Abstract: A system and method for accessing coherent data on a controller. The system and method include a first buffer and a second buffer that each may be read from or written to and an indicator that indicates which of the first or the second buffer is read from while the other of the first or second buffers is written to. The system and method also include a read synchronization protocol that allows the coherent data to be read from the buffer that the indicator indicates is the read buffer and a write synchronization protocol that allows the coherent data to be written to the buffer that the indicator indicates is the write buffer.

Abstract: A control and diagnosis methodology for an electronic module of a vehicle is presented here. In accordance with the disclosed method, at least one wake up event for a processor of the electronic module is performed during an inactive shutdown state of the vehicle. The at least one wake up event is initiated by a wake up timer of the electronic module. The method continues by logging, during the inactive shutdown state of the vehicle, wake up information associated with the at least one wake up event to obtain logged wake up information. The logged wake up information is analyzed during an active operating state of the vehicle to obtain a wake up diagnosis, and the method generates, during the active operating state of the vehicle, an output indicative of the wake up diagnosis.

Abstract: A system and method for accessing coherent data on a controller. The system and method include a first buffer and a second buffer that each may be read from or written to and an indicator that indicates which of the first or the second buffer is read from while the other of the first or second buffers is written to. The system and method also include a read synchronization protocol that allows the coherent data to be read from the buffer that the indicator indicates is the read buffer and a write synchronization protocol that allows the coherent data to be written to the buffer that the indicator indicates is the write buffer.

Abstract: A control and diagnosis methodology for an electronic module of a vehicle is presented here. In accordance with the disclosed method, at least one wake up event for a processor of the electronic module is performed during an inactive shutdown state of the vehicle. The at least one wake up event is initiated by a wake up timer of the electronic module. The method continues by logging, during the inactive shutdown state of the vehicle, wake up information associated with the at least one wake up event to obtain logged wake up information. The logged wake up information is analyzed during an active operating state of the vehicle to obtain a wake up diagnosis, and the method generates, during the active operating state of the vehicle, an output indicative of the wake up diagnosis.

Abstract: A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken.

Abstract: A system and method for verifying that operating software and calibration files are present and valid after a bootloader flashes the files into the memory on a vehicle ECU before allowing the operating software to execute. The ECU memory defines a memory segment for the operating software and the calibration files. A software manifest is provided in a memory slot before the operating software segment in the memory. Likewise, a calibration manifest is provided in a memory slot before the calibration segment in the ECU memory. After the software has been flashed into the ECU memory, a software flag is set in the software manifest memory slot and each time a calibration file is flashed, a calibration flag for the particular calibration file is set in the calibration manifest.

Abstract: An event data recorder (EDR) system includes an event identification module, a parameter selection module, and an event recorder module. The event identification module identifies occurrences of a first event and second event of M predetermined events based on operating conditions of an automotive vehicle. The parameter selection module selects a first set of parameters to record from N predetermined parameters when the first event occurs. The parameter selection module selects a second set of parameters to record from the N predetermined parameters when the second event occurs. The event recorder module records data corresponding to the first set of parameters when the first event occurs and records data corresponding to the second set of parameters when the second event occurs. M and N are integers greater than 1 and the first set includes at least one parameter that is different from the parameters included in the second set.

Abstract: A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken.

Abstract: A system and method for verifying that operating software and calibration files are present and valid after a bootloader flashes the files into the memory on a vehicle ECU before allowing the operating software to execute. The ECU memory defines a memory segment for the operating software and the calibration files. A software manifest is provided in a memory slot before the operating software segment in the memory. Likewise, a calibration manifest is provided in a memory slot before the calibration segment in the ECU memory. After the software has been flashed into the ECU memory, a software flag is set in the software manifest memory slot and each time a calibration file is flashed, a calibration flag for the particular calibration file is set in the calibration manifest.

Abstract: A processor and memory system includes memory, a table of exceptions, and a processor. The memory includes a plurality of memory blocks. The table of exceptions identifies at least one of the plurality of memory blocks that includes an expected error. The processor diagnoses a security fault based on data stored in at least one of the plurality of memory blocks and the table of exceptions.

Abstract: A method for monitoring a main control module operative to command first and second motor control processors of a hybrid powertrain system includes signally connecting a programmable logic device to the main control module and the first and second motor control processors, communicating a first seed signal from the programmable logic device to the main control module, and determining an invalid key signal in the main control module in response to the first seed signal. The invalid key signal is communicated to the programmable logic device.

Abstract: A system comprises a general-purpose memory, a lockable memory, a memory management unit, and a processor. The general-purpose memory includes data for a first set of addresses. The lockable memory includes data for a second set of addresses. The memory management unit selectively writes data to one of the general-purpose memory and the lockable memory and selectively locks the lockable memory by preventing writes to the lockable memory. The processor instructs the memory management unit to unlock the lockable memory before requesting a write to one of the second set of addresses.

Abstract: An event data recorder (EDR) system includes an event identification module, a parameter selection module, and an event recorder module. The event identification module identifies occurrences of a first event and second event of M predetermined events based on operating conditions of an automotive vehicle. The parameter selection module selects a first set of parameters to record from N predetermined parameters when the first event occurs. The parameter selection module selects a second set of parameters to record from the N predetermined parameters when the second event occurs. The event recorder module records data corresponding to the first set of parameters when the first event occurs and records data corresponding to the second set of parameters when the second event occurs. M and N are integers greater than 1 and the first set includes at least one parameter that is different from the parameters included in the second set.

Abstract: A tamper detection system for a control module of a vehicle comprises first nonvolatile memory that stores N rewriteable components including at least one of calibration and software that is used to operate a controlled device of the vehicle, wherein N is an integer greater than zero. The N rewriteable components include an embedded part number (EPN) and an embedded verification number (EVN). Second nonvolatile memory includes a history buffer. A tampering detection module includes a calculated verification number (CVN) generator that generates a CVN for at least one of the N rewriteable components and that stores the CVN in the history buffer. A locking module selectively locks the history buffer under certain conditions.

Abstract: A processor and memory system includes memory, a table of exceptions, and a processor. The memory includes a plurality of memory blocks. The table of exceptions identifies at least one of the plurality of memory blocks that includes an expected error. The processor diagnoses a security fault based on data stored in at least one of the plurality of memory blocks and the table of exceptions.

Abstract: A system comprises a general-purpose memory, a lockable memory, a memory management unit, and a processor. The general-purpose memory includes data for a first set of addresses. The lockable memory includes data for a second set of addresses. The memory management unit selectively writes data to one of the general-purpose memory and the lockable memory and selectively locks the lockable memory by preventing writes to the lockable memory. The processor instructs the memory management unit to unlock the lockable memory before requesting a write to one of the second set of addresses.

Abstract: A tamper detection system for a control module of a vehicle comprises first nonvolatile memory that stores N rewriteable components including at least one of calibration and software that is used to operate a controlled device of the vehicle, wherein N is an integer greater than zero. The N rewriteable components include an embedded part number (EPN) and an embedded verification number (EVN). Second nonvolatile memory includes a history buffer. A tampering detection module includes a calculated verification number (CVN) generator that generates a CVN for at least one of the N rewriteable components and that stores the CVN in the history buffer. A locking module selectively locks the history buffer under certain conditions.

Abstract: A knock detection module for an engine comprises a statistics storage module and a processing module. The statistics storage module stores M times N vibration profiles corresponding to M zones of operation of the engine and N cylinders of the engine, wherein M and N are integers greater than one. The processing module determines in which one of the M zones the engine is operating and determines whether knock has occurred for one of the N cylinders by comparing measured vibration data with a selected one of the vibration profiles corresponding to the one of the M zones and the one of the N cylinders.

Abstract: A method for monitoring a main control module operative to command first and second motor control processors of a hybrid powertrain system includes signally connecting a programmable logic device to the main control module and the first and second motor control processors, communicating a first seed signal from the programmable logic device to the main control module, and determining an invalid key signal in the main control module in response to the first seed signal. The invalid key signal is communicated to the programmable logic device.

Abstract: A knock detection module for an engine comprises a statistics storage module and a processing module. The statistics storage module stores M times N vibration profiles corresponding to M zones of operation of the engine and N cylinders of the engine, wherein M and N are integers greater than one. The processing module determines in which one of the M zones the engine is operating and determines whether knock has occurred for one of the N cylinders by comparing measured vibration data with a selected one of the vibration profiles corresponding to the one of the M zones and the one of the N cylinders.