Virtual ECU Isolation for Secure External Device Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of on-board networks in vehicles, driven by connected car functions, OTA reprogramming, ADAS, and AI, makes secure management and cooperative operation of externally connected devices challenging, with existing solutions either risking adverse effects on other applications or lacking comprehensive management technologies.
Innovation Solution
An on-board computer system that generates a virtual control device by allocating physical resources when an external device connects, allowing secure operation and cooperative networking with other control devices, using a management processing unit that performs authentication, program acquisition, and resource management to reduce adverse effects and enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an external device is connected directly to the on-board computer to enable cooperative operation with other ECUs, then the adaptability and functionality of the system is improved, but the security risk and potential adverse effects on the OS increases
Solution Approach 1:
The patent introduces a virtual control device as an intermediary layer between the external device and the on-board computer's OS. The virtual control device manages the external device's operations and communications, allowing cooperative functionality while isolating the external device from direct access to the host OS, thereby maintaining system security
Solution Approach 2:
The system segments the on-board computer into multiple virtual control devices, each capable of independently managing specific external devices. This segmentation allows the external device to operate cooperatively with other ECUs through its dedicated virtual control device while preventing adverse effects on the host OS and other applications
2Adaptability or versatility
If multiple external devices are connected to the on-board computer to enhance functionality, then the versatility of the system is improved, but the device complexity and management difficulty increases
Solution Approach 1:
The virtual control device is designed as a universal management component that can handle multiple external devices through standardized interfaces and protocols. Each virtual control device can manage different types of external devices (storage, communication, sensors) while maintaining consistent management mechanisms, reducing overall system complexity
3Ease of operation
If an external device operates directly on the host OS to enable immediate functionality, then the ease of operation is improved, but the stability of the system deteriorates due to potential conflicts with other applications
Solution Approach 1:
The virtual control device serves as an intermediary that simplifies the operation of external devices while maintaining system stability. It provides a standardized interface for external devices to operate without directly interacting with the host OS, preventing conflicts with other applications while maintaining ease of operation
Data Source
AI summary
An on-board computer includes a physical resource having a communication unit which communicate with an on-board control device through an on-board communication line, a control unit, and a storage unit. The on-board computer further includes a connection unit to which an external device is to be connected; and a management processing unit configured to generate a virtual control device by allocating the physical resource in a case where the external device is connected to the connection unit, wherein the virtual control device operates as a virtual on-board control device that controls an operation of the external device connected to the connection unit, and that is connected to the on-board communication line.


