Multi-core Processor Spatial Temporal Isolation for Mixed Criticality Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Control systems face challenges in supporting multiple applications with varying criticality levels, as existing platforms are highly restrictive and difficult to modify, leading to limitations in scalability, security, and integration with higher-level management systems.
Innovation Solution
A multi-core processor-based control system that provides spatial and temporal isolation between applications, utilizing a time-sensitive network (TSN) for synchronized communications and virtual machines (VMs) to ensure robustness and modularity, allowing for concurrent operation of applications with different criticality levels without interfering with each other.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical isolation and hardware segregation are used to ensure safety and reliability, then system reliability improves, but device complexity and difficulty of modification increase
Solution Approach 1:
The system segments applications by criticality level and assigns them to different virtual machines or containers on the same hardware platform. This allows multiple applications with different safety requirements to coexist without physical isolation, maintaining reliability while reducing complexity.
Solution Approach 2:
A single hardware platform is designed to support multiple applications with different criticality levels through virtualization technologies. The same physical infrastructure serves multiple functions, eliminating the need for separate hardware for each application type.
2Reliability
If hard coding functionality and preventing changes are implemented to ensure safety, then system reliability improves, but adaptability and ease of manufacture deteriorate
Solution Approach 1:
The system allows dynamic addition, removal, and updating of applications through virtualization. Applications can be deployed or modified without changing the underlying hardware or affecting other running applications, enabling adaptability while maintaining system stability.
Solution Approach 2:
Virtual machines and containers create isolated copies of execution environments on the same hardware platform. These virtual copies allow flexible deployment and modification of applications without affecting the physical hardware or other applications.
3Adaptability or versatility
If multiple applications with different criticality levels are run on the same platform, then adaptability improves, but system reliability and security worsen due to potential interference
Solution Approach 1:
The system segments the execution environment into isolated virtual machines or containers, each hosting applications of specific criticality levels. This segmentation prevents interference between applications while allowing them to run on the same physical platform.
Solution Approach 2:
Virtualization technologies act as an intermediary layer between the physical hardware and multiple applications. This intermediary manages resource allocation and isolation, allowing diverse applications to coexist safely on the same platform.
4Reliability
If physical isolation of different functions is implemented, then system security improves, but productivity and ease of operation worsen due to restrictive changes
Solution Approach 1:
A single hardware platform provides universal support for multiple applications with different security requirements through virtualization. This eliminates the need for multiple physical systems, improving productivity while maintaining security through virtual isolation.
Solution Approach 2:
Virtual copies of execution environments enable secure isolation of applications without requiring physical duplication of hardware. This allows rapid deployment and management of multiple secure applications on shared infrastructure.
Data Source
AI summary
A control system includes a multi-core processor configured to operate plural different applications performing different operations for controlling a controlled system. The applications are associated with different levels of criticality based on the operations performed by the applications. The processor is configured to provide a single hardware platform providing both spatial and temporal isolation between the different applications based on the different levels of criticality associated with the different applications. The processor also is configured to synchronize communications of the applications operating in a real time operating system with scheduled communications of a time sensitive network (TSN).