Control Apparatus Signal Segmentation for Secure Concurrent Programming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Manufacturers of commercial vehicle superstructures face complexity and expense in implementing control of the drive train for operating superstructures, and existing solutions lack simplicity, reliability, and security in configuring control devices for motor vehicles.
Innovation Solution
A method and computer program that allow for the selection of predefined signal representations, generating concurrent program processes, and restricting access to these signals for additional program processes, ensuring encapsulation and secure operation of operating and additional programs, with the ability to specify cycle time and priority for deterministic operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If additional program processes are allowed to access all signals from the control device, then the functionality and versatility of the control device is improved, but the reliability and security of the operating program is deteriorated due to potential interference and unauthorized manipulation
Solution Approach 1:
The patent segments the control device's signal space into two distinct groups: a first group of signals accessible by additional program processes and a second group accessible only by the operating program process. This segmentation is implemented through a configuration manager that creates separate access paths, ensuring that additional programs can access necessary signals for their functionality while the operating program maintains exclusive access to critical signals, thereby preventing interference and unauthorized manipulation.
2Productivity
If multiple program processes are allowed to run concurrently without access restrictions, then the productivity and ease of operation are improved, but the reliability deteriorates due to potential errors and interference between programs
Solution Approach 1:
The configuration manager acts as an intermediary between multiple program processes and the control device's signals. It mediates access by routing signals to appropriate programs based on predefined configurations, allowing concurrent execution while preventing direct interference. The configuration manager monitors and controls signal distribution, ensuring that each program receives only the signals it is authorized to access, thereby maintaining system reliability during concurrent operation.
3Reliability
If access to control device signals is restricted for additional program processes, then the reliability and security are improved, but the device complexity increases due to access control mechanisms
Solution Approach 1:
The configuration manager implements a self-service access control mechanism where access rights for additional program processes are predefined and automatically enforced without requiring continuous active management. The system automatically routes signals based on the configured access rules, reducing the need for complex real-time access control logic. This self-service approach maintains security while minimizing the operational complexity of the access control structure.
Data Source
Figure 1~2
Figure 3
AI summary
A respective representation of signals (SIG) from the control apparatus is provided for selection and a selection which has been made is prescribed as a prescribed first selection (SIG1) of signals (SIG) for the control apparatus. At least two representations of program processes which can be executed concurrently can be produced. At least one of these representations is produced as a respective representation of an operating program process (BPP), and at least one of these representations is produced as a respective representation of a supplementary program process (ZPP). Access by the at least one supplementary program process (ZPP) is limited to the prescribed first selection (SIG1) of signals (SIG) from the control apparatus. Program code (PROG) which can be executed on the control apparatus is produced on the basis of the prescribed first selection (SIG1) of signals (SIG) from the control apparatus and on the basis of the at least two representations produced for program processes which can be executed concurrently.