Hypervisor Intrusion Monitoring for Vehicle Display Signal Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle signal processing systems face threats to functional safety due to excessive service access and bus occupancy overload, which can compromise vehicle control and pose serious safety risks.
Innovation Solution
A signal processing device equipped with a hypervisor that executes a network interface and two intrusion detectors for external and internal monitoring, utilizing policy rules for anomaly and intrusion detection, and a monitoring server for data management and update transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If dynamic software-based functions are added to the vehicle system, then service functionality and adaptability are improved, but system complexity and security vulnerability increase
Solution Approach 1:
The patent segments the vehicle system into multiple virtual machines (service VM and user VM) running on a hypervisor. This allows dynamic software-based functions to be added as isolated service VMs, improving adaptability while containing complexity within separate virtualized environments rather than affecting the entire system.
Solution Approach 2:
The hypervisor acts as an intermediary layer between the physical hardware and multiple virtual machines. It manages resource allocation and isolation, enabling dynamic service addition through virtualization while abstracting the underlying system complexity from individual services.
2Adaptability or versatility
If more services are added to increase functionality, then adaptability is improved, but bus occupancy and channel overload risk increase
Solution Approach 1:
The patent divides the system into isolated virtual machine environments where each service runs in its own VM. This segmentation allows multiple services to coexist without competing for the same communication resources, preventing bus occupancy overload while maintaining high service functionality.
Solution Approach 2:
The patent implements quality of service (QoS) policies with different priority levels for different services and communication channels. Critical services receive higher priority and guaranteed bandwidth, while non-critical services can operate with lower priorities. This ensures that adding more services does not overwhelm the communication bus, as each service receives appropriate resource allocation based on its importance.
3Reliability
If comprehensive monitoring is implemented to ensure safety, then functional safety is improved, but device complexity and processing overhead increase
Solution Approach 1:
The patent extracts the monitoring function into a separate, dedicated intrusion detector VM that runs independently from service VMs. This extracted monitoring system can comprehensively observe all services without adding complexity to the service logic itself, ensuring functional safety through specialized monitoring infrastructure.
Solution Approach 2:
The intrusion detector VM acts as an intermediary monitoring layer that observes service behavior, network traffic, and system events without directly interfering with service operations. It uses policy rules and anomaly detection algorithms to identify security threats while maintaining a clear separation between monitoring and service functions, thus improving safety without excessively complicating the service architecture.
4Reliability
If intrusion detection and anomaly detection are performed on all data, then functional safety is improved, but processing time and computational load increase
Solution Approach 1:
The patent applies different monitoring intensities and detection methods based on service priority and data type. Critical services and safety-relevant data receive comprehensive intrusion detection with strict policy rule checking, while non-critical services use lighter monitoring. This differentiated approach ensures functional safety for important functions while reducing overall processing time through selective monitoring intensity.
Solution Approach 2:
The system pre-configures policy rules and detection thresholds before runtime based on service requirements and security policies. This preliminary setup allows the intrusion detector to quickly evaluate data against predetermined criteria without performing complex real-time analysis, significantly reducing detection processing time while maintaining safety effectiveness.
Data Source
Figure 1
Figure 2~3A
Figure 3B
AI summary
A signal processing device and a vehicle display apparatus including the same according to an embodiment of the present disclosure include a processor configured to execute a hypervisor, wherein the processor is configured to execute a network interface in the hypervisor and to execute a first intrusion detector and a second intrusion detector on the hypervisor, the first intrusion detector configured to perform external monitoring based on data received from the network interface, and the second intrusion detector configured to perform internal monitoring of event information or application information. Accordingly, it is possible to ensure the functional safety of a vehicle based on vehicle interior or exterior monitoring.