Method for multi-tasking multiple Java virtual machines in a secure environment
DCFirst Claim
Patent Images
1. A portable processing system for controlling operations in a vehicle, comprising:
- multiple processors located in the vehicle that transmit and receive messages over a wired or wireless network located within the vehicle, the processors executing different vehicle applications associated with critical operations associated with primary vehicle functions used for driving and controlling the vehicle and non-critical operations associated with providing and controlling driver ergonomic functions not required for operating the primary vehicle driving and control functions;
at least one of the processors operating as an executive that dynamically initiates the execution of the applications on different processors according to processor availability and the critical and noncritical operations associated with the vehicle applications so that identified failure of at least one of the vehicle applications associated with one of the critical operations is automatically transferred to a selected at least one of the processors currently executing non-critical operations thereby dynamically reassigning the selected at least one of the processors as a backup processor for one or more of the processors executing critical operations.
11 Assignments
Litigations
2 Petitions
Accused Products
Abstract
The present invention allows construction of a secure, real-time operating system from a portable language such as Java that appears to be a Java virtual machine from a top perspective but provides a secure operating system from a bottom perspective. This allows portable languages, such as Java, to be used for secure embedded multiprocessor environments.
-
Citations
40 Claims
-
1. A portable processing system for controlling operations in a vehicle, comprising:
-
multiple processors located in the vehicle that transmit and receive messages over a wired or wireless network located within the vehicle, the processors executing different vehicle applications associated with critical operations associated with primary vehicle functions used for driving and controlling the vehicle and non-critical operations associated with providing and controlling driver ergonomic functions not required for operating the primary vehicle driving and control functions; at least one of the processors operating as an executive that dynamically initiates the execution of the applications on different processors according to processor availability and the critical and noncritical operations associated with the vehicle applications so that identified failure of at least one of the vehicle applications associated with one of the critical operations is automatically transferred to a selected at least one of the processors currently executing non-critical operations thereby dynamically reassigning the selected at least one of the processors as a backup processor for one or more of the processors executing critical operations. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17)
-
-
18. An application management system comprising:
-
modular processors linked over a network for operating different vehicle applications that control or monitor associated critical and non-critical vehicle operations; at least one of the processors operating as an executive that control which processors operate the applications according to the associated critical and non-critical vehicle operations and according to different vehicle conditions and priorities associated with data and messages exchanged between the processors, wherein the executive directs one of the processors operating one of the non-critical applications to take over operation for one of the critical applications when the processor operating the critical application fails; and sensors that provide input to a primary processor or a backup processor according to instructions provided by the executive, wherein the backup processor operates one of the non-critical applications when not operating as a backup to the primary processor. - View Dependent Claims (19, 20, 21, 22, 23, 24, 25, 26, 27, 28)
-
-
29. A method for configuring real-time vehicle applications in a distributed multi-processor system operating in a vehicle, comprising:
-
identifying vehicle applications running on different processors in the multiprocessor system; operating a task manager that obtains different data and state information associated with the different vehicle applications; operating a configuration manager that notifies the task manager upon detecting a failure running one of the identified vehicle applications in the multiprocessor system; using the task manager for automatically identifying another processor in the multiprocessor system for running the identified vehicle application and redirecting the vehicle application associated with the detected failure to the other identified processor in the vehicle; using the configuration manager to redirect the data and state information to the other identified processor in the vehicle after detecting the failure; and initiating the identified application in the identified other processor. - View Dependent Claims (30, 31, 32, 33, 34, 35, 36, 37, 38)
-
-
39. A method for operating multiple processors in a vehicle, comprising:
-
operating a task manager that obtains different Global Positioning System (GPS) data from a first processor operating a GPS application and obtains sensor fusion data from one or more second processors operating sensor applications; operating a configuration manager that detects failure of the GPS application operating in the first processor or failure of the sensor applications operating in the second processors, the configuration manager notifying the task manager of the detected failure and the task manager redirecting the GPS or sensor applications associated with the detected failure to a third processor in the vehicle; operating a critical data manager that manages the storage of data and state information from the GPS and sensor applications; and using the configuration manager to redirect the stored data and state information to the GPS or sensor applications operating on the third processor after a detected failure on the first or second processors. - View Dependent Claims (40)
-
Specification