Virtual ECU Isolation for Secure External Device Integration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The complexity of on-board networks in vehicles, driven by connected car functions, OTA reprogramming, ADAS, and AI, makes secure management and cooperative operation of externally connected devices challenging, with existing solutions either risking adverse effects on other applications or lacking comprehensive management technologies.

Innovation Solution

An on-board computer system that generates a virtual control device by allocating physical resources when an external device connects, allowing secure operation and cooperative networking with other control devices, using a management processing unit that performs authentication, program acquisition, and resource management to reduce adverse effects and enhance security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If an external device is connected directly to the on-board computer to enable cooperative operation with other ECUs, then the adaptability and functionality of the system is improved, but the security risk and potential adverse effects on the OS increases

Engineering Contradiction:
Improvecooperative operation capabilityVSAvoidsystem security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a virtual control device as an intermediary layer between the external device and the on-board computer's OS. The virtual control device manages the external device's operations and communications, allowing cooperative functionality while isolating the external device from direct access to the host OS, thereby maintaining system security

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system segments the on-board computer into multiple virtual control devices, each capable of independently managing specific external devices. This segmentation allows the external device to operate cooperatively with other ECUs through its dedicated virtual control device while preventing adverse effects on the host OS and other applications

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If multiple external devices are connected to the on-board computer to enhance functionality, then the versatility of the system is improved, but the device complexity and management difficulty increases

Engineering Contradiction:
Improvedevice connectivityVSAvoidmanagement complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The virtual control device is designed as a universal management component that can handle multiple external devices through standardized interfaces and protocols. Each virtual control device can manage different types of external devices (storage, communication, sensors) while maintaining consistent management mechanisms, reducing overall system complexity

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If an external device operates directly on the host OS to enable immediate functionality, then the ease of operation is improved, but the stability of the system deteriorates due to potential conflicts with other applications

Engineering Contradiction:
Improveoperational simplicityVSAvoidsystem stability
Core Design Contradiction:
Ease of operationVSStability of the object's composition

Solution Approach 1:

The virtual control device serves as an intermediary that simplifies the operation of external devices while maintaining system stability. It provides a standardized interface for external devices to operate without directly interacting with the host OS, preventing conflicts with other applications while maintaining ease of operation

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12001538B2On-board computer, computer execution method, and computer program
Publication Date: 2024.06.04 AUTONETWORKS TECH LTD
  • US12001538B2 patent drawing
  • US12001538B2 patent drawing
  • US12001538B2 patent drawing

AI summary

An on-board computer includes a physical resource having a communication unit which communicate with an on-board control device through an on-board communication line, a control unit, and a storage unit. The on-board computer further includes a connection unit to which an external device is to be connected; and a management processing unit configured to generate a virtual control device by allocating the physical resource in a case where the external device is connected to the connection unit, wherein the virtual control device operates as a virtual on-board control device that controls an operation of the external device connected to the connection unit, and that is connected to the on-board communication line.