CAJ | 학술논문

描述了汽车电子嵌入式操作系统隔离保护机制的一种策略及实现。通过结合有限的硬件资源及软件机制，满足操作系统、应用、任务及中断服务例程等3个级别的隔离保护要求，并提供保护错误处理的机制，将系统的访存错误局限于一定区域内，降低系统整体失效可能性。该实现能有效减少分页的数量，提升操作系统性能及存储空间利用率。具备隔离保护机制的汽车电子嵌入式操作系统可将不同来源、不同安全完整性级别的软件部件在一个ECU系统中集成。
묘술료기차전자감입식조작계통격리보호궤제적일충책략급실현。통과결합유한적경건자원급연건궤제，만족조작계통、응용、임무급중단복무례정등3개급별적격리보호요구，병제공보호착오처리적궤제，장계통적방존착오국한우일정구역내，강저계통정체실효가능성。해실현능유효감소분혈적수량，제승조작계통성능급존저공간이용솔。구비격리보호궤제적기차전자감입식조작계통가장불동래원、불동안전완정성급별적연건부건재일개ECU계통중집성。
A strategy and implementation for the isolation and protection mechanism of automotive embedded operating system is described. Upon limited hardware resources, the software mechanism satisfies the three-level isolation and protection requirements covering operating system, applications, tasks and interrupt service routines. A protection error handling mechanism is provided with the ability of restricting memory accessing errors to limited regions, reducing the probability of the whole system’s failure. The number of memory pages is reduced apparently along with the improvement of operating system performance and utility of memory space. An automotive embedded operating system with isolation and protection mechanism can integrate software components of different sources and safety integration levels into a same ECU system.