Safety Isolation for Cross-ASIL Write and RFO Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in efficiently interacting data between devices at different Automotive Safety Integrity Levels (ASILs) in autonomous driving systems, leading to performance degradation and potential safety faults.
Innovation Solution
A safety isolation method and apparatus that analyzes access requests based on operation and safety level information to isolate write or read-for-ownership operations when safety conditions are not met, preventing devices at lower ASILs from affecting higher ASILs, ensuring efficient data interaction while maintaining functional safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices at different ASILs are strictly isolated in separate domains, then system safety is ensured, but data interaction efficiency deteriorates
Solution Approach 1:
The patent segments the isolation mechanism by operation type, creating different access paths for write/RFO operations versus other operations. Write/RFO operations from lower ASIL devices are routed through safety isolation apparatus to higher ASIL devices, while other operations can proceed directly. This segmentation allows safety-critical paths to be isolated while non-critical paths maintain high efficiency, resolving the contradiction between safety and interaction efficiency.
2Productivity
If write operations from lower ASIL devices are allowed to access higher ASIL devices, then data interaction efficiency improves, but safety faults may occur
Solution Approach 1:
The patent introduces a safety isolation apparatus as an intermediary component between lower ASIL devices and higher ASIL devices. This intermediary selectively intercepts write and RFO operations from lower ASIL devices, preventing them from directly accessing higher ASIL devices. The intermediary maintains safety integrity by blocking potentially harmful operations while still allowing controlled data interaction, thus resolving the contradiction between efficiency and safety.
3Reliability
If access requests are strictly isolated based on safety levels, then safety faults are prevented, but system performance deteriorates
Solution Approach 1:
The patent implements dynamic access control where the isolation behavior changes based on the operation type. For write and RFO operations, strict isolation is applied to prevent safety faults. For other operations (reads, etc.), the isolation is relaxed to allow direct access and improve performance. This dynamic adjustment of isolation strictness based on operation characteristics resolves the contradiction between safety fault prevention and system performance.
Data Source
Figure 1
Figure 2
Figure 3(a)~3(c)
AI summary
A safety isolation method and apparatus, and a computer system are disclosed. The safety isolation apparatus includes a request detection module and a selection module. The request detection module is configured to: receive an access request from an access device, where the access request carries operation information of the access device and safety level-related information of the access device, the safety level-related information of the access device indicates a safety level of the access device, and the operation information indicates an operation of the access device. The selection module is configured to: if the operation of the access device is a write operation or RFO operation, and the safety level of the access device meets a safety isolation condition, isolate the access request. The foregoing solution can implement safe data interaction between devices at a plurality of safety levels, to improve system performance.