Method and system for network segment isolation with variable configurations in a vehicle

A method for network segment isolation with variable configurations in a vehicle comprising:

• hosting, within a microcontroller unit (MCU), located within the vehicle, one or more software builds, wherein the MCU further includes an internal ethernet switch and an auxiliary core manager to manage the internal ethernet switch and the one or more software builds;
• coupling an external ethernet switch located within the vehicle to the internal ethernet switch, wherein the external ethernet switch couples one or more devices through one or more virtual local area networks (VLANs) to the internal ethernet switch;
• generating a VLAN configuration and filtering rule for the internal switch based on an access control policy;
• identifying an association of the one or more software builds to one or more MCU ports based on a MAC and IP address of each MCU port;
• and
• updating a VLAN configuration and filtering rule on the external switch to enable one or more VLANs based on the association of the one or more software builds to the one or more MCU ports.

A system of network segment isolation with variable configurations in a vehicle comprising:

• a network within the vehicle that includes:
• a first microcontroller unit (MCU), located within the vehicle, which includes a first internal ethernet switch and a first auxiliary core manager, wherein the first MCU is configured to host one or more software builds and the first auxiliary core manager is configured to manage the first internal ethernet switch and the one or more software builds;
• a second microcontroller unit (MCU), located within the vehicle, that includes a second internal ethernet switch and a second auxiliary core manager, wherein the second MCU is configured to host one or more software builds and second auxiliary core manager is configured to manage the second internal ethernet switch;
• and
• an external ethernet switch located within the vehicle configured to couple the internal ethernet switch to one or more devices through one or more virtual local area networks (VLANs);
• wherein upon an occurrence of a reflash event the auxiliary core manager is configured to generate a VLAN configuration and filtering rule for the internal switch based on an access control policy and to identify an association of the one or more software builds to one or more MCU ports based on a MAC and IP address of each MCU port;
• wherein the auxiliary core manager is further configured to update a VLAN configuration and filtering rule on the external switch to enable one or more VLANs based on the association of the one or more software builds to the one or more MCU ports;
• wherein the VLAN configuration and filtering rule is applied at the internal ethernet switch and at the external ethernet switch;
• wherein each of the one or more software builds are associated with a fixed IP address and a location dependent MAC address;
• wherein the internal ethernet switch is configured to verify communication between a software build and a device and wherein the verification includes matching configuration data including the location dependent MAC address with an associated VLAN;
• and
• wherein the external switch is configured to be coupled to an edge to bus device or a specialized electronic device.