Vehicle Display Signal Processing with Hypervisor-Based Secure VM Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing complexity of signal processing for multiple displays in vehicles and the need for enhanced security during data transmission, particularly when multiple virtual machines are driven by different operating systems, poses challenges in vehicle display systems.
Innovation Solution
A signal processing device with a processor that executes a server virtual machine and guest virtual machines on a hypervisor, utilizing different communication schemes to transmit security keys and encrypted data, and includes a secured storage device and security executor to manage data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple virtual machines are driven by different operating systems to handle multiple displays, then the functionality and versatility of the display system is improved, but the security risk during data transmission increases
Solution Approach 1:
The patent introduces a security manager as an intermediary component that mediates all data transmission between virtual machines with different operating systems. The security manager encrypts data before transmission and manages security keys, preventing direct exposure of sensitive data while maintaining multi-OS compatibility. This intermediary layer resolves the contradiction by enabling secure communication without requiring a single unified operating system.
Solution Approach 2:
The patent changes the security parameters of data transmission by implementing encryption with dynamically generated security keys. Instead of relying on the security properties of the operating systems themselves, the system transforms data into encrypted form with controllable security parameters (key management, encryption algorithms), allowing secure transmission across different OS environments while maintaining versatility.
2Reliability
If different communication schemes are used for transmitting security keys and encrypted data, then the security level is improved, but the device complexity increases
Solution Approach 1:
The patent segments the communication process into two distinct channels: one for transmitting security keys and another for transmitting encrypted data. This segmentation allows each channel to be optimized independently for its specific purpose, improving overall security while managing complexity through clear separation of functions rather than requiring a single complex unified scheme.
Solution Approach 2:
The security manager serves multiple functions within a single component: it generates security keys, encrypts data, manages key distribution, and handles different communication schemes. By consolidating these multiple security functions into one universal security manager, the system achieves high security without proportionally increasing overall device complexity, as the security manager replaces what would otherwise require multiple separate complex components.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
A signal processing device and a vehicle display apparatus including the same are disclosed. The signal processing device according to an embodiment of the present disclosure includes a processor configured to perform signal processing for a display mounted in a vehicle, wherein the processor is configured to execute a server virtual machine and at least one guest virtual machine on a hypervisor in the processor, wherein the server virtual machine is configured to transmit a security key to a first guest virtual machine based on a first communication scheme or a second communication scheme different from the first communication scheme, and to transmit data encrypted based on the security key to the first guest virtual machine based on the second communication scheme. Accordingly, it is possible to increase security during data transmission.