logo SBA

ETD

Archivio digitale delle tesi discusse presso l’Università di Pisa

Tesi etd-04082021-141242


Tipo di tesi
Tesi di laurea magistrale
Autore
BELLUARDO, LUCA
URN
etd-04082021-141242
Titolo
Design and Implementation of a Multi-domain Software Architecture for Autonomous Driving
Dipartimento
INGEGNERIA DELL'INFORMAZIONE
Corso di studi
EMBEDDED COMPUTING SYSTEMS
Relatori
relatore Dott. Biondi, Alessandro
relatore Prof. Buttazzo, Giorgio C.
Parole chiave
  • hypervisor
  • autonomous driving
  • autonomous car
  • apollo
  • multi-domain system
  • erika
  • real time system
Data inizio appello
30/04/2021
Consultabilità
Non consultabile
Data di rilascio
30/04/2091
Riassunto
In recent years, computer systems have taken hold and invaded all use areas, also the automotive world. Nowadays in a car there are multiple systems, ADAS, to help the driver and make driving safer.
This thesis considers the Apollo autonomous driving framework, which runs on Linux, a complex operating system that exposes a large surface to security attacks and safety threats.
This work aims at making Apollo safer and more secure by implementing a multi-domain architecture, where some Apollo's components are still handled by Linux, while the most safety-critical ones are handled by the Erika real-time operating system. A hypervisor is in charge of providing separation between the two domains. Specifically, the control component, a highly safety-critical part of Apollo responsible for delivering actuation commands to the autonomous car, has been ported to Erika.
The first step was to port the component outside Apollo but still within the same operating system, restoring the communication with the IPC (Inter-Process Communication) mechanism provided by Linux.
After, the version on Erika was developed, preparing the Erika environment to host the component's task and changing the IPC mechanism with a communication mechanism offered by the hypervisor KVM.
To evaluate the solution, the latency between the input messages timings and the output message timing was calculated and the time difference between the several versions is small and therefore a large delay is not introduced.
File