Information processing device for vehicle
An unprotected area of a storage stores a monitoring application. A protected area of the storage stores a duplicate application that is a copy of the monitoring application at a point in time when the monitoring application was stored in the unprotected area. Based on an execution signal of the monitoring application, a CPU stores, as first data in a RAM, a copy of a source code included in the monitoring application. The CPU also executes the monitoring application based on the first data. Based on the execution signal, the CPU stores, as second data in the RAM, the copy of the source code included in the duplicate application. During execution of the monitoring application, the CPU stops execution of the monitoring application when a discrepancy is detected between the first data and the second data.
1 . An information processing device for a vehicle, the information processing device comprising:
an execution unit that includes processing circuitry;
a first memory that stores an application executable by the processing circuitry; and
a second memory that temporarily stores data generated when the processing circuitry executes the application, wherein
the first memory includes:
a protected area that requires a specific access permission for writing; and
an unprotected area that does not require a specific access permission for writing,
the unprotected area stores a monitoring application that is subject to monitoring, the monitoring application is configured to be an AD application that causes the vehicle equipped with the information processing device for the vehicle to autonomously drive without any driver operation,
the protected area stores a duplicate application that is a copy of the monitoring application at a point in time when the monitoring application was stored in the unprotected area, and
the processing circuitry is configured to, when obtaining an execution signal of the monitoring application, perform:
storing, based on the execution signal, as first data in the second memory, a copy of a source code included in the monitoring application stored in the unprotected area, and executing the monitoring application based on the first data stored in the second memory;
storing, based on the execution signal, as second data in the second memory, a copy of a source code included in the duplicate application stored in the protected area;
comparing, during execution of the monitoring application, the first data and the second data stored in the second memory with each other; and
stopping execution of the monitoring application when detecting a discrepancy between the first data and the second data.
2 . The information processing device for the vehicle according to claim 1 , wherein
the processing circuitry is configured to, when detecting the discrepancy between the first data and the second data, perform:
deleting the monitoring application that has already been stored in the unprotected area; and
storing, in the unprotected area as a new monitoring application, a copy of the duplicate application stored in the protected area.
3 . The information processing device for the vehicle according to claim 2 , wherein
the processing circuitry is configured to, during the execution of the monitoring application, perform:
repeatedly outputting a control signal corresponding to the execution of the monitoring application to a vehicle on-board device at a predetermined first cycle; and
repeating the comparing the first data and the second data with each other at a second cycle that is predetermined to be shorter than the first cycle.
4 . The information processing device for the vehicle according to claim 3 , wherein
the processing circuitry is configured to compare all of the first data with all of the second data when comparing the first data with the second data.