A semiconductor device comprising; an operation resource configured to perform a plurality of Electronic Control Unit functions (102a, 102b, 102c); a peripheral resource (200; 200a) configured to be shared by the plurality of ECU functions (102a, 102b, 102c); a control mechanism (300; 300a) configured to control a period in which one of the ECU functions (102a, 102b, 102c), which is a verification target ECU function among the plurality of ECU functions, uses the peripheral resource (200; 200a) when verification of the verification target ECU function is performed; and a debugger interface provided to connect to a debugger for receiving a budget value BDG from the debugger, the budget value being a performance allocation of the verification target ECU function, wherein the control mechanism (300; 300a) is configured to calculate, based on the budget value BDG, a use prohibition period TP consisting of multiple discrete use prohibition subperiods (TB, TC, TE) in which the verification target ECU function is prohibited from using the peripheral resource (200; 200a) within a predetermined unit time TU, and to notify a use prohibition to the peripheral resource (200; 200a) based on the calculated use prohibition period TP, TP being calculated as TU/(1+BDG), wherein the control mechanism (300; 300a) is configured, each time the verification target ECU function uses the peripheral resource (200; 200a), to dynamically calculate its subsequent use prohibition subperiod (TB, TC, TE) based on an use time (Tα, Tβ, Tγ) in which the verification target ECU function has used the peripheral resource (200; 200a) in addition to the budget value BDG, the subsequent use prohibition subperiod being calculated as the use time x (1-BDG)/BDG, and wherein when a period in which the verification target ECU function has not used the peripheral resource (200; 200a), between an end of the previous use time (Tβ) and a start of the current use time (Tγ) is longer than a use prohibition subperiod subsequent to the end of the previous use time (Tβ), the control mechanism (300; 300a) is configured to calculate a corrected use prohibition subperiod by subtracting, from the use prohibition subperiod calculated based on the current use time (Tγ) and the budget value BDG, a difference (TD-TC) between said period and said use prohibition subperiod. an operation resource configured to perform a plurality of Electronic Control Unit functions (102a, 102b, 102c); a peripheral resource (200; 200a) configured to be shared by the plurality of ECU functions (102a, 102b, 102c); a control mechanism (300; 300a) configured to control a period in which one of the ECU functions (102a, 102b, 102c), which is a verification target ECU function among the plurality of ECU functions, uses the peripheral resource (200; 200a) when verification of the verification target ECU function is performed; and a debugger interface provided to connect to a debugger for receiving a budget value BDG from the debugger, the budget value being a performance allocation of the verification target ECU function, wherein the control mechanism (300; 300a) is configured to calculate, based on the budget value BDG, a use prohibition period TP consisting of multiple discrete use prohibition subperiods (TB, TC, TE) in which the verification target ECU function is prohibited from using the peripheral resource (200; 200a) within a predetermined unit time TU, and to notify a use prohibition to the peripheral resource (200; 200a) based on the calculated use prohibition period TP, TP being calculated as TU/(1+BDG), wherein the control mechanism (300; 300a) is configured, each time the verification target ECU function uses the peripheral resource (200; 200a), to dynamically calculate its subsequent use prohibition subperiod (TB, TC, TE) based on an use time (Tα, Tβ, Tγ) in which the verification target ECU function has used the peripheral resource (200; 200a) in addition to the budget value BDG, the subsequent use prohibition subperiod being calculated as the use time x (1-BDG)/BDG, and wherein when a period in which the verification target ECU function has not used the peripheral resource (200; 200a), between an end of the previous use time (Tβ) and a start of the current use time (Tγ) is longer than a use prohibition subperiod subsequent to the end of the previous use time (Tβ), the control mechanism (300; 300a) is configured to calculate a corrected use prohibition subperiod by subtracting, from the use prohibition subperiod calculated based on the current use time (Tγ) and the budget value BDG, a difference (TD-TC) between said period and said use prohibition subperiod.