Vehicle Safety App Isolation for Functional Safety Interference
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle manufacturers face challenges in ensuring that safety-related applications in vehicles operate without interference from user-installed applications, which can degrade the performance of critical safety functions due to resource allocation conflicts.
Innovation Solution
A vehicle safety management system detects interference events between safety-related and user applications, isolating user applications in a container image to prevent resource conflicts, using OS-level virtualization to allocate dedicated resources for safety applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user applications are allowed to run on the vehicle's computing system, then user services and driving experience are enhanced, but safety-related applications may be interfered with and vehicle safety may be compromised
Solution Approach 1:
The system divides the computing environment into distinct segments: a host machine running safety-critical applications and a containerized environment for user applications. This segmentation isolates user applications from safety resources, allowing both to coexist without interference. The container image packages user applications with their dependencies, creating a self-contained environment that cannot access or interfere with the host machine's safety-critical system resources.
2Reliability
If user applications are isolated in containers, then functional safety is protected, but system complexity increases due to containerization overhead
Solution Approach 1:
The system introduces a containerization intermediary layer that mediates between user applications and the host machine's safety resources. This intermediary packages user applications into container images with all necessary dependencies, creating a self-contained execution environment. The container acts as a buffer that allows user applications to run while preventing them from accessing or interfering with safety-critical resources on the host machine.
3Reliability
If diagnostic monitoring is implemented to detect interference events, then functional safety can be protected, but detection and measurement complexity increases
Solution Approach 1:
The system implements a feedback mechanism where the monitoring component continuously observes system resource usage and diagnostic logs to detect interference events. When interference is detected, the system provides feedback by automatically responding to mitigate the interference, such as isolating the offending user application or adjusting resource allocation. This closed-loop feedback system enables continuous protection of functional safety through automated monitoring and response.
Data Source
AI summary
The method including allocating a first portion of system resources of a vehicle safety management (VSM) system to a functional safety application executing on a processing device of the VSM system. The method includes allocating a second portion of the system resources to a user application executing on the processing device of the VSM system. The method includes detecting an interference event associated with the first portion of the system resources and the second portion of the system resources that degrades a performance of the functional safety application. The method includes migrating the user application to a container image including an isolated portion of the system resources to prevent the interference event associated with the first portion of the system resources and the second portion of the system resources.