CN115174611A - Vehicle-mounted virtualization platform - Google Patents

Vehicle-mounted virtualization platform Download PDF

Info

Publication number
CN115174611A
CN115174611A CN202210613630.0A CN202210613630A CN115174611A CN 115174611 A CN115174611 A CN 115174611A CN 202210613630 A CN202210613630 A CN 202210613630A CN 115174611 A CN115174611 A CN 115174611A
Authority
CN
China
Prior art keywords
module
partition
application
bus
vehicle
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210613630.0A
Other languages
Chinese (zh)
Inventor
曹学思
吴亮
王海南
秦亚芬
周延昕
李宏超
向润梓
杨迪飞
方弟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CRSC Urban Rail Transit Technology Co Ltd
Original Assignee
CRSC Urban Rail Transit Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CRSC Urban Rail Transit Technology Co Ltd filed Critical CRSC Urban Rail Transit Technology Co Ltd
Priority to CN202210613630.0A priority Critical patent/CN115174611A/en
Publication of CN115174611A publication Critical patent/CN115174611A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/20Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1097Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

The invention provides a vehicle-mounted virtualization platform, comprising: n partition modules, a bus application framework module and a hardware platform module; the bus application framework module is respectively in communication connection with each partition module, and the hardware platform module is in communication connection with the bus application framework module; each partition module is stored with a service function application program; the bus application framework module is used for transmitting the application data of the partition module to the hardware platform module so that the hardware platform module can run, and N is a positive integer. The application running on different hardware can be run on the same hardware platform through a partitioning mechanism, and the application running on different hardware does not affect each other. It is here possible to implement different SIL level service function software running in the same hardware without reducing the security level of the higher SIL level application software.

Description

Vehicle-mounted virtualization platform
Technical Field
The invention relates to the technical field of communication, in particular to a vehicle-mounted virtualization platform.
Background
In recent years, the urban rail transit technology is rapidly developed, the technical equipment level is continuously improved, the infrastructure construction and operation performance is obvious, people can travel more conveniently, but with the development of the technology, the urban rail transit faces new challenges, and the urban rail transit has irreplaceable effects in public transport due to the characteristics of large transportation volume, small separation, punctuation rate and the like.
The urban rail transit is developed aiming at vehicle-mounted equipment and comprises a vehicle-mounted automatic driving subsystem, a vehicle-mounted automatic protection subsystem, a passenger service subsystem, a vehicle management subsystem and other business subsystems. The equipment manufacturers are therefore equipped with a large number of devices for supporting the service subsystems in stages in the limited space of the vehicle and have formed an increasing trend year by year.
Since the urban rail transit signal system is divided into different network Security Integrity Levels (SILs) aiming at the subsystem devices bearing different service functions, how to ensure the availability and the Safety of the high SIL Level function after the software of the subsystems with different SILs levels is fused with each other becomes a problem which needs to be solved urgently.
Disclosure of Invention
The invention provides a vehicle-mounted virtualization platform, which is used for overcoming the defect that in the prior art, after software of subsystems with different SIL grades is fused with each other, the usability and the safety of a function with a high SIL grade are guaranteed.
The invention provides a vehicle-mounted virtualization platform, which comprises: the system comprises N partition modules, a bus application framework module and a hardware platform module;
the bus application framework module is respectively in communication connection with each partition module, and the hardware platform module is in communication connection with the bus application framework module;
each partition module is stored with a service function application program;
the bus application framework module is used for transmitting the application data of the partition module to the hardware platform module so as to enable the hardware platform module to run, and N is a positive integer.
The invention provides a vehicle-mounted virtualization platform, which comprises: the bus application framework sub-module and the bus communication equipment driving sub-module;
the bus application framework submodule is used for transmitting the application data of the partition module to other partition modules, and is also used for transmitting the application data of the partition module to the bus communication equipment driving submodule;
the bus communication equipment driving submodule is used for carrying out type optimization on the application data according to the interface type of the hardware platform module and transmitting the optimized application data to the hardware platform module.
According to the vehicle-mounted virtualization platform provided by the invention, under the condition that a first partition memory module in the N partition modules has non-safety codes, a second partition module in the N partition modules normally operates.
According to the vehicle-mounted virtualization platform provided by the invention, the bus application framework module is specifically used for:
and under the condition of receiving a plurality of application messages sent by the N partition modules, determining the safe communication protocol and the sending priority of each application message based on the safety integrity level corresponding to the plurality of application messages.
According to the vehicle-mounted virtualization platform provided by the invention, the N partition modules all run in the same board card, and the safety integrity levels of the service function application programs stored in the partition modules are different.
According to the vehicle-mounted virtualization platform provided by the invention, a client operating system is also operated in the partition module.
According to the vehicle-mounted virtualization platform provided by the invention, the bus application framework module is used for shielding visibility of different field buses to business function application programs in the partition module.
The vehicle-mounted virtualization platform provided by the invention can realize that applications running on different hardware run on the same hardware platform through a partition mechanism, and the applications do not influence each other. It is here possible to implement different SIL level service function software running in the same hardware without reducing the security level of the higher SIL level application software.
Drawings
In order to more clearly illustrate the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts.
Fig. 1 is a schematic structural diagram of a vehicle-mounted virtualization platform according to an embodiment of the present disclosure;
fig. 2 is a schematic structural diagram of a bus application framework module described in the embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings, and it is obvious that the described embodiments are some, but not all embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a schematic structural diagram of a vehicle-mounted virtualization platform provided in an embodiment of the present application, as shown in fig. 1, including: n partition modules 11, a bus application framework module 12 and a hardware platform module 13;
the bus application framework module 12 is in communication connection with each partition module 11, and the hardware platform module 13 is in communication connection with the bus application framework module 12;
each partitioning module 11 stores a service function application program;
the bus application framework module 12 is configured to transmit the application data of the partition module 11 to the hardware platform module 13, so that the hardware platform module 13 runs, where N is a positive integer.
The host operating system may specifically be a basic operating system of the vehicle-mounted virtualization platform.
Specifically, the N partition modules described in the embodiments of the present application specifically refer to configuring system resources (memory, IO, and the like) through a partition mechanism, and establishing a plurality of partition modules, where the partition modules include resources allocated by a system, and the partition modules are isolated from each other.
The partition modules realize mutual communication among different partitions on the same physical machine through message queues, pipelines, sockets and other modes.
In the embodiment of the application, a bus application framework module is provided for the application of the field bus, and the differences of the use method of the underlying equipment and the standard protocol stack are shielded. Here, different service qualities need to be provided by the bus application framework module according to the service function SIL grade of the partition application
In the embodiment of the present application, the partition isolation technology makes each partition unable to access the space resources outside the partition module, and the external partition module also unable to access the space resources inside the partition module. Different applications run in different partition modules, and the applications cannot sense the existence of other partition module applications due to isolation between partitions, so that the whole hardware resource is considered to be shared independently. Therefore, the applications running on different hardware can run on the same hardware platform through the partitioning mechanism, and the applications do not affect each other. It is here possible to implement different SIL level service function software running in the same hardware without reducing the security level of the higher SIL level application software.
In the embodiment of the present application, the hardware platform module may include vehicle-mounted devices each running a service function application in the partition module.
In the embodiment of the application, the applications running on different hardware can run on the same hardware platform through a partitioning mechanism, and the applications do not affect each other. It is here possible to implement different SIL level service function software running in the same hardware without reducing the security level of the higher SIL level application software. In addition, the vehicle-mounted application based on the partition technology widely supports various hardware platforms across the hardware platforms, so that complex software functions can be rapidly developed and transplanted to different hardware platforms. The virtualization technology can effectively isolate the program operating environment among all service subsystems, and can effectively reduce the occupancy rate of the limited vehicle space on the premise of ensuring the safety and the availability of signal products.
Optionally, the bus application framework module includes: the bus application framework sub-module and the bus communication equipment driving sub-module;
the bus application framework submodule is used for transmitting the application data of the partition module to other partition modules, and is also used for transmitting the application data of the partition module to the bus communication equipment driving submodule;
the bus communication equipment driving submodule is used for carrying out type optimization on the application data according to the interface type of the hardware platform module and transmitting the optimized application data to the hardware platform module.
Specifically, fig. 2 is a schematic structural diagram of a bus application framework module described in the embodiment of the present application, and as shown in fig. 2, the bus application framework module 12 includes: a bus application framework sub-module 121 and a bus communication device driver sub-module 122.
In the embodiment of the present application, since various different interface types may exist in the hardware platform module 13, and the bus application framework module cannot be directly applied to each type of interface when performing data transmission, the sub-module 122 needs to be driven by the bus communication device in the embodiment of the present application, so as to implement adaptation to different interfaces.
In this embodiment, the bus communication device driver sub-module 122 may implement compatibility with various data interfaces during data transmission, and after receiving the data transmitted by each partition, the bus application framework sub-module 121 may further transmit the data to the bus communication device driver sub-module 122, and transmit the data to a corresponding interface in the hardware device through the bus communication device driver sub-module 122.
In the embodiment of the application, the method comprises the following steps: the bus application framework submodule and the bus communication equipment driving submodule support various data interfaces.
Optionally, when a first partition module of the N partition modules has a non-secure code, a second partition module of the N partition modules operates normally.
In the embodiment of the application, data between the partition modules run independently without mutual influence, and when the application software of the first partition memory module and the application software of the second partition memory module are started, if the application software of the first partition memory module has a non-safety code.
And checking whether the application software of the partition 1 abnormally exits from running or the partition 2 normally runs according to the original design logic through a serial port, a network port or a command console.
In the embodiment of the application, the safety of each partition can be ensured through the partition isolation technology.
Optionally, the bus application framework module is specifically configured to:
and under the condition of receiving a plurality of application messages sent by the N partition modules, determining the safe communication protocol and the sending priority of each application message based on the safety integrity level corresponding to the plurality of application messages.
Specifically, in the embodiment of the present application, the secure communication protocol and the sending priority level of the application message may be determined according to different security integrity levels, where a higher security integrity level is used for a message, the corresponding sending priority level is also higher, and the security level of the secure communication protocol of a higher security integrity level is lower for a message.
For example, a first partition memory module and a second partition memory module are started, the application software in the first partition memory module sends data once according to 200ms, and the application software in the second partition memory module sends data once according to 200 ms.
And checking through the serial port log, and when the bus application framework module receives the information of which the application level is 4 and the application level is 2 in the same period, the bus application framework distinguishes the sending priority according to the application level. And adding a corresponding safety communication protocol for the corresponding information data by the bus application framework according to the application level.
In the embodiment of the application, the secure communication protocol and the sending priority of each application message are further specified according to the security integrity level, so that the sending order of the bus application framework module is ensured.
Optionally, the N partition modules all operate on the same board card, and the service function application programs stored in the partition modules have different safety integrity levels.
Optionally, a client operating system is also running in the partition module.
Optionally, the bus application framework module is configured to shield visibility of different fieldbus to the service function application in the partition module.
Specifically, in the embodiment of the present application, since application software with different SIL levels is changed from running on respective independent hardware boards to running on the same board, the original communication mode of the industrial ethernet, the CAN bus, 485, and the like may be changed to a software communication mode, for example: message queues, pipes, local loopback sockets, and the like. The complexity of the vehicle-mounted cabinet can be effectively reduced.
The bus application framework can effectively shield the visibility of different field buses for application software, and is favorable for the transplantation, the deployment and the rapid development of the application software. The bus application framework can provide different services for the application according to real-time performance and safety of different types of information and safety levels of different application software.
The key points are easier to realize related function deployment and remote or local restart service functions, and are more favorable for field experiments and operation maintenance.
As an alternative embodiment, an in-vehicle virtualization platform includes: the system comprises N partition modules, a bus application framework module and a hardware platform module;
wherein, the bus application framework module includes: the bus application framework sub-module and the bus communication equipment driving sub-module;
the bus application framework submodule is used for transmitting the application data of the partition module to other partition modules, and is also used for transmitting the application data of the partition module to the bus communication equipment driving submodule;
the bus communication equipment driving submodule is used for carrying out type optimization on the application data according to the interface type of the hardware platform module and transmitting the optimized application data to the hardware platform module.
The bus application framework module is respectively in communication connection with each partition module, and the hardware platform module is in communication connection with the bus application framework module;
each partition module is stored with a service function application program;
the bus application framework module is used for transmitting the application data of the partition module to the hardware platform module so as to enable the hardware platform module to run, and N is a positive integer.
In the application embodiment, the vehicle-mounted application based on the partition technology widely supports various hardware platforms across hardware platforms, so that complex software functions can be rapidly developed and transplanted to different hardware platforms. The program running environment among all service subsystems can be effectively isolated based on the virtualization technology, and the limited vehicle space occupancy rate can be effectively reduced on the premise of ensuring the safety and the usability of signal products.
The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. Based on the understanding, the above technical solutions substantially or otherwise contributing to the prior art may be embodied in the form of a software product, which may be stored in a computer-readable storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the method according to the various embodiments or some parts of the embodiments.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (7)

1. An in-vehicle virtualization platform, comprising: n partition modules, a bus application framework module and a hardware platform module;
the bus application framework module is respectively in communication connection with each partition module, and the hardware platform module is in communication connection with the bus application framework module;
each partition module is stored with a service function application program;
the bus application framework module is used for transmitting the application data of the partition module to the hardware platform module so as to enable the hardware platform module to run, and N is a positive integer.
2. The in-vehicle virtualization platform of claim 1, wherein the bus application framework module comprises: the bus application framework sub-module and the bus communication equipment driving sub-module;
the bus application framework submodule is used for transmitting the application data of the partition module to other partition modules, and is also used for transmitting the application data of the partition module to the bus communication equipment driving submodule;
the bus communication equipment driver submodule is used for carrying out type optimization on the application data according to the interface type of the hardware platform module and transmitting the optimized application data to the hardware platform module.
3. The on-board virtualization platform of claim 1, wherein a second partition module of the N partition modules is functioning properly in the presence of non-secure code in a first partition module of the N partition modules.
4. The vehicle-mounted virtualization platform of claim 3, wherein the bus application framework module is specifically configured to:
and under the condition of receiving a plurality of application messages sent by the N partition modules, determining the safe communication protocol and the sending priority of each application message based on the safety integrity level corresponding to the plurality of application messages.
5. The vehicle-mounted virtualization platform of claim 1, wherein the N partition modules all run on the same board, and the service function applications stored in each partition module have different security integrity levels.
6. The in-vehicle virtualization platform of claim 1, wherein the partition module further runs a guest operating system therein.
7. The in-vehicle virtualization platform of claim 1, wherein the bus application framework module is configured to mask visibility of different fieldbus to business function applications in the partition module.
CN202210613630.0A 2022-05-31 2022-05-31 Vehicle-mounted virtualization platform Pending CN115174611A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210613630.0A CN115174611A (en) 2022-05-31 2022-05-31 Vehicle-mounted virtualization platform

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210613630.0A CN115174611A (en) 2022-05-31 2022-05-31 Vehicle-mounted virtualization platform

Publications (1)

Publication Number Publication Date
CN115174611A true CN115174611A (en) 2022-10-11

Family

ID=83483595

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210613630.0A Pending CN115174611A (en) 2022-05-31 2022-05-31 Vehicle-mounted virtualization platform

Country Status (1)

Country Link
CN (1) CN115174611A (en)

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102011085463A1 (en) * 2011-10-28 2013-05-02 Mtu Friedrichshafen Gmbh Control device for controlling drive system e.g. hybrid drive for rail vehicle, has control modules which are communicatively connected via internal and external data buses
CN104134372A (en) * 2014-08-04 2014-11-05 上海扬梓投资管理有限公司 Vehicle safety information communication terminal and method
CN104899133A (en) * 2014-03-07 2015-09-09 空中客车运营简化股份公司 Testing integrated independent levels of security components hosted on a virtualisation platform
CN109542831A (en) * 2018-10-28 2019-03-29 西南电子技术研究所(中国电子科技集团公司第十研究所) Airborne platform multi-core virtual multidomain treat-ment system
CN110012075A (en) * 2019-03-12 2019-07-12 平安科技(深圳)有限公司 Data transmission method and relevant device
CN111045646A (en) * 2019-11-13 2020-04-21 北京中电万联科技股份有限公司 Vehicle-mounted application cross-hardware platform based on virtualization technology
CN114189832A (en) * 2021-11-30 2022-03-15 北京华高世纪科技股份有限公司 Train wireless intelligent gateway system, data processing method and gateway
CN114489584A (en) * 2021-12-31 2022-05-13 中国航空工业集团公司西安飞机设计研究所 Electromechanical core processor software architecture based on ARINC653 standard

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102011085463A1 (en) * 2011-10-28 2013-05-02 Mtu Friedrichshafen Gmbh Control device for controlling drive system e.g. hybrid drive for rail vehicle, has control modules which are communicatively connected via internal and external data buses
CN104899133A (en) * 2014-03-07 2015-09-09 空中客车运营简化股份公司 Testing integrated independent levels of security components hosted on a virtualisation platform
CN104134372A (en) * 2014-08-04 2014-11-05 上海扬梓投资管理有限公司 Vehicle safety information communication terminal and method
CN109542831A (en) * 2018-10-28 2019-03-29 西南电子技术研究所(中国电子科技集团公司第十研究所) Airborne platform multi-core virtual multidomain treat-ment system
CN110012075A (en) * 2019-03-12 2019-07-12 平安科技(深圳)有限公司 Data transmission method and relevant device
CN111045646A (en) * 2019-11-13 2020-04-21 北京中电万联科技股份有限公司 Vehicle-mounted application cross-hardware platform based on virtualization technology
CN114189832A (en) * 2021-11-30 2022-03-15 北京华高世纪科技股份有限公司 Train wireless intelligent gateway system, data processing method and gateway
CN114489584A (en) * 2021-12-31 2022-05-13 中国航空工业集团公司西安飞机设计研究所 Electromechanical core processor software architecture based on ARINC653 standard

Similar Documents

Publication Publication Date Title
US11036853B2 (en) System and method for preventing malicious CAN bus attacks
US10581739B2 (en) System for verification of unregistered device based on information of Ethernet switch and method for the same
JP2017120497A (en) Airborne system
US20150334050A1 (en) Partitionable router to facilitate communication between systems
CN111857774A (en) Method and system for upgrading software of vehicle-mounted equipment
CN112433826B (en) Hybrid heterogeneous virtualization communication method and chip
CN115174611A (en) Vehicle-mounted virtualization platform
CN113703665A (en) Method and device for reducing loss of control terminal data after gateway breakdown and electronic equipment
US20170134788A1 (en) Method and Apparatus for Providing Linking Service Between Vehicle AVN System and Smartphone Based on Virtualization Framework
CN110775099B (en) Integration method of communication system in train
CN109120680A (en) A kind of control system, method and relevant device
CN115883138A (en) Method, device, equipment and medium for polling running state of airborne entertainment system
CN110955399A (en) In-vehicle display system, image display method, storage medium, and host
CN108556877B (en) Method, device and system for realizing train control system information safety protection
CN110502306A (en) A kind of safe man-machine interactive system and method for vehicle-mounted automatic train protection system
CN115923889A (en) Automatic driving system and method compatible with C2ATO and CBTC
CN115495195A (en) Data processing method and device and related equipment
US11755355B2 (en) Systems and methods for assigning domain identifiers to remote peripheral devices using a hypervisor
CN114679295A (en) Firewall security configuration method and device
US20110182259A1 (en) Partitionable router to facilitate communication between systems
CN116451975B (en) Method, device and equipment for determining ground guarantee tasks based on multi-station flights
Van Waes et al. Electromagnetic interference in the Internet of Things: An automotive insight
CN112929197A (en) Network communication method, device, equipment and storage medium
CN108920164A (en) The management method and device of host in cloud computing system
US20230179570A1 (en) Canbus cybersecurity firewall

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination