In-vehicle electronic systems, vehicles, control methods, and computer-readable storage media

Abstract

This invention relates to an in-vehicle electronic system, a vehicle, a control method, and a computer-readable storage medium. The in-vehicle electronic system is mounted on a vehicle. The system includes one or more sensors for determining the vehicle's safety status, an alarm device for issuing an alert when the safety status is abnormal, a first ECU that is directly connected to the sensors and the alarm device without passing through other ECUs and is connected to multiple other ECUs. The first ECU includes a safety status determination unit that determines the safety status based at least on information received from the sensors, and an alarm device control unit that activates the alarm device when the safety status determination unit determines that the safety status is abnormal.

Description

TECHNICAL FIELD

[0001] The present application relates to an in-vehicle electronic system, a vehicle, a control method, and a computer-readable storage medium. BACKGROUND

[0002] An in-vehicle electronic system capable of suppressing power consumption during standby to be low is described in Patent Literature 1.

[0003] Patent Literature 1: Japanese Patent No. 5502372 SUMMARY

[0004] In a first aspect, an in-vehicle electronic system is provided. The in-vehicle electronic system is mounted on a vehicle. The in-vehicle electronic system includes one or more sensors for judging a safety state of the vehicle. The in-vehicle electronic system includes an alarm device that performs an alarm when the safety state is abnormal. The in-vehicle electronic system includes a first ECU that is directly connected to the sensors and the alarm device without passing through other ECUs, and is connected to other ECUs. The first ECU includes a safety state judging section that judges the safety state based on at least information received from the sensors, and an alarm device control section that causes the alarm device to operate when the safety state is judged to be abnormal by the safety state judging section.

[0005] The in-vehicle electronic system further includes a second ECU that is directly connected to the first ECU without passing through other ECUs, and receives a lock signal and an unlock signal based on an authentication result for an owner of the vehicle. The safety state judging section can judge the safety state based on also information received from the second ECU.

[0006] The sensors can include at least one of a door switch, a hood switch, and an ultrasonic sensor provided in the vehicle.

[0007] The alarm device can include at least one of a horn and a safety indicator.

[0008] The in-vehicle electronic system can further include a third ECU that is connected to the first ECU and controls a light body. When the safety state is judged to be abnormal by the safety state judging section, the alarm device control section can transmit a danger output request to the third ECU, and the third ECU can activate and control the light body in accordance with the danger output request.

[0009] The alarm device can include at least a horn. When the safety state is judged to be abnormal by the safety state judging section, the alarm device control section 214 can cause the horn and the light body to operate alternately by alternately performing output of a signal that causes operation and transmission of a danger output request to the third ECU.

[0010] The in-vehicle electronic system can have a core ECU having a gateway function for relaying data communication between a plurality of sub-ECUs and data communication between the plurality of sub-ECUs and devices outside the vehicle. The first ECU can be provided between the plurality of ECUs and the core ECU, and is an ECU having a gateway function for relaying communication between the plurality of ECUs and the core ECU.

[0011] In the second aspect, a vehicle is provided. The vehicle has the above-described in-vehicle electronic system.

[0012] In the third aspect, a control method is provided. The control method is a control method executed by a first ECU in an in-vehicle electronic system mounted on a vehicle, the first ECU being directly connected to one or more sensors for judging a safety state of the vehicle and an alarm device that alarms when the safety state is abnormal, without passing through other ECUs, and being connected to a plurality of other ECUs. The control method has a step of judging the safety state based on at least information received from the sensors. The control method has a step of causing the alarm device to operate when it is judged that the safety state is abnormal.

[0013] In the fourth aspect, a program is provided. The program causes a computer in an in-vehicle electronic system mounted on a vehicle to execute a step of judging a safety state based on at least information received from sensors, the computer being directly connected to one or more sensors for judging a safety state of the vehicle and an alarm device that alarms when the safety state is abnormal, without passing through other ECUs, and being connected to a plurality of other ECUs. The program causes the computer to execute a step of causing the alarm device to operate when it is judged that the safety state is abnormal.

[0014] In addition, the above-described summary of the invention does not list all the essential features of the invention. In addition, subcombinations of these features can also be inventions. BRIEF DESCRIPTION OF DRAWINGS

[0015] Figure 1 The system configuration of the vehicle 20 related to one embodiment is schematically shown.

[0016] Figure 2 The functional configuration of the first ECU 210 is shown.

[0017] Figure 3 is a sequence chart showing the execution process of the processing executed by the first ECU 210 and the third ECU 230 when the hood of the vehicle 20 is opened.

[0018] Figure 4 An example of a computer 2000 that can embody all or part of the plurality of embodiments of the invention is shown. DETAILED DESCRIPTION

[0019] The present application will be described below through embodiments thereof, but the following embodiments do not limit the claimed application. In addition, the combination of features described in the embodiments is not necessarily all essential to the solution of the present application.

[0020] Figure 1 The system configuration of the vehicle 20 related to one embodiment is schematically shown. The vehicle 20 is provided with an in-vehicle electronic system 22. The in-vehicle electronic system 22 is provided with a TCU 201, a core ECU 202, a first ECU 210, a second ECU 220, a third ECU 230, a fourth ECU 240, a fifth ECU 250, a hood switch 271, a door switch 272, an ultrasonic sensor 273, a horn 281, a safety indicator 282, and a MID 298. In addition, although Figure 1 The vehicle 20 is shown to be provided with the in-vehicle electronic system 22, but the configuration of the vehicle 20 is not limited to the example of the present embodiment.

[0021] The core ECU 202, the first ECU 210, the second ECU 220, the third ECU 230, the fourth ECU 240, and the fifth ECU 250 are electronic control units (ECUs) that perform control of in-vehicle devices. Each of the core ECU 202, the first ECU 210, the second ECU 220, the third ECU 230, the fourth ECU 240, and the fifth ECU 250 can be configured to include a computer having a processor, a volatile memory, and a non-volatile memory. The TCU 201 is a telematics control unit. The TCU 201 is responsible for wireless communication with the outside of the vehicle 20. For example, the TCU 201 is responsible for wireless communication through a mobile network and wireless LAN communication.

[0022] The core ECU 202 is connected to the first ECU 210 through a communication network 180a. The core ECU 202 and the first ECU 210 can communicate with each other through the communication network 180a. The core ECU 202 is connected to the fifth ECU 250 through a communication network 180e. The core ECU 202 and the fifth ECU 250 can communicate with each other through the communication network 180e. The core ECU 202 is connected to the TCU 201 via a communication network 180f. The core ECU 202 and the TCU 201 can communicate with each other through the communication network 180f. The core ECU 202 is connected to the MID 298 via the communication network 180f. The core ECU 202 and the MID 298 can communicate with each other through the communication network 180g.

[0023] The first ECU 210 is connected to the second ECU 220 via the communication network 180a. The core ECU 202 and the second ECU 220 can communicate with each other through the communication network 180b. The first ECU 210 is connected to the third ECU 230 and the fourth ECU 240 via the communication network 180c. The first ECU 210, the second ECU 220, and the third ECU 230 can communicate with each other through the communication network 180b. The first ECU 210 is connected to the ultrasonic sensor 273 via the communication network 180d. The first ECU 210 and the ultrasonic sensor 273 can communicate with each other through the communication network 180d. In addition, the fourth ECU 240 is an ECU responsible for an electric power steering lock function. The fifth ECU 250 is an ECU for integrally controlling ECUs mainly executing controls related to the driving control of the vehicle 20, such as a fuel injection device and the like. The functions of the other ECUs will be described later.

[0024] The communication network 180a, the communication network 180b, the communication network 180c, and the communication network 180e are CAN (Controller Area Network) communication networks. The communication network 180d can be a serial communication line such as a UART (Universal Asynchronous Receiver Transmitter), a communication line complying with LIN (Local Interconnect Network), or the like. The communication network 180f can include a communication network complying with Ethernet (registered trademark) and a CAN (Controller Area Network) communication network.

[0025] The hood switch 271, the door switch 272, the horn 281, and the safety indicator 282 are connected to the first ECU 210. The hood switch 271 is connected to the first ECU 210 through the can line 190a. The first ECU 210 acquires the output of the hood switch 271 through the can line 190a. The door switch 272 is connected to the first ECU 210 through the can line 190b. The first ECU 210 acquires the output of the door switch 272 through the can line 190b. The horn 281 is connected to the first ECU 210 through the can line 190c. The first ECU 210 outputs a drive signal for operating the horn 281 through the can line 190c. The safety indicator 282 is connected to the first ECU 210 via the can line 190d. The first ECU 210 outputs a drive signal for operating the safety indicator 282 through the can line 190d. In addition, the lamp body 232 is connected to the third ECU 230. The lamp body 232 is connected to the third ECU 230 through the can line 190e. The third ECU 230 outputs a drive signal for operating the lamp body 232 through the can line 190a. The can line 190a, the can line 190b, the can line 190c, the can line 190d, and the can line 190e are not wiring for data communication for serial communication or the like, but are signal lines directly connected to each other. The can line 190a, the can line 190b, the can line 190c, the can line 190d, and the can line 190e can be signal lines for transmitting an analog signal.

[0026] Figure 2 The functional structure of the first ECU 210 and the core ECU 202, the third ECU 230, the fifth ECU 250, the hood switch 271, the door switch 272, the ultrasonic sensor 273, the horn 281, the safety indicator 282, and the lamp body 232 are shown.

[0027] In the hood switch 271, for example, the contact of the hood switch 271 is closed when the hood is opened, and the contact of the hood switch 271 is opened when the hood is closed. Thereby, when the hood is opened, an L-level signal indicating the hood open state is input to the first ECU 210, and when the hood is closed, an H-level signal indicating the hood closed state is input to the first ECU 210. As for the door switch 272, for example, the contact of the door switch 272 is closed when the door is opened, and the contact of the door switch 272 is opened when the door is closed. Thereby, when the door is opened, an L-level signal indicating the door open state is input to the first ECU 210, and when the door is closed, an H-level signal indicating the door closed state is input to the first ECU 210. The ultrasonic sensor 273 is provided in the vehicle 20, and detects a reflected wave from a transmitted ultrasonic wave.

[0028] The horn 281 is a safety alarm that emits an alarm sound. The horn 281 is directly controlled by the first ECU 210. The horn 281 can be shared with the alarm. The safety indicator 282 includes an LED provided in the instrument panel. The safety indicator 282 is directly controlled by the first ECU 210. The lamp body 232 is an emergency flash indicator lamp, which is a lamp body used as a so-called hazard lamp. The first ECU 210 operates the lighting of the lamp body 232 through the third ECU 230.

[0029] The hood switch 271, the door switch 272, and the ultrasonic sensor 273 are examples of one or more sensors for judging a safety state of the vehicle 20. The horn 281 and the safety indicator 282 are examples of alarm devices for emitting an alarm when the safety state is abnormal.

[0030] The first ECU 210 is directly connected to the hood switch 271, the door switch 272, the ultrasonic sensor 273, the horn 281, and the safety indicator 282 without passing through other ECUs, and is also connected to other ECUs. The first ECU 210 is provided with a safety state judging section 212 and an alarm device control section 214. In the safety state judging section 212, the first ECU 210 judges the safety state based on at least information received from the sensors. When the safety state judging section 212 judges that the safety state is abnormal, the alarm device control section 214 operates at least one of the horn 281 and the safety indicator 282.

[0031] Thus, since the first ECU 210 is directly connected to the hood switch 271, the door switch 272, and the alarm device without passing through other ECUs, it is possible to improve the responsiveness of the alarm. In addition, even when the core ECU 202, the fifth ECU 250, and the like are not operating, the first ECU 210 can operate the alarm device by acquiring signals output from the hood switch 271 and the door switch 272. Therefore, when the ignition power of the vehicle 20 is turned off, it is possible to detect an abnormality in the safety state by periodically starting the first ECU 210 and monitoring the outputs of the hood switch 271 and the door switch 272 without operating the core ECU 202, the fifth ECU 250, and the like. Thus, it is possible to reduce the standby current required for monitoring for theft prevention when the ignition power is turned off. Furthermore, since the theft prevention function is integrated in the first ECU 210, it is possible to reduce the number of ECUs used for theft prevention. Therefore, it is also possible to reduce the cost for obtaining certification against UN R116 (a protocol rule related to theft prevention devices) and the like.

[0032] The second ECU 220 is directly connected to the first ECU 210 without going through any other ECUs, and receives lock and unlock signals based on the owner authentication result for the vehicle 20. The second ECU 220 is, for example, a keyless entry ECU. For instance, the second ECU 220 receives a code transmitted from the key via a wireless signal, and when the received code matches a pre-stored code, generates an authentication result indicating that key authentication has been achieved. The first ECU 210 also determines the security status based on information received from the second ECU 220. For example, if the second ECU 220 does not receive an authentication result indicating that key authentication has been achieved, the first ECU 210 determines that the security status is abnormal when at least one of the hood switch 271, door switch 272, and ultrasonic sensor 273 detects a predetermined signal.

[0033] Therefore, the second ECU 220 is directly connected to the first ECU 210 without going through other ECUs. Thus, the first ECU 210 can receive signals such as authentication results from the second ECU 220 without operating other ECUs. This reduces standby current when the ignition power is off. Furthermore, since the ECU receiving signals from the outside can be separated from the first ECU 210, safety is improved.

[0034] The third ECU 230 is connected to the first ECU 210 and controls the lamp body 232. When the safety status judgment unit 212 determines that the safety status is abnormal, the alarm device control unit 214 sends a danger output request to the third ECU 230. The third ECU 230 activates and controls the lamp body 232 according to the danger output request. Thus, when the safety status is determined to be abnormal, the first ECU 210 sends a danger output request to the third ECU 230, causing the third ECU 230 to activate and control the lamp body 232. Therefore, compared to the case where the signals detected by the hood switch 271 and the door switch 272 are resent to the activated ECU, the responsiveness of the lamp body 232 can be improved.

[0035] When the safety status judgment unit 212 determines that the safety status is abnormal, the alarm device control unit 214 alternately outputs a signal to make the horn 281 work and sends a danger output request to the third ECU 230, thereby making the horn 281 and the lamp body 232 work alternately.

[0036] The core ECU 202 has a gateway function for relaying data communication between multiple sub-ECUs and between multiple sub-ECUs and external devices. Here, the multiple sub-ECUs include, for example, the first ECU 210, the fifth ECU 250, etc. The core ECU 202 is sometimes referred to as the "central ECU" or "main ECU." The sub-ECUs, such as the first ECU 210 and the fifth ECU 250, perform data communication with external devices via the TCU 201 through the gateway function of the ECU 202. The first ECU 210 is an ECU positioned between the multiple ECUs and the core ECU 202, and has a gateway function for relaying communication between the core ECU and multiple ECUs, such as the second ECU 220, the third ECU 230, and the fourth ECU 240. Therefore, by using a configuration where the second ECU 220, the third ECU 230, and the fourth ECU 240 are connected to the first ECU 210 instead of directly to the ECU 202, the reliability of network security can be improved.

[0037] Figure 3 This is a sequence diagram illustrating the execution process of the procedures performed by the first ECU 210 and the third ECU 230 when the engine hood of vehicle 20 is opened. It is also assumed that the ignition power is off before this sequence begins. Furthermore, it is assumed that the system is in a state where key authentication has not been obtained via the second ECU 220.

[0038] In S302, a signal indicating the hood is open is output to the first ECU 210 by opening the hood switch 271. If the first ECU 210 is activated periodically, in S312, the safety status determination unit 212 performs processing to detect whether the hood is open. When the signal output from the hood switch 271 indicates the hood is open and no authentication result indicating key authentication has been received from the second ECU 220, a safety status abnormality is determined, and the alarm device control unit 214 begins safety status abnormality processing (S314).

[0039] As a response to an abnormal safety condition, the alarm device control unit 214 outputs a horn drive signal to the horn 281 via the Zika line 190c (S316), causing the horn 281 to output an alarm sound (S317). Next, in S318, the alarm device control unit 214 sends a danger output request to the third ECU 230 via the communication network 180c. The third ECU 230 activates according to the danger output request, performs danger handling (S319), and in S320 outputs a lamp drive signal of a predetermined mode to the lamp body 232 via the Zika line 190e, causing the lamp body 232 to illuminate in a predetermined mode (S321).

[0040] Subsequently, similar to sequences S316 to S321, the alarm device control unit 214 outputs a horn drive signal to the horn 281 via the Zika line 190c (S326), thereby causing the horn 281 to output an alarm sound (S327). Then, in S328, the alarm device control unit 214 sends a danger output request to the third ECU 230 via the communication network 180c, and the third ECU 230 performs danger handling according to the danger output request (S329). In S330, by outputting a lamp body drive signal of a predetermined pattern to the lamp body 232 via the Zika line 190e, the lamp body 232 is made to illuminate in a predetermined pattern (S331). Thereafter, the alarm device control unit 214 repeats the alarm sound output and danger output by alternately executing sequences S316 to S321 and sequences S336 to S331. By connecting the horn 281 and the third ECU 230 directly to the first ECU 210 without going through other ECUs, the response delay of the alarm tone output and the danger output is suppressed, and the alarm tone output and the danger output can be repeated, thereby improving the protection performance.

[0041] As described above, according to the vehicle electronic system 22, since safety-related functions are integrated into the first ECU 210 and the ECU directly connected to the first ECU 210, the responsiveness of alarms can be improved. Furthermore, since abnormalities in the safety status can be detected without activating the core ECU 202, the fifth ECU 250, etc., when the ignition power is off, the standby current required for monitoring the safety status when the ignition power is off can be reduced. Moreover, since safety-related functions are integrated into the first ECU 210, the number of ECUs that need to operate to perform safety-related processes can be reduced. Therefore, for example, the cost of obtaining certification for UN R116 (a protocol rule related to anti-theft devices) can also be reduced.

[0042] Vehicle 20 is an example of a transportation device. A vehicle can be a car with an internal combustion engine, an electric vehicle, or a fuel cell vehicle (FCV), etc. Cars include buses, trucks, two-wheeled vehicles, etc. Vehicles can be saddle-type vehicles, or motorcycles. In addition to vehicles, transportation devices also include aircraft such as unmanned aerial vehicles and ships. Transportation devices can be any device used to transport people or goods. Transportation devices are examples of mobile bodies. Mobile bodies are not limited to transportation devices and can be any movable device.

[0043] Figure 4Examples of computer 2000 that may embody all or part of the various embodiments of the present invention are shown. A program installed on the computer 2000 enables the computer 2000 to function as a system or unit of a system such as an in-vehicle electronic system according to the embodiments, or as a device or unit of an information processing device, to perform operations associated with the system or unit of the system, the device or unit of the device, and / or to perform processes or steps according to the embodiments. Such a program may be executed by CPU 2012 to enable the computer 2000 to perform the processing flow described herein and specific operations associated with several or all of the functional blocks in the block diagram.

[0044] The computer 2000 based on this embodiment includes a CPU 2012 and RAM 2014, which are interconnected via a main controller 2010. The computer 2000 also includes a ROM 2026, flash memory 2024, a communication interface 2022, and an input / output chip 2040. The ROM 2026, flash memory 2024, communication interface 2022, and input / output chip 2040 are connected to the main controller 2010 via an input / output controller 2020.

[0045] CPU2012 operates according to the programs stored in ROM2026 and RAM2014, thereby controlling each unit.

[0046] The communication interface 2022 communicates with other electronic devices via a network. The flash memory 2024 stores programs and data used by the CPU 2012 within the computer 2000. The ROM 2026 stores startup programs executed by the computer 2000 when activated, and / or programs dependent on the hardware of the computer 2000. The input / output chip 2040 can also connect various input / output units such as keyboards, mice, and monitors to the input / output controller 2020 via input / output ports such as serial ports, parallel ports, keyboard ports, mouse ports, monitor ports, USB ports, and HDMI (registered trademark) ports.

[0047] The program is provided via a computer-readable storage medium such as a CD-ROM, DVD-ROM, or USB flash drive, or via a network. RAM 2014, ROM 2026, or flash memory 2024 are examples of computer-readable storage media. The program is installed into flash memory 2024, RAM 2014, or ROM 2026 and executed by CPU 2012. The information processing described within these programs is read by computer 2000, enabling cooperation between the program and the aforementioned types of hardware resources. The apparatus or method can be configured to perform information manipulation or processing in accordance with the use of computer 2000.

[0048] For example, when communication is performed between the computer 2000 and an external device, the CPU 2012 can execute a communication program loaded into the RAM 2014, and instruct the communication interface 2022 to perform communication processing based on the processing described in the communication program. Under the control of the CPU 2012, the communication interface 2022 reads the transmission data stored in the transmission buffer processing area provided in the recording medium such as the RAM 2014 and the flash memory 2024, sends the read transmission data to the network, and writes the received data received from the network to the receive buffer processing area provided on the recording medium, etc.

[0049] In addition, CPU 2012 can read all or a required portion of a file or database stored in a recording medium such as flash memory 2024 into RAM 2014, and perform various processing on the data in RAM 2014. CPU 2012 then writes the processed data back to the recording medium.

[0050] Various types of information, such as programs, data, tables, and databases, can be saved to the recording medium and applied to information processing. The CPU 2012 can perform various operations, information processing, conditional judgments, conditional branches, unconditional branches, information retrieval / replacement, etc., as described in this specification, on data read from the RAM 2014, and write the results back to the RAM 2014. Furthermore, the CPU 2012 can retrieve information from files, databases, etc., within the recording medium. For example, if multiple items, each having an attribute value associated with a second attribute, are stored in the recording medium, the CPU 2012 can retrieve the item whose first attribute value matches the condition from these multiple items, read the second attribute value stored in that item, and thereby obtain the second attribute value associated with the first attribute that satisfies a preset condition.

[0051] The programs or software modules described above can be stored on or near the computer 2000 on a computer-readable storage medium. Recording media such as hard disks or RAM provided in server systems connected to a dedicated communication network or the Internet can be used as computer-readable storage media. Programs stored on computer-readable storage media can be provided to the computer 2000 via a network.

[0052] The programs installed in the computer 2000, which enable the computer 2000 to function as the first ECU 210, can operate in the CPU 2012, etc., thereby allowing the computer 2000 to function as each unit of the first ECU 210. The information processing described in these programs is read into the computer 2000, thus functioning as specific units that cooperate with the software and the various hardware resources described above, i.e., each unit of the first ECU 210. Furthermore, by utilizing these specific units to perform calculations or processing of information corresponding to the intended use of the computer 2000 in this embodiment, a unique first ECU 210 corresponding to the intended use is constructed.

[0053] Various embodiments have been described with reference to block diagrams, etc. In the block diagrams, each functional block may represent (1) a step of an operation process or (2) a unit of a device having the function of performing the operation. Specific steps and units may be implemented by dedicated circuits, programmable circuits supplied together with computer-readable instructions stored on a computer-readable medium, and / or processors supplied together with computer-readable instructions stored on a computer-readable medium. Dedicated circuits may include digital and / or analog hardware circuits, and may also include integrated circuits (ICs) and / or discrete circuits. Programmable circuits may include logic AND, logic OR, logic XOR, logic NAND, logic NOR, and other logic operations, flip-flops, registers, field-programmable gate arrays (FPGAs), programmable logic arrays (PLAs), and other reconfigurable hardware circuits including memory elements.

[0054] A computer-readable storage medium can include any tangible device capable of storing instructions executable by a suitable device, such that the computer-readable storage medium having the instructions stored therein constitutes at least a portion of a product containing instructions executable to implement units for performing operations specified in a process flow or block diagram. Examples of computer-readable storage media include electrical storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, etc. More specific examples of computer-readable storage media include floppy disks (registered trademark), floppy magnetic disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), optical disc read-only memory (CD-ROM), digital multipurpose disk (DVD), Blu-ray discs (registered trademark), memory sticks, integrated circuit cards, etc.

[0055] Computer-readable instructions may include assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine delegate instructions, microcode, firmware instructions, status setting data, or any type of source code or object code described by any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk (registered trademark), JAVA (registered trademark), C++, and conventional procedural programming languages ​​such as the "C" programming language or similar programming languages.

[0056] Computer-readable instructions are provided via a wide area network (WAN) such as a local area network (LAN) or the Internet to a processor or programmable circuit of a general-purpose computer, a special-purpose computer, or other programmable data processing device. These computer-readable instructions can be executed to implement units that perform the operations specified in the described processing flow or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, and microcontrollers.

[0057] The present invention has been described above using embodiments, but the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various modifications or improvements can be made to the above embodiments. Such modifications or improvements can also be included within the technical scope of the present invention, as is evident from the claims.

[0058] Regarding the execution order of actions, processes, steps, and procedures in the apparatus, system, program, and method shown in the claims, specification, and drawings, it should be noted that unless explicitly stated as "before" or "firstly," any order is permissible as long as the output of a previous process is not used in a subsequent process. Even if terms such as "firstly" or "next" are used for convenience in describing the flow of actions in the claims, specification, and drawings, this does not imply that the actions must be performed in that specific order.

[0059] [Explanation of Labels in the Attached Image]

[0060] 20 vehicles

[0061] 22. Vehicle Electronic Systems

[0062] 27 Engine Hood Switch

[0063] 180 Communication Network

[0064] 190 Zika Line

[0065] 201 TCU

[0066] 202 ECU

[0067] 210 First ECU

[0068] 212 Safety Status Assessment Unit

[0069] 214 Alarm Device Control Unit

[0070] 220 Second ECU

[0071] 230 Third ECU

[0072] 232 Lamp Body

[0073] 240 Fourth ECU

[0074] 250 Fifth ECU

[0075] 271 Engine Hood Switch

[0076] 272 Door Switch

[0077] 273 Ultrasonic Sensor

[0078] 281 loudspeakers

[0079] 282 Safety Indicator

[0080] 298 MID

[0081] 2000 Computer

[0082] 2010 Main Controller

[0083] 2012 CPU

[0084] 2014 RAM

[0085] 2020 Input / Output Controller

[0086] 2022 Communication Interface

[0087] 2024 Flash Memory

[0088] 2026 ROM

[0089] 2040 Input / Output Chip.

Claims

1. An in-vehicle electronic system, wherein, have: One or more sensors are used to determine the safety status of the vehicle; An alarm device is activated when the security condition is abnormal. as well as The first ECU is a secondary ECU that connects directly to the sensor and the alarm device without going through other ECUs, and is connected to the core ECU. The first ECU is also connected to other auxiliary ECUs and is positioned between the core ECU and the other auxiliary ECUs, providing a gateway function to relay communication between the core ECU and the other auxiliary ECUs. The core ECU has a gateway function that relays data communication between multiple sub-ECUs and between the multiple sub-ECUs and external devices. The first ECU has: The safety status determination unit determines the safety status based at least on information received from the sensor; and The alarm device control unit activates the alarm device when the safety status determination unit determines that the safety status is abnormal. The other auxiliary ECUs directly connected to the first ECU include: a second ECU that receives lock and unlock signals based on the owner authentication result for the vehicle; a third ECU that controls the lights; and a fourth ECU that is responsible for the electric power steering locking function. A fifth ECU, which performs overall control of the ECUs related to driving control of the vehicle, is directly connected to the core ECU.

2. The vehicle-mounted electronic system according to claim 1, wherein, It also includes a second ECU, which is directly connected to the other auxiliary ECUs of the first ECU without going through any other ECUs, and receives lock and unlock signals based on the owner authentication result for the vehicle. The safety status determination unit also determines the safety status based on information received from the second ECU.

3. The vehicle-mounted electronic system according to claim 1 or 2, wherein, The sensor includes at least one of a door switch, a hood switch, and an ultrasonic sensor disposed in the vehicle.

4. The vehicle-mounted electronic system according to claim 1 or 2, wherein, The alarm device includes at least one of a horn and a safety indicator.

5. The vehicle-mounted electronic system according to claim 1 or 2, wherein, It also includes a third ECU, which is connected to the first ECU and controls the lamp body as another auxiliary ECU. When the safety status determination unit determines that the safety status is abnormal, the alarm device control unit sends a danger output request to the third ECU. The third ECU activates and controls the lamp body based on the hazard output request.

6. The vehicle-mounted electronic system according to claim 5, wherein, The alarm device includes at least a horn. When the safety status determination unit determines that the safety status is abnormal, the alarm device control unit alternately executes the output of a signal to make the horn work and sends the danger output request to the third ECU, thereby alternately making the horn and the lamp work.

7. A vehicle, wherein, The vehicle electronic system comprising any one of claims 1 to 6.

8. A control method, executed by a first ECU in an onboard electronic system mounted on a vehicle, wherein the first ECU is a sub-ECU directly connected without passing through other ECUs to one or more sensors for determining the safety status of the vehicle and an alarm device for issuing an alarm when the safety status is abnormal, and connected to a core ECU, wherein... The first ECU is also connected to other auxiliary ECUs and is positioned between the core ECU and the other auxiliary ECUs, providing a gateway function to relay communication between the core ECU and the other auxiliary ECUs. The core ECU has a gateway function that relays data communication between multiple sub-ECUs and between the multiple sub-ECUs and external devices. The control method includes: At least the step of determining the safety status based on information received from the sensor; and The steps for activating the alarm device when the safety condition is determined to be abnormal. The other auxiliary ECUs directly connected to the first ECU include: a second ECU that receives lock and unlock signals based on the owner authentication result for the vehicle; a third ECU that controls the lights; and a fourth ECU that is responsible for the electric power steering locking function. A fifth ECU, which performs overall control of the ECUs related to driving control of the vehicle, is directly connected to the core ECU.

9. A computer-readable storage medium storing a program for causing a computer, which functions as an onboard electronic system mounted on a vehicle and is directly connected to one or more sensors for determining the safety status of the vehicle and an alarm device for issuing an alarm when the safety status is abnormal, and is connected to a sub-ECU of a core ECU, to perform the following steps: At least the step of determining the safety status based on information received from the sensor; and The steps for activating the alarm device when the safety condition is determined to be abnormal. The computer is also connected to other auxiliary ECUs and is positioned between the core ECU and the other auxiliary ECUs, providing a gateway function to relay communication between the core ECU and the other auxiliary ECUs. The core ECU has a gateway function that relays data communication between multiple sub-ECUs and between the multiple sub-ECUs and external devices. The other auxiliary ECUs directly connected to the computer include: a second ECU that receives lock and unlock signals based on the owner authentication result for the vehicle; a third ECU that controls the lights; and a fourth ECU that is responsible for the electric power steering locking function. A fifth ECU, which performs overall control of the ECUs related to driving control of the vehicle, is directly connected to the core ECU.

Images