High-integrity multi-core heterogeneous processing environments

A high-integrity multi-core heterogeneous processing environment, comprising:

• an application domain, comprising:
• an application processor comprising one or more processing cores;
• a hypervisor to host one or more application-domain operating systems operating on the application processor;
• and
• one or more integrity testers for executing integrity kernels on the application processor;
• an integrity domain to support the application domain, comprising:
• an integrity processor comprising an architecture different than the application processor;
• and
• a real-time integrity-domain kernel to host an integrity-domain operating system, the integrity-domain operating system comprising an integrity manager operating on the integrity processor, the integrity manager configured to dynamically generate an integrity kernel to test a plurality of paths of the application processor, the integrity manager further configured to provide the integrity kernel to an integrity tester of the one or more integrity testers prior to execution of a critical program by at least one application-domain operating system of the one or more application-domain operating systems, the integrity manager further configured to identify one or more faults in the application processor based on a result of the integrity kernel executed on the application processor received from the integrity tester.

A method for high-integrity computing, comprising:

• generating, in an integrity domain of a multi-core heterogeneous processing environment, an integrity kernel dynamically to test a plurality of paths of an application processor in an application domain of the multi-core heterogeneous processing environment, wherein the application processor comprises one or more processing cores having a different architecture than processing cores of an integrity processor of the integrity domain;
• providing the integrity kernel to the application domain prior to execution of a critical program on the application processor;
• executing the integrity kernel on the application processor;
• providing a result of the integrity kernel executed on the application processor to the integrity domain;
• and
• identifying one or more faults in the application processor based on the result of the integrity kernel executed on the application processor.