1 1 RTOS DefensiveZone DefensiveZone MPU RTOS RTOS OS Lightweight partitioning architecture for automotive systems Suzuki Takehito 1 Honda Shinya 1 Abstract: Partitioning using protection RTOS has high cost. Therefore, it is not suitable for systems requiring low cost. This paper introduce DefensiveZone, that is partitioning architecture suitable for low cost automotive systems. DefensiveZone realized protection with additional protection hardware and simple virtual machine without using MPU and protection RTOS. As a result of performance evaluation, it could be confirmed that DefensiveZone has less overhead for OS execution and calling trusted function than protection RTOS. 1. ECU Electronic Control System RTOS RTOS RTOS OS ECU ECU RTOS [1] RTOS MPU Memory Protection 1 Graduate School of Information Science Nagoya University Unit ISO26262 DefensiveZone DefensiveZone MPU RTOS DefensiveZone DefensiveZone c 2017 Information Processing Society of Japan 1
1 DefensiveZone 2 DefensiveZone. DefensiveZone RTOS 2. DefensiveZone DefensiveZone DefensiveZone [2] 2.1 DefensiveZone MPU RTOS Altera FPGA Nios II[3] Nios II DefensiveZone 0 1 RTOS TOPPERS/ATK2-SC1[4] DefensiveZone 1 DefensiveZone 2 OS 2.2 DefensiveZone 2 DefensiveZone 2 DefensiveZone 3 DZ-INTC NMI DZ-SC DefensiveZone REG WORLD 1 0 1 ILLEGAL ACCESS 1 1 DZ-PB c 2017 Information Processing Society of Japan 2
5 3 DefensiveZone 2 5 4 2.3 DefensiveZone 3 RTOS DefensiveZoneMonitor DZ-Monitor DZ-Monitor DZ-Monitor 4 2.4 DefensiveZone 5 2.5 DefensiveZone ATK2- SC3 3. DefensiveZone 1 c 2017 Information Processing Society of Japan 3
3.2 DZ-Monitor 6 DefensiveZone ( 1 ) ( 2 ) ( 3 ) ( 4 ) ( 5 ) ( 6 ) DZ-Monitor DefensiveZone 3.1 6 4. DefensiveZone 4.1 ( 1 ) ( 2 ) ( 3 ) ( 4 ) ( 5 ) ( 6 ) ( 7 ) 4.1.1 4.1.2 4.2 NMI DefensiveZone c 2017 Information Processing Society of Japan 4
1 FPGA Altera Quartus II 16.1 nios2-elf-gcc:gcc version 5.3.0 Altera DE2-115 Nios II/f 50[MHz] DefensiveZone TOPPERS/ATK2-SC1 1.4.0 RTOS RTOS TOPPERS/ATK2-SC3 1.4.0 TOPPERS/A-OSBENCH 1.1[5] 7 T INT DISABLE 1 0 5. DefensiveZone 5.1 5.1.1 RTOS DefensiveZone RTOS RTOS DefensiveZone 5.1.2 DefensiveZone 2 10 unsigned int 5.2 1 5.3 10,000 5.3.1 RTOS DefensiveZone ATK2-SC3 A-OSBENCH 7 ATK2-SC3 DefensiveZone 2µ ATK2-SC3 DefensiveZone ATK2-SC1 OS ATK2-SC3 DefensiveZone DefensiveZone DefensiveZone ATK2-SC3 8 DefensiveZone 0.9µ 10,000 5063 ATK2-SC3 2.8µ 10000 7356 DefensiveZone ATK2-SC3 ATK2-SC3 OS DefensiveZone DefensiveZone 20 DefensiveZone c 2017 Information Processing Society of Japan 5
2 DefensiveZone DefensiveZone LE 25,813 29,026 12% /11,4480 /11,4480 23% 25% 16122 18699 16% 1,125,376 2,704312 140% /3,981,312 /3,981,312 28% 68% 8 DefensiveZone 2 DefensiveZone 6. 9 5.3.2 9 38.4µ 10,000 3,315 21.6µ 10,000 5,517 11.9µ 10,000 4,920 3 1 5.3.3 DefensiveZone DefensiveZone ATK2-SC3 LE 3 2 LE 2% LE 12% 16% DefensiveZone DefensiveZone DefensiveZone RTOS [6] [1] Dominik Reinhart Gary Morgan An Embedded Hypervisor for Safety-Relevant Automotive E/E-Systems Industrial Embedded Systems (SIES), 2014 9th IEEE International Symposium [2] ETNET2013 [3] Nios II online available from https://www.altera.co.jp/products/processors/overview.html (accessed 2017-1-24). [4] TOPPERS /ATK2 online available from https://www.toppers.jp/atk2.html (accessed 2017-1- 24). [5] TOPPERS/A-OSBENCH online available from https://www.toppers.jp/a-osbench.html (accessed 2017-1-24). [6] Symposium on Cryptography and Information Security (SCIS) 2016 c 2017 Information Processing Society of Japan 6