KR102104298B1 - A method for determinig safety of data and an electronic device performing the method - Google Patents

Abstract

A method for determining whether target data is secure and an electronic device performing the method are provided. The comparison data is generated by encoding and decoding the target data using at least one of address and control data, and the safety of the target data is determined by determining whether the target data is the same as the comparison data. If any of the target data, address, and control data has been manipulated, or if there is a problem with the memory that stores the data for any reason, or if there is a problem with the connection (or communication channel) associated with the memory, the target data and comparison data are Will not be the same.

Description

A METHOD FOR DETERMINIG SAFETY OF DATA AND AN ELECTRONIC DEVICE PERFORMING THE METHOD

The following embodiments relate to a technique for determining the safety of data, and more particularly, to a technique for determining the safety of data using a plurality of memories.

As technologies for Advanced Driver Assistance Systems (ADAS) or self-driving vehicles have been developed, features for ISO 26262 are being emphasized. ISO 26262 is an international standard for vehicle functional safety to implement functional safety. ISO 26262, along with the process model, defines the required activities, tangible and intangible evidence, and the method used for development and production.

One embodiment may provide a method for determining the safety of data and an electronic device thereof.

One embodiment may provide a method and an electronic device for determining the safety of data using a plurality of memories.

According to an aspect, a method of determining safety of stored data in a general memory, performed by an electronic device, includes loading target data from general memory and comparing based on an address corresponding to the target data Loading code from a memory (compare memory), generating comparison data by decoding the code, loading the comparison data, determining whether the target data and the comparison data are the same, and And when the target data and the comparison data are not the same, determining that the target data is unsafe.

Generating the comparison data may include decoding the code based on at least one of address and control data corresponding to the code.

The method for determining the safety of the data includes generating the code by encoding the target data based on at least one of address and control data corresponding to the target data, and storing the code in the comparison memory It may further include.

The comparison memory is composed of static random access memory (SRAM), and the comparison memory and the general memory may be physically different memories.

The electronic device may be included in an autonomous vehicle or a vehicle supporting an advanced driver assistance system.

According to another aspect, an electronic device for determining whether data is safe includes a memory in which a program for updating a policy for controlling a robot's behavior is recorded, and a processor for executing the program, wherein the program includes: Loading target data from a general memory, loading code from a compare memory based on the address of the target data, generating comparison data by decoding the code, and comparing the comparison data Loading, determining whether the target data and the comparison data are the same, and determining that the target data is unsafe when the target data and the comparison data are not the same.

Generating the comparison data may include decoding the code based on at least one of address and control data corresponding to the code.

The program may further perform the step of generating the code by encoding the target data based on at least one of address and control data corresponding to the target data, and storing the code in the comparison memory. .

The comparison memory may be composed of a static random access memory (SRAM) or a register and a corresponding device, and the comparison memory and the general memory may be physically different memories.

The electronic device may be included in an autonomous vehicle or a vehicle supporting an advanced driver assistance system, and may be used in other ECUs and various types of controllers or sensors.

One embodiment may provide a method for determining the safety of data and an electronic device thereof.

One embodiment may provide a method and an electronic device for determining the safety of data using a plurality of memories.

1 illustrates a vehicle equipped with an electronic device according to an example.
2 is a configuration diagram of an electronic device for determining data safety according to an embodiment.
3 is a configuration diagram of a comparison memory block according to an example.
4 is a flowchart of a method for determining data safety according to an embodiment.
5 illustrates data flow between components in an electronic device according to an example.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, various changes may be made to the embodiments, and the scope of the patent application right is not limited or limited by these embodiments. It should be understood that all modifications, equivalents, or substitutes for the embodiments are included in the scope of rights.

The terms used in the examples are for illustrative purposes only and should not be construed as limiting. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this specification, the terms "include" or "have" are intended to indicate the presence of features, numbers, steps, actions, components, parts or combinations thereof described herein, one or more other features. It should be understood that the existence or addition possibilities of fields or numbers, steps, operations, components, parts or combinations thereof are not excluded in advance.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by a person skilled in the art to which the embodiment belongs. Terms such as those defined in a commonly used dictionary should be interpreted as having meanings consistent with meanings in the context of related technologies, and should not be interpreted as ideal or excessively formal meanings unless explicitly defined in the present application. Does not.

In addition, in the description with reference to the accompanying drawings, the same reference numerals are assigned to the same components regardless of reference numerals, and redundant descriptions thereof will be omitted. In describing the embodiments, when it is determined that detailed descriptions of related known technologies may unnecessarily obscure the subject matter of the embodiments, detailed descriptions thereof will be omitted.

1 illustrates a vehicle equipped with an electronic device according to an example.

According to one aspect, the vehicle 100 may travel in an autonomous mode according to a recognized driving environment even in a situation where there is little or no input from the driver. The driving environment may be recognized through one or more sensors attached or installed in the vehicle 100. For example, one or more sensors may include camera, lidar (RADAR), and radar (RADAR) and speech recognition sensors, but are not limited to the described examples. The driving environment may include roads, conditions of roads, types of lanes, presence or absence of surrounding vehicles, distance from adjacent vehicles, weather, presence or absence of obstacles, and the like, and is not limited to the examples described.

The vehicle 100 recognizes a driving environment and generates an autonomous driving route suitable for the driving environment. The autonomous vehicle controls the internal and external mechanical elements to follow the autonomous driving path. The vehicle 100 may periodically generate an autonomous driving route.

According to another aspect, the vehicle 100 may assist the driver to drive using an Advanced Driver Assistance Systems (ADAS). ADAS is an Autonomous Emergency Braking (AEB) system that reduces or stops speed even if the driver does not step on the braking system in the event of a collision. System: LKAS), Advanced Smart Cruise Control (ASCC), which runs at a pre-determined speed and keeps track of the distance from the front car, detects the danger of blind spot collisions and assists in rear collision avoidance System (Active Blind Spot Detection: ABSD), Around View Monitor (AVM), which visually shows the situation around the vehicle.

The electronic device 110 included in the vehicle 100 may control a mechanical device of the vehicle 100 to autonomously drive or assist the driver in driving, and ECUs and various types of controllers or sensors other than the described embodiments Can be used. Since the electronic device 110 automatically controls the mechanical elements, the accuracy of the control is very important. If a control different from the intention of the electronic device 110 is performed due to an error in data, an accident may result. For example, if a control that increases or decreases the speed is performed instead of the control that slows down, it may lead to an accident. As another example, data may be manipulated by external intervention (eg, hacking). As another example, data may be damaged or problems may occur in data transfer between a processor and a memory due to various reasons, such as aging of an internal device or circuit of the electronic device 110, external shock, rapid temperature change, or high or low temperature exposure. Accordingly, before controlling a mechanical element, a method for determining whether data is safe should be performed. The above is related to ISO 26262 or international standards for automotive functional safety. ISO 26262 is an international standard for automotive functional safety established by ISO to prevent accidents due to errors in the E / E (Electric & Electronic) system mounted on the vehicle 100. ISO 26262, along with the process model, defines the required activities, tangible and intangible evidence, and the method used for development and production.

By modifying the memory structure, a method of determining the safety of data can be considered. The above method will be described in detail with reference to Figs. 2 to 5 below.

2 is a configuration diagram of an electronic device for determining data safety according to an embodiment.

The electronic device 200 includes a communication unit 210, a processor 220, a general memory 230, and a comparison memory block 240. The electronic device 200 may be included in the vehicle 100 described above with reference to FIG. 1.

The communication unit 210 is connected to the processor 220 and the general memory 230 and the comparison memory block 240 to transmit and receive data. The communication unit 210 may be connected to another external device to transmit and receive data. The communication unit 210 may be implemented as circuitry in the electronic device 200. For example, the communication unit 210 may include an internal bus and an internal bus. As another example, the communication unit 210 may be an element connecting the electronic device 200 and an external device. The communication unit 210 may be an interface. The communication unit 210 may receive data from an external device and transmit data to the processor 220 and the general memory 230.

The processor 220 processes data received by the communication unit 210 and data stored in the general memory 230.

The "processor" may be a data processing device implemented in hardware having circuits having a physical structure for performing desired operations. For example, desired operations may include code or instructions included in a program. For example, the data processing device implemented in hardware includes a microprocessor, a central processing unit, a processor core, a multi-core processor, and a multiprocessor. , ASIC (Application-Specific Integrated Circuit), FPGA (Field Programmable Gate Array).

The processor 220 executes computer readable code (eg, software) stored in the memory (eg, the memory 230) and instructions caused by the processor 220.

The general memory 230 may store data received by the communication unit 210 and data processed by the processor 220. For example, the general memory 230 may store a program.

According to one aspect, the general memory 230 may include a set of one or more registers, volatile memory, non-volatile memory and random access memory (RAM), flash memory, hard disk drive, and optical disk drive.

The general memory 230 may store a set of instructions (eg, software) that determines safety of data. The set of instructions that determine the safety of the data can be executed by the processor 220. The processor 220 may determine the safety of data according to the instruction set.

The comparison memory block 240 may store comparison data that can confirm the safety of data stored in the general memory 230. For example, the comparison memory block 240 may store modified data in the form of encoding a program.

Hereinafter, the electronic device 200 will be described in detail with reference to FIGS. 3 to 5.

3 is a configuration diagram of a comparison memory block according to an example.

According to an embodiment, referring to FIG. 2, the comparison memory block 240 includes an encoder 310, a comparison memory 320, and a decoder 330.

The encoder 310 generates a code by encoding data based on the data that the processor 220 wants to write and an address corresponding to the data. The comparison memory 320 stores the generated code. For example, the comparison memory 320 may be composed of a static random access memory (RAM) or a register or a corresponding device, and the comparison memory 320 may be a physically different memory from the normal memory 230 You can. The decoder 330 generates data by decoding the code. The decoding of the code can be contrasted with the encoding of the data.

According to one aspect, the comparison memory block 240 may further include an internal processor (not shown), and the internal processor may control the comparison memory block 240. For example, the internal processor may control the encoder 310, the comparison memory 320 and the decoder 330.

Hereinafter, the encoder 310, the comparison memory 320, and the decoder 330 will be described in detail with reference to FIGS. 4 to 5.

4 is a flowchart of a method for determining data safety according to an embodiment.

The electronic device 200 described above with reference to FIGS. 2 to 3 performs the following steps 410 to 450.

In step 405, the encoder 310 generates code by encoding target data that the processor 220 wants to write. For example, the encoder 310 generates code by encoding target data based on at least one of address and control data corresponding to the target data. Code can be generated by encrypting the target data.

In step 410, the general memory 230 stores the target data. For example, the general memory 230 may store target data using at least one of address and control data corresponding to the target data transmitted by the processor 220. Although step 410 is shown to be performed after step 405 is performed, step 410 may be performed in parallel with step 405.

In step 415, the comparison memory 320 stores the generated code.

In step 420, the electronic device 200 loads target data from the general memory 230. For example, the electronic device 200 may load target data using the processor 220, a separate processor, or circuits of the electronic device 200.

In step 425, the decoder 330 loads the code from the comparison memory 320 based on the address corresponding to the target data. The address corresponding to the target data may be received from the processor 220.

In step 430, the decoder 330 generates comparison data by decoding the code. For example, the decoder 330 may decode the code based on at least one of address and control data corresponding to the code (or target data). The decoding scheme may correspond to the encoding scheme of step 405. That is, comparison data can be generated by decoding the code.

In step 435, the electronic device 200 loads comparison data. For example, the electronic device 200 may load comparison data using a circuit of the processor 220, a separate processor, or the electronic device 200, and load it through a communication channel or a simple connection structure.

In step 440, the electronic device 200 determines whether the target data and the comparison data are the same. For example, the electronic device 200 may determine whether the target data and the comparison data are the same using the processor 220, a separate processor, or internal circuits of the electronic device 200.

In step 445, when the target data and the comparison data are the same, the electronic device 200 determines that the target data is secure. Since the target data is encoded and decoded again based on the address and control data corresponding to the target data, if any one of the target data, the address and the control data is in error, the target data and the comparison data are not the same. Accordingly, the fact that the target data and the comparison data are the same means that the target data, the address and the control data have not been tampered with, and that the target data has not caused any problems due to aging or the environment of the electronic device 200.

When it is determined that the target data is safe, the electronic device 200 may control the vehicle using the target data.

In step 450, if the target data and the comparison data are not the same, the electronic device 200 determines that the target data is unsafe.

When it is determined that the target data is unsafe, the electronic device 200 may take a separate measure to secure safety by itself, or may inform the outside that it is unsafe. Further, the electronic device 200 may recover target data as an example of a separate measure for securing safety by itself.

5 illustrates data flow between components in an electronic device according to an example.

The electronic device 200 includes the following processor 510, a general memory 520, an encoder 530, a comparison memory 540, a decoder 550 and a comparator 560.

The processor 510 generates target data. The target data can be related to the control of the vehicle. The processor 510 may correspond to the processor 220 described above with reference to FIGS. 2 to 4.

The general memory 520 stores target data written by the processor 510. The general memory 520 may correspond to the general memory 230 described above with reference to FIGS. 2 to 4. Additionally, the general memory 520 may receive and store address and control data corresponding to the target data from the processor 510.

The encoder 530 generates code by encoding target data received from the processor 510. For example, the encoder 530 may encode the target data based on at least one of address and control data corresponding to the target data received from the processor 510. The encoder 530 may correspond to the encoder 310 described above with reference to FIGS. 2 to 4.

The comparison memory 540 stores the generated code. For example, the comparison memory 540 may correspond to the comparison memory 320 described above with reference to FIGS. 2 to 4.

The decoder 550 reads the code from the comparison memory 540 and decodes the read code to generate comparison data. For example, the decoder 550 may decode the code based on at least one of address and control data corresponding to target data received from the processor 510. The decoder 550 may correspond to the decoder 550 described above with reference to FIGS. 2 to 4.

The comparator 560 reads the target data from the general memory 520, reads the comparison data from the decoder 550, and determines whether the target data and the comparison data are the same. The comparator 560 may be a processor 510, another processor, or an internal circuit of the electronic device 200.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, or the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiments or may be known and usable by those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs, DVDs, and magnetic media such as floptical disks. -Hardware devices specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions include high-level language code that can be executed by a computer using an interpreter, etc., as well as machine language codes produced by a compiler. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

The software may include a computer program, code, instruction, or a combination of one or more of these, and configure the processing device to operate as desired, or process independently or collectively You can command the device. Software and / or data may be interpreted by a processing device, or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. , Or may be permanently or temporarily embodied in the transmitted signal wave. The software may be distributed on networked computer systems, and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

As described above, although the embodiments have been described by the limited drawings, those skilled in the art can apply various technical modifications and variations based on the above. For example, the described techniques are performed in a different order than the described method, and / or the components of the described system, structure, device, circuit, etc. are combined or combined in a different form from the described method, or other components Alternatively, even if replaced or substituted by equivalents, appropriate results can be achieved.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

200: electronic device
210: communication unit
220: processor
230: normal memory
240: comparison memory block

Claims (11)

A method for determining the safety of stored data in a general memory, performed by an electronic device,
Loading target data from general memory;
Loading code from a compare memory based on an address corresponding to the target data;
Generating comparison data by decoding the code;
Loading the comparison data;
Determining whether the target data and the comparison data are the same; And
Determining that the target data is unsafe when the target data and the comparison data are not the same
Including,
The step of generating the comparison data,
Decoding the code based on at least one of address and control data corresponding to the code
Containing,
How to determine data safety.
delete According to claim 1,
Generating the code by encoding the target data based on at least one of address and control data corresponding to the target data; And
Storing the code in the comparison memory
Further comprising,
How to determine data safety.
According to claim 1,
The comparison memory is composed of static random access memory (SRAM),
The comparison memory and the general memory are physically different memories,
How to determine data safety.
According to claim 1,
The electronic device is included in a vehicle supporting an autonomous vehicle or an advanced driver assistance system,
How to determine data safety.
A computer-readable recording medium containing a program for performing the method of any one of claims 1, 3, 4 and 5.
An electronic device that determines whether data is secure,
A memory in which a program for updating a policy for controlling the behavior of the robot is recorded; And
Processor that performs the program
Including,
The program,
Loading target data from general memory;
Loading code from a compare memory based on the address of the target data;
Generating comparison data by decoding the code;
Loading the comparison data;
Determining whether the target data and the comparison data are the same; And
Determining that the target data is unsafe when the target data and the comparison data are not the same
And
The step of generating the comparison data,
Decoding the code based on at least one of address and control data corresponding to the code
Containing,
Electronic devices.
delete The method of claim 7,
The program,
Generating the code by encoding the target data based on at least one of address and control data corresponding to the target data; And
Storing the code in the comparison memory
To do more,
Electronic devices.
The method of claim 7,
The comparison memory is composed of static random access memory (SRAM),
The comparison memory and the general memory are physically different memories,
Electronic devices.
The method of claim 7,
The electronic device is included in an autonomous vehicle or a vehicle supporting an advanced driver assistance system,
Electronic devices.

Images