and a vehicle communication apparatus equipped with the present disclosure according to an embodiment include: a processor for setting a verification path for verifying a verification path for at least one service running in a plurality of regional signal processing apparatuses; and a storage device for storing the verification path; the processor is controlled to, if a verification request for a first service running in a first regional signal processing apparatus among the plurality of regional signal processing apparatuses is received, set a verification path utilizing at least a portion of the plurality of regional signal processing apparatuses for verifying the first service, and transmit a verification execution command based on the verification path to the first regional signal processing apparatus.

[0013] On the other hand, the processor can be controlled to receive verification result data based on the verification path and transmit the information on whether the first service is running to the first area signal processing device based on the verification result data.

[0014] On the other hand, the processor can be controlled to transmit the information on whether the first service is running to the first area signal processing device if the verification is completed based on the verification path and all verifications on the verification path are valid.

[0015] On the other hand, the processor can be controlled to perform verification based on security data related to the first service stored in the storage device if the verification path includes a signal processing device, and transmit the verification result data to the first area signal processing device or other area signal processing devices.

[0016] On the other hand, if the first service within the first area signal processing device is updated, the storage device can receive and store security data related to the updated first service.

[0017] On the other hand, the processor can set the verification path for the first service based on network traffic, security level, sensor data type, or service type.

[0018] On the other hand, when setting the verification path for the first service, the processor can exclude some area signal processing devices, set the path of the signal processing devices multiple times, or set only some area signal processing devices.

[0019] On the other hand, if the first service is a service that generates camera-related data, the processor can be configured to include only the first area signal processing device and the verification path of the signal processing device.

[0020] On the other hand, if the first service is to transmit sensor data to other area signal processing devices, the processor can set a verification path that excludes some of the area signal processing devices among the plurality of area signal processing devices.

[0021] On the other hand, if the first service is updated without requiring other authentication paths, the processor can configure a path that includes only the first area signal processing device and the authentication path of the signal processing device.

[0022] On the other hand, if the first service needs to be continuously verified by the signal processing device, or if the first service is a service related to data generated by the vehicle display, the processor can configure the path of the signal processing device to be a multiple verification path.

[0023] On the other hand, the processor can transmit verification data packets that include verification execution commands based on the verification path. The verification data packets may also include the verification path, service identifier, and security data of the service.

[0024] On the other hand, the processor may be equipped with a network controller, which is configured to verify the verification path of at least one network controller in a plurality of regional signal processing devices, the network controller running the service, and the storage device may be equipped with a secure storage unit for storing the verification path.

[0025] On the other hand, the processor can be controlled to set up a verification path for verifying the corresponding service and transmit verification execution commands based on the verification path if new services are added, network traffic surges above the allowed value, or unknown network traffic is generated.

[0026] On the other hand, the processor can be controlled to set up a second verification path for verifying the second service if, during the operation of the second service, the specified network traffic surges above the allowable value or unknown network traffic is generated, receive the second verification result data executed based on the second verification path, and transmit the operation continuity information or operation termination information of the second service based on the second verification result data.

[0027] On the other hand, in a regional signal processing apparatus and a vehicle communication device equipped with the above-mentioned apparatus according to an embodiment of the present disclosure, the regional signal processing apparatus, as a regional signal processing apparatus that exchanges data with a signal processing apparatus, is provided with a processor that runs a first service and a storage device that stores security data related to the first service. When the processor runs the first service, it transmits a verification request for the first service to the signal processing apparatus and transmits verification result data to the regional signal processing apparatus or the signal processing apparatus corresponding to the next verification path based on the verification execution command and verification path received from the signal processing apparatus.

[0028] On the other hand, the processor can transmit the verification result data to the signal processing device or the regional signal processing device corresponding to the next verification path, and receive information on whether the first service is running from the signal processing device.

[0029] On the other hand, the processor can transmit the verification data packet used to verify the first service to the area signal processing device or signal processing device corresponding to the next verification path based on the verification execution command.

[0030] On the other hand, the verification data packet may include the verification path, service identifier, and service security data.

[0031] On the other hand, the verification result data can include the verification result data corresponding to each verification path.

[0032] Invention Effects

[0033] A signal processing apparatus and a vehicle communication device equipped with the present disclosure according to an embodiment include: a processor for setting a verification path for verifying a service running in at least one of a plurality of regional signal processing apparatuses; and a storage device for storing the verification path; the processor is controlled to, if a verification request for a first service running in a first regional signal processing apparatus is received, set a verification path utilizing at least a portion of the plurality of regional signal processing apparatuses for verifying the first service, and transmit a verification execution command based on the verification path to the first regional signal processing apparatus. This enables stable execution of service verification. In particular, it enables stable execution of verification of binary files that serve as service runtime files.

[0034] On the other hand, the processor can be controlled to receive verification result data executed based on the verification path, and transmit the running status information of the first service to the first area signal processing device based on the verification result data. Thus, the verified service can be run stably.

[0035] On the other hand, the processor can be controlled to transmit the running status information of the first service to the first area signal processing device if the verification is completed based on the verification path and all verifications on the verification path are valid. This enables the stable operation of the verified service.

[0036] On the other hand, the processor can be controlled to perform verification based on security data related to the first service stored in the storage device if the verification path includes a signal processing device, and transmit the verification result data to the first area signal processing device or other area signal processing devices. This enables stable execution of service verification.

[0037] On the other hand, if the first service within the first area signal processing device is updated, the storage device can receive and store security data related to the updated first service. This enables stable service verification.

[0038] On the other hand, the processor can set the verification path for the first service based on network traffic, security level, sensor data type, or service type. This enables stable service verification.

[0039] On the other hand, when setting the verification path for the first service, the processor can exclude some area signal processing devices, set the path of the signal processing devices multiple times, or set only some area signal processing devices. This allows for stable execution of service verification.

[0040] On the other hand, if the first service is one that generates camera-related data, the processor can be configured to include only the signal processing device for the first area and its verification path. This allows for stable and rapid service verification.

[0041] On the other hand, if the first service is to transmit sensor data to other area signal processing devices, the processor can set a verification path that excludes some of the area signal processing devices among the plurality of area signal processing devices. This allows for stable execution of service verification.

[0042] On the other hand, if the first service is updated without requiring other verification paths, the processor can configure a verification path that includes only the first area signal processing device and the signal processing device. This allows for stable and rapid service verification.

[0043] On the other hand, if the first service needs to be continuously verified by the signal processing device, or if the first service is related to data generated by the vehicle display, the processor can configure the path of the signal processing device to be a multiple verification path. This enables stable execution of service verification.

[0044] On the other hand, the processor can transmit verification data packets that include verification execution commands based on the verification path. These verification data packets may also include the verification path, service identifier, and service security data. This enables stable service verification.

[0045] On the other hand, the processor may be equipped with a network controller, which sets up a verification path for services running in at least one of the plurality of regional signal processing devices. The storage device may be equipped with a secure storage unit for storing the verification path. This enables stable service verification.

[0046] On the other hand, the processor can be controlled to set up an authentication path for verifying the corresponding service and transmit authentication execution commands based on the authentication path if a new service is added, network traffic surges above the allowed limit, or unknown network traffic is generated. This ensures stable service authentication.

[0047] On the other hand, the processor can be controlled to, if during the operation of the second service, network traffic surges above a permitted level or generates unknown network traffic, then set up a second verification path for verifying the second service, receive second verification result data executed based on the second verification path, and transmit the second service's ongoing operation information or operation termination information based on the second verification result data. This enables stable execution of the second service verification. In particular, if the binary file of the second service, which is verifying a surge in verification traffic or generates abnormal traffic, fails verification, even if the second service is running, it can be determined as a forged or tampered service binary file, and the second service can be terminated.

[0048] On the other hand, in a regional signal processing apparatus and a vehicle communication device equipped with the above-described apparatus according to an embodiment of this disclosure, the regional signal processing apparatus, as a regional signal processing apparatus that exchanges data with a signal processing apparatus, is provided with a processor that runs a first service and a storage device that stores security data related to the first service. When running the first service, the processor transmits a verification request for the first service to the signal processing apparatus and, based on the verification execution command and verification path received from the signal processing apparatus, transmits verification result data to the regional signal processing apparatus or the signal processing apparatus corresponding to the next verification path. Therefore, service verification can be performed stably. Furthermore, services that have completed verification can be run stably.

[0049] On the other hand, the processor can transmit the verification result data to the signal processing device or the regional signal processing device corresponding to the next verification path, and receive information on whether the first service is running from the signal processing device. Thus, the verified service can run stably.

[0050] On the other hand, the processor can transmit the verification data packet used to verify the first service to the area signal processing device or signal processing device corresponding to the next verification path based on the verification execution command. This enables stable execution of service verification.

[0051] On the other hand, the verification data packet can include the verification path, service identifier, and service security data. This enables stable service verification.

[0052] On the other hand, the verification result data can include the verification result data corresponding to each verification path. This ensures that service verification can be performed stably. Attached Figure Description

[0053] Figure 1 This is a diagram showing an example of the exterior and interior of a vehicle.

[0054] Figures 2a to 2c This is a diagram illustrating various architectures of a vehicle communication gateway according to embodiments of the present disclosure.

[0055] Figure 3 yes Figure 2a An example of an internal block diagram of a signal processing device.

[0056] Figure 4a This is a diagram illustrating an example of the arrangement of a vehicle display device inside a vehicle according to an embodiment of the present disclosure.

[0057] Figure 4b This is a diagram illustrating another example of the arrangement of a vehicle display device inside a vehicle according to an embodiment of the present disclosure.

[0058] Figure 5 yes Figure 4b An example of an internal block diagram of a vehicle display device.

[0059] Figure 6 This is an example of an internal block diagram of a vehicle communication device.

[0060] Figure 7 This is another example of an internal block diagram of a vehicle communication device.

[0061] Figures 8a to 8d This is a diagram showing various examples of communication devices for vehicles.

[0062] Figure 9a This is a diagram illustrating an example of a vehicle communication device according to an embodiment of the present disclosure.

[0063] Figure 9b This is a diagram illustrating another example of a vehicle communication device according to an embodiment of the present disclosure.

[0064] Figure 10a This is a flowchart illustrating an example of an operation method of a vehicle communication device according to an embodiment of the present disclosure.

[0065] Figure 10b This is a flowchart illustrating an example of an operation method of a signal processing apparatus according to an embodiment of the present disclosure.

[0066] Figure 11 This is an example of an internal block diagram of a signal processing apparatus and a region signal processing apparatus according to embodiments of the present disclosure.

[0067] Figures 12 to 14 yes Figure 11 The diagram referenced in the action instructions. Detailed Implementation

[0068] The present disclosure will now be described in detail with reference to the accompanying drawings.

[0069] The suffixes “module” and “section” used in the following description for constituent elements are merely for the convenience of writing the specification and do not have any particularly important meaning or function in themselves. Therefore, “module” and “section” can be used interchangeably.

[0070] Figure 1 This is a diagram showing an example of the exterior and interior of a vehicle.

[0071] Referring to the accompanying drawings, the vehicle 200 is operated by a plurality of wheels (103FR, 103FL, 103RL, ...) that rotate under the action of a power source and a steering wheel 150 for adjusting the direction of travel of the vehicle 200.

[0072] On the other hand, the vehicle 200 may also be equipped with a camera 195 for acquiring images of the front of the vehicle.

[0073] On the other hand, the vehicle 200 may be equipped with a plurality of displays 180a, 180b for displaying images, information, etc.

[0074] exist Figure 1 In the example, 180a and 180b are exemplified as a plurality of displays, such as an instrument panel display 180a and an AVN (Audio Video Navigation) display 180b. Alternatively, a HUD (Head-Up Display) or similar device can also be used.

[0075] On the other hand, the AVN (Audio Video Navigation) display 180b can also be named the Central Information Display.

[0076] On the other hand, the vehicle 200 described in this specification may include all concepts such as a vehicle equipped with an engine as a power source, a hybrid vehicle equipped with both an engine and an electric motor as a power source, and an electric vehicle equipped with an electric motor as a power source.

[0077] Figures 2a to 2c This is a diagram illustrating various architectures of a vehicle communication gateway according to embodiments of the present disclosure.

[0078] first, Figure 2a This is a diagram illustrating a first architecture of a vehicle communication gateway according to an embodiment of the present disclosure.

[0079] Referring to the attached diagram, the first architecture 300a can correspond to a zone-based architecture.

[0080] Therefore, sensor devices and processors inside the vehicle can be arranged in the plurality of zones Z1 to Z4 respectively, and a signal processing device 170a including a vehicle communication gateway GWDa can be arranged in the central area of ​​the plurality of zones Z1 to Z4.

[0081] On the other hand, in addition to the vehicle communication gateway GWDa, the signal processing device 170a may further include an automatic driving control module ACC, a cockpit control module CPG, etc.

[0082] The vehicle communication gateway GWDa within this signal processing device 170a can be an HPC (High Performance Computing) gateway.

[0083] Right now, Figure 2a The signal processing device 170a, as an integrated HPC, can exchange data with an external communication module (not shown) or processors (not shown) in multiple zones Z1 to Z4.

[0084] Figure 2b This is a push for a second architecture of a vehicle communication gateway illustrating an embodiment of the present disclosure.

[0085] Referring to the attached diagram, the second architecture 300b can correspond to a domain-integrated architecture.

[0086] Therefore, the gateway GWDb can be connected in parallel to the vehicle chassis control module BSG, power control module PTG, ADAS control module ADG, and cockpit control module CPG. Each module (BSG, PTG, ADG, CPG) can be electrically connected to multiple processors (ECUs).

[0087] On the other hand, each processor ECU can be integrated and connected to the gateway GWDb.

[0088] On the other hand, including Figure 2b The signal processing device 170 of the gateway GWDb will operate as a domain-integrated signal processing device.

[0089] Figure 2c This is a diagram illustrating a third architecture of a vehicle communication gateway according to an embodiment of the present disclosure.

[0090] Referring to the attached diagram, the third architecture 300c can correspond to a distributed architecture.

[0091] Therefore, the vehicle chassis control module (BSG), power control module (PTG), ADAS control module (ADG), and cockpit control module (CPG) can be connected in parallel at the gateway GWDc. In particular, multiple ECU processors within each control module can be connected in parallel to the gateway GWDb.

[0092] and Figure 2b In contrast, the difference lies in the fact that each processor ECU in the third architecture connects directly to the gateway GWDb without connecting to other modules.

[0093] On the other hand, including Figure 2c The signal processing unit 170 of the gateway GWDc will operate as a distributed signal processing unit.

[0094] Figure 3 yes Figure 2a An example of an internal block diagram of a signal processing device.

[0095] Referring to the accompanying drawings, the signal processing apparatus 170 of this disclosure embodiment includes: a first processor 732a, which receives a first message including sensor signals from inside the vehicle based on a first communication method and performs signal processing; and a second processor 732b, which receives a second message including communication messages received from an external source based on a second communication method and performs signal processing on the received second message.

[0096] At this point, the second communication method can be faster or have a larger bandwidth than the first communication method.

[0097] For example, the second communication method could be Ethernet communication, and the first communication method could be CAN communication. Therefore, the first message could be a CAN message, and the second message could be an Ethernet message.

[0098] On the other hand, the signal processing apparatus 170 of this embodiment is further provided with a first memory 320 having an IPC channel and a second memory 330 storing sensor data including vehicle speed data.

[0099] For example, the first memory 320 may be SRAM (Static RAM), and the second memory 330 may be DDR memory. In particular, the second memory 330 may be DDR SDRAM (Double data rate synchronous dynamic random access memory).

[0100] On the other hand, the signal processing apparatus 170 of this disclosure includes a shared memory 508 that operates for the transmission of a first message or a second message between a first processor 732a and a second processor 732b.

[0101] As described above, during communication between the first processor 732a and the second processor 732b, communication between the processors utilizing the shared memory 508 is performed, thereby enabling reduced latency and high-speed data transmission during inter-processor communication.

[0102] On the other hand, preferably, the shared memory 508 is disposed within the first memory 320. This enables reduced latency and high-speed data transmission during inter-processor communication.

[0103] On the other hand, the first processor 732a may have a plurality of processor cores 317o, 317a, and 317b internally.

[0104] On the other hand, the first processor 732a may also be provided with an interface 319 for receiving CAN messages from external vehicle sensors.

[0105] For example, the first processor core 317o within the first processor 732a can run multiple applications, or it can run the first AUTOSAR (AUTomotive Open System Architecture) 312.

[0106] In particular, the first processor core 317o can run a second AUTOSAR 312 to run an inter-processor communication handler (IPC Handler) 314.

[0107] On the other hand, the IPC processor 314 can exchange data with the first memory 320, or it can exchange IPC data with an application running on the first processor core 317o.

[0108] On the other hand, the IPC handler 314 can exchange interrupt signals with the IPC driver 348 within the second processor 732b.

[0109] On the other hand, the second processor core 317a within the first processor 732a can run IDS and receive CAN data from the second memory 330.

[0110] On the other hand, the third processor core 317b within the first processor 732a can perform logging, storing the CAN data received through interface 319 in the second memory 330.

[0111] On the other hand, the third processor core 317b within the first processor 732a can run the inter-processor communication (IPC) module 318 to exchange IPC data with the first memory 320.

[0112] On the other hand, the third processor core 317b within the first processor 732a can transmit interrupt signals to the IPC driver 348 within the second processor 732b.

[0113] The first memory 320 can exchange IPC data with the IPC processor 314 or the IPC module 318.

[0114] On the other hand, the second processor 732b can run applications 343, IPC handlers 345, IPC daemons 346, IPC drivers 348, etc.

[0115] On the other hand, the second processor 732b can also run a Service Oriented Architecture (SOA) adapter 341, a diagnostic server 342, and a second AUTOSAR 347.

[0116] The second AUTOSAR 347 can be an adaptive AUTOSAR, and the first AUTOSAR 312 can be a classic AUTOSAR.

[0117] The IPC daemon 346 can exchange interrupt signals with the SOA adapter 341, diagnostic server 342, IPC handler 345, IPC driver 348, etc.

[0118] On the other hand, the first memory 320 can exchange IPC data with SOA adapter 341, diagnostic server 342, IPC driver 345, etc.

[0119] on the other hand, Figure 3 The IPC data described in the instructions can be CAN messages or Ethernet messages.

[0120] On the other hand, the IPC handler 345 can act as a service provider that provides diagnostic, firmware upgrade, system information and other data based on the second AUTOSAR 347.

[0121] On the other hand, although Figure 3 Not shown, but the first processor 732a can run a message router (not shown) that controls the message router to convert frames of a first message, such as a CAN message, into frames of a second message, such as an Ethernet message, and transmit them to the second processor 732b.

[0122] On the other hand, although Figure 3The first processor 732a is not shown, but it can also run a CAN driver (not shown) and a CAN interface (not shown).

[0123] For example, the CAN interface (not shown) can also operate with 8 channels each on the fourth processor core (not shown) and the fifth processor core (not shown) within the first processor 732a, for a total of 16 channels.

[0124] At this time, the first CAN interface (not shown) running on the fourth processor core (not shown) can correspond to the first queue PTb during inter-processor communication, and the second CAN interface (not shown) running on the fifth processor core (not shown) can correspond to the second queue PTa, which has a higher priority than the first queue PTb during inter-processor communication.

[0125] Figure 4a This is a diagram illustrating an example of the arrangement of a vehicle display device inside a vehicle according to an embodiment of the present disclosure.

[0126] Referring to the attached diagram, the vehicle interior may be equipped with an instrument panel display 180a, an AVN (Audio Video Navigation) display 180b, a rear seat entertainment display 180c, 180d, and a rearview mirror display (not shown).

[0127] Figure 4b This is a diagram illustrating another example of the arrangement of a vehicle display device inside a vehicle according to an embodiment of the present disclosure.

[0128] The vehicle display device 100 of this embodiment may include a plurality of displays 180a to 180b and a signal processing device 170 that performs signal processing for displaying images, information, etc. on the plurality of displays 180a to 180b.

[0129] The first display 180a among the plurality of displays 180a to 180b may be an instrument panel display 180a for displaying driving status, action information, etc., and the second display 180b may be an AVN (Audio Video Navigation) display 180b for displaying vehicle driving information, navigation maps, various entertainment information or images.

[0130] The signal processing device 170 may have an internal processor 175, on which a first virtual machine to a third virtual machine (not shown) may run on a virtual machine monitor (not shown) within the processor 175.

[0131] The second virtual machine (not shown) can operate on the first monitor 180a, and the third virtual machine (not shown) can operate on the second monitor 180b.

[0132] On the other hand, the first virtual machine (not shown) within the processor 175 can be controlled to configure the shared memory 508 based on the virtual machine monitor 505 to transmit the same data to the second virtual machine (not shown) and the third virtual machine (not shown). Thus, the same information or the same image can be displayed synchronously on the first display 180a and the second display 180b within the vehicle.

[0133] On the other hand, for data sharing, a first virtual machine (not shown) within the processor 175 shares at least a portion of the data with a second virtual machine (not shown) and a third virtual machine (not shown). Thus, data can be shared and processed by a plurality of virtual machines used for a plurality of displays within the vehicle.

[0134] On the other hand, a first virtual machine (not shown) within the processor 175 can receive and process wheel speed sensor data from the vehicle, and transmit the processed wheel speed sensor data to at least one of a second virtual machine (not shown) and a third virtual machine (not shown). Thus, the vehicle's wheel speed sensor data can be shared with at least one virtual machine.

[0135] On the other hand, the vehicle display device 100 of this embodiment may also be provided with a rear seat entertainment display 180c for displaying driving status information, simple navigation information, various entertainment information or images.

[0136] In addition to the first to third virtual machines (not shown), the signal processing device 170 can add a fourth virtual machine (not shown) to run on the virtual machine monitor (not shown) within the processor 175 to control the RSE display 180c.

[0137] Therefore, a signal processing device 170 can be used to control various displays 180a to 180c.

[0138] On the other hand, some of the multiple displays 180a-180c can operate based on Linux OS, while others can operate based on Web OS.

[0139] The signal processing apparatus 170 of this embodiment can be controlled so that displays 180a to 180c operating under various operating systems (OS) also synchronously display the same information or the same image.

[0140] On the other hand, Figure 4bThe example shows a vehicle speed indicator 212a and a vehicle interior temperature indicator 213a displayed on a first display 180a, a main screen 222 including a plurality of applications, the vehicle speed indicator 212b and the vehicle interior temperature indicator 213b displayed on a second display 180b, and a second main screen 222b including a plurality of applications and the vehicle interior temperature indicator 213c displayed on a third display 180c.

[0141] Figure 5 yes Figure 4b An example of an internal block diagram of a vehicle display device.

[0142] Referring to the accompanying drawings, the vehicle display device 100 of this embodiment may include an input unit 110, a communication unit 120 for communicating with external devices, a plurality of communication modules EMa to EMD for internal communication, a memory 140, a signal processing device 170, a plurality of displays 180a to 180c, an audio output unit 185, and a power supply unit 190.

[0143] Multiple communication modules EMa to EMD can be arranged separately in, for example... Figure 2a The multiple zones Z1 to Z4.

[0144] On the other hand, the signal processing device 170 may have an Ethernet switch 736b internally provided for data communication with each of the communication modules EM1 to EM4.

[0145] Each communication module EM1 to EM4 can communicate with multiple sensor devices SN or ECU770.

[0146] On the other hand, the plurality of sensor devices SN may include a camera 195, a lidar 196, a radar 197, or a position sensor 198.

[0147] The input unit 110 may be equipped with physical buttons, touchpads, etc. for button input, touch input, etc.

[0148] On the other hand, the input unit 110 may be equipped with a microphone (not shown) for user voice input.

[0149] The communication unit 120 can exchange data wirelessly with the mobile terminal 800 or the server 900.

[0150] In particular, the communication unit 120 can exchange data wirelessly with the vehicle driver's mobile terminal. Various wireless data communication methods can be used, such as Bluetooth, WiFi, WiFi Direct, and APiX.

[0151] The communication unit 120 can receive weather information, road traffic information, and TPEG (Transport Protocol Expert Group) information from the mobile terminal 800 or the server 900. For this purpose, the communication unit 120 may be equipped with a mobile communication module (not shown).

[0152] Multiple communication modules EM1 to EM4 can receive sensor data from ECU770 or sensor device SN and transmit the received sensor data to signal processing device 170.

[0153] Here, sensor data may include at least one of the following: vehicle orientation data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle tilt data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, and vehicle interior humidity data.

[0154] This sensor data can be acquired from heading sensors, yaw sensors, gyroscope sensors, position modules, vehicle forward / reverse sensors, wheel sensors, vehicle speed sensors, vehicle tilt sensors, battery sensors, fuel sensors, tire sensors, steering sensors based on steering wheel rotation, vehicle interior temperature sensors, and vehicle interior humidity sensors.

[0155] On the other hand, the positioning module may include a GPS module or a position sensor 198 for receiving GPS information.

[0156] On the other hand, at least one of the plurality of communication modules EM1 to EM4 can transmit the location information data sensed by the GPS module or the location sensor 198 to the signal processing device 170.

[0157] On the other hand, at least one of the plurality of communication modules EM1 to EM4 can receive frontal image data, side image data, rear image data, and distance information of obstacles around the vehicle from the camera 195, lidar 196, or radar 197, and transmit the received information to the signal processing device 170.

[0158] The memory 140 can store various data for the overall operation of the vehicle display device 100, such as programs for processing or controlling the signal processing device 170.

[0159] For example, memory 140 may store data about a virtual machine monitor, a first virtual machine, and a third virtual machine that are used to run within processor 175.

[0160] The audio output unit 185 converts the electrical signal from the signal processing device 170 into an audio signal and outputs it. For this purpose, a speaker or the like can be provided.

[0161] The power supply unit 190 can supply the power required for the operation of each component under the control of the signal processing device 170. In particular, the power supply unit 190 can receive power from a battery or the like inside the vehicle.

[0162] The signal processing device 170 controls the overall operation of each unit within the vehicle display device 100.

[0163] For example, signal processing device 170 may include processor 175 that performs signal processing for vehicle displays 180a, 180b.

[0164] Processor 175 can run a first virtual machine to a third virtual machine (not shown) on a virtual machine monitor (not shown) within processor 175.

[0165] The first virtual machine (not shown) among the first to third virtual machines (not shown) can be named the server virtual machine, and the second to third virtual machines (not shown) can be named the client virtual machine.

[0166] For example, a first virtual machine (not shown) within processor 175 can receive sensor data from a plurality of sensor devices, such as vehicle sensor data, location information data, camera image data, audio data, or touch input data, process or manipulate the data, and output it.

[0167] As described above, by performing most of the data processing in the first virtual machine (not shown), 1:N data sharing can be achieved.

[0168] As another example, the first virtual machine (not shown) can directly receive and process CAN data, Ethernet data, audio data, radio data, USB data, and wireless communication data for the second to third virtual machines (not shown).

[0169] Furthermore, the first virtual machine (not shown) can transfer the processed data to the second to third virtual machines (not shown).

[0170] Therefore, only the first virtual machine (not shown) among the first to third virtual machines (not shown) receives sensor data, communication data or external input data from multiple sensor devices and performs signal processing, thereby reducing the signal processing burden in other virtual machines and enabling 1:N data communication, thus enabling synchronization during data sharing.

[0171] On the other hand, the first virtual machine (not shown) can be controlled to write data to the shared memory 508 to share the same data with the second virtual machine (not shown) and the third virtual machine (not shown).

[0172] For example, the first virtual machine (not shown) can be controlled to write vehicle sensor data, location information data, camera image data, or touch input data into shared memory 508 to share the same data with the second virtual machine (not shown) and the third virtual machine (not shown). This enables 1:N data sharing.

[0173] Ultimately, by performing most of the data processing in the first virtual machine (not shown), 1:N data sharing can be achieved.

[0174] On the other hand, the first virtual machine (not shown) within the processor 175 can be controlled to set up a shared memory 508 based on the virtual machine monitor 505 to transfer the same data to the second virtual machine (not shown) and the third virtual machine (not shown).

[0175] On the other hand, the signal processing device 170 can process various signals such as audio signals, image signals, and data signals. Therefore, the signal processing device 170 can be implemented as a system-on-chip (SOC).

[0176] on the other hand, Figure 5 The signal processing device 170 within the display device 100 can interact with Figure 7 The signal processing device 170 of the vehicle communication device 700 is the same.

[0177] Figure 6 This is an example of an internal block diagram of a vehicle communication device.

[0178] Referring to the accompanying drawings, the vehicle communication device 600x related to this disclosure is provided with a first communication gateway 630a and a second communication gateway 630b.

[0179] The first communication gateway 630a may be equipped with a CAN transceiver 636a for exchanging CAN signals with the body module 610, chassis module 614, CAN communication diagnostic device 616, at least one CAN communication ECU 618, etc., using CAN communication, and a first processor 632a for processing the CAN signals received from the CAN transceiver 636a.

[0180] On the other hand, the first processor 632a may be provided with an IPC manager 634a for performing inter-processor communication with the second processor 632b within the second communication gateway 630b.

[0181] The second communication gateway 630b may be equipped with an Ethernet switch 636b for exchanging Ethernet messages with the remote information processing control module 620, the head module 622, the Ethernet communication diagnostic device 624, at least one Ethernet communication ECU 626, etc. via Ethernet communication, and a second processor 632b for signal processing of the Ethernet messages received from the Ethernet switch 636b.

[0182] On the other hand, the second processor 632b may be provided with an IPC manager 634b for performing inter-processor communication with the first processor 632a within the first communication gateway 630a.

[0183] On the other hand, the IPC manager 634a in the first processor 632a and the IPC manager 634b in the second processor 632b can perform inter-processor communication based on Ethernet communication.

[0184] While this approach allows for high-speed transmission of large amounts of data through Ethernet-based high-bandwidth communication, it also introduces latency issues in communication between the protocol stack and the physical layer (PHY).

[0185] Therefore, this disclosure proposes a scheme to reduce latency and perform high-speed data transmission during inter-processor communication. Reference is made below. Figure 7 Please provide an explanation.

[0186] Figure 7 This is another example of an internal block diagram of a vehicle communication device.

[0187] Referring to the accompanying drawings, a vehicle communication device 700 according to an embodiment of this disclosure includes: a first communication gateway 730a; a second communication gateway 730b; a first processor 732a, which receives a first message including sensor signals from inside the vehicle based on a first communication method and performs signal processing; a second processor 732b, which receives a second message including communication messages received from an external source based on a second communication method and performs signal processing on the received second message; and a shared memory 508, which operates for the transmission of the first message or the second message between the first processor 732a and the second processor 732b.

[0188] and Figure 6 Compared to the communication device 600x, the shared memory 508 is used for inter-processor communication (IPC) between the first processor 732a and the second processor 732b, thereby reducing latency during inter-processor communication and performing high-speed data transmission.

[0189] In addition, with Figure 6 Compared to the communication device 600x, the first processor 732a, the second processor 732b, and the shared memory 508 are implemented as a single chip in a signal processing device 170, thereby reducing latency during inter-processor communication and enabling high-speed data transmission.

[0190] On the other hand, preferably, the second communication method has a larger bandwidth and faster transmission speed than the first communication method.

[0191] For example, the second communication method could be Ethernet communication, and the first communication method could be CAN communication. Therefore, the first message could be a CAN message or a CAN signal, and the second message could be an Ethernet message.

[0192] On the other hand, the signal processing apparatus 170 and the vehicle communication device 700 provided thereon, according to an embodiment of the present disclosure, may further include: a transceiver 736a, which receives a first message including sensor signals from inside the vehicle based on a first communication method and transmits the first message to a first processor 732a; and a switch 736b, which receives a second message including communication messages received from an external source based on a second communication method and transmits the second message to a second processor 732b. Thus, the first message and the second message can be stably transmitted to the first processor 732a and the second processor 732b, respectively.

[0193] The first processor 732a or transceiver 736a can exchange CAN signals with the body module 610, chassis module 614, CAN communication diagnostic device 616, at least one CAN communication ECU 618, etc. via CAN communication.

[0194] On the other hand, the first processor 732a may be provided with a first manager 734a for inter-processor communication (IPC) with the second processor 732b. The first manager 734a may also be named an IPC manager.

[0195] On the other hand, the first manager 734a may include a first cache memory 735a.

[0196] On the other hand, the second processor 732b or switch 736b can exchange Ethernet messages with the remote information processing control module 620, the head module 622, the Ethernet communication diagnostic device 624, at least one Ethernet communication ECU 626, etc. via Ethernet communication. Switch 736b can be named the Ethernet switch.

[0197] On the other hand, the second processor 732b may be provided with a second manager 734b for inter-processor communication (IPC) with the first processor 732a. The second manager 734b may also be named an IPC manager.

[0198] On the other hand, the second manager 734b may be configured to include a second cache memory 735b and a timer 737.

[0199] On the other hand, the second processor 732b can receive periodic subscription requests for the first message from the Ethernet processor or the Ethernet communication ECU 626.

[0200] Therefore, the second processor 732b can transmit the periodic subscription request for the first message to the first processor 732a.

[0201] In particular, the second processor 732b can transmit subscription requests via inter-processor communication (IPC). Thus, inter-processor communication can be performed.

[0202] On the other hand, the first processor 732a periodically receives CAN communication data from at least one CAN communication ECU 618, etc.

[0203] For example, the first processor 732a periodically receives a first message predefined in the CAN database (DB) from at least one CAN communication ECU 618, etc.

[0204] For example, the periodic first message, as sensor data, can include vehicle speed information or location information, etc.

[0205] As another example, the periodic first message may include at least one of the following: vehicle direction information, vehicle location information (GPS information), vehicle angle information, vehicle acceleration information, vehicle tilt information, vehicle forward / reverse information, battery information, fuel information, tire information, headlight information, vehicle interior temperature information, and vehicle interior humidity information.

[0206] On the other hand, the first processor 732a can filter the first message receiving the subscription request from the periodically received CAN communication data or the first message, and transmit the first message receiving the subscription request to the second processor 732b through inter-processor communication.

[0207] On the other hand, the first processor 732a may, according to its internal operation, process the periodically received CAN communication data or the first message in the first message for which no subscription request has been received, separately, without transmitting it to the second processor 732b.

[0208] Specifically, when the first processor 732a receives the first message of receiving a subscription request, it stores or manages it in the first cache memory 735a. Upon receiving the first message, it compares it with the value stored in the first cache memory 735a. If the difference is greater than or equal to a predetermined value, the first message can be transmitted to the second processor 732b through inter-processor communication.

[0209] On the other hand, when the first processor 732a receives the first message of receiving a subscription request, it stores or manages it in the first cache memory 735a, and when it receives the first message, it compares it with the value stored in the first cache memory 735a. If the difference is greater than or equal to a predetermined value, the first message can be transmitted to the second processor 732b through inter-processor communication using the shared memory 508.

[0210] For example, when the first processor 732a receives the first message, it compares it with the value stored in the first cache memory 735a. If they are different, the first message can be transmitted to the second processor 732b through inter-processor communication using the shared memory 508.

[0211] As another example, when the first processor 732a receives the first message, it compares it with the value stored in the first cache memory 735a. If they are the same, the first message does not need to be transmitted to the second processor 732b.

[0212] This minimizes the use of cache memory or buffers for the same data, thereby reducing latency and enabling high-speed data transfer during inter-processor communication.

[0213] On the other hand, the second processor 732b can store the first message in the second cache memory 735b when it first receives the first message, and update the second cache memory 735b when it receives the first message again. This reduces latency and enables high-speed data transmission during inter-processor communication.

[0214] On the other hand, the second processor 732b can generate a thread for the timer 737 based on the first message received. Whenever the thread expires, it can transfer the value of the second cache memory 735b to the Ethernet processor or the Ethernet communication ECU 626. This reduces latency and enables high-speed data transfer during inter-processor communication.

[0215] On the other hand, during a period when the second processor 732b is not performing inter-processor communication and has not received the first message, it can transfer the value of the second cache memory 735b to the Ethernet processor or the Ethernet communication ECU 626.

[0216] That is, if the value of the first message subscribed to does not change during the period, the value stored in the cache memory of the second processor 732b can be transferred to the Ethernet processor 626 without inter-processor communication.

[0217] This minimizes the use of the IPC buffer within the shared memory 508, which operates in FIFO (First-In-First-Out) mode. Furthermore, by keeping the use of the IPC buffer to a minimum, data such as the first or second message can be transmitted quickly via inter-processor communication.

[0218] On the other hand, the second processor 732b can transfer the updated value of the second cache memory 735b to the Ethernet processor or Ethernet communication ECU 626 during the cycle of performing inter-processor communication and receiving the first message. This reduces latency and enables high-speed data transmission during inter-processor communication.

[0219] On the other hand, the shared memory 508 can transfer data between the first processor 732a and the second processor 732b during inter-processor communication via a first queue PTb and a second queue PTa with a higher priority than the first queue PTb.

[0220] In particular, even if the number of events used for inter-processor communication increases, the shared memory 508 can transmit only the data corresponding to the events allocated to the second queue PTA via the second queue PTA. This ensures the real-time transmission of high-priority events in inter-processor communication.

[0221] For example, the first queue PTb can be a normal priority queue, and the second queue PTa can be a high priority queue.

[0222] Specifically, the shared memory 508 can transfer most of the data through the first queue PTb during inter-processor communication.

[0223] However, the shared memory 508 can enable time-sensitive data to be transmitted without delay only through a second queue PTa, which has a higher priority than the first queue PTb.

[0224] For example, time-sensitive and critical data could be speed data or location information data.

[0225] That is, the shared memory 508 can transmit speed data or position information data between the first processor 732a and the second processor 732b via the second queue PTA. This ensures the real-time transmission of high-priority speed data or position information data during inter-processor communication.

[0226] On the other hand, the first processor 732a or the second processor 732b can manage a list including applications that can utilize the second queue PTA.

[0227] For example, the second processor 732b can include and manage applications used for speed information display as applications that can utilize the second queue PTa within the second list 738b.

[0228] On the other hand, in order to utilize the real-time data transmission of the second queue PTA, it is preferable to control the operation to a minimum to avoid repetition of scenarios or applications.

[0229] As described above, by performing real-time data transmission using the second queue PTa for time-sensitive and important data, the real-time transmission of high-priority events can be guaranteed in inter-processor communication.

[0230] On the other hand, the shared memory 508 allocates at least two queues, which can reduce latency in inter-processor communication and perform high-speed data transfer.

[0231] The accompanying drawings illustrate a first manager 734a within the first processor 732a managing a first list 738a, which is a whitelist, and a second manager 734b within the second processor 732b managing a second list 738b, which is also a whitelist. This ensures real-time transmission of high-priority events during inter-processor communication.

[0232] Figures 8a to 8d This is a diagram showing various examples of communication devices for vehicles.

[0233] Figure 8a An example of a vehicle communication device according to an embodiment of the present disclosure is shown.

[0234] Referring to the accompanying drawings, the vehicle communication device 800a of this disclosure embodiment includes signal processing devices 170a1, 170a2, and a plurality of regional signal processing devices 170Z1 to 170Z4.

[0235] On the other hand, two signal processing devices 170a1 and 170a2 are illustrated in the accompanying drawings, but this is illustrated for backup purposes, and there may be only one.

[0236] On the other hand, signal processing devices 170a1 and 170a2 can also be named HPC (High Performance Computing) signal processing devices.

[0237] Multiple signal processing devices 170Z1 to 170Z4 can be arranged in each region (Z1 to Z4) to transmit sensor data to signal processing devices 170a1 and 170a2.

[0238] Signal processing devices 170a1 and 170a2 receive data via wired means from a plurality of regional signal processing devices 170Z1 to 170Z4 or communication device 120.

[0239] The accompanying drawings illustrate data exchange between signal processing devices 170a1, 170a2 and a plurality of regional signal processing devices 170Z1 to 170Z4 via wired communication, and data exchange between signal processing devices 170a1, 170a2 and server 400 via wireless communication. However, data exchange between communication device 120 and server 400 can be based on wireless communication, and data exchange between signal processing devices 170a1, 170a2 and communication device 120 can be based on wired communication.

[0240] On the other hand, the data received by the signal processing devices 170a1 and 170a2 may include camera data or sensor data.

[0241] For example, the sensor data inside the vehicle includes at least one of the following: wheel speed data, vehicle direction data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle tilt data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, vehicle interior humidity data, vehicle exterior radar data, and vehicle exterior lidar data.

[0242] On the other hand, camera data can include data from external vehicle cameras and data from internal vehicle cameras.

[0243] On the other hand, signal processing devices 170a1 and 170a2 can run multiple virtual machines 820, 830, and 840 based on safety.

[0244] In the accompanying drawings, it is illustrated that the processor 175 within the signal processing device 170a runs a virtual machine monitor 505, and runs a first virtual machine 820 to a third virtual machine 840 on the virtual machine monitor 505 according to the Automotive Safety Integrity Level (ASIL).

[0245] The first virtual machine 820 may be a virtual machine corresponding to QM (Quality Management), which is the lowest level of safety in the Automotive Safety Integrity Level (ASIL) and is not a mandatory level.

[0246] The first virtual machine 820 can run operating system 822, container runtime 824 on operating system 822, and containers 827 and 829 on container runtime 824.

[0247] The second virtual machine 830 can be a virtual machine corresponding to ASIL A or ASIL B, where the sum of Severity, Exposure, and Controllability in the Automotive Safety Integrity Level (ASIL) is 7 or 8.

[0248] The second virtual machine 830 can run operating system 832, container runtime 834 on operating system 832, and containers 837 and 839 on container runtime 834.

[0249] The third virtual machine 840 can be a virtual machine corresponding to ASIL C or ASIL D, wherein the sum of the severity, exposure, and controllability in the Automotive Safety Integrity Level (ASIL) is 9 or 10.

[0250] On the other hand, ASIL D can correspond to the level requiring the highest level of security.

[0251] The third virtual machine 840 can run the secure operating system 842 and the application 845 on the operating system 842.

[0252] On the other hand, the third virtual machine 840 can also run the secure operating system 842, the container runtime 844 on the secure operating system 842, and the container 847 on the container runtime 844.

[0253] On the other hand, unlike the attached diagram, the third virtual machine 840 can also run using an additional core other than processor 175. This will be discussed in reference... Figure 8b This will be discussed later.

[0254] On the other hand, the processor 175 running the first virtual machine 820 to the third virtual machine 840 can be connected to... Figure 7 The second processor corresponds to the 732b.

[0255] Figure 8b Another example of a vehicle communication device according to an embodiment of this disclosure is shown.

[0256] Referring to the accompanying drawings, the vehicle communication device 800b of this disclosure embodiment includes signal processing devices 170a1, 170a2, and a plurality of regional signal processing devices 170Z1 to 170Z4.

[0257] Figure 8b Vehicle communication device 800b and Figure 8a The vehicle communication device 800a is similar, but the signal processing device 170a1 is... Figure 8a There are some differences between the signal processing device 170a1 and the signal processing device 170a1.

[0258] Based on this difference, the signal processing device 170a1 may be provided with a processor 175 and a second processor 177.

[0259] The processor 175 within the signal processing device 170a1 runs a virtual machine monitor 505 and runs a first virtual machine 820 to a second virtual machine 830 on the virtual machine monitor 505 according to the Automotive Safety Integrity Level (ASIL).

[0260] The first virtual machine 820 can run operating system 822, container runtime 824 on operating system 822, and containers 827 and 829 on container runtime 824.

[0261] The second virtual machine 830 can run operating system 832, container runtime 834 on operating system 832, and containers 837 and 839 on container runtime 834.

[0262] On the other hand, the second processor 177 within the signal processing device 170a1 can run the third virtual machine 840.

[0263] The third virtual machine 840 can run the secure operating system 842, the AUTOSAR (Automotive Open Systems Architecture) 845 on the operating system 842, and the application 845 on the AUTOSAR 845. That is, it is compatible with... Figure 5 Unlike other operating systems, it can also run AUTOSAR 846 on the 842 operating system.

[0264] On the other hand, the third virtual machine 840 can also be used with Figure 8a Similarly, run Secure Operating System 842, Container Runtime 844 on Secure Operating System 842, and Container 847 on Container Runtime 844.

[0265] On the other hand, preferably, unlike the first virtual machine 820 to the second virtual machine 830, the third virtual machine 840, which requires a high level of security, runs on the second processor 177, which is another core or another processor.

[0266] On the other hand, the processor 175 running the first virtual machine 820 to the second virtual machine 830 can correspond to Figure 7 The second processor 732b, running the third virtual machine 840, can correspond to the second processor 177. Figure 7 The first processor is 732a.

[0267] on the other hand, Figure 8a and Figure 8b The signal processing devices 170a1 and 170a2 can activate the backup signal processing device 170a2 when the first signal processing device 170a malfunctions.

[0268] In contrast, signal processing devices 170a1 and 170a2 can also operate simultaneously, with the first signal processing device 170a operating as the primary device and the second signal processing device 170a2 operating as the secondary device. For this, refer to... Figure 8c and Figure 8d Please provide an explanation.

[0269] Figure 8c Another example of a vehicle communication device according to an embodiment of the present disclosure is shown.

[0270] Referring to the accompanying drawings, the vehicle communication device 800c of this disclosure includes signal processing devices 170a1, 170a2, and a plurality of regional signal processing devices 170Z1 to 170Z4.

[0271] On the other hand, two signal processing devices 170a1 and 170a2 are illustrated in the accompanying drawings, but this is illustrated for backup purposes, and there may be only one.

[0272] On the other hand, signal processing devices 170a1 and 170a2 can also be named HPC (High Performance Computing) signal processing devices.

[0273] Multiple signal processing devices 170Z1 to 170Z4 can be arranged in each region Z1 to Z4 to transmit sensor data to signal processing devices 170a1 and 170a2.

[0274] Signal processing devices 170a1 and 170a2 receive data via wired means from a plurality of regional signal processing devices 170Z1 to 170Z4 or communication device 120.

[0275] The accompanying drawings illustrate data exchange between signal processing devices 170a1, 170a2 and a plurality of regional signal processing devices 170Z1 to 170Z4 based on wired communication, and data exchange between signal processing devices 170a1, 170a2 and server 400 based on wireless communication. However, data exchange between communication device 120 and server 400 can be based on wireless communication, and data exchange between signal processing devices 170a1, 170a2 and communication device 120 can be based on wired communication.

[0276] On the other hand, the data received by the signal processing devices 170a1 and 170a2 may include camera data or sensor data.

[0277] On the other hand, the processor 175 in the first signal processing device 170a1 of the signal processing devices 170a1 and 170a2 can run a virtual machine monitor 505, on which a safe virtual machine 860 and a non-safe virtual machine 870 can be run respectively.

[0278] On the other hand, the processor 17b5 in the second signal processing device 170a2 of the signal processing devices 170a1 and 170a2 can run a virtual machine monitor 505b, on which only a safety virtual machine 880 can be run.

[0279] In this way, the processing of safety is performed separately by the first signal processing device 170a1 and the second signal processing device 170a2, thus achieving improved stability and processing speed.

[0280] On the other hand, high-speed network communication can be performed between the first signal processing device 170a1 and the second signal processing device 170a2.

[0281] Figure 8d Another example of a vehicle communication device according to an embodiment of the present disclosure is shown.

[0282] Referring to the accompanying drawings, the vehicle communication device 800d of this disclosure embodiment includes signal processing devices 170a1, 170a2, and a plurality of regional signal processing devices 170Z1 to 170Z4.

[0283] Figure 8d Vehicle communication device 800d and Figure 8c The vehicle communication device 800c is similar, but the second signal processing device 170a2 is... Figure 8c There are some differences in the second signal processing device 170a2.

[0284] Figure 8d The processor 17b5 within the second signal processing device 170a2 can run a virtual machine monitor 505b, on which a safe virtual machine 880 and a non-safe virtual machine 890 can be run respectively.

[0285] That is, with Figure 8c The difference lies in the fact that the processor 17b5 within the second signal processing device 170a2 also runs a non-safety virtual machine 890.

[0286] In this way, the processing of safety and non-safety is performed separately by the first signal processing device 170a1 and the second signal processing device 170a2, thereby achieving improved stability and processing speed.

[0287] Figure 9a This is a diagram illustrating an example of a vehicle communication device according to an embodiment of the present disclosure.

[0288] Referring to the accompanying drawings, the vehicle communication device 900 of this embodiment is provided with a plurality of regional signal processing devices 170Z1 to 170Z4 and signal processing device 170.

[0289] At this time, the signal processing device 170 can be named HPC (High Performance Computing) signal processing device or central signal processing device.

[0290] Multiple area signal processing devices 170Z1 to 170Z4 are connected to signal processing device 170 by wired cables CB1 to CB4.

[0291] On the other hand, the multiple regional signal processing devices 170Z1 to 170Z4 are connected by wired cables CBa to CBd respectively.

[0292] On the other hand, a storage device is provided within the signal processing apparatus 170 of the present disclosure embodiment ( Figure 9b (925).

[0293] On the other hand, if sensor data is transmitted from at least one of the plurality of regional signal processing devices 170Z1 to 170Z4 to signal processing device 170, multi-path routing is preferably performed to prevent network bottlenecks.

[0294] Specifically, from storage devices ( Figure 9b The speed at which data is read from the 925 or sent to the storage device ( Figure 9b Since the speed at which data is written to the signal processing device 170 is faster than the network speed at which sensor data is transmitted from at least one of the multiple regional signal processing devices 170Z1 to 170Z4 to the signal processing device 170, it is preferable to perform multi-path routing to prevent network bottlenecks.

[0295] Therefore, the signal processing apparatus 170 of this embodiment can perform multi-path routing based on Software-Defined Network (SDN). This ensures a stable network environment for data reading or writing to the storage device 925.

[0296] Figure 9b This is a diagram illustrating another example of a vehicle communication device according to an embodiment of the present disclosure.

[0297] Referring to the accompanying drawings, the vehicle communication device 900b of this embodiment is provided with a plurality of regional signal processing devices 170Z1 to 170Z4 and a signal processing device 170.

[0298] Multiple area signal processing devices 170Z1 to 170Z4 are connected to signal processing device 170 by wired cables CB1 to CB4.

[0299] On the other hand, the multiple regional signal processing devices 170Z1 to 170Z4 can be connected by wired cables CBa to CBd respectively.

[0300] On the other hand, a signal processing apparatus 170 according to an embodiment of the present disclosure includes: a network controller 915 for controlling multipath routing of at least one of a plurality of regional signal processing apparatuses 170Z1 to 170Z4; and a storage device 925 for storing data received through multipath routing.

[0301] The signal processing apparatus 170 of one embodiment of the present disclosure may further include a storage device controller 920 for controlling the storage device 925.

[0302] The speed at which data is read from or written to the storage device 925 is faster than the network speed at which sensor data is transmitted from at least one of the plurality of regional signal processing devices 170Z1 to 170Z4 to the signal processing device 170. Therefore, multi-path routing is preferred to prevent network bottlenecks.

[0303] On the other hand, the network controller 915 controls itself to receive a portion of sensor data from the first area signal processing device 170Z1 among the plurality of area signal processing devices 170Z1 to 170Z4, and to receive or directly receive another portion of the sensor data via at least one area signal processing device 170Z1 to 170Z4 other than the first area signal processing device 170Z1.

[0304] This ensures a stable network environment for data reading or writing to the storage device 925. Furthermore, multiple paths can be used to transmit data to the storage device 925. On the other hand, data can be transmitted by dynamically changing the network configuration.

[0305] The sensor data at this time may include at least one of the following: camera data, lidar data, radar data, vehicle direction data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle tilt data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, and vehicle interior humidity data.

[0306] In the accompanying drawings, camera data from camera 195a and lidar data from lidar sensor 196 are illustrated as being input to the first area signal processing device 170Z1, and the camera data and lidar data are transmitted to the signal processing device 170 via the second area signal processing device 170Z2 and the third area signal processing device 170Z3, etc.

[0307] On the other hand, the network controller 915 can be controlled to directly receive non-time-critical data from the sensor data of the first area signal processing device 170Z1.

[0308] In the accompanying drawings, it is illustrated that non-time-critical data (Non-Time Critical Data) from sensor data from the first area signal processing device 170Z1 is directly received by the signal processing device 170.

[0309] On the other hand, the network controller 915 can be controlled to receive or directly receive time-critical data from sensor data from the first area signal processing device 170Z1 via at least one area signal processing device 170Z1 to 170Z4 other than the first area signal processing device 170Z1.

[0310] In the accompanying drawings, it is illustrated that a portion of the time-critical data from the sensor data of the first area signal processing device 170Z1 is transmitted to the signal processing device 170 via the second signal processing device 170Z2, another portion of the time-critical data from the sensor data of the first area signal processing device 170Z1 is transmitted to the signal processing device 170 via the third signal processing device 170Z3, and yet another portion is directly received by the signal processing device 170.

[0311] At this time, the network controller 915 can be configured to make the network speed or bandwidth of the path via at least one of the regional signal processing devices 170Z1 to 170Z4 other than the first regional signal processing device 170Z1 greater than the network speed or bandwidth of the path directly transmitted to the signal processing device 170.

[0312] This ensures a stable network environment for data reading or writing to the storage device 925. Furthermore, multiple paths can be used to transfer data to the storage device 925.

[0313] On the other hand, the storage device controller 920 can control the storage device 925 to store all time-critical data and non-time-critical data received through the network controller 915.

[0314] On the other hand, the network controller 915 can monitor the network topology with multiple area signal processing devices 170Z1 to 170Z4 and perform bandwidth allocation and path setting for multi-path routing based on the monitoring.

[0315] On the other hand, the network controller 915 can set the bandwidth based on the path capacity when configuring paths for multipath routing.

[0316] On the other hand, the network controller 915 can perform multi-path routing based on Software Defined Network (SDN).

[0317] On the other hand, the network controller 915 does not perform path re-search during multi-path routing. This ensures a stable network environment for data reading or writing to the storage device 925.

[0318] On the other hand, various services operating in the multiple area signal processing devices 170Z1 to 170Z4 of the vehicle or within the signal processing device 170 may be forged or tampered with due to external attacks or the like.

[0319] Therefore, this disclosure proposes a scheme that can stably perform service verification. Furthermore, it proposes a scheme that can stably run verified services. References to this are provided below. Figure 10a Please provide an explanation.

[0320] Figure 10a This is a flowchart illustrating an example of an operation method of a vehicle communication device according to an embodiment of the present disclosure.

[0321] Referring to the accompanying drawings, the processor 175z within the area signal processing unit 170Z of the vehicle communication device 900 can request verification of the first service when running the first service (S1010).

[0322] For example, the processor 175z1 within the first area signal processing device 170z1 can transmit the verification request of the first service to the security inspection unit 1115z1 running internally when running the first service.

[0323] At this time, the security inspection unit 1115z1 can be a hash checker that checks the hash value as security data.

[0324] On the other hand, the processor 175z in the area signal processing device 170z determines whether there is secure data in the storage device 925z in the area signal processing device 170z in order to verify the first service (S1015). If there is, the processor 175z transmits the verification request to the central signal processing device 170 (S1020).

[0325] For example, the processor 175z1 in the first area signal processing device 170z1 can determine whether there is secure data in the storage device 925z1 in the first area signal processing device 170z1 in order to verify the first service, and if there is secure data, transmit the verification request to the central signal processing device 170.

[0326] Then, if a verification request for a service running in the regional signal processing unit 170z is received, the processor 175 in the central signal processing unit 170 sets up a verification path using at least a portion of the plurality of regional signal processing units 170z1 to 170z4 for service verification, and distributes the set verification path (S1022).

[0327] For example, if a verification request for a first service running in the first area signal processing device 170z1 is received, the processor 175 in the central signal processing device 170 may set a verification path using at least a portion of the plurality of area signal processing devices 170z1 to 170z4 for the verification of the first service, and transmit the set verification path to the plurality of area signal processing devices 170z1 to 170z4.

[0328] Then, the regional signal processing units 170Z1 to 170Z4 and the central signal processing unit 170 update the distributed verification paths (S1024).

[0329] For example, the regional signal processing devices 170z1 to 170z4 and the central signal processing device 170 can store or update the verification paths distributed from the central signal processing device 170 in the respective storage devices 925z1 to 925z4, the secure storage units 1107z1 to 1107z4 within 925, and the hash databases 1105z1 to 1105z4 and 1105 within 1107.

[0330] Then, the processor 175 within the central signal processing unit 170 is controlled to transmit a verification execution command based on the verification path to the regional signal processing unit 170z (S1026).

[0331] For example, the processor 175 within the central signal processing unit 170 can be controlled to transmit a verification execution command based on the verification path to the first area signal processing unit 170z1.

[0332] At this time, the processor 175 within the central signal processing unit 170 can transmit a verification data packet including a verification execution command based on the verification path.

[0333] On the other hand, the verification data packet can also include the verification path, service identifier, and service security data. This enables stable service verification.

[0334] Then, the processor 175z within the regional signal processing unit 170z can be controlled to perform verification according to the verification path when receiving a verification execution command.

[0335] That is, the processor 175z in the area signal processing device 170Z included in the verification path in each area signal processing device 170z1 to 170z4 can perform verification sequentially in accordance with the verification path (S1028).

[0336] At this time, the processor 175z in the area signal processing device 170z can use the security data stored in the internal storage device 925z to perform verification and output the verification result data based on the performed verification.

[0337] For example, the processor 175z within the regional signal processing unit 170z that performs each verification can transmit the verification result data to the regional signal processing unit that performs the next verification.

[0338] Then, the processor 175z within the regional signal processing unit 170z can determine whether the verification result data executed on each path is valid upon completion of verification (S1030). If valid, the verification result data executed based on the verification path is transmitted to the central signal processing unit 170. This enables stable execution of service verification. In particular, it enables stable execution of verification of binary files that serve as the service's runtime files.

[0339] On the other hand, the verification result data can include the verification result data for each verification path.

[0340] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to receive verification result data executed based on the verification path, and transmit information on whether the service is running to the regional signal processing unit 170z based on the verification result data.

[0341] For example, the processor 175 in the central signal processing unit 170 can be controlled to receive the verification result data based on the verification path, confirm whether the verification is passed on the entire verification path, and then transmit the information on whether the first service is running to the first area signal processing unit 170z1.

[0342] Specifically, the processor 175 within the central signal processing unit 170 can be controlled to receive verification result data from the first area signal processing unit 170z1 if verification is completed based on the verification path, and transmit the information on whether the first service is running to the first area signal processing unit 170z1 based on the verification result data.

[0343] On the other hand, the processor 175z within the regional signal processing device 170z can be controlled to run the corresponding service if the service operation status information received from the central signal processing device 170 is service operation information (S1032).

[0344] Furthermore, the processor 175z within the regional signal processing unit 170z can be controlled to use the network to run the corresponding service (S1034). Thus, the verified service can be run stably.

[0345] For example, the processor 175z1 within the first area signal processing device 170z1 can be controlled to run the first service if the service operation status information received from the central signal processing device 170 is service operation information.

[0346] Furthermore, the processor 175z1 within the first area signal processing unit 170z1 can be controlled to use the network to run corresponding services. Thus, the verified services can run stably.

[0347] On the other hand, in step S1030, if all the verification result data executed is invalid, the processor 175z in the area signal processing device 170z executes the unverification process (S1021). As a result, the unverified service will not be run.

[0348] Figure 10b This is a flowchart illustrating an example of an operation method of a signal processing apparatus according to an embodiment of the present disclosure.

[0349] Referring to the attached diagram, the processor 175 within the central signal processing unit 170 detects network traffic (S1050).

[0350] For example, the processor 175 within the central signal processing unit 170 can monitor the traffic of the SDN network.

[0351] Then, the processor 175 within the central signal processing unit 170 controls the determination of whether there is a verification request for a new service in one of the plurality of regional signal processing units 170z1 to 170z4 (S1053). If there is a verification request for a new service, the processor sets a verification path using at least a portion of the plurality of regional signal processing units 170z1 to 170z4 and performs verification based on the set verification path (S1060).

[0352] For example, if a verification request for a new first service running in the first area signal processing unit 170z1 is received, the processor 175 in the central signal processing unit 170 sets up a verification path using at least a portion of the plurality of area signal processing units 170z1 to 170z4 for the verification of the first service.

[0353] Furthermore, the processor 175 within the central signal processing unit 170 is controlled to transmit a verification execution command based on the verification path to the first area signal processing unit 170z1.

[0354] Therefore, the processor 175z1 in the first area signal processing device 170z1 can be controlled to perform verification according to the verification path when receiving the verification execution command.

[0355] For example, the processors 175z1 to 170z4 in the signal processing devices 170z1 to 170z4 corresponding to the verification path can use the security data stored in the internal storage device 925z to perform verification and output the verification result data based on the performed verification.

[0356] On the other hand, the processors 175z1 to 170z4 in each area signal processing device 170z1 to 170z4 can determine whether the verification result data from the area signal processing device 170z1 to 170z4 or the central signal processing device 170 from the previous path is valid. If it is valid, the verification can be performed and the verification result data based on the performed verification can be output.

[0357] On the other hand, the area signal processing unit 170z1 to 170z4 or the central signal processing unit 170 corresponding to the last path in the verification path can determine whether the verification result data of the previous path is valid. If it is valid, the verification can be performed, and the verification result data based on the verification is transmitted to the central signal processing unit 170.

[0358] On the other hand, the processor 175 in the central signal processing unit 170 can be controlled to receive the verification result data based on the verification path, confirm whether the verification is passed on the entire verification path, and then transmit the information on whether the first service is running to the first area signal processing unit 170z1.

[0359] Then, the processor 175z1 within the first area signal processing unit 170z1 can be controlled to run the first service if the service operation status information received from the central signal processing unit 170 is service operation information. This enables the verification of new services and their stable operation.

[0360] On the other hand, in step S1053, if the service related to the verification request is not a new service, the processor 175 within the central signal processing unit 170 may execute step S1056.

[0361] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to determine whether network traffic has surged to a reference value or higher (S1056), and if so, to execute step S1060. Thus, in the event of a surge in network traffic, it is possible to determine whether to run the corresponding service through verification.

[0362] On the other hand, even if the service has passed the verification request and is running, whether it is a new service or an existing service, step S1056 can be executed.

[0363] That is, even if a service has passed the verification request and is running, whether it is a new service or an existing service, if network traffic surges and exceeds a reference value, the processor 175 in the central signal processing unit 170 can perform a re-verification through step S1060. Thus, in the event of a surge in network traffic, it is possible to determine whether the service binary is normal through verification, thereby determining whether the service should continue to run.

[0364] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to determine whether the network controller 1117 generates unknown network traffic (S1065), and if so, execute step S1060. Thus, even in the case of unknown network traffic, it is possible to determine whether to run the corresponding service through verification.

[0365] Then, in step S1065, if unknown network traffic is generated, the processor 175 within the central signal processing unit 170 executes an unverifiable process (S1070). Thus, it can be determined that the network is operating normally.

[0366] Ultimately, according to Figure 10b The processor 175 within the central signal processing unit 170 can be controlled to set up an authentication path for the corresponding service and transmit authentication execution commands based on the authentication path if a new service is added, network traffic surges above a allowed level, or unknown network traffic is generated. This enables stable service authentication. In particular, it enables stable authentication of binary files that serve as the service's runtime environment.

[0367] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to set up a second verification path for the verification of the second service if, during the operation of the second service, the specified network traffic surges above the allowable value or generates unknown network traffic, receive the second verification result data executed based on the second verification path, and transmit the operation continuity information or operation termination information of the second service based on the second verification result data.

[0368] This enables the stable execution of verification for the second service. In particular, it can verify the binary file of the second service that experiences a surge in traffic or generates abnormal traffic. If the verification fails, even if the second service is running, it will be determined to be a forged or tampered service binary file, and the second service will be terminated.

[0369] Specifically, the processor 175 within the central signal processing unit 170 can be controlled to, during the operation of the second service in the first area signal processing unit 170z1, if the specified network traffic surges above a permissible value or unknown network traffic is generated, establish a second verification path for the verification of the second service, receive second verification result data executed based on the second verification path, and transmit the operation continuity information or operation termination information of the second service to the first area signal processing unit 170z1 based on the second verification result data. This enables stable execution of the second service verification. In particular, it enables the verification of the binary file serving as the runtime file for the second service and maintains a stable vehicle system.

[0370] Figure 11 This is an example of an internal block diagram of a signal processing apparatus and a region signal processing apparatus according to embodiments of the present disclosure.

[0371] Referring to the accompanying drawings, the processor 175 within the central signal processing unit 170 can run service 1119 and network controller 1117. In this case, the network controller 1117 can be an SDN controller.

[0372] For example, network controller 1117 may include a security inspection unit 1115 for inspecting security data of services.

[0373] At this time, the security inspection unit 1115z1 can be a hash checker that checks the hash value as security data.

[0374] On the other hand, the storage device 925 within the central signal processing device 170 can store security data of the central signal processing device 170 or security data of a plurality of regional signal processing devices 170z1 to 170z4.

[0375] Therefore, the storage device 925 may be provided with a security storage section 1107 for storing security data of the central signal processing device 170 or security data of a plurality of regional signal processing devices 170z1 to 170z4.

[0376] On the other hand, the secure storage unit 1107 may be equipped with a hash database 1105 that stores hash values ​​as examples of secure data.

[0377] On the other hand, if the first service within the first area signal processing device 170z1 is updated, the storage device 925 within the central signal processing device 170 can receive and store security data related to the updated first service. This enables stable service verification.

[0378] On the other hand, the plurality of regional signal processing devices 170z1 to 170z4 may each be provided with processors 175z1 to 175z4 and storage devices 925z1 to 925z4.

[0379] On the other hand, the processors 175z1 to 175z4 within the signal processing devices 170z1 to 170z4 in each area can run services 1119z1 to 1119z4 and network switch managers 1117z1 to 1117z4. In this case, the network switch managers 1117z1 to 1117z4 can be SDN switch managers.

[0380] For example, network switch managers 1117z1 to 1117z4 may include security check units 1115z1 to 1115z4 for checking the security data of services.

[0381] At this time, the security inspection units 1115z1 to 1115z4z1 can be hash checkers that check the hash values ​​(HashValues) of security data.

[0382] On the other hand, the storage devices 925z1 to 925z4 in each area signal processing device 170z1 to 170z4 can store the security data of the central signal processing device 170 or the security data of each area signal processing device 170Z1 to 170Z4.

[0383] Therefore, storage devices 925z1 to 925z4 may be provided with secure storage units 1107z1 to 1107z4 for storing secure data of the central signal processing unit 170 or secure data of multiple regional signal processing units 170z1 to 170z4.

[0384] On the other hand, the secure storage units 1107z1 to 1107z4 may be equipped with hash databases 1105z1 to 1105z4 that store hash values ​​as examples of secure data.

[0385] On the other hand, the accompanying drawings illustrate the operation of a new service 1120z3 within the third area signal processing unit 170Z3.

[0386] Additionally, the accompanying drawings illustrate the operation of a new network switch manager 1120z2 within the fourth area signal processing unit 170z4. In this case, the new network switch manager 1120z2 can be a new service.

[0387] On the other hand, the accompanying drawings illustrate the operation of a new network controller 1120 within the central signal processing unit 170. This new network controller 1120 can then be a new service.

[0388] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to set up a verification path using at least a portion of the plurality of regional signal processing units 170z1 to 170z4 if there is a verification request for a new service 1120z3 in the third regional signal processing unit 170z3, and perform verification based on the set verification path.

[0389] On the other hand, the processor 175 within the central signal processing unit 170 can run the new network controller 1120 in response to the verification request for the new service 1120z3.

[0390] On the other hand, if a verification request for a new service 1120z3 running in the third area signal processing unit 170z3 is received, the network controller 1117 in the central signal processing unit 170 can set up a verification path using at least a portion of the plurality of area signal processing units 170z1 to 170z4 for the verification of the new service 1120z3.

[0391] Furthermore, the network controller 1117 within the central signal processing unit 170 controls the transmission of verification execution commands based on the verification path to the third area signal processing unit 170z3.

[0392] Therefore, the network switch manager 1117z3 within the third area signal processing device 170z3 can be controlled to perform verification according to the verification path when receiving a verification execution command.

[0393] For example, the processors 175z1 to 170z4 in the signal processing devices 170z1 to 170z4 corresponding to the verification path or the processor 175 in the central signal processing device 170 can use the security data stored in the respective hash databases 1105z1 to 1105z4, 1105 to perform verification and output the verification result data based on the performed verification.

[0394] On the other hand, the processors 175z1 to 170z4 in each area signal processing device 170z1 to 170z4 or the processor 175 in the central signal processing device 170 can determine whether the verification result data from the area signal processing device 170z1 to 170z4 or the central signal processing device 170 of the previous path is valid. If it is valid, the verification is performed and the verification result data based on the verification is output.

[0395] On the other hand, the area signal processing unit 170z1 to 170z4 or the central signal processing unit 170 corresponding to the last path in the verification path can determine whether the verification result data of the previous path is valid. If it is valid, the verification is performed, and the verification result data based on the verification is transmitted to the central signal processing unit 170.

[0396] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to receive verification result data based on the verification path, confirm whether the verification has been passed along the entire verification path, and then transmit the information on whether the new service 1120z3 is running to the third area signal processing unit 170z3.

[0397] In particular, the security check unit 1115 running in the processor 175 within the central signal processing unit 170 can be controlled to confirm whether all verifications are valid throughout the entire verification path. If all verifications are valid, the information on whether the new service 1120z3 is running is transmitted to the third area signal processing unit 170Z3.

[0398] Then, the processor 175z3 within the third area signal processing unit 170z3 can be controlled to run the new service 1120z3 if the service operation status information received from the central signal processing unit 170 is service operation information. This allows the new service to be verified and run stably.

[0399] On the other hand, each hash database 1105, 1105z1 to 1105z4 is a key-value structure. The key can include binary size, and the value can include {hash value, hash validation paths}.

[0400] On the other hand, when there are N verification paths in total, the hash verification path can be composed of N+1 paths that are themselves the starting point and the ending point.

[0401] For example, a hash verification path can be composed of a set of (from_node, this_node, to_node).

[0402] On the other hand, if only the third area signal processing device 170z3, which is part of a plurality of area signal processing devices 170z1 to 170z4, is updated, the processor 175z3 within the third area signal processing device 170z3 can update the hash database 1105z3 within the third area signal processing device 170z3 and request the central signal processing device 170 to update the hash database.

[0403] Therefore, the processor 175 in the central signal processing unit 170 can receive update requests for the hash database, update the hash database 1105 accordingly, and request updates to the network switch managers 1117z1, 1117z2, and 1117z4 in other area signal processing units 175z1, 175z2, and 175z4.

[0404] Therefore, the network switch managers 1117z1, 1117z2, and 1117z4 within the signal processing devices 175z1, 175z2, and 175z4 in each area can update the hash database.

[0405] On the other hand, if there is a service that needs to be verified, each area signal processing unit 170z1 to 170z4 can send a verification request to the processor 175 in the central signal processing unit 170. The processor 175 in the central signal processing unit 170 can receive the transmitted verification data packet and perform verification according to the verification path based on the verification data packet.

[0406] At this time, the area signal processing unit 170z that performs the verification can transmit a verification data packet, including the verification result data, to the area signal processing unit used for the next verification.

[0407] On the other hand, the processor 175 within the central signal processing unit 170 can set the authentication path for the first service based on network traffic, security level, or the type of sensor data or service. This is explained in the following reference. Figure 12 Please provide an explanation.

[0408] Figures 12 to 14 yes Figure 11 The diagram referenced in the action instructions.

[0409] Figure 12 An example of verifying the path is shown.

[0410] Referring to the accompanying drawings, the processor 175 within the central signal processing unit 170 is configured to, if a new first service verification request is received from the third area signal processing unit 170z3, set a verification path utilizing at least a portion of the plurality of area signal processing units 170z1 to 170z4 for the verification of the first service, and transmit a verification execution command based on the verification path to the third area signal processing unit 170z3.

[0411] For example, the processor 175 within the central signal processing unit 170 can set the verification path for the first service based on network traffic, security level, or the type of sensor data or service.

[0412] In the accompanying drawings, the verification path of the first service is illustrated as the third area signal processing device 170z3, the first area signal processing device 170z1, the central signal processing device 170, the second area signal processing device 170z2, the fourth area signal processing device 170z4, and the third area signal processing device 170z3.

[0413] First, the third area signal processing unit 170z3 receives a verification execution command based on the verification path from the central signal processing unit 170, and performs verification using the security data in the security storage unit 1107z3.

[0414] Then, the third area signal processing device 170z3 transmits the verification data packet PTHa to the first area signal processing device 170z1.

[0415] The verification data packet PTHa can include the verification path, verification result data, service identifier, etc.

[0416] Then, the first area signal processing device 170z1 performs verification using the verification data packet PTHa and the security data in the security storage unit 1107z1.

[0417] Then, the first area signal processing unit 170z1 transmits the verification data packet PTHb to the central signal processing unit 170.

[0418] On the other hand, the central signal processing unit 170 performs verification using the verification data packet PTHb and the security data in the security storage unit 1107.

[0419] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to perform verification based on the security data related to the first service stored in the security storage unit 1107 within the storage device 925 if the verification path includes the central signal processing unit 170, and transmit the verification result data to the first area signal processing unit 170z1 or other area signal processing units 170z.

[0420] Then, the central signal processing unit 170 transmits the verification data packet PTHc to the second area signal processing unit 170z2.

[0421] On the other hand, the second area signal processing device 170z2 performs verification using the verification data packet PTHc and the security data in the security storage unit 1107z2.

[0422] Then, the second area signal processing device 170z2 transmits the verification data packet PTHd to the fourth area signal processing device 170z4.

[0423] On the other hand, the fourth area signal processing device 170z4 performs verification using the verification data packet PTHd and the security data in the security storage unit 1107z4.

[0424] Then, the fourth area signal processing unit 170z4 transmits the verification data packet PTHe to the third area signal processing unit 170z3.

[0425] On the other hand, the third area signal processing device 170z3 performs verification using the verification data packet PTHe and the security data in the security storage unit 1107z3.

[0426] Then, the third area signal processing unit 170z3 transmits the verification data packet to the central signal processing unit 170.

[0427] On the other hand, the central signal processing unit 170 can extract the verification result data from the verification data packet from the third area signal processing unit 170z3, confirm whether the verification is successful throughout the entire path, and then transmit the information on whether the first service is running to the third area signal processing unit 170z3.

[0428] In particular, the security inspection unit 1115, which operates in the processor 175 within the central signal processing unit 170, can confirm whether all verifications along the entire verification path are valid. If all verifications are valid, the information on whether the first service is running is transmitted to the third area signal processing unit 170z3.

[0429] On the other hand, if the first service is operational, the third area signal processing device 170z3 can operate the first service.

[0430] As described above, verification is performed via multiple signal processing devices for the operation of the first service, thus preventing service implementation from being forged or tampered with due to external attacks or the like.

[0431] On the other hand, when setting the verification path for the first service, the processor 175 can exclude some area signal processing devices 170z, or set the path of signal processing device 170 multiple times, or only set some area signal processing devices 170z. This is explained in the following reference. Figure 13a Please provide an explanation.

[0432] Figure 13a Another example of a verification path is shown.

[0433] Referring to the accompanying drawings, the processor 175 within the central signal processing unit 170 is configured to, if a new first service verification request is received from the third area signal processing unit 170z3, set a verification path utilizing at least a portion of the plurality of area signal processing units 170z1 to 170z4 for the verification of the first service, and transmit a verification execution command based on the verification path to the third area signal processing unit 170z3.

[0434] For example, the processor 175 within the central signal processing unit 170 can set the verification path for the first service based on network traffic, security level, or the type of sensor data or service.

[0435] In the accompanying drawings, the verification path of the first service is illustrated as the third area signal processing device 170z3, the first area signal processing device 170z1, the central signal processing device 170, the fourth area signal processing device 170z4, and the third area signal processing device 170z3.

[0436] At this time, the processor 175 within the central signal processing unit 170 can exclude the second area signal processing unit 170z2, which is a partial area signal processing unit, when setting the verification path for the first service.

[0437] For example, if a problem occurs in the second area signal processing unit 170z2, or if it is in a suspended state, or if a suspicious situation is detected, the processor 175 within the central signal processing unit 170 can exclude the second area signal processing unit 170z2 from the verification path.

[0438] On the other hand, if the first service is to transmit sensor data to other area signal processing devices 170z, the processor 175 can set a verification path that excludes some of the area signal processing devices 170z among the plurality of area signal processing devices 170z1 to 170z4.

[0439] For example, if, during the transmission of first sensor data in use to other area signal processing devices for sensor fusion, there is an attempt to transmit to the second area signal processing device 170z2, which is an unauthorized path, due to an external attack, the processor 175 within the central signal processing device 170 may exclude the second area signal processing device 170z2 from the verification path, taking into account the possibility of a hacker attack.

[0440] Figure 13b This provides another example of a verification path.

[0441] Referring to the accompanying drawings, if a new first service verification request is received from the third area signal processing device 170z3, the processor 175 within the central signal processing device 170 can set up a verification path utilizing at least a portion of the plurality of area signal processing devices 170z1 to 170z4 for the verification of the first service.

[0442] In the accompanying drawings, the verification path of the first service is illustrated as the third area signal processing device 170z3, the central signal processing device 170, the first area signal processing device 170z1, the central signal processing device 170, the second area signal processing device 170z2, the central signal processing device 170, the fourth area signal processing device 170z4, the central signal processing device 170, and the third area signal processing device 170z3.

[0443] On the other hand, the processor 175 within the central signal processing unit 170 can be controlled to perform verification within the central signal processing unit 170 after verifying other regional signal processing units. Accordingly, it is possible to simultaneously process the status checks and verifications of each regional signal processing unit as a node.

[0444] On the other hand, if the safety level is low and the first service requires continuous verification at the signal processing device, or if the service is related to data generated on the vehicle display, the processor 175 within the central signal processing device 170 can be configured to set the path of the signal processing device 170 as a multiple verification path. This enables stable service verification.

[0445] Figure 13c This provides another example of a verification path.

[0446] Referring to the accompanying drawings, if a new first service verification request is received from the third area signal processing device 170z3, the processor 175 within the central signal processing device 170 can set up a verification path utilizing at least a portion of the plurality of area signal processing devices 170z1 to 170z4 for the verification of the first service.

[0447] In the accompanying drawings, the verification path of the first service is illustrated as the third area signal processing device 170z3, the first area signal processing device 170z1, the fourth area signal processing device 170z4, the third area signal processing device 170z3, and the central signal processing device 170.

[0448] Accordingly, the processor 175 within the central signal processing unit 170 can set only the regional signal processing units 170z1, 170z3, 170z4 and signal processing unit 170 related to the operation and driving of the first service as the verification path.

[0449] Furthermore, the status of the area signal processing devices 170z1, 170z3, 170z4 and signal processing device 170 required for the operation of the service can also be confirmed.

[0450] Figure 13d This provides another example of a verification path.

[0451] Referring to the accompanying drawings, the processor 175 within the central signal processing unit 170 can set only the third area signal processing unit 170z3 running the first service and the central signal processing unit 170 as the verification path.

[0452] For example, on the other hand, if the first service is updated without requiring other authentication paths, the processor 175 within the central signal processing unit 170 can be configured to include only the authentication path of the third area signal processing unit 170z3 and the central signal processing unit 170. This allows for stable and rapid service authentication.

[0453] As another example, if the first service generates camera-related data, especially camera-related data requiring immediate intervention such as when entering a highway, then the processor 175 can be configured to include only the verification path of the third area signal processing unit 170z3 and the central signal processing unit 170. This allows for stable and rapid service verification.

[0454] On the other hand, a third area signal processing apparatus 170z3 according to an embodiment of the present disclosure is provided with a processor 175z3 that runs a first service and a storage device 925z3 that stores security data related to the first service.

[0455] On the other hand, when the processor 175z3 within the third area signal processing unit 170z3 is running the first service, it sends a verification request for the first service to the signal processing unit 170. Based on the verification execution command and verification path received from the signal processing unit 170, it transmits verification result data to the area signal processing units 170z1, 170z2, 170z4 or the signal processing unit 170 corresponding to the next verification path. This enables stable execution of service verification. Furthermore, it allows for the rapid execution of services that have already completed verification.

[0456] On the other hand, the processor 175z3 within the third area signal processing device 170z3 can transmit the verification result data to the signal processing device 170 and receive information from the signal processing device 170 regarding whether the first service is running. Thus, the service that has completed verification can be run quickly.

[0457] On the other hand, the processor 175z3 within the third area signal processing unit 170z3 can transmit the verification data packet for verifying the first service to the area signal processing units 170z1, 170z2, 170z4 or signal processing unit 170 corresponding to the next verification path based on the verification execution command. This enables stable execution of service verification.

[0458] Figure 14 An example of verifying a data packet is shown.

[0459] Referring to the attached diagram, the verification data packet may include a header and a payload.

[0460] The header may include source port information, destination port information, header length information, and checksum information.

[0461] The payload may include service identifier information, service name information, hash value information, and hash value verification path information.

[0462] For example, in hash value verification path information, such as Figure 13a As shown, the first path can be the third area signal processing device 170z3, the second path can be the first area signal processing device 170z1, the third path can be the central signal processing device 170, the fourth path can be the fourth area signal processing device 170z4, and the fifth path can be the third area signal processing device 170z3. This enables stable service verification.

[0463] The preferred embodiments of this disclosure have been illustrated and described above. However, this disclosure is not limited to the specific embodiments described above. Various modifications can be made by those skilled in the art without departing from the spirit of the invention as claimed in the claims. Such modifications should not be understood separately from the technical concept or prospect of the invention.

Claims

1. A signal processing apparatus, wherein, include: The processor sets a verification path, which is used to verify at least one service running in a plurality of regional signal processing devices; as well as Storage device, storing verification path; The processor is configured to, if it receives a verification request for a first service running in a first area signal processing device among the plurality of area signal processing devices, set a verification path utilizing at least a portion of the plurality of area signal processing devices for the verification of the first service, and transmit a verification execution command based on the verification path to the first area signal processing device.

2. The signal processing apparatus according to claim 1, wherein, The processor is controlled to receive verification result data executed based on the verification path, and to transmit the running status information of the first service to the first area signal processing device based on the verification result data.

3. The signal processing apparatus according to claim 1, wherein, The processor controls the process such that if verification is completed based on the verification path and all verifications on the verification path are valid, then the information on whether the first service is running is transmitted to the first area signal processing device.

4. The signal processing apparatus according to claim 1, wherein, The processor is controlled to perform verification based on security data related to the first service stored in the storage device if the verification path includes the signal processing device, and to transmit the verification result data to the first area signal processing device or other area signal processing devices.

5. The signal processing apparatus according to claim 1, wherein, If the first service within the signal processing device of the first area shown is updated, the storage device receives and stores security data related to the updated first service.

6. The signal processing apparatus according to claim 1, wherein, The processor sets the verification path for the first service based on network traffic, security level, sensor data type, or service type.

7. The signal processing apparatus according to claim 1, wherein, When setting the verification path for the first service, the processor may exclude some regional signal processing devices, set the path of the signal processing devices multiple times, or set only some regional signal processing devices.

8. The signal processing apparatus according to claim 1, wherein, If the first service is a service that generates camera-related data, then the processor settings only include the first area signal processing device and the verification path of the signal processing device.

9. The signal processing apparatus according to claim 1, wherein, If the first service is a service that transmits sensor data to other regional signal processing devices, then the processor sets a verification path that excludes some of the regional signal processing devices among the plurality of regional signal processing devices.

10. The signal processing apparatus according to claim 1, wherein, If the first service is updated without requiring additional authentication paths, the processor settings include only the first area signal processing device and the authentication path of the signal processing device.

11. The signal processing apparatus according to claim 1, wherein, If the first service requires continuous verification on the signal processing device, or if the first service is a service related to data generated by the vehicle display, then the processor configures the path of the signal processing device to be a multiple verification path.

12. The signal processing apparatus according to claim 1, wherein, The processor transmits a verification data packet including a verification execution command based on the verification path; The verification data packet also includes the verification path, service identifier, and service security data.

13. The signal processing apparatus according to claim 1, wherein, The processor is provided with a network controller, which sets the verification path for verifying the service operated by at least one of the plurality of regional signal processing devices. The storage device is equipped with a secure storage section for storing the verification path.

14. The signal processing apparatus according to claim 1, wherein, The processor control is configured to, if a new service is added, or if network traffic surges above a permitted level, or if unknown network traffic is generated, set a verification path for verifying the corresponding service and transmit a verification execution command based on the verification path.

15. The signal processing apparatus according to claim 1, wherein, The processor control is configured to, if during the operation of the second service, the specified network traffic surges above the allowed value or generates unknown network traffic, set a second verification path for verifying the second service, receive second verification result data executed based on the second verification path, and transmit the operation continuity information or operation termination information of the second service based on the second verification result data.

16. A regional signal processing apparatus, wherein the regional signal processing apparatus exchanges data with a signal processing apparatus, wherein, The regional signal processing device includes: The processor runs the primary service; and Storage device for storing security data related to the first service; When the processor is running the first service, it transmits the verification request of the first service to the signal processing device, and transmits the verification result data to the area signal processing device corresponding to the next verification path or the signal processing device based on the verification execution command and verification path received from the signal processing device.

17. The area signal processing apparatus according to claim 16, wherein, The processor transmits the verification result data to the signal processing device and receives information from the signal processing device regarding whether the first service is running.

18. The area signal processing apparatus according to claim 16, wherein, The processor transmits the verification data packet used to verify the first service to the area signal processing device or the signal processing device corresponding to the next verification path based on the verification execution command.

19. The area signal processing apparatus according to claim 18, wherein, The verification data packet includes the verification path, service identifier, and service security data.

20. A vehicle communication device comprising the signal processing apparatus according to any one of claims 1 to 14.

Images