软件容器在安全关键环境中的优势

N E W A R C H I T E C T U R E SAs software-driven functionality has increased inthe automotive world, the compute hardware hasevolved. Instead of electronic control units (ECUs)with dedicated hardware and software performingspecific functions, high-performance computeplatforms have emerged, such as central vehiclecontrollers (CVCs) and open server platforms(OSPs). CVCs up-integrate body control functionsand networking, while OSPs consolidate functionsaround the specific domains of advanced driver-assistance systems (ADAS) and user experience.The new approach to hardware saves space andcost, but it also demands a new approach tosoftware. If software is monolithic — as it has beenwith ECUs — improvements will require full retestingand validation of the entire device it runs in, andany over-the-air (OTA) updates will be much largerthan necessary, requiring bandwidth and time.MONOLITHICSingle, Complex, IntertwinedComponent 1Component 2Component 3Component 4Leaving Monolithic Architectures BehindContainerization eliminates interdependencies on common software libraries,allowing each function to be updated independently. Key to moving away from the monolithic approachis modularization and abstraction of functionsinto manageable software blocks, a practicecommon in the IT world. Controlling a devicewithin the vehicle, for example, is performed byspecialized software that handles all signaling toand from the device while presenting a standard,simplified service interface to higher levels ofsoftware. This way, the higher-level software doesnot have to be concerned with the details of howthe device is managed, and developers – who aresometimes far removed from the specifics of avehicle – can focus on just the higher-level logic.In fact, all vehicle functions can be abstractedand presented as services to other software,creating what is known as a service-basedarchitecture. Software containers fit neatly intothis approach.MICROSERVICES ARCHITECTUREStandard APIsCommon InterfaceComponent 2Component 3Component 4 Component 1 As one piece of the multifaceted transition tosoftware-defined vehicles, containerization isgaining traction across the industry for non-safety-related functions. Because their usein automotive is still new, containers have notyet been certified for use with safety-criticalautomotive applications such as ADAS, butthey are ideally suited to safety features inseveral ways. Solutions leveraging containershave proven performance in other mission-critical industries, including aerospace, defense,telecom and medical, which helps validate theirviability. Key industry players are collaboratingto make containers based on the specificationsdeveloped by the Open Container Initiative (OCI)that are compliant with industry-standard safetycertifications.C O N TA I N E R S ’ R O L E I NA U T O M O T I V E C O M P U T I N GA container is a lightweight packaging formatfor software. It often includes the application forApplication 1Binary Files& LibrariesApplication 2Binary Files& LibrariesApplication 3Binary Files& LibrariesContainer EngineOperating SystemHARDWARECONTAINERVirtual Machines vs. ContainersHypervisors support virtual machines, each with their own operating system and applications, whilecontainers sit on top of an operating system and container engine, making them lighter. Containerization, developed for use in cloudcomputing, places applications in standardstructures that ensure that the dependencies— in the form of service interfaces — amongapplications are known and controlled. Thishelps drive stability and consistency in thecode base, simplifying isolation of services, andeffectively reducing the chances of interferingwith other software. It also improves security bykeeping attacks that target one application fromspreading to others.By using containers, OEMs and suppliers canadopt modern, agile software methodologies:small teams continually improving individualfunctions throughout the life of a vehicle withOTA updates, with such changes integratedquickly and automatically. By aligning with openspecifications such as that of the Cloud NativeComputing Foundation, an OEM and its supplierscan easily update vehicle platforms and even portfunctions from one platform to another, savingtime and money while reducing the risk of errorsand systemwide failures.Application 1Binary Files& LibrariesApplication 2Binary Files& LibrariesOperatingSystemApplication 3Binary Files& LibrariesOperatingSystemHypervisorHARDWAREVIRTUAL MACHINEOperatingSystem CONTAINERCONTAINERVIRTUAL MACHINEVIRTUAL MACHINECONTAINERVIRTUAL MACHINES In contrast, adding a feature to a traditionalautomotive code base might require the wholecode base to be retested with up to 100,000miles of driving due to the unpredictable ways inwhich that feature might interact with others. Thisapproach is growing more costly in terms of timeand money as vehicle platforms become morecomplex.There are several potential benefits to usingcontainers in automotive