黑莓 QNX 公司汽車業(yè)務(wù)主管John Wall 解釋道：“隨著車輛開始通過(guò)軟件實(shí)現(xiàn)越來(lái)越多的功能，汽車行業(yè)的收益流和商業(yè)模型都在發(fā)生變化。”
如今，汽車行業(yè)的產(chǎn)品差異化開始逐步向服務(wù)和軟件方面靠攏。隨著網(wǎng)聯(lián)車開始增加，越來(lái)越多的網(wǎng)絡(luò)安全功能，汽車領(lǐng)域的各個(gè)領(lǐng)域都發(fā)生了重大變革，比如出現(xiàn)了一些新的商業(yè)關(guān)系結(jié)構(gòu)。
軟件系統(tǒng)現(xiàn)已成為車輛推進(jìn)控制、信息娛樂(lè)、安全和自主功能的基礎(chǔ)，也得到了OEM的擁護(hù)。對(duì)于黑莓 QNX 公司總經(jīng)理兼汽車技術(shù)業(yè)務(wù)主管John Wall 來(lái)說(shuō)，如今的情況已經(jīng)與 10 多年前哈曼（Harman）收購(gòu) QNX 時(shí)發(fā)生了天翻地覆的變化。
那時(shí)，一些汽車行業(yè)的高管并不完全理解 QNX 實(shí)時(shí)操作系統(tǒng)到底有何作用。
Wall 表示，“當(dāng)時(shí)，哈曼的那些經(jīng)理曾經(jīng)開玩笑說(shuō)，底盤和動(dòng)力系統(tǒng)的工程師才是最厲害的，我們只是‘退而次之’！”Wall 畢業(yè)于卡爾頓大學(xué)工程專業(yè)，在 1993 年加入QNX 公司，而后晉升至副總裁，目前擔(dān)任總經(jīng)理職務(wù)。
如今，全球超過(guò) 6000 萬(wàn)輛汽車都搭載了QNX 操作系統(tǒng)。公司有很多“大牌”客戶，最近福特和捷豹路虎都與 QNX 簽署了軟件使用許可協(xié)議。福特甚至在自己的研發(fā)團(tuán)隊(duì)中增加了 450 名黑莓研發(fā)工程師及相關(guān)崗位，這樣的變化均凸顯了汽車行業(yè)的商業(yè)戰(zhàn)略正在發(fā)生重大轉(zhuǎn)變。
“十年前，大家都明確地‘各司其職’，QNX 服務(wù)于一級(jí)供應(yīng)商，然后一級(jí)供應(yīng)商服務(wù)于OEM。如果我們想直接聯(lián)系一家OEM？那肯定只能得到否定答復(fù)。”Wall 回憶說(shuō)，“現(xiàn)在，大家開始建立更多合作伙伴關(guān)系。如今的世界越來(lái)越復(fù)雜，特別是在自動(dòng)駕駛出現(xiàn)之后，很多原廠和一級(jí)供應(yīng)商開始意識(shí)到，很多工作他們根本無(wú)法憑一己之力獨(dú)自完成。”
網(wǎng)聯(lián)功能與軟件戰(zhàn)略
Well 先生表示，曾經(jīng)的“供應(yīng)商-客戶”雙邊模式已經(jīng)變得更像是一種三邊模式。現(xiàn)在，一級(jí)供應(yīng)商、OEM和二級(jí)供應(yīng)商同時(shí)出現(xiàn)在同一場(chǎng)會(huì)議中的情況非常常見。這種變革的動(dòng)力很大程度上來(lái)自谷歌/Waymo和蘋果等傳統(tǒng)汽車行業(yè)之外的玩家。Wall觀察到，“這些新晉參與者的自動(dòng)駕駛項(xiàng)目，正在迫使傳統(tǒng)汽車廠商加足馬力參與競(jìng)爭(zhēng)。如果汽車制造商無(wú)法自己完成軟件研發(fā)，那么一定有人插手這項(xiàng)生意。”
在科技行業(yè)的“窮追猛打”之下，傳統(tǒng)汽車廠商開始不得不跟上這些高科技公司的運(yùn)營(yíng)和創(chuàng)新模式，其中一個(gè)重要體現(xiàn)就是“速度快”。然而，對(duì)于傳統(tǒng)汽車行業(yè)而言，一味追逐科技行業(yè)的產(chǎn)品研發(fā)速度，后果可能是致命的，尤其是在即將到來(lái)的自動(dòng)駕駛時(shí)代中，因?yàn)槲覀冃枰蕾囘@些汽車產(chǎn)品在駕駛途中為我們做出“生死抉擇”。
壞消息是，無(wú)論是在單純的公共道路汽車測(cè)試中，還是在客戶的實(shí)際使用中，車輛系統(tǒng)造成的死亡事故往往要比純?nèi)藶槭д`造成的死亡事故受到遠(yuǎn)遠(yuǎn)更多的關(guān)注，任何細(xì)枝末節(jié)都將完全暴露在公眾關(guān)注的聚光燈之下。如果無(wú)人駕駛汽車開發(fā)商粗心大意，可能招致政府監(jiān)管機(jī)構(gòu)的介入，這也是業(yè)內(nèi)人士所擔(dān)心的地方之一。
“在自動(dòng)駕駛汽車的推廣中，汽車制造商肯定會(huì)采用循序漸進(jìn)的做法，這個(gè)過(guò)程將非常緩慢”。Wall猜測(cè)，“政府一旦認(rèn)定汽車公司的行為是不負(fù)責(zé)任的，就可能會(huì)介入。我認(rèn)為，行業(yè)需要擔(dān)心的并不是傳統(tǒng)汽車公司，勤奮和謹(jǐn)慎是這些老牌制造商的一貫作風(fēng)。真正需要擔(dān)心的是優(yōu)步（Uber）這樣的非傳統(tǒng)汽車公司。”
在自動(dòng)駕駛汽車真正上路之前，各種互聯(lián)功能將成為各類短期汽車軟件戰(zhàn)略中的基本要素。網(wǎng)絡(luò)費(fèi)用、人機(jī)接口（HMI）及安全性，將成為互聯(lián)功能研發(fā)中最需要考慮的設(shè)計(jì)挑戰(zhàn)和成本因素。戰(zhàn)略規(guī)劃者需要思考如何才能利用汽車中產(chǎn)生的各種信息實(shí)現(xiàn)創(chuàng)收。
Wall 指出，“來(lái)自汽車傳感器中的大量數(shù)據(jù)可能非常有價(jià)值。對(duì)于OEM來(lái)說(shuō)，如何利用這些數(shù)據(jù)創(chuàng)收非常重要，這將成為他們未來(lái)的工作重點(diǎn)之一。”
操作系統(tǒng)的未來(lái)角色
未來(lái)，下一代汽車的許多特性和功能都可能以“附加服務(wù)”的形式存在。大大小小的公司都在試圖理清如何推出可以讓車主愿意付錢購(gòu)買的應(yīng)用程序和服務(wù)。有觀點(diǎn)認(rèn)為，手機(jī)行業(yè)可能將推出一種適合汽車行業(yè)的模式。
未來(lái)，各類廠商可能都將選擇從操作系統(tǒng)入手，開拓新的市場(chǎng)。
“如今，汽車正在被拆分為一系列高級(jí)服務(wù)，這與手機(jī)行業(yè)的歷史發(fā)展趨勢(shì)很相似。”Wall 先生表示，“隨著汽車的聯(lián)網(wǎng)功能越來(lái)越多，OEM開始迫切希望能將這些服務(wù)貨幣化。各家公司將不得不開始開發(fā)汽車專用應(yīng)用程序。此時(shí)，對(duì)標(biāo)準(zhǔn)化操作系統(tǒng)的需求也應(yīng)運(yùn)而生，如同手機(jī)中的iOS 和安卓平臺(tái)一樣。事實(shí)上，自動(dòng)駕駛也將是這些應(yīng)用之一。”
然而，這種以應(yīng)用程序的形式為車輛提供服務(wù)和功能的情況，可能不會(huì)很快出現(xiàn)，這是因?yàn)槠囆袠I(yè)對(duì)可靠性有非常高的要求，而軟件故障可能會(huì)造成非常嚴(yán)重的后果。因此，車輛應(yīng)用程序的開發(fā)也將與車輛自身相對(duì)更長(zhǎng)的研發(fā)周期同步，這有助于提高安全性，確保哪怕有故障發(fā)生，任何與安全有關(guān)的關(guān)鍵車輛功能也不會(huì)受到影響。從另一方面，操作系統(tǒng)的出現(xiàn)，則有助于將信息娛樂(lè)系統(tǒng)等應(yīng)用程序與真正關(guān)乎車輛安全的關(guān)鍵軟件隔離開來(lái)。
在此背景下，黑莓 QNX 公司則推出了一款可以支持多種客戶操作系統(tǒng)的Hypervisor 虛擬機(jī)管理程序，幫助客戶將信息娛樂(lè)系統(tǒng)等應(yīng)用程序隔離在“沙箱”中。Wall 先生表示，目前，QNX 正在與幾家通過(guò)虛擬機(jī)管理程序來(lái)運(yùn)行安卓和Linux 操作系統(tǒng)的汽車制造商合作。
在強(qiáng)大多核處理器的支持下，硬件整合的大趨勢(shì)也促進(jìn)了虛擬機(jī)管理程序的應(yīng)用。在許多車輛中，數(shù)字儀表盤和信息娛樂(lè)系統(tǒng)正在逐步實(shí)現(xiàn)集成，而不再分別采用專用的獨(dú)立處理器。
“儀表盤和信息娛樂(lè)系統(tǒng)將運(yùn)行在同一個(gè)計(jì)算機(jī)平臺(tái)上，但我們的虛擬機(jī)管理程序可以將這兩類應(yīng)用程序運(yùn)行的環(huán)境隔離開來(lái)。QNX 用于儀表盤，Linux 和安卓則用于信息娛樂(lè)系統(tǒng)。”Wall 先生解釋道，“還有一些公司為車輛安裝了亞馬遜的 FireOS 操作系統(tǒng)。我們可以將這些安全級(jí)別較低的系統(tǒng)隔離起來(lái)，確保關(guān)鍵的儀表盤軟件免受任何問(wèn)題的影響。”
深層網(wǎng)絡(luò)防御
毫無(wú)疑問(wèn)，安全肯定是這些安全相關(guān)設(shè)計(jì)項(xiàng)目的基礎(chǔ)，其中網(wǎng)絡(luò)安全的重要性尤為凸顯。鑒于事故可能造成嚴(yán)重后果，如何阻止黑客攻擊也是另一個(gè)令人擔(dān)憂的問(wèn)題。
Wall 希望幫助汽車行業(yè)應(yīng)對(duì)此類問(wèn)題。黑莓公司從一開始就非常注重安全性，QNX 工程師在這方面有非常豐富的經(jīng)驗(yàn)，曾經(jīng)與多家油氣行業(yè)客戶密切合作，為電網(wǎng)等大型基礎(chǔ)設(shè)施系統(tǒng)提供網(wǎng)絡(luò)安全保障。
Wall 表示，“安全功能不能以附加功能的形式存在，你真正需要的是縱深防御。比如，芯片可以通過(guò)一系列認(rèn)證，因此當(dāng)你看到一顆經(jīng)過(guò)認(rèn)證的芯片時(shí)，你就知道這顆芯片可以信任。當(dāng)然了，即使是最好的安全系統(tǒng)也有可能遭到破壞，因此更重要的問(wèn)題是如何及時(shí)發(fā)現(xiàn)并識(shí)別這些問(wèn)題。”
Revenue streams and business models are changing as more vehicle functions move to software. Blackberry QNX’s John Wall explains.
The auto industry’s evolution to a product differentiation based on services and software is prompting a transformation in areas as diverse as the structure of business relationships through cybersecurity for connected vehicles.
OEMs are embracing software, which now forms the basis for propulsion-system control, infotainment, safety and autonomy. For John Wall, the General Manager of Blackberry QNX and leader of the company’s automotive technology business, that’s a marked change from a little over a decade ago when Harman acquired QNX.
At that time, some automotive executives were unsure exactly what the QNX real-time operating system did.
“Harman managers joked that we were secondary to the golden engineers in chassis and powertrain!” noted Wall, who joined QNX in 1993 as a Carleton University engineering grad. He rose through the ranks to become VP Engineering before taking his current role.
Now, QNX software serves as the operating system (OS) on more than 60 million vehicles. Ford and Jaguar Land Rover both recently signed licensing agreements. Ford brought 450 Blackberry engineers and other staff into its development team. Changes like these highlight a major shift in business strategies.
“Ten years ago, there were clear lines—QNX supplied Tier 1s, Tier 1s supplied OEMs. If I spoke to an OEM, that was a no-no,” Wall recalled. “Now there’s a lot more talk of partnerships. As the world becomes more complex, for example with autonomous driving, there’s a realization by OEMs and Tier 1s that they can’t do this alone.”
Connectivity and software strategies
He said the old supplier-customer model has become more of a triangle. Now it’s common to have Tier 1s, OEMs and Tier 2s all in one meeting. Much of this impetus for change came from outsiders like Google/ Waymo and Apple. Hype around their autonomous-driving programs “pushed the traditional OEMs into high gear,” Wall observed. “If carmakers don’t do their own software, other people will step in and do it for them.”
The tech industry’s impetus is driving OEMs to operate and innovate more like high-tech companies. But the speed that comes in industries that have fleeting product life cycles can be perilous, especially in the coming era when cars make life and death decisions on the roadways.
Unfortunately, fatalities caused by vehicle systems, both while testing on public roads and in customer use, have received far more attention than those caused by purely human operator error, putting them in the public spotlight. There’s some concern that government regulators may step in if autonomous-vehicle developers seem to be careless.
“Automakers will be very slow and incremental in their autonomous-driving rollouts,” Wall surmises “Governments may step in if they see car companies being irresponsible. What I think the industry has to worry about is not the traditional car companies, who are used to being diligent and focusing on safety. We have to worry about non-traditional companies like Uber,” he said.
Before autonomy hits the roads, connectivity will be an essential element in near-term software strategies. Cellular fees, human-machine interfaces (HMI), safety and security are among the design challenges and cost factors associated with connectivity. Strategic planners need to figure out to use all the information created in cars to bring in revenue.
“Tons of data from all the sensors on a car can be very valuable. It will be a huge play for OEMs to monetize the data that’s on cars,” Wall noted.
Future role of the OS
Many of the features and functions on next-generation vehicles may be provided by add-on services. Companies large and small are trying to figure out how they can create apps and services that vehicle owners will pay for. Many believe that the cellphone industry may provide a model that can be adapted for autos.
Operating systems may become the lingua franca for vendors attempting to carve out a new market.
“The car is being extracted out to a number of high-level services, similar to how the cellphone industry emerged,” Wall said. “As cars become connected, OEMs want to monetize services. People will have to write apps for cars, so they’ll need a few OSes to standardize on, similar to what happened with iOS and Android in cell phones. Autonomous driving will be one of those apps.”
The push to add services and functions via apps will happen slowly because of the high reliability needed for autos, where software glitches can have severe consequences. Apps will follow the lead of vehicles themselves, with longer engineering cycles that help ensure that if failures occur, they won’t impact any safety-critical vehicle functions. The OS can help isolate infotainment apps from safety-critical software.
Blackberry QNX’s product plan includes Hypervisor, which supports guest operating systems, isolating them in a sandbox. The company is working with several automakers that run Android and Linux on top of Hypervisor, Wall said.
The consolidation of hardware, enabled by the emergence of powerful multicore processors, is also spurring the use of Hypervisor. In many vehicles, digital instrument clusters and infotainment systems are moving to a single computing platform instead of dedicated, discrete processors in today’s production vehicles.
“Clusters and infotainment systems are running on the same computer platform, using our Hypervisor to separate the environments. QNX is used for the cluster, Linux and Android are used for infotainment,” he explained. “Some companies are bringing Amazon’s Fire OS into the car for services. Those non-safety systems can be isolated so critical cluster software won’t be impacted by any issues.”
Deep-cyber defenses
Security is an underlying aspect of these safety-related design programs. Cybersecurity is of equal or greater importance. Keeping hackers at bay is another concern given the potential for serious repercussions from incidents.
Wall hopes to help the industry avoid problems. Blackberry focused on security from its inception, and QNX engineers worked closely with oil and gas customers experienced in dealing with threats to large infrastructure systems like the power grid.
“Security is not a bolt-on piece, you need defense in depth, like knowing that chips are authenticated so you can establish a root of trust. Even the best security can be breached, how will breaches be identified when they’re discovered,” Wall said.
Author: Terry Costlow
Source: SAE Automotive Vehicle Engineering Magazine
QNX與福特和其他OEM的合作正在幫助加速向”脫手”駕駛過(guò)渡。
