US 12,260,244 B2
Device and method for managing communication via interfaces in a virtualized system
Gunnar Piel, Shanghai (CN)
Assigned to ROBERT BOSCH GMBH, Stuttgart (DE)
Filed by Robert Bosch GmbH, Stuttgart (DE)
Filed on Mar. 25, 2022, as Appl. No. 17/704,359.
Claims priority of application No. 10 2021 203 329.6 (DE), filed on Apr. 1, 2021.
Prior Publication US 2022/0318047 A1, Oct. 6, 2022
Int. Cl. G06F 9/455 (2018.01); G06F 21/64 (2013.01); H04W 88/16 (2009.01)
CPC G06F 9/45558 (2013.01) [G06F 21/64 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01); H04W 88/16 (2013.01)] 9 Claims
OG exemplary drawing
 
1. A device for managing communication via interfaces in a virtualized system in which a plurality of virtual machines shares a hardware platform which is virtualized using a hypervisor, and interfaces assigned to the hardware platform, the device comprising:
a gateway implemented in hardware, access to the interfaces by the virtual machines taking place using the gateway, the gateway including an interface which enables a direct writing and reading of data, which have been received or are to be transferred, into memory partitions of a processor or processor system, a safety module implemented in hardware, and a security module implemented in hardware, the safety module being configured to carry out at least one function for ensuring validity of the data, and the security module being configured to carry out at least one function for ensuring data security;
wherein the gateway is configured such that: (i) data received via the interface are processed initially by the security module and subsequently by the safety module, and, thereafter, are written directly into the memory partitions of the processor or processor system using the interface of the gateway and/or (ii) data to be transferred via the interface are initially read directly out of the memory partitions of the processor or processor system using the interface of the gateway and, thereafter, processed initially by the safety module and subsequently by the security module.