Transcription
Tizen IVIArchitectureNew featuresDominig ar Foll, Intel Open Sourcedominig.arfoll@fridu.net
Agenda2 What is Tizen IVI How to join the project Our road map Architecture New FeaturesTizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Tizen IVI Support Intel and ARM Secured Linux embedded distro Fast boot Advanced connectivity Wayland multi-tool kit HTML5 readyIVI middlewareMedia–Car Can-Bus–Phone and messagesCompliant with IVI standards– ––3GeniviAGLTizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Tizen 3 an Open ProjectTSG Arch Forum API ForumRelease EngineerArchitectsQA ectsArchitectsMaintainersMaintain- IntegratorsGit lopers4Tizen 3 IVIALS June 2014packagepackagepackagepackageDominig ar FollIntel Open Source Technology Centre
Code contribution FlowMaintainer can overrideDeveloperWriteWrite codecodeReviewercode acceptance at any stepSubmitSubmit totoGerritGerritMaintainerMaintainerOKNot OKOfferOffer eRelease totoIntegrateIntegratebuildbuild rOKCreateCreate imageimageSmokeSmoke TestTestReleaseRelease imageimageNot OK5Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
How to Create a New Tizen ProfileToolsTools6Tizen 3 IVIALS June 2014BaseBase IHAL // platformplatformHALDevelDevelQA && Profiles.SharedShared (optional)(optional)Dominig ar FollIntel Open Source Technology Centre
Keeping Synced with Tizen:CommonacbSubmissionson tizen profile(specific pkgs)edyz2137Tizen 3 IVIALS June 2014Submissionson tizen common(new features)213synSubmissions on tizen:accepted on tizen profile only ifaccepted on tizen common(bug fixes)xcProfile4Commondaily4weeklyDominig ar FollIntel Open Source Technology Centre
Tizen IVI rAprMaycTizen 3.0 AlphaTizen 3.0 AlphaBetaBetaIVI 3.0-M3IVI 3.0-M33.0-M23.0-M2IVI 3.0 M3 Speech) 8 Smack 3 domain modelApps2App CommsDLNAMedia Player w/BT and DLNADialer App w/BT HFPWebGL, Video and CSS HW accelHW accel of Video streamsGENIVI Compliance w/ 6.0AGL incremental requirements as defined byAGL and OEM/Tier1 customers AugSeIn PlanningpIVI NextFunctional FeaturesWeb APIs (Vehicle Info, DLNA DMS,JulyIVI Next IVI Next Functional Features JuneFunctional FeaturesA2DP, HFP 1.6, MAPIn PlanningFinalFinalIVI 3.0 FinalIVI 3.0 FinalIVI 3.0 M2BT - Serial Port Profile 1.1, AVRCP,POR2015Crosswalk replaces webkit-eflSmack 3 domain model w/ CrosswalkSequential Multi-UserPIM w/ Cloud syncICO sample UI w/ GENIVI Layer ManagerModello sample HMIFast boot to cameraWiFi Direct supportVendor defined Smack domainsYocto Build SupportSimultaneous Multi-UserIntegrated BrowserAdditional AMB, Web APIsAdditional AGL Component IntegrationMurphy w/ GENIVI Audio ManagerMiracastQt5SDK EnhancementsAdditional Tools* IVI 3.o Final will be focused on bug fixesand stabilization of all features in previousTizen IVI 3.0 releasesGenivi Layer ManagerGenivi Audio ManagerDiagnosticTizen Log3 IVIand TraceALS June 2014Tizen IVI SDKDominig ar FollIntel Open Source Technology Centre
ArchitectureApplicationsWeb ApplicationsPublicWeb rkerWorkerDeviceDevice APIsAPIs TouchTouchWebGLWebGLBTBTLBSLBSMsgMsg CallCallNFCNFCWeb ics && yTelephonyPIMPIMIVIKernelLinux Kernel & device drivers9Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Tizen IVI Multi-user system10Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Tizen Multi-user requirements Guest log in by default–Start Generic Application(e.g. rear cam, radio, .) User logging in shall not stop running applications–––– 11ID user is added on top of Guest.Multiple user can share the same Display(e.g. passenger and drivers)Users can exchange seats(and so Display)Security must protect the user data and the system data.Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Dissociate Seat and User General Linux–– IVI–––12Before Login No useSeat DisplayBefore Login GuestLogin add user to a seatUser can change seatTizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
What needs to change 13Application Frame workLogin ManagerStartup procedureSecurity modelTizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Application Framework Launching Application Explicit or implicit information (Combination of Action, URI, and MIME) can be usedto determine an app to launch and the control backend. Allowed to launch different type of app (i.e. Web to Native and Native to Web) Application life cycle management Install – delete – update List all, recently launch– Search – swap active Event Handler Screen orientation size and number, dim, off Critical resources RAM, disk, batterie, . Inter App communication Service Req Message exchange Copy/Paste Drag/Drop14Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
AppFW with Tizen Login Manager15Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
User & App Management–Base on standard Linux user account–Each user owns its Environment / data / applications–Priviledge users(s) concept–Each App has its own Smack label and priviledge manifestUser 1 AppsGlobal AppsUser 2 AppsDefault Apps16Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Application Framework Application are launched in the User Environmentprovided by systemd session Each User can access to :––––A set of databases corresponding to System/common ApplicationAnother corresponding to it own databases.Application Databases look like the Tizen 2.0 onesCore API are extended17Tizen 3.0 multi user AppFWJune 2014Dominig ar FollIntel Open Source Technology Centre
Tizen 3 : Application Framework18Tizen 3.0 multi user AppFWJune 2014Dominig ar FollIntel Open Source Technology Centre
Security
¿ IT Security in a Car ?20Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Tizen an integrated security Application isolation with controlled sharing––– Per Application control over privileged resources––– Extensive control of system resourcesFine grain control of the ressourceHTML5 and Native ApplicationsMultiple users on a device––21No access to system privilegesNo undeclared data sharingNo direct launch in sessionApplication available for all or individual userNo data contamination of uncontrolled sharing.Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Three Domains Model - A new simplified model 22"User": user domain for user processes and data,"System" : system domain for system processes andtheir private data" " : floor domain for static public data.Peers domains are used forSystem process change ID whenever possibleEach User has a unique UIDEach Application has a unique Smack label.Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Per Application Manifest Manifest are fined grainede.g. ooth.spp (Serial Port Profile)bluetooth.opp (Object PushProfile)bluetooth.health (Health DeviceProfile)bluetooth.gap (Generic AccessProfile)bluetooth.adminTizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Manifest enforcement SAPIApps(evolution from Tizen 2.x CAPI)Xwalk ProcessW3CAPIsFrameworksXwalk ProcessRPRPRPEPEPEPW3CAPIsCore AppTizen Ext. CrosswalkService APIRPRPRPEPEPEPTizen Ext. CrosswalkSAPISAPINative AppNative FrameworkSAPIAMD Session AgentSAPIAMD Session AgentUser sessionUser sessionSystemService APIServices Proxy DaemonAPI call permission : ALWAYS / NEVER / ASK ONCE / ASK ALWAYS ( answers cache)ModuleModuleModuleModuleModuleModuleInternal APIs (based on CAPIs)Core servicesApp FW,,,BT ServiceConnman Service.Media service.,,,Security24Tizen 3 IVIALS June 2014CynaraDominig ar FollIntel Open Source Technology Centre
Web Run Time
CrossWalk sionExtensionExtensionProcessProcess (EP)(EP)ProcessProcess (EP)(EP)RenderRenderRenderRenderProcessProcess (RP)(RP)ProcessProcess (RP)(RP)IIIIPPPPCCCC Shared process modelBP is shared with all WebAppsWebApp contains EP and RPRP is sandboxed and can’t do OS callsRP delegates OS calls to BP via IPCEP is not sandboxed and can do OS callsBrowser Process (BP)Tizen OS26Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
CrossWalk Security 27Tizen 3 IVIALS June 2014Policy is created during WebAppinstallationAPI permission is checked againstthe policy during runtimePolicy contains applicationcontext , privilege tuplePermission check has simpleanswer: ALLOW, DENY or ASKUSERDominig ar FollIntel Open Source Technology Centre
Modello HTML5 UI HTML5 UI––––28Proof of conceptReferenceOpen Source OptionFully functionalTizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
Nice add-on
Tizen Goodies Graphic––––– Weston 1.5 with XDG andLayersEFL 1.9QT 5.3OzoneGstreamer 1.2Automotive Middleware Build Systems––– OBSYoctoEclipse SDKArchitecture–––IA 64 bitsIA 32 bitsARM 32 bitsAutomotive Message Broker– Murphy resourcemanagementDLNA, WiFi P2P, DNLA, NFC, .– 30Tizen 3 IVIALS June 2014Dominig ar FollIntel Open Source Technology Centre
¿31Tizen 3 IVIALS June 2014?Dominig ar FollIntel Open Source Technology Centre
Jun 25, 2014 · Dialer App w/BT HFP WebGL, Video and CSS HW accel HW accel of Video streams Genivi Layer Manager Genivi Audio Manager Diagnostic Log and Trace Tizen IVI SDK IVI 3.0 M2 Functional Features GENIVI Compliance w/ 6.0 AGL incremental requirements as defined by AGL and OEM/Tier1 customers Crosswalk replaces .
