Electronic control device and communication system

Abstract

The invention relates to an electronic control device and a communication system. Each of the ECUs (3-5) receives power supply from the battery (7) via the relays (15-17). When a preset cutoff condition is satisfied, the slave ECUs (3-5) transmit an end notification to the master ECU (2). The master ECU (2) is connected to the slave ECUs (3-5) so as to be capable of data communication, is configured so as to be capable of transmitting and receiving CAN frames, and controls the operation of the relays (15-17). When the slave ECUs (3-5) do not receive the CAN frame addressed to the node after the interruption condition has been satisfied and before the reception determination time has elapsed, the slave ECUs (3-5) are shifted to the sleep state.

Description

Technical Field

[0001] The present disclosure relates to an electronic control device and a communication system. Background Art

[0002] In Patent Document 1, there is described a vehicular network system including a power relay that independently switches on / off the power supply of each of a plurality of electronic control devices, determines control content for switching on / off the power supply of a specific electronic control device corresponding to a scenario determined based on the vehicle condition, and uses the power relay to switch on / off the power supply supplied to the specific electronic control device based on the determined control content.

[0003] Patent Document 1: Japanese Unexamined Patent Application Publication No. 2015 - 81021

[0004] As a result of the inventors' detailed research, in a communication system including a plurality of control devices and configured to switch on / off the power supply of the control devices, it has been found that there is a problem of unnecessary power consumption. Summary of the Invention

[0005] An object of the present disclosure is to reduce power consumption in a communication system.

[0006] One aspect of the present disclosure is an electronic control device configured to receive power supply from a power source via a power supply switching unit, the power supply switching unit being configured to switch between a conduction state in which a power supply path is conducted and a cut-off state in which the power supply path is cut off.

[0007] The electronic control device of the present disclosure includes an end notification unit and a sleep transition unit.

[0008] The end notification unit is configured to send an end notification to a power supply control device when a preset cut-off condition is satisfied, the cut-off condition indicating that the power supply switching unit connected to the electronic control device can be brought into a cut-off state. The power supply control device is configured to be connected to the electronic control device so as to be capable of data communication and configured to be able to transmit and receive communication frames, and controls the operation of the power supply switching unit.

[0009] The sleep transition unit is configured to transfer the electronic control device to a sleep state when, after the cut-off condition is satisfied, communication frames are not received from all of one or more communication devices before a preset reception determination time has elapsed, the one or more communication devices being connected to the electronic control device so as to be capable of data communication.

[0010] Even in the case of a failure where the power supply control device that has received the end notification from the electronic control device wants to switch the power supply switching unit to the cut-off state but cannot switch the power supply switching unit to the cut-off state, the electronic control device of the present disclosure configured as described above can be transferred to the sleep state. Therefore, the electronic control device of the present disclosure can suppress the situation where, although it is a state where the power supply switching unit can be made into the cut-off state to stop the operation of the electronic control device, the power supply switching unit is in the conduction state and the electronic control device is in the wake-up state, and the electronic control device consumes power unnecessarily, and can reduce power consumption in the communication system.

[0011] Another aspect of the present disclosure is an electronic control device configured to receive power supply from a power source via at least one of a plurality of power supply switching units, and the power supply switching unit is configured to switch between a conduction state in which a power supply path is made conductive and a cut-off state in which the power supply path is cut off.

[0012] The electronic control device of the present disclosure includes a transfer unit at cut-off. The transfer unit at cut-off is configured to, when receiving power supply switching state information from the power supply control device, transfer the electronic control device to the stop state or the sleep state when, based on the received power supply switching state information, all of the plurality of power supply switching units are in the cut-off state, or all of the power supply switching units other than the power supply switching unit connected to the electronic control device among the plurality of power supply switching units are in the cut-off state. The power supply control device is configured to be connected to the electronic control device so as to be able to perform data communication and control the operation of the plurality of power supply switching units. The power supply switching state information indicates whether each of the plurality of power supply switching units is in the conduction state or the cut-off state.

[0013] The electronic control device of the present disclosure configured as described above can suppress the situation where, although it is an abnormal state where all of the plurality of power supply switching units are in the cut-off state, or all of the power supply switching units other than the power supply switching unit connected to the electronic control device are in the cut-off state, the electronic control device continues to operate and the electronic control device consumes power unnecessarily, and can reduce power consumption in the communication system.

[0014] Another aspect of the present disclosure is a communication system including a first control device and a second control device. The first control device receives power supply from a power source via a power supply switching unit, and the power supply switching unit is configured to switch between a conduction state in which a power supply path is made conductive and a cut-off state in which the power supply path is cut off. The second control device is configured to be connected to the first control device so as to be able to perform data communication and be able to transmit and receive communication frames, and control the operation of the power supply switching unit.

[0015] The first control device includes an end notification unit and a sleep transfer unit.

[0016] The end notification unit is configured to send an end notification to the second control device when a preset cut-off condition is satisfied, and the cut-off condition indicates that the power supply switching unit connected to the first control device can be brought into a cut-off state.

[0017] The sleep transfer unit is configured to transfer the first control device to a sleep state when, after the cut-off condition is satisfied, communication frames are not received from all of one or more communication devices before a preset reception determination time has elapsed, and the one or more communication devices are connected to the first control device so as to enable data communication.

[0018] Even when a failure occurs in the communication system of the present disclosure configured as described above, in which the second control device that has received the end notification from the first control device wants to switch the power supply switching unit to the cut-off state but cannot do so, the first control device can be transferred to the sleep state. Therefore, the communication system of the present disclosure can suppress the situation where, although the power supply switching unit can be brought into the cut-off state to stop the operation of the first control device, the power supply switching unit remains in the conducting state and the first control device remains in the wake-up state, resulting in unnecessary power consumption by the first control device, and can reduce power consumption in the communication system.

[0019] Another aspect of the present disclosure is a communication system including a plurality of power supply switching units, a first control device, and a second control device. The plurality of power supply switching units are configured to switch between a conducting state in which a power supply path is made conductive and a cut-off state in which the power supply path is cut off. The first control device receives power supply from a power source via at least one of the plurality of power supply switching units. The second control device is configured to be connected to the first control device so as to enable data communication and control the operation of the plurality of power supply switching units.

[0020] The second control device includes a status information transmission unit. The status information transmission unit is configured to send power supply switching status information indicating whether each of the plurality of power supply switching units is in the conducting state or the cut-off state to the first control device.

[0021] The first control device includes a transfer unit at cut-off. The transfer unit at cut-off is configured to transfer the first control device to a stop state or a sleep state based on the power supply switching status information received from the second control device when all of the plurality of power supply switching units are in the cut-off state, or when all of the power supply switching units other than the power supply switching unit connected to the first control device among the plurality of power supply switching units are in the cut-off state.

[0022] The communication system of the present disclosure configured in this way can suppress the occurrence of a situation where, even in an abnormal state where all of the plurality of power supply switching units are in a cut-off state, or all of the power supply switching units other than the power supply switching unit connected to the first control device are in a cut-off state, the first control device continues to operate and the first control device consumes power unnecessarily, and can reduce power consumption in the communication system. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 It is a block diagram showing the configuration of the communication systems of the first and second embodiments.

[0024] Figure 2 It is a flowchart showing the state transition process of the first embodiment.

[0025] Figure 3 It is a flowchart showing the state transmission process of the second embodiment.

[0026] Figure 4 It is a flowchart showing the state transition process of the second embodiment.

[0027] Figure 5 It is a block diagram showing the configuration of the communication system of the third embodiment.

[0028] Figure 6 It is an explanatory diagram illustrating the affiliated information and the start information.

[0029] Figure 7 It is a block diagram showing the configuration of the communication system of the fourth embodiment.

[0030] Figure 8 It is a diagram showing the correspondence between the controlled object and the cluster.

[0031] Figure 9 It is a block diagram showing the configuration of the communication system of the fifth embodiment.

[0032] Figure 10 It is a block diagram showing the configuration of the central ECU and the upstream power distribution unit of the fifth embodiment.

[0033] Figure 11 It is a first block diagram showing the configuration of the regional ECU of the fifth embodiment.

[0034] Figure 12 It is a second block diagram showing the configuration of the regional ECU of the fifth embodiment.

[0035] Figure 13 It is a block diagram showing the configuration of the slave ECU of the fifth embodiment.

[0036] Figure 14 It is a diagram showing the configuration of the start-up table of the fifth embodiment.

[0037] Figure 15 It is a flowchart showing the state transition process of the fifth embodiment.

[0038] Figure 16 It is a diagram showing the structure of the start-up table of the sixth embodiment.

[0039] Figure 17 It is the first block diagram showing the structure of the regional ECU of the sixth embodiment.

[0040] Figure 18 It is the second block diagram showing the structure of the regional ECU of the sixth embodiment.

[0041] Figure 19 It is a flowchart showing the state transition process of the sixth embodiment.

[0042] Figure 20 It is a flowchart showing the state transmission process of the seventh embodiment.

[0043] Figure 21 It is a flowchart showing the state transition process of the seventh embodiment. Specific Embodiments

[0044] [First Embodiment]

[0045] Hereinafter, the first embodiment of the present disclosure will be described with reference to the accompanying drawings.

[0046] The communication system 1 of the present embodiment is mounted on a vehicle. As Figure 1 shown, it includes a main ECU 2, slave ECUs 3, 4, 5, 6, and a battery 7. ECU is an abbreviation for Electronic Control Unit. Hereinafter, the main ECU 2 and the slave ECUs 3 to 6 will also be collectively referred to as nodes.

[0047] The main ECU 2 and the slave ECUs 3, 4, 5 are connected via a communication bus 8 so as to be able to communicate with each other.

[0048] The main ECU 2 and the slave ECU 6 are connected via a communication bus 9 so as to be able to communicate with each other.

[0049] The battery 7 supplies power to each part of the vehicle at a DC battery voltage (for example, 12V). The main ECU 2 and the slave ECUs 3 to 6 receive power supply from the battery 7 and operate.

[0050] The main ECU 2 includes a control unit 11, CAN communication units 12, 13, a storage unit 14, and relays 15, 16, 17. CAN is an abbreviation for Controller Area Network. In addition, the communication protocol of the communication system 1 is not limited to CAN.

[0051] The control unit 11 is an electronic control device mainly composed of a microcomputer including a CPU 21, a ROM 22, a RAM 23, etc. Various functions of the microcomputer are realized by the CPU 21 executing a program stored in a non-removable physical recording medium. In this example, the ROM 22 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Further, part or all of the functions executed by the CPU 21 may be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 11 may be one or more.

[0052] The CAN communication unit 12 communicates with the slave ECUs 3, 4, 5 connected to the communication bus 8 by transmitting and receiving communication frames based on the CAN communication protocol.

[0053] The CAN communication unit 13 communicates with the slave ECU 6 connected to the communication bus 9 by transmitting and receiving communication frames based on the CAN communication protocol. Hereinafter, the communication frame of CAN is referred to as a CAN frame.

[0054] The storage unit 14 is a storage device for storing various data. The storage unit 14 stores the management table 25 described later.

[0055] The relay 15 is arranged on the power supply path between the battery 7 and the slave ECU 3. The relay 16 is arranged on the power supply path between the battery 7 and the slave ECU 4. The relay 17 is arranged on the power supply path between the battery 7 and the slave ECU 5.

[0056] The relays 15, 16, 17 are configured to switch to either a conducting state that conducts the power supply path or a cutting-off state that cuts off the power supply path according to an instruction from the control unit 11. Hereinafter, the conducting state is also referred to as the on state, and the cutting-off state is also referred to as the off state.

[0057] The slave ECUs 3 to 6 include a control unit 31, a CAN communication unit 32, and a storage unit 33.

[0058] The control unit 31 is an electronic control device mainly composed of a microcomputer including a CPU 41, a ROM 42, a RAM 43, etc. Various functions of the microcomputer are realized by the CPU 41 executing a program stored in a non-removable physical recording medium. In this example, the ROM 42 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Further, part or all of the functions executed by the CPU 41 may be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 31 may be one or more.

[0059] The CAN communication units 32 of the slave ECUs 3 to 5 communicate with the communication devices (i.e., the master ECU 2 and the slave ECUs 3 to 5) connected to the communication bus 8 based on the CAN communication protocol.

[0060] The CAN communication unit 32 of the slave ECU 6 communicates with the communication device (i.e., the master ECU 2) connected to the communication bus 9 based on the CAN communication protocol.

[0061] The storage unit 33 is a storage device for storing various data.

[0062] A CAN frame consists of a frame start, an arbitration field, a control field, a data field, a CRC field, an ACK field, and a frame end. In addition, the arbitration field consists of an 11-bit or 29-bit identifier (i.e., ID) and a 1-bit RTR bit.

[0063] The 11-bit identifier used in CAN communication is called CANID. CANID is preset based on the content of the data included in the CAN frame, the transmission source of the CAN frame, the transmission destination of the CAN frame, etc.

[0064] The data field is a payload composed of first data, second data, third data, fourth data, fifth data, sixth data, seventh data, and eighth data, each of 8 bits (i.e., 1 byte).

[0065] The master ECU 2 and the slave ECUs 3 to 6 are configured to switch between a wake state (i.e., a startup state) and a sleep state (i.e., a dormant state). The wake state is a normal operating state in which the functions allocated to the ECU can be used without restriction. The sleep state is a low-power operating state in which the available functions are restricted. In the sleep state, many functions stop to save power, and only some functions (e.g., the function of receiving CAN frames) can be used.

[0066] The communication system 1 forms a local network, which is a power supply control method for communication control based on the CAN protocol standard specified in ISO11898-6. Therefore, the communication system 1 achieves low power consumption by independently transferring one or more nodes belonging to each communication group described below to the wake-up state or the sleep state respectively.

[0067] In the communication system 1, when waking up a node in the sleep state, a CAN frame, namely an NM frame, containing start information specifying a start group is used. NM is the abbreviation of Network Management.

[0068] For example, as Figure 6 shown, the start information is set. DLC is the abbreviation of Data Length Code, which is an area representing the size of the data field in the CAN frame in bytes. That is, the start information is stored in the data field of the CAN frame. Here, for the sake of simplicity of explanation, the case where DLC is 1 byte (i.e., 8 bits) is shown. Each bit of the 8-bit data representing the start information corresponds to a start group.

[0069] In the start information set in the NM frame, the bit corresponding to the start group to be started is set to 1.

[0070] Each node stores the belonging information indicating the start group to which the node belongs. The belonging information has the same data length as the start information, and the assignment of each bit is also the same as that of the start information. Moreover, in the belonging information, the bit corresponding to the start group to which the node belongs is set to 1.

[0071] Each node determines whether the communication group to which the node belongs is a start object by comparing the start information extracted from the NM frame with the belonging information stored in the node itself.

[0072] For example, Figure 6 the shown belonging information indicates belonging to the first communication group, the third communication group, and the fifth communication group. Figure 6 The shown start information indicates starting the second communication group, the third communication group, the fourth communication group, and the fifth communication group. The third communication group and the fifth communication group are included in Figure 6 both the shown belonging information and the start information. Therefore, the node determines that the node itself is a start object for the third communication group and the fifth communication group.

[0073] Figure 1 The shown management table 25 sets the correspondence between each of multiple communication groups and one or more nodes (i.e., one or more started nodes) belonging to the corresponding communication group.

[0074] The management table 25 sets, for example, that the master ECU 2 and the slave ECUs 3 and 4 belong to the first communication group.

[0075] The management table 25 sets, for example, that the slave ECUs 3, 4, and 5 belong to the second communication group.

[0076] In addition, the master ECU 2 and the slave ECUs 3 to 6 are configured such that for each of a plurality of events, when it is detected that the start condition of the event is satisfied, an NM frame is generated and transmitted, which includes information indicating the communication group related to the corresponding event as the above-mentioned start information.

[0077] The steps of the state transition process executed by the control units 31 of the slave ECUs 3 to 5 will be described. The state transition process is a process repeatedly executed during the operation of the slave ECUs 3 to 5.

[0078] When the state transition process is executed, as Figure 2 shown, in S10, the CPU 41 of the control unit 31 determines whether a preset cut-off condition is satisfied. The cut-off condition in the present embodiment includes that the slave ECUs 3 to 5 are in a state where they can transition from the wake state to the sleep state. That is, for each of the slave ECUs 3 to 5, when it is no longer necessary to control the controlled object controlled by the slave ECUs 3 to 5, the cut-off condition is satisfied.

[0079] For example, when the controlled object of the slave ECU 3 is the vehicle air conditioner, when the vehicle occupant performs an operation to turn off the vehicle air conditioner, the slave ECU 3 does not need to control the vehicle air conditioner and is in a state where it can transition from the wake state to the sleep state. Therefore, the cut-off condition of the slave ECU 3 is satisfied.

[0080] In the present embodiment, the cut-off condition of the slave ECU 3 includes a voltage drop condition. In other words, the cut-off conditions of the slave ECUs 4 and 5 do not include the voltage drop condition. The voltage drop condition is that the battery voltage of the battery 7 is lower than a preset cut-off determination value. That is, when the battery voltage of the battery 7 is lower than the cut-off determination value, the cut-off condition is satisfied.

[0081] Here, when the disconnection condition is not satisfied, the CPU 41 ends the state transition process. On the other hand, when the disconnection condition is satisfied, in S20, the CPU 41 sends an end notification to the main ECU 2, and this end notification indicates that the relay connected to this node can be set to the disconnected state. When the main ECU 2 receives the end notification, for example, after a preset waiting time for the slave ECU that is the source of the end notification, it sets the relay corresponding to the received end notification to the disconnected state. This waiting time is set for each slave ECU to be longer than the time required for the slave ECU to execute various processes before transitioning to the sleep state, and after completing the various processes, this node transitions to the sleep state, and until the transition to the sleep state is completed. For example, when the main ECU 2 receives an end notification from the slave ECU 3, after a preset waiting time for the slave ECU 3, it sets the relay 15 to the disconnected state.

[0082] In S30, the CPU 41 starts the reception timer set in the RAM 43. The reception timer is, for example, a timer that increments every 1 ms, and when started, its value starts incrementing from 0 (i.e., adding 1).

[0083] In S40, the CPU 41 determines whether a CAN frame addressed to this node has been received. Here, when a CAN frame addressed to this node has been received, the CPU 41 ends the state transition process. On the other hand, when a CAN frame addressed to this node has not been received, in S50, the CPU 41 determines whether a preset reception determination time has elapsed. Specifically, the CPU 41 determines whether the value of the reception timer is equal to or greater than the value corresponding to the reception determination time.

[0084] Here, when the reception determination time has not elapsed, the CPU 41 moves to S40. On the other hand, when the reception determination time has elapsed, in S60, the CPU 41 executes various end processes before transitioning to the sleep state, and after completing the various end processes, this node transitions to the sleep state.

[0085] In S70, the CPU 41 determines whether a CAN frame has been received. In addition, in S70, when the CPU 41 receives a CAN frame addressed not only to this node but also to other nodes, it is also determined that a CAN frame has been received.

[0086] Here, when a CAN frame has not been received, the CPU 41 waits until a CAN frame is received by repeating the process of S70. Then, when a CAN frame is received, in S80, the CPU 41 starts this node (i.e., transitions this node to the wake state) and ends the state transition process.

[0087] The slave ECUs 3, 4, and 5 configured in this way are each configured to receive power supply from the battery 7 via the relays 15, 16, and 17, and the relays 15, 16, and 17 are configured to switch between a conducting state in which the power supply path is conducted and a cutting-off state in which the power supply path is cut off.

[0088] The slave ECUs 3, 4, and 5 are each configured to send an end notification to the master ECU 2 when a preset cutting-off condition is satisfied, and the cutting-off condition indicates that the relays 15, 16, and 17 connected to the slave ECUs 3, 4, and 5 can be in a cutting-off state. The master ECU 2 is configured to be connected to the slave ECUs 3, 4, and 5 so as to be able to perform data communication and is configured to be able to transmit and receive CAN frames, and to control the operations of the relays 15, 16, and 17.

[0089] The slave ECUs 3, 4, and 5 are each configured to transfer to a sleep state when, after the cutting-off condition is satisfied and before a preset reception determination time has elapsed, CAN frames sent to the own node are not received from all of a plurality of communication devices (i.e., the master ECU 2 and the slave ECUs 3, 4, and 5) that are connected to the slave ECUs 3, 4, and 5 so as to be able to perform data communication.

[0090] Even in the case of a failure in which, although the master ECU 2 that has received the end notification from the slave ECUs 3, 4, and 5 wants to switch the relays 15, 16, and 17 to the cutting-off state but cannot switch the relays 15, 16, and 17 to the cutting-off state, the slave ECUs 3, 4, and 5 can be transferred to the sleep state. Therefore, the slave ECUs 3, 4, and 5 can suppress the situation where, although it is a state in which the relays 15, 16, and 17 can be in the cutting-off state and the operations of the slave ECUs 3, 4, and 5 can be stopped, the relays 15, 16, and 17 are in the conducting state and the slave ECUs 3, 4, and 5 are in the wake-up state, and unnecessary power consumption of the slave ECUs 3, 4, and 5 continues, and power consumption can be reduced in the communication system 1.

[0091] The slave ECUs 3, 4, and 5 are each configured to transfer to the wake-up state when a CAN frame is received from at least one of one or more communication devices (i.e., at least one of the master ECU 2 and the slave ECUs 3, 4, and 5) while the slave ECUs 3, 4, and 5 are in the sleep state. Thereby, the slave ECUs 3, 4, and 5 can transfer to the wake-up state when it is necessary to cause the slave ECUs 3, 4, and 5 to execute various processes, and can quickly cause the slave ECUs 3, 4, and 5 to execute required various processes.

[0092] When the slave ECUs 3, 4, and 5 do not receive CAN frames destined for the slave ECUs 3, 4, and 5 respectively, the slave ECUs 3, 4, and 5 are transferred to the sleep state. Thereby, the slave ECUs 3, 4, and 5 can suppress the situation where they cannot be transferred to the sleep state due to receiving CAN frames destined for nodes other than the own node (i.e., other nodes), and can further reduce power consumption in the communication system 1.

[0093] The cut-off condition of the slave ECU 3 includes a voltage reduction condition indicating that the battery voltage of the battery 7 is lower than a preset cut-off determination value. Thereby, when the battery voltage becomes low, the slave ECU 3 can transfer the slave ECU 3 that executes less important processing to the sleep state. Therefore, the slave ECU 3 can suppress the situation where, when the battery voltage becomes low, the battery voltage becomes even lower due to executing less important processing, and the slave ECUs 4 and 5 cannot execute more important processing.

[0094] In addition, the communication system 1 includes slave ECUs 3, 4, and 5 and a master ECU 2. The slave ECUs 3, 4, and 5 are each configured to receive power supply from the battery 7 via relays 15, 16, and 17 configured to switch between a conduction state in which a power supply path is conducted and a cut-off state in which the power supply path is cut off. The master ECU 2 is configured to be connected to the slave ECUs 3, 4, and 5 so as to be able to perform data communication, is configured to be able to transmit and receive CAN frames, and controls the operations of the relays 15, 16, and 17.

[0095] The slave ECUs 3, 4, and 5 are each configured to send an end notification to the master ECU 2 when a preset cut-off condition is satisfied, and the cut-off condition indicates that the relays 15, 16, and 17 connected to the slave ECUs 3, 4, and 5 can be in the cut-off state.

[0096] The slave ECUs 3, 4, and 5 are each configured to transfer to the sleep state when, after the cut-off condition is satisfied and before a preset reception determination time has elapsed, no CAN frames destined for the own node are received from all of the plurality of communication devices (i.e., the master ECU 2 and the slave ECUs 3, 4, and 5) connected to be able to perform data communication with the slave ECUs 3, 4, and 5.

[0097] Such a communication system 1 is a system including the slave ECUs 3, 4, and 5, and thus can obtain the same effects as the slave ECUs 3, 4, and 5.

[0098] In the embodiment described above, the relays 15, 16, and 17 correspond to the power supply switching unit, the battery 7 corresponds to the power supply, the slave ECUs 3, 4, and 5 correspond to the electronic control device and the first control device, the CAN frame corresponds to the communication frame, and the master ECU 2 corresponds to the power supply control device and the second control device.

[0099] In addition, S10 and S20 are equivalent to the processing as the end notification unit, S30 to S60 are equivalent to the processing as the sleep transfer unit, and S70 to S80 are equivalent to the processing as the wake-up transfer unit.

[0100] [Second Embodiment]

[0101] Hereinafter, the second embodiment of the present disclosure will be described with reference to the accompanying drawings. In addition, in the second embodiment, parts different from the first embodiment will be described. The same reference numerals are used for the common structures.

[0102] The communication system 1 of the second embodiment is different from the first embodiment in that the state transition process is changed and the main ECU 2 executes the state transmission process.

[0103] Next, the steps of the state transmission process executed by the control unit 11 of the main ECU 2 will be described. The state transmission process is a process repeatedly executed during the operation of the main ECU 2.

[0104] When the state transmission process is executed, as Figure 3 shown, in S110, the CPU 21 of the control unit 11 confirms for each of the relays 15, 16, and 17 whether it is in the on state (i.e., the conducting state) or the off state (i.e., the cutting state). Specifically, first, the CPU 21 detects the value of the current flowing through the power supply path where the relays 15, 16, and 17 are arranged (hereinafter, the relay current value). Then, when the detected relay current value is equal to or greater than a preset on determination value, the CPU 21 determines that the corresponding relay is in the on state, and when the detected relay current value is lower than the on determination value, the CPU 21 determines that the corresponding relay is in the off state.

[0105] In S120, based on the confirmation result in S110, the CPU 21 transmits the power supply switching state information indicating whether each of the relays 15, 16, and 17 is in the on state or the off state to the slave ECUs 3 to 5, and ends the state transmission process.

[0106] Next, the steps of the state transition process of the second embodiment will be described.

[0107] When the state transition process of the second embodiment is executed, as Figure 4 shown, in S210, the CPU 41 of the control unit 31 determines whether it has received the power supply switching state information from the main ECU 2.

[0108] Here, in the case where the power supply switching state information is not received, the CPU 41 ends the state transition process. On the other hand, in the case where the power supply switching state information is received, in S220, the CPU 41 determines whether all the relays (i.e., relays 15, 16, and 17) are in the off state based on the received power supply switching state information. Here, in the case where all of the relays 15, 16, and 17 are in the off state, the CPU 41 moves to S240.

[0109] On the other hand, in the case where at least one of the relays 15, 16, and 17 is in the on state, in S230, the CPU 41 determines whether all the relays other than the relay of this node are in the off state. For example, in the case where this node is the slave ECU 3, in the case where the relay 15 is in the on state and the relays 16 and 17 are in the off state, the CPU 41 determines that all the relays other than the relay of this node are in the off state.

[0110] Here, in the case where there is a relay in the on state among the relays other than the relay of this node, the CPU 41 ends the state transition process. On the other hand, in the case where all the relays other than the relay of this node are in the off state, the CPU 41 moves to S240.

[0111] When moving to S240, the CPU 41 causes this node to transition to the sleep state and ends the state transition process.

[0112] The slave ECUs 3, 4, and 5 configured in this way are each configured to receive power supply from the battery 7 via the relays 15, 16, and 17 that are configured to switch between the conduction state in which the power supply path is conducted and the cut-off state in which the power supply path is cut off.

[0113] The slave ECUs 3, 4, and 5 are configured such that when receiving the power supply switching state information from the master ECU 2, based on the received power supply switching state information, in the case where all of the relays 15, 16, and 17 are in the cut-off state, or in the case where all the relays other than the relays connected to the slave ECUs 3, 4, and 5 among the relays 15, 16, and 17 are in the cut-off state, the slave ECUs 3, 4, and 5 are caused to transition to the sleep state. The master ECU 2 is configured to be connected to be able to perform data communication with the slave ECUs 3, 4, and 5 and control the operation of the relays 15, 16, and 17. The power supply switching state information indicates whether each of the relays 15, 16, and 17 is in the conduction state or the cut-off state.

[0114] In this way, even when all of the relays 15, 16, and 17 are in the off state, or when all of the relays other than the relays 15, 16, and 17 connected to the slave ECUs 3, 4, and 5 are in the off state, the slave ECUs 3, 4, and 5 can suppress such abnormal states and continue to operate, thereby preventing unnecessary power consumption in the slave ECUs 3, 4, and 5. This can reduce power consumption in the communication system 1. In addition, except for faults, there will be no state in which all of the relays 15, 16, and 17 are in the off state, nor will there be a state in which only one of the relays 15, 16, and 17 is in the on state.

[0115] In addition, the communication system 1 includes relays 15, 16, and 17, slave ECUs 3, 4, and 5, and a master ECU 2. The relays 15, 16, and 17 are configured to switch between an on state in which the power supply path is turned on and an off state in which the power supply path is turned off. The slave ECUs 3, 4, and 5 receive power supply from the battery 7 via the relays 15, 16, and 17, respectively. The master ECU 2 is configured to be connected to the slave ECUs 3, 4, and 5 for data communication and control the operation of the relays 15, 16, and 17.

[0116] The master ECU 2 is configured to send power supply switching state information indicating whether each of the relays 15, 16, and 17 is in the on state or the off state to the slave ECUs 3, 4, and 5.

[0117] The slave ECUs 3, 4, and 5 are each configured to transfer to the sleep state based on the power supply switching state information received from the master ECU 2 when all of the relays 15, 16, and 17 are in the off state, or when all of the relays other than the relays connected to the slave ECUs 3, 4, and 5 among the relays 15, 16, and 17 are in the off state.

[0118] Since such a communication system 1 includes the slave ECUs 3, 4, and 5, the same effects as those of the slave ECUs 3, 4, and 5 can be obtained.

[0119] In the embodiment described above, the relays 15, 16, and 17 correspond to a plurality of power supply switching units, S120 corresponds to the process as the state information sending unit, and S220 to S240 correspond to the process as the cut-off time transfer unit.

[0120] [Third Embodiment]

[0121] Hereinafter, the third embodiment of the present disclosure will be described with reference to the accompanying drawings. In addition, in the third embodiment, the parts different from the first embodiment will be described. The same reference numerals are used for the common structures.

[0122] As Figure 5As shown, the communication system 1 of the third embodiment is different from the first embodiment in that it includes the first battery 51 and the second battery 52 instead of the battery 7.

[0123] The first battery 51 supplies power to the ECUs 3, 4, and 5 via the relays 15, 16, and 17 at a DC battery voltage.

[0124] The second battery 52 supplies power to the ECUs 3, 4, and 5 via the relays 15, 16, and 17 at a DC battery voltage.

[0125] The main ECU 2 has a first open-circuit detection function for detecting whether an open circuit occurs in the power supply path from the first battery 51 to the relays 15, 16, and 17, and a second open-circuit detection function for detecting whether an open circuit occurs in the power supply path from the second battery 52 to the relays 15, 16, and 17. For example, Figure 5 the open-circuit generation part P1 indicates that an open circuit occurs in the power supply path from the first battery 51 to the relays 15, 16, and 17.

[0126] In addition, the communication system 1 of the third embodiment is different from the first embodiment in that the state transition process of the slave ECU 3 is changed.

[0127] The state transition process of the slave ECU 3 in the third embodiment is different from the first embodiment in that the cut-off condition of S10 is changed.

[0128] That is, in the state transition process of the third embodiment, in S10, the CPU 41 determines whether the cut-off condition of the third embodiment is satisfied. The cut-off condition of the third embodiment includes, in addition to the cut-off condition of the first embodiment, the power supply failure condition described later. That is, when at least one of the cut-off condition of the first embodiment and the power supply failure condition described later is satisfied, the cut-off condition of the third embodiment is satisfied. The power supply failure condition is that an open circuit in the power supply path is detected by the above-mentioned first open-circuit detection function and the above-mentioned second open-circuit detection function. In this way, in the slave ECU 3, the reason for including the power supply failure condition in the cut-off condition is that the slave ECU 3 executes processing with a lower importance.

[0129] Here, when the cut-off condition is not satisfied, the CPU 41 ends the state transition process. On the other hand, when the cut-off condition is satisfied, the CPU 41 moves to S20.

[0130] In addition, in the present embodiment, the state transition processes executed by the slave ECUs 4 and 5 do not include the power supply failure condition in S10.

[0131] The cut-off condition of the slave ECU 3 configured in this way includes a power supply failure condition indicating that a failure related to the power supply from the first battery 51 and the second battery 52 to the slave ECUs 3, 4, and 5 has occurred. Thus, when the power supply capacity to the slave ECUs 3, 4, and 5 decreases, the slave ECU 3 can transfer the slave ECU 3 that executes less important processing to the sleep state. Therefore, when the power supply capacity decreases, the slave ECU 3 can suppress the situation where the power supply capacity becomes even lower due to the execution of less important processing, and the slave ECUs 4 and 5 cannot execute more important processing.

[0132] In the embodiment described above, the first battery 51 and the second battery 52 correspond to power supplies.

[0133] [Fourth Embodiment]

[0134] Hereinafter, a fourth embodiment of the present disclosure will be described with reference to the drawings. In addition, in the fourth embodiment, parts different from the first embodiment will be described. The same reference numerals are used for common structures.

[0135] As Figure 7 shown, the communication system 1 of the fourth embodiment is different from the first embodiment in that an intelligent sensor 501, an intelligent actuator 502, a radio device 503, and relays 504 and 505 are added.

[0136] The intelligent sensor 501 is a sensor having a communication function. The intelligent sensor 501 is connected to the communication bus 8.

[0137] The intelligent actuator 502 is a sensor having a communication function. The intelligent actuator 502 is connected to the communication bus 8.

[0138] The radio device 503 is a wireless communication device for performing wireless communication with an external communication device provided outside the vehicle. The radio device 503 is, for example, a DCM. DCM is an abbreviation for Data Communication Module.

[0139] The relay 504 is disposed on the power supply path between the battery 7 and the intelligent sensor 501. The relay 505 is disposed on the power supply path between the battery 7 and the intelligent actuator 502.

[0140] The relays 504 and 505 are each configured to switch to either a conducting state in which the power supply path is conducted or a cut-off state in which the power supply path is cut off according to an instruction from the control unit 11.

[0141] Hereinafter, the main ECU 2, the slave ECUs 3 to 6, the intelligent sensor 501, and the intelligent actuator 502 will also be collectively referred to as nodes.

[0142] (Prerequisites)

[0143] The main ECU 2 and the slave ECU 6 are always powered by the battery 7 without going through a relay, and can be individually switched to the wake state or the sleep state by this node. Hereinafter, the main ECU 2 and the slave ECU 6 are also referred to as NM-mounted nodes. An NM-mounted node is a node having a function of generating an NM frame.

[0144] The slave ECUs 3 to 5, the intelligent sensor 501, and the intelligent actuator 502 are powered via a relay and cannot be individually switched to the wake state or the sleep state by this node. That is, they become the wake state when the relay is turned on and become the sleep state when the relay is turned off. Hereinafter, the slave ECUs 3 to 5, the intelligent sensor 501, and the intelligent actuator 502 are also referred to as NM non-mounted nodes. An NM non-mounted node is a node that does not have the function of generating and interpreting an NM frame.

[0145] The NM non-mounted nodes include at least one of an actuator and a sensor in addition to the ECU having a control function.

[0146] The power supply paths of the NM non-mounted nodes are respectively connected to the relays 15, 16, 17, 504, and 505 of the main ECU 2.

[0147] The NM non-mounted nodes and the relays can be connected one-to-one, or multiple NM non-mounted nodes belonging to the same cluster (that is, a group that starts simultaneously) can be connected under the jurisdiction of one relay.

[0148] The main ECU 2 and the NM-mounted nodes have a CAN communication unit and can perform the transmission and reception of NM frames.

[0149] The NM-mounted node determines whether this node is in the wake state or the sleep state based on the NM frame transmitted and received via the communication bus.

[0150] The main ECU 2 makes the relays 15, 16, 17, 504, and 505 to which the NM non-mounted nodes are connected in the on state or the off state based on the NM frame transmitted and received via the communication bus.

[0151] In the payload (i.e., the data area) of the NM frame transmitted and received by the main ECU 2 and the NM-mounted nodes, information indicating which cluster to start is stored in one bit or multiple bits.

[0152] One or more main ECUs (i.e., ECUs with built-in relays) are mounted in the vehicle.

[0153] As Figure 8As shown, one or more nodes belonging to each cluster are determined in advance by the system developer. It is also possible to allocate clusters to each node, but it is possible to register multiple nodes in one cluster. When the bit corresponding to each cluster is in the active state (i.e., bit = 1), the cluster is awakened. In the case of the main ECU, awakening means making the relay in the on state.

[0154] (First startup example)

[0155] The first startup example is an operation example of performing a failure diagnosis of the slave ECU3 through a request from the cloud.

[0156] First, a connection request is sent from the base station (i.e., the cloud) to the vehicle radio device 503.

[0157] Next, when the radio device 503 determines that the connection is valid, it conveys the event received from the cloud to the main ECU2.

[0158] Next, the main ECU2 determines the service of "failure diagnosis of the slave ECU3" based on the event, and generates an NM frame that makes the bit of only the third cluster to which the slave ECU3 belongs valid in order to start the slave ECU3.

[0159] Next, the main ECU2 sends the generated NM frame onto the communication buses 8 and 9.

[0160] Since there is no NM-mounted node belonging to the third cluster on the communication buses 8 and 9, the devices on the communication bus do not change.

[0161] Next, the main ECU2 executes the processing based on the NM frame in the control unit 11, regarding that it has received the NM frame that makes the bit of the third cluster valid at the same time as the above.

[0162] Next, when the control unit 11 of the main ECU2 determines a wake-up instruction for the third cluster based on the NM frame, since the relay 15 is included in the third cluster, the relay 15 is made in the on state.

[0163] When the relay 15 is in the on state, power is supplied to the downstream slave ECU3 to start it.

[0164] The main ECU2 waits for the startup of the slave ECU3, requests a diagnostic code from the slave ECU3, and sends the response result from the slave ECU3 to the base station via the radio device 503.

[0165] (Second startup example)

[0166] The second startup example is an operation example of performing a failure diagnosis of the slave ECU6 through a request from the cloud.

[0167] First, a connection request is sent from the base station (i.e., the cloud) side to the vehicle's radio device 503.

[0168] Next, when the radio device 503 determines that the connection is valid, it conveys the event received from the cloud to the main ECU 2.

[0169] Next, the main ECU 2 determines the service of "fault diagnosis of the slave ECU 6" based on the event, and generates an NM frame that makes the bits of only the fourth cluster to which the slave ECU 6 belongs valid in order to start the slave ECU 6.

[0170] Next, the main ECU 2 sends the generated NM frame onto the communication buses 8 and 9.

[0171] Since the slave ECU 6 is a node belonging to the fourth cluster and is on the communication bus 9, the slave ECU 6 is awakened.

[0172] Next, the main ECU 2 executes processing based on the NM frame in the control unit 11, regarding the reception of the NM frame that makes the bits of the fourth cluster valid as occurring simultaneously with the above.

[0173] Next, even if the control unit 11 of the main ECU 2 determines a wake-up instruction for the fourth cluster based on the NM frame, there is no corresponding relay in the fourth cluster, so it is ignored.

[0174] When the slave ECU 6 starts, the main ECU 2 requests a diagnostic code from the slave ECU 6 via the communication bus, and sends the response result from the slave ECU 6 to the base station via the radio device 503.

[0175] (Third startup example)

[0176] The third startup example is an example of the operation where a user starts a remote air conditioner via a smartphone.

[0177] First, the user instructs the in-vehicle air conditioner to be turned on from the smartphone.

[0178] The radio device 503 receives the instruction signal from the smartphone, and when the radio device 503 determines that the instruction signal is valid, it conveys the event received from the cloud (i.e., the instruction signal) to the main ECU 2.

[0179] The main ECU 2 determines the "air conditioner service" based on the event, and generates an NM frame that activates the second cluster as the air conditioner cluster.

[0180] The main ECU 2 periodically sends the generated NM frame to the communication buses 8 and 9 until an air conditioner stop instruction is issued. In the case of wanting to continue to maintain the activated state, it is necessary to continue to send the NM frame periodically. At the same time, the control unit 11 of the main ECU 2 executes processing based on the NM frame.

[0181] When an NM frame that activates the second cluster is generated on the communication bus 9, the slave ECU 6 (i.e., the air conditioner ECU) belonging to the second cluster receives the NM frame and is awakened according to the received NM frame.

[0182] When the control unit 11 of the master ECU 2 detects that the second cluster is in the activated state, the relays 504 and 505 belonging to the second cluster are turned on.

[0183] When the relays 504 and 505 are turned on, power is supplied to the intelligent sensor 501 (i.e., the temperature sensor) and the intelligent actuator 502 (i.e., the compressor).

[0184] According to the above, the power supply to the air conditioner ECU, the intelligent sensor 501, and the intelligent actuator 502 starts, and the in-vehicle air conditioner can be turned on.

[0185] When the user instructs the in-vehicle air conditioner to be turned off from the smartphone, the master ECU 2 stops the periodic transmission of the NM frame.

[0186] When the NM frame is interrupted, the slave ECU 6 migrates to the sleep state, and the master ECU 2 turns off the relays 504 and 505. Thus, the in-vehicle air conditioner stops.

[0187] (Fourth start example)

[0188] The fourth start example is an operation example of starting the in-vehicle air conditioner from the slave ECU 6.

[0189] Since the slave ECU 6 is always supplied with power even when the vehicle is stopped, it can be awakened by detecting the input of a signal indicating that the start switch connected to the slave ECU 6 has been turned on even during sleep.

[0190] After being awakened, when the slave ECU 6 confirms the input for starting the in-vehicle air conditioner, it generates an NM frame that turns on the bit corresponding to the second cluster.

[0191] The slave ECU 6 transmits the generated NM frame via the CAN communication unit 32. When the master ECU 2 receives this NM frame, the master ECU 2 turns on the relays 504 and 505 belonging to the second cluster.

[0192] When the start switch of the in-vehicle air conditioner is turned off, the slave ECU 6 stops transmitting the NM frame and transfers to the sleep state after a while.

[0193] When the NM frame is interrupted, the master ECU 2 turns off the relays 504 and 505 after a while and ends the control.

[0194] When the main ECU 2 determines that control needs to continue even after the transmission of the NM frame has stopped, the main ECU 2 transmits an NM frame that turns on the bits corresponding to the second cluster. As a result, the slave ECU 6 and the relays 504 and 505 can also maintain the startup state until the transmission of the NM frame generated by the main ECU 2 stops.

[0195] [Fifth Embodiment]

[0196] Hereinafter, the fifth embodiment of the present disclosure will be described with reference to the drawings. In addition, in the fifth embodiment, parts different from the first embodiment will be described.

[0197] The communication system 100 of the fifth embodiment is mounted on a vehicle and, as Figure 9 shown, includes a central ECU 101, upstream power distribution units 102, 103, regional ECUs 104, 105, 106, 107, slave ECUs 108, 109, 110, 111, 112, 113, 114, 115, 116, a battery 117, and a slave ECU 118. Hereinafter, the central ECU 101, the regional ECUs 104 to 107, and the slave ECUs 108 to 116, 118 are also collectively referred to as nodes. Here, the regional ECU may be an ECU that bundles slave ECUs in a specified area within the vehicle, or may be an ECU that bundles slave ECUs belonging to a specified domain.

[0198] The battery 117 supplies power to each part of the vehicle at a DC battery voltage (for example, 12V). The central ECU 101, the upstream power distribution units 102, 103, the regional ECUs 104 to 107, and the slave ECUs 108 to 116, 118 receive power supply from the battery 117 and operate.

[0199] The upstream power distribution unit 102 receives power supply from the battery 117 through a power supply path 121 between the battery 117 and the upstream power distribution unit 102.

[0200] The upstream power distribution unit 103 receives power supply from the battery 117 through a power supply path 122 between the battery 117 and the upstream power distribution unit 103.

[0201] The regional ECUs 104 and 105 receive power supply from the battery 117 through power supply paths 123 and 124 between the upstream power distribution unit 102 and the regional ECUs 104 and 105, respectively.

[0202] The regional ECUs 106 and 107 receive power supply from the battery 117 through power supply paths 125 and 126 between the upstream power distribution unit 103 and the regional ECUs 106 and 107, respectively.

[0203] The ECUs 108 and 109 receive power supply from the battery 117 respectively through the area ECU 104 and the power supply paths 127 and 128 between the ECUs 108 and 109.

[0204] The ECUs 110 and 111 receive power supply from the battery 117 respectively through the area ECU 105 and the power supply paths 129 and 130 between the ECUs 110 and 111.

[0205] The ECUs 112, 113 and 114 receive power supply from the battery 117 respectively through the area ECU 106 and the power supply paths 131, 132 and 133 between the ECUs 112, 113 and 114.

[0206] The ECUs 115 and 116 receive power supply from the battery 117 respectively through the area ECU 107 and the power supply paths 134 and 135 between the ECUs 115 and 116.

[0207] The ECU 118 receives power supply from the battery 117 through the power supply path 136.

[0208] The central ECU 101 and the upstream power distribution unit 102 are connected via the communication line 141 so as to be able to perform data communication with each other.

[0209] The central ECU 101 and the upstream power distribution unit 103 are connected via the communication line 142 so as to be able to perform data communication with each other.

[0210] The central ECU 101 and the area ECUs 104, 105, 106 and 107 are connected via the communication lines 143, 144, 145 and 146 respectively so as to be able to perform data communication with each other.

[0211] The area ECU 104 and the ECUs 108, 109 and 118 are connected via the communication bus 147 so as to be able to perform data communication with each other.

[0212] The area ECU 105 and the ECUs 110 and 111 are connected via the communication bus 148 so as to be able to perform data communication with each other.

[0213] The area ECU 106 and the ECUs 112, 113 and 114 are connected via the communication bus 149 so as to be able to perform data communication with each other.

[0214] The area ECU 107 and the ECUs 115 and 116 are connected via the communication bus 150 so as to be able to perform data communication with each other.

[0215] As Figure 10As shown, the central ECU 101 includes a control unit 151, communication units 152, 153, 154, 155, 156, 157, and a storage unit 158.

[0216] The control unit 151 is an electronic control device mainly composed of a microcomputer including a CPU 161, a ROM 162, and a RAM 163. Various functions of the microcomputer are realized by the CPU 161 executing a program stored in a non-removable physical recording medium. In this example, the ROM 162 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 161 can also be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 151 can be one or more.

[0217] The communication unit 152 communicates with the upstream power distribution unit 102 connected to the communication line 141, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol. Ethernet is a registered trademark.

[0218] The communication unit 153 communicates with the upstream power distribution unit 103 connected to the communication line 142, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0219] The communication unit 154 communicates with the area ECU 104 connected to the communication line 143, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0220] The communication unit 155 communicates with the area ECU 105 connected to the communication line 144, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0221] The communication unit 156 communicates with the area ECU 106 connected to the communication line 145, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0222] The communication unit 157 communicates with the area ECU 107 connected to the communication line 145, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0223] The storage unit 158 is a storage device for storing various data. The storage unit 158 stores the startup table 165 described later.

[0224] The upstream power distribution unit 102 includes a control circuit 171, a communication unit 172, and electronic fuses 173, 174.

[0225] The control circuit 171 performs control to switch the electronic fuses 173 and 174 between the on state and the off state based on an instruction acquired from the central ECU 101 via the communication unit 172.

[0226] The communication unit 172 communicates with the central ECU 101 connected to the communication line 141, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0227] The electronic fuse 173 is disposed between the power supply path 121 and the power supply path 123. The electronic fuse 174 is disposed between the power supply path 121 and the power supply path 124.

[0228] The upstream power distribution unit 103 includes a control circuit 181, a communication unit 182, and electronic fuses 183 and 184.

[0229] The control circuit 181 performs control to switch the electronic fuses 183 and 184 between the on state and the off state based on an instruction acquired from the central ECU 101 via the communication unit 182.

[0230] The communication unit 182 communicates with the central ECU 101 connected to the communication line 142, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0231] The electronic fuse 183 is disposed between the power supply path 122 and the power supply path 125. The electronic fuse 184 is disposed between the power supply path 122 and the power supply path 126.

[0232] As Figure 11 shown, the area ECU 104 includes a control unit 191, a communication unit 192, a CAN communication unit 193, a storage unit 194, and electronic fuses 195 and 196.

[0233] The control unit 191 is an electronic control device mainly composed of a microcomputer including a CPU 201, a ROM 202, a RAM 203, etc. Various functions of the microcomputer are realized by the CPU 201 executing a program stored in a non-removable physical recording medium. In this example, the ROM 202 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Further, part or all of the functions executed by the CPU 201 may be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 191 may be one or more.

[0234] The communication unit 192 communicates with the central ECU 101 connected to the communication line 143, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0235] The CAN communication unit 193 communicates with the slave ECUs 108 and 109 connected to the communication bus 147 by transmitting and receiving communication frames based on the CAN communication protocol.

[0236] The storage unit 194 is a storage device for storing various data.

[0237] The electronic fuse 195 is disposed between the power supply path 123 and the power supply path 127. The electronic fuse 196 is disposed between the power supply path 123 and the power supply path 128.

[0238] The area ECU 105 includes a control unit 211, a communication unit 212, a CAN communication unit 213, a storage unit 214, and electronic fuses 215 and 216.

[0239] The control unit 211 is an electronic control device mainly composed of a microcomputer including a CPU 221, a ROM 222, a RAM 223, etc. Various functions of the microcomputer are realized by the CPU 221 executing a program stored in a non-removable physical recording medium. In this example, the ROM 222 corresponds to the non-removable physical recording medium storing the program. In addition, by the execution of this program, a method corresponding to the program is executed. Further, a part or all of the functions executed by the CPU 221 may be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 211 may be one or more.

[0240] The communication unit 212 communicates with the central ECU 101 connected to the communication line 144, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0241] The CAN communication unit 213 communicates with the slave ECUs 110 and 111 connected to the communication bus 148 by transmitting and receiving communication frames based on the CAN communication protocol.

[0242] The storage unit 214 is a storage device for storing various data.

[0243] The electronic fuse 215 is disposed between the power supply path 124 and the power supply path 129. The electronic fuse 216 is disposed between the power supply path 124 and the power supply path 130.

[0244] As Figure 12 shown, the area ECU 106 includes a control unit 231, a communication unit 232, a CAN communication unit 233, a storage unit 234, and electronic fuses 235, 236, and 237.

[0245] The control unit 231 is an electronic control device mainly composed of a microcomputer including a CPU 241, a ROM 242, a RAM 243, etc. Various functions of the microcomputer are realized by the CPU 241 executing a program stored in a non-removable physical recording medium. In this example, the ROM 242 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 241 can also be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 231 can be one or more.

[0246] The communication unit 232 communicates with the central ECU 101 connected to the communication line 145, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0247] The CAN communication unit 233 communicates with the slave ECUs 112, 113, 114 connected to the communication bus 149 by transmitting and receiving communication frames based on the CAN communication protocol.

[0248] The storage unit 234 is a storage device for storing various data.

[0249] The electronic fuse 235 is arranged between the power supply path 125 and the power supply path 131. The electronic fuse 236 is arranged between the power supply path 125 and the power supply path 132. The electronic fuse 237 is arranged between the power supply path 125 and the power supply path 133.

[0250] The regional ECU 107 includes a control unit 251, a communication unit 252, a CAN communication unit 253, a storage unit 254, and electronic fuses 255, 256.

[0251] The control unit 251 is an electronic control device mainly composed of a microcomputer including a CPU 261, a ROM 262, a RAM 263, etc. Various functions of the microcomputer are realized by the CPU 261 executing a program stored in a non-removable physical recording medium. In this example, the ROM 262 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 261 can also be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 251 can be one or more.

[0252] The communication unit 252 communicates with the central ECU 101 connected to the communication line 146, for example, by transmitting and receiving communication frames based on the Ethernet communication protocol.

[0253] The CAN communication unit 253 communicates with the slave ECUs 115 and 116 connected to the communication bus 150 by transmitting and receiving communication frames based on the CAN communication protocol.

[0254] The storage unit 254 is a storage device for storing various data.

[0255] The electronic fuse 255 is arranged between the power supply path 126 and the power supply path 134. The electronic fuse 256 is arranged between the power supply path 126 and the power supply path 135.

[0256] As Figure 13 shown, the slave ECUs 108, 109, and 118 include a control unit 271, a CAN communication unit 272, and a storage unit 273.

[0257] The control unit 271 is an electronic control device mainly composed of a microcomputer including a CPU 281, a ROM 282, a RAM 283, etc. Various functions of the microcomputer are realized by the CPU 281 executing a program stored in a non-removable physical recording medium. In this example, the ROM 282 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 281 can be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 271 can be one or more.

[0258] The CAN communication unit 272 communicates with the area ECU 104 connected to the communication bus 147 based on the CAN communication protocol.

[0259] The storage unit 273 is a storage device for storing various data.

[0260] The slave ECUs 110 and 111 include a control unit 291, a CAN communication unit 292, and a storage unit 293.

[0261] The control unit 291 is an electronic control device mainly composed of a microcomputer including a CPU 301, a ROM 302, a RAM 303, etc. Various functions of the microcomputer are realized by the CPU 301 executing a program stored in a non-removable physical recording medium. In this example, the ROM 302 corresponds to the non-removable physical recording medium storing the program. In addition, by executing this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 301 can be configured in hardware by one or more ICs, etc. In addition, the number of microcomputers constituting the control unit 291 can be one or more.

[0262] The CAN communication unit 292 communicates with the area ECU 105 connected to the communication bus 148 based on the CAN communication protocol.

[0263] The storage unit 293 is a storage device for storing various data.

[0264] The slave ECUs 112, 113, and 114 include a control unit 311, a CAN communication unit 312, and a storage unit 313.

[0265] The control unit 311 is an electronic control device centered around a microcomputer including a CPU 321, a ROM 322, a RAM 323, etc. Various functions of the microcomputer are realized by the CPU 321 executing a program stored in a non-removable physical recording medium. In this example, the ROM 322 corresponds to the non-removable physical recording medium storing the program. Additionally, through the execution of this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 321 can be configured in hardware by one or more ICs, etc. Also, the number of microcomputers constituting the control unit 311 can be one or more.

[0266] The CAN communication unit 312 communicates with the area ECU 106 connected to the communication bus 149 based on the CAN communication protocol.

[0267] The storage unit 313 is a storage device for storing various data.

[0268] The slave ECUs 115, 116 include a control unit 331, a CAN communication unit 332, and a storage unit 333.

[0269] The control unit 331 is an electronic control device centered around a microcomputer including a CPU 341, a ROM 342, a RAM 343, etc. Various functions of the microcomputer are realized by the CPU 341 executing a program stored in a non-removable physical recording medium. In this example, the ROM 342 corresponds to the non-removable physical recording medium storing the program. Additionally, through the execution of this program, a method corresponding to the program is executed. Furthermore, part or all of the functions executed by the CPU 341 can be configured in hardware by one or more ICs, etc. Also, the number of microcomputers constituting the control unit 331 can be one or more.

[0270] The CAN communication unit 332 communicates with the area ECU 107 connected to the communication bus 150 based on the CAN communication protocol.

[0271] The storage unit 333 is a storage device for storing various data.

[0272] AsFigure 14 As shown, in the start-up table 165 of the central ECU 101, a communication group (i.e., start-up group) to be started is set for each event. In the start-up table 165, the correspondence between the start-up group and the slave ECU that becomes the wake-up state is also set. In the start-up table 165, the correspondence between the slave ECU and the electronic fuse connected to the slave ECU is also set. In addition, the start-up table 165 can also be set in a form where it is known which area ECU the slave ECU belongs to.

[0273] When the central ECU 101 detects the occurrence of an event, it determines the start-up group by referring to the start-up table 165 based on the detected event.

[0274] When the central ECU 101 receives an NM frame, it determines that the communication group corresponding to the bit set to 1 in the received NM frame is the start-up group.

[0275] The central ECU 101 starts the process of sending an NM frame indicating the start-up group determined due to the detection of the occurrence of an event or the reception of an NM frame to the area ECUs 104, 105, 106, 107. After the central ECU 101 starts sending the NM frame, it periodically sends the same NM frame.

[0276] The central ECU 101 sends an electronic fuse control instruction to the upstream power distribution units 102, 103 and the area ECUs 104, 105, 106, 107 by referring to the start-up table 165, which instructs to turn on the electronic fuses corresponding to the start-up group determined due to the detection of the occurrence of an event or the reception of an NM frame, and turn off the electronic fuses other than those corresponding to the start-up group.

[0277] Based on the received electronic fuse control instruction, the upstream power distribution unit 102 turns on or off the electronic fuses 173, 174.

[0278] Based on the received electronic fuse control instruction, the upstream power distribution unit 103 turns on or off the electronic fuses 183, 184.

[0279] Based on the received electronic fuse control instruction, the area ECU 104 turns on or off the electronic fuses 195, 196.

[0280] Based on the received electronic fuse control instruction, the area ECU 105 turns on or off the electronic fuses 215, 216.

[0281] Based on the received electronic fuse control instruction, the area ECU 106 turns on or off the electronic fuses 235, 236, 237.

[0282] Based on the received electronic fuse control instruction, the area ECU 107 makes the electronic fuses 255 and 256 in the on state or the off state.

[0283] Next, the steps of the state transition process executed by the ECUs 108 to 116 will be described. The state transition process is a process repeatedly executed during the operations of the ECUs 108 to 116. Hereinafter, the steps of the state transition process will be described taking the ECU 108 as a representative.

[0284] When the state transition process is executed, as Figure 15 shown, in S310, similar to S10, the CPU 281 of the control unit 271 of the ECU 108 determines whether a preset cut-off condition is satisfied.

[0285] Here, when the cut-off condition is not satisfied, the CPU 281 ends the state transition process. On the other hand, when the cut-off condition is satisfied, in S320, the CPU 281 sends an end notification indicating that the electronic fuse connected to this node can be made in the cut-off state to the central ECU 101. Specifically, the CPU 281 sends the end notification to the area ECU 104. The area ECU 104 forwards the end notification received from the CPU 281 of the ECU 108 to the central ECU 101.

[0286] When the central ECU 101 receives the end notification from the ECU 108, for example, after a preset waiting time for the ECU 108, the central ECU 101 makes the electronic fuse 195 in the cut-off state by sending an electronic fuse control instruction to make the electronic fuse 195 in the off state to the area ECU 104.

[0287] In S330, similar to S30, the CPU 281 starts the reception timer set in the RAM 283.

[0288] In S340, similar to S40, the CPU 281 determines whether a CAN frame sent to this node is received. Here, when a CAN frame sent to this node is received, the CPU 281 ends the state transition process. On the other hand, when a CAN frame sent to this node is not received, in S350, similar to S50, the CPU 281 determines whether a preset reception determination time has elapsed.

[0289] Here, without passing the reception determination time, the CPU 281 moves to S340. On the other hand, when the reception determination time has passed, in S360, similar to S60, the CPU 281 performs various end processes before transferring to the sleep state, and after completing the various end processes, transfers this node to the sleep state.

[0290] In S370, similar to S70, the CPU 281 determines whether a CAN frame is received.

[0291] Here, when a CAN frame is not received, the CPU 281 waits until a CAN frame is received by repeating the process of S370. Then, when a CAN frame is received, in S380, similar to S80, the CPU 281 starts this node and ends the state transition process.

[0292] The slave ECUs 108 to 116 thus configured are each configured to receive power supply from the battery 117 via the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256, and the above-mentioned electronic fuses are configured to switch between a conduction state in which the power supply path is made conductive and a cut-off state in which the power supply path is cut off.

[0293] The slave ECUs 108 to 116 are each configured to send an end notification to the central ECU 101 when a preset cut-off condition is satisfied, and the above-mentioned cut-off condition indicates that the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 connected to the slave ECUs 108 to 116 can be made in the cut-off state. The central ECU 101 is configured to be connected to be able to perform data communication with the slave ECUs 108 to 116 and is configured to be able to transmit and receive communication frames, and controls the operation of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256.

[0294] The slave ECUs 108 to 116 are each configured to transfer to the sleep state when, after the cut-off condition is satisfied and before passing a preset reception determination time, no CAN frame destined for this node is received from all of the plurality of communication devices (i.e., the central ECU 101, the regional ECUs 104 to 107, and the slave ECUs 108 to 116, 118) connected to be able to perform data communication with the slave ECUs 108 to 116.

[0295] Even in the case of a failure where, although the central ECU 101 that has received the end notification from the slave ECUs 108 to 116 wants to switch the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 to the cut-off state, it is unable to switch the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 to the cut-off state, the slave ECUs 108 to 116 can be transferred to the sleep state. Therefore, the slave ECUs 108 to 116 can suppress the situation where, although it is possible to make the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 in the cut-off state and stop the operation of the slave ECUs 108 to 116, the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 are in the conducting state and the slave ECUs 108 to 116 are in the wake-up state, and unnecessary power consumption occurs in the slave ECUs 108 to 116, and power consumption can be reduced in the communication system 100.

[0296] In the embodiment described above, the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 correspond to the power supply switching unit, the battery 117 corresponds to the power source, the slave ECUs 108 to 116 correspond to the electronic control device and the first control device, and the central ECU 101 corresponds to the power supply control device and the second control device.

[0297] In addition, S310 and S320 correspond to the processing as the end notification unit, S330 to S360 correspond to the processing as the sleep transfer unit, and S370 to S380 correspond to the processing as the wake-up transfer unit.

[0298] In addition, the slave ECUs 108 to 116 correspond to the slave control devices, the regional ECUs 104 to 107 correspond to the regional control devices, and the central ECU 101 corresponds to the central control device.

[0299] [Sixth Embodiment]

[0300] Hereinafter, the sixth embodiment of the present disclosure will be described with reference to the drawings. In addition, in the sixth embodiment, the parts different from the fifth embodiment will be described. The same reference numerals are used for the common structures.

[0301] As Figure 16As shown, the communication system 100 of the sixth embodiment is different from the fifth embodiment in that the structure of the start-up table 165 included in the central ECU 101 has been changed. That is, in the start-up table 165 of the sixth embodiment, start-up groups are set for each event. In other words, in the start-up table 165 of the sixth embodiment, the correspondence between the start-up group and the slave ECU that becomes the wake-up state is not set.

[0302] As Figure 17 shown, the sixth embodiment is different from the fifth embodiment in that the start-up table 205 described later is also stored in the storage unit 194 of the regional ECU 104.

[0303] The sixth embodiment is different from the fifth embodiment in that the start-up table 225 described later is also stored in the storage unit 214 of the regional ECU 105.

[0304] As Figure 18 shown, the sixth embodiment is different from the fifth embodiment in that the start-up table 245 described later is also stored in the storage unit 234 of the regional ECU 106.

[0305] The sixth embodiment is different from the fifth embodiment in that the start-up table 265 described later is also stored in the storage unit 254 of the regional ECU 107.

[0306] As Figure 16 shown, the start-up table 205 sets the correspondence between the start-up group and the slave ECU that becomes the wake-up state for the slave ECUs 108, 109, and 118 subordinate to the regional ECU 104. In the start-up table 205, the correspondence between the slave ECUs 108, 109, 118 and the electronic fuses connected to the slave ECUs 108, 109, 118 is also set.

[0307] The start-up table 225 sets the correspondence between the start-up group and the slave ECU that becomes the wake-up state for the slave ECUs 110 and 111 subordinate to the regional ECU 105. In the start-up table 225, the correspondence between the slave ECUs 110, 111 and the electronic fuses connected to the slave ECUs 110, 111 is also set.

[0308] The start-up table 245 sets the correspondence between the start-up group and the slave ECU that becomes the wake-up state for the slave ECUs 112, 113, and 114 subordinate to the regional ECU 106. In the start-up table 225, the correspondence between the slave ECUs 112, 113, 114 and the electronic fuses connected to the slave ECUs 112, 113, 114 is also set.

[0309] The start-up table 265 sets the correspondence between the start-up groups and the slave ECUs 115 and 116 that are subordinate to the regional ECU 107 and are in the wake-up state. In the start-up table 265, the correspondence between the slave ECUs 115 and 116 and the electronic fuses connected to the slave ECUs 115 and 116 is also set.

[0310] When the central ECU 101 detects the occurrence of an event, it determines the start-up group by referring to the start-up table 165 based on the detected event.

[0311] When the central ECU 101 receives an NM frame, it determines that the communication group corresponding to the bit set to 1 in the received NM frame is the start-up group.

[0312] The central ECU 101 starts the process of sending an NM frame indicating the start-up group determined due to the detection of the occurrence of an event or the reception of an NM frame to the regional ECUs 104, 105, 106, and 107. After the central ECU 101 starts sending the NM frame, it periodically sends the same NM frame thereafter.

[0313] When the regional ECUs 104, 105, 106, and 107 receive an NM frame, they forward the received NM frame to the subordinate slave ECUs.

[0314] Based on the received NM frame, the regional ECUs 104, 105, 106, and 107, by referring to the start-up tables 205, 225, 245, and 265, turn on the electronic fuses corresponding to the start-up group indicated by the NM frame for the subordinate slave ECUs, and turn off the electronic fuses other than those corresponding to the start-up group.

[0315] Next, the steps of the state transition process of the sixth embodiment will be described.

[0316] As Figure 19 shown, the state transition process of the sixth embodiment is different from that of the fifth embodiment in that S325 is executed instead of S320.

[0317] That is, when the cut-off condition is satisfied in S310, in S325, the CPU 281 sends an end notification indicating that the electronic fuse connected to this node can be turned off to the regional ECU 104 and moves to S330.

[0318] When the regional ECU 104 receives the end notification from the slave ECU 108, for example, after a preset waiting time for the slave ECU 108, it turns off the electronic fuse 195.

[0319] The slave ECUs 108 and 109 configured in this way are each configured to receive power supply from the battery 117 via the electronic fuses 195 and 196, and the electronic fuses 195 and 196 are configured to switch between a conduction state of the power supply path and a cut-off state of cutting off the power supply path.

[0320] The slave ECUs 108 and 109 are each configured to send an end notification to the area ECU 104 when a preset cut-off condition is satisfied, and the cut-off condition indicates that the electronic fuses 195 and 196 connected to the slave ECUs 108 and 109 can be made into a cut-off state. The central ECU 101 and the area ECU 104 are configured to be connected to the slave ECUs 108 and 109 so as to enable data communication and transceiver communication frames, and are configured to control the operation of the electronic fuses 195 and 196.

[0321] The slave ECUs 108 and 109 are each configured to transfer to a sleep state when, after the cut-off condition is satisfied and before a preset reception determination time has elapsed, no CAN frame destined for this node is received from all of the plurality of communication devices (i.e., the central ECU 101, the area ECUs 104 to 107, and the slave ECUs 108 to 116, 118) that are connected to the slave ECUs 108 and 109 so as to enable data communication.

[0322] Even in the case of a failure where, although the area ECU 104 that has received the end notification from the slave ECUs 108 and 109 wants to switch the electronic fuses 195 and 196 to the cut-off state, the electronic fuses 195 and 196 cannot be switched to the cut-off state, the slave ECUs 108 and 109 can be transferred to the sleep state. Therefore, the slave ECUs 108 and 109 can suppress the situation where, although it is a state where the electronic fuses 195 and 196 can be made into a cut-off state and the operation of the slave ECUs 108 and 109 can be stopped, the electronic fuses 195 and 196 are in a conduction state and the slave ECUs 108 and 109 are in a wake-up state, and the slave ECUs 108 and 109 consume power unnecessarily, and can reduce power consumption in the communication system 100.

[0323] In addition, the slave ECUs 110 and 111 are each configured to send an end notification to the area ECU 105 when a preset cut-off condition is satisfied, and the cut-off condition indicates that the electronic fuses 215 and 216 connected to the slave ECUs 110 and 111 can be made into a cut-off state.

[0324] The slave ECUs 112, 113, and 114 are each configured to send an end notification to the area ECU 106 when a preset cut-off condition is satisfied, where the cut-off condition indicates that the electronic fuses 235, 236, and 237 connected to the slave ECUs 112, 113, and 114 can be put into a cut-off state.

[0325] The slave ECUs 115 and 116 are each configured to send an end notification to the area ECU 107 when a preset cut-off condition is satisfied, where the cut-off condition indicates that the electronic fuses 255 and 256 connected to the slave ECUs 115 and 116 can be put into a cut-off state.

[0326] In the embodiment described above, the slave ECUs 108 to 116 correspond to the electronic control device and the first control device, the central ECU 101 and the area ECUs 104 to 107 correspond to the power supply control device and the second control device, and S310 and S325 correspond to the processing as the end notification unit.

[0327] [Seventh Embodiment]

[0328] Hereinafter, the seventh embodiment of the present disclosure will be described with reference to the drawings. In addition, in the seventh embodiment, the parts different from the fifth embodiment will be described. The same reference numerals are used for the common structures.

[0329] The communication system 100 of the seventh embodiment is different from the fifth embodiment in that the state transition process is changed and the central ECU 101 executes the state transmission process.

[0330] Next, the steps of the state transmission process executed by the control unit 151 of the central ECU 101 will be described. The state transmission process is a process repeatedly executed during the operation of the central ECU 101.

[0331] When the state transmission process is executed, as Figure 20 shown, in S410, the CPU 161 of the control unit 151 confirms whether each of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 is in an on state or an off state.

[0332] Specifically, the area ECU 104 detects the value of the current flowing through the power supply path configured with the following electronic fuses 195 and 196 (hereinafter, the fuse current value). Then, when the detected fuse current value is equal to or greater than a preset turn-on determination value, the area ECU 104 determines that the corresponding fuse is in the on state, and when the detected fuse current value is lower than the turn-on determination value, the area ECU 104 determines that the corresponding fuse is in the off state. Then, the area ECU 104 sends electronic fuse status information indicating whether each of the following electronic fuses 195 and 196 is in the on state or the off state to the central ECU 101.

[0333] Similar to the area ECU 104, the area ECUs 105, 106, and 107 detect the fuse current value for the following electronic fuses and send the electronic fuse status information indicating whether it is in the on state or the off state to the central ECU 101.

[0334] Based on the electronic fuse status information received from each of the area ECUs 104, 105, 106, and 107, the central ECU 101 confirms whether each of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 is in the on state or the off state.

[0335] In S420, based on the confirmation result in S410, the CPU 161 sends power supply switching status information indicating whether each of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 is in the on state or the off state to the slave ECUs 108 to 116, and ends the status sending process.

[0336] Next, the steps of the state transition process of the seventh embodiment will be described. Hereinafter, the steps of the state transition process will be described taking the slave ECU 108 as an example.

[0337] When the state transition process is executed, as Figure 21 shown, in S510, the CPU 281 of the control unit 271 of the slave ECU 108 determines whether it has received power supply switching status information from the central ECU 101.

[0338] Here, in the case where the power supply switching state information is not received, the CPU 281 ends the state transition process. On the other hand, in the case where the power supply switching state information is received, in S520, the CPU 281 determines whether all the electronic fuses (that is, electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256) are in the off state based on the received power supply switching state information. Here, in the case where all the electronic fuses are in the off state, the CPU 281 moves to S540.

[0339] On the other hand, in the case where at least one of all the electronic fuses is in the on state, in S530, the CPU 281 determines whether all the electronic fuses other than the electronic fuse of this node are in the off state.

[0340] Here, in the case where there is an electronic fuse in the on state other than the electronic fuse of this node, the CPU 281 ends the state transition process. On the other hand, in the case where all the electronic fuses other than the electronic fuse of this node are in the off state, the CPU 281 moves to S540.

[0341] When moving to S540, the CPU 281 transfers this node to the sleep state and ends the state transition process.

[0342] The slave ECUs 108 to 116 configured in this way are each configured to receive power supply from the battery 117 via the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 that switch between the on state of conducting the power supply path and the off state of cutting off the power supply path.

[0343] The slave ECUs 108 to 116 are configured such that when receiving the power supply switching state information from the central ECU 101, based on the received power supply switching state information, in the case where all of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 are in the cut-off state, or in the case where all of the electronic fuses other than the electronic fuses connected to the slave ECUs 108 to 116 among the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 are in the cut-off state, the slave ECUs 108 to 116 are transferred to the sleep state. The central ECU 101 is configured to be connected to the slave ECUs 108 to 116 so as to be able to perform data communication and control the operation of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256. The power supply switching state information indicates whether each of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 is in the on state or the off state.

[0344] In this way, even when all of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 are in the cut-off state, or when all of the electronic fuses other than the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 connected to the ECUs 108 to 116 are in the cut-off state, which is an abnormal state, the ECUs 108 to 116 can be inhibited from continuing to operate and consuming power unnecessarily, thereby reducing power consumption in the communication system 100. In addition, except for faults, there will be no state in which all of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 are in the cut-off state, nor will there be a state in which only one of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 is in the conducting state.

[0345] In the embodiment described above, the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, and 256 correspond to a plurality of power supply switching units, S420 corresponds to the process of the status information sending unit, and S520 to S540 correspond to the process of the cut-off time transfer unit.

[0346] As described above, one embodiment of the present disclosure has been described, but the present disclosure is not limited to the above embodiment, and various modifications can be made and implemented.

[0347] [Modification Example 1]

[0348] In the above first to third embodiments, a method of controlling power supply using the relays 15, 16, and 17 is shown, but electronic fuses can be used instead of the relays 15, 16, and 17.

[0349] [Modification Example 2]

[0350] In the above first embodiment, a method of transferring the present node to the sleep state when a CAN frame destined for the present node is not received before the reception determination time has elapsed is shown. However, the present node can also be transferred to the sleep state when a CAN frame is not received regardless of whether it is destined for the present node or for other nodes.

[0351] [Modification Example 3]

[0352] In the above first embodiment, a method is shown in which when a CAN frame addressed not only to the present node but also to other nodes is received, the present node is transferred to the wake-up state. However, the present node may also be transferred to the wake-up state when a CAN frame addressed to the present node is received. Thereby, the communication system 1 can reduce the frequency of the present node being transferred to the wake-up state when it is not necessary for the present node to perform various processes, and can further reduce power consumption in the communication system 1.

[0353] [Modification Example 4]

[0354] In the above second embodiment, a method is shown in which the present node is transferred to the sleep state by the process of S240. However, the present node may also be transferred to the stop state by the process of S240. The stop state is an operation state in which functions that also operate in the sleep state are stopped.

[0355] [Modification Example 5]

[0356] In the above first embodiment, a method is shown in which after the cut-off condition is satisfied in S10, an end notification is immediately sent in S20. However, the end notification may also be sent immediately before the process of S60 is performed.

[0357] [Modification Example 6]

[0358] In the above fifth embodiment, a method is shown in which the state transition process is executed from the ECUs 108 to 116. However, the state transition process may also be executed by the regional ECUs 104 to 107. For example, when the cut-off condition is satisfied, the regional ECU 104 sends an end notification indicating that the electronic fuse 173 connected to the present node can be brought into the cut-off state to the central ECU 101. Then, when the regional ECU 104 does not receive a communication frame addressed to the present node before the reception determination time has elapsed, the present node is transferred to the sleep state. In this case, the regional ECUs 104 to 107 correspond to the first control device, the electronic fuses 173, 174, 183, and 184 correspond to the power supply switching unit, and the central ECU 101 corresponds to the second control device.

[0359] The control units 11 and 31 and their methods described in the present disclosure can also be implemented by a dedicated computer provided by a processor and a memory 10 configured to execute one or more functions embodied by a computer program. Alternatively, the control units 11 and 31 and their methods described in the present disclosure can also be implemented by a dedicated computer provided by a processor constituted by one or more dedicated hardware logic circuits. Alternatively, the control units 11 and 31 and their methods described in the present disclosure can also be implemented by one or more dedicated computers constituted by a combination of a processor and a memory configured to execute one or more functions and a processor constituted by one or more hardware logic circuits. In addition, the computer program can also be stored as instructions executable by a computer in a computer-readable non-transitory tangible recording medium. The method for implementing the functions of the respective units included in the control units 11 and 31 does not necessarily need to include software, and all of its functions can also be implemented using one or more hardware components.

[0360] The multiple functions of one component in the above-described embodiments can also be implemented by multiple components, or one function of one component can be implemented by multiple components. In addition, the multiple functions of multiple components can also be implemented by one component, or one function implemented by multiple components can be implemented by one component. In addition, a part of the configuration of the above-described embodiments can also be omitted. In addition, at least a part of the configuration of the above-described embodiments can also be added to or replaced with the configuration of other above-described embodiments.

[0361] In addition to the above-described ECUs 2 to 5, 101, and 104 to 116, the present disclosure can also be implemented in various ways such as a system including the ECUs 2 to 5, 101, and 104 to 116 as components, a program for causing a computer to function as the ECUs 2 to 5, 101, and 104 to 116, a non-transitory physical recording medium such as a semiconductor memory storing the program, and a control method.

Claims

1. An electronic control device configured to receive power supply from a power supply via a power supply switching unit, wherein: The power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off. The electronic control device includes: an end notification unit configured to send an end notification to the power supply control device when a preset cutoff condition is satisfied, wherein the cutoff condition indicates that the power supply switching unit connected to the electronic control device can be placed in the cutoff state, and the power supply control device is configured to be connected to the electronic control device so as to be able to perform data communication and to be able to send and receive communication frames and control the operation of the power supply switching unit; and The sleep transfer unit transfers the electronic control device to a sleep state after the above-mentioned disconnection condition is met and if the above-mentioned communication frames are not all received from one or more communication devices before a preset reception judgment time, wherein the above-mentioned one or more communication devices are connected to the above-mentioned electronic control device to enable data communication.

2. The electronic control device according to claim 1, wherein: The invention further includes a wakeup transition unit configured to transition the electronic control device to an awake state when the electronic control device is in the sleep state and when the communication frame is received from at least one of the one or more communication devices.

3. The electronic control device according to claim 1 or 2, wherein: The sleep transition unit transitions the electronic control device to the sleep state when the communication frame addressed to the electronic control device is not received.

4. The electronic control device according to claim 2, wherein: The awake transition unit causes the electronic control device to transition to the awake state when receiving the communication frame addressed to the electronic control device.

5. The electronic control device according to claim 1 or 2, wherein: The cutoff condition includes a voltage drop condition indicating that a voltage value of the power supply is lower than a preset cutoff determination value.

6. The electronic control device according to claim 1 or 2, wherein: The cutoff condition includes a power supply failure condition indicating that a failure has occurred in the power supply from the power supply to the electronic control device.

7. An electronic control device configured to receive power supply from a power source via at least one of a plurality of power supply switching units, wherein: The power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off. The electronic control device includes a cut-off transition unit, which is configured to, when receiving power supply switching state information from the power supply control device, based on the received power supply switching state information, transfer the electronic control device to a stop state or a sleep state when all of the multiple power supply switching units are in the cut-off state or when all of the multiple power supply switching units other than the power supply switching unit connected to the electronic control device are in the cut-off state, wherein the power supply control device is configured to be connected to the electronic control device so as to be able to communicate data and control the operation of the multiple power supply switching units, and the power supply switching state information indicates whether each of the multiple power supply switching units is in the on state or the cut-off state.

8. A communication system comprising: The first control device receives power supply from a power supply via a power supply switching unit, wherein: The power supply switching unit is configured to switch between an on state in which a power supply path is turned on and a off state in which the power supply path is turned off; as well as The second control device is configured to be connected to the first control device so as to be able to perform data communication, and is configured to be able to send and receive communication frames, and to control the operation of the power supply switching unit. The first control device comprises: an end notification unit configured to send an end notification to the second control device when a preset disconnection condition is satisfied, wherein the disconnection condition indicates that the power supply switching unit connected to the first control device can be placed in the disconnection state; and The sleep transfer unit causes the first control device to transfer to a sleep state after the above-mentioned disconnection condition is met and if the above-mentioned communication frames are not all received from one or more communication devices before a preset reception judgment time, wherein the above-mentioned one or more communication devices are connected to the above-mentioned first control device to enable data communication.

9. A communication system comprising: A plurality of power supply switching units configured to switch between an on state for conducting a power supply path and an off state for cutting off the power supply path; a first control device receiving power supply from a power source via at least one of the plurality of power supply switching units; and The second control device is configured to be connected to the first control device so as to be capable of data communication and to control the operation of the plurality of power supply switching units. The second control device includes a state information sending unit configured to send power supply switching state information to the first control device, wherein: The power supply switching state information indicates whether each of the plurality of power supply switching units is in the on state or the off state. The above-mentioned first control device includes a cut-off transition unit, and the above-mentioned cut-off transition unit is configured to transfer the first control device to a stop state or a sleep state based on the above-mentioned power supply switching state information received from the above-mentioned second control device, when all of the multiple power supply switching units are in the above-mentioned cut-off state, or when all of the multiple power supply switching units except the power supply switching unit connected to the first control device are in the above-mentioned cut-off state.

10. The communication system according to claim 8 or 9, wherein: For this communication system, comprising a slave control device as the first control device, The device comprises a regional control device, the regional control device being connected to the slave control device so as to be capable of data communication and having the power supply switching unit, A central control device is included as the second control device, the central control device is connected to the regional control device so as to be able to perform data communication and control the operation of the power supply switching unit, The slave control device and the central control device are connected via the regional control device so as to be able to perform data communication with each other.

11. The communication system according to claim 8 or 9, wherein: For this communication system, comprising a slave control device as the first control device, The invention comprises a regional control device and a central control device as the second control device, wherein the regional control device is connected to the slave control device so as to be able to perform data communication, and has the power supply switching unit and controls the operation of the power supply switching unit, and the central control device is connected to the regional control device so as to be able to perform data communication, The slave control device and the central control device are connected via the regional control device so as to be able to perform data communication with each other.

12. The communication system according to claim 8 or 9, wherein: For this communication system, Contains slave control devices, A regional control device is included as the first control device, the regional control device is connected to the slave control device so as to be able to perform data communication, An upstream power distribution unit and a central control device are included as the second control device. The upstream power distribution unit includes the power supply switching unit. The central control device is connected to the regional control device and the upstream power distribution unit so as to be able to perform data communication.

Images