An AUTOSAR-compatible microkernel for systems with safety-relevant components
An AUTOSAR-compatible microkernel for systems with safety-relevant components
复制标题
适用于具有安全相关组件的系统的 AUTOSAR 兼容微内核
DOI：
10.1007/978-3-642-24658-6_2
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
D. Haworth
中科院分区：
文献类型：
--
作者：
D. Haworth
在同一嵌入式系统中集成安全相关软件和按照正常质量标准开发的软件需要一种保护机制，以确保安全相关软件不会受到系统其余部分故障的不利影响。通常认为保护机制由“系统软件”提供，这意味着系统软件必须按照与安全相关软件相同的严格标准开发。在AUTOSAR模型中，这在实践中可能是不可能的。本文探讨了将安全相关软件与大量AUTOSAR系统软件隔离的方法，同时保留系统软件及其下运行的组件所需的核心功能。
The integration of safety-relevant software and software developed to normal quality standards in the same embedded system needs a protection mechanism to ensure that the safety-relevant software cannot be adversely affected by failures in the rest the system. The protection mechanism is usually assumed to be provided by the "system software", which implies that the system software must be developed to the same exacting standards as the safety-relevant software. In the AUTOSAR model that may not be possible in practice. This article explores ways of isolating the safety-relevant software from the bulk of the AUTOSAR system software while retaining the core functionality needed by the system software and the components that run under it.