AUTOSAR Safety Solutions

for Multicore ECUs and

ADAS Systems
Robert Leibinger
5th June 2015
Agenda

Architecture requirements for ADAS ECU

Overview of different architecture

approaches

Compare and contrast each architecture

Questions & Answers

© Elektrobit (EB), 2015 2

Agenda

Architecture requirements for ADAS ECU

Overview of different architecture

approaches

Compare and contrast each architecture

Questions & Answers

© Elektrobit (EB), 2015 3

AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Architecture requirements for ADAS ECUs

Dependability:
Functional Safety (ASIL-D)
Safety Microcontroller
Security, Reliability, Availability, Maintainability

Performance:
Advanced ADAS Algorithms
AUTOSAR SWC
Realtime Requirements
High Performance Multi-Core Microcontroller
Multi-Microcontroller ECUs
Support for hardware acceleration (e.g. OpenCL)

? Compatibility:
Software Features
Can, Flexray, Ethernet support
Standard Diagnostic capabilities (e.g. OBD)
Network Management (e.g. Partial Network)
Development Process
Use of standard AUTOSAR formats
e.g. ECU Extract, Diagnostic Extract

© Elektrobit (EB) 2015 4

Agenda

Architecture requirements for ADAS ECU

Overview of different architecture

approaches

Compare and contrast each architecture

Questions & Answers

© Elektrobit (EB), 2015 5

AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Overview of different architecture approaches

?
Core Core Core Micro1 Micro2 Core1 Core2 Core3 Core1 Core2 Core3
1 2 3
Autosar Autosar Autosar Autosar
ADAS ADAS ADAS ADAS
SW-C SW-C SW-C SW-C
Linux/QNX/
RTE Linux/QNX/ RTE Linux/QNX/… RTE
RTE Safety OS,BSW BSW
AUTOSAR… Com Safety OS,BSW AUTOSAR… COM
Safety OS,BSW Hypervisor

Microcontroller Core
Full AUTOSAR Hypervisor
Partitioning Partitioning
© Elektrobit (EB) 2015 6
AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Full AUTOSAR architecture

• Safety Microcontroller Core1 Core2 Core3
• AUTOSAR Multi-Core Safety OS
• ADAS algorithms as SWC ADAS Application Autosar
SW-C SW-C
• Advanced hardware drivers integration as
Complex Device Drivers RTE
Safety OS,BSW
‒ e.g. OpenCL, AVB
‒ Proprietary video bus systems

Pro Con

Easy integration into OEM/T1 AUTOSAR Advanced hardware support needs

process AUTOSAR complex device drivers
One System High Performance Safety Microcontoller
necessary
© Elektrobit (EB) 2015 7
AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Full AUTOSAR architecture

Core1 Core2 Core3

ADAS
SWC SWC SWC ADAS SWC
SWC

RTE Partitioning

Complex
BSW
Device Driver

Safety OS Multicore

© Elektrobit (EB) 2015 8

AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Microcontroller partitioning architecture

• Partitioning in Safety and Core 1 Core 1
Performance Microcontroller
• Separated applications treated as ADAS Autosar
Application SW-C
different ECUs during development
• Private Network for communication RTE
Linux/QNX/
Com Safety OS,BSW
AUTOSAR…

Performance Safety
Micro Micro

Pro Con

Scalable Additional hardware costs

(combine two or more Microcontoller)
Suitable Micocontroller already available Need for private communication link
Complex Flashloader and Startup
© Elektrobit (EB) 2015 9
AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Core partitioning architecture

• One Microcontroller with Performance Performance Safety Core
several performance cores and Core1 Core2
one safety core (typically Lockstep) Application Autosar
SW-C

RTE
Linux/QNX/ AUTOSAR…
COM Safety OS,BSW

Pro Con

No need for private network hardware No suitable Microcontroller available

today
Performance and Safety in one Micro

© Elektrobit (EB) 2015 10

AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Hypervisor architecture
• Host OS with AUTOSAR guest system Core1 Core2 Core3
on one Microcontroller
• Hypervisor could be part of Guest OS Application Autosar
SW-C

RTE
Linux/QNX/…
BSW
Hypervisor

Pro Con

Hypervisor as Gateway between different Limited realtime capabilites

OS
Hypervisor as Security Gateway between Limited Performance
car and cloud

© Elektrobit (EB) 2015 11

Agenda

Architecture requirements for ADAS ECU

Overview of different architecture

approaches

Compare and contrast each architecture

Questions & Answers

© Elektrobit (EB), 2015 12

AUTOSAR Safety Solutions for Multicore ECUs and ADAS Systems

Compare and contrast each architecture

Core Core Core Micro1 Micro2 Core1 Core2 Core3 Core1 Core2 Core3
1 2 3 Applicat
Applicatio Autosar Application Autosar Application Autosar
Autosar ion
n SW-C SW-C SW-C
SW-C
SW-C
Linux/QNX/ RTE Linux/QNX/ RTE Linux/QNX/… RTE
RTE Safety OS,BSW BSW
AUTOSAR… Com Safety OS,BSW AUTOSAR… COM
Safety OS,BSW Hypervisor

Microcontroller Core
Full AUTOSAR Hypervisor
Partitioning Partitioning

Safety or Performance Safety & Performance Safety & Performance Security Architecture
optimized

Software Architectures define next generation Microcontroller Architectures

AUTOSAR is part of each architecture as a common standard for

- Basic Software, Safety and Security in ECUs
- Synchronized development process between OEM and T1

© Elektrobit (EB) 2015 13

Agenda

Architecture requirements for ADAS ECU

Overview of different architecture

approaches

Compare and contrast each architecture

Questions & Answers

© Elektrobit (EB), 2015 14

Thank you

Contact us! Robert.Leibinger@elektrobit.com

automotive.elektrobit.com