Communication system

Abstract

The present invention relates to a communication system. The purpose of the present invention is to improve abnormality detection accuracy in a communication system. An ECU (3) receives power supply from a battery (7) via an electronic fuse (15). The ECU (5) is connected so as to be able to transmit and receive frames to and from the ECU (3). The ECU (2) controls the operation of the electronic fuse (15). The ECUs (3, 5) store a diagnostic mask table (45). A diagnostic mask table (45) sets one or more combinations of a communication group, an ECU in which power supply via electronic fuses (15, 16) is cut off, an ECU in a sleep state, and a CANID of a CAN frame that is not received. The ECU (2) determines a startup group on the basis of the acquired startup trigger information. The ECU (2) transmits a frame indicating the determined startup group to ECUs (3, 5).

Description

Technical Field

[0001] The present disclosure relates to a communication system including a plurality of electronic control devices. Background Art

[0002] Patent document 1 describes an in-vehicle network system, which includes a power relay for independently switching the power supply of each of a plurality of electronic control devices on / off, and determines the control content of switching the power supply of a specific electronic control device on / off for a specific electronic control device corresponding to a scenario determined based on the condition of the vehicle, and uses the power relay to switch the power supply supplied to the specific electronic control device on / off based on the determined control content.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2015-81021

[0004] As a result of detailed studies by the inventors, a problem has been discovered in which an abnormality indicating a communication interruption is erroneously detected, thereby reducing the accuracy of abnormality detection, in a communication system that includes a plurality of electronic control devices and is configured to switch on / off power to the plurality of electronic control devices. Summary of the invention

[0005] An object of the present disclosure is to improve the accuracy of abnormality detection in a communication system.

[0006] One aspect of the present disclosure is a communication system (1) including a plurality of electronic control devices (2 to 6) connected to be able to transmit and receive communication frames.

[0007] The plurality of electronic control devices each belong to at least one of the plurality of communication groups. The communication system is configured to be able to switch one or more electronic control devices belonging to a communication group between an awake state and a sleep state individually and collectively for each communication group.

[0008] The plurality of electronic control devices include a first control device (3), a second control device (5), and a third control device (2).

[0009] The first control device receives power supply from a power supply (7) via a power supply switching unit (15), which is configured to switch between an on state for conducting a power supply path and an off state for interrupting the power supply path.

[0010] The second control device is connected to be able to transmit and receive communication frames with the first control device.

[0011] The third control device is connected to be able to transmit and receive communication frames with the first control device and the second control device, and is configured to control the operation of the power supply switching unit.

[0012] The first control device and the second control device store a diagnosis mask table (45).

[0013] The diagnostic mask table sets one or more start / stop combinations, which are a combination of a communication group, an electronic control device whose power supply via the power supply switching unit is cut off, i.e., a cut-off device, and an electronic control device that is in a sleep state, i.e., a sleep device, and identification information of a communication frame that is not received, i.e., a non-received frame. In other words, a non-received frame is a communication frame that is no longer sent from the electronic control device (i.e., the cut-off device or the sleep device) due to the cut-off of the power supply or the transition to the sleep state.

[0014] The third control device includes a group determination unit (S20) and an activation group transmission unit (S30).

[0015] The group determination unit is configured to determine the activation group based on the acquired activation trigger information when acquiring activation trigger information for determining the communication group to enter the awake state. The group determination unit may determine the service to be started based on the activation trigger information and determine the activation group corresponding to the service.

[0016] The activation group transmission unit is configured to transmit a management frame, which is a communication frame indicating the activation group determined by the group determination unit, to the first control device and the second control device.

[0017] In the communication system of the present disclosure thus constructed, the second control device can identify the combination of the above-mentioned disconnection device and the non-receiving frame identification information, and the combination of the above-mentioned sleeping device and the non-receiving frame identification information by referring to the diagnostic mask table based on the startup group indicated by the management frame received from the third control device. Therefore, even if the second control device is unable to receive communication frames from the first control device because the power supply via the power supply switching unit is cut off in the first control device, it is possible to suppress the occurrence of an abnormality in which a communication interruption is judged to have occurred in the first control device. Furthermore, even if the second control device is unable to receive communication frames from the first control device that has entered the sleep state, it is possible to suppress the occurrence of an abnormality in which a communication interruption is judged to have occurred in the first control device. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0018] Another aspect of the present disclosure is a communication system (1) including a plurality of electronic control devices (2 to 6) connected to be able to transmit and receive communication frames.

[0019] The plurality of electronic control devices each belong to at least one of the plurality of communication groups. The communication system is configured to be able to switch one or more electronic control devices belonging to a communication group between an awake state and a sleep state individually and collectively for each communication group.

[0020] The plurality of electronic control devices include a first control device (3), a second control device (5), and a third control device (2).

[0021] The third control device stores a diagnostic mask table (27).

[0022] The diagnostic mask table sets one or more start-stop combinations, which are a communication group, an electronic control device whose power supply is cut off via a power supply switching unit, i.e., a cut-off device, an electronic control device that is in a sleep state, i.e., a sleep device, and identification information of a communication frame that is not received, i.e., a non-received frame identification information.

[0023] The third control device includes a group determination unit (S220) and a sleep mask information transmission unit (S230).

[0024] The group determination unit is configured to determine the activation group based on the acquired activation trigger information when the activation trigger information for determining the activation group, which is the communication group to be in the awake state, is acquired.

[0025] The sleep mask information transmitting unit is configured to transmit, as the diagnosis mask information, the start / stop combination corresponding to the start group determined by the group determining unit to the first control device and the second control device.

[0026] In the communication system of the present disclosure thus constructed, the second control device can identify the combination of the above-mentioned disconnection device and the non-receiving frame identification information, and the combination of the above-mentioned sleeping device and the non-receiving frame identification information, based on the diagnostic shielding information received from the third control device. Therefore, even if the second control device is unable to receive communication frames from the first control device due to the power supply being cut off via the power supply switching unit in the first control device, it is possible to suppress the occurrence of an abnormality in which a communication interruption is judged to have occurred in the first control device. Furthermore, even if the second control device is unable to receive communication frames from the first control device that has entered a sleeping state, it is possible to suppress the occurrence of an abnormality in which a communication interruption is judged to have occurred in the first control device. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0027] Still another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to be able to transmit and receive communication frames.

[0028] The plurality of electronic control devices each belong to at least one of the plurality of communication groups. The communication system is configured to be able to switch one or more electronic control devices belonging to a communication group between an awake state and a sleep state individually and collectively for each communication group.

[0029] The plurality of electronic control devices include a first slave control device (108), a second slave control device (109), a regional control device (104), and a central control device (101).

[0030] The first slave control device receives power supply from a power supply (117) via a power supply switching unit (195) configured to switch between an on state for conducting a power supply path and an off state for interrupting the power supply path.

[0031] The second slave control device is connected so as to be able to transmit and receive communication frames with the first slave control device.

[0032] The zone control device is connected to be able to transmit and receive communication frames with the first slave control device and the second slave control device, and is configured to control the operation of the power supply switching unit.

[0033] The central control device is connected so as to be able to send and receive communication frames with the regional control devices.

[0034] The zone control device, the first slave control device, and the second slave control device store a diagnostic mask table (207, 287). The diagnostic mask table sets one or more start / stop combinations, which are a combination of a communication group, an electronic control device whose power supply via a power supply switching unit is cut off, namely, a cut-off device, an electronic control device in a sleep state, namely, a sleep device, and identification information of a communication frame not received, namely, non-receiving frame identification information.

[0035] The central control device includes a group determination unit (S320) and an activation group transmission unit (S330).

[0036] The group determination unit is configured to determine the activation group based on the acquired activation trigger information when the activation trigger information for determining the activation group, which is the communication group to be in the awake state, is acquired.

[0037] The activation group transmission unit is configured to transmit a management frame, which is a communication frame indicating the activation group determined by the group determination unit, to the area control device.

[0038] The area control device includes a frame transfer unit (S420).

[0039] The frame transfer unit is configured to transfer the management frame received from the central control device to the first slave control device and the second slave control device.

[0040] In the communication system of the present disclosure thus constructed, the second slave control device can identify the combination of the above-mentioned disconnection device and the non-receiving frame identification information, and the combination of the above-mentioned sleep device and the non-receiving frame identification information by referring to the diagnostic mask table based on the startup group indicated by the management frame received from the regional control device. Therefore, even if the second slave control device is unable to receive communication frames from the first slave control device due to the power supply being cut off via the power supply switching unit in the first slave control device, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. Furthermore, even if the second slave control device is unable to receive communication frames from the first slave control device that has entered the sleep state, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0041] Still another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to be able to transmit and receive communication frames.

[0042] The plurality of electronic control devices include a first slave control device (108), a second slave control device (109), a regional control device (104), and a central control device (101).

[0043] The central control unit stores a diagnostic mask table (167).

[0044] The diagnostic mask table sets one or more start-stop combinations, which are a communication group, an electronic control device whose power supply is cut off via a power supply switching unit, i.e., a cut-off device, an electronic control device that is in a sleep state, i.e., a sleep device, and identification information of a communication frame that is not received, i.e., a non-received frame identification information.

[0045] The central control device includes a group determination unit (S620) and a sleep mask information transmission unit (S630).

[0046] The group determination unit is configured to determine the activation group based on the acquired activation trigger information when the activation trigger information for determining the activation group, which is the communication group to be in the awake state, is acquired.

[0047] The sleep mask information transmitting unit is configured to transmit, as the diagnosis mask information, the start-stop combination corresponding to the start group determined by the group determining unit to the zone control device.

[0048] The area control device includes a mask information transmitting unit (S720).

[0049] The mask information transmitting unit is configured to transmit the diagnosis mask information received from the central control device to the first slave control device and the second slave control device.

[0050] In the communication system of the present disclosure thus constructed, the second slave control device can identify the combination of the above-mentioned disconnection device and the non-receiving frame identification information, and the combination of the above-mentioned sleeping device and the non-receiving frame identification information, based on the diagnostic shielding information received from the regional control device. Therefore, even if the second slave control device cannot receive communication frames from the first slave control device because the power supply via the power supply switching unit is cut off in the first slave control device, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. Furthermore, even if the second slave control device cannot receive communication frames from the first slave control device that has entered the sleep state, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0051] Still another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to be able to transmit and receive communication frames.

[0052] The plurality of electronic control devices include a first slave control device (108), a second slave control device (109), a regional control device (104), and a central control device (101).

[0053] The zone control device, the first slave control device, and the second slave control device store a diagnostic mask table (207, 287). The diagnostic mask table sets one or more start / stop combinations for the first slave control device and the second slave control device that are subordinate to the zone control device, the start / stop combination being a combination of setting a communication group, an electronic control device whose power supply via a power supply switching unit is cut off, i.e., a cut-off device, an electronic control device that is in a sleep state, i.e., a sleep device, and identification information of a communication frame that is not received, i.e., non-receiving frame identification information.

[0054] The central control device includes a group determination unit (S320) and an activation group transmission unit (S330).

[0055] The group determination unit is configured to determine the activation group based on the acquired activation trigger information when the activation trigger information for determining the activation group, which is the communication group to be in the awake state, is acquired.

[0056] The activation group transmission unit is configured to transmit a management frame, which is a communication frame indicating the activation group determined by the group determination unit, to the area control device.

[0057] The area control device includes a frame transfer unit (S420).

[0058] The frame transfer unit is configured to transfer the management frame received from the central control device to the first slave control device and the second slave control device.

[0059] In the communication system of the present disclosure thus constructed, the second slave control device can identify the combination of the above-mentioned disconnection device and the non-receiving frame identification information, and the combination of the above-mentioned sleep device and the non-receiving frame identification information by referring to the diagnostic mask table based on the startup group indicated by the management frame received from the regional control device. Therefore, even if the second slave control device is unable to receive communication frames from the first slave control device due to the power supply being cut off via the power supply switching unit in the first slave control device, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. Furthermore, even if the second slave control device is unable to receive communication frames from the first slave control device that has entered the sleep state, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0060] Still another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to be able to transmit and receive communication frames.

[0061] The plurality of electronic control devices include a first slave control device (108), a second slave control device (109), a regional control device (104), and a central control device (101).

[0062] Still another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to be able to transmit and receive communication frames.

[0063] The plurality of electronic control devices include a first slave control device (108), a second slave control device (109), a regional control device (104), and a central control device (101).

[0064] The regional control device stores a diagnostic mask table (207). The diagnostic mask table sets one or more start / stop combinations for the first slave control device and the second slave control device that are subordinate to the regional control device, the start / stop combination being a combination of setting a communication group, an electronic control device whose power supply via the power supply switching unit is cut off, i.e., a cut-off device, and an electronic control device that is in a sleep state, i.e., a sleep device, and identification information of a communication frame not to be received, i.e., non-receiving frame identification information.

[0065] The central control device includes a group determination unit (S620) and an activation group transmission unit (S632).

[0066] The group determination unit is configured to determine the activation group based on the acquired activation trigger information when the activation trigger information for determining the activation group, which is the communication group to be in the awake state, is acquired.

[0067] The activation group transmission unit is configured to transmit a management frame, which is a communication frame indicating the activation group determined by the group determination unit, to the area control device.

[0068] The zone control device includes a sleep mask information transmitting unit (S920).

[0069] The sleep mask information transmitting unit is configured to transmit, as the diagnosis mask information, an activation / stop combination corresponding to the activation group indicated by the management frame received from the central control device to the first slave control device and the second slave control device.

[0070] In the communication system of the present disclosure thus constructed, the second slave control device can identify the combination of the above-mentioned disconnection device and the non-receiving frame identification information, and the combination of the above-mentioned sleeping device and the non-receiving frame identification information, based on the diagnostic shielding information received from the regional control device. Therefore, even if the second slave control device cannot receive communication frames from the first slave control device due to the power supply being cut off via the power supply switching unit in the first slave control device, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. Furthermore, even if the second slave control device cannot receive communication frames from the first slave control device that has entered the sleeping state, it is possible to suppress the occurrence of an abnormal situation in which a communication interruption is judged to have occurred in the first slave control device. BRIEF DESCRIPTION OF THE DRAWINGS

[0071] Figure 1 It is a block diagram showing the configuration of the communication system according to the first embodiment.

[0072] Figure 2 This is an explanatory diagram illustrating the belonging information and the activation information.

[0073] Figure 3 1 is a flowchart showing the startup management process according to the first embodiment.

[0074] Figure 4 is a flowchart showing the diagnostic mask processing.

[0075] Figure 5 It is a block diagram showing the configuration of a communication system according to the second embodiment.

[0076] Figure 6 : is a flowchart showing the activation management process according to the second embodiment.

[0077] Figure 7 This is a diagram showing the structure of a startup table and a diagnosis mask table.

[0078] Figure 8 It is a block diagram showing the configuration of a communication system according to the third embodiment.

[0079] Fig. 9It is a diagram showing the correspondence between control objects and clusters.

[0080] Fig.10 It is a block diagram showing the configuration of a communication system according to a fourth embodiment.

[0081] Fig.11 This is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to a fourth embodiment.

[0082] Fig.12 This is a first block diagram showing the configuration of a zone ECU according to the fourth embodiment.

[0083] Fig.13 This is a second block diagram showing the configuration of the zone ECU according to the fourth embodiment.

[0084] Fig.14 It is a block diagram showing the structure of a slave ECU according to the fourth embodiment.

[0085] Fig.15 It is a diagram showing the structure of a startup table according to the fourth embodiment.

[0086] Fig.16 It is a diagram showing the structure of a diagnosis mask table according to the fourth embodiment.

[0087] Fig.17 This is a flowchart showing the central management process according to the fourth embodiment.

[0088] Fig.18 This is a flowchart showing the area management process according to the fourth embodiment.

[0089] Fig.19 This is a flowchart showing the slave management process according to the fourth embodiment.

[0090] Fig. 20 This is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to a fifth embodiment.

[0091] Fig.21 This is a first block diagram showing the configuration of a zone ECU according to the fifth embodiment.

[0092] Fig. 22 This is a second block diagram showing the configuration of the zone ECU according to the fifth embodiment.

[0093] Fig.23 This is a block diagram showing the structure of a slave ECU according to the fifth embodiment.

[0094] Fig.24 This is a flowchart showing the central management process according to the fifth embodiment.

[0095] Fig.25This is a flowchart showing the area management process according to the fifth embodiment.

[0096] Fig.26 This is a flowchart showing the slave management process according to the fifth embodiment.

[0097] Fig. 27 It is a diagram showing the structure of a startup table according to the sixth embodiment.

[0098] Fig.28 This is a first block diagram showing the configuration of a zone ECU according to the sixth embodiment.

[0099] Fig.29 This is a second block diagram showing the configuration of the zone ECU according to the sixth embodiment.

[0100] Fig.30 It is a diagram showing the structure of a diagnosis mask table according to the sixth embodiment.

[0101] Fig.31 This is a flowchart showing the central management process according to the sixth embodiment.

[0102] Fig.32 1 is a flowchart showing the area management process according to the sixth embodiment.

[0103] Fig.33 This is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to the seventh embodiment.

[0104] Fig.34 This is a first block diagram showing the configuration of a zone ECU according to the seventh embodiment.

[0105] Fig.35 This is a second block diagram showing the configuration of the zone ECU according to the seventh embodiment.

[0106] Fig.36 This is a flowchart showing the central management process according to the seventh embodiment.

[0107] Fig.37 This is a flowchart showing the area management process according to the seventh embodiment. DETAILED DESCRIPTION

[0108] [First embodiment]

[0109] The following is a first embodiment of the present disclosure and the attached Figure 1 Let me explain.

[0110] The communication system 1 of this embodiment is installed in a vehicle, such as Figure 1As shown, the master ECU 2, slave ECUs 3, 4, 5, 6, and a battery 7 are provided. ECU is an abbreviation of Electronic Control Unit. Hereinafter, the master ECU 2 and the slave ECUs 3, 4, 5, 6 are also collectively referred to as nodes.

[0111] The master ECU 2 and the slave ECUs 3 , 4 , 5 are connected via a communication bus 8 so as to be able to perform data communication with each other.

[0112] The master ECU 2 and the slave ECU 6 are connected via a communication bus 9 so as to be able to perform data communication with each other.

[0113] The battery 7 supplies electric power to various parts of the vehicle at a DC battery voltage (eg, 12 V). The master ECU 2 and the slave ECUs 3 to 6 receive electric power from the battery 7 and operate.

[0114] The main ECU 2 includes a control unit 11, CAN communication units 12 and 13, a storage unit 14, and electronic fuses 15 and 16. CAN is an abbreviation for Controller Area Network.

[0115] The control unit 11 is an electronic control device centered around a microcomputer having a CPU 21, a ROM 22, and a RAM 23. The various functions of the microcomputer are realized by the CPU 21 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 22 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 21 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 11 may be one or more.

[0116] The CAN communication unit 12 communicates with the slave ECUs 3 , 4 , and 5 connected to the communication bus 8 by transmitting and receiving communication frames based on the CAN communication protocol.

[0117] The CAN communication unit 13 communicates with the slave ECU 6 connected to the communication bus 9 by transmitting and receiving communication frames based on the CAN communication protocol. Hereinafter, the communication frame of the CAN is referred to as a CAN frame.

[0118] The storage unit 14 is a storage device for storing various data. The storage unit 14 stores a startup table 25 described later.

[0119] The electronic fuse 15 is arranged on the power supply path between the battery 7 and the slave ECU 3. The electronic fuse 16 is arranged on the power supply path between the battery 7 and the slave ECU 4.

[0120] The electronic fuses 15 and 16 include a switch element (e.g., MOSFET) and a control circuit. The control circuit of the electronic fuses 15 and 16 is configured to cut off the power supply path by switching the switch element from the on state to the off state when the current value flowing through the power supply path exceeds a preset overcurrent judgment value.

[0121] The control circuits of the electronic fuses 15 and 16 are configured to turn on or off the switching elements in accordance with a command from the control unit 11 , thereby opening or shutting off the power supply path.

[0122] The slave ECUs 3 to 6 include a control unit 31 , a CAN communication unit 32 , and a storage unit 33 .

[0123] The control unit 31 is an electronic control device centered around a microcomputer having a CPU 41, a ROM 42, and a RAM 43. The various functions of the microcomputer are realized by the CPU 41 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 42 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 41 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 31 may be one or more.

[0124] The CAN communication unit 32 of the slave ECUs 3 to 5 communicates with the communication devices (that is, the master ECU 2 and the slave ECUs 3 to 5 ) connected to the communication bus 8 based on the CAN communication protocol.

[0125] The CAN communication unit 32 of the slave ECU 6 communicates with a communication device (that is, the master ECU 2 ) connected to the communication bus 9 based on the CAN communication protocol.

[0126] The storage unit 33 is a storage device for storing various data. The storage unit 33 stores a diagnosis mask table 45 described later.

[0127] The CAN frame consists of a frame start, an arbitration field, a control field, a data field, a CRC field, an ACK field, and a frame end. It should be noted that the arbitration field consists of an 11-bit or 29-bit identifier (ie, ID) and a 1-bit RTR bit.

[0128] An 11-bit identifier used in CAN communication is called a CAN ID. The CAN ID is set in advance based on the content of data included in a CAN frame, a transmission source of the CAN frame, a transmission destination of the CAN frame, and the like.

[0129] The data field is a payload consisting of first data, second data, third data, fourth data, fifth data, sixth data, seventh data and eighth data of 8 bits each (ie, 1 byte).

[0130] The communication system 1 forms a local network, which is a power supply control method for communication control based on the CAN protocol standard specified in ISO11898-6. Therefore, the communication system 1 realizes low power consumption by independently moving one or more nodes belonging to the communication group to the awake state (i.e., the start state) or the sleep state (i.e., the dormant state) according to each communication group described later. The node becomes a normal operation state in which the functions assigned to the node can be used without restriction by waking up, and becomes a low-power operation state in which the functions that can be used are limited by sleeping.

[0131] In the communication system 1, when waking up a node in a sleep state, a CAN frame including startup information specifying a startup group, namely, an NM frame is used. NM is an abbreviation for Network Management.

[0132] For example Figure 2 The startup information is set as shown. DLC is the abbreviation of Data Length Code, which is an area that indicates the size of the data field in the CAN frame in bytes. That is, the startup information is stored in the data field of the CAN frame. Here, in order to simplify the description, the case where DLC is 1 byte (i.e., 8 bits) is shown. Each bit of the 8-bit data representing the startup information corresponds to the startup group.

[0133] In the activation information set in the NM frame, the bit corresponding to the activation group to be activated is set to 1.

[0134] Each node (i.e., master ECU 2 and slave ECUs 3 to 6) stores the belonging information indicating the startup group to which the node belongs. The belonging information has the same data length as the startup information, and the allocation of each bit is also the same as the startup information. In addition, in the belonging information, the bit corresponding to the startup group to which the node belongs is set to 1.

[0135] Each node determines whether the communication group to which the node belongs is the startup target by comparing the startup information extracted from the NM frame with the belonging information stored in the node.

[0136] For example, Figure 2 The shown belonging information indicates belonging to the first communication group, the third communication group, and the fifth communication group. Figure 2 The activation information shown indicates that the second communication group, the third communication group, the fourth communication group and the fifth communication group are activated. The third communication group and the fifth communication group are included in Figure 2Since both the belonging information and the activation information are shown, this node determines that this node is the activation target of the third communication group and the fifth communication group.

[0137] The start trigger information includes a plurality of NM frames and a plurality of event generation information. The event generation information is information indicating that a preset event has occurred. For example, in the case where the slave ECU 6 is a door control ECU, when the door switch becomes turned on, the slave ECU 6 sends information indicating that the door is opened (hereinafter referred to as the door opening event) as the above-mentioned event generation information to the master ECU 2.

[0138] exist Figure 1 In the startup table 25 shown, Figure 7 As shown in FIG. 1 , a communication group to be activated (ie, activation group) is set for each event. For example, the activation table 25 sets the first communication group as the activation group for a door opening event.

[0139] In the activation table 25, the correspondence between the activation groups and the electronic fuses that are turned on (hereinafter referred to as conduction fuses) is also set.

[0140] The startup table 25 is set, for example, so that when the startup group is the first communication group, the conduction fuse is the electronic fuse 15. The startup table 25 is set, for example, so that when the startup group is the second communication group, the conduction fuses are the electronic fuses 15 and 16. The startup table 25 is set, for example, so that when the startup group is the third communication group, the conduction fuse is the electronic fuse 16. The startup table 25 is set, for example, so that when the startup group is the fourth communication group, there is no conduction fuse.

[0141] Next, the procedure of the startup management process executed by the control unit 11 of the main ECU 2 will be described. The startup management process is a process that is repeatedly executed during the startup of the main ECU 2.

[0142] When executing the startup management process, such as Figure 3 As shown, in S10 , the CPU 21 of the control unit 11 determines whether the start trigger information (ie, NM frame or event generation information) has been input to the main ECU 2 .

[0143] Here, when the start trigger information is not input, CPU21 ends the start management process. On the other hand, when the start trigger information is input, in S20, CPU21 determines the start group based on the input start trigger information. Specifically, when the start trigger information is an NM frame, CPU21 determines that the communication group corresponding to the bit set to 1 in the input NM frame is the start group. In addition, when the start trigger information is event generation information, CPU21 determines the start group based on the event shown in the event generation information by referring to the start table 25. For example, when the event generation information is the above-mentioned door opening event, CPU21 determines that the start group is the first communication group.

[0144] In S30, the CPU 21 starts to send the NM frame indicating the startup group determined in S20. For example, when it is determined that the startup group is the first and third communication groups, the CPU 21 sends the NM frame in which the bits corresponding to the first and third communication groups are set to 1. When the CPU 21 starts to send the NM frame in S30, it periodically sends the same NM frame thereafter.

[0145] In S40 , CPU 21 refers to activation table 25 to execute electronic fuse control to turn on the electronic fuses corresponding to the activation group determined in S20 and to turn off the electronic fuses other than the electronic fuses corresponding to the activation group, thereby terminating the activation management process.

[0146] Furthermore, when there are multiple startup groups, CPU 21 turns on the electronic fuses corresponding to the multiple startup groups by OR (i.e., logical sum), and turns off the electronic fuses other than the electronic fuses corresponding to the multiple startup groups by AND (i.e., logical product). Assuming that multiple events occur and an NM frame that sets the first, third, and fifth communication groups as the startup group and an NM frame that sets the first, fourth, and sixth communication groups as the startup group are generated, CPU 21 also refers to the two NM frames and turns off the electronic fuses other than the electronic fuses corresponding to the multiple startup groups by AND (i.e., logical product).

[0147] Next, the procedure of the diagnosis mask process executed by the control unit 31 of the slave ECUs 3 to 6 will be described. The diagnosis mask process is a process that is repeatedly executed during activation of the slave ECUs 3 to 6.

[0148] When performing diagnostic mask processing, such as Figure 4As shown, in S110, the CPU 41 of the control unit 31 determines whether it is immediately after the startup of this node. Here, in the case where it is not immediately after the startup of this node, the CPU 41 moves to S130. On the other hand, in the case where it is immediately after the startup of this node, in S120, the CPU 41 performs diagnostic masking on the main ECU 2 and the slave ECUs 3 to 6 for a predetermined period of time, and moves to S130. The so-called diagnostic masking means that even if the CAN frame cannot be received from the target ECU and it is determined that the communication is interrupted, it is not considered abnormal. In addition, even if it is determined that the communication is interrupted as a diagnostic mask, the communication interruption diagnosis may not be stored.

[0149] When the process moves to S130, the CPU 41 determines whether an NM frame has been received. If the NM frame has not been received, the CPU 41 ends the diagnosis mask process.

[0150] On the other hand, when an NM frame is received, in S140, the CPU 41 sets a diagnostic mask based on the received NM frame by referring to the diagnostic mask table 45, and ends the diagnostic mask processing. Figure 7 As shown, the diagnostic mask table 45 sets the ECU whose power supply is cut off via the electronic fuse (hereinafter, the cutoff device) and the ECU in the sleep state (hereinafter, the sleep device) in correspondence with the CANID of the unreceived CAN frame (hereinafter, the unreceived frame ID) for each startup group. The unreceived frame ID is a CAN frame that is no longer sent from the cutoff device and the sleep device and is unreceivable to the receiving ECU. Therefore, in the diagnostic mask table 45, one or more combinations are set for one startup group, and the combination is a combination of the cutoff device and the unreceived frame ID and a combination of the sleep device and the unreceived frame ID.

[0151] The diagnosis mask table 45 sets, for example, a combination of the slave ECU 4 and the first CANID and a combination of the slave ECU 5 and the second CANID for the first communication group. The diagnosis mask table 45 sets, for example, a combination of the slave ECU 6 and the third CANID for the second communication group.

[0152] CPU41 sets a diagnostic mask so that even if the communication is determined to be interrupted for the disconnection device and the sleep device, it can be regarded as not abnormal. For example, when CPU41 sets a diagnostic mask for the first communication group, it does not regard it as abnormal even if it cannot receive the CAN frame of the first CANID from the slave ECU4. In addition, when CPU41 sets a diagnostic mask for the first communication group, it does not regard it as abnormal even if it cannot receive the CAN frame of the second CANID from the slave ECU5. In addition, when the startup information in the NM frame is changed from 0 to 1, CPU41 cancels the setting of the diagnostic mask in the corresponding startup group.

[0153] In addition, the master ECU 2 is configured to transmit the updated diagnostic mask table 45 to the slave ECUs 3 to 6 when receiving the updated diagnostic mask table 45 from the diagnostic tester connected to the master ECU 2. In addition, the master ECU 2 may also obtain the updated diagnostic mask table 45 from the server through wireless communication. Thus, the communication system 1 can perform appropriate diagnostic masking corresponding to the change in the structure of the communication system 1.

[0154] The communication system 1 configured in this manner includes a master ECU 2 and slave ECUs 3 , 4 , 5 , and 6 that are connected to each other so as to be able to transmit and receive CAN frames.

[0155] The master ECU 2 and the slave ECUs 3, 4, 5, and 6 belong to at least one of the plurality of communication groups. The communication system 1 is configured to be able to switch one or more ECUs belonging to each communication group between the awake state and the sleep state individually and collectively.

[0156] The ECU 3 receives power supply from the battery 7 via the electronic fuse 15 , and the electronic fuse 15 is configured to switch between an on state for conducting a power supply path and an off state for interrupting the power supply path.

[0157] The slave ECU 5 is connected so as to be able to transmit and receive CAN frames with the slave ECU 3 .

[0158] The master ECU 2 is connected to be able to transmit and receive CAN frames with the slave ECUs 3 and 5 , and is configured to control the operation of the electronic fuse 15 .

[0159] The slave ECUs 3 and 5 store the diagnosis mask table 45 .

[0160] The diagnostic mask table 45 is set for each communication group, with one or more combinations (hereinafter referred to as start-stop combinations) of an ECU whose power supply is cut off via the electronic fuses 15 and 16 (i.e., the above-mentioned cut-off device), an ECU that is in a sleep state (i.e., the above-mentioned sleep device), and a CANID of a non-received CAN frame (i.e., the above-mentioned non-received frame ID).

[0161] When the main ECU 2 acquires the start trigger information for determining the communication group to be in the awake state (that is, the above-mentioned start group), the main ECU 2 is configured to determine the start group based on the acquired start trigger information.

[0162] The master ECU 2 is configured to transmit a communication frame (that is, the above-mentioned NM frame) indicating the determined activation group to the slave ECUs 3 and 5 .

[0163] In such a communication system 1, the slave ECU 5 can identify the combination of the above-mentioned disconnection device and the non-receiving frame ID, and the combination of the above-mentioned sleep device and the non-receiving frame ID by referring to the diagnostic mask table 45 based on the startup group indicated by the NM frame received from the main ECU 2. Therefore, even if the power supply of the slave ECU 3 via the electronic fuse 15 is cut off and the slave ECU 3 cannot receive the CAN frame from the slave ECU 3, the slave ECU 5 can suppress the occurrence of an abnormal situation that is judged to have caused a communication interruption in the slave ECU 3. Moreover, even if the slave ECU 5 cannot receive the CAN frame from the slave ECU 3 that has entered the sleep state, the slave ECU 5 can suppress the occurrence of an abnormal situation that is judged to have caused a communication interruption in the slave ECU 3. As a result, the communication system 1 can improve the accuracy of abnormality detection.

[0164] In addition, the start trigger information includes event generation information indicating that a preset event has occurred. The main ECU 2 includes a start table 25 that establishes a correspondence between one or more events and a start group. The main ECU 2 is configured to determine the start group by referring to the start table 25 when obtaining the event generation information. Such a communication system 1 can suppress the occurrence of erroneous detection of communication interruption abnormality even when an event occurs.

[0165] In the above-described embodiment, the CAN frame corresponds to the communication frame, the master ECU 2 and the slave ECUs 3 to 6 correspond to a plurality of electronic control devices, the electronic fuse 15 corresponds to the power supply switching unit, the battery 7 corresponds to the power supply, and the slave ECU 3 corresponds to the first control device.

[0166] In addition, the slave ECU 5 corresponds to the second control device, the master ECU 2 corresponds to the third control device, and non-reception of the frame ID corresponds to non-reception of the frame identification information.

[0167] In addition, S20 corresponds to the processing as a group determination unit, and S30 corresponds to the processing as a start-up group transmission unit.

[0168] [Second Embodiment]

[0169] The second embodiment of the present disclosure and the attached Figure 1 In the second embodiment, the parts different from the first embodiment are described. The same reference numerals are used for the common structures.

[0170] like Figure 5 As shown, the communication system 1 of the second embodiment is different from the first embodiment in that the diagnostic mask table 45 is omitted and the diagnostic mask table 27 is added.

[0171] The diagnosis mask table 27 is stored in the storage unit 14 of the main ECU 2 .

[0172] The diagnosis mask table 27 is similar to the diagnosis mask table 45 , and sets one or more combinations of the shutdown device and the sleep device and the non-receiving frame ID (that is, the activation / stop combination) for each activation group.

[0173] Diagnostic shield table 27 is also as follows Figure 7 As shown, for each of the electronic fuses 15 and 16, the ECU powered from the battery 7 via the electronic fuses 15 and 16 (hereinafter referred to as the power supply ECU) and the CANID of the CAN frame not received (that is, the non-receiving frame ID) are set in correspondence. Therefore, in the diagnostic mask table 27, one or more combinations of the power supply ECU and the non-receiving frame ID (hereinafter referred to as the fuse combination) are also set for one electronic fuse.

[0174] Next, the procedure of the startup management process executed by the control unit 11 of the main ECU 2 will be described. The startup management process is a process that is repeatedly executed during the startup of the main ECU 2.

[0175] When the startup management process of the second embodiment is executed, Figure 6 As shown, in S210 , similarly to S10 , the CPU 21 of the control unit 11 determines whether the start trigger information has been input to the main ECU 2 .

[0176] Here, when the activation trigger information is not input, the CPU 21 moves to S250. On the other hand, when the activation trigger information is input, in S220, the CPU 21 determines the activation group based on the input activation trigger information similarly to S20.

[0177] In S230 , CPU 21 transmits diagnostic mask information based on the activation group determined in S220 . Specifically, CPU 21 extracts the start / stop combination corresponding to the activation group determined in S220 from diagnostic mask table 27 , and transmits the extracted start / stop combination to slave ECUs 3 to 6 as diagnostic mask information.

[0178] For example, when the CPU 21 determines that the startup group is the first communication group, the combination of the slave ECU 4 and the first CANID and the combination of the slave ECU 5 and the second CANID are sent as diagnostic mask information. For example, when the CPU 21 determines that the startup group is the second communication group, the combination of the slave ECU 6 and the third CANID is sent as diagnostic mask information.

[0179] When receiving the diagnostic mask information, the slave ECUs 3 to 6 set the diagnostic mask based on the received diagnostic mask information. Thus, for example, when the slave ECUs 3, 5, and 6 receive the combination of the slave ECU 4 and the first CANID as the diagnostic mask information, even if the slave ECUs 3, 5, and 6 cannot receive the CAN frame of the first CANID from the slave ECU 4, it can be considered as not abnormal.

[0180] In S240, similarly to S40, CPU 21 refers to the startup table 25, thereby executing electronic fuse control so that the electronic fuse corresponding to the startup group determined in S220 is turned on and the electronic fuses other than the electronic fuse corresponding to the startup group are turned off, and then moves to S250.

[0181] When the process proceeds to S250 , CPU 21 determines whether electronic fuse 15 or electronic fuse 16 has changed from the on state to the off state.

[0182] Here, when electronic fuse 15 and electronic fuse 16 have not changed from the on state to the off state, CPU 21 ends the activation management process.

[0183] On the other hand, when the electronic fuse 15 or the electronic fuse 16 has changed from the on state to the off state, in S260, the CPU 21 sends the diagnostic mask information based on the change in the state of the electronic fuse 15 or the electronic fuse 16 by referring to the diagnostic mask table 27, and ends the startup management process. For example, when the electronic fuse 15 has changed from the on state to the off state, the CPU 21 extracts the electronic fuse 15 from the diagnostic mask table 27 to establish the corresponding non-receiving frame ID as the power supply ECU, and sends the extracted power supply ECU and the non-receiving frame ID as a combination of diagnostic mask information to the slave ECUs 3 to 6.

[0184] The main ECU 2 of the communication system 1 configured in this manner stores the diagnostic mask table 27. The diagnostic mask table 27 sets one or more combinations of a disconnect device and a sleep device and a non-receiving frame ID (ie, a start-stop combination) for each communication group.

[0185] When the main ECU 2 acquires the start trigger information, it is configured to determine the start group based on the acquired start trigger information.

[0186] The master ECU 2 is configured to transmit the start / stop combination corresponding to the determined start group to the slave ECUs 3 and 5 as diagnosis mask information.

[0187] In such a communication system 1, the slave ECU 5 can identify the combination of the cut-off device and the non-receiving frame ID, and the combination of the sleep device and the non-receiving frame ID based on the diagnostic mask information received from the main ECU 2. Therefore, even if the power supply via the electronic fuse 15 is cut off in the main ECU 2 and the CAN frame cannot be received from the slave ECU 3, the slave ECU 5 can suppress the occurrence of an abnormal situation that is judged as a communication interruption in the slave ECU 3. Furthermore, even if the slave ECU 5 cannot receive the CAN frame from the slave ECU 3 that has entered the sleep state, the slave ECU 5 can suppress the occurrence of an abnormal situation that is judged as a communication interruption in the slave ECU 3. As a result, the communication system 1 can improve the accuracy of abnormality detection.

[0188] In addition, one or more combinations of slave ECU 3 powered via electronic fuse 15 and non-receiving frame ID (i.e., the above-mentioned fuse combination) are set in the diagnostic mask table 27. The master ECU 2 is configured to send the fuse combination as diagnostic mask information to the slave ECU 5 when the electronic fuse 15 is switched from the on state to the off state.

[0189] In such communication system 1, even when electronic fuse 15 is disconnected under conditions other than activation trigger information, it is possible to suppress abnormality that is determined as communication interruption in slave ECU 3. Therefore, communication system 1 can further improve abnormality detection accuracy.

[0190] In the above-described embodiment, S220 corresponds to the process as the group determination unit, S230 corresponds to the process as the sleep mask information transmission unit, S260 corresponds to the process as the switching mask information transmission unit, and the fuse combination corresponds to the switching unit combination.

[0191] [Third Embodiment]

[0192] Hereinafter, the third embodiment of the present disclosure and the attached Figure 1 In the third embodiment, the parts different from the first embodiment are described. The same reference numerals are used for the common structures.

[0193] like Figure 8 As shown, the communication system 1 of the third embodiment is different from the first embodiment in that a smart sensor 501 , a smart actuator 502 , a radio device 503 , and electronic fuses 504 , 505 are added.

[0194] The smart sensor 501 is a sensor having a communication function and is connected to the communication bus 8 .

[0195] The smart actuator 502 is an actuator having a communication function and is connected to the communication bus 8 .

[0196] The radio device 503 is a wireless communication device for wirelessly communicating with an external communication device installed outside the vehicle. The radio device 503 is, for example, a DCM. DCM is an abbreviation of Data Communication Module.

[0197] The electronic fuse 504 is disposed on the power supply path between the battery 7 and the smart sensor 501 . The electronic fuse 505 is disposed on the power supply path between the battery 7 and the smart actuator 502 .

[0198] The electronic fuses 504 and 505 are each configured to switch to either a conducting state for conducting the power supply path or a blocking state for blocking the power supply path in response to a command from the control unit 11 .

[0199] Hereinafter, the master ECU 2 , the slave ECUs 3 to 6 , the smart sensor 501 , and the smart actuator 502 are also collectively referred to as nodes.

[0200] (Prerequisites)

[0201] The master ECU 2 and slave ECUs 5 and 6 are always powered by the battery 7 without relays, and can switch to the awake state or the sleep state independently. Hereinafter, the master ECU 2 and slave ECUs 5 and 6 are also referred to as NM-equipped nodes. NM-equipped nodes are nodes that have the function of generating NM frames.

[0202] The slave ECU 3, 4, smart sensor 501 and smart actuator 502 are powered via relays, and cannot be switched to the awake state or the sleep state independently at the node. That is, the awake state is achieved with the relay being turned on, and the sleep state is achieved with the relay being turned off. Hereinafter, the slave ECU 3, the slave ECU 5, the smart sensor 501 and the smart actuator 502 are also referred to as NM non-carrying nodes. NM non-carrying nodes are nodes that do not have the function of generating and interpreting NM frames.

[0203] The NM non-mounted node includes at least one of an actuator and a sensor in addition to the ECU having a control function.

[0204] The power supply paths of the NM non-mounted nodes are connected to the electronic fuses 15 , 16 , 504 , and 505 of the main ECU 2 , respectively.

[0205] The NM non-mounted nodes and relays may be connected one-to-one, or a plurality of NM non-mounted nodes belonging to the same cluster (ie, a group activated simultaneously) may be connected under the control of one electronic fuse.

[0206] The main ECU 2 and the NM-mounted node have a CAN communication unit and can transmit and receive NM frames.

[0207] The NM-equipped node determines whether the node is in the awake state or the sleep state based on the NM frame sent and received via the communication bus.

[0208] The main ECU 2 turns on or off the electronic fuses 15 , 16 , 504 , and 505 to which the NM non-mounted nodes are connected, based on the NM frames transmitted and received via the communication bus.

[0209] In the payload (ie, data area) of the NM frame transmitted and received by the main ECU 2 and the NM-equipped node, one or more bits of information indicating which cluster is activated are stored.

[0210] One or more main ECUs (ie, ECUs having built-in electronic fuses) are mounted in a vehicle.

[0211] like Fig. 9 As shown, one or more nodes belonging to each cluster are determined in advance by the system developer. It is also possible to assign clusters to each node, but multiple nodes can be registered in one cluster. When the bit corresponding to each cluster is active (i.e., bit = 1), the cluster is awakened. In the case of the main ECU, awakening means turning on the electronic fuse.

[0212] (First startup example)

[0213] The first activation example is an operation example of performing a fault diagnosis of the slave ECU 3 in response to a request from the cloud.

[0214] First, a connection request is made from the base station (ie, cloud) side to the vehicle's radio device 503 .

[0215] Next, when the radio device 503 determines that the connection is valid, it transmits the event received from the cloud to the main ECU 2 .

[0216] Next, the master ECU 2 determines the service of “failure diagnosis of the slave ECU 3 ” based on the event, and generates an NM frame in which only the bit of the third cluster to which the slave ECU 3 belongs is validated in order to activate the slave ECU 3 .

[0217] Next, the main ECU 2 sends the generated NM frame to the communication buses 8 , 9 .

[0218] Since there are no NM-equipped nodes belonging to the third cluster on the communication buses 8 and 9, there is no change in the devices on the communication buses.

[0219] Next, the main ECU 2 regards that an NM frame in which the bit of the third cluster is validated is received simultaneously with the above content, and executes a process based on the NM frame in the control unit 11 .

[0220] Next, when the control unit 11 of the main ECU 2 determines to issue a wake-up instruction to the third cluster based on the NM frame, the electronic fuse 15 is turned on because the third cluster includes the electronic fuse 15 .

[0221] When the electronic fuse 15 is turned on, power is supplied to the downstream slave ECU 3 to activate the ECU 3 .

[0222] The master ECU 2 waits for the slave ECU 3 to be started, requests a diagnosis code from the slave ECU 3 , and transmits a response result from the slave ECU 3 to the base station via the radio device 503 .

[0223] (Second startup example)

[0224] The second activation example is an operation example of performing a fault diagnosis of the slave ECU 5 in response to a request from the cloud.

[0225] First, a connection request is made from the base station (ie, cloud) side to the vehicle's radio device 503 .

[0226] Next, when the radio device 503 determines that the connection is valid, it transmits the event received from the cloud to the main ECU 2 .

[0227] Next, the master ECU 2 determines the service of “failure diagnosis of the slave ECU 5 ” based on the event, and generates an NM frame that validates only the bit of the fourth cluster to which the slave ECU 5 belongs, in order to activate the slave ECU 5 .

[0228] Next, the main ECU 2 sends the generated NM frame to the communication buses 8 , 9 .

[0229] Since the slave ECU 5 is present on the communication bus 8 as a node belonging to the fourth cluster, the slave ECU 5 is awakened.

[0230] Next, the main ECU 2 regards that an NM frame in which the bit of the fourth cluster is enabled is received simultaneously with the above content, and executes processing based on the NM frame in the control unit 11 .

[0231] Next, even if the control unit 11 of the main ECU 2 determines to issue a wake-up instruction to the fourth cluster based on the NM frame, the fourth cluster does not include a corresponding relay and therefore ignores the instruction.

[0232] When the slave ECU 5 is started, the master ECU 2 requests a diagnostic code from the slave ECU 5 via the communication bus, and transmits a response result from the slave ECU 5 to the base station via the radio device 503 .

[0233] (Third startup example)

[0234] The third activation example is an action example in which a user activates a remote air conditioner via a smartphone.

[0235] First, the user instructs to turn on the vehicle air conditioner from the smartphone.

[0236] The radio device 503 receives the instruction signal from the smartphone, and when the radio device 503 determines that the instruction signal is valid, it transmits the event (ie, instruction signal) received from the cloud to the main ECU 2 .

[0237] The main ECU 2 determines the "air conditioning service" based on the event, and generates an NM frame for activating the second cluster as a cluster for air conditioning.

[0238] The main ECU 2 periodically sends the generated NM frame to the communication buses 8 and 9 until the air conditioner stop instruction is issued. If the active state is desired to be continued, the NM frame needs to be sent periodically. At the same time, the control unit 11 of the main ECU 2 executes processing based on the NM frame.

[0239] When an NM frame for activating the second cluster is generated on the communication bus 8 , the slave ECU 5 (ie, the air-conditioning ECU) belonging to the second cluster receives the NM frame and is awakened according to the received NM frame.

[0240] When detecting that the second cluster is active, the control unit 11 of the main ECU 2 turns on the electronic fuses 504 and 505 belonging to the second cluster.

[0241] When the electronic fuse 504 and the electronic fuse 505 are turned on, power is supplied to the smart sensor 501 (ie, the temperature sensor) and the smart actuator 502 (ie, the compressor).

[0242] Based on the above, power supply to the air-conditioning ECU, the smart sensor 501, and the smart actuator 502 starts, and the vehicle air-conditioning can be turned on.

[0243] When the user instructs to turn off the vehicle air conditioner from the smartphone, the main ECU 2 stops the periodic transmission of the NM frame.

[0244] When the NM frame is interrupted, the slave ECU 5 transitions to the sleep state, and the master ECU 2 disconnects the electronic fuse 504 and the electronic fuse 505. As a result, the vehicle air conditioner stops.

[0245] (Fourth startup example)

[0246] The fourth activation example is an operation example in which the vehicle air conditioner is activated from the ECU 5 .

[0247] Since the slave ECU 5 is always supplied with power even when the vehicle is stopped, it can detect input of a signal indicating that a start switch connected to the slave ECU 5 is turned on and wake up even when it is in sleep mode.

[0248] When confirming the input that the vehicle air conditioner should be activated, the awakened slave ECU 5 generates an NM frame in which the bit corresponding to the second cluster is turned on.

[0249] The slave ECU 5 transmits the generated NM frame via the CAN communication unit 32. When the master ECU 2 receives the NM frame, the master ECU 2 turns on the electronic fuses 504 and 505 belonging to the second cluster.

[0250] When the start switch of the vehicle air conditioner is turned off, the slave ECU 5 stops sending the NM frame and enters the sleep state after a certain period of time.

[0251] When the NM frame is interrupted, the main ECU 2 sets the electronic fuses 504 and 505 to the open state after a certain period of time and ends the control.

[0252] When the master ECU 2 determines that control needs to be continued even after the transmission of the NM frame stops, the master ECU 2 transmits the NM frame with the bit corresponding to the second cluster turned on. Thus, the slave ECU 5 and the electronic fuses 504 and 505 can also maintain the activated state until the transmission of the NM frame generated by the master ECU 2 stops.

[0253] [Fourth Embodiment]

[0254] Hereinafter, the fourth embodiment of the present disclosure and the attached Figure 1 In addition, in the fourth embodiment, the parts different from the first embodiment are described.

[0255] The communication system 100 of the fourth embodiment is installed in a vehicle. Fig.10 As shown, it includes a central ECU 101, upstream power distribution units 102, 103, regional ECUs 104, 105, 106, 107, slave ECUs 108, 109, 110, 111, 112, 113, 114, 115, 116, a battery 117, and a slave ECU 118. Hereinafter, the central ECU 101, regional ECUs 104 to 107, and slave ECUs 108 to 116, 118 are also collectively referred to as nodes.

[0256] The battery 117 supplies power to various parts of the vehicle at a DC battery voltage (eg, 12 V). The central ECU 101 , the upstream power distribution units 102 , 103 , the area ECUs 104 to 107 , and the slave ECUs 108 to 116 , 118 receive power from the battery 117 and operate.

[0257] The upstream power distribution unit 102 receives power supply from the battery 117 through a power supply path 121 between the battery 117 and the upstream power distribution unit 102 .

[0258] The upstream power distribution unit 103 receives power supply from the battery 117 through a power supply path 122 between the battery 117 and the upstream power distribution unit 103 .

[0259] The regional ECUs 104 and 105 receive power supply from the battery 117 through power supply paths 123 and 124 between the upstream power distribution unit 102 and the regional ECUs 104 and 105 , respectively.

[0260] The regional ECUs 106 and 107 receive power supply from the battery 117 through power supply paths 125 and 126 between the upstream power distribution unit 103 and the regional ECUs 106 and 107 , respectively.

[0261] The slave ECUs 108 and 109 receive electric power from the battery 117 through power supply paths 127 and 128 between the area ECU 104 and the slave ECUs 108 and 109 , respectively.

[0262] The slave ECUs 110 and 111 receive electric power from the battery 117 through power supply paths 129 and 130 between the area ECU 105 and the slave ECUs 110 and 111 , respectively.

[0263] The slave ECUs 112 , 113 , 114 receive electric power from the battery 117 through power supply paths 131 , 132 , 133 between the zone ECU 106 and the slave ECUs 112 , 113 , 114 , respectively.

[0264] The slave ECUs 115 and 116 receive electric power from the battery 117 through power supply paths 134 and 135 between the zone ECU 107 and the slave ECUs 115 and 116 , respectively.

[0265] The slave ECU 118 receives power supply from the battery 117 via the power supply path 136 .

[0266] The central ECU 101 and the upstream power distribution unit 102 are connected via a communication line 141 so as to be able to perform data communication with each other.

[0267] The central ECU 101 and the upstream power distribution unit 103 are connected via a communication line 142 so as to be able to perform data communication with each other.

[0268] The central ECU 101 and the regional ECUs 104 , 105 , 106 , and 107 are connected via communication lines 143 , 144 , 145 , and 146 , respectively, so as to be able to perform data communication with each other.

[0269] The area ECU 104 and the slave ECUs 108 , 109 , and 118 are connected via a communication bus 147 so as to be able to communicate data with each other.

[0270] The area ECU 105 and the slave ECUs 110 and 111 are connected via a communication bus 148 so as to be able to perform data communication with each other.

[0271] The area ECU 106 and the slave ECUs 112 , 113 , and 114 are connected via a communication bus 149 so as to be able to communicate data with each other.

[0272] The area ECU 107 and the slave ECUs 115 and 116 are connected via a communication bus 150 so as to be able to communicate data with each other.

[0273] like Fig.11 As shown, the central ECU 101 includes a control unit 151 , communication units 152 , 153 , 154 , 155 , 156 , and 157 , and a storage unit 158 ​​.

[0274] The control unit 151 is an electronic control device centered around a microcomputer having a CPU 161, a ROM 162, and a RAM 163. The various functions of the microcomputer are realized by the CPU 161 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 162 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 161 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 151 may be one or more.

[0275] The communication unit 152 communicates with the upstream power distribution unit 102 connected to the communication line 141 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. Ethernet is a registered trademark.

[0276] The communication unit 153 communicates with the upstream power distribution unit 103 connected to the communication line 142 by transmitting and receiving communication frames based on the Ethernet communication protocol, for example.

[0277] The communication unit 154 communicates with the zone ECU 104 connected to the communication line 143 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0278] The communication unit 155 communicates with the zone ECU 105 connected to the communication line 144 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0279] The communication unit 156 communicates with the zone ECU 106 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0280] The communication unit 157 communicates with the zone ECU 107 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0281] The storage unit 158 ​​is a storage device for storing various data. The storage unit 158 ​​stores a startup table 165 described later.

[0282] The upstream power distribution unit 102 includes a control circuit 171 , a communication unit 172 , and electronic fuses 173 and 174 .

[0283] The control circuit 171 performs control to switch the electronic fuses 173 and 174 between the on state and the off state based on an instruction obtained from the central ECU 101 via the communication unit 172 .

[0284] The communication unit 172 communicates with the central ECU 101 connected to the communication line 141 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0285] The electronic fuse 173 is disposed between the power supply path 121 and the power supply path 123. The electronic fuse 174 is disposed between the power supply path 121 and the power supply path 124.

[0286] The upstream power distribution unit 103 includes a control circuit 181 , a communication unit 182 , and electronic fuses 183 and 184 .

[0287] The control circuit 181 performs control to switch the electronic fuses 183 and 184 between the on state and the off state based on an instruction obtained from the central ECU 101 via the communication unit 182 .

[0288] The communication unit 182 communicates with the central ECU 101 connected to the communication line 142 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0289] The electronic fuse 183 is disposed between the power supply path 122 and the power supply path 125. The electronic fuse 184 is disposed between the power supply path 122 and the power supply path 126.

[0290] like Fig.12 As shown, the zone ECU 104 includes a control unit 191 , a communication unit 192 , a CAN communication unit 193 , a storage unit 194 , and electronic fuses 195 , 196 .

[0291] The control unit 191 is an electronic control device centered around a microcomputer having a CPU 201, a ROM 202, and a RAM 203. The various functions of the microcomputer are realized by the CPU 201 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 202 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 201 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 191 may be one or more.

[0292] The communication unit 192 communicates with the central ECU 101 connected to the communication line 143 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0293] The CAN communication unit 193 communicates with the slave ECUs 108 and 109 connected to the communication bus 147 by transmitting and receiving communication frames based on the CAN communication protocol.

[0294] The storage unit 194 is a storage device for storing various data. The storage unit 194 stores a diagnosis mask table 207 described later.

[0295] The electronic fuse 195 is disposed between the power supply path 123 and the power supply path 127. The electronic fuse 196 is disposed between the power supply path 123 and the power supply path 128.

[0296] The zone ECU 105 includes a control unit 211 , a communication unit 212 , a CAN communication unit 213 , a storage unit 214 , and electronic fuses 215 and 216 .

[0297] The control unit 211 is an electronic control device centered around a microcomputer having a CPU 221, a ROM 222, and a RAM 223. The various functions of the microcomputer are realized by the CPU 221 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 222 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 221 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 211 may be one or more.

[0298] The communication unit 212 communicates with the central ECU 101 connected to the communication line 144 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0299] The CAN communication unit 213 communicates with the slave ECUs 110 and 111 connected to the communication bus 148 by transmitting and receiving communication frames based on the CAN communication protocol.

[0300] The storage unit 214 is a storage device for storing various data. The storage unit 214 stores a diagnosis mask table 227 described later.

[0301] The electronic fuse 215 is disposed between the power supply path 124 and the power supply path 129 . The electronic fuse 216 is disposed between the power supply path 124 and the power supply path 130 .

[0302] like Fig.13 As shown, the zone ECU 106 includes a control unit 231 , a communication unit 232 , a CAN communication unit 233 , a storage unit 234 , and electronic fuses 235 , 236 , and 237 .

[0303] The control unit 231 is an electronic control device centered around a microcomputer having a CPU 241, a ROM 242, and a RAM 243. The various functions of the microcomputer are realized by the CPU 241 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 242 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 241 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 231 may be one or more.

[0304] The communication unit 232 communicates with the central ECU 101 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0305] The CAN communication unit 233 communicates with the slave ECUs 112 , 113 , and 114 connected to the communication bus 149 by transmitting and receiving communication frames based on the CAN communication protocol.

[0306] The storage unit 234 is a storage device for storing various data. The storage unit 194 stores a diagnosis mask table 247 described later.

[0307] The electronic fuse 235 is disposed between the power supply path 125 and the power supply path 131. The electronic fuse 236 is disposed between the power supply path 125 and the power supply path 132. The electronic fuse 237 is disposed between the power supply path 125 and the power supply path 133.

[0308] The zone ECU 107 includes a control unit 251 , a communication unit 252 , a CAN communication unit 253 , a storage unit 254 , and electronic fuses 255 and 256 .

[0309] The control unit 251 is an electronic control device centered around a microcomputer having a CPU 261, a ROM 262, and a RAM 263. The various functions of the microcomputer are realized by the CPU 261 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 262 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 261 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 251 may be one or more.

[0310] The communication unit 252 communicates with the central ECU 101 connected to the communication line 146 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0311] The CAN communication unit 253 communicates with the slave ECUs 115 and 116 connected to the communication bus 150 by transmitting and receiving communication frames based on the CAN communication protocol.

[0312] The storage unit 254 is a storage device for storing various data. The storage unit 254 stores a diagnosis mask table 267 described later.

[0313] The electronic fuse 255 is disposed between the power supply path 126 and the power supply path 134. The electronic fuse 256 is disposed between the power supply path 126 and the power supply path 135.

[0314] like Fig.14 As shown, the slave ECUs 108 , 109 , and 118 include a control unit 271 , a CAN communication unit 272 , and a storage unit 273 .

[0315] The control unit 271 is an electronic control device centered around a microcomputer having a CPU 281, a ROM 282, and a RAM 283. The various functions of the microcomputer are realized by the CPU 281 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 282 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 281 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 271 may be one or more.

[0316] CAN communication unit 272 communicates with area ECU 104 connected to communication bus 147 based on the CAN communication protocol.

[0317] The storage unit 273 is a storage device for storing various data. The storage unit 273 stores a diagnosis mask table 287 described later.

[0318] The slave ECUs 110 and 111 include a control unit 291 , a CAN communication unit 292 , and a storage unit 293 .

[0319] The control unit 291 is an electronic control device centered around a microcomputer having a CPU 301, a ROM 302, and a RAM 303. The various functions of the microcomputer are realized by the CPU 301 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 302 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 301 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 291 may be one or more.

[0320] CAN communication unit 292 communicates with area ECU 105 connected to communication bus 148 based on the CAN communication protocol.

[0321] The storage unit 293 is a storage device for storing various data. The storage unit 293 stores a diagnosis mask table 307 described later.

[0322] The slave ECUs 112 , 113 , and 114 include a control unit 311 , a CAN communication unit 312 , and a storage unit 313 .

[0323] The control unit 311 is an electronic control device centered around a microcomputer having a CPU 321, a ROM 322, and a RAM 323. The various functions of the microcomputer are realized by the CPU 321 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 322 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 321 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 311 may be one or more.

[0324] CAN communication unit 312 communicates with area ECU 106 connected to communication bus 149 based on the CAN communication protocol.

[0325] The storage unit 313 is a storage device for storing various data. The storage unit 313 stores a diagnosis mask table 327 described later.

[0326] The slave ECUs 115 and 116 include a control unit 331 , a CAN communication unit 332 , and a storage unit 333 .

[0327] The control unit 331 is an electronic control device centered around a microcomputer having a CPU 341, a ROM 342, and a RAM 343. The various functions of the microcomputer are realized by the CPU 341 executing a program stored in a non-migrating physical recording medium. In this example, the ROM 342 corresponds to a non-migrating physical recording medium storing the program. In addition, by executing the program, a method corresponding to the program is executed. In addition, a part or all of the functions executed by the CPU 341 may be constituted in hardware by one or more ICs. In addition, the number of microcomputers constituting the control unit 331 may be one or more.

[0328] The CAN communication unit 332 communicates with the regional ECU 107 connected to the communication bus 150 based on the CAN communication protocol.

[0329] The storage unit 333 is a storage device for storing various data. The storage unit 333 stores a diagnosis mask table 347 described later.

[0330] like Fig.15 As shown in FIG. 1 , a communication group to be activated (i.e., activation group) is set for each event in the activation table 165 of the central ECU 101. The activation table 165 also sets a correspondence between the activation group and the slave ECU to be awakened. The activation table 165 also sets a correspondence between the slave ECU and the electronic fuse connected to the slave ECU. In addition, the activation table 165 may be set in a form of a correspondence that allows the corresponding ECU to be known to which regional ECU the slave ECU is subordinate.

[0331] like Fig.16 As shown, in the diagnostic mask tables 207, 227, 247, 267, 287, 307, 327, 347, a startup group is set for each event. In the diagnostic mask tables 207, 227, 247, 267, 287, 307, 327, 347, a corresponding relationship between the startup group, the slave ECU whose power supply is cut off via the electronic fuse (hereinafter, the cutoff device), the slave ECU in the sleep state (hereinafter, the sleep device), and the CAN ID of the CAN frame not received (hereinafter, the non-receiving frame ID) is also set. In addition, the diagnostic mask tables 207, 227, 247, 267, 287, 307, 327, 347 can also be set in the form of a corresponding relationship that knows which area ECU the slave ECU is subordinate to. In addition, the diagnostic mask tables 207, 227, 247, 267, 287, 307, 327, and 347 may not include the correspondence table between events and activation groups (i.e., Fig.16).

[0332] exist Fig.16 For example, when the activation group is the second communication group, a hatched rectangle is added to the slave ECUs 110, 111, and 112. This indicates that the slave ECUs 110, 111, and 112 are cutoff devices, and non-receiving frame IDs corresponding to the slave ECUs 110, 111, and 112 are provided.

[0333] Next, the procedure of the central management process executed by the control unit 151 of the central ECU 101 will be described. The central management process is a process that is repeatedly executed when the central ECU 101 is activated.

[0334] When performing central management processing, such as Fig.17 As shown, in S310 , the CPU 161 of the control unit 151 determines whether the start trigger information (ie, NM frame or event generation information) has been input to the main ECU 2 .

[0335] Here, when the start trigger information is not input, the CPU 161 ends the central management processing. On the other hand, when the start trigger information is input, in S320, the CPU 161 determines the start group based on the input start trigger information. Specifically, when the start trigger information is an NM frame, the CPU 161 determines that the communication group corresponding to the bit set to 1 in the input NM frame is the start group. In addition, when the start trigger information is event generation information, the CPU 161 determines the start group based on the event indicated by the event generation information by referring to the start table 165. The CPU 161 generates an NM frame representing the determined start group.

[0336] In S330, the CPU 161 starts a process of transmitting an NM frame indicating the activation group determined in S320 to the area ECUs 104, 105, 106, and 107. When the transmission of the NM frame starts in S330, the CPU 161 periodically transmits the same NM frame thereafter.

[0337] In S340, CPU 161 refers to the startup table 165 and sends an electronic fuse control instruction to the upstream power distribution unit 102, 103 and the regional ECUs 104, 105, 106, and 107, indicating that the electronic fuse corresponding to the startup group determined in S320 is turned on and the electronic fuses other than the electronic fuse corresponding to the startup group are turned off, thereby ending the central management processing.

[0338] The upstream power distribution unit 102 turns the electronic fuses 173 and 174 to the on state or the off state based on the received electronic fuse control instruction.

[0339] The upstream power supply distribution unit 103 turns the electronic fuses 183 and 184 to the on state or the off state based on the received electronic fuse control instruction.

[0340] The zone ECU 104 turns the electronic fuses 195 and 196 to the on state or the off state based on the received electronic fuse control instruction.

[0341] The zone ECU 105 turns the electronic fuses 215 and 216 to the on state or the off state based on the received electronic fuse control instruction.

[0342] The zone ECU 106 turns the electronic fuses 235 , 236 , and 237 to the on state or the off state based on the received electronic fuse control instruction.

[0343] The zone ECU 107 turns the electronic fuses 255 and 256 to the on state or the off state based on the received electronic fuse control instruction.

[0344] Next, the procedure of the area management process executed by the control units 191, 211, 231, 251 of the area ECUs 104, 105, 106, 107 will be described. The area management process is a process that is repeatedly executed when the area ECUs 104, 105, 106, 107 are activated.

[0345] When performing area management processing, such as Fig.18 As shown, in S410, the CPU 201, 221, 241, 261 of the control unit 191, 211, 231, 251 determines whether an NM frame has been received. Here, if the NM frame has not been received, the CPU 201, 221, 241, 261 ends the area management process.

[0346] On the other hand, when an NM frame is received, in S420, the CPUs 201, 221, 241, 261 transmit the received NM frame to subordinate slave ECUs. The subordinate slave ECUs of the regional ECU 104 are slave ECUs 108, 109, 118. The subordinate slave ECUs of the regional ECU 105 are slave ECUs 110, 111. The subordinate slave ECUs of the regional ECU 106 are slave ECUs 112, 113, 114. The subordinate slave ECUs of the regional ECU 107 are slave ECUs 115, 116.

[0347] In S430 , the CPUs 201 , 221 , 241 , and 261 set the diagnostic mask based on the received NM frame by referring to the diagnostic mask tables 207 , 227 , 247 , and 267 , and terminate the area management process.

[0348] Next, the procedure of the slave management process executed by the control unit 271 of the slave ECUs 108 and 109 will be described. The slave management process is a process repeatedly executed when the slave ECUs 108 and 109 are activated. The slave ECUs 110 to 116 execute the slave management process in the same manner as the slave ECUs 108 and 109.

[0349] When executing slave management processing, such as Fig.19 As shown, in S510, the CPU 281 of the control unit 271 determines whether an NM frame has been received. Here, if the NM frame has not been received, the CPU 281 ends the slave management process.

[0350] On the other hand, when an NM frame is received, in S520 , the CPU 281 sets a diagnostic mask based on the received NM frame by referring to the diagnostic mask table 287 , and terminates the slave management process.

[0351] The communication system 100 configured in this manner includes a central ECU 101 , regional ECUs 104 to 107 , and slave ECUs 108 to 116 and 118 that are connected to each other so as to be able to transmit and receive communication frames.

[0352] The central ECU 101, the regional ECUs 104 to 107, and the slave ECUs 108 to 116 and 118 belong to at least one of the plurality of communication groups. The communication system 100 is configured to switch the ECUs belonging to the communication group individually or collectively between the awake state and the sleep state for each communication group.

[0353] The slave ECU 108 receives power supply from the battery 117 via an electronic fuse 195 configured to switch between an on-state that makes the power supply path conductive and a cut-off state that cuts off the power supply path. The slave ECU 109 receives power supply from the battery 117 via an electronic fuse 196 configured to switch between an on-state that makes the power supply path conductive and a cut-off state that cuts off the power supply path. The slave ECU 118 receives power supply from the battery 117 without passing through the electronic fuse.

[0354] The slave ECU 109 is connected so as to be able to transmit and receive communication frames with the slave ECU 108 .

[0355] The slave ECU 108 , the slave ECU 108 , the slave ECU 118 , and the regional ECU 104 are connected to each other so as to be able to transmit communication frames to each other. The regional ECU 104 is configured to control the operation of the electronic fuses 195 , 196 .

[0356] The central ECU 101 is connected so as to be able to transmit and receive communication frames with the regional ECUs 104 .

[0357] The slave ECU 108, the slave ECU 109, and the slave ECU 118 store a diagnostic mask table 287. The diagnostic mask table 287 sets one or more combinations (hereinafter, start-stop combination) of a communication group, an ECU whose power supply is cut off via an electronic fuse (i.e., the above-mentioned cutoff device), an ECU that is in a sleep state (i.e., the above-mentioned sleep device), and a CAN ID of a CAN frame that is not received (i.e., the above-mentioned non-received frame ID).

[0358] When the central ECU 101 acquires the start trigger information for determining the communication group to be in the awake state (that is, the above-mentioned start group), it is configured to determine the start group based on the acquired start trigger information.

[0359] The central ECU 101 is configured to transmit a communication frame (that is, the above-mentioned NM frame) indicating the determined activation group to the regional ECUs 104 .

[0360] The regional ECU 104 is configured to transfer the NM frame received from the central ECU 101 to the slave ECU 108 , the slave ECU 109 , and the slave ECU 118 .

[0361] In such a communication system 100, the slave ECU 109 can identify the combination of the above-mentioned disconnection device and the non-receiving frame ID, and the combination of the above-mentioned sleep device and the non-receiving frame ID by referring to the diagnostic mask table 287 based on the startup group indicated by the NM frame received from the regional ECU 104. Therefore, even if the power supply to the slave ECU 108 via the electronic fuse 195 is cut off and the CAN frame cannot be received from the slave ECU 108, the slave ECU 109 can suppress the occurrence of an abnormality in which the communication interruption is judged to have occurred in the slave ECU 108. Furthermore, even if the slave ECU 109 cannot receive the CAN frame from the slave ECU 108 that has entered the sleep state, it can suppress the occurrence of an abnormality in which the communication interruption is judged to have occurred in the slave ECU 108. As a result, the communication system 100 can improve the accuracy of abnormality detection.

[0362] In the above-described embodiment, the central ECU 101 , the area ECUs 104 to 107 , and the slave ECUs 108 to 116 and 118 correspond to a plurality of electronic control devices, the electronic fuse 195 corresponds to a power supply switching unit, and the battery 117 corresponds to a power source.

[0363] The slave ECU 108 corresponds to a first slave control device, the slave ECU 109 corresponds to a second slave control device, the regional ECU 104 corresponds to a regional control device, and the central ECU 101 corresponds to a central control device.

[0364] In addition, S320 corresponds to the processing as a group determination unit, S330 corresponds to the processing as a start group transmission unit, and S420 corresponds to the processing as a frame transfer unit.

[0365] [Fifth Embodiment]

[0366] Hereinafter, the fifth embodiment of the present disclosure and the attached Figure 1 In the fifth embodiment, the parts different from the fourth embodiment are described. The same reference numerals are used for the common structures.

[0367] like Fig. 20 As shown, the communication system 100 of the fifth embodiment is different from the fourth embodiment in that the storage unit 158 ​​of the central ECU 101 further stores a diagnosis mask table 167 .

[0368] like Fig.16 As shown, an activation group is set for each event in the diagnosis mask table 167. In the diagnosis mask table 167, a correspondence relationship between the activation group, the shutdown device and the sleep device, and the non-receiving frame ID is also set.

[0369] In addition, if Fig.21 As shown in FIG. 1 , the present invention is different from the fourth embodiment in that the diagnosis mask table 207 is omitted in the storage unit 194 of the zone ECU 104 .

[0370] Furthermore, the present invention is different from the fourth embodiment in that the diagnosis mask table 227 is omitted from the storage unit 214 of the zone ECU 105 .

[0371] In addition, if Fig. 22 As shown in FIG. 1 , the present invention is different from the fourth embodiment in that the diagnosis mask table 247 is omitted in the storage unit 234 of the zone ECU 106 .

[0372] Furthermore, the present invention is different from the fourth embodiment in that the diagnosis mask table 267 is omitted from the storage unit 254 of the zone ECU 107 .

[0373] In addition, if Fig.23 As shown in FIG. 1 , the present invention is different from the fourth embodiment in that the diagnosis mask table 287 is omitted from the storage unit 273 of the ECU 108 , 109 , 118 .

[0374] Furthermore, the present invention is different from the fourth embodiment in that the diagnosis mask table 307 is omitted from the storage unit 293 of the ECUs 110 and 111 .

[0375] Furthermore, the present invention is different from the fourth embodiment in that the diagnosis mask table 327 is omitted from the storage unit 313 of the ECUs 112 , 113 , and 114 .

[0376] Furthermore, the present invention is different from the fourth embodiment in that the diagnosis mask table 347 is omitted from the storage unit 333 of the slave ECUs 115 and 116 .

[0377] Next, the procedure of the central management process according to the fifth embodiment will be described.

[0378] When the central management process of the fifth embodiment is executed, Fig.24 As shown, in S610 , the CPU 161 of the control unit 151 determines whether the start trigger information (ie, NM frame or event generation information) has been input to the central ECU 101 .

[0379] Here, if the activation trigger information is not input, the CPU 161 ends the central management process. On the other hand, if the activation trigger information is input, in S620 , the CPU 161 determines the activation group based on the input activation trigger information.

[0380] In S630, the CPU 161 generates diagnostic mask information based on the startup group determined in S620 by referring to the diagnostic mask table 167. For example, when the startup group is the second communication group, the start-stop combination related to the second communication group in the diagnostic mask table 167 is extracted and used as the diagnostic mask information. The CPU 161 sends the generated diagnostic mask information to the regional ECUs 104, 105, 106, and 107.

[0381] In S640, CPU 161 refers to the startup table 165 and sends an electronic fuse control instruction to the upstream power distribution unit 102, 103 and the regional ECUs 104, 105, 106, and 107, indicating that the electronic fuse corresponding to the startup group determined in S620 is turned on and the electronic fuses other than the electronic fuse corresponding to the startup group are turned off, thereby ending the central management processing.

[0382] Next, the procedure of the area management process according to the fifth embodiment will be described.

[0383] When the area management process of the fifth embodiment is executed, as shown in FIG. Fig.25 As shown, in S710, the CPU 201, 221, 241, 261 of the control unit 191, 211, 231, 251 determines whether the diagnosis mask information is received. Here, if the diagnosis mask information is not received, the CPU 201, 221, 241, 261 ends the area management process.

[0384] On the other hand, when the diagnosis mask information is received, in S720 , the CPU 201 , 221 , 241 , 261 transmits the received diagnosis mask information to the subordinate slave ECU.

[0385] In S730 , CPUs 201 , 221 , 241 , and 261 set the diagnostic mask based on the received diagnostic mask information, and terminate the area management process.

[0386] Next, the procedure of the slave management process according to the fifth embodiment will be described.

[0387] When the slave management process of the fifth embodiment is executed, as shown in FIG. Fig.26 As shown, in S810, the CPU 281 of the control unit 271 determines whether the diagnosis mask information has been received. Here, if the diagnosis mask information has not been received, the CPU 281 ends the slave management process.

[0388] On the other hand, when the diagnostic mask information is received, in S820 the CPU 281 sets the diagnostic mask based on the received diagnostic mask information and ends the slave management process.

[0389] The central ECU 101 of the communication system 100 configured in this manner stores the diagnosis mask table 167 .

[0390] The diagnosis mask table 167 sets one or more combinations of a communication group, a disconnected device and a sleep device, and a non-receiving frame ID (ie, a start-stop combination).

[0391] When the central ECU 101 acquires the start trigger information, it is configured to determine the start group based on the acquired start trigger information.

[0392] The central ECU 101 is configured to transmit the start / stop combination corresponding to the determined start group to the regional ECUs 104 as diagnosis mask information.

[0393] The area ECU 104 is configured to transmit the diagnosis mask information received from the central ECU 101 to the slave ECU 108 and the slave ECU 109 .

[0394] In such a communication system 100, the slave ECU 109 can identify the combination of the cut-off device and the non-receiving frame ID, and the combination of the sleep device and the non-receiving frame ID based on the diagnostic mask information received from the regional ECU 104. Therefore, even if the power supply to the slave ECU 108 via the electronic fuse 195 is cut off and the CAN frame cannot be received from the slave ECU 108, the slave ECU 109 can suppress the occurrence of an abnormality in which the communication interruption is judged to have occurred in the slave ECU 108. Moreover, even if the slave ECU 109 cannot receive the CAN frame from the slave ECU 108 that has entered the sleep state, the slave ECU 109 can suppress the occurrence of an abnormality in which the communication interruption is judged to have occurred in the slave ECU 108. Thus, the communication system 100 can improve the accuracy of abnormality detection. In addition, for the regional ECU 104, by using the diagnostic mask information received from the central ECU 101, the same effect as that of the slave ECU 109 is achieved.

[0395] In the above-described embodiment, S620 corresponds to the process as the group determination unit, S630 corresponds to the process as the sleep mask information transmission unit, and S720 corresponds to the process as the mask information transfer unit.

[0396] [Sixth Embodiment]

[0397] Hereinafter, the sixth embodiment of the present disclosure and the attached Figure 1 In the sixth embodiment, the parts different from the fourth embodiment are described. The same reference numerals are used for the common structures.

[0398] like Fig. 27 As shown in FIG. 1 , the communication system 100 of the sixth embodiment is different from the fourth embodiment in that the structure of the startup table 165 provided in the central ECU 101 is changed. That is, in the startup table 165 of the sixth embodiment, a startup group is set for each event. In other words, in the startup table 165 of the sixth embodiment, the correspondence between the startup group and the slave ECU that is in the awake state is not set.

[0399] like Fig.28 As shown, the present invention is different from the fourth embodiment in that the storage unit 194 of the zone ECU 104 further stores a startup table 205 described later.

[0400] The storage unit 214 of the zone ECU 105 is different from the fourth embodiment in that it further stores a startup table 225 described later.

[0401] like Fig.29 As shown, the present invention is different from the fourth embodiment in that the storage unit 234 of the zone ECU 106 further stores a startup table 245 described later.

[0402] The storage unit 254 of the zone ECU 107 is different from the fourth embodiment in that it further stores a startup table 265 described later.

[0403] like Fig. 27 As shown, the startup table 205 sets the correspondence between the startup group and the slave ECU to be awakened for the slave ECUs 108, 109, 118 under the area ECU 104. The startup table 205 also sets the correspondence between the slave ECUs 108, 109, 118 and the electronic fuses connected to the slave ECUs 108, 109, 118.

[0404] The startup table 225 sets the correspondence between the startup group and the slave ECU to be awakened for the slave ECUs 110 and 111 under the zone ECU 105. The startup table 225 also sets the correspondence between the slave ECUs 110 and 111 and the electronic fuses connected to the slave ECUs 110 and 111.

[0405] The startup table 245 sets the correspondence between the startup group and the slave ECUs to be awakened for the slave ECUs 112, 113, 114 under the area ECU 106. The startup table 225 also sets the correspondence between the slave ECUs 112, 113, 114 and the electronic fuses connected to the slave ECUs 112, 113, 114.

[0406] The startup table 265 sets the correspondence between the startup group and the slave ECUs to be awakened for the slave ECUs 115 and 116 under the zone ECU 107. The startup table 265 also sets the correspondence between the slave ECUs 115 and 116 and the electronic fuses connected to the slave ECUs 115 and 116.

[0407] Furthermore, the present invention is different from the fourth embodiment in that the configurations of the diagnosis mask tables 207 , 227 , 247 , 267 , 287 , 307 , 327 , and 347 are changed.

[0408] like Fig.30 As shown, in the diagnosis mask tables 207 and 287 , for the slave ECUs 108 , 109 , and 118 subordinate to the area ECU 104 , the correspondence between the activation group, the shutdown device, the sleep device, and the non-receiving frame ID is set.

[0409] In the diagnosis mask tables 227 and 307 , for the slave ECUs 110 and 111 subordinate to the area ECU 105 , correspondence between an activation group, a shutdown device, a sleep device, and a non-receiving frame ID is set.

[0410] In the diagnosis mask tables 247 and 327 , for the slave ECUs 112 , 113 , and 114 subordinate to the area ECU 106 , correspondence between the activation group, the shutdown device, the sleep device, and the non-receiving frame ID is set.

[0411] In the diagnosis mask tables 267 and 347 , for the slave ECUs 115 and 116 under the area ECU 107 , correspondence between the activation group, the shutdown device, the sleep device, and the non-receiving frame ID is set.

[0412] Furthermore, the present invention is different from the fourth embodiment in that the central management process and the regional management process are changed.

[0413] Next, the procedure of the central management process according to the sixth embodiment will be described.

[0414] like Fig.31 As shown, the central management process of the sixth embodiment is different from that of the fourth embodiment in that the process of S340 is omitted.

[0415] That is, when the process of S330 is completed, the CPU 161 ends the central management process.

[0416] Next, the procedure of the area management process according to the sixth embodiment will be described.

[0417] like Fig.32 As shown, the area management process of the sixth embodiment is different from the fourth embodiment in that the processes of S440 to S480 are added.

[0418] That is, when the NM frame is not received in S410 , the CPU 201 , 221 , 241 , 261 proceeds to S460 .

[0419] In addition, when the processing of S430 is completed, in S440, CPU201, 221, 241, 261 refers to the startup table 205, 225, 245, 265, thereby executing electronic fuse control for the subordinate slave ECU, making the electronic fuse corresponding to the startup group shown in the NM frame turn on, and making the electronic fuse other than the electronic fuse corresponding to the startup group turn off.

[0420] In S450, CPU 201, 221, 241, 261 generates diagnostic mask information based on the activation group indicated by the received NM frame by referring to diagnostic mask tables 207, 227, 247, 267. CPU 201, 221, 241, 261 transmits the generated diagnostic mask information to other area ECUs via central ECU 101, and the process proceeds to S460.

[0421] When the process moves to S460, the CPU 201, 221, 241, 261 determines whether the diagnosis mask information transmitted from other zone ECUs is received. Here, if the diagnosis mask information is not received, the CPU 201, 221, 241, 261 ends the zone management process.

[0422] On the other hand, when the diagnosis mask information is received, in S470 , the CPU 201 , 221 , 241 , 261 transmits the received diagnosis mask information to the subordinate slave ECU.

[0423] In S480 , the CPUs 201 , 221 , 241 , and 261 refer to the diagnostic mask information transmitted from other area ECUs and perform additional setting of the diagnostic mask.

[0424] For example, the CPU 201 can refer to the diagnostic mask table 207 to generate diagnostic mask information related to the slave ECU 108, the slave ECU 109, and the slave ECU 118. However, since the diagnostic mask information related to the slave ECUs other than the slave ECUs 108, 109, and 118 cannot be generated, the diagnostic mask setting is performed using the diagnostic mask information transmitted from other area ECUs.

[0425] When the diagnosis mask information related to all slave ECUs is set, the CPUs 201 , 221 , 241 , and 261 terminate the area management process.

[0426] The slave ECUs 108, 109, and 118 perform diagnostic masking by referring to the diagnostic mask table 287 using the NM frame transmitted from the regional ECU 104. In addition, the slave ECUs 108, 109, and 118 perform additional settings of the diagnostic mask using the diagnostic mask information transmitted from the regional ECU 104.

[0427] Similarly, slave ECUs 110 and 111 perform diagnostic masking by referring to diagnostic mask table 307 using the NM frame transmitted from regional ECU 105. In addition, slave ECUs 110 and 111 perform additional setting of diagnostic masking using diagnostic mask information transmitted from regional ECU 105.

[0428] The slave ECUs 112, 113, and 114 perform diagnostic masking by referring to the diagnostic mask table 327 using the NM frame transmitted from the regional ECU 106. In addition, the slave ECUs 112, 113, and 114 perform additional settings of the diagnostic mask using the diagnostic mask information transmitted from the regional ECU 105.

[0429] The slave ECUs 115 and 116 perform diagnostic masking by referring to the diagnostic mask table 347 using the NM frame transmitted from the regional ECU 107. In addition, the slave ECUs 115 and 116 perform additional setting of the diagnostic mask using the diagnostic mask information transmitted from the regional ECU 107.

[0430] The communication system 100 configured in this manner includes a central ECU 101 , regional ECUs 104 to 107 , and slave ECUs 108 to 116 and 118 that are connected to each other so as to be able to transmit and receive communication frames.

[0431] The regional ECU 104 and the slave ECUs 108 and 109 store the diagnosis mask tables 207 and 287. The diagnosis mask tables 207 and 287 set one or more combinations (hereinafter referred to as start-stop combinations) of the communication group, the disconnection device, the sleep device, and the non-receiving frame ID for the slave ECUs 108 and 109 subordinate to the regional ECU 104.

[0432] When the central ECU 101 acquires the start trigger information for determining the communication group to be set in the awake state (that is, the above-mentioned start group), it is configured to determine the start group based on the acquired start trigger information.

[0433] The central ECU 101 is configured to transmit an NM frame indicating the determined activation group to the regional ECU 104 .

[0434] The regional ECU 104 is configured to transfer the NM frame received from the central ECU 101 to the slave ECUs 108 and 109 .

[0435] In such a communication system 100, the slave ECU 109 can identify the combination of the above-mentioned disconnection device and the non-receiving frame ID, and the combination of the above-mentioned sleep device and the non-receiving frame ID by referring to the diagnostic mask table 287 based on the startup group indicated by the NM frame received from the regional ECU 104. Therefore, even if the power supply to the slave ECU 108 via the electronic fuse 195 is cut off and the CAN frame cannot be received from the slave ECU 108, the slave ECU 109 can suppress the occurrence of an abnormality in which the communication interruption is judged to have occurred in the slave ECU 108. Furthermore, even if the slave ECU 109 cannot receive the CAN frame from the slave ECU 108 that has entered the sleep state, it can suppress the occurrence of an abnormality in which the communication interruption is judged to have occurred in the slave ECU 108. As a result, the communication system 100 can improve the accuracy of abnormality detection.

[0436] In the above-described embodiment, S320 corresponds to the process as the group determination unit, S330 corresponds to the process as the start group transmission unit, and S420 corresponds to the process as the frame transfer unit.

[0437] [Seventh Embodiment]

[0438] The seventh embodiment of the present disclosure and the attached Figure 1 In the seventh embodiment, the parts different from the fifth embodiment are described. The same reference numerals are used for the common structures.

[0439] like Fig.33 As shown, the communication system 100 of the seventh embodiment is different from the fifth embodiment in that the diagnosis mask table 167 is omitted in the storage unit 158 ​​of the central ECU 101 .

[0440] like Fig.34 As shown, the present invention is different from the fifth embodiment in that the storage unit 194 of the zone ECU 104 stores a diagnosis mask table 207 similar to that of the sixth embodiment.

[0441] The point that the storage unit 214 of the zone ECU 105 stores the same diagnosis mask table 227 as that of the sixth embodiment is different from the fifth embodiment.

[0442] like Fig.35 As shown, the storage unit 234 of the zone ECU 106 is different from the fifth embodiment in that the storage unit 234 stores the same diagnosis mask table 247 as that of the sixth embodiment.

[0443] The point that the storage unit 254 of the zone ECU 107 stores the same diagnosis mask table 267 as that of the sixth embodiment is different from the fifth embodiment.

[0444] Furthermore, the present invention is different from the fifth embodiment in that the central management process and the regional management process are changed.

[0445] Next, the procedure of the central management process according to the seventh embodiment will be described.

[0446] like Fig.36 As shown, the central management process of the seventh embodiment is different from the fifth embodiment in that the process of S632 is executed instead of S630.

[0447] That is, when the process of S620 is completed, in S632, CPU 161 generates an NM frame based on the activation group determined in S620 by referring to activation table 165. CPU 161 transmits the generated NM frame to area ECUs 104, 105, 106, 107, and the process proceeds to S640.

[0448] Next, the procedure of the area management process according to the seventh embodiment will be described.

[0449] When performing area management processing, such as Fig.37As shown, in S910, the CPU 201, 221, 241, 261 determines whether an NM frame has been received. Here, if the NM frame has not been received, the CPU 201, 221, 241, 261 ends the area management process.

[0450] On the other hand, when the NM frame is received, in S420, the CPU 201, 221, 241, 261 generates diagnostic mask information based on the startup group indicated by the NM frame by referring to the diagnostic mask table 207, 227, 247, 267. The CPU 201, 221, 241, 261 transmits the generated diagnostic mask information to the subordinate slave ECUs, and also transmits the generated diagnostic mask information to other regional ECUs via the central ECU 101.

[0451] In S930 , the CPUs 201 , 221 , 241 , and 261 refer to the diagnostic mask tables 207 , 227 , 247 , and 267 to set the diagnostic mask based on the received NM frame.

[0452] In S940, the CPU 201, 221, 241, 261 determines whether the diagnosis mask information transmitted from the other zone ECU is received. Here, if the diagnosis mask information is not received, the CPU 201, 221, 241, 261 ends the zone management process.

[0453] On the other hand, when the diagnosis mask information is received, in S950 , the CPU 201 , 221 , 241 , 261 transmits the received diagnosis mask information to the subordinate slave ECU.

[0454] In S960 , CPUs 201 , 221 , 241 , and 261 refer to the diagnostic mask information transmitted from other area ECUs and perform additional setting of the diagnostic mask.

[0455] For example, the CPU 201 can refer to the diagnostic mask table 207 to generate diagnostic mask information related to the slave ECU 108, the slave ECU 109, and the slave ECU 118. However, since the diagnostic mask information related to the slave ECUs other than the slave ECUs 108, 109, and 118 cannot be generated, the diagnostic mask setting is performed using the diagnostic mask information transmitted from other area ECUs.

[0456] When the diagnosis mask information related to all slave ECUs is set, the CPUs 201 , 221 , 241 , and 261 terminate the area management process.

[0457] The regional ECU 104 of the communication system 100 configured as above stores the diagnostic mask table 207. The diagnostic mask table 207 sets one or more combinations (hereinafter referred to as start / stop combinations) of communication group, disconnection device, sleep device, and non-receiving frame ID for the subordinate ECUs 108 and 109 of the regional ECU 104.

[0458] When the central ECU 101 acquires the start trigger information, it is configured to determine the start group based on the acquired start trigger information.

[0459] The central ECU 101 is configured to transmit an NM frame indicating the determined activation group to the regional ECU 104 .

[0460] The regional ECU 104 is configured to transmit the start / stop combination corresponding to the start group indicated by the NM frame as diagnostic mask information from the central ECU 101 to the slave ECUs 108, 109, and 118. The regional ECU 104 also transmits the diagnostic mask information to the other regional ECUs 105, 106, and 107 via the central ECU 101. The regional ECU 104 sets the diagnostic mask according to the diagnostic mask information.

[0461] When receiving the diagnostic mask information transmitted from other regional ECUs 105, 106, and 107, the regional ECU 104 transmits the diagnostic mask information to the slave ECUs 108, 109, and 118. The regional ECU 104 performs additional setting of the diagnostic mask based on the received diagnostic mask information.

[0462] The slave ECUs 108 , 109 , and 118 use the diagnostic mask information transmitted from the area ECU 104 to perform setting and additional setting of the diagnostic mask.

[0463] In such a communication system 100, the slave ECU 109 can identify the combination of the cut-off device and the non-receiving frame ID, and the combination of the sleep device and the non-receiving frame ID based on the diagnostic mask information received from the regional ECU 104. Therefore, even if the power supply of the slave ECU 108 via the electronic fuse 195 is cut off and the CAN frame cannot be received from the slave ECU 108, the slave ECU 109 can suppress the occurrence of an abnormality that is determined to be a communication interruption in the slave ECU 108. Moreover, even if the slave ECU 109 cannot receive a CAN frame from the slave ECU 108 that has entered the sleep state, it can suppress the occurrence of an abnormality that is determined to be a communication interruption in the slave ECU 108. Thus, the communication system 100 can improve the accuracy of abnormality detection. In addition, for the regional ECU 104, by setting and additionally setting the diagnostic mask using the diagnostic mask information generated by itself and the diagnostic mask information received from other regional ECUs, the same effect as that of the slave ECU 109 is achieved.

[0464] In the above-described embodiment, S620 corresponds to the process of the group determination unit, S632 corresponds to the process of the startup group transmission unit, and S920 corresponds to the process of the sleep mask information transmission unit.

[0465] As mentioned above, although one embodiment of the present disclosure has been described, the present disclosure is not limited to the above-mentioned embodiment, and can be implemented with various modifications.

[0466] [Modification 1]

[0467] In the above embodiment, power is supplied from the battery 7 via the electronic fuses 15 and 16, but it is sufficient as long as the power supply path is switched between the on state and the off state. For example, a mechanical relay that opens and closes mechanical contacts by electromagnetic action may be used.

[0468] The control units 11, 31 and methods thereof described in the present disclosure may also be implemented by a dedicated computer provided by a processor and a memory programmed to execute one or more functions embodied by a computer program. Or the control units 11, 31 and methods thereof described in the present disclosure may also be implemented by a dedicated computer provided by a processor composed of one or more dedicated hardware logic circuits. Or the control units 11, 31 and methods thereof described in the present disclosure may also be implemented by one or more dedicated computers composed of a combination of a processor and a memory programmed to execute one or more functions and a processor composed of one or more hardware logic circuits. In addition, a computer program may also be stored as an instruction executed by a computer in a computer-readable non-transitional tangible recording medium. The method for implementing the functions of each unit included in the control units 11, 31 does not necessarily need to include software, and all of its functions may be implemented using one or more hardware.

[0469] It is also possible to realize multiple functions of one component in the above-mentioned embodiment by multiple components, or realize one function of one component by multiple components. In addition, it is also possible to realize multiple functions of multiple components by one component, or realize one function realized by multiple components by one component. In addition, it is also possible to omit a part of the structure of the above-mentioned embodiment. In addition, it is also possible to add or replace at least a part of the structure of the above-mentioned embodiment with respect to the structure of other above-mentioned embodiments.

[0470] In addition to the above-mentioned ECU2-6, the present disclosure can also be implemented in various forms such as a system including the ECU2-6 as a component, a program for causing a computer to function as the ECU2-6, a non-migrating physical recording medium such as a semiconductor memory recording the program, and a communication management method.

Claims

1. A communication system comprising a plurality of electronic control devices connected to each other so as to be able to transmit and receive communication frames, wherein: The plurality of electronic control devices respectively belong to at least one communication group among a plurality of communication groups. The communication system is configured to switch one or more of the electronic control devices belonging to the communication group between the awake state and the sleep state individually for each of the communication groups. The plurality of electronic control devices mentioned above include: A first control device receives power supply from a power supply via a power supply switching unit, wherein the power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; a second control device connected to be able to send and receive the communication frame with the first control device; as well as A third control device is connected to be able to transmit and receive the communication frame between the first control device and the second control device, and is configured to control the operation of the power supply switching unit. The first control device and the second control device store a diagnostic mask table, wherein the diagnostic mask table is set with one or more start-stop combinations, wherein the start-stop combination is a combination of the communication group, the electronic control device whose power supply via the power supply switching unit is cut off, i.e., the cut-off device, and the electronic control device in the sleep state, i.e., the sleep device, and identification information of the communication frame that is not received, i.e., the non-receiving frame identification information. The third control device comprises: a group determination unit configured to, when acquiring activation trigger information for determining an activation group, which is the communication group to be in the awake state, determine the activation group based on the acquired activation trigger information; and The activation group transmitting unit is configured to transmit the management frame, which is the communication frame indicating the activation group determined by the group determining unit, to the first control device and the second control device.

2. The communication system according to claim 1, wherein: The first control device and the second control device are configured to set a diagnostic mask for the activation group indicated by the received management frame by referring to the diagnostic mask table.

3. The communication system according to claim 1 or 2, wherein: The third control device is configured to transmit the updated diagnostic mask table to the first control device and the second control device when acquiring the updated diagnostic mask table.

4. The communication system according to claim 1, wherein: The activation trigger information includes the communication frame, and the communication frame is configured such that one bit is allocated to each of the plurality of communication groups, and 1 is set to a bit corresponding to the communication group that is in the awake state.

5. The communication system according to claim 1, wherein: The start trigger information includes event generation information indicating that a preset event has occurred. The third control device is provided with a startup table for establishing a correspondence between one or more of the events and the startup group. The group determination unit of the third control device is configured to determine the activation group by referring to the activation table when acquiring the event occurrence information.

6. The communication system according to claim 1 or 2, wherein: The power supply switching unit includes an electronic fuse.

7. A communication system comprising a plurality of electronic control devices connected to be able to transmit and receive communication frames, wherein: The plurality of electronic control devices respectively belong to at least one communication group among a plurality of communication groups. The communication system is configured to switch one or more of the electronic control devices belonging to the communication group between the awake state and the sleep state individually for each of the communication groups. The plurality of electronic control devices mentioned above include: A first control device receives power supply from a power supply via a power supply switching unit, wherein the power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; a second control device connected to be able to send and receive the communication frame with the first control device; as well as A third control device is connected to be able to transmit and receive the communication frame between the first control device and the second control device, and is configured to control the operation of the power supply switching unit. The third control device stores a diagnostic mask table, wherein the diagnostic mask table sets one or more start-stop combinations, wherein the start-stop combination is a combination of the communication group, the electronic control device whose power supply via the power supply switching unit is cut off, i.e., the cut-off device, and the electronic control device in the sleep state, i.e., the sleep device, and identification information of the communication frame that is not received, i.e., the non-receiving frame identification information. The third control device comprises: a group determination unit configured to, when acquiring activation trigger information for determining an activation group, which is the communication group to be in the awake state, determine the activation group based on the acquired activation trigger information; and The sleep mask information transmitting unit is configured to transmit the start / stop combination corresponding to the start group determined by the group determining unit to the first control device and the second control device as diagnosis mask information.

8. The communication system according to claim 7, wherein: The first control device and the second control device are configured to set a diagnostic mask based on the received diagnostic mask information.

9. The communication system according to claim 7 or 8, wherein: One or more switch combinations are also set in the diagnosis mask table, and the switch combination is a combination of the first control device powered by the power supply switch and the non-receiving frame identification information. The third control device further comprises a switching shielding information sending unit, The switching mask information transmitting unit is configured to transmit the switching unit combination as the diagnosis mask information to the second control device when the power supply switching unit is switched from the on state to the off state.

10. The communication system according to claim 7, wherein: The activation trigger information includes the communication frame, and the communication frame is configured such that one bit is allocated to each of the plurality of communication groups, and 1 is set to a bit corresponding to the communication group that is in the awake state.

11. The communication system according to claim 7, wherein: The start trigger information includes event generation information indicating that a preset event has occurred. The third control device is provided with a startup table for establishing a correspondence between one or more of the events and the startup group. The group determination unit of the third control device is configured to determine the activation group by referring to the activation table when acquiring the event occurrence information.

12. A communication system comprising a control device including a plurality of electronic fuses connected so as to be able to transmit and receive communication frames, wherein: The plurality of electronic control devices respectively belong to at least one communication group among a plurality of communication groups. The communication system is configured to switch one or more of the electronic control devices belonging to the communication group between the awake state and the sleep state individually for each of the communication groups. The plurality of electronic control devices mentioned above include: A first slave control device receives power supply from a power supply via a power supply switching unit, wherein the power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; a second slave control device connected to be able to send and receive the communication frame with the first slave control device; a zone control device connected to be able to transmit and receive the communication frame between the first slave control device and the second slave control device, and configured to control the operation of the power supply switching unit; and a central control device connected to be able to send and receive the communication frames with the regional control devices; The area control device, the first slave control device, and the second slave control device store a diagnostic mask table, wherein the diagnostic mask table sets one or more start-stop combinations, wherein the start-stop combination is a combination of the communication group, the electronic control device whose power supply via the power supply switching unit is cut off, i.e., the cut-off device, and the electronic control device in the sleep state, i.e., the sleep device, and identification information of the communication frame that is not received, i.e., the non-receiving frame identification information. The central control device has: a group determination unit configured to, when acquiring activation trigger information for determining an activation group, which is the communication group to be in the awake state, determine the activation group based on the acquired activation trigger information; and an activation group transmitting unit configured to transmit the management frame, which is the communication frame indicating the activation group determined by the group determining unit, to the area control device; The regional control device includes a frame transfer unit configured to transfer the management frame received from the central control device to the first slave control device and the second slave control device.

13. A communication system comprising a plurality of electronic control devices connected to each other so as to be able to transmit and receive communication frames, wherein: The plurality of electronic control devices respectively belong to at least one communication group among a plurality of communication groups. The communication system is configured to switch one or more of the electronic control devices belonging to the communication group between the awake state and the sleep state individually for each of the communication groups. The plurality of electronic control devices mentioned above include: A first slave control device receives power supply from a power supply via a power supply switching unit, wherein the power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; a second slave control device connected to be able to send and receive the communication frame with the first slave control device; a zone control device connected to be able to transmit and receive the communication frame between the first slave control device and the second slave control device, and configured to control the operation of the power supply switching unit; and a central control device connected to be able to send and receive the communication frames with the regional control devices; The central control device stores a diagnostic mask table, wherein the diagnostic mask table sets one or more start-stop combinations, wherein the start-stop combination is a combination of the communication group, the electronic control device whose power supply via the power supply switching unit is cut off, i.e., the cut-off device, and the electronic control device in the sleep state, i.e., the sleep device, and identification information of the communication frame that is not received, i.e., the non-receiving frame identification information. The central control device has: a group determination unit configured to, when acquiring activation trigger information for determining an activation group, which is the communication group to be in the awake state, determine the activation group based on the acquired activation trigger information; and a sleep mask information transmitting unit configured to transmit the start-stop combination corresponding to the start group determined by the group determining unit to the zone control device as diagnosis mask information; The area control device includes a mask information transmitting unit configured to transmit the diagnosis mask information received from the central control device to the first slave control device and the second slave control device.

14. A communication system comprising a plurality of electronic control devices connected to each other so as to be able to transmit and receive communication frames, wherein: The plurality of electronic control devices respectively belong to at least one communication group among a plurality of communication groups. The communication system is configured to switch one or more of the electronic control devices belonging to the communication group between the awake state and the sleep state individually for each of the communication groups. The plurality of electronic control devices mentioned above include: A first slave control device receives power supply from a power supply via a power supply switching unit, wherein the power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; a second slave control device connected to be able to send and receive the communication frame with the first slave control device; a zone control device connected to be able to transmit and receive the communication frame between the first slave control device and the second slave control device, and configured to control the operation of the power supply switching unit; and a central control device connected to be able to send and receive the communication frames with the regional control devices; The above-mentioned area control device, the above-mentioned first slave control device and the above-mentioned second slave control device store a diagnostic mask table, and the above-mentioned diagnostic mask table sets one or more setting start-stop combinations for the above-mentioned first slave control device and the above-mentioned second slave control device that are subordinate to the above-mentioned area control device. The above-mentioned start-stop combination is a combination of the above-mentioned communication group, the above-mentioned electronic control device whose power supply via the above-mentioned power supply switching unit is cut off, that is, the cut-off device, and the above-mentioned electronic control device that is in the above-mentioned sleep state, that is, the sleep device, and the identification information of the above-mentioned communication frame that is not received, that is, the non-receiving frame identification information. The central control device has: a group determination unit configured to, when acquiring activation trigger information for determining an activation group, which is the communication group to be in the awake state, determine the activation group based on the acquired activation trigger information; and an activation group transmitting unit configured to transmit the management frame, which is the communication frame indicating the activation group determined by the group determining unit, to the area control device; The regional control device includes a frame transfer unit configured to transfer the management frame received from the central control device to the first slave control device and the second slave control device.

15. A communication system comprising a plurality of electronic control devices connected to each other so as to be able to transmit and receive communication frames, wherein: The plurality of electronic control devices respectively belong to at least one communication group among a plurality of communication groups. The communication system is configured to switch one or more of the electronic control devices belonging to the communication group between the awake state and the sleep state individually for each of the communication groups. The plurality of electronic control devices mentioned above include: A first slave control device receives power supply from a power supply via a power supply switching unit, wherein the power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; a second slave control device connected to be able to send and receive the communication frame with the first slave control device; a zone control device connected to be able to transmit and receive the communication frame between the first slave control device and the second slave control device, and configured to control the operation of the power supply switching unit; and a central control device connected to be able to send and receive the communication frames with the regional control devices; The area control device stores a diagnostic mask table, wherein the diagnostic mask table sets one or more start-stop combinations for the first slave control device and the second slave control device that are subordinate to the area control device, wherein the start-stop combination is a combination of the communication group, the electronic control device whose power supply via the power supply switching unit is cut off, i.e., the cut-off device, and the electronic control device that is in the sleep state, i.e., the sleep device, and identification information of the communication frame that is not received, i.e., the non-receiving frame identification information. The central control device has: a group determination unit configured to, when acquiring activation trigger information for determining an activation group, which is the communication group to be in the awake state, determine the activation group based on the acquired activation trigger information; and an activation group transmitting unit configured to transmit the management frame, which is the communication frame indicating the activation group determined by the group determining unit, to the area control device; The area control device includes a sleep mask information transmitting unit configured to transmit the start / stop combination corresponding to the start group indicated by the management frame received from the central control device to the first slave control device and the second slave control device as diagnosis mask information.

Images