Adaptive AUTOSAR-based

high-performance
controller development

Vishal Mishra
14 April 2021 | webinar

© Elektrobit 2021 |2021

© Elektrobit Public information
| Public information
Agenda
Adaptive AUTOSAR-based high-performance controller development

01 Fundamental shift of the vehicle‘s software architecture

02 Impact of high-performance controllers

03 EB corbos product line – All-in-one solution for adaptive AUTOSAR

04 Safety aspects for HPC implementations

05 EB’s container concept

© Elektrobit 2021 |2021

© Elektrobit Public information
| Public information
Infrastructure architectures with HPC are clean and simple

80-100 ECUs 4 High-performance ECUs

6 CAN-Bus 60 Sensor/Actuator ECUs
2 FlexRay 1 Ethernet backbone
1 Ethernet backbone 1 CAN per zone

Classic ECU Performance/Safety ECU Sensor/Actuator High-performance controller

© Elektrobit 2021 | Public information

Consolidated vehicle infrastructure architecture

Smart antenna

UI IO concentrators,
Gateway
computing actors, sensors
cluster
Smart Smart
sensors sensors
Gigabit
Ethernet Back-end
Steering Engine
Computing system
cluster(s)
Braking Battery
Back-end server
Performance ECU

Reliable ECU

IO concentrators

© Elektrobit 2021 | Public information

Impact of high-performance controllers

• Split up ECUs in low performance IO Controller and high-

performance controller
• Establish a service-oriented architecture (SOA) Smart Antenna
• Performance controller
− High computation power with heterogeneous computing
− Widespread, POSIX-like Operating System (e.g., Linux), Adaptive
AUTOSAR
− Extensive update capabilities
− Safe & Secure

• IO controller
− Provide Sensor and Actuator Services
− Deeply embedded, real-time Operating System (e.g., Classic
AUTOSAR) Performance controller IO controller
− Limited (non-standardized) support for partial updates

© Elektrobit 2021 | Public information

EB corbos
A product line bringing Adaptive AUTOSAR on the road

EB corbos AdaptiveCore
Adaptive platform for safe and secure applications
EB corbos

EB corbos Hypervisor
Micro-kernel based hypervisor to run multiple (different) Adaptive Studio
operating systems on one single CPU Core

EB corbos Linux
Container based Linux distribution
Linux Hypervisor

EB corbos Studio
Integrated development environment for EB corbos products

© Elektrobit 2021 | Public information

EB corbos Studio in a nutshell
How EB corbos Studio could help you?

Model Editor for AUTOSAR C and C++ Editor

Adaptive Platform • EB corbos Studio is shipped with Eclipse C
• Create and modify elements of Application Development Tool (CDT9)
Design, Service Instance manifest, Service • Resolve macro definitions and refactor source
Execution Manifest code
• Edit the AUTOSAR model on a file basis or • Edit C and C++ code with syntax highlighting,
project basis where all ARXML files are folding and hyperlink navigation
merged into one combined view

Development Enviroment for Automation

Extensions • Aggregate several tasks in a script
• Create code or reports from the AUTOSAR • Invoke aggregated tasks from the User
model Interface
• Create projects specific rules to verify custom • Invoke code generators (e.g. for proxy and
model constraints skeleton classes)

© Elektrobit 2021 | Public information

EB corbos Studio
Integrated development environment for the EB corbos products

EB corbos Studio supports

• Application development
− Develop applications according the AUTOSAR Adaptive
Platform.
• Integration
− Integrate software components with
EB corbos AdaptiveCore and other products from
EB corbos product portfolio.

© Elektrobit 2021 | Public information

EB corbos Studio demonstration

© Elektrobit
Elektrobit2021
2021 | Public
Public information
information
EB corbos Studio – Features
Application development

• Create and modify application design EB corbos Studio Target

(e.g. EB corbos Linux)
− Specify the application for the AUTOSAR Adaptive platform
System data model
− Add and modify required and provided services
− Use system data model usually provided by the OEM

• Implement and build the application Create & Run, debug & Application
Application test
build executable
− Implement the application in C or C++ Application
developer
− Compile the application

• Run and debug the application EB corbos

AdaptiveCore
− Run and debug the application on the PC in a simulated target
environment, or
directly on the target Operating system
(e.g.
• Test the application EB corbos Linux)

− Execute tests in a virtual machine running EB corbos Linux

− Visualize test result information

© Elektrobit 2021 | Public information

EB corbos Studio – Features
Integration

• Integrate applications EB corbos Studio Target

− Define process and startup parameters for the

OEM Model
applications
− Define dependencies to other applications
Application Run, debug & Application
• ECU integration Application
Application test
Application
Application

− Create configuration files for EB corbos AdaptiveCore

− Configure network connectivity Configuration files for
Create & Integration EB corbos
− Define ECU and vehicle states build Model AdaptiveCore

Integrator EB corbos
AdaptiveCore
EB corbos
AdaptiveCore Operating system
configuration (e.g. EB corbos Linux)

© Elektrobit 2021 | Public information

Safety aspects for HPC implementations

Safety goals according to AUTOSAR_EXP_SafetyOverview.pdf Scope: AUTOSAR Adaptive Platform

• AP-SG-01: Ensure correct computation, execution and execution order of multiple applications with mixed criticality
• AP-SG-02: Ensure correct configuration maintenance during the entire driving cycle
• AP-SG-03: Ensure correct update and upgrade of multiple platform and non-platform applications with mixed criticality
• AP-SG-04: Ensure correct exchange (transmission and reception) of information

Resulting ADG-2 safety features Scope: EB product

• E2E protection enabling applications to detect interference in communication (AP-SG-04)
• platform health monitoring (PHM) services to monitor and consolidate runtime supervision (AP-SG-01)
• EM/UCM mechanisms to ensure safe updates and safe application start (AP-SG-01, AP-SG-02, AP-SG-03)
• persistency mechanisms to check validity of stored data (similar to E2E) (AP-SG-02)
• Spatial freedom from interference in library code (AP-SG-01)
− i.e. no unintended interference on data/application context if calling API

• Tool qualification package for safety-relevant generator plugets (all AP-SG-*)

© Elektrobit 2021 | Public information

E2E (end to end) communication protection for events
Interaction of E2E protection

Publisher
ara::com Transmission
Application

Fills in the sample C++ objects and call the

dedicated generated skeleton events class to
sample.speed = app.currentVehicleSpeed
trigger the transmission.

skeltonEvent.Send(sample)
Serialization of the C++ object
(sample) to an array.

Serialize(sample): serializedSample
Creation of the header that is
protected by E2E.

AddE2EProtectedHeader(&serializedSample)
The core part, doing the E2E
logic including creation of E2E
header.
E2Eprotect(dataID, serializedSample)

Creation of further header that

is not protected by E2E.
AddNonProtectedHeader(&serializedSample)

Delivery of the entire message

to the transmission layer.
SendMessage(serializedSample)

© Elektrobit 2021 | Public information

EB corbos Studio – The easiest way to develop
Primary focus for ASIL-D
and robustness
Potential impact
EB corbos EB corbos during safe mode
Studio AdaptiveCore 2
No impact
Starter Kit 2 during safe mode
Adaptive application Adaptive application Adaptive application
Incl. Reference Apps

AUTOSAR Runtime for Adaptive Applications (ARA) Virtualization

communication system security state diag/update
Studio
ara::com ara::exec ara::phm ara::iam ara::nm ara::diag
Communication management Execution Platform health Identity & access Network Diagnostic Hypervisor
management management management management management services
SOME/IP IPC

ara::rest ara::log ara::per ara::time ara::crypto ara::sm ara::ucm

RESTful Log and trace Persistency Time Cryptography* State Update & config Hypervisor
Communication* management synchronization management management services*

BuildEnv
Build Library/Suppor ara::core Core types
Environment t Hypervisor
device drivers*
OS EB corbos Linux 2/3 QNX VxWorks*

Virtualization EB corbos Virtual Ethernet Switch EB corbos Hypervisor 2

EB corbos Tools Generic HW-dependent Future content* 3rd party Alternatives

© Elektrobit 2021 | Public information

Containers in EB corbos

• Strictly confined at all levels

− RAM, CPU, disk, network
(Linux namespaces, individual r/w micro-partitions,
containers properties are r/o) app1 app2 app3 app4 app5 app6 App-n
− syscalls
− Shared resources possible
• Independently updatable
Functional clusters
− No file level unpacking -> MMC optimized
− Atomic updates (no overwriting) Adaptive core

EB Linux kernel

© Elektrobit 2021 | Public information

Summary
Adaptive AUTOSAR-based high-performance controller development

Highlights Benefits
• Provides run-time environment, • Guarantees highest safety
software update capability, levels for automated driving
and embedded security
• Reduces system complexity
• Is based on the portable
operating system interface • Saves time and cost through re-
(POSIX) usable software functions

• Has several operating systems • Adds functions easily, fast, and

running on one processor securely over the air

• Provides hardware • Available on platforms of

virtualization leading semiconductor vendors.

• Provides separation between • Saves physical space by

virtual machines on different integrating multiple systems on
CPU cores one device

© Elektrobit 2021 | Public information

We take AUTOSAR to the road!

Vishal Mishra
Software Engineer, Products & Innovations
EB – Driving the future of software

[email protected]
elektrobit.com

© Elektrobit 2021 | Public information

© Elektrobit 2021 | Public information