Relay device, monitoring device, relay program, and monitoring program

Abstract

This relay device is used in an in-vehicle network including a plurality of function units, and is provided with: a relay unit that performs relay processing for relaying frames transmitted and received between the function units; a detection unit that detects addition of a function unit to the in-vehicle network; and a control unit that restricts the relay processing of a frame transmitted from a new function unit other than a frame used in a setting process for performing communication in a new network that includes the in-vehicle network of the new function unit, and mitigates the restriction of the relay processing when the setting process is completed, the in-vehicle network including the new function unit, the in-vehicle network including the in-vehicle network, the in-vehicle network including the in-vehicle network, the in-vehicle network including the in-vehicle network, the in-vehicle network including the in-vehicle network, the in-vehicle network including the in-vehicle network, and the in-vehicle network including the in-vehicle network. The new function part is the function part detected by the detection part.

Description

Technical Field

[0001] The present disclosure relates to a relay device, a monitoring device, a relay program, and a monitoring program.

[0002] This application claims the benefit of priority based on Japanese patent application No. 2022-121046, filed on July 29, 2022, the disclosure of which is incorporated herein in its entirety. Background Art

[0003] Patent document 1 (International Publication No. 2020 / 145334) discloses the following technology: That is, a vehicle control device controls the above-mentioned multiple repeaters based on a control scenario, and the control scenario is formed by establishing a correspondence between the state of a vehicle having a vehicle network composed of multiple repeaters constructed internally and the control contents set for the above-mentioned multiple repeaters.

[0004] Prior art literature Patent Literature Patent Document 1: International Publication No. 2020 / 145334 Summary of the invention

[0005] The relay device disclosed in the present invention is used in an in-vehicle network including a plurality of functional units, wherein the relay device comprises: a relay unit that performs relay processing, wherein the relay processing relays frames sent and received between the functional units; a detection unit that detects the addition of a functional unit to the in-vehicle network; and a control unit that limits the relay processing of frames sent from the new functional unit other than frames used in a setting process, and relaxes the limitation of the relay processing when the setting process is completed, wherein the setting process is used to communicate in a new network, wherein the new network is the in-vehicle network that also includes a new functional unit, and the new functional unit is the functional unit detected by the detection unit.

[0006] One method of the present disclosure can be implemented not only as a relay device having such a characteristic processing unit, but also as a relay method that uses the characteristic processing as a step. In addition, one method of the present disclosure can be implemented as a semiconductor integrated circuit that implements part or all of the relay device, or can be implemented as a system including the relay device.

[0007] One method of the present disclosure can be implemented not only as a monitoring device having such a characteristic processing unit, but also as a monitoring method with the characteristic processing as steps. In addition, one method of the present disclosure can be implemented as a semiconductor integrated circuit that implements part or all of the monitoring device, or can be implemented as a system including the monitoring device. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1It is a diagram showing the configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Figure 2 It is a diagram showing the structure of a relay device according to an embodiment of the present disclosure. Figure 3 It is a diagram showing the configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Figure 4 It is a diagram showing the structure of a relay device according to an embodiment of the present disclosure. Figure 5 This is a diagram showing an example of a setting state of a relay device in the in-vehicle communication system according to the embodiment of the present disclosure. Figure 6 This is a diagram showing an example of a sequence of a new network construction process in the in-vehicle communication system according to the embodiment of the present disclosure. Figure 7 This is a diagram showing another example of the sequence of the new network construction process in the in-vehicle communication system according to the embodiment of the present disclosure. DETAILED DESCRIPTION

[0009] Technology is being developed to change the configuration of the in-vehicle network.

[0010] [Problems to be Solved by the Present Disclosure]

[0011] When the settings of the in-vehicle network are changed dynamically, there is a possibility that the settings change may affect the communication in the in-vehicle network.

[0012] The present disclosure has been made to solve the above-mentioned problems, and an object of the present disclosure is to provide a relay device, a monitoring device, a relay program, and a monitoring program that can build a new structure of an in-vehicle network while maintaining stable operation in the in-vehicle network.

[0013] [Effects of the present disclosure]

[0014] According to the present disclosure, it is possible to construct an in-vehicle network with a new structure while maintaining stable operation in the in-vehicle network.

[0015] [Description of Embodiments of the Present Disclosure]

[0016] First, the contents of the embodiments of the present disclosure will be listed and described.

[0017] (1) A relay device according to an embodiment of the present disclosure is used in an in-vehicle network including a plurality of functional units, wherein the relay device comprises: a relay unit that performs a relay process for relaying frames sent and received between the functional units; a detection unit that detects the addition of a functional unit to the in-vehicle network; and a control unit that limits the relay process for frames sent from the new functional unit other than frames used in a setting process for communicating in a new network, the new network being the in-vehicle network further including a new functional unit, the new functional unit being the functional unit detected by the detection unit, and easing the limitation on the relay process when the setting process is completed.

[0018] In this way, by limiting the relay processing of frames sent from the new functional unit in a state where the setting change for the new network is not completed, it is possible to prevent the increase in the communication volume in the vehicle network and the decrease in transmission quality caused by the frames sent from the new functional unit in this state from affecting the existing communication between the functional units. Therefore, it is possible to build a vehicle network with a new structure while maintaining stable operation in the vehicle network.

[0019] (2) In the above (1), one or more second relay devices may be further provided in the in-vehicle network, and the second relay device is a relay device other than the first relay device serving as the relay device, which relays frames sent and received between the functional units, and the control unit relaxes the restriction of the relay processing when the setting processing of all the relay devices in the in-vehicle network is completed.

[0020] According to such a configuration, in an in-vehicle network including a plurality of relay devices, it is possible to prevent the difference in the completion time of the setting process between the relay devices from affecting the existing communication between the functional units.

[0021] (3) In the above (2), the first relay device may further include a setting unit configured to make a predetermined notification to other devices in the in-vehicle network when the setting process of the first relay device is completed.

[0022] According to such a configuration, in an in-vehicle network including a plurality of relay devices, the completion of the setting process in the plurality of relay devices can be easily grasped in the other device.

[0023] (4) In any of the above (1) to (3), authentication processing of the new functional unit may be performed before the setting processing, and the control unit may limit the relay processing of frames sent from the new functional unit other than frames used for the authentication processing of the new functional unit, and limit the relay processing of frames sent from the new functional unit other than frames used for the setting processing when the authentication processing is completed.

[0024] According to such a configuration, the restriction content of the relay process can be appropriately set according to the progress status of the authentication process of the new functional unit and the setting process of the in-vehicle network.

[0025] (5) The monitoring device involved in the embodiment of the present disclosure is used in an in-vehicle network including multiple functional units and multiple relay devices, and the relay devices relay frames sent and received between the functional units, wherein the monitoring device includes: an update confirmation unit that confirms the completion of a setting process in the multiple relay devices, the setting process is used to communicate in a new network, and the new network is a new functional unit, that is, the in-vehicle network formed by connecting the new functional unit and the relay device; and a notification unit that notifies the relay device connected to the new functional unit of the completion when the completion is confirmed by the update confirmation unit.

[0026] With such a structure, the relay device connected to the new functional unit can limit the relay processing of frames sent from the new functional unit in a state where the setting change for the new network has not been completed in each relay device. As a result, it is possible to prevent the increase in the communication volume in the vehicle network and the decrease in transmission quality caused by the frames sent from the new functional unit in this state from affecting the existing communication between the functional units. Therefore, it is possible to build a vehicle network with a new structure while maintaining stable operation in the vehicle network.

[0027] (6) In the above (5), the monitoring device may further generate setting contents for communicating in the new network and notify the setting contents to the one or more relay devices.

[0028] With such a configuration, the setting process of a new network and the completion confirmation of the setting process in each relay device can be centrally managed, thereby realizing a more efficient in-vehicle network.

[0029] (7) An embodiment of the present disclosure relates to a relay program for a relay device used in an in-vehicle network including a plurality of functional units, wherein the relay program is used to cause a computer to operate as the following units: a relay unit that performs relay processing, wherein the relay processing relays frames sent and received between the functional units; a detection unit that detects the addition of a functional unit to the in-vehicle network; and a control unit that limits the relay processing of frames sent from the new functional unit other than frames used in a setting process for communicating in a new network, wherein the new network is the in-vehicle network that also includes a new functional unit, wherein the new functional unit is the functional unit detected by the detection unit.

[0030] In this way, by limiting the relay processing of frames sent from the new functional unit in a state where the setting change for the new network is not completed, it is possible to prevent the increase in the communication volume in the vehicle network and the decrease in transmission quality caused by the frames sent from the new functional unit in this state from affecting the existing communication between the functional units. Therefore, it is possible to build a vehicle network with a new structure while maintaining stable operation in the vehicle network.

[0031] (8) The monitoring program involved in the embodiment of the present disclosure is used for a monitoring device used in an in-vehicle network including multiple functional units and multiple relay devices, wherein the relay devices relay frames sent and received between the functional units, and the monitoring program is used to cause a computer to operate as the following units: an update confirmation unit that confirms the completion of a setting process in the multiple relay devices, the setting process is used to communicate in a new network, the new network is a new functional unit, that is, the in-vehicle network formed by connecting the new functional unit and the relay device; and a notification unit that notifies the relay device connected to the new functional unit of the completion when the completion is confirmed by the update confirmation unit.

[0032] In this way, by limiting the relay processing of frames sent from the new functional unit in a state where the setting change for the new network is not completed, it is possible to prevent the increase in the communication volume in the vehicle network and the decrease in transmission quality caused by the frames sent from the new functional unit in this state from affecting the existing communication between the functional units. Therefore, it is possible to build a vehicle network with a new structure while maintaining stable operation in the vehicle network.

[0033] Hereinafter, the embodiments of the present disclosure will be described using the accompanying drawings. In addition, the same reference numerals are used for the same or corresponding parts in the drawings, and their descriptions are not repeated. In addition, at least a part of the embodiments described below may be arbitrarily combined.

[0034] [In-vehicle communication system]

[0035] Figure 1 2 is a diagram showing a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Figure 1 The in-vehicle communication system 301 includes one or more in-vehicle ECUs (Electronic Control Units) 202 and one or more relay devices 101 .

[0036] exist Figure 1In the example shown, the vehicle communication system 301 includes vehicle ECUs 202A and 202B as vehicle ECUs 202 and relays 101A and 101B as relays 101. The vehicle communication system 301 is mounted on a vehicle 501. The vehicle ECU 202 and the relays 101 constitute a vehicle network 401. The vehicle ECU 202 is an example of a functional unit. The relay 101A is an example of a monitoring device.

[0037] The vehicle communication system 301 is not limited to a structure including two vehicle ECUs 202, but may be a structure including one or more than three vehicle ECUs 202. The vehicle communication system 301 is not limited to a structure including two relay devices 101, but may be a structure including one or more than three relay devices 101.

[0038] In the in-vehicle network 401 , the in-vehicle ECU 202 is connected to the relay device 101 via, for example, an Ethernet (registered trademark) cable.

[0039] More specifically, the relay device 101 includes a plurality of communication ports 51. The communication port 51 is, for example, a terminal to which an Ethernet cable can be connected. Each relay device 101 and each vehicle-mounted ECU 202 is connected to another relay device 101 or vehicle-mounted ECU 202 via the communication port 51 and the Ethernet cable.

[0040] The relay device 101 is used in an in-vehicle network 401 including a plurality of in-vehicle ECUs 202. The relay device 101 is, for example, a gateway device, and can relay data between the plurality of in-vehicle ECUs 202 connected thereto. The relay device 101 can perform relay processing according to, for example, layer 2 and layer 3 above layer 2.

[0041] In more detail, for example, the relay device 101 performs relay processing of frames exchanged between the vehicle-mounted ECUs 202 connected via an Ethernet cable in accordance with the Ethernet communication standard.

[0042] In addition, in the vehicle communication system 301, it is not limited to a structure that relays frames according to the Ethernet communication standard. For example, it can also be a structure that relays frames according to communication standards such as CAN (Controller Area Network), CAN FD (CAN with Flexible Data Rate), FlexRay (registered trademark), MOST (Media Oriented Systems Transport) (registered trademark) and LIN (Local Interconnect Network).

[0043] The vehicle-mounted ECU 202 includes, for example, an automatic driving ECU, an engine ECU, a sensor, a navigation device, a human-machine interface, and a camera.

[0044] Each relay device 101 and each in-vehicle ECU 202 generates a frame including various information described below, and transmits the frame to another in-vehicle ECU 202 or relay device 101 .

[0045] [Relay device 101B]

[0046] Figure 2 It is a diagram showing the structure of a relay device according to an embodiment of the present disclosure. Figure 2 Yes means Figure 1 The structure of the relay device 101B shown.

[0047] Reference Figure 2 The relay device 101B includes a relay unit 11, a detection unit 12, an authentication unit 13, a setting unit 14, a control unit 15, and a storage unit 16. The storage unit 16 is, for example, a nonvolatile memory.

[0048] The relay unit 11 performs a relay process for relaying frames transmitted and received between the vehicle-mounted ECUs 202. More specifically, when receiving a frame from a vehicle-mounted ECU 202 or the relay device 101A, the relay unit 11 transmits the received frame to the vehicle-mounted ECU 202 or the relay device 101A to which it is to be transmitted.

[0049] When the relay unit 11 receives a frame addressed to its own relay device 101 from a new functional unit newly added to the in-vehicle network 401 , the relay unit 11 outputs the received frame to the detection unit 12 or the authentication unit 13 .

[0050] Figure 3 It is a diagram showing the structure of the vehicle-mounted communication system according to the embodiment of the present disclosure. Figure 3 Express Figure 1 The in-vehicle network 401 shown has a structure in which the in-vehicle ECU 202C is newly added.

[0051] Reference Figure 3 The in-vehicle ECU 202C is connected to the communication port 51 in the relay device 101B via an Ethernet cable, for example.

[0052] The detection unit 12 detects the addition of a functional unit to the in-vehicle network 401. That is, the detection unit 12 detects a functional unit newly added to the in-vehicle network 401, that is, a new functional unit, and in this case, detects the in-vehicle ECU 202C.

[0053] When the in-vehicle ECU 202C is connected to the communication port 51 in the relay device 101B and receives power supply, it transmits a frame including connection request information for requesting a communication connection in the in-vehicle network 401 to the relay device 101B.

[0054] The detection unit 12 receives the frame including the connection request information via the relay unit 11, detects the new functional unit, i.e., the vehicle-mounted ECU 202C, which is the source of the connection request information, and sends a frame including the connection request response to the vehicle-mounted ECU 202C via the relay unit 11. In addition, the detection unit 12 notifies the control unit 15 that the new functional unit has been detected.

[0055] Furthermore, for example, the detection unit 12 may be configured to periodically broadcast a search message for detecting a new functional unit via the relay unit 11. In this case, the new functional unit receives the search message and transmits the connection request information as a response to the received search message.

[0056] In addition, the detection unit 12 may be configured to detect an application of the existing vehicle-mounted ECU 202 installed in the vehicle-mounted network 401 as a new functional unit. That is, the new functional unit may be hardware or software.

[0057] Hereinafter, the in-vehicle network 401 including the new functional unit is also referred to as a new network, the in-vehicle network 401 before the new functional unit is added is also referred to as an existing network, and the functional unit included in the existing network is also referred to as an existing functional unit.

[0058] In the in-vehicle communication system 301 , for example, an authentication process of a new functional unit is performed before a network setting process described later.

[0059] More specifically, the in-vehicle ECU 202C receives the connection request response from the relay device 101B, and transmits a frame including its own ID and the authentication password to the relay device 101B.

[0060] The authentication unit 13 in the relay device 101B receives the frame transmitted from the in-vehicle ECU 202C via the relay unit 11 , and performs authentication processing of the in-vehicle ECU 202C using the ID and the authentication password included in the received frame.

[0061] When the authentication of the in-vehicle ECU 202C is successful, the authentication unit 13 transmits a frame including authentication success information indicating that the authentication is successful to the in-vehicle ECU 202C via the relay unit 11 .

[0062] As described above, when the authentication of the new functional unit succeeds, the authentication unit 13 transmits a frame of device connection information including the ID indicating the new functional unit to the relay device 101A via the relay unit 11 , for example.

[0063] Furthermore, the in-vehicle ECU 202C may be configured to include its own ID and authentication password in a frame including the connection request information and transmit the frame to the relay device 101B.

[0064] [Relay device 101A]

[0065] Figure 4 It is a diagram showing the structure of a relay device according to an embodiment of the present disclosure. Figure 4 express Figure 1 The structure of the relay device 101A shown.

[0066] Reference Figure 4 The relay device 101A includes a relay unit 1, an update confirmation unit 2, a generation unit 3, a setting unit 4, a notification unit 5, and a storage unit 6. The storage unit 6 is, for example, a flash memory.

[0067] The relay unit 1 performs a relay process for relaying frames transmitted and received between the vehicle-mounted ECUs 202. More specifically, when receiving a frame from a vehicle-mounted ECU 202 or a relay device 101B, the relay unit 1 transmits the received frame to the vehicle-mounted ECU 202 or the relay device 101B to which it is to be transmitted.

[0068] The generator 3 obtains device information including information on the new function unit, the existing function unit, and the network configuration of the layers lower than the application layer of the relay devices 101A and 101B, for example.

[0069] More specifically, upon receiving device connection information from relay device 101B via relay device 1 , generator 3 acquires device information of new functional units indicated by the device connection information and acquires device information of existing functional units and relay devices 101A and 101B.

[0070] For example, the generating unit 3 obtains information capable of identifying specifications of hardware devices such as the on-board ECU 202 and the relay device 101 in the new network and the topology of the new network, as well as information capable of identifying at least one of constraints related to the configuration of the hardware devices applied to the new network and constraints on the communication method in the new network as device information.

[0071] As information capable of identifying the specifications of the hardware device and the topology of the new network, the generating unit 3 obtains, for example, at least any one of the following information, the information including information related to the device type such as the hardware device's representation identifier, name, sensor category, etc., memory size, the number of physical ports set for each communication protocol, the identifier of the physical port, power supply structure, power consumption, VLAN (Virtual Local Area Network) ID, subnet address and functional domain, information related to the specifications of the CPU or GPU (Graphics Processing Unit) mounted on the hardware device, information related to the connection relationship between the hardware devices, information related to the bandwidth of communication between the hardware devices, and information related to the specifications of the relay device 101.

[0072] The generating unit 3 obtains, for example, at least one of the information related to the computing speed required for the execution of the application in the vehicle-mounted ECU 202, the memory usage, the constraints of the OS (Operating System) environment, and the constraints of communication protocols such as TCP (Transmission Control Protocol) and UDP (User datagram Protocol) as information capable of identifying the constraints related to the configuration of the application to the hardware device.

[0073] The generating unit 3 obtains at least one of the following information, including the size of communication data of the application in the vehicle-mounted ECU 202, the frequency of communication, whether burst transmission is required, the allowed delay time, the allowed amount of loss, the required security level, the action time, the communication type indicating, for example, whether it is periodic communication or irregular communication, the identifier of the application that is the communication object, the message transmission method indicating a request-response type or a publication-subscription type, and information related to the priority of the application's communication, as information capable of identifying the constraints on the communication method in the new network.

[0074] For example, the generator 3 specifies one or more types of device information necessary for generating the setting information of the new network from among the types of device information described above.

[0075] The generator 3 transmits an information request notification indicating that the device information of the specified type should be transmitted to the existing function unit, the new function unit, and the relay device 101B.

[0076] In response to the information request notification received from the generator 3 , the existing function unit, the new function unit, and the relay device 101B transmit their own device information of the type specified in the information request notification to the generator 3 , for example.

[0077] Furthermore, the generator 3 refers to the storage 6 and acquires the device information of the relay device 101A of the specified type from the storage 6 .

[0078] The generator 3 generates setting information of the new network based on the acquired information of each device.

[0079] More specifically, the generator 3 generates setting information indicating setting contents of the relay devices 101A and 101B for performing communication in the new network.

[0080] For example, the generator 3 generates setting information based on the acquired device information, which is the setting content of the relay device 101 such as filtering, communication bandwidth, and VLAN settings in the relay devices 101A and 101B for each functional unit and the relay devices 101A and 101B to communicate in the new network.

[0081] The generator 3 notifies at least one of the relay devices 101A and 101B of the setting contents for performing communication in the new network based on the generated setting information.

[0082] For example, the generator 3 notifies the relay device 101 that needs to change the setting of the setting content based on the setting information. If there is no relay device 101 that needs to change the setting in the new network, the generator 3 does not notify the setting content, for example. In addition, the generator 3 outputs the update device information of the device that is the notification target of the setting content to the update confirmation unit 2.

[0083] When notifying the relay device 101A of the setting content, the generator 3 notifies the setting content to the setting unit 4. When notifying the relay device 101B of the setting content, the generator 3 transmits the setting information indicating the setting content to the relay device 101B via the relay unit 1.

[0084] When the setting contents are notified from the generator 3 , the setting unit 4 in the relay device 101A and the setting unit 14 in the relay device 101B perform various setting changes according to the notified setting contents.

[0085] Furthermore, the generator 3 may be configured to generate setting information indicating setting contents of existing functional units and new functional units, and notify the functional units other than the relay device 101 of setting contents for communicating in the new network based on the setting information.

[0086] Each functional unit and the relay devices 101A and 101B in the new network communicate with each other according to the changed setting contents.

[0087] [Topic]

[0088] Figure 5This is a diagram showing an example of a setting state of a relay device in the in-vehicle communication system according to the embodiment of the present disclosure.

[0089] Reference Figure 5 First, the new functional unit is connected to the in-vehicle network 401. At this time, the settings of the relay devices 101A and 101B are the old settings, that is, the settings of the existing network (time t1).

[0090] Next, the relay device 101A starts network setting processing such as collecting device information and generating setting information of a new network. At this time, the settings of the relay devices 101A and 101B remain the old settings (time t2).

[0091] Next, the relay device 101A changes the settings for communicating in the new network based on the above-mentioned setting information. At this time, the settings of the relay device 101A are internally processed, so they are updated to the new settings, that is, the settings for the new network. On the other hand, the settings of the relay device 101B remain the old settings due to delays in communication processing, etc. (time t3).

[0092] Next, the relay device 101B that has received the setting information from the relay device 101A changes the setting contents for communicating in the new network based on the setting information. As a result, the settings of both the relay devices 101A and 101B become new settings (time t4).

[0093] Here, if the new functional unit sends a frame to other functional units at any of times t1 to t3, that is, when part of the setting changes for the new network are not completed, it is possible that the communication volume in the vehicle network 401 increases due to the frame, resulting in a decrease in transmission quality such as delay in the generation of frames between existing functional units, or the frame is discarded due to the retention of the frame in the relay device 101, etc., which affects the existing communication between the functional units.

[0094] Therefore, in the vehicle-mounted communication system according to the embodiment of the present disclosure, the above-mentioned problems are solved by the following configuration.

[0095] In the relay device 101B, the control unit 15 limits the relay processing of frames transmitted from the new functional unit other than the frames used in the setting processing for communicating in the new network, which is the in-vehicle network 401 also including the new functional unit detected by the detection unit 12. Furthermore, the control unit 15 relaxes the limitation of the relay processing when the setting processing is completed.

[0096] For example, when the setting process of all the relay devices 101 in the in-vehicle network 401 is completed, the control unit 15 relaxes the restriction of the relay process.

[0097] In addition, for example, the control unit 15 restricts the relay processing of frames sent from the new functional unit other than the frames used in the authentication processing of the new functional unit. Furthermore, when the authentication processing is completed, the control unit 15 restricts the relay processing of frames sent from the new functional unit other than the frames used in the above-mentioned setting processing.

[0098] That is, the control unit 15 performs filtering settings divided into two stages: communication required for device authentication and communication required for setting change for a new network.

[0099] For example, the control unit 15 sets the content of the relay processing of the relay unit 11 by changing the value of the setting register of the relay unit 11. As an example, the relay unit 11 performs filtering according to IEEE802.1Qci. According to the setting of the control unit 15, the relay unit 11 allows the relay of the frame and discards the frame according to the MAC address, VLAN ID, IP address, DSCP (Differentiated Services Code Point) value, protocol, port number, etc. included in the received frame.

[0100] More specifically, the control unit 15 allows relay of frames including connection request information in the initial state and sets the relay unit 11 to discard frames other than frames including connection request information from an empty port, that is, a communication port 51 to which no other device is connected.

[0101] As described above, the control unit 15 receives the notification of the detection of the new functional unit from the detection unit 12, and changes the setting of the communication port 51 changed from an empty port to a connected port, that is, the communication port 51 connected to the new functional unit, in the relay unit 11. Specifically, the control unit 15 allows the relay unit 11 to relay the authentication processing frame from the communication port 51 connected to the new functional unit, and continues the discard setting of frames other than the frame.

[0102] The relay unit 11 outputs the frame for the authentication process received from the connection port to the authentication unit 13. The authentication unit 13 performs the authentication process as described above and notifies the control unit 15 that the authentication of the new functional unit has been successful.

[0103] The control unit 15 receives a notification from the authentication unit 13 indicating that the authentication of the new functional unit has been successful, and changes the setting of the connection port in the relay unit 11. Specifically, the control unit 15 allows the relay unit 11 to relay the frame for network setting processing from the communication port 51 to which the new functional unit is connected, and continues the discard setting of frames other than the frame.

[0104] Furthermore, for example, when the setting process of the relay device 101B using the frame for the network setting process is completed, the setting unit 14 makes a predetermined notification to other devices in the in-vehicle network 401 .

[0105] Specifically, the setting unit 14 transmits an update completion notification indicating that various setting changes according to the setting contents notified from the generating unit 3 have been completed to the update confirming unit 2 in the relay device 101A via the relay unit 11 .

[0106] In the relay device 101A, the update confirmation unit 2 confirms completion of the setting process for performing communication in the new network, which is the in-vehicle network 401 to which the new functional unit is connected to the relay device 101B, in a plurality of relay devices, here in the relay devices 101A and 101B.

[0107] When the update confirmation unit 2 confirms the completion, the notification unit 5 notifies the relay device 101B to which the new functional unit is connected of the completion.

[0108] Specifically, the setting unit 4 outputs an update completion notification to the update confirmation unit 2, the update completion notification indicating that various setting changes according to the setting contents notified from the generation unit 3 have been completed.

[0109] When the update confirmation unit 2 receives an update completion notification from all devices represented by the update device information received from the self-generating unit 3, such as from the relay devices 101A and 101B, it determines that the network setting process, i.e., the setting process for communicating in the new network, is completed, and notifies the notification unit 5 of the completion.

[0110] The notification unit 5 completes the network setting process and transmits a frame permission notification indicating permission for transmission of frames from the new functional unit to the relay device 101B via the relay unit 1 .

[0111] In the relay device 101B, the control unit 15 receives the frame permission notification from the relay device 101A via the relay unit 11, and changes the setting in the relay unit 11 of the connection port. Specifically, the control unit 15 cancels the discard setting of the frame from the communication port 51 connected to the new functional unit, and allows the relay unit 11 to relay all the frames from the communication port 51. In addition, the control unit 15 may be configured to continue the prohibition setting of the relay of the frame from the communication port 51 to the specific vehicle-mounted ECU 202 according to the setting content of the new network by the generator 3.

[0112] [Flow of Action]

[0113] Figure 6This is a diagram showing an example of a sequence of a new network construction process in the in-vehicle communication system according to the embodiment of the present disclosure.

[0114] Reference Figure 6 First, the relay unit 11 in the relay device 101B is set to prohibit relaying of frames other than frames including connection request information received at an empty port and discard the frames (step S31 ).

[0115] Next, the new function unit is connected to the vacant port of the relay device 101B, and the new function unit transmits connection request information to the relay device 101B (step S32).

[0116] Next, the relay device 101B receives the connection request information, detects the new functional unit (step S33 ), and permits relay of the frame for the authentication process received at the connection port (step S34 ).

[0117] Next, the relay device 101B sends a connection request response to the new functional unit (step S35 ), and various information is transmitted and received between the relay device 101B and the new functional unit to perform authentication processing of the new functional unit (step S36 ).

[0118] Next, when the authentication process of the new functional unit succeeds, the relay device 101B permits relay of the frame for the network setting process received at the connection port (step S37 ), and transmits the device connection information to the relay device 101A (step S38 ).

[0119] Next, the relay device 101A transmits an information request notification for requesting device information to the relay device 101B, the new function unit, and each existing function unit (steps S39 to S41 ).

[0120] Next, as a response to the information request notification, the relay device 101B, the new function unit, and each existing function unit transmits their own device information of the type specified in the information request notification to the relay device 101A (steps S42 to S44 ).

[0121] Next, the relay device 101A generates setting information of the new network based on the device information received from the relay device 101B, the new function unit, and the existing function units, and the device information of the relay device 101A (step S45 ).

[0122] Next, the relay device 101A changes various settings of itself based on the generated setting information (step S46 ), and notifies the relay device 101B of the setting contents (step S47 ).

[0123] Next, the relay device 101B changes various settings according to the setting contents notified from the relay device 101A (step S48 ).

[0124] Next, the relay device 101B transmits an update completion notification to the relay device 101A (step S49 ).

[0125] Next, the relay device 101A receives the update completion notification from the setting unit 4 in the relay device 101A and the relay device 101B, confirms that the configuration change of all relay devices has been completed (step S50 ), and transmits a frame permission notification to the relay device 101B (step S51 ).

[0126] Next, the relay device 101B permits relay of all frames from the communication port 51 to which the new functional unit is connected (step S52 ).

[0127] Next, the relay devices 101A and 101B, the new functional unit, and the existing functional units in the new network communicate with each other according to the changed setting contents (step S53 ).

[0128] Here, the difference in completion time of the setting process between the relay devices 101 tends to increase as the number of relay devices 101 installed in the vehicle network 401 increases. Therefore, as described above, the effect of allowing the relay of frames transmitted by the new function unit after the network setting process is completed increases.

[0129] Furthermore, the network setting process by the generation unit 3 and the setting units 4 and 14 may include setting of the priority order of frames transmitted from each functional unit in the new network.

[0130] Thus, for example, even in the case where the new functional unit is an on-vehicle ECU that sends information with a large amount of data such as images, after the network setting process is completed to lower the priority of the information and increase the priority of information related to the driving control of the vehicle 501, the frames sent from the new functional unit can be transmitted in the on-vehicle network 401, thereby more reliably preventing the impact on the driving of the vehicle 501.

[0131] In addition, the in-vehicle communication system 301 may be configured not to perform the authentication process of the new functional unit as described above.

[0132] Figure 7 This is a diagram showing another example of the sequence of the new network construction process in the in-vehicle communication system according to the embodiment of the present disclosure.

[0133] Reference Figure 7 First, the relay unit 11 in the relay device 101B is set to prohibit relaying of frames other than frames including connection request information received at an empty port and discard the frames (step S61 ).

[0134] Next, the new function unit is connected to the vacant port of the relay device 101B. The new function unit transmits connection request information to the relay device 101B (step S62).

[0135] Next, the relay device 101B receives the connection request information, detects the new function unit (step S63 ), permits relay of the frame for network setting processing received at the connection port (step S64 ), and transmits the device connection information to the relay device 101A (step S65 ).

[0136] The processing of steps S66 to S80 is Figure 6 The processing of steps S39 to S53 shown is the same.

[0137] In the vehicle communication system of the embodiment of the present disclosure, the relay device 101A functions as a monitoring device, but the present invention is not limited thereto. The vehicle communication system 301 may include a device having the update confirmation unit 2 and the notification unit 5 independently of the relay device 101A.

[0138] In addition, the relay device 101A may also be configured to further include the detection unit 12, the authentication unit 13, and the control unit 15, and perform the same processing as the relay device 101B when a new functional unit is connected. In this case, the vehicle communication system 301 may be configured to include one relay device 101A instead of the relay device 101B.

[0139] Furthermore, the relay device 101B may not include the authentication unit 13, and a server or the like outside the vehicle 501 may perform the authentication process of the new functional unit.

[0140] In addition, in the in-vehicle communication system of the embodiment of the present disclosure, the setting unit 14 in the relay device 101B is configured to make a prescribed notification to the relay device 101A, which is another device in the in-vehicle network 401, when the setting process of the relay device 101B using the frame for the network setting process is completed, but the present invention is not limited to this. The setting unit 14 may also be a structure that does not make the prescribed notification. In this case, for example, after a prescribed time has passed since the relay device 101A notified the relay device 101B of the setting content for communicating in the new network, the relay device 101A sends a frame permission notification to the relay device 101B, and the frame permission notification means to allow the transmission of frames from the new functional unit.

[0141] Each process (function) of the above-mentioned embodiment is implemented by a processing circuit (Circuitry) including one or more processors. In addition to the above-mentioned one or more processors, the above-mentioned processing circuit can also be composed of an integrated circuit that combines one or more memories, various analog circuits, and various digital circuits. The above-mentioned one or more memories store programs (commands) that enable the above-mentioned one or more processors to perform the above-mentioned processes. The above-mentioned one or more processors can perform the above-mentioned processes according to the above-mentioned programs read from the above-mentioned one or more memories, or according to logic circuits designed to perform the above-mentioned processes in advance. The above-mentioned processor can also be a CPU (Central Processing Unit: Central Processing Unit), GPU (Graphics Processing Unit: Graphics Processing Unit), DSP (Digital Signal Processor: Digital Signal Processor), FPGA (Field Programmable Gate Array: Field Programmable Gate Array) and ASIC (Application Specific Integrated Circuit: Application Specific Integrated Circuit) and other various processors suitable for computer control. In addition, the above-mentioned multiple processors that are physically separated can also cooperate with each other to perform the above-mentioned processes. For example, the processors installed on physically separated computers may cooperate with each other via a network such as a LAN (Local Area Network), a WAN (Wide Area Network), and the Internet to perform the above-mentioned processing. The program may be installed into the memory from an external server device via the network, or may be circulated in a state stored in a recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disk Read Only Memory), and a semiconductor memory, and installed into the memory from the recording medium.

[0142] The above embodiments should be considered in all respects as illustrative and non-restrictive. The scope of the present invention is indicated by the claims rather than the above description, and is intended to include all modifications within the meaning and scope equivalent to the claims.

[0143] The above description includes the following additional features.

[0144] [Note 1]

[0145] A relay device is used in an in-vehicle network including a plurality of functional units, wherein the relay device comprises: a relay unit that performs relay processing, the relay processing relaying frames sent and received between the functional units; a detection unit that detects the addition of a functional unit to the in-vehicle network; and a control unit that limits the relay processing of frames sent from the new functional unit other than frames used in a setting process, and relaxes the limitation of the relay processing when the setting process is completed, wherein the setting process is used to communicate in a new network, the new network being the in-vehicle network further including a new functional unit, the new functional unit being the functional unit detected by the detection unit, The control unit permits relay of all frames transmitted from the new function unit when the setting process is completed. The setting process includes setting the priority order of frames transmitted from each functional unit in the new network.

[0146] [Note 2]

[0147] A monitoring device is used in an in-vehicle network including a plurality of functional units and a plurality of relay devices, wherein the relay devices relay frames sent and received between the functional units, wherein the monitoring device comprises: an update confirmation unit that confirms completion of a setting process in the plurality of relay devices, the setting process being used to communicate in a new network, the new network being the in-vehicle network formed by connecting a new functional unit, i.e., a new functional unit and the relay devices; and a notification unit that, when the update confirmation unit confirms the completion, notifies the relay device to which the new function unit is connected of the completion, The setting process includes setting the priority order of frames transmitted from each functional unit in the new network.

[0148] [Note 3]

[0149] A relay device is used in a vehicle network including a plurality of functional units, wherein: The relay device comprises a processing circuit, The processing circuit performs relay processing, and the relay processing relays frames sent and received between the functional units. detecting the addition of a functional unit to the in-vehicle network, limiting the relay processing of frames sent from the new functional unit other than frames used in setting processing for communication in a new network, the new network being the in-vehicle network further including the new functional unit, the new functional unit being the functional unit detected by the detection unit, And when the setting process is completed, the restriction of the relay process is relaxed.

[0150] [Note 4]

[0151] A monitoring device is used in a vehicle network including a plurality of functional units and a plurality of relay devices, wherein the relay device relays frames sent and received between the functional units, The monitoring device comprises a processing circuit, the processing circuit confirming completion of a setting process in the plurality of relay devices, the setting process being for communicating in a new network, the new network being the in-vehicle network formed by connecting a new functional unit and the relay devices, When the completion is confirmed, the completion is notified to the relay device to which the new functional unit is connected.

[0152] [Note 5]

[0153] A relay method is a relay method in a relay device, the relay device being used in a vehicle network including a plurality of functional units and performing relay processing, the relay processing relaying frames transmitted and received between the functional units, The relay method comprises the following steps: detecting the addition of a functional unit to the in-vehicle network; limiting the relay processing of frames transmitted from the new functional unit other than frames used in setting processing for communicating in a new network, the new network being the in-vehicle network further including the new functional unit, the new functional unit being the functional unit detected by the detection unit; and When the setting process is completed, the restriction on the relay process is relaxed.

[0154] [Note 6]

[0155] A monitoring method is a monitoring method in a monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices, wherein the relay device relays frames sent and received between the functional units, wherein the monitoring method comprises the following steps: confirming completion of a setting process in the plurality of relay devices, the setting process being used to communicate in a new network, the new network being a new functional unit, i.e., the in-vehicle network formed by connecting the new functional unit and the relay device; and When the completion is confirmed, the completion is notified to the relay device to which the new functional unit is connected.

[0156] Reference numerals 1Relay Department 2Update confirmation section 3. Generation 4 Setting section 5. Notification Department 6 Storage unit 11 Relay Department 12. Inspection Department 13 Certification Department 14 Setting section 15. Control Unit 16 Storage unit 51 communication port 101, 101A, 101B relay devices 202, 202A, 202B, 202C vehicle ECU 301 Vehicle Communication System 401 In-vehicle network 501 vehicles.

Claims

1. A relay device used in a vehicle network including a plurality of functional units, wherein: The relay device comprises: A relay unit that performs relay processing, wherein the relay processing relays frames sent and received between the functional units; a detection unit that detects the addition of a functional unit to the in-vehicle network; and A control unit that limits the relay processing of frames sent from the new functional unit other than frames used in a setting process for communicating in a new network that is the in-vehicle network that also includes the new functional unit, and relaxes the limitation of the relay processing when the setting process is completed.

2. The relay device according to claim 1, wherein: In the in-vehicle network, one or more second relay devices are further provided, the second relay devices being relay devices other than the first relay device serving as the relay device and relaying frames transmitted and received between the functional units, The control unit relaxes the restriction of the relay process when the setting process of all the relay devices in the in-vehicle network is completed.

3. The relay device according to claim 2, wherein: The first relay device further includes a setting unit configured to perform a predetermined notification to other devices in the in-vehicle network when the setting process of the first relay device is completed.

4. The relay device according to any one of claims 1 to 3, wherein: before the setting process, performing an authentication process for the new function unit; The control unit limits the relay processing of frames sent from the new function unit other than frames used for authentication processing of the new function unit, and when the authentication processing is completed, limits the relay processing of frames sent from the new function unit other than frames used for setting processing.

5. A monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices, wherein the relay devices relay frames sent and received between the functional units, wherein: The monitoring device comprises: an update confirmation unit that confirms completion of a setting process in the plurality of relay devices, the setting process being for communicating in a new network, the new network being the in-vehicle network formed by connecting a new functional unit, that is, a new functional unit and the relay device; and The notification unit notifies the relay device to which the new function unit is connected of the completion when the update confirmation unit confirms the completion.

6. The monitoring device according to claim 5, wherein: The monitoring device further includes a generating unit configured to generate setting contents for performing communication in the new network and notify the setting contents to the one or more relay devices.

7. A relay program for a relay device used in a vehicle network including a plurality of functional units, wherein: The relay program is used to enable the computer to operate as the following unit: A relay unit that performs relay processing, wherein the relay processing relays frames sent and received between the functional units; a detection unit that detects the addition of a functional unit to the in-vehicle network; and A control unit that limits the relay processing of frames sent from the new functional unit other than frames used in a setting process for communicating in a new network that is the in-vehicle network that also includes the new functional unit, and relaxes the limitation of the relay processing when the setting process is completed.

8. A monitoring program for a monitoring device used in a vehicle network including a plurality of functional units and a plurality of relay devices, wherein the relay devices relay frames sent and received between the functional units, wherein: The monitoring program is used to make the computer operate as the following unit: an update confirmation unit that confirms completion of a setting process in the plurality of relay devices, the setting process being for communicating in a new network, the new network being the in-vehicle network formed by connecting a new functional unit, that is, a new functional unit and the relay device; and The notification unit notifies the relay device to which the new function unit is connected of the completion when the update confirmation unit confirms the completion.

Images