基于可信执行环境的智能汽车计算平台架构分析

Architecture Analysis of Intelligent Vehicle Computing Platform Based on Trusted Execution Environment

智能汽车计算平台是当前汽车行业的关注点。经典AUTOSAR平台难以满足自动驾驶需求,自适应AUTOSAR的出现逐渐弥补了这一需求空缺,而未来的车内控制器平台架构将以两个平台相互补充的形式存在。随着自适应AUTOSAR架构对自驾、娱乐功能的支持力度的不断加大,其信息安全成为不可忽略的问题。自适应AUTOSAR架构本身的标准模块不足以满足车内信息安全需求,而可信执行环境可以作为非标准中间件被引入,可以使控制器平台兼具进行高性能计算与安全处理信息的能力。本文关注智能汽车计算平台上可信执行环境的集成,对汽车操作系统的安全启动、隔离环境的切换、车内场景需求等进行分析,讨论可信环境在汽车行业的发展趋势。

The computing platform of intelligent vehicles is the focus of the current automotive industry.The classic AUTOSAR platform is difficult to support the demand of automatic driving.The emergence of adaptive AUTOSAR gradually fills this gap.The future architecture of the vehicle controller platform will exist in the form of two complementary platforms.With the support of adaptive AUTOSAR architecture for automatic driving and entertainment functions,its information security scheme has become a problem that can not be ignored.The security module of adaptive AUTOSAR architecture itself is not enough to meet the information security requirements,and the trusted execution environment,as the introduction of non-standard middleware,can enable the controller platform to give consideration to high-performance computing and information security.This paper focuses on the integration of the trusted execution environment on the intelligent vehicle computing platform,and analyzes the safe startup process of the automobile operating system,the switching of the isolation environment,and the security demand scenario in the vehicle,and discusses the development trend of the trusted environment in the automobile industry.