WO2023007317A1

WO2023007317A1 - Interface system between two electronically controlled devices and electronically controlled unit comprising said interface system

Info

Publication number: WO2023007317A1
Application number: PCT/IB2022/056701
Authority: WO
Inventors: Carmelo FERRANTE; Alberto DI TARANTO
Original assignee: Ferrante Carmelo; Di Taranto Alberto
Priority date: 2021-07-27
Filing date: 2022-07-20
Publication date: 2023-02-02
Also published as: IT202100020033A1

Abstract

Interface system (1; 100) for interfacing between two electronically controlled devices (11, 12), comprising: two buses (2, 3) that can be connected to, respectively, the two electronically controlled devices (11, 12) for the transmission of corresponding signals from/to the two electronically controlled devices (11, 12); logic units (41, 42, 43), each being configured to process first signals received from one of the two buses (2, 3), based on a set of predefined rules different from the set of rules implemented by each one of the other logic units (41, 42, 43), in order to obtain corresponding second signals and to render them available at the other bus (2, 3); a selecting unit (5) operable by a user to selectively enable any one of the logic units (41, 42, 43), at the same time inhibiting all the other logic units (41, 42, 43).

Description

INTERFACE SYSTEM BETWEEN TWO ELECTRONICALLY CONTROLLED DEVICES AND ELECTRONICALLY CONTROLLED UNIT COMPRISING SAID INTERFACE SYSTEM

DESCRIPTION

FIELD OF APPLICATION

The present invention is generally applicable to the technical field of electronics and information technology. In particular, the invention has as its object an interface system for the communication between two electronically controlled device, that offers to the user a high flexibility in the choice of the interfacing modes.

STATE OF THE ART

It is hereby specified that, in the present description, the expression “electronically controlled device” is used to indicate any device, whether electronic, mechanical, or electromechanical, whose operation can be controlled by means of electric signals. For the sake of conciseness, and when not otherwise indicated, the term “device” will be sometimes used in general terms to indicate any one of the above mentioned electronically controlled device.

As known, apparatuses exist that comprise a plurality of electronically controlled devices that perform corresponding mutually different functions, and interconnected through interface systems that allow their mutual communication in such a way that one of the devices can send specific requests to another one of the devices, which reacts accordingly.

The increasing degree of automation in electronically controlled devices and their increasing complexity brought to the development of interface systems based on logic units configured to translate in real time, through a predefined set of rules, the variety of information exchanged between the devices. This applies, for example, to the digital devices in general, the memory supports, the numerical-control machine tools, the control devices on board of vehicles, the new generation appliances, and so on.

Often, the above mentioned set of rules is codified inside the logic unit in the form of a corresponding “firmware”, that is executed by a processing unit (CPU) also belonging to the logic unit.

In the present description, the term “firmware” indicates an executable code stored in a non volatile memory, that can be of the types ROM, PROM, EPROM, EEPROM, “flash”, and so on, belonging to the logic unit. An essential feature of a firmware is that it cannot be modified by the user during normal operation of the electronically controlled device. In fact, even when the firmware is stored in a re writable memory, its modification needs anyway to set the logic unit in a specific operational condition. The setting may occur through hardware, for example by acting on a selector, or by connecting an external device to a predefined port of the logic unit, and so on, or through software, for example through sending a predefined signal to the logic unit.

Often, a device belonging to the apparatus, that will be indicated for simplicity as “user device”, requests interfacing with a plurality of other devices belonging to the apparatus, that will be indicated for simplicity “service devices”, that perform different functions requested by the user device.

Often, a service device is physically associated to a corresponding dedicated logic unit, in order to form a single electronically controlled unit. Hereinafter, when not specified otherwise, the term “service unit” may be used for conciseness to mean one of the just mentioned electronically controlled units. Each of the above mentioned service units can be replaced with other service units that perform similar functions.

A particular type of service unit is the storage unit, such as a magnetic disk unit (“hard-disk drive”, or HDD), a solid-state drive (or SSD), etcetera. The storage units are designed to be connected to an external computer (CPU), corresponding to the above defined user device, in order to store and retrieve data. The computer sends a request to the storage unit, typically a request for reading or writing data, that is translated by the logic unit belonging to the storage unit into a corresponding command for the memory support - magnetic disk, solid-state memory, etcetera - according to the predefined set of rules implemented in the firmware. The operation ends with the response of the logic unit to the computer.

For example, in case of a magnetic-disk storage unit, when receiving a request for reading the data stored in a given portion of the disk, the firmware of the unit generates signals for controlling the magnetic head in order to extract the data stored in the above mentioned portion of the disk, then it responds to the computer by sending the so extracted data.

Peculiar elements of a storage unit are the access policies, that is, the set of rules implemented into the firmware. Those access policies depend on the context in which the storage unit is used, that may be the mass storage in a computer or in other digital devices, the use on a server, the archiving of data, the remote storage (“cloud”), or also the acquisition and preservation of digital evidence in the forensic information technology, and so on.

Generally, different contexts require storage units having different access policies. For example, in storage units used for mass storage, an unlimited read and write policy may be implemented. Instead, in a data preservation context, such as in forensic information technology, and in archiving, it is preferable to employ storage units of the “WORM” (Write Once Read Many) type, which allow a first writing of data, but prevent the subsequent modification thereof. In contexts in which it is important to keep information secret, units whose access policies comprise cryptography systems, and/or policies for controlled and verified access, for example through digital fingerprint, are used. Those just listed are just some of the possible access policies that may be implemented in the firmware of a storage unit.

Similar considerations are applicable, by analogy, to electronically controlled device of a different kind than the memory supports. For example, in the automotive field, different firmwares can be used that implement different functions to achieve corresponding different versions of a given vehicle, for example different driving responses, for other given features.

A drawback of the known techniques above mentioned is that they require to provide distinct units to implement each set of rules. For example, in the case of storage units, different storage units are marketed in to fulfill the different needs, each of which is provided with a firmware that implements one of the above mentioned access policies. As a consequence, one may differentiate between different kind of storage units, i.and. mass storage units, WORM units, cryptography units, units with access through digital footprint, and so on.

For some electronically controlled unit, a technique is used consisting in periodically updating the firmware from remote. The above mentioned technique envisages to overwrite the original firmware with a new firmware, that is provided by the manufacturer of the unit. For example, the above mentioned technique is commonly employed for the smartphones, for vehicles, etcetera. Often, the updating is performed by means of wireless networks, in which case it is called “OTA” (Over The Air).

In the above cases, in order to prevent interruptions of the operations of the unit during overwriting of the firmware, and/or in case of accidental interruption of the updating, it is known to provide the logic unit with an auxiliary memory partition, distinct from the main one where the original firmware is stored. The new firmware is assembled in the auxiliary partition. Only after the new firmware has been completely assembled and the unit is in a particular condition, for example non-operative condition, the logic unit executes the overwriting of the firmware into the main partition.

All the known techniques described so far have the drawback that the change of the firmware directly by the user is difficult, because it requires higher technical skills that than those of the average user.

A further drawback of the above mentioned techniques is that, anyway, the change of the firmware by the user requires a certain work, because it needs some preliminary operations, such as finding the new firmware and setting the logic unit in a specific operational condition to allow overwriting the original firmware with the new one.

A further drawback of the above mentioned techniques is that, once the firmware is modified, the user can’t restore it to its original configuration, except through accomplishing a new modification procedure. SUMMARY OF THE INVENTION

The present invention aims at overcoming at least partially the above mentioned drawbacks of the prior art.

In particular, it is an aim of the invention to provide a system for interfacing between two electronically controlled device that allows a user to reversibly modify the set of interfacing rules.

It is also an aim of the invention that the above mentioned modification can be accomplished in a simpler and quicker way compared to the prior art.

It is a further aim of the invention that the user can select the set of interfacing rules between a plurality of different available set of rules.

It is also an aim of the invention that the user has the possibility of preventing the further modification of the set of interfacing rules.

The above mentioned aims are achieved by an interface system according to the main claim.

The above mentioned aims are also achieved by an electronically controlled unit incorporating the above mentioned interface system, according to claim 11.

Further detail features of the invention are specified in the corresponding dependent claims.

It is hereby specified that, in the present description, the term “bus” means any communication channel capable of transferring signals between two devices, irrespective of the kind of means used (conductor or sky), the kind of signal (analogical or digital), the kind of transmission (parallel or serial), etcetera.

It is also specified that the term "logic unit" means any electronic device, programmable or not, in which a predefined set of rules is codified, according to which the input signals are processed in order to provide, as a response, corresponding output signals. The set of rules can be codified in the structure of the logic unit, or implemented through a set of instructions (code) executable by a processing unit.

According to a first aspect, the invention concerns an interface system for interfacing between two electronically controlled device, the system comprising a plurality of logic units, each configured for processing the signals coming from one of the two devices based on a predefined set of rules different from the set of rules implemented by each one of the other logic units, and for rendering signals available to be sent to the other device as a response, wherein a selecting unit is provided that is operable by a user for enabling any one of the logic units, at the same time inhibiting all the other logic units.

According to a further aspect of the invention, the set of rules of each logic unit is implemented by means of a corresponding firmware.

According to a further aspect of the invention, each logic unit comprises a corresponding integrated circuit that is distinct from the integrated circuits of the other logic units, the selecting unit being configured to interrupt an electrical connection towards each one of the above mentioned integrated circuits except the one that is selected.

According to a further aspect of the invention, all of the firmwares of the logic units are stored in corresponding portions of memory of the same integrated circuit, the selecting unit comprising a single processing unit, a register where a value is stored that the user can change to uniquely identify any one of the above mentioned firmwares, and an addressing device configured to address the requests of the processing unit to access the firmware that is identified by the register.

According to a further aspect of the invention, the interface system comprises a stop device operable by the user to selectively inhibit all the logic units except one of them.

According to a further aspect, the invention concerns an electronically controlled unit comprising a first electronically controlled device, and an interface system mechanically associated to the first electronically controlled device in order to form a single element, the interface system being configured to allow interfacing the first electronically controlled device to a second electronically controlled device.

Advantageously, the invention provides a single interface system and, thus, a single storage unit, capable of implementing a plurality of different sets of rules so as to further allow the user to select, through the selecting unit, one of said sets of rules according to the needs.

Also advantageously, the user can quickly select a different set of rules when the needs change, again acting on the on the selecting unit.

Also advantageously, the user can act on the stop device to prevent further changes to the set of rules, for example for security reasons.

According to a further aspect, the invention concerns a storage unit comprising a memory support and a logic unit that implements a set of rules to manage the access to the memory support according to the requests sent by an external electronically controlled device.

Advantageously, the invention allows to provide a single storage unit that allows the user to select, by means of the selecting unit, an access policy between a plurality of access policies according to the needs.

Thus, for example, a hard disk may be used by the police to save data acquired during a search, and subsequently transformed into a read-only unit to prevent the content from being altered, either accidentally or deliberately. Similarly, a disk used for archive purpose may be set in WORM (Write Once Read Many) mode until the memory space is filled up, and then to read / write mode to allow deletion of data and the re-use of the unit.

The above mentioned aims and advantages, together with others mentioned hereinafter, will become more apparent from the following disclosure of some preferred embodiments of the invention, that are depicted, for exemplary and non limiting purpose, with the help of the enclosed drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

Fig. 1 shows the interface system of the invention, in schematic view.

Fig. 2 shows a different embodiment of the interface system of the invention, in schematic view.

Fig. 3 shows a storage unit comprising the interface system of the invention, in axonometric view.

DETAILED DESCRIPTION OF SOME PREFERRED EMBODIMENTS The interface system of the invention, indicated schematically in Fig. 1 overall with 1, is suited to implement the communication between two electronically controlled device 11, 12 as previously defined.

The interface system 1 comprises two buses 2 and 3 that can be connected to, respectively, the two electronically controlled device 11, 12 for communication between the two devices 11, 12 and a plurality of logic units 41, 42, 43. The interface system 1 of Fig. 1 comprises three of the above mentioned logic units, but it is clear that variant embodiments of the invention may comprise any number of the above mentioned logic units, according to the needs.

Depending on the devices 11, 12 that are interfaced, the above mentioned signals can be control signals directed to one of the devices, and/or data. Furthermore, the above mentioned signals can be of analogical and/or digital kind, for example instructions and/or data, which may be single or packages.

Preferably, but not necessarily, a first one of the above mentioned devices 11, that, for the sake of conciseness, is called service device, has a generally passive role and is used to accomplish specific functions in response to specific commands sent by the second device 12, that, for the sake of conciseness, is called user device, and that has a generally active role instead.

Each logic unit 41, 42, 43 implements a corresponding set of rules according to which a request coming from the user device 12 through the corresponding bus 3 is converted into a corresponding command to control the service device 11, and/or into a response to the above mentioned request, that is rendered available at the bus 2 for being forwarded to the user device 12.

Clearly, in variant embodiments of the invention, the roles of the two devices 11, 12 may swap, the first one assuming a passive role, and the second one an active role.

In any case, each of the above mentioned logic units 41, 42, 43 is configured to process the signals independently of the other logic units. In particular, each logic unit implements a predefined set of rules that is different from that implemented by each of the other logic units. As a consequence, the logic units 41, 42, 43 may respond in different ways to a same request. In particular, each set of rules is configured to manage every possible signal, and possible combinations thereof, coming from the two devices 11, 12 and directed to the other device, as well as to control the latter device accordingly, and/or to return a response to the first device 11. In other words, the set of rules of each logic unit 41, 42, 43 is self-sufficient and is capable of managing the communication between the two devices 11, 12 in a way that is independent of the other logic units.

The interface system 1 also comprises a selecting unit 5 operable by a user in order to selectively enable any one of the logic units 41, 42, 43, while inhibiting all the others. It is noted that a logic unit is meant to be enabled when the response to an input signal coming from one of the bus 2, 3 is processed and rendered available at the other bus according to the set of rules implemented by the enabled logic unit. On the contrary, a logic unit is meant to be inhibited when the above mentioned input signal does not generate a corresponding response processed according to the set of rules corresponding to the inhibited logic unit.

It is understood that the above mentioned interface system 1 achieves the aim to provide the user, simultaneously, with a given number of mutually different sets of rules, among which he may select, from time to time, the one that most suits his needs.

In particular, the above mentioned selection occurs in an easy and quick way, simply by acting on the selecting unit 5 in order to enable a logic unit that implements the above mentioned set of rules, so that the two devices 11, 12 communicate exclusively according to the set of rules implemented by that specific logic unit. As a consequence, a further aim of the invention is achieved.

Furthermore, the fact that a specific logic unit is selected does not prevent the user from later changing the selection again, for example if he wish to restore a set of rules that had been already used. In fact, the user can simply operate the selecting unit 5 in order to select the logic unit corresponding to the preferred set of rules. Hence, a further aim of the invention is achieved.

Preferably, the set of rules is implemented into each logic unit 41, 42, 43 through of a corresponding firmwares 61, 62, 63. Clearly, the firmwares 61, 62, 63 are mutually different, as long as they implement mutually different sets of rules. The interface system 1 also comprises one or more processing unit 71, 72, 73 configured to execute the code in the firmware 61, 62, 63.

Advantageously, the implementation of the rules by means of the above mentioned firmwares facilitates the adjustment of system 1 and, moreover, possibly allows to update the firmware, if needed.

In any case, the simultaneous presence of several different firmwares, and the possibility to select one of them without affecting the others, saves the user the burden to change the firmware, contrary to the previously mentioned known techniques. Therefore, the aim of simplifying the change of the set of rules by the user is achieved in the latter case as well.

Preferably, the set of rules of each logic unit 41, 42, 43 resides in a corresponding integrated circuit 81, 82, 83 that is distinct from the integrated circuits of the other logic units. Furthermore, the selecting unit 5 comprises a selector 9 configured to interrupt an electrical connection towards each one of the above mentioned integrated circuits 81, 82, 83, except the one enabled by the user.

Advantageously, the provision of having distinct integrated circuits 81, 82, 83 increases the flexibility of the interface system 1, in that it allows to increase the sets of rules that can be selected, simply by increasing the number of integrated circuits that are present, while keeping the others unchanged.

In particular, the above mentioned integrated circuits 81, 82, 83 can be fixed on corresponding mutually distinct printed boards, bringing the advantage of allowing a modular assembling of the interface system 1, as well as to possibly replace a logic unit independently of the others.

Preferably, each integrated circuit 81, 82, 83 comprises a corresponding processing unit 71, 72, 73 for execution of the corresponding firmware 61, 62, 63.

Advantageously, the configuration just disclosed allows to simplify the connections between the logic units 41, 42, 43 and the two devices 11, 12.

As regards the selector 9 for selecting the logic unit, it may be either mechanical or electronic. Furthermore, the selector 9 may be configured to inhibit each logic unit 41, 42, 43 by interrupting the power supply and/or the connection of the corresponding integrated circuit 81, 82, 83 to one or both buses 2, 3.

The selector 9 may comprise a button, a lever, a series of switches or micro switches (dip-switches), or any means suited to interrupt an electrical connection in such a way as to inhibit one or more logic units 41, 42, 43.

Preferably, the interface system 1 comprises a stop device 10 externally operable in order to achieve a permanent inhibition of all logic units except one of them, which can be selected according to the needs.

Advantageously, the above mentioned stop device 10 allows to prevent the further change of the set of rules that are applied in the communication between the two devices 11, 12. In fact, even by attempting to select a different logic unit by acting on the selecting unit 5, said logic unit would be anyway inhibited by the stop device 10. The possibility just mentioned is particularly advantageous in a storage unit, for example to prevent accidental or deliberate alteration of the stored data, as it will be explained in the following.

Also advantageously, the stop device 10 simplifies the production of the interface systems 1, because it allows the producer to manufacture a single interface system 1 comprising several logic units 41, 42, 43, and, from this, to manufacture different models by inhibiting different logic units for each model, so that the models render different sets of rules available.

Preferably, the stop device 10 is configured to inhibit all the logic units except the one that is enabled at the moment when the device is operated. Advantageously, this operating mode facilitates a user to operate the stop device 10.

According to a variant embodiment, the stop device 10 is configured to allow to selectively inhibit the logic units 41, 42, 43, in order to leave several logic units active.

The stop device 10 may be of mechanical type, and it may comprise, for example, a system similar to those already disclosed for the selector 9.

In variant embodiments of the invention, the stop device 10 may be of electronic type, and it may comprise, for example, a programmable element that can be set through software, by following a predetermined procedure. The above mentioned procedure may envisage, for example, that the interface system 1 is set in a specific operative state, that allows setting the above mentioned programmable element in order to inhibit one or more logic units 41, 42, 43. The above mentioned procedure may, possibly, request that an access key be provided to allow to modify the programmable element, in order to prevent tampering by unauthorized third parts.

According to a variant embodiment, the stop device 10 is configured to obtain inhibition of the logic units through a physical change of the interface system 1.

Also preferably, the stop device 10 is configured in such a way as to render the above mentioned inhibition irreversible, in order to completely prevent possible tampering.

For example, the stop device 10 is operable to selectively discharge energy towards the logic units 41, 42, 43 to be inhibited, and/or towards the selecting unit 5, in such a way as to change them permanently.

A stop device 10 of the kind just disclosed may comprise, for example, an energy storage device, for example a supercapacitor, whose activation causes an energy discharge through electrical or electronic elements, and their consequent fusion.

According to a variant embodiment, the above mentioned energy discharge may be used to change the state of a logical register, for example of one or more “fuse-bits”, making them switching from a preset state, in which they allows using all logic units, to a state in which they causes the inhibition of the logic units except the one that is selected.

A variant of the interface system of the invention, shown in Fig. 2 and indicated there overally with 100, differs from the previous one because all different firmwares 61, 62, 63 of the logic units reside in corresponding mutually distinct memory portions 110, 111, 112 of the same integrated circuit 101. For the sake of simplicity, the logic units are not indicated in Fig. 2, but they clearly correspond to the respective firmwares 61, 62, 63.

Advantageously, the variant just disclosed allows to reduce the dimension of the interface system 100 compared to the previous variant.

Preferably, a single processing unit 102 is present, that is configured to selectively execute any one of the firmwares 61, 62, 63.

The selecting unit 5 comprises a register 103, that the user can set among a number of different values, each one of the which uniquely identifies a corresponding firmware 61, 62, 63.

The selecting unit 5 further comprises an addressing device 104 configured to address the requests for access by the processing unit 102 to the memory portion 110, 111, 112 corresponding to the firmware 61, 62, 63 that is identified by the value of the register 103.

Preferably, the processing unit 102, the register 103, and/or the addressing device 104 belong to the integrated circuit 101, with further advantage for the compactness of the interface system 100.

Each one of the interface systems 1 or 100 may be used with an electronically controlled device 11 comprising a memory support 13. The memory support 13 may be of any known kind suited to store data, such as, for example, a magnetic disk (HDD), a solid-state device (SDD).

In this case, each set of rules implemented in the interface system 1 or 100 is specifically configured to manage the reading and/or writing of data on the above mentioned memory support 13 according to the requests received by the other electronically controlled device 12 according to a given access policy.

As previously mentioned, the interface system of the invention applied to an electronically controlled device 11 comprising the above mentioned memory support 13 allows, advantageously, to change the data access policy according to the needs, with particular concern to data security.

For example, in the case of a memory support 13 to be used for data preservation, as in forensic information technology or in archiving, one of the logic units 41, 42, 43 of the interface system 1 or 100 may be configured to allow modifying the data in the memory support 13, and a second one of them be configured to allow only the reading of data stored therein. As an alternative, a first logic unit may be configured to implement a “WORM” (Write-Once-Read-Many) type access policy, while a second logic unit may implement an unlimited access policy, in order to allow deleting the stored data when they are obsolete, in order to allow reusing the support.

In the case just mentioned, the user may operate the selecting unit 5 to set an access policy that allows the storing of data and, subsequently, he may freeze the interface system 1 or 100 on a different access policy that irreversibly prevents the modification of the data. This may be useful, for example, in the forensic information technology.

Clearly, further variant embodiments of the invention may envisage implementation of more than two mutually different access policies, among which the user may select the most convenient one.

Fig. 3 shows an electronically controlled device 11 comprising a HDD. In this case, the memory support 13 comprises an electromechanical unit 14 that, typically, in turn comprises a motor for rotating the disk 15 and a magnetic head 16 for accessing the data stored thereon. Preferably, each set of rules of the logic units 41, 42, 43 is configured to control also the above mentioned electromechanical unit 14.

The device of Fig. 3 is made according to the schematic layout of Fig. 1. In particular, the logic units 41, 42, 43 of the interface system 1 are stacked on one another, even though other configurations are possible.

The connection of each logic unit 41, 42, 43 to the memory support 13 preferably occurs through corresponding flexible cables, only one of which is shown in the figure, for the sake of simplifying the drawing.

In a different embodiment, not shown in the drawings, the memory support 13 is a solid-state storage unit (SSD) that comprises an integrated circuit. In this latter case, it is advantageous to use the schematic layout of Fig. 2, and the components 102, 103, 104 and 13 may be fixed to the same printed board.

In particular, the variant just disclosed advantageously allows to make the SSD unit by adapting an SSD unit of known type, with minor changes.

The present invention also concerns an electronically controlled unit 18 that, as shown in Figs. 1 and 2, comprises the first electronically controlled device 11 and, respectively, one of the interface systems 1 or 100 above disclosed. The device 11 and the interface system 1, 100 are operatively interconnected through the first bus 2 in order to communicate, and mechanically interconnected in order to form a single element. The second bus 3 of the interface system 1, 100 can be connected to the second electronically controlled device 12 to allow interfacing the first electronically controlled device 11 with the second electronically controlled device 12.

In all of the above disclosed variant embodiments of the invention, the connection between the interface system, the buses 2 and 3, and the electronically controlled device 11 and 12, may occur, for example, through electrical connections of know kind.

The second bus 3 is preferably provided with a connector 17 belonging to the unit 18, that can be seen for example in the variant of Fig. 3, which allows to removably connect the unit with the second device 12.

Preferably, the electronically controlled unit 18 is configured in such a way as to prevent tampering. This may be achieved, for example, by arranging the first electronically controlled device 11, the buses 2, 3, the logic units 41, 42, 43, the selecting unit 5, and the stop device 10, in a tamper-proof containment body, suited to prevent separation of the different components and tampering of their mutual electrical connections without either rendering the unit inoperable or leaving signs of tampering. In a variant embodiment, not shown, the containment body is a block of resin in which the above mentioned components are embedded.

According to a further variant embodiment of the invention, shown in Fig. 3, the first electronically controlled device 11 of unit 18 is a memory support 13 of the above disclosed kind, and each logic unit 41, 42, 43 implements a corresponding set of rules configured to manage the reading and/or the writing of data from/on the memory support 13 through the first bus 2 according to the requests sent by the second electronically controlled device 12 through the second bus 3.

From what has been disclosed beforehand, it is understood that the above disclosed interface system of the invention, as well as the electronically controlled unit comprising it, achieve the preset aims.

In particular, the simultaneous presence of several mutually independent logic units implementing corresponding mutually different sets of rules renders it possible to change the set of rules to be applied for interfacing the two electronically controlled device, simply by enabling the corresponding logic unit, without the need to make any irreversible change in the logic units themselves.

At the same time, it is possible to select the set of rules to be applied among a plurality of different available sets of rules.

Furthermore, the presence of a selecting unit operable to select any one logic unit allows selecting the set of rules to be applied in a more simple and quick way compared to the prior art.

Furthermore, the presence of the stop device allows to prevent further change of the chosen set of interfacing rules.

The invention is susceptible of changes and variant embodiments, all falling within the inventive concept expressed in the attached claims. In particular, the elements of the invention may be replaced by other elements technically equivalent thereof.

Moreover, the materials may be chosen according to the needs, yet without departing from the scope of the invention.

Moreover, one or more elements of a specific embodiment of the invention that are technically compatible with another specific embodiment of the invention, may be used in the latter one in addition to, or in replacement of, elements of the latter one.

Where technical elements specified in the claims are followed by reference signs, those reference signs are included for the sole purpose of improving intelligibility of the invention, hence they do not imply any limitation of the claimed scope of protection.

Claims

1. Interface system (1; 100) for interfacing between two electronically controlled devices (11, 12), comprising: at least two buses (2, 3) that can be connected to, respectively, said two electronically controlled devices (11, 12) for the transmission of corresponding signals from/to said two electronically controlled devices (11, 12); a plurality of logic units (41, 42, 43), each being configured to process first signals received from one of said two buses (2, 3), based on a set of predefined rules different from the set of rules implemented by each one of the others said logic units (41, 42, 43), in order to obtain corresponding second signals and to render them available at the other one of said two buses (2, 3); a selecting unit (5) operable by a user to selectively enable any one of said logic units (41, 42, 43), at the same time inhibiting all of the other logic units (41, 42, 43).

2. Interface system (1; 100) according to claim 1, characterized in that said first signals come from one of said two electronically controlled devices (11, 12) connected to said one of said two buses (2, 3), and said second signals are rendered available to the other one of said two electronically controlled devices (11, 12) connected to the other one of said two buses (2, 3).

3. Interface system (1; 100) according to any claims 1 or 2, characterized in that said set of rules is configured to manage every possible signal, and possible combinations thereof, coming from one of said two electronically controlled devices (11, 12) and directed to the other one of said two electronically controlled devices (11, 12), as well as to control said other one of said two devices (11, 12) and/or return a response to said one of said two devices (11, 12) accordingly, so that said set of rules is self-sufficient and capable of managing the communication between said two devices (11, 12) independently of the other logic units (41, 42, 43).

4. Interface system (1; 100) according any claim from 1 to 3, characterized in that each one of said logic units (41, 42, 43) comprises a firmware (61, 62, 63) implementing the corresponding set of rules, said interface system (1; 100) comprising at least a processing unit (71, 72, 73; 102) suited to execute the code of said firmware (61, 62, 63).

5. Interface system (1; 100) according to any claim from 1 to 4, characterized in that said first signals comprise a request by one (12) of said two electronically controlled devices (11, 12), said second signals comprising a corresponding command for controlling the other electronically controlled device (11), and/or a response to said request.

6. Interface system (1) according to any claim from 1 to 5, characterized in that each one of said logic units (41, 42, 43) comprises a corresponding integrated circuit (81, 82, 83) distinct from those of the other logic units (41, 42, 43), said selecting unit (5) comprising a selector (9) configured to interrupt an electrical connection towards each one of said integrated circuits (81, 82, 83) except the one corresponding to the logic unit (41, 42, 43) that is enabled.

7. Interface system (100) according to claim 4, or to claim 5 when in combination with claim 4, characterized in that said firmwares (61, 62, 63) are stored in corresponding memory portions (110, 111, 112) of a same integrated circuit (101), said selecting unit (5) comprising: a processing unit (102); a register (103) to store any value among a number of different values, each one of which uniquely identifies a corresponding one of said firmwares (61, 62, 63), said value being selectable by the user; said selecting unit (5) comprising an addressing device (104) configured to address the requests for access of said processing unit (102) to the memory portion (110, 111, 112) corresponding to the firmware (61, 62, 63) identified by the value of said register (103).

8. Interface system (1; 100) according to any claim from 1 to 7, characterized in that it comprises a stop device (10) operable to obtain a permanent and selective inhibition of one or more of said logic units (41, 42, 43).

9. Interface system (1; 100) according to claim 8, characterized in that said stop device (10) is configured in such a way as to render said inhibition irreversible.

10. Interface system (1; 100) according to claim 9, characterized in that said stop device (10) is operable to selectively discharge energy towards said logic units (41, 42, 43) and/or said selecting unit (5) in such a way as to modify them permanently.

11. Electronically controlled unit (18) comprising: a first electronically controlled device (11); an interface system (1; 100) to allow interfacing said first electronically controlled device (11) with a second electronically controlled device (12), said interface system (1; 100) being mechanically associated to said first electronically controlled device (11) in order to form a single body; characterized in that said interface system (1; 100) is according to any claims from 1 to 10, a first bus (2) of said two buses (2, 3) being connected to said first electronically controlled device (11), the second bus (3) of said two buses (2, 3) being connectable to said second electronically controlled device (12).

12. Electronically controlled unit (18) according to claim 11, characterized in that said first electronically controlled device (11) is a memory support (13), and in that said set of rules is configured to manage data reading and/or writing on said memory support (13) through said first bus (2) based on the requests sent by said second electronically controlled device (12) by means of said second bus (3).