Automotive Security的一些资料和心得(6):AUTOSAR
1.1 Introduction
AUTOSAR(汽车开放系统架构)是一个开放的,标准化的汽车软件架构,由汽车制造商,供应商和开发工具共同开发。它联合了汽车OEM ,供应商和开发工具供应商,其目标是创建并建立开放标准为汽车E / E(电子/电器)架构。它将为所有应用程序领域提供一个基本的基础设施以帮助开发汽车软件,用户界面和管理。这包括基本的系统功能的标准化,可扩展性,不同的车辆和平台的变种,转移性整个网络,整合来自多个供应商,可维护性在整个产品生命周期和软件的更新和升级在车辆的生命周期。[2]
1.2. Vision

- 软件和硬件分离
- 开发可以在平行层de-coupled,减少开发时间和成本
- 软件复用率会提高,OEM和供应商
1.3.

没有中国厂商。
1.2. Key Features
Modularity and configurability
Standardized interfaces
Runtime Environment (RTE)
Acceptance Tests
2. Goals
As stated in the official website, the goals of AUTOSAR are:
- Implementation and standardization of basic system functions as an OEM wide "Standard Core" solution
- Scalability to different vehicle and platform variants
- Transferability of functions throughout network
- Integration of functional modules from multiple suppliers
- Consideration of availability and safety requirements
- Redundancy activation
- Maintainability throughout the whole "Product Life Cycle"
- Increased use of "Commercial off the shelf hardware"
- Software updates and upgrades over vehicle lifetime
3. Technical Overview

AUTOSAR Architecture
AUTOSAR architecture支持完整的软件和硬件模块的独立性(Independence)。软件包括三层:Application SW, Runtime Environment, 和Basic SW. [3]

3.1. Software Component
AUTOSAR的软件被组织在独立单位里面,software-component,或者SwComponentTypes。
SwComponentTypes封装它们的功能和行为,只向外界开放定义好的链接点,称为PortPrototypes。
3.2. Virtual Functional Bus
In order to fulfill the goal of transferability, AUTOSAR defines a layered SW architecture and a formal description language for Software Components so that these components can be implemented independently from the underlying hardware.
The virtual functional bus is the abstraction of the AUTOSAR Software Components interconnections of the entire vehicle. The communication between different software components and between software components and its environment (e.g. hardware driver, OS, services, etc.) can be specified independently of any underlying hardware.
The central structural element in AUTOSAR is the COMPONENT. A component has well-defined ports, through which it interacts with other components. A port always belongs to exactly one component. The AUTOSAR Interface concept defines the services or data that are provided on or required by a port of a component. The most commonly used AUTOSAR Interfaces are Client-Server Interfaces (defining a set of operations that can be invoked) and Sender-Receiver Interfaces, which allows the usage of data-oriented communication mechanisms over the VFB. Other kinds of interfaces allow the communication of modes, non-volatile or fixed data, and the triggering of processes.
Client-Server Communication
Sender-Receiver Communication
3.3. ECU Software Architecture
The structure of the software for an ECU. The layers and its main elements.

- AUTOSAR Software
The AUTOSAR Software (the layer above AUTOSAR Runtime Environment) consists of AUTOSAR Software Components that are mapped on the ECU. All interaction between AUTOSAR Software Components and Atomic Software Components is routed through the AUTOSAR Runtime Environment. The AUTOSAR Interface assures the connectivity of software elements surrounding the AUTOSAR Runtime Environment.
- AUTOSAR Runtime Environment
At system design level, (i.e. when drafting a logical view of the entire system irrespective of hardware) the AUTOSAR Runtime Environment (RTE) acts as a communication center for inter- and intra-ECU information exchange.
Inter-ECU communication: CAN, LIN, FlexRay, MOST, etc.
- AUTOSAR Basic Software
Basic Software is the standardized software layer, which provides services to the AUTOSAR Software Components and is necessary to run the functional part of the software. It does not fulfill any functional job itself and is situated below the AUTOSAR Runtime Environment.
Standardized modules: Services, Communication, Operating System, Microcontroller Abstraction
ECU specific modules: ECU Abstraction, Complex Driver
- Classification of interface
AUTOSAR Interface
Standardized AUTOSAR Interface
Standardized Interface
3.4. AUTOSAR Methodology


- System Configuration Description:
includes all system information and the information that must be agreed between different ECUs - System Configuration Extractor:
extracts the information from the System Configuration Description needed for a specific ECU - ECU extract:
is the information from the System Configuration Description needed for a specific ECU - ECU Configuration Description:
contains all basic software configuration information that is local to a specific ECU. The executable software can be built from this information, the code of the basic software modules and the code of the software components
3.5. Acceptance Tests

4. RoadMap

References:
1. AUTOSAR, GbR. "Technical Overview." document version 2.0 (2008).
2. AUTOSAR Wike, https://en.wikipedia.org/wiki/AUTOSAR
3. AUTOSAR Layered Software Architecture, R4.0. http://www.autosar.org/
download/R4.0/AUTOSAR_EXP_LayeredSoftwareArchitecture.pdf, last access
16.11.2010
4. Bunzel, Stefan. "Autosar–the standardized software architecture."Informatik-Spektrum 34.1 (2011): 79-83.
版权所有,侵权必究,如需使用请与作者本人联系。
Automotive Security的一些资料和心得(6):AUTOSAR的更多相关文章
- Automotive Security的一些资料和心得(1):Security Engineering
陆续更新一些最近在Automotive Security方面的资料和心得. 1. Overview 1.1. Software Engineering Process PLC-Phases: Intr ...
- Automotive Security的一些资料和心得(2):Cryptography
1. Security Goal - Confidentiality - Integrity - Availability - Authenticity - Non-repudiation - Aut ...
- Automotive Security的一些资料和心得(8):Hardware Security Module (HSM)
1. Introduction - 保护软件的安全性措施,作为值得信赖的安全锚,- 安全地生成,存储和处理安全性关键材料屏蔽任何潜在的恶意软件,?- 通过运用有效的限制硬件篡改攻击的可能性篡改保护措施 ...
- Automotive Security的一些资料和心得(7):AUTOSAR和Security
1. 密码模块[1] 密码模块在Services Layer Configurable and common access to 密码子程序 硬件支持密码模块 2. 应用 应用和密码子程序分离 Cry ...
- Automotive Security的一些资料和心得(5):Privacy
1. Introduction 1.1 "Customers own their data and we can be no more than the trsted stewards of ...
- Automotive Security的一些资料和心得(4):Automotive Safeguards
通常一辆汽车会包括超过80个ECUs.所有软件代码大小正在快速增加,将会超过1GB.软件protection是必不可少的. 1. 软件保护 1.1. 安全boot Software violating ...
- Automotive Security的一些资料和心得(3):Vehicular Security技术
1. Overview 1.1. Secure Hardware Extension (SHE) 基本结构:ECU里面有一块单独的Secure Zone.Secure Zone里面是SHE模块.SHE ...
- ref:web security最新学习资料收集
ref:https://chybeta.github.io/2017/08/19/Web-Security-Learning/ ref:https://github.com/CHYbeta/Web-S ...
- IBM Security App Scan 资料整理
转自:http://blog.csdn.net/u013147600/article/details/50002089 这是学习和使用IBM AppScan过程中总结整理的一些资料. 扫描系统操作 ...
随机推荐
- java validator的原理与使用
http://developer.51cto.com/art/201104/253257_1.htm ava EE 6核心特征:Bean Validation特性概述(2) 2011-04-02 14 ...
- Number of failed login attempts exceeds threshold value
OEM发出好多告警,Number of failed login attempts exceeds threshold value. profile当前配置10次失败就会锁定user 查看下,dba_ ...
- Js解析json
var sysModule=[]; var treeJson = <%=(sysModule) %>; if (treeJson.length ...
- 消息系统Flume与Kafka的区别
首先Flume和Kafka都是消息系统,但是它俩也有着很多不同的地方,Flume更趋向于消息采集系统,而Kafka更趋向于消息缓存系统. [一]设计上的不同 Flume是消息采集系统,它主要解决问题是 ...
- 解决linux联网问题的方法论
解决linux联网问题的方法论 */--> 解决linux联网问题的方法论 Table of Contents 1. ip网络配置流程 1.1. 1.确认电脑能和路由器ping通 1.2. 2. ...
- 使用jvisualvm和飞行记录器分析Java程序cpu占用率过高
一.jvisualvm使用 JDK1.6中Oracle提供了一个新的JVM监控工具:jvisualvm.下面重点介绍如何在本地通过远程的方式打开Linux服务器上的jvisualvm. 1.Xmana ...
- canvas实现“探照灯”共能
简单的样式: body{ margin: 0; padding: 0;}#canvas{ display: block; position: relative; margin: auto;} 创建绘图 ...
- c# 委托与异步调用
背景:在winform UI中,有时需要对控件进行比较频繁的刷新,如进度条.picturebox显示视频等.如果在主线程进行这些刷新操作,操作还未完成就将执行下一次刷新,程序将发生错误:如果只是创建另 ...
- JAXB - Annotations, Type Mapping: XmlSchemaType
The annotation XmlSchemaType defines a mapping between an arbitrary Java type and a simple schema bu ...
- hibernate--could not initialize proxy - no Session--懒加载问题
今天在学习hibernate时,出现了以下错误: 错误分析: 如果我们取单个对象可以用get方法没有问题:但是如果我们取的的对象还有关联对象时用get就有问题,因为它不会把关联的对象取出来 参考博客: ...