JP2008278246A - Communication system, communication equipment and communication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication system capable of preventing excessive dark current caused by an operation abnormality by minimizing an influence of the operation abnormality of one communication equipment on the other communication equipment, the communication equipment and a communication method. <P>SOLUTION: In-vehicle communication equipment 1a determines the normality/abnormality of the operation of each of vehicle-mounted communication equipment 1b, 1b, ..., by data transmitted from the other vehicle-mounted communication equipment 1b, 1b, ..., through an in-vehicle communication line 2. A communication control part 13 connected to the in-vehicle communication line 2 of each of the vehicle-mounted communication equipment 1b, 1b, ..., is provided with a switch circuit SWb whose connection is disconnected when a disconnection request signal is inputted. The vehicle-mounted communication equipment 1a outputs the disconnection request signal from an outputting part 14 when determining that the operation of the vehicle-mounted communication equipment 1b is abnormal. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a communication system in which a plurality of communication devices are connected by a communication line to realize multiplexed communication of data between the communication devices, and in particular, an operation abnormality caused by software of each communication device is detected and the system is connected. The present invention relates to a communication system, a communication apparatus, and a communication method capable of minimizing the influence and preventing an excessive dark current due to abnormal operation of the communication apparatus.

  In recent years, with the increase in functions of electronic control units (ECUs), the number and types of in-vehicle communication devices arranged in vehicles tend to increase.

  As the functions of in-vehicle communication devices increase or become complex, in-vehicle communication devices are connected by communication lines to form an in-vehicle LAN (Local Area Network). Works. Therefore, when one operation of the plurality of in-vehicle communication devices is abnormal, there is a possibility of affecting the operation of other in-vehicle communication devices such as an increased load on the communication line.

Therefore, in the technology disclosed in Patent Document 1, each in-vehicle communication device determines an abnormality of its own hardware by software processing in a communication system configured with a daisy chain in-vehicle LAN, and is abnormal. If it is determined, it is disconnected from the communication line. As a result, the operation of the entire system can be normally restored and the processing can be continued without affecting the communication between other in-vehicle communication devices.
JP-A-10-49506

  In the technique disclosed in Patent Document 1, in the case of a hardware failure such as a short circuit of a connection circuit for connecting to a communication line, each in-vehicle communication device can detect and recover from its own failure. is there. However, it is generally difficult for a communication device as well as an in-vehicle communication device arranged in a vehicle to determine an operation abnormality caused by its own software by software processing. Therefore, it is difficult to restore the system when the operation of the communication device software becomes abnormal.

  In addition, for example, when each vehicle-mounted communication device except a part is parked and the vehicle shifts to the power saving mode, one vehicle-mounted communication device that should shift to the power saving mode shifts to the power saving mode due to an abnormal software operation. If the data continues to be transmitted without being transmitted, the other in-vehicle communication device cannot receive the current because the data continues to be received, and the dark current cannot be suppressed.

  The present invention has been made in view of such circumstances, and in addition to being arranged in a vehicle, when a plurality of communication devices are connected to a communication line and transmit / receive data to / from each other, each communication device performs other communication. By determining whether the operation of the device is normal or abnormal, and disconnecting the communication device that is operating abnormally from the system, the influence of the operation error of one communication device on other communication devices is minimized, and excessive operation due to operation error An object of the present invention is to provide a communication system, a communication apparatus, and a communication method that can prevent dark current.

  Another object of the present invention is to centrally determine the normality / abnormality of the operation of another communication device by using one communication device as a master of each communication device, and disconnect the abnormal communication device from the system. Accordingly, it is an object of the present invention to provide a communication system capable of unifying determination of normality / abnormality to prevent determination errors and minimizing the influence on other communication devices due to abnormal operation of one communication device. .

  Another object of the present invention is to use a signal line different from a communication line for transmitting and receiving data to disconnect a communication apparatus with abnormal operation from the system, and to disconnect the communication apparatus with abnormal operation from the communication line. To provide a communication system capable of disconnecting a communication apparatus that operates abnormally without involving the software from the system and minimizing the influence on other communication apparatuses by switching in hardware as described above. is there.

  Another object of the present invention is to determine normality / abnormality by a configuration including a logic circuit configured to input a disconnection request signal to a corresponding communication device when a predetermined number of communication devices are determined to be abnormal. It is an object of the present invention to provide a communication system and a communication apparatus capable of improving the accuracy of the communication apparatus and minimizing the influence on the other communication apparatus due to an abnormal operation of one communication apparatus.

  Another object of the present invention is to periodically transmit data from a communication device, and determine whether the operation of each communication device is normal or abnormal based on whether or not the data transmitted from each communication device satisfies a predetermined condition. It is an object of the present invention to provide a communication system capable of determining normal / abnormal operation of software processing by determining each other.

  Another object of the present invention is to eliminate the need for a configuration that facilitates software self-recovery before disconnecting the communication device from the system and disconnects from the system after it is determined that self-recovery is not possible. An object of the present invention is to provide a communication system capable of preventing disconnection from the system and minimizing the influence on other communication devices.

  A communication system according to a first aspect of the present invention is a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices, and each communication device is connected to the communication line by an input disconnection request signal. Switch means for disconnecting the connection, determination means for determining normality / abnormality of operation of the other communication device, and disconnection that outputs a disconnection request signal to the other communication device when the determination means determines that the operation is abnormal Request output means.

  A communication system according to a second invention is a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices, wherein one communication device is normal / abnormal in the operation of another communication device. And a disconnection request output unit that outputs a disconnection request signal to the other communication device when the determination unit determines that an abnormality has occurred, and the other communication device receives the input disconnection request signal Switch means for cutting off the connection to the communication line.

  A communication system according to a third aspect of the present invention is connected to each communication device, includes a signal line different from the communication line, and the disconnection request output means outputs a disconnection request signal via the signal line. It is characterized by being.

  A communication system according to a fourth aspect of the present invention is a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices, and each communication device is connected to a signal line different from the communication line. Switching means for disconnecting the connection to the communication line in response to the input disconnection request signal; determination means for determining normality / abnormality of operation of another communication device; and normal / abnormality determined by the determination means And a means for outputting a determination result signal to the signal line, receiving the determination result signal output from each communication device, and disconnecting when the determination result signal output from a predetermined number of communication devices indicates an abnormality. A logic circuit configured to output a request signal is provided.

  A communication system according to a fifth aspect is characterized in that the logic circuit is provided in each communication device.

  A communication system according to a sixth aspect of the present invention includes a relay device that is connected to the signal line and includes the logic circuit and relays between the communication devices.

  In the communication system according to the seventh invention, each communication device transmits a predetermined data to another communication device via the communication line each time a predetermined period elapses, and the communication device transmits the data transmitted from the other communication device. Means for receiving predetermined data, and the determination means includes determination means for determining whether or not the predetermined data transmitted from one communication device satisfies a predetermined condition, from the one communication device. When it is determined that the data does not satisfy the predetermined condition, it is determined that the data is abnormal.

  A communication system according to an eighth aspect of the present invention includes an interrupt reception unit that receives an interrupt request, and an interrupt request transmission unit that transmits an interrupt request when the determination unit determines that an abnormality has occurred. An interrupt request is transmitted by the interrupt request transmission unit before the disconnection request signal is output by the disconnection request output unit to another communication apparatus that is determined to be abnormal.

  According to a ninth aspect of the present invention, each communication device includes: a reset receiving unit that receives a reset request; and a reset request transmission unit that transmits a reset request when the determination unit determines that the operation is abnormal. After determining that the operation of the other communication device is abnormal after transmitting the interrupt request by the interrupt request transmission unit to the other communication device determined to be, the reset request is transmitted by the reset request transmission unit, The disconnection request output means outputs a disconnection request signal when the operation of the other communication apparatus is further determined to be abnormal after outputting a reset request.

  A communication apparatus according to a tenth aspect of the invention is a communication apparatus comprising connection means for connecting to a communication line, and means for transmitting and receiving data via the communication line, to the communication line of the connection means by an input disconnection request signal Switch means for disconnecting the connection, determination means for determining normality / abnormality of the operation of the external device, and means for outputting a disconnection request signal to the external device when the determination means determines that the operation is abnormal It is characterized by.

  A communication apparatus according to an eleventh aspect of the invention is characterized in that means for outputting a determination result signal indicating normality / abnormality determined by the determination means, means for receiving a determination result signal output from an external device, and a predetermined number or more And a logic circuit configured to input a disconnection request signal to the switch means when the determination result signal received from the external device indicates abnormality.

  A communication method according to a twelfth aspect of the present invention is the communication method for monitoring the operation of each communication device in a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices. A switch means for disconnecting the connection to the communication line by a signal is provided in each communication device, and each communication device determines normality / abnormality of the operation of the other communication device, and when the other communication device is determined to be abnormal, A disconnection request signal is output to the communication device.

  In the present invention, each communication device determines the normality / abnormality of the operation of the other communication device, and if it is determined to be abnormal, the other communication device is included in the connection means connected to the communication line. The disconnection request signal is input to the switch to be disconnected, and the connection with the communication line is disconnected.

  In the present invention, each communication device does not determine normality / abnormality, but one communication device determines normality / abnormality of the operation of another communication device, and output processing of a disconnection request signal when it is determined Is executed.

  In the present invention, each communication device has a switch that is connected by a signal line different from the communication line that transmits data, and that disconnects the connection to the communication line by a disconnection request signal output through the signal line. Even when normal / abnormal data transmission / reception is determined, the communication line is disconnected from the communication line independent of the communication line for transmitting the data.

  In the present invention, each communication device determines the normality / abnormality of the operation of the other communication device, and a determination result signal indicating the determination result is output to a signal line different from the communication line. A switch that disconnects a communication line of another communication device that has been determined to be abnormal when a logic circuit that receives a determination result signal output from the communication device determines that a certain number or more of communication devices are abnormal. A disconnection request signal is input to. Even if the logic circuit has a configuration provided in each communication device or a configuration provided in a relay device independent of each communication device, the same operation can be obtained.

  In the present invention, the data transmitted from each communication device is received and another communication device determines whether or not a predetermined condition is satisfied, thereby determining whether the operation is abnormal or normal. Since the timing of data transmission and the content of the data to be transmitted are controlled by software, it is possible to determine whether the software processing operation is normal or abnormal depending on whether or not the received data satisfies the predetermined conditions for normality. become.

  In the present invention, an interrupt request is transmitted to the communication device before the disconnection request signal is output to the communication device determined to be abnormal in operation.

  In the present invention, when it is determined that the operation is abnormal after the interrupt request is transmitted, a reset request is further transmitted to the communication device that is determined to be abnormal. The disconnection request signal is output only when it is determined that the operation is abnormal even though the reset request is transmitted.

  According to the present invention, not only a hardware failure such as a short circuit of a connection circuit with a communication line, but also a normal / abnormal operation by software processing is determined, and a communication device with an abnormal operation is detected from the system by hardware. Can be separated. Accordingly, it is possible to minimize the influence on the other communication device due to the operation abnormality including the software of the one communication device. In addition, this prevents a situation in which an excessively dark current flows because a communication device that operates abnormally continues to operate in the normal mode even though it should normally transition to the power saving mode. Can do.

  According to the present invention, one communication device of each communication device centrally determines normal / abnormal operation of other communication devices. Thereby, it can be avoided that the determination result becomes complicated due to the determination by the plurality of communication devices, and the determination becomes erroneous. Furthermore, since the determination is centralized in one communication apparatus, the influence on other communication apparatuses due to an operation abnormality can be minimized with a simple configuration.

  According to the present invention, communication devices are connected to each other using a signal line different from the communication line constituting the in-vehicle LAN that transmits and receives data between the communication devices, and the communication line is connected to the communication device that operates abnormally via the signal line. By outputting a signal for disconnecting the connection to the communication device, it is possible to disconnect the communication device having an abnormal operation from the communication line by hardware. Therefore, it is possible to disconnect a communication device that operates abnormally from the system and minimize the influence on other communication devices.

  According to the present invention, the operation of one communication device is determined to be abnormal only when the operation is determined to be abnormal by a predetermined number of communication devices. As a result, it is possible to prevent the determination result itself from being erroneous by a part of communication devices with abnormal operation, improve the accuracy of normal / abnormal determination, and accidentally disconnect a communication device with normal operation from the system. Can be prevented.

  According to the present invention, it is possible to determine an operation abnormality caused by software processing, and it is possible to disconnect a communication device having an abnormal operation from the system and minimize the influence on other communication devices.

  In the case of the present invention, further, the interruption request or the reset request is transmitted before disconnecting the communication apparatus having the abnormal operation to promote the self spread, thereby minimizing the influence of the communication apparatus having the abnormal operation on the other communication apparatus. Can be limited. Even though the operation of the communication device is abnormal, self-recovery is possible, but the communication device is unnecessarily disconnected from the system without giving the opportunity, and the entire system operates without the communication device. It is possible to prevent the function from deteriorating.

  Hereinafter, the present invention will be specifically described with reference to the drawings showing embodiments thereof. In the first and second embodiments described below, an example in which the communication system of the present invention is applied to an in-vehicle communication system arranged in a vehicle will be described.

(Embodiment 1)
FIG. 1 is a block diagram showing the configuration of the in-vehicle communication system in the first embodiment. The in-vehicle communication system according to Embodiment 1 includes in-vehicle communication devices 1a and 1b, 1b,... That transmit and receive data such as measured values, calculated values, and control values of various physical quantities, and in-vehicle communication devices 1a and 1b, 1b,. , And signal lines 3 and 4 that are different from the in-vehicle communication lines 2 connecting the in-vehicle communication devices 1a and 1b, 1b,.

  The in-vehicle communication devices 1a and 1b, 1b,... Are connected to the in-vehicle communication line 2, and can receive data transmitted to the in-vehicle communication line 2 and transmit data to the in-vehicle communication line 2. Note that the connection form (topology) may be any form such as a bus type, a star type, or a daisy chain type. The in-car communication line 2 is a serial bus.

  The in-vehicle communication devices 1a and 1b, 1b,... Are measured values, calculated values, control values, and the like of various physical quantities such as temperature, angle, and speed detected by a connected sensor using an electronic control unit (ECU). It is possible to transmit data or control various devices such as an engine and a brake by a microcomputer. For example, one of the in-vehicle communication devices 1b, 1b,... Is connected to a sensor (not shown) that detects the steering angle. The in-vehicle communication device 1b transmits the steering angle measurement value data input from the sensor to the in-vehicle communication line 2, and the other in-vehicle communication devices 1a and 1b, 1b,... Receive the data.

  The in-vehicle communication devices 1a and 1b, 1b,... Are distinguished into a master in-vehicle communication device 1a and a slave in-vehicle communication device 1b, 1b,. In the in-vehicle communication system according to the first embodiment, the master in-vehicle communication device 1a determines normal / abnormal operation of the slave in-vehicle communication devices 1b, 1b,... A disconnection request signal from the in-vehicle communication line 2 is output to the signals 1b, 1b,.

  In the first embodiment, the master in-vehicle communication device 1a is connected to the slave in-vehicle communication devices 1b, 1b,. When the operation of the in-vehicle communication devices 1b, 1b,... Is determined to be abnormal, the in-vehicle communication device 1a inputs a signal that prompts self-recovery to each of the in-vehicle communication devices 1b, 1b,.

  The in-vehicle communication devices 1a and 1b include control units 10a and 10b such as a CPU for controlling the operation of each component shown below, power supply circuits 11a and 11b for supplying power to each component, and data necessary for control. Storage units 12a and 12b for storing and communication control units 13a and 13b for controlling communication with the in-vehicle communication line 2 are provided. The master in-vehicle communication device 1 a further includes an output unit 14 connected to the signal line 3. On the other hand, the slave in-vehicle communication devices 1b, 1b,... Further include a switch circuit SWb that disconnects the connection between the in-vehicle communication line 2 and the communication control unit 13a.

  Next, each component will be described. First, a detailed description of the control units 10a and 10b, the power supply circuits 11a and 11b, the storage units 12a and 12b, and the communication control units 13a and 13b common to the master in-vehicle communication device 1a and the slave in-vehicle communication device 1b is as follows. The control unit 10a, the power supply circuit 11a, the storage unit 12a, and the communication control unit 13a of the in-vehicle communication device 1a will be omitted.

  The control unit 10a receives power supply from a power supply device such as a vehicle battery and an alternator (not shown) via a power supply circuit 11a, and controls the operation of each component.

  The storage unit 12a is composed of a volatile memory, and temporarily stores data such as measured values, calculated values, and control values generated in the process of the control unit 10a.

  The communication control unit 13a has a network controller chip and realizes communication via the in-vehicle communication line 2. The control unit 10a transmits and receives data via the in-vehicle communication line 2 by the communication control unit 13a.

  Next, components that are different between the master in-vehicle communication device 1a and the slave in-vehicle communication devices 1b, 1b,... Will be described.

  The control unit 10b of the slave in-vehicle communication device 1b includes an NMI interrupt terminal and a reset input terminal, and an interrupt process or a reset process is executed by inputting a signal to each.

  The storage unit 12b of the slave in-vehicle communication device 1b stores determination data including identification information for identifying itself from the other in-vehicle communication devices 1b, 1b,... And timing for transmitting the determination data. Yes. The slave in-vehicle communication device 1b transmits the determination data by the communication control unit 13b at a timing when the determination data is stored in the storage unit 12b every time a certain period of time elapses.

  The output unit 14 further provided in the master in-vehicle communication device 1a is connected to the signal line 3, and signals a disconnect request signal for disconnecting the other in-vehicle communication device 1b whose operation is determined to be abnormal from the in-vehicle communication line 2. Output through line 3. The control unit 10a determines normality / abnormality of the operation of the other in-vehicle communication devices 1b, 1b,..., And if it is determined to be abnormal, the control unit 10a requests the switch circuit SWb of the in-vehicle communication device 1b determined to be abnormal A signal is input by the output unit 14.

  In addition, the output unit 14 is connected to the interrupt terminal and the reset input terminal included in the control units 10b, 10b,... Of the in-vehicle communication devices 1b, 1b,. It is possible to input an interrupt request signal or a reset request signal to the control units 10b, 10b,. When it determines with the operation | movement of the vehicle-mounted communication apparatus 1b being abnormal, the control part 10a inputs an interruption request signal before outputting a cutting request signal, and also inputs a reset request signal depending on the case.

  The switch circuit SWb further provided in the slave in-vehicle communication device 1b exists between the in-vehicle communication line 2 and the communication control unit 13b, and the disconnection request signal output from the output unit 14 of the master in-vehicle communication device 1a. The switch is turned off, and the connection with the in-vehicle communication line 2 is cut off by hardware.

  Next, a description will be given of a process in which the control unit of the in-vehicle communication device 1a as a master determines normal / abnormal operation of the in-vehicle communication devices 1b, 1b,.

  First, the control unit 10b of the in-vehicle communication device 1b transmits determination data including the stored identification information at the timing stored in the respective storage units 12b. The storage unit 12a of the in-vehicle communication device 1a stores the timing to be transmitted for each of the in-vehicle communication devices 1b, 1b,. The control unit 10a of the in-vehicle communication device 1a receives the determination data including the identification information transmitted from each of the in-vehicle communication devices 1b, 1b,... By the communication control unit 13a at the timing to be transmitted from each. Judge whether there is. Accordingly, when the control unit 10a of the in-vehicle communication device 1a determines that the timing of receiving the determination data transmitted from each of the in-vehicle communication devices 1b, 1b,. Based on the identification information included in the determination data, it is determined that one of the in-vehicle communication devices 1b, 1b,.

  For example, the control unit 10b of the in-vehicle communication device 1b continues to transmit the determination data even though it is set not to transmit the determination data when transitioning to the power saving mode. When the control unit 10a of the communication device 1a continues to receive the determination data, it is determined to be abnormal.

  FIG. 2 is a flowchart showing a processing procedure for determining normal / abnormal operation of the other in-vehicle communication devices 1b, 1b,... By the control unit 10a of the in-vehicle communication device 1a in the first embodiment.

  The control unit 10a of the in-vehicle communication device 1a determines whether or not the determination data is received by the communication control unit 13a (step S11). When determining that the determination data has not been received (S11: NO), the control unit 10a returns the process to step S11 and waits until determining that the determination data has been received.

  When determining that the determination data has been received (S11: YES), the control unit 10a transmits from any of the in-vehicle communication devices 1b, 1b,... Based on the identification information included in the received determination data. It is specified whether it has been done (step S12).

  The control part 10a reads the timing which should be transmitted from the vehicle-mounted communication apparatus 1b specified by step S12 from the memory | storage part 12a (step S13), and the timing which received the data for determination by step S11 is the timing read by step S13. It is determined whether or not they match (step S14). When it is determined that the timing does not match (S14: NO), the controller 10a determines that the operation of the in-vehicle communication device 1b specified in step S12 is abnormal (step S15). When the control unit 10a determines that the timing is matched (S14: YES), the control unit 10a determines that the operation of the in-vehicle communication device 1b specified in step S12 is normal (step S16), and determines normality / abnormality. To finish the processing.

  In the process for determining normality / abnormality of the operation shown in the flowchart of FIG. 2, when determination data transmitted from the slave in-vehicle communication devices 1b, 1b,. Judgment was made based on whether or not the timing to be transmitted from the devices 1b, 1b,. However, when the determination data should be transmitted from one of the in-vehicle communication devices 1b, 1b,..., But the determination data is not received from the in-vehicle communication device 1b. Alternatively, it may be determined that the operation is abnormal.

  Next, processing by the control unit 10a of the in-vehicle communication device 1a when it is determined to be abnormal based on the determination processing as described above will be described. FIG. 3 is a flowchart illustrating a processing procedure when the control unit 10a of the in-vehicle communication device 1a according to the first embodiment determines that the operation of the other in-vehicle communication device 1b is abnormal.

  The control unit 10a of the in-vehicle communication device 1a determines whether or not an abnormality in any of the in-vehicle communication devices 1b, 1b,... Has been determined (step S21). Whether or not an operation abnormality has been determined is determined by executing the processing procedure shown in the flowchart of FIG. 2 each time the determination data transmitted from each of the in-vehicle communication devices 1b, 1b,. be able to. If it is determined in step S21 that an abnormal operation has been determined, the in-vehicle communication device 1b having an abnormal operation can be identified by the processing procedure shown in the flowchart of FIG.

  When it is determined that the operation abnormality is not determined (S21: NO), the control unit 10a returns to step S21 and waits until it is determined that the operation abnormality is determined, and each time the determination data is received. Then, the processing procedure shown in the flowchart of FIG. 2 is executed.

  When it is determined that the operation abnormality is determined (S21: YES), the control unit 10a inputs an interrupt request signal via the signal line 4 to the control unit 10b of the in-vehicle communication device 1b in which the operation abnormality is determined. (Step S22).

  The control unit 10a determines whether or not an abnormality in the operation of the in-vehicle communication device 1b that is the same as the in-vehicle communication device 1b that has input the interrupt request signal in step S22 has been determined (step S23). Whether or not the control unit 10a determines in step S23 that the operation is abnormal before a predetermined period elapses after the interrupt request signal is input to the control unit 10b of the in-vehicle communication device 1b that has determined the operation abnormality. Thus, it is determined whether or not the operation abnormality of the same in-vehicle communication device 1b has been determined. The predetermined period is a time set longer than the time required for interrupt processing when the control unit 10b of the in-vehicle communication device 1b detects an interrupt input.

  When the control unit 10a determines that the abnormality of the operation of the same in-vehicle communication device 1b is not determined after inputting the interrupt request signal (S23: NO), the operation of the in-vehicle communication device 1b is self-recovered by the interrupt process. Therefore, the process ends.

  When the control unit 10a determines that the abnormality of the operation of the same in-vehicle communication device 1b has been determined (S23: YES), the self-recovery was not performed despite the input of the interrupt request signal to the control unit 10b. A reset request signal is further input to the control unit 10b of the in-vehicle communication device 1b (step S24).

  The control unit 10a determines whether or not an abnormality in the operation of the in-vehicle communication device 1b that is the same as the in-vehicle communication device 1b that has input the reset request signal in step S24 is determined (step S25). In step S25, as in step S23, the control unit 10a operates abnormally after a predetermined period has elapsed since the reset request signal was input to the control unit 10b of the in-vehicle communication device 1b that determined the abnormal operation. It is determined whether or not an abnormality in the operation of the same in-vehicle communication device 1b is determined based on whether or not the determination is made.

  When the control unit 10a determines that the abnormality of the operation of the same in-vehicle communication device 1b is not determined after inputting the reset request signal (S25: NO), the operation of the in-vehicle communication device 1b is self-recovered by the reset process. Therefore, the process ends.

  When the control unit 10a determines that the abnormality of the operation of the same in-vehicle communication device 1b has been determined (S25: YES), the self-recovery was not performed despite the input of the reset request signal to the control unit 10b. A disconnection request signal is finally output to the in-vehicle communication device 1b (step S26), and the processing is ended so that the in-vehicle communication device 1b is disconnected from the in-vehicle communication line 2.

  As shown in the processing procedure of the flowchart of FIG. 3, the control unit 10a of the master in-vehicle communication device 1a uses each in-vehicle communication device based on the timing of determination data transmitted from each in-vehicle communication device 1b, 1b,. It is determined whether the operation of 1b, 1b,. When the controller 10a of the master in-vehicle communication device 1a determines that there is an abnormality, the controller 10a inputs an interrupt request signal and a reset request signal for prompting self-recovery. A disconnection request signal for turning off the switch connected to the communication line 2 is output.

  As a result, the software processing operation becomes abnormal, and the in-vehicle communication device 1b that cannot transmit the predetermined determination data at the set timing is self-recovered or physically disconnected from the in-vehicle communication line 2. be able to. Thereby, the influence on the other in-vehicle communication devices 1b, 1b,... Or the in-vehicle communication line 2 can be minimized, and the dark current that becomes excessive due to an abnormality in the operation of the one in-vehicle communication device 1b is suppressed. Can do.

  In addition, by using one in-vehicle communication device 1a as a master and determining whether the operation of other in-vehicle communication devices 1b, 1b,... The determination data set from each of the in-vehicle communication devices 1b, 1b,... Is periodically transmitted, and the master in-vehicle communication device 1a is added to facilitate introduction into an existing system.

(Embodiment 2)
FIG. 4 is a block diagram showing a configuration of the in-vehicle communication system in the second embodiment. The in-vehicle communication system according to Embodiment 2 includes in-vehicle communication devices 1c, 1d, 1e, and 1f, in-vehicle communication lines 2 that connect the in-vehicle communication devices 1c, 1d, 1e, and 1f, and the in-vehicle communication devices 1c, 1d, and 1f. A signal line 3 different from the in-vehicle communication line connecting 1e and 1f is provided.

  The in-vehicle communication devices 1c, 1d, 1e, and 1f are connected to the in-vehicle communication line 2 and can receive data transmitted to the in-vehicle communication line 2 and transmit data to the in-vehicle communication line 2. Note that the connection form (topology) may be any form such as a bus type, a star type, or a daisy chain type. The in-car communication line 2 is a serial bus.

  The in-vehicle communication devices 1c, 1d, 1e, and 1f are connected to each other by a signal line 3. The alphabet attached | subjected to the signal wire | line 3 in FIG. 4 has shown the output source of the signal. The in-vehicle communication device 1c outputs a signal to the other in-vehicle communication devices 1d, 1e, and 1f through the signal line 3, and receives the signal from the other in-vehicle communication devices 1d, 1e, and 1f through the signal line 3.

  The basic configuration of in-vehicle communication devices 1c, 1d, 1e, and 1f is the same as in-vehicle communication devices 1a and 1b in the first embodiment. However, the in-vehicle communication devices 1c, 1d, 1e, and 1f in the second embodiment have the same configuration with no difference between master and slave. Therefore, in the following description, the internal configuration thereof will be described by paying attention to the in-vehicle communication device 1f. Since the other in-vehicle communication devices 1c, 1d, and 1e have the same configuration as the in-vehicle communication device 1f, detailed description thereof is omitted.

  Similarly to the in-vehicle communication devices 1a and 1b, 1b,... In the first embodiment, the in-vehicle communication device 1f in the second embodiment includes a control unit 10f, a power supply circuit 11f, a storage unit 12f, a communication control unit 13f, and a switch circuit SWf. I have. Functions of the power supply circuit 11f, the storage unit 12f, and the communication control unit 13f are the same as the functions of the units in the in-vehicle communication devices 1a and 1b, 1b,. The control unit 10c (10d, 10e, 10f) of each in-vehicle communication device 1c (1d, 1e, 1f) receives power from the power supply circuit 11c (11d, 11e, 11f) and stores the storage unit 12c (12d, 12e, The determination data stored in 12f) is periodically transmitted at a set timing. In addition, the control units 10c, 10d, 10e, and 10f of each in-vehicle communication device 1c (1d, 1e, and 1f) transmit the determination data transmitted from the other in-vehicle communication device 1c (1d, 1e, and 1f) to the communication control unit. 13c (13d, 13e, 13f), and normality / abnormality is determined based on the reception timing of the determination data.

  The in-vehicle communication device 1f further includes an output unit 15f. The control unit 10f of the in-vehicle communication device 1f determines normal / abnormal operation of the other in-vehicle communication devices 1c, 1d, and 1e, and outputs a determination result signal indicating the determination result through the output unit 15f.

  In the determination result signal output from the output unit 15f, “0” indicates normality and “1” indicates abnormality. When the control unit 10f of the in-vehicle communication device 1f determines that the operation of the in-vehicle communication device 1c among the other in-vehicle communication devices 1c, 1d, and 1e is abnormal, for example, the control unit 10f outputs a determination result signal indicating “1”. It outputs to the vehicle-mounted communication apparatus 1c by 15f.

  The in-vehicle communication device 1f includes a logic circuit LCf in the switch circuit SWf. The logic circuit LCf receives the determination result signal output from the other in-vehicle communication devices 1c, 1d, and 1e, and when the operation is determined to be abnormal from the majority of the in-vehicle communication devices 1c, 1d, and 1e. The disconnection request signal is input to the switch.

  FIG. 5 is a circuit diagram showing a logic circuit LCf provided in the switch circuit SWf of the in-vehicle communication device 1f according to the second embodiment. FIG. 5A shows the logic circuit LCf, and FIG. 5B shows the relationship between input and output.

  As shown in FIG. 5A, the logic circuit LCf is a circuit combining a NOT circuit, an AND circuit, and an OR circuit. Receives three signals c, d, e input from other in-vehicle communication devices 1c, 1d, 1e, outputs the three signals input to an AND circuit, and any one of the three signals is a NOT circuit. Four signals with three outputs that are inverted and input to the AND circuit are input to the OR circuit. The logic circuit LCf is configured such that the output result R from the OR circuit becomes a disconnection request signal. The disconnection request signal indicates “disconnect” when “1” is indicated. When a signal indicating “1” is input to the switch of the switch circuit SWf, the connection with the in-vehicle communication line 2 is disconnected. It is configured as follows.

  FIG. 5B is a table showing the relationship between the input values of the three signals c, d, e input from the other in-vehicle communication devices 1c, 1d, 1e and the value R output by the logic circuit LCf. It represents. As shown in FIG. 5 (b), when a determination result signal indicating that it is determined from the majority that each of the in-vehicle communication devices 1c, 1d, and 1e is abnormal is input, the value R that is output is This is an anomaly.

  FIG. 6 is a flowchart showing a processing procedure for determining normality / abnormality of operations of the other in-vehicle communication devices 1c, 1d, and 1e by the control unit 10f of the in-vehicle communication device 1f in the second embodiment and outputting a determination result signal. is there. Since the processing procedures performed by the control units 10c, 10d, and 10e of the other in-vehicle communication devices 1c, 1d, and 1e are the same, detailed description thereof is omitted.

  The control unit 10f of the in-vehicle communication device 1f determines normal / abnormal operation of the other in-vehicle communication devices 1c, 1d, and 1e (step S31). The processing of the control unit 10f in step S31 is the same as the processing for determining normality / abnormality of the operation shown in FIG. 2 in the first embodiment. The control unit 10f of the in-vehicle communication device 1f determines normality / abnormality each time data is received by the communication control unit 13f from the other in-vehicle communication devices 1c, 1d, and 1e.

  The control unit 10f outputs a determination result signal indicating the result determined in step S31 through the output unit 15f (step S32), and ends the process.

  The control units 10c, 10d, 10e, and 10f of the in-vehicle communication devices 1c, 1d, 1e, and 1f sequentially repeat the processing procedure shown in the flowchart of FIG. 6 and output a determination result signal.

  By such processing, the determination data transmitted by the in-vehicle communication device 1f is received by the other in-vehicle communication devices 1c, 1d, and 1e, and normality / abnormality of the operation of the in-vehicle communication device 1f is determined based on the reception timing. As a result, when it is determined that the majority is abnormal, the switch of the switch circuit SWf of the in-vehicle communication device 1f is turned off and physically disconnected from the in-vehicle communication line 2.

  The result of judgment by more than a predetermined number of in-vehicle communication devices prevents incorrect judgment results due to misjudgment of the malfunctioning communication device itself, improving the accuracy of normal / abnormal judgment, and unnecessary in-vehicle communication It is possible to prevent the in-vehicle communication device from being disconnected from the line 2.

  In the second embodiment, the logic circuits LCc,..., LCf are configured to input a disconnection request signal to the switch when the operation is determined to be abnormal from the majority. However, the present invention is not limited to this, and it may be configured to input a disconnection request signal to the switch when it is determined that any one is abnormal, and all other in-vehicle communication devices are abnormal. When it is determined, a disconnection request signal may be input to the switch. In addition, when the in-vehicle communication system further includes a large number of in-vehicle communication devices, not all in-vehicle communication devices are configured to determine normal / abnormal operation of other in-vehicle communication devices, and some in-vehicle communication devices are normal / abnormal. It is good also as a structure which determines. Furthermore, instead of inputting a disconnection request signal to the switch when a majority of in-vehicle communication devices are determined to be abnormal, a disconnect request signal is input to the switch when some specific in-vehicle communication devices are determined to be abnormal Such a configuration may be used.

  In the second embodiment, each of the in-vehicle communication devices 1c, 1d, 1e, and 1f includes the logic circuits LCc,. However, the present invention is not limited to this, and the in-vehicle communication system may include a relay device that receives the determination result signal output from each in-vehicle communication device and outputs a disconnection request signal to each. In this case, each in-vehicle communication device does not include a logic circuit. FIG. 7 is a block diagram showing a configuration when the in-vehicle communication system according to the present invention includes a relay device. The in-vehicle communication system shown in FIG. 7 includes a relay device 5 in addition to the in-vehicle communication devices 1g, 1h, 1i, and 1j, the in-vehicle communication line 2, and the signal line 3.

  The in-vehicle communication device 1g includes a control unit 10g, a power supply circuit 11g, a storage unit 12g, a communication control unit 13g, a switch circuit SWg, and an output unit 15g. Other in-vehicle communication devices 1h, 1i, and 1j have the same configuration as the in-vehicle communication device 1g, and thus the description thereof is omitted.

  In this case, the output unit 15g has the same function as the output unit 15f included in the in-vehicle communication device 1f in the second embodiment, and the control unit 10g outputs a determination result signal via the output unit 15g.

  Further, in this case, the switch circuit SWg has the same configuration as the switch circuit SWb included in the slave in-vehicle communication devices 1b, 1b,... In the first embodiment, and the switch is turned off by the input disconnection request signal. It is configured such that the connection with the in-vehicle communication line 2 is disconnected in terms of wear.

  The relay device 5 includes a logic circuit LC. The logic circuit LC receives a determination result signal of the operation of the in-vehicle communication device 1g output from the in-vehicle communication devices 1h, 1i, 1j, and outputs the result as a disconnection request signal, and the in-vehicle communication devices 1g, 1i, 1j. The logic circuit that receives the determination result signal of the operation of the in-vehicle communication device 1h output from the terminal and outputs the result as a disconnection request signal, and the determination of the operation of the in-vehicle communication device 1i output from the in-vehicle communication devices 1g, 1h, 1j A logic circuit that receives the result signal and outputs the result as a disconnection request signal, and an operation determination result signal of the in-vehicle communication device 1j output from the in-vehicle communication devices 1g, 1h, and 1i, and receives the result as a disconnection request signal And output logic circuits.

  The logic circuits have the same configuration as the LCc, LCd, LCe, and LCf provided in the switch circuits SWc, SWd, SWe, and SWf in the in-vehicle communication devices 1c, 1d, 1e, and 1f, respectively, in the second embodiment.

  The determination result signals output from the in-vehicle communication devices 1g, 1h, 1i, and 1j are connected by the signal line 3 so as to be input to the logic circuit LC of the relay device 5. Further, the disconnection request signal output from the logic circuit LC of the relay device 5 is connected by the signal line 3 so as to be input to the switch circuits SWc, SWd, SWe, SWf included in each of the in-vehicle communication devices 1g, 1h, 1i, 1j. To do.

  With the configuration including the relay device 5 as described above, the same effects as those of the second embodiment can be obtained without providing the in-vehicle communication devices 1g, 1h, 1i, and 1j with logic circuits. In this case, the disposed signal line 3 can be saved.

  Furthermore, when the in-vehicle communication system includes a relay device, the determination result is collected in the relay device, so the relay device may be configured to have the function of the master in-vehicle communication system 1a in the first embodiment. In this case, the relay device 5 includes an output unit 14 and transmits an interrupt request signal or a reset request signal to each control unit 10g, 10h, 10i, 10j of each in-vehicle communication device 1g, 1h, 1i, 1j via the signal line 4. Is configured to be able to input. The relay device 5 includes a control unit, so that the determination result by the logic circuit LC is input to the relay device 5 before being output as it is. Then, when the control unit of the relay device 5 identifies normality / abnormality of the determination result and determines that it is abnormal, an interrupt request is sent to the control unit of the in-vehicle communication device determined to be abnormal before outputting the disconnection request signal. When a signal is input and then it is determined that there is still an abnormality, a reset request signal is input to the control unit of the in-vehicle communication device that is determined to be abnormal. Thereafter, the controller of the relay device 5 may output a disconnection request signal only when it is determined that the operation of the in-vehicle communication device is abnormal.

  Note that the configurations of the logic circuits LCc, LCd, LCe, and LCf in the second embodiment are outputs obtained by inputting the determination result signals output from the three devices to the AND circuit, as shown in the circuit diagram of FIG. In addition, an output obtained by inputting one signal to the NOT circuit, inverting it, and inputting it to the AND circuit is used as the disconnection request signal. This is because when a majority of the devices are determined to be abnormal, the switch is turned off by the disconnection request signal. However, the logic circuit of the present invention is not limited to the configuration shown in the circuit diagram of FIG. For example, it is configured to receive all determination result signals output from other in-vehicle communication devices, and counts every time a determination result signal indicating an operation abnormality from one in-vehicle communication device is received, and the count overflows. It may be configured such that when it occurs, it is determined that there is an abnormality, and a disconnection request signal for turning off the switch is output.

  In the first and second embodiments, each in-vehicle communication device periodically transmits determination data, and another in-vehicle communication device receives the determination data, and the transmission source in-vehicle communication device based on the reception timing. In this configuration, the normal / abnormal of the operation is determined. However, the present invention is not limited to this configuration as long as an abnormal operation by software of another in-vehicle communication device can be detected.

1 is a block diagram showing a configuration of an in-vehicle communication system in a first embodiment. 5 is a flowchart illustrating a processing procedure for determining normal / abnormal operation of another in-vehicle communication device by a control unit of the in-vehicle communication device in the first embodiment. It is a flowchart which shows the process sequence when the control part of the vehicle-mounted communication apparatus in Embodiment 1 determines with the operation | movement of the other vehicle-mounted communication apparatus 1b being abnormal. 6 is a block diagram showing a configuration of an in-vehicle communication system in a second embodiment. FIG. 6 is a circuit diagram illustrating a logic circuit provided in a switch circuit of an in-vehicle communication device according to Embodiment 2. FIG. 10 is a flowchart illustrating a processing procedure for determining normal / abnormal operation of another in-vehicle communication device by a control unit of the in-vehicle communication device in Embodiment 2 and outputting a determination result signal. It is a block diagram which shows the structure in case a relay apparatus is included in the vehicle-mounted communication system which concerns on this invention.

Explanation of symbols

1a, 1b, 1c, 1d, 1e, 1f, 1g, 1h, 1i, 1j In-vehicle communication devices 10a, 10b, ..., 1f, 1g, ... Control units 13a, 13b, ..., 13f, 13g, 13h, 13i, 13j Communication control unit 14 Output unit 15f, 15g, 15h, 15i, 15j Output unit SWb,..., SWf, SWg, SWh, SWi, SWj Switch circuit LCf, LC Logic circuit 2 In-car communication line 3, 4 Signal line

Claims (12)

In a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices,
Each communication device
Switch means for disconnecting the connection to the communication line according to the input disconnection request signal;
Determination means for determining normality / abnormality of operation of another communication device;
A disconnection request output means for outputting a disconnection request signal to the other communication device when the determination means determines that there is an abnormality. In a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices,
One communication device is
Determination means for determining normality / abnormality of operation of another communication device;
A disconnection request output means for outputting a disconnection request signal to the other communication device when the determination means determines that there is an abnormality,
Other communication devices
A communication system comprising switch means for disconnecting the connection to the communication line in response to an input disconnection request signal. Connected to each communication device, provided with a signal line different from the communication line,
The communication system according to claim 1 or 2, wherein the disconnection request output means outputs a disconnection request signal via the signal line. In a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices,
Each communication device
Means for connecting to a signal line different from the communication line;
Switch means for disconnecting the connection to the communication line according to the input disconnection request signal;
Determination means for determining normality / abnormality of operation of another communication device;
A means for outputting a determination result signal indicating normality / abnormality determined by the determination means to the signal line, and
A logic circuit configured to receive a determination result signal output from each communication device and to output a disconnection request signal when the determination result signals output from a predetermined number or more of the communication devices indicate an abnormality. A featured communication system. The communication system according to claim 4, wherein the logic circuit is provided in each communication device. The communication system according to claim 4, further comprising a relay device that is connected to the signal line and relays between the communication devices including the logic circuit. Each communication device
Means for transmitting predetermined data to the other communication device via the communication line each time the predetermined period elapses;
Means for receiving the predetermined data transmitted from another communication device,
The determination means includes
Determining means for determining whether or not the predetermined data transmitted from one communication device satisfies a predetermined condition;
The communication system according to any one of claims 1 to 6, wherein when it is determined that data from the one communication device does not satisfy a predetermined condition, it is determined to be abnormal. Each communication device
Interrupt acceptance means for accepting an interrupt request;
An interrupt request transmitting means for transmitting an interrupt request when the determining means determines that there is an abnormality,
The interrupt request transmission unit transmits an interrupt request before the disconnection request output unit outputs a disconnection request signal to another communication apparatus whose operation is determined to be abnormal. The communication system according to any one of 1 to 7. Each communication device
Reset accepting means for accepting a reset request;
A reset request transmitting means for transmitting a reset request when the determining means determines that there is an abnormality,
After transmitting an interrupt request by the interrupt request transmission unit to another communication device that is determined to be abnormal, if the operation of the other communication device is determined to be abnormal, a reset request is issued by the reset request transmission unit. Send
9. The disconnection request output means is configured to output a disconnection request signal when the operation of the other communication device is further determined to be abnormal after outputting a reset request. Communications system. In a communication apparatus comprising connection means for connecting to a communication line, and means for transmitting and receiving data via the communication line,
Switch means for disconnecting the connection means from the communication line in response to an input disconnection request signal;
Determining means for determining normal / abnormal operation of the external device;
And a means for outputting a disconnection request signal to the external device when the determination means determines that there is an abnormality. Means for outputting a determination result signal indicating normality / abnormality determined by the determination means;
Means for receiving determination result signals output from external devices, respectively;
9. A logic circuit configured to input a disconnection request signal to the switch means when determination result signals received from a predetermined number or more of external devices indicate an abnormality. Communication device. In a communication method for monitoring the operation of each communication device in a communication system including a plurality of communication devices that transmit and receive data and a communication line that connects the communication devices,
A switch means for disconnecting the connection to the communication line according to the input disconnection request signal is provided for each communication device, and used.
Each communication device determines normal / abnormal operation of other communication devices,
A communication method comprising: outputting a disconnection request signal to the other communication device when it is determined as abnormal.

Images