Vehicle-mounted device, abnormality detection method, and abnormality detection program product

Abstract

A vehicle-mounted device that synchronizes time between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the vehicle-mounted device itself and the other devices. The vehicle-mounted device comprises: a processing unit that receives request information for time information used to request an update of the propagation delay time from the other devices and sends the time information to the other devices; and a detection unit that detects anomalies related to the time synchronization and obtains information related to the detected anomalies.

Description

Technical Field

[0001] The present disclosure relates to an in-vehicle device, an anomaly detection method, and an anomaly detection program product.

[0002] This application claims the benefit of priority based on Japanese patent application No. 2020-141305, filed on August 25, 2020, the disclosure of which is incorporated herein in its entirety. Background Art

[0003] Japanese Patent Application Laid-Open No. 2013-168865 (Patent Document 1) discloses the following in-vehicle network system. Specifically, the in-vehicle network system includes an in-vehicle control device and a communication protocol issuing device. The in-vehicle control device includes a memory storing definition data defining the portion of the communication protocol used on the in-vehicle network that is based on the in-vehicle network. The communication protocol issuing device issues the definition data to the in-vehicle control device. Upon receiving a registration request from a registration device for the in-vehicle control device to join the in-vehicle network, the communication protocol issuing device authenticates the registration device, creates the definition data based on the in-vehicle network installation, and returns the data to the registration device. The registration device receives the definition data sent by the communication protocol issuing device and requests the in-vehicle control device to store the received definition data in the memory. Then, the in-vehicle control device receives definition data from the registration device and stores the data in the memory, and performs communication using the in-vehicle network based on the communication protocol according to the portion defined by the definition data.

[0004] Patent Literature

[0005] Patent Document 1: Japanese Patent Application Laid-Open No. 2013-168865 Summary of the Invention

[0006] The vehicle-mounted device disclosed in the present invention comprises: a processing unit, which sends request information for time information used to request an update of the propagation delay time of data between the vehicle-mounted device itself and the other device to other vehicle-mounted devices, updates the propagation delay time based on the time information sent from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and a detection unit, which detects anomalies related to the time synchronization and obtains information related to the detected anomalies.

[0007] The vehicle-mounted device disclosed herein performs time synchronization between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the vehicle-mounted device itself and the other vehicle-mounted devices, and comprises: a processing unit that receives request information for time information used to request an update of the propagation delay time from the other devices and sends the time information to the other devices; and a detection unit that detects anomalies related to the time synchronization and obtains information related to the detected anomalies.

[0008] The abnormality detection method disclosed in the present invention is an abnormality detection method in a vehicle-mounted device, comprising the following steps: sending request information for time information used to request an update of the propagation delay time of data between the vehicle-mounted device itself and the other device to other vehicle-mounted devices, i.e., other devices; receiving the time information sent from the other devices; updating the propagation delay time based on the received time information; performing time synchronization with the other devices based on the updated propagation delay time; and detecting abnormalities related to the time synchronization and obtaining information related to the detected abnormalities.

[0009] The abnormality detection method disclosed in the present invention is an abnormality detection method in a vehicle-mounted device, which performs time synchronization between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the other devices. The abnormality detection method includes the following steps: receiving request information for time information used to request the update of the propagation delay time from the other devices; sending the time information to the other devices; and detecting abnormalities related to the time synchronization and obtaining information related to the detected abnormalities.

[0010] The abnormality detection program disclosed in the present invention is an abnormality detection program used in a vehicle-mounted device, which is used to enable a computer to function as the following parts: a processing unit, which sends request information for time information used to request the update of the propagation delay time of data between its own vehicle-mounted device and the other device to other vehicle-mounted devices, updates the propagation delay time based on the time information sent from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and a detection unit, which detects abnormalities related to the time synchronization and obtains information related to the detected abnormalities.

[0011] The abnormality detection program disclosed in the present invention is an abnormality detection program used in a vehicle-mounted device, which performs time synchronization between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the other devices. The abnormality detection program is used to enable the computer to function as the following parts: a processing unit, which receives request information for time information used to request an update of the propagation delay time from the other devices and sends the time information to the other devices; and a detection unit, which detects abnormalities related to the time synchronization and obtains information related to the detected abnormalities.

[0012] One embodiment of the present disclosure can be implemented not only as an in-vehicle device including such a characteristic processing unit but also as a semiconductor integrated circuit implementing a part or all of the in-vehicle device, or as an in-vehicle network system including the in-vehicle device. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 It is a diagram showing the configuration of an in-vehicle network system according to an embodiment of the present disclosure.

[0014] Figure 2 It is a diagram showing the structure of a switchgear according to an embodiment of the present disclosure.

[0015] Figure 3 It is a diagram showing the configuration of a functional portion on the master side according to an embodiment of the present disclosure.

[0016] Figure 4 This is a diagram for explaining a method of updating the propagation delay time implemented in the switching device according to the embodiment of the present disclosure.

[0017] Figure 5 It is a diagram showing the configuration of a functional unit on the slave side according to an embodiment of the present disclosure.

[0018] Figure 6 This is a diagram for explaining a method of updating the propagation delay time performed by a slave-side functional unit according to an embodiment of the present disclosure.

[0019] Figure 7 This is a diagram showing an example of a situation in which the propagation delay time of data between the primary-side functional unit and the switching device according to the embodiment of the present disclosure changes rapidly.

[0020] Figure 8 This is a diagram showing an example of a case where data transmission between a functional unit and a switch device according to an embodiment of the present disclosure is interrupted.

[0021] Figure 9This is a diagram showing an example of a list of error codes stored in a storage unit in a switch device and a functional unit according to an embodiment of the present disclosure.

[0022] Figure 10 This is a diagram showing a sequence of updating propagation delay times of a plurality of in-vehicle devices and abnormality detection related to time synchronization in an in-vehicle network system according to an embodiment of the present disclosure.

[0023] Figure 11 This is a diagram showing a sequence of time adjustment for a plurality of in-vehicle devices in an in-vehicle network system according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0024] Conventionally, technologies related to an in-vehicle network including a plurality of in-vehicle devices have been developed.

[0025] [Problems to be Solved by the Present Disclosure]

[0026] Each on-vehicle device in the on-vehicle network periodically updates the propagation delay time of data between on-vehicle devices according to a protocol defined in standards such as IEEE802.1, and uses the updated propagation delay time to synchronize the time between on-vehicle devices.

[0027] However, there is a possibility that anomalies related to time synchronization may occur, such as a sudden change in the propagation delay time of data between onboard devices. In such cases, problems such as a decrease in the accuracy of time synchronization may arise.

[0028] The present disclosure has been made to solve the above-mentioned problems, and an object of the present disclosure is to provide an in-vehicle device, an abnormality detection method, and an abnormality detection program capable of more stably performing time synchronization between in-vehicle devices.

[0029] [Effects of the Present Disclosure]

[0030] According to the present disclosure, time synchronization between vehicle-mounted devices can be performed more stably.

[0031] [Description of Embodiments of the Present Disclosure]

[0032] First, the contents describing the embodiments of the present disclosure will be listed and described.

[0033] (1) The vehicle-mounted device involved in the embodiment of the present disclosure comprises: a processing unit that sends request information for time information used to request an update of the propagation delay time of data between the vehicle-mounted device itself and the other device to other vehicle-mounted devices, updates the propagation delay time based on the time information sent from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and a detection unit that detects anomalies related to the time synchronization and obtains information related to the detected anomalies.

[0034] In this way, by detecting an abnormality related to time synchronization, the occurrence of an abnormality can be grasped and a response can be taken to promptly eliminate the cause of the abnormality. Therefore, time synchronization between vehicle-mounted devices can be performed more stably.

[0035] (2) The vehicle-mounted device involved in the embodiment of the present disclosure performs time synchronization between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the other devices and the other devices, and comprises: a processing unit that receives request information for time information used to request an update of the propagation delay time from the other devices and sends the time information to the other devices; and a detection unit that detects anomalies related to the time synchronization and obtains information related to the detected anomalies.

[0036] In this way, by using a configuration to detect anomalies related to time synchronization, it is possible to identify the occurrence of anomalies and promptly implement measures to eliminate the cause of the anomaly. Consequently, time synchronization between onboard devices can be more stably achieved. Furthermore, by using a configuration to detect anomalies related to time synchronization in an onboard device that is the source of time information, i.e., the onboard device that maintains the reference time in the onboard network, anomalies related to time synchronization can be more reliably detected.

[0037] (3) Preferably, the vehicle-mounted device further includes a recording unit that stores information related to the abnormality detected by the detection unit in a storage unit.

[0038] In this way, by storing information related to anomalies occurring in a vehicle-mounted device in the vehicle-mounted device, for example, information transmission can grasp the occurrence of anomalies without using other devices other than the vehicle-mounted device, and for example, processing for eliminating the cause of the anomaly can be performed more quickly.

[0039] (4) Preferably, the detection unit detects an abnormality related to transmission of at least one of the request information and the time information as an abnormality related to the time synchronization.

[0040] With such a configuration, it is possible to detect changes in the propagation delay time of the message used for time synchronization, and thus to more reliably detect abnormalities related to time synchronization.

[0041] (5) More preferably, the detection unit detects a delay or interruption in the transmission of at least one of the request information and the time information as an abnormality related to the time synchronization.

[0042] Even if a temporary delay or interruption in message transmission occurs due to communication congestion, the message will continue to be transmitted normally once the cause is resolved, without recording information related to the anomaly. Consequently, administrators and others may not be able to identify the anomaly. Thus, if the anomaly is not identified, the cause of the anomaly cannot be addressed, potentially leading to the recurrence of the same anomaly. In contrast, the above-described structure allows for the detection and recording of anomalies, even if they occur temporarily and are potentially resolvable, to address the cause.

[0043] (6) The abnormality detection method involved in the embodiment of the present disclosure is an abnormality detection method in a vehicle-mounted device, comprising the following steps: sending a request information for time information used to request an update of the propagation delay time of data between the vehicle-mounted device itself and the other device to other vehicle-mounted devices, i.e., other devices; receiving the time information sent from the other devices; updating the propagation delay time based on the received time information; performing time synchronization with the other devices based on the updated propagation delay time; and detecting an abnormality related to the time synchronization and obtaining information related to the detected abnormality.

[0044] In this way, by detecting anomalies related to time synchronization, it is possible to grasp the occurrence of anomalies and take prompt measures to eliminate the cause of the anomalies. Therefore, time synchronization between vehicle-mounted devices can be performed more stably.

[0045] (7) The abnormality detection method involved in the embodiment of the present disclosure is an abnormality detection method in a vehicle-mounted device, which performs time synchronization between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the other devices and the vehicle-mounted device itself. The abnormality detection method includes the following steps: receiving request information for time information used to request an update of the propagation delay time from the other devices; sending the time information to the other devices; and detecting abnormalities related to the time synchronization and obtaining information related to the detected abnormalities.

[0046] In this way, by using a method for detecting anomalies related to time synchronization, it is possible to grasp the occurrence of anomalies and promptly take measures to eliminate the cause of the anomaly. Consequently, time synchronization between onboard devices can be more stably achieved. Furthermore, by using a method for detecting anomalies related to time synchronization in an onboard device that is the source of time information, i.e., the onboard device that maintains the reference time in the onboard network, anomalies related to time synchronization can be more reliably detected.

[0047] (8) The abnormality detection program involved in the embodiment of the present disclosure is an abnormality detection program used in a vehicle-mounted device, which is used to enable a computer to function as the following parts: a processing unit, which sends request information for time information used to request the update of the propagation delay time of data between its own vehicle-mounted device and the other device to other vehicle-mounted devices, updates the propagation delay time based on the time information sent from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and a detection unit, which detects abnormalities related to the time synchronization and obtains information related to the detected abnormalities.

[0048] In this way, by detecting an abnormality related to time synchronization, the occurrence of an abnormality can be grasped and a response can be taken to promptly eliminate the cause of the abnormality. Therefore, time synchronization between vehicle-mounted devices can be performed more stably.

[0049] (9) The embodiment of the present disclosure involves an abnormality detection program, an abnormality detection program used in a vehicle-mounted device, which performs time synchronization between the vehicle-mounted device itself and other vehicle-mounted devices, i.e., other devices, based on the propagation delay time of data between the other devices and the other devices. The abnormality detection program is used to enable a computer to function as the following parts: a processing unit, which receives request information for time information used to request an update of the propagation delay time from the other devices and sends the time information to the other devices; and a detection unit, which detects abnormalities related to the time synchronization and obtains information related to the detected abnormalities.

[0050] In this way, by using a configuration to detect anomalies related to time synchronization, it is possible to identify the occurrence of anomalies and promptly implement measures to eliminate the cause of the anomaly. Consequently, time synchronization between onboard devices can be more stably achieved. Furthermore, by using a configuration to detect anomalies related to time synchronization in an onboard device that is the source of time information, i.e., the onboard device that maintains the reference time in the onboard network, anomalies related to time synchronization can be more reliably detected.

[0051] Hereinafter, the embodiments of the present disclosure will be described using the accompanying drawings. In addition, the same or corresponding parts in the figures are marked with the same reference numerals, and their descriptions will not be repeated. In addition, at least a part of the embodiments described below may be arbitrarily combined.

[0052] <Structure and basic movements>

[0053] [Overall structure]

[0054] Figure 1 1 is a diagram showing the configuration of an in-vehicle network system according to an embodiment of the present disclosure. Figure 1 The vehicle network system 301 is mounted on the vehicle 1 and includes a switch device 101 and a plurality of functional units 111. Figure 1 , two functional units 111A and 111B are shown as an example as the functional unit 111. The switch device 101 and each functional unit 111 are in-vehicle devices, such as an ECU (Electronic Control Unit).

[0055] The switch device 101 is connected to a plurality of functional units 111 via, for example, an Ethernet (registered trademark) cable 10 and can communicate with the plurality of functional units 111 connected thereto.

[0056] Specifically, the switch device 101 performs a relay process for relaying data from a functional unit 111 to another functional unit 111. Information is exchanged between the switch device 101 and the functional unit 111 using, for example, Ethernet frames storing IP packets.

[0057] Functional unit 111 includes an external vehicle communication ECU, sensors, cameras, a navigation device, an automatic driving processing ECU, an engine control device, an AT (Automatic Transmission) control device, an HEV (Hybrid Electric Vehicle) control device, a brake control device, a frame control device, a steering control device, and an instrument display control device.

[0058] [Switch device and main side functional parts]

[0059] (Structure of switch device)

[0060] Figure 2 : is a diagram showing the structure of a switch device according to an embodiment of the present disclosure. Figure 2The switch device 101 includes a relay unit 51, a time synchronization unit 52, a storage unit 53, and multiple communication ports 54. The relay unit 51 and the time synchronization unit 52 are implemented by processors such as a CPU (Central Processing Unit) and a DSP (Digital Signal Processor). The storage unit 53 is, for example, a nonvolatile memory.

[0061] The relay unit 51 includes a switch unit 61 and a control unit 62. The time synchronization unit 52 includes a processing unit 63, a detection unit 64, and a recording unit 65.

[0062] (Relay processing of switching devices)

[0063] Communication port 54 is, for example, a terminal that can be connected to Ethernet cable 10. Alternatively, communication port 54 may be a terminal of an integrated circuit. Each of the plurality of communication ports 54 is connected to any one of the plurality of functional units 111 via Ethernet cable 10. In this example, communication port 54A is connected to functional unit 111A, and communication port 54B is connected to functional unit 111B.

[0064] The storage unit 53 stores an address table Ta1 indicating the correspondence between the port number of the communication port 54 and the MAC (Media Access Control) address of the connection destination device.

[0065] The switch unit 61 relays data between other in-vehicle devices. Specifically, when the switch unit 61 receives an Ethernet frame transmitted from the functional unit 111 via the communication port 54 corresponding to the functional unit 111, the switch unit 61 relays the received Ethernet frame.

[0066] More specifically, the switch unit 61 identifies the port number corresponding to the destination MAC address included in the received Ethernet frame by referring to the address table Ta1 stored in the storage unit 53. The switch unit 61 then transmits the received Ethernet frame from the communication port 54 having the identified port number.

[0067] The switch device 101 updates the data propagation delay time Td1 between the master-side functional unit 111 and its own switch device 101. Here, the functional unit 111A is the master-side functional unit 111, and the functional unit 111B is the slave-side functional unit 111. The functional unit 111A holds the reference time in the in-vehicle network system 301.

[0068] (Structure of Functional Section on the Main Side)

[0069] Figure 3 : is a diagram showing the structure of the functional part on the main side according to the embodiment of the present disclosure. Figure 3The master-side functional unit 111A includes a communication unit 81A, a time synchronization unit 82A, a storage unit 83A, and a communication port 84A. The communication unit 81A and the time synchronization unit 82A are implemented by a processor such as a CPU or a DSP. The storage unit 83A is, for example, a nonvolatile memory.

[0070] The time synchronization unit 82A includes a processing unit 91A, a detection unit 92A, and a recording unit 93A. The communication port 84A is, for example, a terminal to which an Ethernet cable 10 can be connected. Alternatively, the communication port 84A may be a terminal of an integrated circuit. The communication port 84A is connected to the switch device 101 via the Ethernet cable 10.

[0071] (Update of Data Propagation Delay Time Between Master-Side Functional Units and Switching Devices)

[0072] Figure 4 This is a diagram for explaining a method of updating the propagation delay time implemented in the switching device according to the embodiment of the present disclosure.

[0073] Reference Figures 2 to 4 The processing unit 63 in the switch device 101 periodically or irregularly updates the propagation delay time Td1 of data between the functional unit 111A and the switch device 101. More specifically, the processing unit 63 transmits a request message (Pdelay_Req) to the functional unit 111A via the relay unit 51 and the communication port 54A, requesting the time information used to update the propagation delay time Td1. Hereinafter, the request message is also referred to as a "request message."

[0074] The communication unit 81A in the functional unit 111A receives the request message transmitted from the switch device 101 via the communication port 84A, and outputs the received request message to the time synchronization unit 82A.

[0075] Processing unit 91A in time synchronization unit 82A receives the request message from communication unit 81A and outputs time information (Pdelay_Resp) corresponding to the request message to communication unit 81A. Communication unit 81A transmits the time information received from processing unit 91A to switch device 101 via communication port 84A. Processing unit 91A transmits the time information including the time t2 at which the request message was received. Hereinafter, the time information is also referred to as a "response message."

[0076] After transmitting the response message, the processing unit 91A outputs a follow-up message (Pdelay_Resp_Follow_Up) including the transmission time t3 of the response message to the communication unit 81A. The communication unit 81A transmits the follow-up message received from the processing unit 91A to the switch device 101 via the communication port 84A.

[0077] The control unit 62 in the switch device 101 receives the response message and the follow-up message sent from the functional unit 111A via the communication port 54A and notifies the time synchronization unit 52 of the time t2 included in the response message and the time t3 included in the follow-up message.

[0078] The control unit 62 also notifies the time synchronization unit 52 of the request message transmission time t1 and the response message reception time t4. More specifically, the switch device 101 includes a counter (not shown). The control unit 62 notifies the time synchronization unit 52 of the count value of the counter at the time the request message is transmitted as the transmission time t1. Furthermore, the control unit 62 notifies the time synchronization unit 52 of the count value of the counter at the time the response message is received as the reception time t4.

[0079] The processing unit 63 in the time synchronization unit 52 calculates the propagation delay time Td1 of the data between the functional unit 111A and the switch device 101 based on the times t1, t2, t3, and t4 notified from the control unit 62. Specifically, the processing unit 63 calculates the propagation delay time Td1 = ((t4 - t1) - (t3 - t2)) / 2. The processing unit 63 then updates the propagation delay time Td1 stored in the storage unit 53 with the newly calculated propagation delay time Td1.

[0080] (Correction of Timing in Switching Device)

[0081] The processing unit 91A in the functional unit 111A periodically or irregularly outputs a sync (synchronization) message to the communication unit 81A. The communication unit 81A transmits the sync message received from the processing unit 91A to the switch device 101 via the communication port 84A. Furthermore, after transmitting the sync message, the processing unit 91A outputs a follow-up message (Follow_Up) to the communication unit 81A, including the transmission time tm of the sync message. The communication unit 81A transmits the follow-up message received from the processing unit 91A to the switch device 101 via the communication port 84A.

[0082] The control unit 62 in the switch device 101 receives the sync message and the follow-up message sent from the functional unit 111A via the communication port 54A. The control unit 62 then notifies the time synchronization unit 52 of the time tm included in the follow-up message. Furthermore, the control unit 62 notifies the time synchronization unit 52 of the count value of the counter at the time of sync message reception as the sync message reception time tx.

[0083] The processing unit 63 in the time synchronization unit 52 synchronizes time with the functional unit 111A based on the times tm and tx notified from the control unit 62 and the propagation delay time Td1 stored in the storage unit 53. More specifically, the processing unit 63 calculates the difference between the time of the functional unit 111A and the time of the switching device 101, namely, the time difference Tx1 = tm - Td1 - tx, based on the times tm, tx, and the propagation delay time Td1.

[0084] Then, the processing unit 63 uses the calculated time difference Tx1 to correct the time in its own switch device 101. As a result, the time synchronization between the functional unit 111A and the switch device 101 is established.

[0085] [Functional unit on the slave side]

[0086] Figure 5 1 is a diagram showing the configuration of a functional unit on the slave side according to an embodiment of the present disclosure. Figure 5 The slave-side functional unit 111B includes a communication unit 81B, a time synchronization unit 82B, a storage unit 83B, and a communication port 84B. The communication unit 81B and the time synchronization unit 82B are implemented by a processor such as a CPU or a DSP. The storage unit 83B is, for example, a nonvolatile memory.

[0087] The time synchronization unit 82B includes a processing unit 91B, a detection unit 92B, and a recording unit 93B. The communication port 84B is, for example, a terminal to which an Ethernet cable 10 can be connected. Alternatively, the communication port 84B may be a terminal of an integrated circuit. The communication port 84B is connected to the switch device 101 via the Ethernet cable 10.

[0088] Hereinafter, the storage unit 83A in the functional unit 111A and the storage unit 83B in the functional unit 111B are each referred to as the "storage unit 83." Furthermore, the detection unit 92A in the functional unit 111A and the detection unit 92B in the functional unit 111B are each referred to as the "detection unit 92." Furthermore, the recording unit 93A in the functional unit 111A and the recording unit 93B in the functional unit 111B are each referred to as the "recording unit 93."

[0089] (Update of the data propagation delay time between the switch device and the slave-side functional unit)

[0090] The slave-side functional unit 111B updates the data propagation delay time Td2 between itself and the switching device 101 .

[0091] Figure 6 This is a diagram for explaining a method of updating the propagation delay time performed by a slave-side functional unit according to an embodiment of the present disclosure.

[0092] In more detail, refer to Figure 5and Figure 6 ,and Figure 2 Similarly to the processing unit 63 in the switch device 101 shown, the processing unit 91B in the slave-side functional unit 111B periodically or irregularly updates the propagation delay time Td2 of data between the switch device 101 and its own functional unit 111B. More specifically, the processing unit 91B transmits a request message to the switch device 101 via the communication unit 81B and the communication port 84B, requesting the time information used to update the propagation delay time Td2.

[0093] Upon receiving the request message transmitted from the functional unit 111B via the communication port 54B, the control unit 62 in the switch device 101 outputs the request message to the processing unit 63 .

[0094] Upon receiving the request message from the control unit 62, the processing unit 63 transmits a response message to the request message to the functional unit 111B via the relay unit 51 and the communication port 54B. At this time, the processing unit 63 transmits the response message including the reception time t22 of the request message.

[0095] Furthermore, after transmitting the response message, the processing unit 63 transmits a follow-up message including the transmission time t13 of the response message to the functional unit 111B via the relay unit 51 and the communication port 54B.

[0096] The communication unit 81B in the functional unit 111B receives the response message and the follow-up message sent from the switch device 101 via the communication port 84. The communication unit 81B then notifies the time synchronization unit 82B of the time t12 included in the response message and the time t13 included in the follow-up message.

[0097] Furthermore, the communication unit 81B notifies the time synchronization unit 82B of the time t11 at which the request message is sent and the time t14 at which the response message is received. More specifically, the functional unit 111B includes a counter (not shown). The communication unit 81B notifies the time synchronization unit 82B of the count value of this counter at the time the request message is sent as the time t11 at which the request message is sent. Furthermore, the communication unit 81B notifies the time synchronization unit 82B of the count value of this counter at the time the response message is received as the time t14 at which the response message is received.

[0098] The processing unit 91B in the time synchronization unit 82B calculates the propagation delay time Td2 of the data between the switch device 101 and the functional unit 111B based on the times t11, t12, t13, and t14 notified by the communication unit 81B. Specifically, the processing unit 91B calculates the propagation delay time Td2 = ((t14 - t11) - (t13 - t12)) / 2. The processing unit 91B then updates the propagation delay time Td2 stored in the storage unit 83 with the newly calculated propagation delay time Td2.

[0099] (Time Correction in the Functional Unit on the Slave Side)

[0100] The processing unit 63 in the switch device 101 transmits a sync message to the slave-side functional unit 111B regularly or irregularly. After transmitting the sync message, the processing unit 63 transmits a follow-up message including the transmission time ty of the sync message to the functional unit 111B.

[0101] The communication unit 81B in the functional unit 111B receives the sync message and the follow-up message transmitted from the switch device 101 via the communication port 84B. The communication unit 81B then notifies the time synchronization unit 82B of the time ty included in the follow-up message. Furthermore, the communication unit 81B notifies the time synchronization unit 82B of the count value of the counter at the time of sync message reception as the sync message reception time ts.

[0102] The processing unit 91B in the time synchronization unit 82B synchronizes the time with the switch device 101 based on the times ty and ts notified from the communication unit 81B and the propagation delay time Td2 stored in the storage unit 83B. More specifically, the processing unit 91B calculates the difference between the time of the switch device 101 and the time of the functional unit 111B, namely, the time difference Tx2 = ty - Td2 - ts. The processing unit 91B then uses the calculated time difference Tx2 to correct the time of its own functional unit 111B.

[0103] Here, when time synchronization is established between the master-side functional unit 111A and the switch device 101, the time ty included in the follow message sent from the switch device 101 to the functional unit 111B is the time synchronized with the functional unit 111A. Consequently, the processing unit 91B in the functional unit 111B performs time adjustment, and the time synchronization between the functional unit 111B and the switch device 101 is established. Consequently, the time synchronization between the functional unit 111B and the switch device 101 is established, and as a result, the time synchronization between the functional unit 111B and the functional unit 111A is established.

[0104] [Detection of anomalies related to time synchronization]

[0105] The detection unit 64 in the switch device 101 and the detection unit 92 in the functional unit 111 detect anomalies related to time synchronization and acquire information related to the detected anomalies. Examples of anomalies related to time synchronization include anomalies in the transmission of at least one of a request message and a response message, or anomalies in the timestamp function. The following describes the details of the detection performed by the detection units 64 and 92.

[0106] (a) Detection of sudden changes in propagation delay time

[0107] The detection unit 64 in the switch device 101 detects, for example, a sudden change in the data propagation delay time Td1 between the master-side functional unit 111A and the switch device 101 as an abnormality related to time synchronization.

[0108] Figure 7 This is a diagram showing an example of a situation in which the propagation delay time of data between the primary-side functional unit and the switching device according to the embodiment of the present disclosure changes rapidly.

[0109] Reference Figure 2 and Figure 7 Here, it is assumed that at time t21, the switch device 101 sends a request message to the functional unit 111A, at time t22, the functional unit 111A receives the request message, and at time t23, the functional unit 111A sends a response message to the switch device 101. Furthermore, it is assumed that after sending the response message, the functional unit 111A sends a follow-up message to the switch device 101.

[0110] Furthermore, it is assumed that some cause causes the propagation delay time Td1 to increase rapidly between time t22 and time t23, that is, the time T2 between time t23 and time t24 is longer than the time T1 between time t21 and time t22.

[0111] Figure 2 As described above, the control unit 62 receives the response message and the follow-up message via the communication port 54A, and notifies the time synchronization unit 52 of the time t22 included in the response message and the time t23 included in the follow-up message. Furthermore, the control unit 62 notifies the time synchronization unit 52 of the time t21 at which the request message was sent and the time t24 at which the response message was received.

[0112] As described above, the processing unit 63 in the time synchronization unit 52 uses the notified times t21, t22, t23, and t24 to calculate the propagation delay time Td1 = ((t24 - t21) - (t23 - t22)) / 2. However, this equation assumes that time T1 and time T2 are equal. Therefore, if there is a difference between time T1 and time T2, an incorrect propagation delay time Td1 will be obtained.

[0113] Therefore, the detection unit 64 in the time synchronization unit 52 determines whether the propagation delay time Td1 has changed suddenly based on the times t21 , t22 , t23 , and t24 notified from the control unit 62 .

[0114] Specifically, the time T2 from time t23 to time t24 is longer than the time T1 from time t21 to time t22 by a predetermined value or more. In this case, the detector 64 determines that the propagation delay time Td1 has increased rapidly, causing a delay in the transmission of the response message between the switch device 101 and the functional unit 111A.

[0115] Then, the detection unit 64 notifies the recording unit 65 of the occurrence of a delay in the transmission of the response message as a detection result. At this time, the detection unit 64 notifies the recording unit 65 by including the time when the delay in the transmission of the response message was determined in the detection result, for example.

[0116] Similar to the detection unit 64 in the switch device 101 described above, the detection unit 92B in the slave-side functional unit 111B determines whether, for example, the propagation delay time Td2 of data between the switch device 101 and the functional unit 111B has changed suddenly.

[0117] When the detection unit 92B determines that the propagation delay time Td2 has increased rapidly and a delay has occurred in the transmission of the response message between the switch device 101 and the functional unit 111B, the detection unit 92B notifies the recording unit 93B of the delay in the transmission of the response message as a detection result.

[0118] (b) Detection of interruption of data transmitted between devices

[0119] The detection unit 64 in the switch device 101 detects, for example, an interruption in data transmitted between the switch device 101 and the functional unit 111B as an abnormality related to time synchronization.

[0120] Figure 8 This is a diagram showing an example of a situation in which an interruption occurs in data transmitted between a functional unit and a switch device according to an embodiment of the present disclosure.

[0121] Reference Figure 2 and Figure 8 Here, it is assumed that the request message sent from the functional unit 111B to the switch device 101 at time t31 is not received by the switch device 101 and is interrupted. In this case, the switch device 101 does not send a response message or a follow-up message.

[0122] Furthermore, the detection unit 64 in the switch device 101 monitors the relay unit 51 and monitors the reception status of the request message from the functional unit 111B at the switch device 101. For example, if, after the switch device 101 and the functional unit 111B exchange predetermined information for commencing communication when the in-vehicle network system 301 is activated, the request message from the functional unit 111B does not reach the switch device 101 for a period exceeding a predetermined time, the detection unit 64 determines that the request message from the functional unit 111B has been interrupted.

[0123] Then, the detection unit 64 notifies the recording unit 65 of the interruption of the request message from the functional unit 111B as a detection result. At this time, the detection unit 64 notifies the recording unit 65 by including the time when the request message from the functional unit 111B was interrupted in the detection result, for example.

[0124] Similar to the detection unit 64 in the switch device 101 described above, the detection unit 92A in the functional unit 111A on the master side determines, for example, whether an interruption has occurred in data being transferred between the functional unit 111A and the switch device 101. If the detection unit 92A determines that a data interruption has occurred, it notifies the recording unit 93A of the occurrence of the data interruption as a detection result.

[0125] (c) Detection of message sending delay

[0126] Refer again Figure 2 The detection unit 64 in the switch device 101 detects, for example, a delay in the transmission of a message from the switch device 101 as an abnormality related to time synchronization.

[0127] More specifically, the processing unit 63 is configured to periodically transmit a request message to the functional unit 111A. In this case, the detection unit 64 monitors the relay unit 51, for example, and determines that a delay in request message transmission has occurred if the processing unit 63 fails to transmit a new request message for a period of time exceeding a predetermined time.

[0128] In this case, the detection unit 64 notifies the recording unit 65 of the occurrence of a delay in sending the request message as a detection result. In this case, the detection unit 64 notifies the recording unit 65 by including the time when the delay in sending the request message was determined to have occurred in the detection result, for example.

[0129] Similar to the detection unit 64 in the switch device 101 described above, the detection unit 92 in each of the functional units 111A and 111B determines whether a transmission delay has occurred in a message from its own functional unit 111. If the detection unit 92 determines that a transmission delay has occurred in a message from its own functional unit 111, it notifies the recording unit 93 of the occurrence of the message transmission delay as a detection result.

[0130] (d) Detection of malfunctions in the timestamp function

[0131] Here, the control unit 62 checks the count value of the counter (not shown) included in the switch device 101 as described above, and notifies the time synchronization unit 52 of the message transmission time or the message reception time. In other words, the control unit 62 notifies the time using the time stamp function. If the time stamp function malfunctions, the control unit 62 cannot accurately notify the time synchronization unit 52 of the time.

[0132] For this purpose, the detection unit 64 in the switch device 101 detects, for example, a malfunction in the time stamp function in the switch device 101 as an abnormality related to time synchronization.

[0133] Specifically, the detection unit 64 checks whether the counter is operating normally, for example, periodically or irregularly. Furthermore, if the counter is not operating normally, the detection unit 64 notifies the recording unit 65 of a malfunction in the time stamp function as a detection result. In this case, the detection unit 64 includes the time when the malfunction in the time stamp function was determined to have occurred in the detection result and notifies the recording unit 65.

[0134] Similar to the detection unit 64 in the switch device 101 described above, the detection unit 92 in each of the functional units 111A and 111B determines whether a malfunction has occurred in the time stamp function of its own functional unit 111. If the detection unit 92 determines that a malfunction has occurred in the time stamp function of its own functional unit 111, it notifies the recording unit 93 of the malfunction as a detection result.

[0135] Alternatively, or in addition to the abnormalities described in (a) through (d) above, detection unit 64 or detection unit 92 may be configured to detect other types of abnormalities related to time synchronization. Furthermore, detection unit 64 or detection unit 92 may be configured to detect only a portion of the abnormalities described in (a) through (d) above.

[0136] [Record of test results]

[0137] The recording unit 65 in the switch device 101 stores information related to the abnormality detected by the detection unit 64 in the storage unit 53 based on the detection result notified from the detection unit 64. Furthermore, the recording unit 93 in the functional unit 111 stores information related to the abnormality detected by the detection unit 92 in the storage unit 83 based on the detection result notified from the detection unit 92.

[0138] More specifically, the recording unit 65 and the recording unit 93 identify the time of occurrence of the abnormality, the location of the abnormality, the cause of the abnormality, etc. based on the notified detection results. In addition, the storage unit 53 and the storage unit 83 store an error code list Ta2 indicating the correspondence between the location of the abnormality, the cause of the abnormality, and the error code.

[0139] The recording unit 65 refers to the error code list Ta2 stored in the storage unit 53 and stores the error code corresponding to the determined occurrence location and cause in the storage unit 53. In addition, the recording unit 93 refers to the error code list Ta2 stored in the storage unit 83 and stores the error code corresponding to the determined occurrence location and cause in the storage unit 83.

[0140] Figure 9 This is a diagram showing an example of a list of error codes stored in a storage unit in a switch device and a functional unit according to an embodiment of the present disclosure.

[0141] Specifically, refer to Figure 9 In the error code list Ta2, if the abnormality occurs in the switch device 101 and a malfunction in the time stamp function is the cause of the abnormality, the error code is "1." Furthermore, in the error code list Ta2, if the abnormality occurs in the master-side functional unit 111A and a malfunction in the time stamp function is the cause of the abnormality, the error code is "2." Furthermore, in the error code list Ta2, if the abnormality occurs in the slave-side functional unit 111B and a malfunction in the time stamp function is the cause of the abnormality, the error code is "3."

[0142] In the error code list Ta2, if the abnormality occurs in the switch device 101 and the cause of the abnormality is a message transmission delay, the error code is "4." In the error code list Ta2, if the abnormality occurs in the master-side functional unit 111A and the cause of the abnormality is a message transmission delay, the error code is "5." In the error code list Ta2, if the abnormality occurs in the slave-side functional unit 111B and the cause of the abnormality is a message transmission delay, the error code is "6."

[0143] Furthermore, in the error code list Ta2, if the abnormality occurs in the data propagation path between the master-side functional unit 111A and the switch device 101, and the cause of the abnormality is message propagation delay, an error code of "7" is displayed. Furthermore, in the error code list Ta2, if the abnormality occurs in the data propagation path between the slave-side functional unit 111B and the switch device 101, and the cause of the abnormality is message propagation delay, an error code of "8" is displayed.

[0144] In the error code list Ta2, if the abnormality occurs in the data transmission path between the master-side functional unit 111A and the switch device 101, and the cause of the abnormality is message interruption, the error code is "9." In the error code list Ta2, if the abnormality occurs in the data transmission path between the slave-side functional unit 111B and the switch device 101, and the cause of the abnormality is message interruption, the error code is "10."

[0145] (Specific example 1 of recorded information)

[0146] For example, the recording unit 65 in the switch device 101 receives a detection result indicating a delay in the transmission of a response message between the switch device 101 and the functional unit 111A. In this case, the recording unit 65 identifies the data transmission path between the master-side functional unit 111A and the switch device 101 as the location of the anomaly. Furthermore, the recording unit 65 identifies the message transmission delay as the cause of the anomaly. Furthermore, the recording unit 65 identifies the time included in the detection result as the time the anomaly occurred.

[0147] The recording unit 65 refers to the error code list Ta2 and stores the error code "7" corresponding to the identified occurrence location and cause and the abnormality occurrence time in the storage unit 53. The abnormality occurrence time is stored with a data length that can record nanoseconds, for example.

[0148] (Specific example 2 of recorded information)

[0149] For example, the recording unit 65 in the switch device 101 receives a detection result indicating that a request message from the functional unit 111B has been interrupted. In this case, the recording unit 65 identifies the data transmission path between the slave-side functional unit 111B and the switch device 101 as the location of the anomaly. Furthermore, the recording unit 65 identifies the message interruption as the cause of the anomaly. Furthermore, the recording unit 65 identifies the time included in the detection result as the time the anomaly occurred.

[0150] Then, the recording unit 65 refers to the error code list Ta2 and stores the error code “10” corresponding to the identified occurrence position and cause and the time of occurrence of the abnormality in the storage unit 53 .

[0151] (Specific example 3 of recorded information)

[0152] For example, recording unit 65 in switch device 101 receives a detection result indicating a delay in the transmission of a request message from its own switch device 101. In this case, recording unit 65 identifies switch device 101 as the location of the abnormality. Furthermore, recording unit 65 identifies the message transmission delay as the cause of the abnormality. Furthermore, recording unit 65 identifies the time included in the detection result as the time the abnormality occurred.

[0153] Then, the recording unit 65 refers to the error code list Ta2 and stores the error code “4” corresponding to the identified occurrence position and cause and the time of occurrence of the abnormality in the storage unit 53 .

[0154] (Specific example 4 of recorded information)

[0155] For example, the recording unit 65 in the switch device 101 receives a detection result indicating a malfunction in the timestamp function of the switch device 101. In this case, the recording unit 65 identifies the switch device 101 as the location where the malfunction occurred. Furthermore, the recording unit 65 identifies a delay in message transmission as the cause of the malfunction. Furthermore, the recording unit 65 identifies the time included in the detection result as the time the malfunction occurred.

[0156] Then, the recording unit 65 refers to the error code list Ta2 and stores the error code “1” corresponding to the identified occurrence position and cause and the time of occurrence of the abnormality in the storage unit 53 .

[0157] The recording unit 93 in the functional unit 111 operates in the same manner as the recording unit 65 in the switch device 101 described above.

[0158] Furthermore, in the switch device 101 according to the embodiment of the present disclosure, the time synchronization unit 52 includes a detection unit 64 and a recording unit 65. Specifically, the detection unit 64 is configured to detect only abnormalities related to time synchronization, but the present invention is not limited thereto. For example, the detection unit 64 and the recording unit 65 may be disposed externally to the time synchronization unit 52 and may also detect abnormalities other than those related to time synchronization and store them in the storage unit 53.

[0159] Furthermore, in the functional unit 111 according to the embodiment of the present disclosure, the time synchronization unit 82 includes a detection unit 92 and a recording unit 93. Specifically, the detection unit 92 is configured to detect only anomalies related to time synchronization, but the present invention is not limited thereto. For example, the detection unit 92 and the recording unit 93 may be disposed externally to the time synchronization unit 82 and may also detect anomalies other than those related to time synchronization and store them in the storage unit 83.

[0160] The switch device 101 may not include the recording unit 65. In this case, the detection unit 64 may notify the detection result to an external server, for example, instead of notifying the recording unit 65. Furthermore, the functional unit 111 may not include the recording unit 93. In this case, the detection unit 92 may notify the detection result to a server, etc., external to the vehicle 1, instead of notifying the recording unit 93.

[0161] <Flow of Action>

[0162] Next, the operations of the master-side functional unit 111A, the switch device 101, and the slave-side functional unit 111B in the vehicle-mounted network system 301 when updating the propagation delay time and detecting anomalies related to time synchronization will be described using the drawings.

[0163] Each device in the in-vehicle network system 301 includes a computer with memory. A CPU or other processing unit in the computer reads and executes a program containing part or all of the steps in the following sequence from the memory. The programs for each of these multiple devices can be installed externally. The programs for each of these multiple devices are distributed in a stored state on a recording medium or via a communication line.

[0164] [Operational Flow for Updating Propagation Delay Time and Detecting Errors Related to Time Synchronization]

[0165] Figure 10 This is a diagram showing a sequence of updating of propagation delay time and abnormality detection related to time synchronization performed by a plurality of in-vehicle devices in an in-vehicle network system according to an embodiment of the present disclosure.

[0166] Reference Figure 10 First, the processing unit 63 in the switch device 101 transmits a request message for requesting time information to the functional unit 111A via the relay unit 51 and the communication port 54A (step S101 ).

[0167] Next, the processing unit 91A in the functional unit 111A transmits a response message to the request message transmitted from the switch device 101 to the switch device 101. At this time, the functional unit 111A transmits the response message including the reception time t2 of the request message (step S102).

[0168] Next, after transmitting the response message, the processing unit 91A in the functional unit 111A transmits a follow-up message including the transmission time t3 of the response message to the switch device 101 (step S103 ).

[0169] Next, the detection unit 92A in the functional unit 111A detects an abnormality related to time synchronization (step S104 ).

[0170] Next, if detection unit 92A detects an anomaly related to time synchronization, such as a delay in the transmission of a response message ("Yes" in step S104), it notifies recording unit 93A of the detection result. Recording unit 93A then stores information related to the anomaly, as indicated by the detection result notified from detection unit 92A, in storage unit 83A (step S105).

[0171] On the other hand, when there is no abnormality related to time synchronization (No in step S104 ), the detection unit 92A does not notify the recording unit 93A of the detection result, for example.

[0172] Next, the control unit 62 in the switch device 101 receives the response message and the follow-up message sent from the functional unit 111A, and notifies the processing unit 63 of the time t2 included in the response message and the time t3 included in the follow-up message. Furthermore, the control unit 62 notifies the processing unit 63 of the time t1 at which the request message was sent and the time t4 at which the response message was received (step S106).

[0173] The processing unit 63 updates the data propagation delay time Td1 between the functional unit 111A and the switch device 101 based on the times t1 , t2 , t3 , and t4 notified from the control unit 62 (step S107 ).

[0174] Next, the detection unit 64 in the switch device 101 detects an abnormality related to time synchronization (step S108 ).

[0175] Next, if the detection unit 64 detects an abnormality related to time synchronization, such as a delay in the transmission of the response message ("Yes" in step S108), it notifies the detection result to the recording unit 65. The recording unit 65 then stores information related to the abnormality indicated by the detection result notified from the detection unit 64 in the storage unit 53 (step S109).

[0176] On the other hand, when there is no abnormality related to time synchronization (No in step S108 ), the detection unit 64 does not notify the recording unit 65 of the detection result, for example.

[0177] Next, the processing unit 91B in the functional unit 111B transmits a request message for requesting time information to the switch device 101 via the communication unit 81B and the communication port 84B (step S110 ).

[0178] Next, upon receiving the request message transmitted from the functional unit 111B via the communication port 54B and the control unit 62, the processing unit 63 in the switch device 101 transmits a response message to the request message to the functional unit 111B via the relay unit 51 and the communication port 54B. At this time, the processing unit 63 includes the time t12 at which the request message was received in the response message and transmits it (step S111).

[0179] Next, after transmitting the response message, the processing unit 63 transmits a follow-up message including the transmission time t13 of the response message to the functional unit 111B via the relay unit 51 (step S112 ).

[0180] Next, the communication unit 81B in the functional unit 111B receives the response message and the follow-up message sent from the switch device 101 via the communication port 84B, and notifies the time synchronization unit 82B of the time t12 included in the response message and the time t13 included in the follow-up message. Furthermore, the communication unit 81 notifies each time synchronization unit 82B of the time t11 at which the request message was sent and the time t14 at which the response message was received (step S113).

[0181] The processing unit 91B in the time synchronization unit 82B updates the data propagation delay time Td2 between the switch device 101 and the functional unit 111B based on the times t11, t12, t13, and t14 notified from the communication unit 81B (step S114).

[0182] Next, the detection unit 92B in the functional unit 111B detects an abnormality related to time synchronization (step S115 ).

[0183] Next, if the detection unit 92B detects an anomaly related to time synchronization, such as a delay in the transmission of the response message ("Yes" in step S115), it notifies the recording unit 93B of the detection result. The recording unit 93B then stores information related to the anomaly, indicated by the detection result notified from the detection unit 92B, in the storage unit 83B (step S116).

[0184] On the other hand, when there is no abnormality related to time synchronization (No in step S115 ), the detection unit 92B does not notify the recording unit 93B of the detection result, for example.

[0185] Furthermore, the operations of steps S101 to S103 may be performed after the operations of steps S104 and S105. Furthermore, the operations of steps S101 to S103 may be performed in parallel with the operations of steps S104 and S105.

[0186] In addition, the operations of step S106 and step S107 may be performed after the operations of step S108 and step S109. In addition, the operations of step S106 and step S107 may be performed in parallel with the operations of step S108 and step S109.

[0187] In addition, the operations of steps S110 to S114 may be performed after the operations of steps S115 and S116. In addition, the operations of steps S110 to S114 may be performed in parallel with the operations of steps S115 and S116.

[0188] [Operation flow when adjusting the time]

[0189] Next, the operation of the switch device 101 and the slave-side functional unit 111B when adjusting the time in the in-vehicle network system 301 will be described using the drawings.

[0190] Figure 11 This is a diagram showing a sequence of time corrections performed by a plurality of in-vehicle devices in the in-vehicle network system according to the embodiment of the present disclosure.

[0191] Reference Figure 11 First, the processing unit 91A in the functional unit 111A sends a sync message to the switch device 101 (step S121).

[0192] Next, the processing unit 91A transmits a follow message including the transmission time tm of the sync message to the switch device 101 (step S122).

[0193] Next, the control unit 62 in the switch device 101 receives the sync message and the follow message sent from the functional unit 111A via the communication port 54A, and notifies the time synchronization unit 52 of the time tm included in the follow message and the reception time tx of the sync message (step S123).

[0194] Next, the processing unit 63 in the time synchronization unit 52 calculates the time difference Tx1 = tm - Td1 - tx between the time of the functional unit 111A and the time of the switching device 101 based on the times tm and tx notified from the control unit 62 and the propagation delay time Td1 stored in the storage unit 53 .

[0195] Then, the processing unit 63 uses the calculated time difference Tx1 to correct the time in its own switch device 101. Thus, time synchronization is established between the functional unit 111A and the switch device 101 (step S124).

[0196] Next, the processing unit 63 in the switch device 101 transmits a sync message to the functional unit 111B via the communication port 54B (step S125 ).

[0197] Next, the processing unit 63 transmits a follow-up message including the transmission time ty of the sync message to the functional unit 111B via the communication port 54B (step S126 ).

[0198] Next, the communication unit 81B in the functional unit 111B receives the sync message and the follow message sent from the switch device 101 via the communication port 84B, and notifies the time synchronization unit 82B of the time ty included in the follow message and the reception time ts of the sync message (step S127).

[0199] Next, the processing unit 91B in the time synchronization unit 82B calculates the time difference Tx2=ty-Td2-ts between the time of the switching device 101 and the time of the functional unit 111B based on the time ty and ts notified from the communication unit 81B and the propagation delay time Td2 stored in the storage unit 83B.

[0200] Then, the processing unit 91B uses the calculated time difference Tx2 to correct the time in its own functional unit 111B. This synchronizes the time of the functional unit 111B with the switch device 101, and consequently, synchronizes the time of the functional unit 111B with the functional unit 111A (step S128).

[0201] Furthermore, the operations of steps S121 to S124 may be performed after the operations of steps S125 to S128. Furthermore, the operations of steps S121 to S124 may be performed in parallel with the operations of steps S125 to S128.

[0202] Therefore, each on-vehicle device in the on-vehicle network periodically updates the propagation delay time of data between on-vehicle devices according to a protocol defined in standards such as IEEE802.1, and uses the updated propagation delay time to synchronize the time between on-vehicle devices.

[0203] However, there is a possibility that anomalies related to time synchronization may occur, such as a sudden change in the propagation delay time of data between onboard devices. In such cases, problems such as a decrease in the accuracy of time synchronization may arise.

[0204] In response to this, in the switch device 101, which is an onboard device according to an embodiment of the present disclosure, the processing unit 63 transmits a request message to another onboard device, namely another device, requesting that the time information used to update the propagation delay time of data between the switch device 101 and the other device be updated. Furthermore, the processing unit 63 updates the propagation delay time based on the time information transmitted from the other device, and synchronizes the time with the other device based on the updated propagation delay time. The detection unit 64 detects an anomaly related to the time synchronization and obtains information related to the detected anomaly.

[0205] Furthermore, in the onboard device (slave-side functional unit 111B) according to an embodiment of the present disclosure, the processing unit 91B transmits a request message to another onboard device (other device) requesting that the time information used to update the propagation delay time of data between its own functional unit 111B and the other device be updated. Furthermore, the processing unit 91B updates the propagation delay time based on the time information transmitted from the other device, and synchronizes the time with the other device based on the updated propagation delay time. The detection unit 92B detects an anomaly related to time synchronization and obtains information related to the detected anomaly.

[0206] Furthermore, in the time synchronization method for the switch device 101 according to the embodiment of the present disclosure, the processing unit 63 first transmits a request message to another onboard device, i.e., another device, requesting that the time information used to update the propagation delay time of data between the switch device 101 and the other device be updated. The processing unit 63 then receives the time information transmitted from the other device. The processing unit 63 then updates the propagation delay time based on the received time information. The processing unit 63 then synchronizes the time with the other device based on the updated propagation delay time. The detection unit 64 then detects an anomaly related to time synchronization and obtains information related to the detected anomaly.

[0207] Furthermore, in the time synchronization method in the slave-side functional unit 111B according to an embodiment of the present disclosure, the processing unit 91B first transmits a request message to another onboard device, i.e., another device, for updating the time information used to propagate the data between its own functional unit 111B and the other device. The processing unit 91B then receives the time information transmitted from the other device. The processing unit 91B then updates the propagation delay time based on the received time information. The processing unit 91B then synchronizes the time with the other device based on the updated propagation delay time. The detection unit 92B then detects an anomaly related to time synchronization and obtains information related to the detected anomaly.

[0208] In this manner, by configuring a configuration to detect an abnormality related to time synchronization, it is possible to grasp the occurrence of the abnormality and take measures such as promptly performing a process to eliminate the cause of the abnormality.

[0209] Therefore, in the in-vehicle device and the time synchronization method according to the embodiment of the present disclosure, time synchronization between in-vehicle devices can be performed more stably.

[0210] Furthermore, based on the propagation delay of data between the onboard device (i.e., the master-side functional unit 111A) and another onboard device (i.e., another device) according to an embodiment of the present disclosure, time synchronization is performed between the functional unit 111A and the other device. Within the functional unit 111A, the processing unit 91A receives a request message from the other device requesting time information used to update the propagation delay, and transmits the time information to the other device. The detection unit 92A detects an anomaly related to time synchronization and obtains information related to the detected anomaly.

[0211] Furthermore, in the time synchronization method in the master-side functional unit 111A according to an embodiment of the present disclosure, the processing unit 91A first receives a request for time information used to update the propagation delay time from another onboard device, i.e., another device. The processing unit 91A then transmits the time information to the other device. The detection unit 92A then detects an anomaly related to time synchronization and obtains information related to the detected anomaly.

[0212] In this manner, by configuring a configuration to detect an abnormality related to time synchronization, it is possible to grasp the occurrence of the abnormality and take measures such as promptly performing a process to eliminate the cause of the abnormality.

[0213] Therefore, in the in-vehicle device and the time synchronization method according to the embodiment of the present disclosure, time synchronization between in-vehicle devices can be performed more stably.

[0214] Furthermore, by configuring the function unit 111A, which is the source of the time information transmission, to detect an abnormality related to time synchronization in the in-vehicle device that holds the reference time in the in-vehicle network system 301 , an abnormality related to time synchronization can be detected more reliably.

[0215] The above embodiments should be considered in all respects as illustrative and non-restrictive. The scope of the present invention is indicated by the claims rather than the above description, and is intended to include all modifications within the meaning and scope equivalent to the claims.

[0216] The above description includes the following additional features.

[0217] [Note 1]

[0218] A vehicle-mounted device comprising:

[0219] a processing unit that transmits, to another on-vehicle device, requesting time information used to update a propagation delay time of data between the on-vehicle device itself and the other device, updates the propagation delay time based on the time information transmitted from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and

[0220] a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly;

[0221] The detection unit is capable of detecting an abnormality other than the abnormality related to the time synchronization, in addition to detecting the abnormality related to the time synchronization.

[0222] The vehicle-mounted device further includes a recording unit that stores information related to the abnormality detected by the detection unit in a storage unit.

[0223] The recording unit stores at least one of an abnormality occurrence time, an abnormality occurrence location, and an abnormality cause in the storage unit as information related to the abnormality.

[0224] [Note 2]

[0225] An on-vehicle device synchronizes time between the on-vehicle device and another on-vehicle device (i.e., another device) based on a propagation delay time of data between the on-vehicle device and the other device, and comprises:

[0226] a processing unit that receives, from the other device, request information for requesting time information used for updating the propagation delay time, and transmits the time information to the other device; and

[0227] a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly;

[0228] The vehicle-mounted device maintains a reference time in the vehicle-mounted network.

[0229] The detection unit is capable of detecting an abnormality other than the abnormality related to the time synchronization, in addition to detecting the abnormality related to the time synchronization.

[0230] The vehicle-mounted device further includes a recording unit that stores information related to the abnormality detected by the detection unit in a storage unit.

[0231] The recording unit stores at least one of an abnormality occurrence time, an abnormality occurrence location, and an abnormality cause in the storage unit as information related to the abnormality.

[0232] Description of Reference Numerals

[0233] 1 vehicle

[0234] 10 Ethernet cables

[0235] 51 Relay Department

[0236] 52, 82A, 82B time synchronization unit

[0237] 53, 83, 83A, 83B storage unit

[0238] Communication ports 54, 54A, 54B, 84A, and 84B

[0239] 61 Switch Department

[0240] 62 Control Department

[0241] 63, 91A, 91B processing department

[0242] 64, 92, 92A, 92B detection units

[0243] 65, 93, 93A, 93B Recording Department

[0244] 81A, 81B Communications Department

[0245] 101 switchgear

[0246] 111, 111A, 111B functional units

[0247] 301 vehicle network system.

Claims

1. A vehicle-mounted device comprising: a processing unit that transmits, to the other device, request information for requesting update of time information used for propagation delay time of data between the vehicle-mounted device itself and the other vehicle-mounted device, i.e., the other device, updates the propagation delay time based on the time information transmitted from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly; The detection unit is capable of detecting an abnormality related to the transmission of at least one of the request information and the time information and an abnormality related to the time stamp function as an abnormality related to the time synchronization. The in-vehicle device further includes a recording unit that stores information related to the abnormality detected by the detection unit and capable of identifying the type of the abnormality in a storage unit in the in-vehicle device itself.

2. An on-vehicle device that synchronizes time between the on-vehicle device and another on-vehicle device (i.e., another device) based on a propagation delay time of data between the on-vehicle device and the other device, and comprises: a processing unit that receives, from the other device, request information for requesting time information used for updating the propagation delay time, and transmits the time information to the other device; and a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly; The detection unit is capable of detecting an abnormality related to the transmission of at least one of the request information and the time information and an abnormality related to the time stamp function as an abnormality related to the time synchronization. The in-vehicle device further includes a recording unit that stores information related to the abnormality detected by the detection unit and capable of identifying the type of the abnormality in a storage unit in the in-vehicle device itself.

3. The vehicle-mounted device according to claim 1 or 2, wherein: The detection unit detects a delay or interruption in the transmission of at least one of the request information and the time information as an abnormality related to the time synchronization.

4. A method for detecting anomalies in a vehicle-mounted device, comprising the following steps: transmitting, to the other device, request information for requesting update of time information used for data propagation delay time between the vehicle-mounted device itself and the other vehicle-mounted device; receiving the time information sent from the other device; updating the propagation delay time based on the received time information; Performing time synchronization with the other device based on the updated propagation delay time; and detecting an anomaly associated with the time synchronization, obtaining information associated with the detected anomaly, In the step of detecting anomalies, anomalies related to the transmission of at least one of the request information and the time information and anomalies related to a time stamp function can be detected as anomalies related to the time synchronization. The abnormality detection method further includes the step of storing information related to the detected abnormality and capable of identifying the type of the abnormality in a storage unit in the vehicle-mounted device.

5. A method for detecting anomalies in an on-board device, wherein the method synchronizes the time between the on-board device and another on-board device (i.e., another device) based on a propagation delay of data between the on-board device and the other on-board device, the method comprising the following steps: receiving, from the other device, request information for requesting time information used for updating the propagation delay time; sending the time information to the other device; and detecting an anomaly associated with said time synchronization, obtaining information associated with the detected anomaly, In the step of detecting anomalies, anomalies related to the transmission of at least one of the request information and the time information and anomalies related to a time stamp function can be detected as anomalies related to the time synchronization. The abnormality detection method further includes the step of storing information related to the detected abnormality and capable of identifying the type of the abnormality in a storage unit in the vehicle-mounted device.

6. An abnormality detection program product, comprising an abnormality detection program for use in an in-vehicle device, configured to cause a computer to function as: a processing unit that transmits, to the other device, request information for requesting update of time information used for propagation delay time of data between the vehicle-mounted device itself and the other vehicle-mounted device, i.e., the other device, updates the propagation delay time based on the time information transmitted from the other device, and synchronizes the time with the other device based on the updated propagation delay time; and a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly, The detection unit is capable of detecting an abnormality related to the transmission of at least one of the request information and the time information and an abnormality related to the time stamp function as an abnormality related to the time synchronization. The abnormality detection program is further configured to cause the computer to function as a recording unit that stores information related to the abnormality detected by the detection unit and capable of identifying the type of the abnormality in a storage unit in the vehicle-mounted device.

7. An anomaly detection program product, comprising an anomaly detection program for use in an on-vehicle device, which synchronizes the time between the on-vehicle device and another on-vehicle device (i.e., another device) based on a propagation delay time of data between the on-vehicle device and the other device, wherein the anomaly detection program causes a computer to function as: a processing unit that receives, from the other device, request information for requesting time information used for updating the propagation delay time, and transmits the time information to the other device; and a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly, The detection unit is capable of detecting an abnormality related to the transmission of at least one of the request information and the time information and an abnormality related to the time stamp function as an abnormality related to the time synchronization. The abnormality detection program is further configured to cause the computer to function as a recording unit that stores information related to the abnormality detected by the detection unit and capable of identifying the type of the abnormality in a storage unit in the vehicle-mounted device.

8. An in-vehicle network system comprising a first in-vehicle device and a second in-vehicle device, The first vehicle-mounted device transmits, to the second vehicle-mounted device, request information for requesting time information used to update a propagation delay time of data between the first vehicle-mounted device and the second vehicle-mounted device. The second vehicle-mounted device receives the request information and sends the time information to the first vehicle-mounted device. The first vehicle-mounted device updates the propagation delay time based on the time information received from the second vehicle-mounted device, and synchronizes the time with the second vehicle-mounted device based on the updated propagation delay time. The first vehicle-mounted device and the second vehicle-mounted device each include a storage unit, and each detects anomalies related to the time synchronization and stores information related to the detected anomalies and capable of identifying the first vehicle-mounted device, the second vehicle-mounted device, and the path between the first vehicle-mounted device and the second vehicle-mounted device as the location where the anomaly occurs in the storage unit.

9. A method for detecting anomalies in an in-vehicle network system, wherein the in-vehicle network includes a first in-vehicle device and a second in-vehicle device each including a storage unit, the method comprising the following steps: The first vehicle-mounted device transmits, to the second vehicle-mounted device, request information for requesting time information used to update a propagation delay time of data between the first vehicle-mounted device and the second vehicle-mounted device; The second vehicle-mounted device receives the request information and sends the time information to the first vehicle-mounted device; The first vehicle-mounted device updates the propagation delay time based on the time information received from the second vehicle-mounted device, and synchronizes the time with the second vehicle-mounted device based on the updated propagation delay time; The first vehicle-mounted device detects an abnormality related to the time synchronization and stores information related to the detected abnormality and capable of identifying the first vehicle-mounted device, the second vehicle-mounted device, and a path between the first vehicle-mounted device and the second vehicle-mounted device as a location where the abnormality occurs in the storage unit thereof; and The second vehicle-mounted device detects an abnormality related to the time synchronization and stores information related to the detected abnormality and capable of identifying the first vehicle-mounted device, the second vehicle-mounted device, and the path between the first vehicle-mounted device and the second vehicle-mounted device as the location of the abnormality in its own storage unit.

Images