Configuration technique for an electronic control unit with intercommunicating applications

摘要

A technique is specified for configuring an electronic control unit having intercommunicating applications which have been arranged in various partitions and to which differing safety integrity levels have been assigned. According to one method aspect, the communications behavior of the applications assigned to the differing partitions amongst themselves is analyzed, in order to identify data-writing and data-reading applications that are not located in the same partition. Subsequently, a shared memory area for the intercommunicating applications is configured, and a to communications data structure for the applications is generated. The communications data structure is at least partially arranged in the shared memory area.

主权项

1. A method for computer-assisted configuration of an electronic control unit for intercommunicating applications, wherein a memory assigned to the electronic control unit has been split up or is split up into partitions, and wherein at least a first application with a first safety integrity level has been assigned to a first partition, and at least a second application with a second safety integrity level, different from the first safety integrity level, or with no safety integrity level, has been assigned to a second partition, comprising the following steps:
analysing a communications behaviour of the at least the first application assigned to the first partition and the at least the second application assigned to the second partition amongst themselves, in order to identify a data-writing application that writes data and at least one data-reading application that reads the data written by the data writing application, said data-writing application and said at least one data-reading application not being located in a same partition; and configuring, based on the analysed communications behaviour, a shared memory area in the partition of the data-writing application, and generating a communications data structure for a communication between the data-writing application and the data-reading application, the communications data structure being provided for at least partial arrangement in the shared memory area, wherein the analysing and the configuring are carried out offline and a memory-protection unit of the electronic control unit is configured in such a manner that the reading application during its run-time is given only read access, but not write access, to the communications data structure.