Apparatus and method for checking a process and electronic control device

Abstract

Embodiments of the present invention relate to an apparatus and method for checking a process and an electronic control apparatus. An apparatus for checking a process can include a conversion controller configured to control conversion into at least one process monitoring message by inputting a specific value into a virtual area included in at least one message corresponding to a preset operation when the preset operation is performed in serial communication, and a check controller configured to control a check process based on the process monitoring message.

Description

Technical Field

[0001] Embodiments of the present invention relate to apparatus and methods for inspecting processes, as well as electronic control devices. Background Technology

[0002] In autonomous vehicles, with the increasing number of user-friendly features, the importance of ASIL-related activities for safe driving has greatly increased. In particular, sensors used in the vehicle play a crucial role in autonomous vehicles.

[0003] In recent autonomous vehicles, the design of the electronic control units that control the aforementioned functions and sensors has become extremely important. Therefore, it is necessary to study the progress of electronic control units in recent autonomous vehicles. Summary of the Invention

[0004] Against this backdrop, embodiments of the present invention provide a process checking apparatus that can easily and effectively check or test processes.

[0005] Furthermore, embodiments of the present invention provide a process checking method that can easily and effectively check or test processes.

[0006] Furthermore, embodiments of the present invention provide an electronic control device that can easily and effectively inspect or test the process.

[0007] In one aspect of the invention, an apparatus for checking a process is provided, the apparatus comprising a conversion controller configured to: when a preset operation is performed in serial communication, control the conversion of a specific value into a virtual area included in at least one message corresponding to the preset operation by converting it into at least one process monitoring message; and an inspection controller configured to control the checking of a process based on the process monitoring message.

[0008] In another aspect of the invention, a method for checking a process is provided, the method comprising: when a preset operation is performed in serial communication, converting a specific value into a virtual area included in at least one message corresponding to the preset operation to form at least one process monitoring message; and checking the process based on the process monitoring message.

[0009] In another aspect of the invention, an electronic control device is provided, comprising: a peripheral device; a controller connected to the peripheral device via serial communication; and a process checker for checking a process of at least one of the peripheral device and the controller, wherein the process checker is configured to: when a preset operation is performed in at least one of the peripheral device and the controller, convert a specific value into a virtual area included in at least one message corresponding to the preset operation to form at least one process monitoring message, and check the process based on the process monitoring message.

[0010] According to embodiments of the present invention, a process checking apparatus can be provided that can easily and effectively check or test processes.

[0011] Furthermore, according to embodiments of the present invention, a process checking method can be provided that can easily and effectively check or test processes.

[0012] Furthermore, according to embodiments of the present invention, an electronic control device capable of easily and effectively inspecting or testing the process can be provided. Attached Figure Description

[0013] Figure 1 This is a block diagram illustrating a process checking apparatus according to this embodiment.

[0014] Figure 2 This is a diagram used to illustrate the message according to this embodiment.

[0015] Figure 3 This is a flowchart illustrating the process checking method according to this embodiment.

[0016] Figure 4 and Figure 5 This is a block diagram illustrating an electronic control device according to this embodiment.

[0017] Figure 6 This is a block diagram illustrating the controller according to this embodiment.

[0018] Figure 7 and Figure 8 This is a block diagram illustrating the peripheral device according to this embodiment.

[0019] Figure 9 This is a diagram illustrating the electronic control device used in this embodiment.

[0020] Figure 10 This is a diagram illustrating the timing of the electronic control device in this embodiment.

[0021] Figure 11 This is a block diagram of a computer system for a process checking device and an electronic control device according to this embodiment. Detailed Implementation

[0022] In the following description of examples or embodiments of the invention, reference will be made to the accompanying drawings, in which specific examples or embodiments that may be implemented are illustrated by way of illustration, and in which the same reference numerals and symbols may be used to indicate the same or similar components, even if they are shown in different drawings. Furthermore, in the following description of examples or embodiments of the invention, detailed descriptions of well-known functions and components incorporated herein will be omitted when it is determined that the description may obscure the subject matter of some embodiments of the invention.

[0023] Terms used herein, such as “comprising,” “having,” “containing,” “constituting,” “composed of,” and “formed from,” are generally intended to allow for the addition of other components unless the term is used in conjunction with the term “only.” As used herein, the singular form is intended to include the plural form unless the context clearly indicates otherwise.

[0024] This document may use terms such as “first,” “second,” “A,” “B,” “(A),” or “(B)” to describe elements of the invention. Each of these terms is not used to define the nature, order, sequence, or number of elements, but merely to distinguish the corresponding element from the others.

[0025] When referring to the first element and the second element as "connected or joined," "in contact or overlapping," etc., it should be interpreted as meaning that not only can the first element be "directly connected or joined" or "directly in contact or overlapping" with the second element, but a third element can also be "inserted" between the first element and the second element, or the first element and the second element can be "connected or joined," "in contact or overlapping," etc., via a fourth element. Here, the second element can be included in at least one of two or more elements that are "connected or joined," "in contact or overlapping," etc., with each other.

[0026] When time-related terms such as “after,” “follow,” “next,” “before,” etc., are used to describe a process or operation of an element or configuration, or a flow or step in an operation, processing, or manufacturing method, these terms may be used to describe a discontinuous or non-sequential process or operation, unless the terms “direct” or “immediate” are used together.

[0027] Furthermore, when referring to any size, relative size, etc., even without a specific description, the numerical value or corresponding information of the component or feature (e.g., level, range, etc.) should be considered, including tolerances or error ranges that may be caused by various factors (e.g., process factors, internal or external shocks, noise, etc.). Additionally, the term "can" fully encompasses all the meanings of the term "able to".

[0028] Figure 1This is a block diagram illustrating a process checking apparatus according to this embodiment.

[0029] refer to Figure 1 The process checking apparatus 100 according to this embodiment may include at least one of a conversion controller 110 and a checking controller 120. In this specification, the conversion controller 110 and the checking controller 120 may also be referred to as a conversion unit and a checking unit, respectively. The conversion controller 110 and the checking controller 120 may be connected via at least one of an electrical device, a magnetic device, and a mechanical device. There may be one or more conversion controllers 110 and checking controllers 120.

[0030] In serial communication, when a preset operation is performed, the process checking device 100 according to this embodiment may include a conversion controller 110 and a checking controller 120. The conversion controller 110 is configured to convert a specific value into a virtual area included in at least one message corresponding to the preset operation by inputting a specific value into a virtual area when the preset operation is performed in serial communication. The checking controller 120 is configured to be controlled to check the process based on the process checking message.

[0031] Here, serial communication may include at least one of SPI (Serial Peripheral Interface) communication and I2C (Inter-Integrated Circuit) communication. However, it is not limited to this; serial communication may include any communication capable of serial communication.

[0032] Here, the preset operation may include a read operation and at least one of a verification and read operation.

[0033] Here, the at least one message may include at least one of a read message and a verification read message.

[0034] Here, a virtual region can be a region containing virtual data. A virtual region can be referred to as a virtual space or virtual field. Specifically, virtual data can represent file information that does not contain useful data, but is considered as nominally existing actual data.

[0035] Specifically, when performing a read operation or verifying a read operation in at least one of SPI (Serial Peripheral Interface) communication and I2C (Inter-Integrated Circuit) communication, the conversion controller 110 can convert or generate at least one message.

[0036] In the example, when a read operation is performed in at least one of SPI communication and I2C communication, the conversion controller 110 can generate or convert at least one process monitoring message by inputting process monitoring values ​​into a data area included in at least one read message corresponding to the read operation.

[0037] In another example, when a verification operation following a read operation is performed after a write operation in at least one of SPI communication and I2C communication, the conversion controller 110 can generate or convert at least one process monitoring message by inputting a process monitoring value into the data area included in at least one verification read message corresponding to the verification operation following the write operation.

[0038] Here, process monitoring values ​​can be values ​​that can monitor processes, and can include any values ​​that can be used to monitor processes.

[0039] The inspection controller 120 can receive process monitoring messages from the conversion controller 110. The inspection controller 120 can inspect processes based on the process monitoring messages.

[0040] Specifically, the inspection controller 120 can monitor process monitoring messages and inspect the process flow by comparing the monitoring results of the process monitoring messages with a preset process flow.

[0041] In other words, the controller 120 can periodically, in real time, or at any point in time monitor process monitoring messages and compare the monitoring results of the process monitoring messages with the preset process flow.

[0042] If the monitoring results of the process monitoring message are consistent with the preset process flow, then checking the controller 120 can determine that the current process flow is in a normal state.

[0043] If the monitoring results of the process monitoring message are inconsistent with the preset process flow, the controller 120 can be checked to determine that the current process flow is in an abnormal state.

[0044] For example, the controller 120 can check at least one of the periodic value, count value, and question-and-answer value of the process monitoring message, and check the process flow by comparing the monitoring result (or monitoring value) of at least one of the periodic value, count value, and question-and-answer value of the process monitoring message with a preset process flow.

[0045] In one example, the inspection controller 120 can monitor the periodic storage, reception, and / or transmission of process monitoring messages. The inspection controller 120 can compare the periodically stored, received, and / or transmitted process monitoring messages (hereinafter, the period value of the process monitoring messages) with a preset process flow. As a result of the comparison, if the period value of the process monitoring messages matches the preset period value, the inspection controller 120 can determine that the current process flow is in a normal state; and if the period value of the process monitoring messages does not match the preset period value, the inspection controller 120 can determine that the current process flow is in an abnormal state.

[0046] In another example, the inspection controller 120 can monitor count values ​​by storing, receiving, and / or sending process monitoring messages. The inspection controller 120 can compare the count values ​​of the stored, received, and / or sent process monitoring messages (hereinafter referred to as the count values ​​of the process monitoring messages) with a preset process flow. As a result of the comparison, if the count value of the process monitoring messages matches the preset count value, the inspection controller 120 can determine that the current process flow is in a normal state; and if the count value of the process monitoring messages does not match the preset count value, the inspection controller 120 can determine that the current process flow is in an abnormal state.

[0047] In another example, the inspection controller 120 can monitor query and response values ​​by performing a question-and-answer process monitoring message. The inspection controller 120 can compare the query and response values ​​of the process monitoring message with preset process flows. As a result of the comparison, if the query and response values ​​of the monitoring message match preset query and response values, the inspection controller 120 can determine that the current process flow is in a normal state; and if the query and response values ​​of the monitoring message do not match preset query and response values, the inspection controller 120 can determine that the current process flow is in an abnormal state.

[0048] If it is determined that the current process flow is in a normal state, the check controller 120 can generate a message (or signal, etc.) corresponding to the normal state of the current process flow. Here, the message (or signal, etc.) corresponding to the current process flow in a normal state can be a clear message (or signal, etc.), that is, a message (or signal) to prevent reset.

[0049] If it is determined that the current process flow is in an abnormal state, the check controller 120 can generate a message (or signal, etc.) corresponding to the abnormal state of the current process flow. Here, the message (or signal, etc.) corresponding to the current process flow in an abnormal state can be a reset message (or signal).

[0050] Figure 2 This is a diagram used to illustrate the message according to this embodiment.

[0051] Reference Figure 2 According to this embodiment, the message may include a CMD area, an address area, and a data area. Here, the data area may be a virtual area.

[0052] When performing a read operation in at least one of SPI (Serial Peripheral Interface) communication and I2C (Inter-Integrated Circuit) communication, the conversion controller 110 can generate or convert at least one process monitoring message by inputting a process monitoring value into the data area included in at least one read message corresponding to the read operation.

[0053] Alternatively, when a verification operation following a read operation is performed after a write operation in at least one of SPI communication and I2C communication, the conversion controller 110 can generate or convert at least one process monitoring message by inputting a process monitoring value into the data area included in at least one verification read message corresponding to the verification operation following the write operation.

[0054] Due to the above Figure 1 The configuration of the conversion controller 110 and the inspection controller 120 described herein can also be applied to Figure 2 To simplify the explanation, the above will be omitted. Figure 1 The contents of the conversion controller 110 and the inspection controller 120 described herein are duplicated.

[0055] In the following description, the process checking method according to this embodiment will be described with reference to the accompanying drawings. The process checking method according to this embodiment can be executed by a process checking device. Therefore, for the sake of simplicity, references to the above-mentioned methods will be omitted. Figure 1 and Figure 2 The description of the process checking apparatus according to this exemplary embodiment is repeated.

[0056] Figure 3 This is a flowchart illustrating the process checking method according to this embodiment.

[0057] Reference Figure 3 The process checking method according to this embodiment may include at least one of a message conversion step (S100) and a process checking step (S200).

[0058] The process checking method according to this embodiment may include the following steps: when a preset operation is performed in serial communication, converting a specific value into at least one process monitoring message by inputting a specific value into a virtual area included in at least one message corresponding to the preset operation (S100); and checking the process based on the process monitoring message (S200).

[0059] Specifically, firstly, when a preset operation is performed in serial communication, at least one process monitoring message can be generated by inputting the process monitoring value into the data area included in at least one read message corresponding to the preset operation (S100).

[0060] Here, serial communication may include at least one of serial peripheral interface (SPI) communication and inter-integrated circuit (I2C) communication.

[0061] In S100, when a read operation is performed in at least one of SPI communication and I2C communication, at least one process monitoring message can be generated by inputting a process monitoring value into the read virtual area included in at least one read message corresponding to the read operation.

[0062] Alternatively, in step S100, when a verification operation is performed after a write operation in at least one of SPI communication and I2C communication, at least one process monitoring message can be generated by inputting a process monitoring value into the verification read virtual space included in at least one verification read message corresponding to the verification operation after the write operation.

[0063] Here, at least one message may include a CMD area, an address area, and a data area, and the data area may be a virtual area.

[0064] In S100, when a read operation is performed in at least one of SPI communication and I2C communication, at least one process monitoring message can be generated by inputting a process monitoring value into the data area included in at least one read message corresponding to the read operation.

[0065] Alternatively, in step S100, when a verification operation is performed after a write operation in at least one of SPI communication and I2C communication, at least one process monitoring message can be generated by inputting a process monitoring value into the data area included in at least one verification read message corresponding to the verification operation after the write operation.

[0066] Subsequently, the process can be inspected based on the process monitoring message from step S100 (S200).

[0067] For example, in step S200, process monitoring messages can be monitored, and the process flow can be checked by comparing the monitoring results of the process monitoring messages with a preset process flow.

[0068] That is, in step S200, at least one of the period value, count value, and question-and-answer value of the process monitoring message can be monitored. Furthermore, the process flow can be checked by comparing whether the monitoring result of at least one of the period value, count value, and question-and-answer value of the process monitoring message matches a preset process flow.

[0069] In the following description, an electronic control device according to an embodiment of the present invention will be described with reference to the accompanying drawings. For the sake of simplicity, references to the above-described electronic control device will be omitted. Figures 1 to 3 The description of the exemplary implementation of the process checking apparatus and process checking method repeats the content.

[0070] Figure 4 and Figure 5 This is a block diagram illustrating an electronic control device according to this embodiment.

[0071] Reference Figure 4 and Figure 5 The electronic control device 200 according to this embodiment may include at least one of a controller 210, a peripheral device 220, and a process checker 230. In this specification, the controller 210, peripheral device 220, and process checker 230 may also be referred to as a control unit, a peripheral device unit, and a process checking unit, respectively. The controller 210, peripheral device 220, and process checker 230 may be connected via at least one of an electrical device, a magnetic device, and a mechanical device. The controller 210, peripheral device 220, and process checker 230 may be one or more of each.

[0072] The process checker 230 may not be included in the controller 210 and peripheral device 220, and may be provided separately, but is not limited thereto, or may be provided within the controller 210 and peripheral device 220.

[0073] The controller 210, peripheral device 220 and process checker 230 can be connected to each other via serial communication.

[0074] The electronic control device 200 may include, but is not limited to, an electronic control unit (ECU), and may include any control device (or system) as long as it is a device (or system) that can be electronically controlled.

[0075] Since process checker 230 can be understood as the reference above... Figures 1 to 3 The process checking device 100 described herein contains the same components, and for the sake of simplicity, references to the above will be omitted. Figures 1 to 3 The described process checking device 100 repeats the same content.

[0076] Reference Figure 4 In the electronic control device 200 according to this embodiment, the process checker 230 may not be included in the controller 210 and peripheral device 220, but may be set up separately.

[0077] That is, the electronic control device 200 according to this embodiment may include a peripheral device 220, a controller 210 connected to the peripheral device 220 via serial communication, and a process checker 230 for checking the processes of at least one of the peripheral device 220 and the controller 210. Here, when a preset operation is performed in at least one of the peripheral device 220 and the controller 210, the process checker 230 can generate or convert at least one process monitoring message by inputting a specific value into a virtual area included in at least one message corresponding to the preset operation, and can check the process based on the process monitoring message.

[0078] Here, serial communication may include at least one of serial peripheral interface (SPI) communication and inter-integrated circuit (I2C) communication.

[0079] When a read operation is performed in at least one of SPI communication and I2C communication, the process checker 230 can generate or convert at least one process monitoring message by inputting process monitoring values ​​into the read virtual area included in at least one read message corresponding to the read operation.

[0080] Alternatively, when a verification operation following a read operation is performed after a write operation in at least one of SPI communication and I2C communication, the process checker 230 can generate or convert at least one process monitoring message by inputting the process monitoring value into the verification read virtual space included in at least one verification read message corresponding to the verification operation following the write operation.

[0081] Here, the at least one message may include a CMD area, an address area, and a data area, and the data area may be a virtual area.

[0082] When a read operation is performed in at least one of SPI communication and I2C communication, the process checker 230 can generate or convert at least one process monitoring message by inputting process monitoring values ​​into the data area included in at least one read message corresponding to the read operation.

[0083] Alternatively, when a verification operation following a read operation is performed after a write operation in at least one of SPI communication and I2C communication, the process checker 230 can generate or convert at least one process monitoring message by inputting process monitoring values ​​into the data area included in at least one verification read message corresponding to the verification operation following a read operation.

[0084] The process checker 230 can monitor process monitoring messages and check process flows by comparing the monitoring results of the process monitoring messages with preset process flows.

[0085] The process checker 230 can monitor at least one of the periodic value, count value, and question-and-answer value of the process monitoring message, and can check the process flow by comparing whether the monitoring result of at least one of the periodic value, count value, and question-and-answer value of the process monitoring message matches a preset process flow.

[0086] Reference Figure 5In the electronic control device 200 according to this embodiment, the process checker 230 may be provided in the controller 210 and the peripheral device 220. Therefore, the function of the process checker 230 can be executed within the controller 210 and the peripheral device 220.

[0087] The electronic control device 200 according to this embodiment may include a peripheral device 220 and a controller 210 connected to the peripheral device 220 via serial communication. When a preset operation is performed, at least one of the peripheral device 220 and the controller 210 can generate or convert at least one process monitoring message by inputting a specific value into a virtual area included in at least one message corresponding to the preset operation, and can check the process based on the process monitoring message.

[0088] Here, serial communication may include at least one of serial peripheral interface (SPI) communication and inter-integrated circuit (I2C) communication.

[0089] When a read operation is performed in at least one of SPI communication and I2C communication, at least one of the peripheral device 220 and the controller 210 can generate or convert at least one process monitoring message by inputting process monitoring values ​​into the read virtual area included in at least one read message corresponding to the read operation.

[0090] Alternatively, when a verification operation following a write operation is performed in at least one of SPI communication and I2C communication, at least one of the peripheral device 220 and the controller 210 can generate or convert at least one process monitoring message by inputting a process monitoring value into a verification read virtual space included in at least one verification read message corresponding to the verification operation following the write operation.

[0091] Here, the at least one message may include a CMD area, an address area, and a data area, and the data area may be a virtual area.

[0092] When a read operation is performed in at least one of SPI communication and I2C communication, at least one of the peripheral device 220 and the controller 210 can generate or convert at least one process monitoring message by inputting process monitoring values ​​into the data area included in at least one read message corresponding to the read operation.

[0093] Alternatively, when a verification operation following a write operation is performed in at least one of SPI communication and I2C communication, at least one of the peripheral device 220 and the controller 210 can generate or convert at least one process monitoring message by inputting a process monitoring value into the data area included in at least one verification read message corresponding to the verification operation following a write operation.

[0094] At least one of the peripheral device 220 and the controller 210 can monitor process monitoring messages and can check the process flow by comparing the monitoring results of the process monitoring messages with a preset process flow.

[0095] At least one of the peripheral device 220 and the controller 210 can monitor at least one of the periodic value, count value and question-and-answer value of the process monitoring message, and can check the process flow by comparing whether the monitoring result of at least one of the periodic value, count value and question-and-answer value of the process monitoring message matches a preset process flow.

[0096] Figure 6 This is a block diagram illustrating the controller according to this embodiment.

[0097] refer to Figure 6 The controller 210 according to this embodiment may include a microcontroller unit (MCU), but is not limited thereto, and may include any unit as long as it is a unit capable of performing computing functions.

[0098] The controller 210 may include at least one of a processor 211, a low-voltage differential signaling (LVDS) 212, a general-purpose input / output (GPIO / INT) 213, an SPI / I2C 214, and a RESET 215. The processor 211, LVDS 212, GPIO / INT 213, SPI / I2C 214, and RESET 215 may be connected via at least one of electrical, magnetic, and mechanical means. The processor 211, LVDS 212, GPIO / INT 213, SPI / I2C 214, and RESET 215 may each be one or more.

[0099] Here, processor 211 may include at least one core. In particular, in the case of multiple cores, at least one of the multiple cores may include a lockstep core.

[0100] Figure 7 and Figure 8 This is a block diagram illustrating the peripheral device according to this embodiment.

[0101] refer to Figure 7 and Figure 8 The peripheral device 220 according to this embodiment may include at least one of a sensor signal processor 220-A and a monitor 220-B. The sensor signal processor 220-A and the monitor 220-B may be connected via at least one of an electrical device, a magnetic device, and a mechanical device. The sensor signal processor 220-A and the monitor 220-B may each be one or more.

[0102] refer to Figure 7The sensor signal processor 220-A may include, but is not limited to, a microcontroller unit (MCU) capable of processing sensor signals, and may include any unit capable of performing computational functions.

[0103] The sensor signal processor 220-A may include at least one of a processor 221-A, a low-voltage differential signaling (LVDS) 222-A, a general-purpose input / output (GPIO / INT) 223-A, and an SPI / I2C 224-A. The processor 221-A, LVDS 222-A, GPIO / INT 223-A, and SPI / I2C 224-A may be connected via at least one of electrical, magnetic, and mechanical means. The processor 221-A, LVDS 222-A, GPIO / INT 223-A, and SPI / I2C 224-A may be one or more of each.

[0104] Here, processor 221-A may include at least one core. In particular, in the case of multiple cores, at least one of the multiple cores may include a lockstep core.

[0105] Reference Figure 8 The monitor 220-B may include at least one of a monitor input (WDI) 221-B, a general purpose input / output (GPIO / INT) 222-B, and an SPI / I2C 223-B. The WDI 221-B, GPIO / INT 222-B, and SPI / I2C 223-B may be connected via at least one of electrical, magnetic, and mechanical means. The WDI 221-B, GPIO / INT 222-B, and SPI / I2C 223-B may each be one or more.

[0106] Figure 9 This is a diagram illustrating the electronic control device used in this embodiment.

[0107] Reference Figure 9 The electronic control device 200 according to this embodiment may include a controller 210, a sensor signal processor 220-A, a monitor 220-B, and a process checker 230.

[0108] The controller 210 can be an MCU, the sensor signal processor 220-A can be a secure MCU, and the monitor 220-B can be an external WD.

[0109] The controller 210 can control the operation of the sensor signal processor 220-A, and the monitor 220-B can reset the controller 210 if the controller 210 is in an abnormal state. The process checker 230 can monitor the process flow of the controller 210, the sensor signal processor 220-A, and the monitor 220-B.

[0110] The sensor may include at least one of a camera sensor, a radar sensor, a lidar sensor, and an ultrasonic sensor, but is not limited thereto, and may include any other sensor (e.g., a sensor that can be applied in a vehicle).

[0111] The LVDS of controller 210 and the LVDS of sensor signal processor 220-A can be connected to each other, and data can be sent from the LVDS of sensor signal processor 220-A to the LVDS of controller 210. The GPIO / INT of controller 210 and the GPIO / INT of sensor signal processor 220-A can be connected to each other, and status information can be sent from the GPIO / INT of sensor signal processor 220-A to the GPIO / INT of controller 210. The WDI of monitor 220-B and the GPIO / INT of controller 210 can be connected to each other, and the monitor clock signal can be transmitted from the GPIO / INT of controller 210 to the WDI of monitor 220-B. The reset unit of controller 210 and the GPIO of monitor 220-B can be connected to each other, and the GPIO of monitor 220-B can be a reset generation unit, and a reset signal can be sent from the GPIO of monitor 220-B to the reset unit of controller 210. The controller 210, sensor signal processor 220-A, monitor 220-B, and process checker 230 can be connected to each other via SPI / I2C. The process checker 230 can monitor the status of the controller 210, sensor signal processor 220-A, and monitor 220-B via SPI / I2C and can generate a reset signal based on it.

[0112] In particular, the electronic control device 200 according to this embodiment can be a vehicle safety electronic control system.

[0113] The controller 210 can be an MCU with a lockstep core, i.e., a lockstep structure. Furthermore, the sensor signal processor 220-A is a device that communicates with the controller 210 via SPI and I2C, and can be a secure MCU that processes signals from at least one of a camera sensor, radar sensor, lidar sensor, and ultrasonic sensor.

[0114] Monitor 220-B can be located externally to controller 210 to wake up the controller 210 when its internal function stops. Furthermore, controller 210 may include a separate safety function block to manage the internal function stop. This separate safety function block can perform the functions of a program checking unit.

[0115] Monitor 220-B can communicate with controller 210 via SPI / I2C. Furthermore, controller 210 and sensor signal processor 220-A can perform write and / or read operations via SPI / I2C. Additionally, when a write operation is performed via SPI / I2C, controller 210 and sensor signal processor 220-A can perform operations to verify the write operation and its content via read operations.

[0116] When a read operation is performed after a read operation and / or a write operation via SPI / I2C, the controller 210 and the sensor signal processor 220-A can input specific messages in a read dummy.

[0117] The electronic control device 200 according to this embodiment may also include an external device (e.g., a program monitoring unit) that can analyze serial data (e.g., data containing a specific message in a read dummy cell) and check whether it matches a predetermined processing flow.

[0118] In the electronic control device 200 according to this embodiment, the controller 210 and the sensor signal processor 220-A can perform the function of analyzing serial data (e.g., reading data containing a specific message in a dummy cell) and can check whether it matches a predetermined processing flow.

[0119] In the electronic control device 200 according to this embodiment, the controller 210 may include a separate comparison operation unit to check status information (e.g., a message containing a specific message in a read dummy cell). Furthermore, the controller 210 of the electronic control device 200 according to this embodiment may record status information (e.g., a message containing a specific message in a read dummy cell) in a designated memory space via an internally separate comparison operation unit.

[0120] Figure 10 This is a diagram illustrating the timing of the electronic control device in this embodiment.

[0121] Reference Figure 10 According to this embodiment, the control unit and peripheral unit can perform a read operation according to the timing diagram shown in the figure.

[0122] Reading messages can include the CMD area, address area, and data area.

[0123] [Table 1]

[0124] CMD "00" "11" Function Read Write

[0125] Referring to Table 1, in the CMD area, "00" can indicate reading and "11" can indicate writing.

[0126] [Table 2]

[0127] CMD address data SDI 0b00 0b111110 0xFF SDO Ob11 0b000000 0xAA

[0128] [Table 3]

[0129]

[0130] Referring to Tables 2 and 3, the data area can be a read dummy area, and a specific value (e.g., 0xFF, 0xAA, etc.) can be input into the data area, which is a read dummy area, and this specific value can be any value.

[0131] Tables 1 to 3 above are merely examples and can be modified and implemented.

[0132] The electronic control device according to this embodiment can input the value of the process flow of the MCU to the data area of ​​the SDI during the read operation, and can perform monitoring in an external device (e.g., a process monitoring unit) and / or an independent module inside the MCU (e.g., a peripheral unit).

[0133] As described above, according to the process checking apparatus and method of this embodiment, the electronic control device can input specific values ​​into a virtual area included in at least one message in serial communication, and can generate at least one process monitoring message based on the process monitoring message to check the process. Therefore, compared with conventional methods that monitor the external aspects of the electronic control device to monitor the internal operation of the MCU through debug ports or dedicated ports, by utilizing the characteristics of serial communication (e.g., SPI and I2C communication, etc.) commonly used to control peripheral devices (e.g., sensors, etc.), the processes inside the electronic control device can be checked without using debug ports outside the electronic control device, while using fewer additional resources. Furthermore, since a separate monitoring device can be easily created to check the process, not only can the internal process flow of the MCU be easily debugged, but the development of a monitoring module for the internal process flow of the MCU can also be facilitated.

[0134] Furthermore, the electronic control device according to this embodiment may include a monitor and a process monitoring unit to check the process flow, thereby realizing an electronic control system with a redundant structure.

[0135] Figure 11 This is a block diagram of a computer system for a process checking device and an electronic control device according to this embodiment.

[0136] refer to Figure 11 The above embodiments can be implemented in a computer system, for example, as a computer-readable recording medium. Figure 11As shown, a computer system 1000, such as a process checking device and an electronic control device, may include at least one or more elements such as a processor 1010, a memory 1020, a storage unit 1030, a user interface input unit 1040, and a user interface output unit 1050, and these elements may communicate with each other via a bus 1060. Furthermore, the computer system 1000 may also include a network interface 1070 for connecting to a network. The processor 1010 may be a CPU or a semiconductor device that executes processing instructions stored in the memory 1020 and / or the storage unit 1030. The memory 1020 and the storage unit 1030 may include various types of volatile / non-volatile storage media. For example, the memory may include ROM 1024 and RAM 1025.

[0137] Therefore, each embodiment can be implemented as a computer-implemented method or a non-volatile computer recording medium in which computer-executable instructions are stored. When the instructions are executed by a processor, the method according to at least one embodiment of this embodiment can be performed.

[0138] The above description is provided to enable those skilled in the art to implement and use the technical ideas of the invention, and is given in the context of a particular application and its requirements. Various modifications, additions, and substitutions to the described embodiments will be apparent to those skilled in the art, and the general principles defined herein can be applied to other embodiments and applications without departing from the spirit and scope of the invention. The above description and drawings provide examples of the technical ideas of the invention for illustrative purposes only. That is, the disclosed embodiments are intended to illustrate the scope of the technical ideas of the invention. Therefore, the scope of the invention is not limited to the embodiments shown, but is consistent with the widest scope consistent with the claims. The scope of protection of the invention should be interpreted based on the appended claims, and all technical ideas within the scope of their equivalents should be interpreted as being included within the scope of the invention.

[0139] Cross-reference to related applications

[0140] This application claims priority to Korean Patent Application No. 10-2020-0068776, filed on June 8, 2020, which is incorporated herein by reference for all purposes, as if fully set forth herein.

Claims

1. An apparatus for inspecting a process, the apparatus comprising: A conversion controller is configured to be controlled to convert at least one process monitoring message by inputting a specific value into a virtual area included in at least one message corresponding to the preset operation when a preset operation is performed in serial communication between the controller of the electronic control device and a peripheral device of the electronic control device via the controller thereto. as well as A check controller is configured to be controlled to check processes based on the process monitoring messages. The device for checking the process utilizes the characteristics of the serial communication used to control the peripheral device to check the process without using a debugging port outside the electronic control device.

2. The apparatus for inspecting a process according to claim 1, wherein, The serial communication includes at least one of serial peripheral interface (SPI) communication and inter-integrated circuit (I2C) communication.

3. The apparatus for inspecting a process according to claim 2, wherein, The at least one message includes a CMD area, an address area, and a data area, and the data area is the virtual area.

4. The apparatus for inspecting a process according to claim 3, wherein, When a read operation is performed in at least one of the SPI communication and the I2C communication, the conversion controller converts the at least one process monitoring message by inputting a process monitoring value into the data area included in at least one read message corresponding to the read operation.

5. The apparatus for inspecting a process according to claim 3, wherein, When a verification operation following a read operation is performed in at least one of the SPI communication and the I2C communication, the conversion controller converts the at least one process monitoring message by inputting a process monitoring value into the data area included in at least one verification read message corresponding to the verification operation following the read operation.

6. The apparatus for inspecting a process according to claim 1, wherein, The inspection controller monitors the process monitoring messages and inspects the process flow by comparing the monitoring results of the process monitoring messages with a preset process flow.

7. The apparatus for inspecting a process according to claim 6, wherein, The inspection controller monitors at least one of the periodic value, count value, and question-and-answer value of the process monitoring message, and inspects the process flow by comparing whether the monitoring result of at least one of the periodic value, count value, and question-and-answer value of the process monitoring message matches a preset process flow.

8. A method for inspecting a process, the method comprising the following steps: When a preset operation is performed in at least one of the peripheral devices and the controller in serial communication between the controller of the electronic control device and the peripheral device, a specific value is input into the virtual area included in at least one message corresponding to the preset operation to convert it into at least one process monitoring message. as well as The process is checked based on the process monitoring message. Specifically, by utilizing the characteristics of the serial communication used to control the peripheral devices, the process can be checked without using the debugging port outside the electronic control device.

9. The method for checking a process according to claim 8, wherein, The serial communication includes at least one of serial peripheral interface (SPI) communication and inter-integrated circuit (I2C) communication.

10. The method for inspecting a process according to claim 9, wherein, The at least one message includes a CMD area, an address area, and a data area, and the data area is the virtual area.

11. The method for inspecting a process according to claim 10, wherein, The step of converting to at least one process monitoring message includes: when a read operation is performed in at least one of the SPI communication and the I2C communication, converting to the at least one process monitoring message by inputting the process monitoring value into the data area included in at least one read message corresponding to the read operation.

12. The method for inspecting a process according to claim 10, wherein, The step of converting the at least one process monitoring message includes: when a verification operation is performed after a write operation in at least one of the SPI communication and the I2C communication, the process monitoring value is converted into the at least one process monitoring message by inputting the process monitoring value into the data area included in the at least one verification read message corresponding to the verification operation after the write operation.

13. The method for checking a process according to claim 8, wherein, The steps for checking the process include: monitoring the process monitoring messages, and checking the process flow by comparing the monitoring results of the process monitoring messages with a preset process flow.

14. The method for inspecting a process according to claim 13, wherein, The process inspection steps include: monitoring at least one of the period value, count value, and question-and-answer value of the process monitoring message, and inspecting the process flow by comparing whether the monitoring result of at least one of the period value, count value, and question-and-answer value of the process monitoring message matches a preset process flow.

15. An electronic control device, the electronic control device comprising: Peripheral equipment; The controller is connected to the peripheral device via serial communication; as well as A process checker is used to check the processes of at least one of the peripheral devices and the controller. The process checker is configured to: when a preset operation is performed in at least one of the peripheral device and the controller, convert a specific value into at least one process monitoring message by inputting a specific value into a virtual area included in at least one message corresponding to the preset operation, and check the process based on the process monitoring message. The process checker utilizes the characteristics of the serial communication used to control the peripheral device to check the process without using a debug port outside the electronic control unit.

16. The electronic control device according to claim 15, wherein, The serial communication includes at least one of serial peripheral interface (SPI) communication and inter-integrated circuit (I2C) communication.

17. The electronic control device of claim 16, wherein the at least one message includes a CMD area, an address area, and a data area, and the data area is the virtual area.

18. The electronic control device according to claim 17, wherein, When a read operation is performed in at least one of the SPI communication and the I2C communication, the process checker converts the at least one process monitoring message by inputting a process monitoring value into the data area included in at least one read message corresponding to the read operation.

19. The electronic control device according to claim 17, wherein, When a verification operation following a read operation is performed after a write operation in at least one of the SPI communication and the I2C communication, the process checker converts the process monitoring value into at least one process monitoring message by inputting the process monitoring value into the data area included in at least one verification read message corresponding to the verification operation following the write operation.

20. The electronic control device according to claim 15, wherein, The process checker can be located in the controller and the peripheral device, or it can be set up separately.

Images