Vehicle Controller Runtime Isolation for Hot-Swap Program Testing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current digital controllers in vehicles require a lengthy software release cycle, including integration, testing, validation, and homologation, which delays the testing of new software features, such as perception algorithms, and cannot be dynamically adapted to changing conditions or locations, and the existing method of redundant hardware installation is costly and complex.
Innovation Solution
A controller with a computing apparatus that operates a control program and a test environment with a control test program, where the test environment is defined within a delimited runtime environment, allowing for quick 'hot swap' of program elements via a program interface, enabling real-time testing without affecting the control program, using shared libraries and potentially unapproved hardware, and maintaining safety by only allowing read access to vehicle functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a complete software release cycle including homologation is followed, then software safety and reliability are ensured, but the development time and deployment speed are heavily delayed
Solution Approach 1:
The patent segments the software system into a control program (production software) and a control test program (test software), each running in separate delimited runtime environments. This segmentation allows independent testing and validation of the test program without affecting the production system, enabling faster iteration cycles while maintaining safety through isolation.
Solution Approach 2:
The patent introduces a delimited runtime environment as an intermediary layer between the test program and the vehicle's control systems. This intermediary provides controlled access through defined interfaces, allowing the test program to evaluate new software elements without directly impacting the safety-critical production control program, thus enabling faster development while preserving reliability.
2Productivity
If redundant hardware components are installed for fast software deployment, then deployment speed is improved, but device complexity and space requirements increase
Solution Approach 1:
The patent merges the test environment and production environment into a single controller hardware platform. The control program and control test program coexist in the same physical controller but operate in separate delimited runtime environments, eliminating the need for redundant hardware while enabling fast software deployment and testing.
Solution Approach 2:
The controller is designed with multi-functionality to serve both production control and testing purposes. The same hardware platform can execute either the control program or the control test program by switching between delimited runtime environments, providing universal functionality without requiring separate redundant hardware systems.
3Measurement precision
If new program elements are tested in the production control program, then testing realism is improved, but system safety and stability are compromised
Solution Approach 1:
The patent implements dynamic switching between delimited runtime environments. The controller can dynamically transition between executing the control program and the control test program based on operational needs. This dynamic capability allows realistic testing conditions when the test program is active, while guaranteeing system stability when the production control program is active.
Solution Approach 2:
The patent prepares a delimited runtime environment for the control test program in advance as a safety cushion. Before testing new program elements, the system ensures that a isolated test environment is ready and configured. This prior preparation allows realistic testing to occur in a protected environment that cannot compromise the production system, even if testing reveals issues.
Data Source
AI summary
A controller for a vehicle (10) and a method of testing a program element of a vehicle function using the controller includes the controller having a computing device which runs a control program for controlling a vehicle function and a test environment with a control test program for testing at least one program element of a vehicle function. The test environment may be defined within a runtime environment delimited by the control program. The control test program may have a program interface which can integrate and run the at least one program element in a runtime of the control test program so that the control test program can test the at least one program element of the vehicle function.