Automotive embedded systems are going through a major change, both in terms of how they are used and in terms of software and hardware architecture. Much more powerful and rapidly evolvable hardware is expected, paralleled by an accelerating development rate of the control software. To meet these challenges, a software standard, AUTOSAR, is gaining ground in the automotive field. In this work, experiences from porting AUTOSAR to a high performance embedded system, Raspberry Pi, are collected. The goal is both to present experience on the process of AUTOSAR porting and to create an AUTOSAR implementation on a cheap and widely accessible hardware platform, making AUTOSAR available for researchers and students.

In the automotive industry today, embedded systems have reached a level of complexity which is not maintainable with the traditional approach of design- ing automotive embedded systems. For this purpose, many of the worlds leading automotive manufacturers have formed an alliance to apprehend this problem. This has resulted in AUTOSAR, an open standardized architecture for automotive embedded systems, which strives for increased flexibility and safety regulations. This thesis will explore the possibilities of implementing a CAN Communication stack using the AUTOSAR architecture and its corresponding methodology. As a result of this thesis, a complete AUTOSAR CAN communication stack has been implemented, as well has a simulator application with the purpose of testing its functionality.

Die Möglichkeit, komplexe Applikationen für Steuergeräte zu entwerfen und zu implementieren wird durch die Systemarchitektur AUTOSAR stark vereinfacht. Ein Applikations-Entwickler implementiert nur noch die reine Funktionalität, während der Teil, der die Interaktion mit der Hardware ermöglicht, von entsprechenden Werkzeugen automatisch generiert wird. Viele Hersteller bieten hierfür Produkte, die vom grafischen Entwurf der Software bis zu finalen Tests des fertigen Steuergeräte-Codes alles abdecken. Zentrales Element ist hierbei immer die AUTOSAR-XML, welche alle Informationen zur Anwendung aufnimmt. Dadurch können verschiedene Zulieferer einzelne Module zu einer Anwendung beisteuern. Durch den technologischen Fortschritt und die Integrierbarkeit von verfügbaren Teilsystemen oder einzelnen Komponenten werden eingebettete Systeme immer komplexer ([Har02]). Daher müssen neue Spezifikationen erstellt und demzufolge neue AUTOSAR-Versionen publiziert werden. Die Hersteller müssen sich an diese neuen Vorgaben halten, um so konkurrenzfähig auf dem Markt zu bleiben ([ZS14]).

Safety has been always been an important part, irrespective of the field of work that it accounts for. The functional safety standard that is currently being used in the automotive domain is the ISO 26262. This is an adaptation of the IEC 61508 safety standard. It is directed as a basic functional safety standard for a variety of industries. The version of ISO 26262 that is used in this thesis is the final draft released in January, 2011. In this thesis, various parts of the ISO 26262 functional safety standard are considered in order to understand the differences and interdependencies between them. The parts of ISO 26262 that are treated are as follows; Part 1: Vocabulary, Part 3: Concept phase, Part 4: Product development at the system level, Part 6: Product development at the software level and Part 9: Automotive Safety Integrity Level (ASIL)-oriented and safety-oriented analysis. During the entire course of this thesis the ISO 26262 standard is evaluated and the experience gained from it is jotted down. The understanding gained during this thesis about the ISO 26262 can be applied to ongoing or new development processes. As safety can never be overlooked, the wisdom that belongs to the ISO 26262 can be generously used into embedded systems that demand certain levels of safety.

Automotive Ethernet is a newly introduced in-vehicle bus that allows unicast communication between ECUs. It is based on the OSI model of Ethernet, with a few modifications on the physical layer and newly introduced application protocols. AUTOSAR, a consortium of automotive OEMs, Tier-1 suppliers and tool vendors has defined a standard software architecture that simplifies the ECU software development with its well defined software specifications and APIs. The Automotive Ethernet stack is now an integral part of the latest AUTOSAR specification release 4.2. Infineon Aurix TriCore TC27x microcontroller is a popular board used in ADAS applications. The board has support for Fast Ethernet. This thesis investigates the setting up of an Ethernet communication on the TriCore board running under AUTOSAR software architecture. The various modules of the AUTOSAR Ethernet stack are familiarized and configured. This is followed up by validating the implementation on the Ethernet physical layer. The validation is based on a real Ethernet communication between the TriCore board and the Vector VN5610 network interface card. TCP and UDP based connections between the AUTOSAR compliant board and the VN5610 are tested and validated. A test suite for evaluating the protocol conformance of the AUTOSAR Ethernet stack exists at Bertrandt. The final step of this thesis involved the execution strategies for this test suite.

Kurz nach der Jahrtausendwende führte die steigende Innovation und Komplexität von entwickelten Automotive-Systemen zum Anstieg der Anzahl von installierten elektronischen Systemen in Fahrzeugen. Dies wurde und wird noch immer durch die stetig wachsende Anzahl von rechtlichen und sicherheitstechnischen Vorgaben verstärkt. Da ein signifikanter Teil der Entwicklungskosten neuer Systeme in der Softwareentwicklung auf den im Automotive-Bereich verwendeten Steuergeräten (Electronic Control Unit, oder ECU) entsteht, wurde 2003 der AUTOSAR Developement Partnership ins Leben gerufen. Das Ziel dieser Arbeit ist, ein einheitliches System zu realisieren, in welchem eine vom Anbieter unabhängige Testbasis für AUTOSAR-konforme Tests ermöglicht werden soll, so dass ein Begleiten des Entwicklungsprozesses möglich ist. Es sollen sich Testmodule verschiedener Art am System anmelden und schließlich einem Arbeitsfluss zur Absicherung von AUTOSAR-Steuergeräten zur Entwicklungszeit hinzugefügt werden.

The YellowCar at the professorship of computer engineering of TU Chemnitz is a demonstration vehicle. The car is equipped with multiple networked Electronic Control Unit (ECU)s. There are regular software and hardware updates. Before introduction of any new update, it is essential to test the behavior of the car. This can be done through simulation. Since the majority of the ECU in YellowCar are AUTOSAR based, several AUTOSAR simulation tools can be used to do so. However non-AUTOSAR ECU applications can still not be simulated in these tools. Moreover simulating with such tools need the whole application to be implemented and also very expensive. Simulink is one of the most powerful tools for the purpose of Model-in-the-Loop (MIL) testing which is a popular strategy in the embedded world. The scope of this Master thesis is analyzing the YellowCar and its architecture to develop a dynamic Simulink architectural model that can be modified and extended to facilitate future updates. The outcome of this thesis is an implementation of a model for the YellowCar which allows both AUTOSAR and non-AUTOSAR ECUs to be simulated as one system. Also the model supports extension by easy addition of new modules like ECU or sensor through a graphical user interface.

Durch die Einführung der Systemarchitektur AUTOSAR im automobilen Umfeld, können Applikationen unabhängig von der verwendeten Hardware oder der genutzten Kommunikationssysteme entwickelt werden. Dadurch können Funktionen wieder verwendet werden, was Zeit und Ressourcen einsparen kann. So können Funktionen, die sich etabliert haben, in späteren Entwicklungen durch Anpassung in der Konfiguration genutzt werden ohne dabei den Quellcode zu ändern. Jedoch stellt die große Zahl an Parametern in der AUTOSAR Architektur große Herausforderungen an die Absicherung eines Steuergerätes. Dieser Aspekt wird durch eine meist heterogene Toollandschaft verstärkt. Umso wichtiger ist es, dass während der Entwicklung von AUTOSAR Steuergeräten statische Analysen die Software und die Konfiguration überprüfen, um so die Softwarequalität sicherstellen zu können. In der Masterarbeit werden eine Menge von AUTOSAR spezifischen statischen Analysen für die einzelnen Schichten eines AUTOSAR Steuergerätes entwickelt. Für die Analyse werden Einstellungsdateien (nach Standard und Firmenspezifische) und der Quellcode an sich genutzt. Die Analysen geben optional Korrekturvorschläge an den Entwickler. Die Umsetzung erfolgt in einem C# Prototyp und wird an der Lichtsteuerung des Automotive Demonstrator YellowCar angewendet werden.

The vision of automated driving demands a highly available system, especially in safety-critical functionalities. In automated driving when a driver is not binding to be a part of the control loop, the system needs to be operational even after failure of a critical component until driver regain the control of vehicle. In pursuit of such a fail-operational behavior, the developed design process with software redundancy in contrast to conventional dedicated backup requires the support of automatic configurator for scheduling relevant parameters to ensure real-time behavior of the system. Multiple implementation methods are introduced to provide an automatic service which also considers task criticality before assigning task to the processor. Also, a generic method is developed to generate adaptation plans automatically for an already monitoring and reconfiguration service to handle fault occurring environment.

Automotive Ethernet is a newly introduced in-vehicle bus that allows unicast communication between ECUs. It is based on the OSI model of Ethernet, with a few modifications on the physical layer and newly introduced application protocols. AUTOSAR, a consortium of automotive OEMs, Tier-1 suppliers and tool vendors has defined a standard software architecture that simplifies the ECU software development with its well defined software specifications and APIs. The Automotive Ethernet stack is now an integral part of the latest AUTOSAR specification release 4.2. Infineon Aurix TriCore TC27x microcontroller is a popular board used in ADAS applications. The board has support for Fast Ethernet. This thesis investigates the setting up of an Ethernet communication on the TriCore board running under AUTOSAR software architecture. The various modules of the AUTOSAR Ethernet stack are familiarized and configured. This is followed up by validating the implementation on the Ethernet physical layer. The validation is based on a real Ethernet communication between the TriCore board and the Vector VN5610 network interface card. TCP and UDP based connections between the AUTOSAR compliant board and the VN5610 are tested and validated. A test suite for evaluating the protocol conformance of the AUTOSAR Ethernet stack exists at Bertrandt. The final step of this thesis involved the execution strategies for this test suite.