Multi-Core ECU Security Job Segmentation for Execution Time Reduction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In electronic control units (ECUs) based on the AUTOSAR platform, asynchronously driven security algorithms face challenges with prolonged execution times due to high-priority tasks competing for resources, especially when executing time-consuming asymmetric key-based security jobs on the same core, which can starve other tasks of resources.

Innovation Solution

A method is implemented in a multi-core ECU structure that allocates high-priority security jobs to a security dedicated core and lower-priority jobs, such as asymmetric key-based algorithms, to a second core, allowing the latter to be executed by the cryptographic software driver, thereby reducing execution time and minimizing impact on other tasks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If security jobs are executed on the same core as other tasks, then resource utilization is improved, but execution time increases due to starvation from high-priority tasks

Engineering Contradiction:
Improveresource utilizationVSAvoidexecution time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system segments security jobs into two categories: synchronous security jobs executed on the first core and asynchronous security jobs executed on the second core. This segmentation allows security functions to be distributed across multiple cores, preventing starvation while maintaining resource utilization. The hardware cryptographic driver on the first core handles synchronous jobs, while the cryptographic software driver on the second core handles asynchronous jobs.

Inventive Principle:
Principle #1Segmentation

2Reliability

If asynchronous security jobs are executed on the security dedicated core, then security function capability is improved, but execution time increases when many jobs are queued

Engineering Contradiction:
Improvesecurity function capabilityVSAvoidexecution time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system segments asynchronous security jobs into those executed on the security dedicated core and those transferred to the second core. This segmentation prevents job queue overflow on the security dedicated core by offloading excess jobs to the second core, thereby reducing execution time while maintaining security function capability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system dynamically transfers asynchronous security jobs from the security dedicated core to the second core based on queue status and system conditions. This dynamic adjustment allows the system to adapt to varying job loads, preventing execution time delays while maintaining security functionality.

Inventive Principle:
Principle #15Dynamics

3Productivity

If time-consuming asymmetric key-based algorithms are executed on the same core, then security job completion is improved, but impact on other tasks increases

Engineering Contradiction:
Improvesecurity job completionVSAvoidimpact on other tasks
Core Design Contradiction:
ProductivityVSObject-generated harmful factors

Solution Approach 1:

The system segments asymmetric key-based security jobs and executes them on the second core rather than the first core. This segmentation isolates resource-intensive operations from other tasks on the first core, reducing negative impact while maintaining security job completion through the cryptographic software driver on the second core.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12093372B2Method carried out in electronic control unit of the multi-core structure, and apparatus implementing the same method
Publication Date: 2024.09.17 HYUNDAI AUTOEVER
  • US12093372B2 patent drawing
  • US12093372B2 patent drawing
  • US12093372B2 patent drawing

AI summary

Provided is a method performed in an electronic control unit of a multi-core structure. The method comprises executing one or more first type security jobs on a first core, selecting one or more second type security jobs assigned for execution on a security dedicated core, and designating the selected second type security jobs for execution on the second core instead of the security dedicated core.