Method to ensure safety integrity of a microprocessor over a distributed network for automotive applications
AssigneeGM Global Technology Operations LLC
InventorsChristopher J. Trush, Padma Sundaram
Life of this patent
Estimating the term…
Abstract
A processor integrity system in a vehicle includes m main processor modules that control at least m respective functions of the vehicle, where m is n integer greater than or equal to one. A monitoring processor module controls at least one function of the vehicle, communicates with the m main processor modules over a distributed vehicle network, selectively transmits a query to at least one of the m main processor modules over the distributed vehicle network, receives an answer from the at least one of the m main processor modules over the distributed vehicle network, that verifies integrity of the at least one of the m main processor modules based on the answer.
Claims20
A processor integrity system in a vehicle, the system comprising:
- m main processor modules that control at least m respective functions of the vehicle, where m is n integer greater than or equal to one;
- and
- a monitoring processor module that controls at least one function of the vehicle, that communicates with the m main processor modules over a distributed vehicle network, that selectively transmits a query to at least one of the m main processor modules over the distributed vehicle network, that receives an answer from the at least one of the m main processor modules over the distributed vehicle network, and that verifies integrity of the at least one of the m main processor modules based on the answer.
A processor integrity method in a vehicle, the method comprising:
- controlling at least m respective functions of the vehicle using m respective main processor modules, where m is n integer greater than or equal to one;
- controlling at least one function of the vehicle using a monitoring processor module;
- communicating with the m main processor modules over a distributed vehicle network using the monitoring processor module;
- selectively transmitting a query from the monitoring processor module to at least one of the m main processor modules over the distributed vehicle network;
- receiving an answer from the at least one of the m main processor modules at the monitoring processor module over the distributed vehicle network;
- and
- verifying integrity of the at least one of the m main processor modules based on the answer using the monitoring processor module.
Dependencies are inferred from the claim text.