As automotive Electrical/Electronic (E/E) architectures shift from distributed to zonal architecture, communication between high-performance computing nodes (HPC) and zonal computing units (ZCU) becomes a key point of failure. Any disruption may affect multiple critical functions simultaneously, requiring robust and timely fault handling strategies in accordance with safety standards. This paper proposes a communication recovery mechanism based on AUTOSAR that takes advantage of the simultaneous presence of CAN and Ethernet links between HPC and ZCU to establish a redundant communication path. In the event of a CAN failure, preconfigured routing rules enables dynamic switchover to Ethernet, preserving communication continuity. The approach is validated on a real HPC–ZCU platform, with instrumentation used to measure fault reaction times and assess communication continuity. This work lays the foundation for broader investigations, including the integration of Adaptive AUTOSAR, generalized fault scenarios, and scalable reconfiguration strategies for future centralized E/E architectures.
Mordel et al. (Tue,) studied this question.