CN106341269A - Control method and device of vehicle-mounted system - Google Patents
Control method and device of vehicle-mounted system Download PDFInfo
- Publication number
- CN106341269A CN106341269A CN201610843107.1A CN201610843107A CN106341269A CN 106341269 A CN106341269 A CN 106341269A CN 201610843107 A CN201610843107 A CN 201610843107A CN 106341269 A CN106341269 A CN 106341269A
- Authority
- CN
- China
- Prior art keywords
- processor
- operating system
- level
- task
- security
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0654—Management of faults, events, alarms or notifications using network fault recovery
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
- B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
- B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/28—Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Mechanical Engineering (AREA)
- Traffic Control Systems (AREA)
Abstract
The embodiment of the invention provides a control method and device of a vehicle-mounted system. The vehicle-mounted system comprises at least two processors. The method comprises a step of controlling the at least two processors to run operating systems with different safety levels, a step of using the operating systems with different safety levels to control and run different tasks of the vehicle-mounted system, wherein an operating systems with a first safety level is used to run a vehicle body control task, an operating system with a second safety level is used to run a vehicle inside information entertainment control task, and the first safety level is higher than the second safety level. According to the embodiment of the invention, tasks can be isolated such that the tasks running in different processors and different operating systems do not influence each other, and thus the safety of a vehicle body and a human body is ensured.
Description
Technical field
The present invention relates to data processing field, more particularly to a kind of control method of onboard system and device.
Background technology
With the raising of people's quality of life, car has come into huge numbers of families as walking-replacing tool, and with Vehicle Technology
Fast development, in order to provide more preferable Consumer's Experience, the function of onboard system is being enriched constantly, is continuously increased, namely in car
The application software of various functions can be installed, to meet user's request in loading system.
A kind of existing onboard system, is to run multiple tasks in an operating system, for example: onboard system is linux behaviour
Make system, then can run multiple tasks under this linux operating system, comprising: the task of Body Control, sound equipment task, depending on
Frequency task, navigation task, Mission Objective, payment task etc. task.
But, easily problems with existing onboard system: the first, when asking occurs in a certain task in operating system
Topic, when causing operating system to crash, can lead to Body Control task inoperable, the safety of user is threatened；Secondth, when
When running the processor of operating system and damaging reasons such as (for example: high temperature burns out, components and parts) coming off for some reason, at this
Operating system in reason device cannot work, then also result in that Body Control task is inoperable, the safety of user is threatened；
3rd, because existing onboard system can carry out networking operation, if in networking process, by assault, for example: Hei Ketong
Cross Mission Objective operating system is attacked, be likely to result in operating system paralysis, or the operation such as vehicle body may be controlled
System, and then the safety of user is threatened；It can be seen that, the safety of existing onboard system is relatively low, and vehicle body and the person are caused
Threaten.
Content of the invention
The embodiment of the present invention provides a kind of control method of onboard system and device, in order to avoid existing onboard system
Safety is relatively low, the problem that vehicle body and the person are threatened.
The embodiment of the present invention provides a kind of control method of onboard system, and described onboard system includes: at least two process
Device, methods described includes:
Control the operating system that different level of securitys are separately operable on described at least two processors；
The operating system adopting described difference level of security respectively to carry out the control of different task to described onboard system
With operation；
Wherein, using the operating system of the first level of security, Body Control task is run, using the second safe level
Other operating system is controlled to in-vehicle information play tasks and runs, and wherein, the grade of described first level of security is higher than
The grade of described second level of security.
The embodiment of the present invention also provides a kind of control device of onboard system, and described onboard system includes: at least two
Reason device, described device includes:
First controls operation module, for controlling the behaviour being separately operable different level of securitys on described at least two processors
Make system；
Second controls operation module, for adopting the operating system of described difference level of security respectively with to described vehicle-mounted system
System carries out control and the operation of different task；
Wherein, described second controls operation module to include:
First controls operation submodule, for the operating system using the first level of security, Body Control task is transported
OK；
Second controls operation submodule, for the operating system using the second level of security, in-vehicle information play tasks is entered
Row controls and runs；
Wherein, the grade of described first level of security is higher than the grade of described second level of security.
To sum up, a kind of control method of onboard system and device are embodiments provided, by making at least two
Reason device is separately operable the operating system of different level of securitys；And run Body Control in the high operating system of described level of security and appoint
Business；In-vehicle information play tasks are run in the low operating system of level of security, can be when a processor breaks down, by another
An outer processor continues executing with task it is ensured that Body Control task will not be controlled by hacker, and by being completely cut off task,
So that running on mutually unaffected between the task in different processor and different operating system, so ensure that vehicle body and
The safety of the person.
Brief description
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing
Have technology description in required use accompanying drawing be briefly described it should be apparent that, drawings in the following description are these
Some bright embodiments, for those of ordinary skill in the art, on the premise of not paying creative work, can also root
Obtain other accompanying drawings according to these accompanying drawings.
Fig. 1 is the structural representation showing a kind of present invention onboard system example；
Fig. 2 is to show a kind of structural representation of onboard system of the present invention；And
Fig. 3 be show Cache Communication module of the present invention and first processor and second processing device interact schematic diagram.
Specific embodiment
Purpose, technical scheme and advantage for making the embodiment of the present invention are clearer, below in conjunction with the embodiment of the present invention
In accompanying drawing, the technical scheme in the embodiment of the present invention is clearly and completely described it is clear that described embodiment is
The a part of embodiment of the present invention, rather than whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art
The every other embodiment being obtained under the premise of not making creative work, broadly falls into the scope of protection of the invention.
Device embodiment one
The embodiment of the present invention one provides a kind of onboard system, specifically may include that at least two processors, each process
One operating system is separately operable on device；The operating system run on described at least two processors specifically may include that first
The operating system of level of security and the operating system of the second level of security；
Wherein, run Body Control task in the operating system of the first level of security；The described operation of the second level of security
In-vehicle information play tasks are run in system；The level of security of the described operating system of described first level of security is higher than described the
The level of security of the described operating system of two level of securitys.
The embodiment of the present invention can apply to in-car, comprising: the class such as new-energy automobile, autonomous driving vehicle and fuel-engined vehicle
The car of type, for supporting the various tasks of execution needed for car, for example: Body Control task, in-vehicle information play tasks etc., with
So that Infotainment task goes wrong in the car, such as: a certain video task carries virus, or by assault or
The problems such as response timeout, it is ensured that Body Control task is not subject to when causing operating system to crash or controlled by hacker
Impact, and then ensure the safety of vehicle body and the person.
In the embodiment of the present invention, above-mentioned processor can be any type of processor, such as mcu (micro-control unit,
Microcontroller unit) processor, dsp (Digital Signal Processing, digital signal processing) process
Device, soc (system level chip, system on chip) processor, and mpu (microprocessor, microprocessor unit) place
The processor of reason device etc. type.
In the embodiment of the present invention, in above-mentioned onboard system, specifically can include at least two processors, and each processor
In can run an operating system, aforesaid operations system specifically may include that embedded real-time operating system, linux operation
System, windows operating system and android operating system etc. operating system；Wherein, the behaviour running in above-mentioned processor
The level of security making system is different, specifically may include that the operating system of the first level of security and the operation of the second level of security
System, the level of security of the operating system of the first level of security is higher than the safe level of the operating system of described second level of security
Not；The level of security of aforesaid operations system is a kind of mark of the safety of aforesaid operations system, the higher operation of level of security
The safety of system is higher, namely the high operating system of level of security is more stable, is less susceptible to occur crashing and being attacked etc. asking
Inscribe, namely the safety of the operating system of above-mentioned first level of security is higher than the safety of the operating system of the second level of security
Property.
In the embodiment of the present invention, running in above-mentioned onboard system of task specifically may include that Body Control task, in-car
Infotainment task dispatching task, wherein, above-mentioned Body Control task is the control task to vehicle body, for example: door contact interrupter task,
Car window switch task, car start/extinguishing task, the switching task of car boot, air-conditioning task, parking brake task dispatching task；Above-mentioned
In-vehicle information play tasks are in-car task in addition to Body Control task, for example: gps (global positioning system, global
Positioning system) navigation task, play tasks (task such as game, sound equipment, video), pay task dispatching task.
In the embodiment of the present invention, the level of security of running in above-mentioned onboard system of task is also different, the peace of above-mentioned task
Full rank is one kind expression for the safety attention degree of above-mentioned task for the people, for onboard system, right for meeting
The task (for example: Body Control task) that vehicle body and personal safety threaten, generally requires absolute safety, then these
The level of security of business is then forward, can be the task of the first safe class, it needs to operate in the higher behaviour of level of security
Make in system；And for the in-vehicle information amusement that the Consumer's Experience of user is impacted, can be appointing of the second safe class
Business, it can run on level of security and be less than in the operating system that Body Control task is located.
In the embodiment of the present invention, the different operating system running in different processor can be supported to run different safety respectively
The task of grade, for example: include two processors in onboard system, be respectively as follows: first processor and second processing device, and often
In individual processor, each operation has an operating system, the respectively first operating system and the second operating system, and the first operation system
First level of security of system is higher than the second level of security of above-mentioned second operating system, then the first operating system can be used to run
Body Control task, the second operating system can be used to run in-vehicle information play tasks；And for example: in onboard system, include three
Individual processor, being respectively as follows: in first processor, second processing device and the 3rd processor, and each processor each operation has one
Operating system, the respectively first operating system, the second operating system and the 3rd operating system, wherein, the first operating system is the
The operating system of one level of security, the second operating system and the operating system that the 3rd operating system is the second level of security, then
One operating system can be used to run Body Control task；Assume that above-mentioned in-vehicle information task specifically includes: play tasks and gps
Navigation task, then the second operating system can be used to run gps navigation task；3rd operating system can be used to run amusement times
Business.
It is appreciated that above-mentioned onboard system includes being only used as in the embodiment of the present invention in two or three processors
State the example of the quantity in the processor in onboard system, and being not understood to is in the above-mentioned onboard system to the embodiment of the present invention
A kind of restriction of the quantity in processor, in fact, the processor of more than three can also be included in above-mentioned onboard system, this
Bright embodiment here is not limited to the quantity of the processor in above-mentioned onboard system.
In a kind of application example of the present invention, in onboard system, include two processors: first processor and second
Processor, it is separately operable the first operating system of the first level of security and the second operating system of the second level of security, and on
The level of security stating the first operating system is more than the level of security of above-mentioned second operating system, then above-mentioned first operating system is used for
Run Body Control task, above-mentioned second operating system is used for running in-vehicle information play tasks, due to in-vehicle information task relatively
It is more easy to go wrong for Body Control task, and Body Control task is bigger to the threat of vehicle body and personal safety, user couple
The safety of Body Control task is more paid attention to, and above-mentioned Body Control task and in-vehicle information play tasks are separately operable two
In two operating systems of individual processor, so, first, because the level of security of the first operating system is higher than the second operation
The level of security of system, therefore can ensure the safety of above-mentioned Body Control task from the aspect of operating system；Second, permissible
Ensure that above-mentioned Body Control task is not affected by in-vehicle information play tasks, namely when in-vehicle information play tasks go wrong
When, because Body Control task is not run in operating system in the same processor with it, then in-vehicle information play tasks
Body Control task will not be impacted for problem it is ensured that vehicle body and personal safety, for example: when transporting in the second operating system
The task of a certain networking of row, such as video task carries virus, and then when leading to above-mentioned second operating system to crash, Body Control
Task is then unaffected, and still can normally run；When second processing device goes wrong (for example: high temperature burns out, components and parts
The problems such as come off) when, because Body Control task is being run in the first operating system in first processor, at therefore second
The damage of reason device will not impact to above-mentioned Body Control task, it may therefore be assured that vehicle body and personal safety.
In a kind of alternative embodiment of the present invention, described processor includes: at soc processor, and dsp processor, mpu
Reason at least one of device and mcu processor processor.
With reference to Fig. 1, show a kind of structural representation of present invention onboard system example, wherein, described onboard system bag
Include: mcu processor 101, and dsp processor 102, mpu processor 103, soc processor 104；Wherein, can in each processor
There is an operating system to run, the first operating system 1011 of the respectively first level of security, the second of the second level of security
4th operating system 1041 of operating system 1021, the 3rd operating system 1031 of the 3rd level of security and the 4th level of security；
Body Control task, the second operating system 1021, the 3rd operating system 1031 and the 4th behaviour is run in first operating system 1011
Make to run in-vehicle information play tasks in system 1041.
In the embodiment of the present invention, above-mentioned onboard system includes mcu processor 101, dsp processor 102, mpu processor
Totally four processors such as 103 and soc processors 104, in the embodiment of the present invention, above-mentioned in-vehicle information play tasks can be divided into
Three partial task, Part I task (for example: video task, the task such as sound equipment task, Mission Objective) may operate in second
In operating system 1021, Part II task (for example: pay task) may operate in above-mentioned 3rd operating system 1031, the
Three partial task (for example: gps task) may operate in the 4th operating system 1041；Task in the second operating system 1021
When going wrong in the process of implementation, only can produce impact to running in the second operating system 1021 of task, without to upper
Stating in the first operating system 1011, the 3rd operating system 1021 and the 4th operating system 1041 of task threatens；And due to
Each operating system accounts for the resource in respective processor, namely each operating system is independent in terms of the resources such as physical memory, no
Situation that resource seize occurs；And when the second processing device 102 that the second operating system 1021 is located damages, will not be to first
Processor 101, the 3rd processor 103 and fourth processor 104 impact, namely the first operation in first processor 101
The task of running in running in system 1011 of task, the 3rd operating system 1031 in the 3rd processor 103, fourth processor
Running in the 4th operating system 1041 in 104 of task will not be affected by second processing device, still can normally run.
In the embodiment of the present invention, in above-mentioned different processor, run different operating systems, and different operating system
Middle run different tasks, when not having tasks carrying in the operating system in above-mentioned processor, this processor can be without opening
Dynamic, namely in the embodiment of the present invention, only startup has the processor of tasks carrying, due to above-mentioned dsp processor, mpu process
The stand-by power consumption of device and mcu processor is all less, and therefore, the power consumption of above-mentioned onboard system is relatively low, for example: the antitheft task of car
Run in the operating system of mcu processor, after user leaves car, other tasks are turned off, but antitheft task still needs
It is unlocked, and because antitheft task is from other task runs and different processors, other processors may be at dormancy
State, and only open above-mentioned mcu processor, because mcu processor is the relatively low processor of power consumption, the therefore embodiment of the present invention carries
For onboard system can bring less power consumption.
In a kind of alternative embodiment of the present invention, in described mcu processor, run embedded real-time operating system, described
Body Control task is run in embedded real-time operating system；Described soc processor, described mpu processor and described dsp process
It is separately operable in device at linux operating system and/or android operating system and/or ucos operating system, and described soc
In-vehicle information play tasks can be run in the operating system run in reason device, described mpu processor and described dsp processor.
In the embodiment of the present invention, the operating system run in above-mentioned mcu processor can be embedded real-time operating system,
It is used for running the Body Control task of the first safe class, due to real-time and the safety of embedded real-time operating system, can
, after the execute instruction receiving Body Control task, to respond to Body Control task immediately, therefore avoid operation system
The Body Control tasks carrying that system response task takes and causes is delayed, and then the problem that vehicle body and the person are threatened；Institute
State can run respectively in soc processor, described mpu processor and described dsp processor linux operating system and/or
Android operating system and/or ucos operating system, can be used in aforesaid operations system running the peaces such as in-vehicle information amusement
Full property is less than the task of the second safe class of Body Control task, and the setting original intention due to in-vehicle information play tasks is for carrying
The Consumer's Experience of high user, this is accomplished by providing more humane human-computer interaction interface, and linux operating system,
Android operating system and ucos operating system have preferable man-machine interaction characteristic, therefore can complete preferably man-machine friendship
Mutually interface, is that user brings preferable Consumer's Experience.
To sum up, embodiments provide a kind of onboard system, comprising: at least two processors, on each processor
It is separately operable an operating system；The operating system run on described at least two processors specifically may include that the first safety
The operating system of rank and the operating system of the second level of security；Wherein, run in the operating system of described first level of security
Body Control task；In-vehicle information play tasks are run in the operating system of described second level of security；Described first safe level
The level of security of other operating system is higher than the level of security of the operating system of described second level of security；With respect to existing car
In all task runs operating system in a processor in loading system, in the embodiment of the present invention, different safety class
Task may operate in the different operating system of different processors, so, on the one hand, when one of processor goes out
Existing problem, or when running in the operating system in one of processor of task goes wrong, will not be to running on
Task in other processors impacts, for example: Body Control task and other task run are in different processors
In operating system, when other tasks go wrong cause the corresponding operating system of this task crash when, Body Control task by
In running in other processors, thus without being affected；And for example, when above-mentioned task is can networking of task, when above-mentioned
It is ensured that Body Control task will not be controlled by hacker when task is hacked；For another example, other tasks above-mentioned are corresponding
Physical damage it is impossible to during normal work in processor, because Body Control task is located in other processors, thus without
The impact of the processor being damaged, can be with normal work, to ensure the safety of vehicle body and the person；It can be seen that, the embodiment of the present invention can
To be completely cut off Body Control task and in-vehicle information play tasks, so that running on different processor and different operating system
Mutually unaffected between task in system, and then ensure that vehicle body and the safety of the person.
Device embodiment two
The embodiment of the present invention two provides a kind of onboard system, wherein, specifically may include that at least two processors and delays
Deposit communication module, each processor is separately operable an operating system；The operation system running on described at least two processors
System specifically may include that the operating system of the first level of security and the operating system of the second level of security；
Wherein, run Body Control task in the operating system of described first level of security；Described second level of security
In-vehicle information play tasks are run in operating system；The level of security of the operating system of described first level of security is higher than described the
The level of security of the operating system of two level of securitys；
Described Cache Communication module is used for realizing the data interaction between different processors.
In the embodiment of the present invention, different operating systems in different processors, and in different operating system
Task be frequently necessary to carry out data interaction, the embodiment of the present invention can be realized above-mentioned not existing together by described Cache Communication module
The data interaction of the task in reason device, for example: onboard system includes first processor and second processing device, and can bus task
Run in the operating system of the first level of security of first processor, other tasks are located at the second safe level of second processing device
In other operating system, when the instrumental panel positioned at second processing device shows that task needs the service data showing car (for example: car
The data such as speed, temperature, oil mass) when, need to read, from above-mentioned can bus task, the service data that vehicle body uploads, then can lead to
Cross the service data of the vehicle body upload that the above-mentioned can bus of caching communication module caching receives, so that above-mentioned display task is permissible
Read above-mentioned service data from above-mentioned Cache Communication module.
With reference to Fig. 2, show a kind of structural representation of onboard system of the present invention, described onboard system specifically can wrap
Include: first processor 201, second processing device 202 and communication buffer module 203；Described Cache Communication module 203 connects institute respectively
State first processor 201 and described second processing device 202: wherein,
Described Cache Communication module 203 can be used for receiving the number that the operating system in described first processor 201 sends
According to；And after the data of operating system transmission in receiving described first processor 201, cashing indication is set to the first mark
Know so that described second processing device 202 listen to described cashing indication be first mark after, from described Cache Communication module
Described data is read in 203；Wherein, described first identify for identifying described Cache Communication module 203 from the described first process
Data is have received in device 201.
With reference to Fig. 3, show Cache Communication module of the present invention and first processor and second processing device interacts schematic diagram,
Specifically may include that
Operating system in step 301, first processor have sent data to Cache Communication module；
Step 302, Cache Communication module receive the data that the operating system in described first processor sends；
The data that step 303, the described Cache Communication module operating system in receiving described first processor sends
Afterwards, cashing indication is set to the first mark；
Step 304, second processing device are monitored to Cache Communication module, are the first mark listening to described cashing indication
After knowledge, from described Cache Communication module, read described data；Wherein, described first identify for identifying described Cache Communication mould
Block have received data from described first processor.
In the embodiment of the present invention, running in the first operating system in above-mentioned first processor has first task, when first
When task has output data, above-mentioned output data can be sent to above-mentioned Cache Communication module by above-mentioned first processor.
In the embodiment of the present invention, after above-mentioned Cache Communication module receives the data that above-mentioned first processor sends, storage should
Data, and cashing indication is set to the first mark, for example: cashing indication is set to " 1 "；Above-mentioned cashing indication is set to
After one mark, mark Cache Communication module have received new data from above-mentioned first processor, and second processing device is always to upper
State Cache Communication module to be monitored, listening to after above-mentioned cashing indication is set to the first mark, execution is led to from above-mentioned caching
Data is read in letter module；For example: onboard system includes first processor and second processing device, and can bus task run in
In the operating system of first processor, other tasks are located in the operating system of second processing device；When in first processor
The first operating system in can bus task receive Body Control task transmission instrument need display data (for example:
The data such as speed, oil mass) after, can bus can be by above-mentioned data is activation to Cache Communication module；Cache Communication module receives
After stating the data of can bus transmission, caching standard is set to the second operating system that the first mark is located in second processing device
In instrument display task listen to the change of cashing indication in above-mentioned Cache Communication module after, from above-mentioned soul village Cache Communication
Above-mentioned data is read, to be shown on instrumental panel in module.
It is appreciated that above-mentioned first is designated a kind of example that " 1 " is only used as the first mark in the embodiment of the present invention, and
Being not understood to is the restriction to the first mark, in fact, it is possible to the mark that mark communication buffer module receives new data is all
Feasible, for example: above-mentioned first mark can " 0 " or arbitrary string, the embodiment of the present invention identifies to above-mentioned first
It is not specifically limited.
To sum up, a kind of onboard system provided in an embodiment of the present invention, can by Cache Communication module realize processor it
Between data interaction so that the task on different processor can carry out corresponding data interaction, with can improve vehicle body
And while personal safety, be that user brings more preferable Consumer's Experience.
Embodiment three:
Corresponding with above-described embodiment, the embodiment of the present invention additionally provides a kind of control method of onboard system, described car
Loading system includes: at least two processors, and methods described includes:
Control the operating system that different level of securitys are separately operable on described at least two processors；
The operating system adopting described difference level of security respectively to carry out the control of different task to described onboard system
With operation；
Wherein, using the operating system of the first level of security, Body Control task is run, using the second safe level
Other operating system is controlled to in-vehicle information play tasks and runs, and wherein, the grade of described first level of security is higher than
The grade of described second level of security.
The embodiment of the present invention is separately operable the operating system of different level of securitys by making at least two processors；And it is described
Body Control task is run in the high operating system of level of security；In-vehicle information amusement is run in the low operating system of level of security
Task, can continue executing with task by another one processor it is ensured that Body Control task when a processor breaks down
Will not be controlled by hacker, and by being completely cut off task, so that running in different processor and different operating system
Mutually unaffected between task, and then ensure that vehicle body and the safety of the person.
Alternatively, methods described also includes:
When described at least two processors need to be communicated, described at least two processors are controlled to carry out data friendship
Mutually.
Described onboard system includes: first processor and second processing device, and alternatively, methods described also includes:
Receive the data that the operating system run on described first processor is sent；
After the data that operating system in receiving described first processor sends, cashing indication is set to the first mark
Know；
Listen to after described cashing indication is the first mark in described second processing device, described second processing device reads described
Data；Wherein, described first identify for mark receive data from described first processor.
Alternatively, described processor includes: mcu processor, and in dsp processor, mpu processor and soc processor
At least one processor.
Alternatively, run embedded real-time operating system in described mcu processor, in described embedded real-time operating system
Run Body Control task；It is separately operable linux behaviour in described mpu processor, described soc processor and described dsp processor
Make system and/or android operating system and/or ucos operating system, and described dsp processor, described mpu processor and
In-vehicle information play tasks are run in the operating system run in described mcu processor.
Example IV
Corresponding with above-described embodiment, the embodiment of the present invention additionally provides a kind of control device of onboard system, described car
Loading system includes: at least two processors, and described device includes:
First controls operation module, for controlling the behaviour being separately operable different level of securitys on described at least two processors
Make system；
Second controls operation module, for adopting the operating system of described difference level of security respectively with to described vehicle-mounted system
System carries out control and the operation of different task；
Wherein, described second controls operation module to include:
First controls operation submodule, for the operating system using the first level of security, Body Control task is transported
OK；
Second controls operation submodule, for the operating system using the second level of security, in-vehicle information play tasks is entered
Row controls and runs；
Wherein, the grade of described first level of security is higher than the grade of described second level of security.
So, the embodiment of the present invention is separately operable the operating system of different level of securitys by making at least two processors；
And run Body Control task in the high operating system of described level of security；In-car letter is run in the low operating system of level of security
Breath play tasks, can continue executing with task by another one processor it is ensured that vehicle body control when a processor breaks down
Task processed will not be controlled by hacker, and by being completely cut off task, so that running on different processor and different operating system
Mutually unaffected between task in system, and then ensure that vehicle body and the safety of the person.
Alternatively, described device also includes:
Control interactive module, for when described at least two processors need to be communicated, controlling described at least two
Processor carries out data interaction.
Alternatively, described onboard system includes: first processor and second processing device, and described device also includes:
Receiver module, for receiving the data that the operating system run on described first processor is sent；
Setup module, for after the data receiving the transmission of the operating system in described first processor, by caching mark
Know and be set to the first mark；
Read module, for listening to after described cashing indication is the first mark in described second processing device, reads described
Data；
Wherein, described first identify for mark receive data from described first processor.
Alternatively, described processor includes: mcu processor, and in dsp processor, mpu processor and soc processor
At least one processor.
Alternatively, run embedded real-time operating system in described mcu processor, in described embedded real-time operating system
Run Body Control task；It is separately operable linux behaviour in described mpu processor, described soc processor and described dsp processor
Make system and/or android operating system and/or ucos operating system, and described dsp processor, described mpu processor and
In-vehicle information play tasks are run in the operating system run in described mcu processor.
For device embodiment, due to itself and embodiment of the method basic simlarity, so description is fairly simple, related
Part illustrates referring to the part of embodiment of the method.
Device embodiment described above is only that schematically the wherein said unit illustrating as separating component can
To be or to may not be physically separate, as the part that unit shows can be or may not be physics list
Unit, you can with positioned at a place, or can also be distributed on multiple NEs.Can be selected it according to the actual needs
In the purpose to realize this embodiment scheme for some or all of module.Those of ordinary skill in the art are not paying creativeness
Work in the case of, you can to understand and to implement.
Through the above description of the embodiments, those skilled in the art can be understood that each embodiment can
Mode by software plus necessary general hardware platform to be realized naturally it is also possible to pass through hardware.Based on such understanding, on
That states that technical scheme substantially contributes to prior art in other words partly can be embodied in the form of software product, should
Computer software product can store in a computer-readable storage medium, such as rom/ram, magnetic disc, CD etc., including some fingers
Order is with so that a computer equipment (can be personal computer, server, or network equipment etc.) executes each enforcement
Example or some partly described methods of embodiment.
Finally it is noted that above example, only in order to technical scheme to be described, is not intended to limit；Although
With reference to the foregoing embodiments the present invention is described in detail, it will be understood by those within the art that: it still may be used
To modify to the technical scheme described in foregoing embodiments, or equivalent is carried out to wherein some technical characteristics；
And these modification or replace, do not make appropriate technical solution essence depart from various embodiments of the present invention technical scheme spirit and
Scope.
Claims (10)
1. a kind of control method of onboard system is it is characterised in that described onboard system includes: at least two processors, described
Method includes:
Control the operating system that different level of securitys are separately operable on described at least two processors；
The operating system adopting described difference level of security respectively to carry out control and the fortune of different task to described onboard system
OK；
Wherein, using the operating system of the first level of security, Body Control task is run, using the second level of security
Operating system is controlled to in-vehicle information play tasks and runs, and wherein, the grade of described first level of security is higher than described
The grade of the second level of security.
2. method according to claim 1 is it is characterised in that methods described also includes:
When described at least two processors need to be communicated, described at least two processors are controlled to carry out data interaction.
3. method according to claim 2 is it is characterised in that described onboard system includes: at first processor and second
Reason device, methods described also includes:
Receive the data that the operating system run on described first processor is sent；
After the data that operating system in receiving described first processor sends, cashing indication is set to the first mark；
Listen to after described cashing indication is the first mark in described second processing device, described second processing device reads described number
According to；Wherein, described first identify for mark receive data from described first processor.
4. method according to claim 1 is it is characterised in that described processor includes: mcu processor, and dsp process
At least one of device, mpu processor and soc processor processor.
5. method according to claim 4 is it is characterised in that run embedded real-time operation system in described mcu processor
System, runs Body Control task in described embedded real-time operating system；Described mpu processor, described soc processor and described
It is separately operable linux operating system and/or android operating system and/or ucos operating system in dsp processor, and institute
State and in the operating system run in dsp processor, described mpu processor and described mcu processor, run in-vehicle information amusement times
Business.
6. a kind of control device of onboard system is it is characterised in that described onboard system includes: at least two processors, described
Device includes:
First controls operation module, for controlling the operation system being separately operable different level of securitys on described at least two processors
System；
Second controls operation module, for adopting the operating system of described difference level of security respectively to enter to described onboard system
The control of row different task and operation；
Wherein, described second controls operation module to include:
First controls operation submodule, for the operating system using the first level of security, Body Control task is run；
Second controls operation submodule, for the operating system using the second level of security, in-vehicle information play tasks is controlled
System and operation；
Wherein, the grade of described first level of security is higher than the grade of described second level of security.
7. device according to claim 6 is it is characterised in that described device also includes:
Control interactive module, for when described at least two processors need to be communicated, controlling described at least two process
Device carries out data interaction.
8. device according to claim 7 is it is characterised in that described onboard system includes: at first processor and second
Reason device, described device also includes:
Receiver module, for receiving the data that the operating system run on described first processor is sent；
Setup module, for, after the data receiving the transmission of the operating system in described first processor, cashing indication being put
For the first mark；
Read module, for described second processing device listen to described cashing indication be first mark after, read described data；
Wherein, described first identify for mark receive data from described first processor.
9. device according to claim 6 is it is characterised in that described processor includes: mcu processor, and dsp process
At least one of device, mpu processor and soc processor processor.
10. device according to claim 9 is it is characterised in that run embedded real-time operation system in described mcu processor
System, runs Body Control task in described embedded real-time operating system；Described mpu processor, described soc processor and described
It is separately operable linux operating system and/or android operating system and/or ucos operating system in dsp processor, and institute
State and in the operating system run in dsp processor, described mpu processor and described mcu processor, run in-vehicle information amusement times
Business.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610843107.1A CN106341269A (en) | 2016-09-22 | 2016-09-22 | Control method and device of vehicle-mounted system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610843107.1A CN106341269A (en) | 2016-09-22 | 2016-09-22 | Control method and device of vehicle-mounted system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106341269A true CN106341269A (en) | 2017-01-18 |
Family
ID=57839094
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610843107.1A Pending CN106341269A (en) | 2016-09-22 | 2016-09-22 | Control method and device of vehicle-mounted system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106341269A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108819848A (en) * | 2018-06-14 | 2018-11-16 | 苏州途驰安电子科技有限公司 | Mileage acquisition methods and device based on listening mode |
| CN110221934A (en) * | 2019-05-08 | 2019-09-10 | 惠州市德赛西威汽车电子股份有限公司 | A kind of onboard system restoration methods |
| CN110706370A (en) * | 2019-09-12 | 2020-01-17 | 佛吉亚好帮手电子科技有限公司 | Remote monitoring system and method for realizing dual-system mode on vehicle-mounted platform |
| CN111746441A (en) * | 2020-06-30 | 2020-10-09 | 北京小米松果电子有限公司 | Vehicle control method and device |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101583518A (en) * | 2007-01-18 | 2009-11-18 | 丰田自动车株式会社 | Vehicle control system |
| JP2010160715A (en) * | 2009-01-09 | 2010-07-22 | Toyota Motor Corp | Electronic control unit for vehicle |
| CN103763168A (en) * | 2013-12-30 | 2014-04-30 | 深圳市航盛电子股份有限公司 | Method for isolating vehicle-mounted control system from media entertainment system |
| CN104044526A (en) * | 2013-03-13 | 2014-09-17 | 广州汽车集团股份有限公司 | Vehicle-mounted intelligent information system |
| CN104097586A (en) * | 2013-04-11 | 2014-10-15 | 陈言平 | Integral controller of electric automobile |
-
2016
- 2016-09-22 CN CN201610843107.1A patent/CN106341269A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101583518A (en) * | 2007-01-18 | 2009-11-18 | 丰田自动车株式会社 | Vehicle control system |
| JP2010160715A (en) * | 2009-01-09 | 2010-07-22 | Toyota Motor Corp | Electronic control unit for vehicle |
| CN104044526A (en) * | 2013-03-13 | 2014-09-17 | 广州汽车集团股份有限公司 | Vehicle-mounted intelligent information system |
| CN104097586A (en) * | 2013-04-11 | 2014-10-15 | 陈言平 | Integral controller of electric automobile |
| CN103763168A (en) * | 2013-12-30 | 2014-04-30 | 深圳市航盛电子股份有限公司 | Method for isolating vehicle-mounted control system from media entertainment system |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108819848A (en) * | 2018-06-14 | 2018-11-16 | 苏州途驰安电子科技有限公司 | Mileage acquisition methods and device based on listening mode |
| CN108819848B (en) * | 2018-06-14 | 2021-07-20 | 苏州途驰安电子科技有限公司 | Monitoring mode-based mileage data acquisition method and device |
| CN110221934A (en) * | 2019-05-08 | 2019-09-10 | 惠州市德赛西威汽车电子股份有限公司 | A kind of onboard system restoration methods |
| CN110221934B (en) * | 2019-05-08 | 2023-09-01 | 惠州市德赛西威汽车电子股份有限公司 | Vehicle-mounted system recovery method |
| CN110706370A (en) * | 2019-09-12 | 2020-01-17 | 佛吉亚好帮手电子科技有限公司 | Remote monitoring system and method for realizing dual-system mode on vehicle-mounted platform |
| CN111746441A (en) * | 2020-06-30 | 2020-10-09 | 北京小米松果电子有限公司 | Vehicle control method and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106341269A (en) | Control method and device of vehicle-mounted system | |
| CN103703422B (en) | Safety-critical equipment and for controlling the method that safety-critical equipment operation person laxes | |
| CN107194248B (en) | Method, device, equipment and storage medium for preventing black passenger hijacking of unmanned vehicle | |
| US20200218443A1 (en) | Multi-window display controller | |
| CN101268447A (en) | Software process monitor | |
| US20200219469A1 (en) | Separate operating systems for dashboard display | |
| CN109624985B (en) | Early warning method and device for preventing fatigue driving | |
| CN106469283A (en) | A kind of onboard system | |
| CN110293903B (en) | Vehicle steering lamp control method, device, equipment and storage medium | |
| CN110371081A (en) | Vehicle tamper resistant method, device and vehicle | |
| CN109353345A (en) | Control method for vehicle, device, equipment, medium and vehicle | |
| WO2024041328A1 (en) | Resource allocation method, apparatus, and carrier | |
| CN109808697A (en) | Control method for vehicle, device and equipment | |
| US10606786B2 (en) | Upgradable vehicular computing methods and apparatuses | |
| CN115794725B (en) | Method for obtaining play decision, decision system, related equipment and storage medium | |
| CN110775099B (en) | Integration method of communication system in train | |
| CN112386904B (en) | Game function key position data processing method based on vehicle and vehicle | |
| CN112717371B (en) | Vehicle, control method and system thereof, and storage medium | |
| WO2023030211A1 (en) | Driving assistance function-based notification scheduling method, device, and storage medium | |
| CN106796666B (en) | Robot control device, method and system | |
| CN115079993A (en) | Cross-system audio playing control method and device, vehicle and storage medium | |
| CN104123261B (en) | A kind of electronic equipment and information transferring method | |
| CN110288991B (en) | Voice recognition method and device | |
| CN112677985A (en) | Method and device for determining activation level of central control function of vehicle, electronic equipment and medium | |
| US20200326967A1 (en) | Operating system modality switching in an autonomous vehicle |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20180730 Address after: 511458 9, Nansha District Beach Road, Guangzhou, Guangdong, 9 Applicant after: Rui Chi Intelligent Automobile (Guangzhou) Co.,Ltd. Address before: 100025 8 floor 909, 105 building 3, Yao Yuan Road, Chaoyang District, Beijing. Applicant before: Lexus Automobile (Beijing) Co.,Ltd. Effective date of registration: 20180730 Address after: 100025 8 floor 909, 105 building 3, Yao Yuan Road, Chaoyang District, Beijing. Applicant after: Lexus Automobile (Beijing) Co.,Ltd. Address before: 100025 10 floor 1102, 105 building 3, Yao Yuan Road, Chaoyang District, Beijing. Applicant before: LE HOLDINGS (BEIJING) Co.,Ltd. Applicant before: LEAUTO INTELLIGENT TECHNOLOGY (BEIJING) Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| CB02 | Change of applicant information |
Address after: 511458 9, Nansha District Beach Road, Guangzhou, Guangdong, 9 Applicant after: Evergrande Faraday Future Smart Car (Guangdong) Co.,Ltd. Address before: 511458 9, Nansha District Beach Road, Guangzhou, Guangdong, 9 Applicant before: Rui Chi Intelligent Automobile (Guangzhou) Co.,Ltd. |
|
| CB02 | Change of applicant information | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20190314 Address after: 100015 Building No. 7, 74, Jiuxianqiao North Road, Chaoyang District, Beijing, 001 Applicant after: FAFA Automobile (China) Co.,Ltd. Address before: 511458 9, Nansha District Beach Road, Guangzhou, Guangdong, 9 Applicant before: Evergrande Faraday Future Smart Car (Guangdong) Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170118 |
|
| RJ01 | Rejection of invention patent application after publication |