Vehicle Control PCB Security Island for ASIL Cost Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The development of control devices for motor vehicles with safety functions requiring high ASIL levels is burdensome and costly, as the entire control unit must be designed to meet the highest safety requirements, even if the safety function is not used in every vehicle, leading to inefficiencies and increased costs.
Innovation Solution
A separate 'island' on the circuit board is created for safety functions with ASIL requirements, using end-to-end encryption for communication within this area, allowing other functions to be developed without these stringent requirements, thus reducing overall development costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire control unit is designed to meet the highest safety requirements (ASIL level) for safety functions, then the safety and reliability of the control unit is improved, but the development cost and complexity of the basic project increases significantly
Solution Approach 1:
The control unit is divided into a security area and a non-security area. The security area contains only the components and software necessary for safety functions, while the non-security area handles other functions. This segmentation allows the safety-critical portion to meet ASIL requirements without forcing the entire control unit to undergo costly and complex safety-certification processes.
Solution Approach 2:
Different parts of the control unit are assigned different security qualities. The security area is designed with high security standards (ASIL level) for safety functions, while the non-security area uses standard development practices. This local differentiation optimizes the balance between safety and cost by applying stringent requirements only where necessary.
2Reliability
If safety functions with high ASIL requirements are implemented in the control unit, then the functional safety is improved, but the cost of the basic project increases due to special hardware components and strict software specifications
Solution Approach 1:
By segmenting the control unit into security and non-security areas, the patent enables selective application of safety standards. Only the security area requires ASIL-level certification, special hardware, and strict software development, while the non-security area can use cost-effective standard components and development processes.
Solution Approach 2:
The patent applies different quality levels to different functional areas. The security area receives full ASIL-level treatment with appropriate hardware and software rigor, while the non-security area uses economical development approaches, thereby reducing overall manufacturing costs while maintaining necessary safety levels.
3Adaptability or versatility
If the control unit is designed to accommodate safety functions that may not be used in every vehicle, then the versatility and adaptability is improved, but the development cost increases due to preparing for potential future use
Solution Approach 1:
The control unit's segmented architecture allows the security area to be optionally activated. When safety functions are not needed, the security area can remain dormant or be configured for other purposes, allowing the basic project to proceed with lower complexity while maintaining the option to activate safety functions later when needed.
Solution Approach 2:
The control unit is designed with dynamic configurability. The security area can be activated or deactivated based on the specific vehicle application and requirements. This dynamic approach allows the same hardware platform to serve multiple market segments, from basic vehicles without safety functions to advanced vehicles requiring ASIL-level safety, without committing to high development costs for all applications.
Data Source
Figure 1~2
AI summary
The invention relates to a control device (1) for a motor vehicle (16), comprising at least one printed circuit board (3) having at least one microprocessor (8, 10) for providing functions of the control device (1), wherein: at least one security function of the functions is subject to a security requirement that is increased with respect to at least one other function; a security area (4) is provided on the printed circuit board (3), in which area all the components provided for performing the security function, including at least one first microprocessor (8), are implemented so as to fulfill the security requirement; any communication of the first microprocessor in and out of the security area (4), which communication at least partially uses the printed circuit board (3), takes place in an end-to-end encrypted manner; and at least one second microprocessor (10), in particular that does not meet the security requirement, for providing the at least one other function outside the security area (4), is arranged on the printed circuit board (3).