Applying the AUTOSAR timing protection to build safe and efficient ISO 26262 mixed-criticality systems

International audienceIntegrating applications with different criticality levels into one electronic control unit requires special care. An unlucky priority assignment (as part of the overall dynamic software architecture) can result in the violation of safety requirements of the ISO 26262. Hence, a certain protection is needed to guarantee the so called freedom from interference. In this paper, we evaluate the three priority-assignment strategies: CAPA, RMS and a hybrid approach. The optimal selection requires a trade-off between safety and resource-efficiency. We show how the AUTOSAR Timing Protection mechanism-when configured wisely-facilitates combining the advantages of the three approaches and yields safe and very efficiency schedules. We show a method for determining good configurations for the Timing Protection service