Agile reconfigurable approach for real-time replacement of on-chip safety-critical modules

A system, comprising:

• an in-vehicle network (IVN);
• a plurality of electronic control units coupled via the IVN;
• and
• at least one safety critical ECU coupled to the IVN, the at least one safety critical ECU comprising:
• a plurality of reconfigurable circuits;
• a security circuit coupled to the plurality of reconfigurable circuits, the security circuit arranged to:
• monitor a first reconfigurable circuit of the plurality of reconfigurable circuits for an anomaly, the first reconfigurable circuit designated as a primary circuit, and
• determine whether an anomaly has been detected;
• and
• a reconfiguration circuit coupled to the security circuit and the plurality of reconfigurable circuits, the reconfiguration circuit arranged to:
• disconnect the first reconfigurable circuit from a bus responsive to a determination that an anomaly has been detected to quarantine the first reconfigurable circuit,
• connect a second reconfigurable circuit of the plurality of reconfigurable circuits to the bus, the second reconfiguration circuit designated as a redundant circuit, and
• designate the second reconfigurable circuit as the primary circuit,
• refurbish the first reconfigurable circuit to a default state, and
• designate the first reconfigurable circuit as the redundant circuit.

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a platform computing device, cause the platform computing device to:

• monitor, for an anomaly via security circuitry of the platform computing device, a first reconfigurable circuit of a plurality of reconfigurable circuits of the platform computing device, the first reconfigurable circuit designated as a primary circuit;
• determine whether an anomaly has been detected;
• disconnect, via reconfiguration circuitry of the platform computing device, the first reconfigurable circuit from a bus responsive to a determination that an anomaly has been detected to quarantine the first reconfigurable circuit;
• connect, via the reconfiguration circuitry, a second reconfigurable circuit of the plurality of reconfigurable circuits to the bus, the second reconfiguration circuit designated as a redundant circuit;
• designate, via the reconfiguration circuitry, the second reconfigurable circuit as the primary circuit;
• refurbish, via the reconfiguration circuitry, the first reconfigurable circuit to a default state;
• and
• designate, via the reconfiguration circuitry, the first reconfigurable circuit as the redundant circuit.

A method, comprising:

• monitoring, for an anomaly via security circuitry of a platform, a first reconfigurable circuit of a plurality of reconfigurable circuits of the platform, the first reconfigurable circuit designated as a primary circuit;
• determine whether an anomaly has been detected;
• disconnect, via reconfiguration circuitry of the platform, the first reconfigurable circuit from a bus responsive to a determination that an anomaly has been detected to quarantine the first reconfigurable circuit;
• connect, via the reconfiguration circuitry, a second reconfigurable circuit of the plurality of reconfigurable circuits to the bus, the second reconfiguration circuit designated as a redundant circuit;
• designate, via the reconfiguration circuitry, the second reconfigurable circuit as the primary circuit;
• refurbishing, via the reconfiguration circuitry, the first reconfigurable circuit to a default state;
• and
• designating, via the reconfiguration circuitry, the first reconfigurable circuit as the redundant circuit.