False determination detection system

Abstract

This invention provides a fault diagnosis detection system capable of suppressing unnecessary component replacements or time-consuming repairs. The fault diagnosis detection system detects fault erroneous diagnoses based on a fault diagnosis device that determines a predetermined fault has occurred in a vehicle's communication network system. The system stores a simulation model of the communication network system and the same diagnostic procedure as the fault diagnosis device. The system uses the vehicle's operating history and the simulation model to simulate the diagnosis based on the diagnostic procedure. Based on the diagnostic results obtained from the simulation and the state of the communication network system, the system determines whether the fault diagnosis device's determination is a fault erroneous diagnose.

Description

Technical Field

[0001] This invention relates to a false judgment detection system. Background Technology

[0002] Patent Document 1 describes a communication network system mounted on a vehicle. This communication network system includes multiple communication devices. When a communication device fails to authenticate a message, the system determines the reason for the authentication failure.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2023-102696 Summary of the Invention

[0004] Among the communication devices in a communication network system, there are also fault diagnosis devices to determine if a fault has occurred in the communication network system. If the diagnosis result of the fault diagnosis device is incorrect, unnecessary component replacement or repair may be required, wasting time.

[0005] A fault diagnosis detection system addresses the aforementioned problem by detecting fault erroneous diagnoses based on a fault diagnosis device that determines the occurrence of a predetermined fault in a vehicle's communication network system. This fault diagnosis detection system includes a processing circuit and a storage device. The storage device stores a simulation model that reproduces the communication network system and a diagnostic program identical to that of the fault diagnosis device. The processing circuit performs the following steps: using the vehicle's operating history at the time the predetermined fault was determined to have occurred, and the simulation model, it performs a simulation to reproduce the diagnosis based on the diagnostic program; and based on the diagnostic results of the diagnostic program obtained as a result of the simulation and the state of the communication network system, it determines whether the determination based on the fault diagnosis device is a fault diagnosis.

[0006] Invention Effects

[0007] The aforementioned misjudgment detection system can detect misjudgments in the diagnostic process. If it is known that a misjudgment will occur during a predetermined operation, it can prevent unnecessary component replacements or time-consuming repairs. Attached Figure Description

[0008] Figure 1 This is a schematic diagram illustrating the structure of a false detection system according to one embodiment.

[0009] Figure 2 It means Figure 1 A schematic diagram of the structure of a communication network system.

[0010] Figure 3 It means in Figure 1 The timing diagram shows the communication methods performed in the false positive detection system. Detailed Implementation

[0011] The following is for reference. Figures 1-3 One implementation of the false positive detection system is described.

[0012] <Structure of the Misjudgment Detection System 20>

[0013] like Figure 1 As shown, a communication network system 12 is installed in the vehicle 11. The communication network system 12 consists of multiple communication devices 13. Figure 1 The communication network system 12 of each of the vehicles 11 shown has the same structure.

[0014] like Figure 1 As shown, the misjudgment detection system 20 consists of a management server 30 and a simulator 40.

[0015] like Figure 1 As shown, the management server 30 includes a processing circuit 31 and a storage device 32. The storage device 32 stores programs. The processing circuit 31 performs various processes by executing the programs stored in the storage device 32. The processing circuit 31 includes a processor. Figure 1 As shown, storage device 32 stores resume information DH. The resume information DH will be described later.

[0016] like Figure 1 As shown, the simulator 40 includes a processing circuit 41 and a storage device 42. The storage device 42 stores programs. The processing circuit 41 performs various processes by executing the programs stored in the storage device 42. The processing circuit 41 includes a processor.

[0017] like Figure 1 As shown, storage device 42 stores a simulation model MS. The simulation model MS is a model that simulates and reproduces the communication network system 12.

[0018] like Figure 1 As shown, storage device 42 stores a diagnostic program PD. Storage device 42 stores the same diagnostic program PD as the fault diagnosis device 17 described later.

[0019] like Figure 1 As shown, the management server 30 can be communicatively connected to multiple vehicles 11. Furthermore, as... Figure 1 As shown, the management server 30 and the simulator 40 can be communicatively connected.

[0020] <Structure of Communication Network System 12>

[0021] Figure 2 The structure of the communication network system 12 of vehicle 11 is shown. As described above, the storage device 42 of simulator 40 stores the simulated reproduction Figure 2The simulation model MS of the communication network system 12 shown.

[0022] like Figure 2 As shown, the communication network system 12 serves as the communication device 13 and includes a first ECU 13A, a second ECU 13B, a third ECU 13C, a fourth ECU 13D, and a fifth ECU 13E. The first ECU 13A through the fifth ECU 13E are electronic control devices provided by the vehicle 11. ECU is an abbreviation for Electronic Control Unit.

[0023] ECU 13A and ECU 13B are communicatively connected via communication line 14. ECU 13B and ECU 13C are communicatively connected via communication line 14. ECU 13C and ECU 13D are communicatively connected via communication line 14. ECU 13D and ECU 13E are communicatively connected via communication line 14.

[0024] Each communication device 13 is connected to the battery 16 via a power cord 15. Each communication device 13 is powered by the battery 16 via the connected power cord 15. While powered by the battery 16, each communication device 13 is able to communicate with other communication devices 13.

[0025] The battery 16 supplies power to the required communication devices 13 according to the operations performed on the vehicle 11. Therefore, the number and type of communication devices 13 supplied with power in the communication network system 12 vary depending on the operations performed on the vehicle 11.

[0026] like Figure 2 As shown, the third ECU 13C includes a storage device 18 and a processing circuit 19. The storage device 18 stores programs. The processing circuit 19 performs various processes by executing the programs stored in the storage device 18. The processing circuit 19 includes a processor.

[0027] like Figure 2 As shown, in the communication network system 12, the third ECU 13C is a fault diagnosis device 17. For example... Figure 2 As shown, storage device 18 stores diagnostic program PD. Diagnostic program PD enables fault diagnosis device 17 to diagnose faults in communication network system 12.

[0028] The fault diagnosis device 17 determines the occurrence of a predetermined fault in the communication network system 12. Specifically, the fault diagnosis device 17 diagnoses a break in the communication line 14 as a predetermined fault. When the third ECU 13C attempts to communicate with the second ECU 13B but cannot receive messages from the second ECU 13B, it determines that a break has occurred in the communication line 14 connecting the second ECU 13B and the third ECU 13C. Furthermore, when the third ECU 13C attempts to communicate with the fourth ECU 13D but cannot receive messages from the fourth ECU 13D, it determines that a break has occurred in the communication line 14 connecting the third ECU 13C and the fourth ECU 13D.

[0029] As described above, the number and type of communication devices 13 supplied with power in the communication network system 12 vary depending on the operations performed on the vehicle 11. Figure 2 The diagram illustrates an example where power is supplied to ECUs 13A through ECU 13C (not enclosed by a dashed line), and power is not supplied to ECUs 43D and ECU 513E (which are enclosed by dashed lines). Figure 2 In the example shown, ECU 413D is unable to send messages to ECU 313C.

[0030] exist Figure 2 In the example shown, even if the third ECU 13C wants to communicate with the fourth ECU 13D, the fourth ECU 13D cannot send messages because it is not powered. In this case, the third ECU 13C may mistakenly determine that a break has occurred on the communication line 14 with the fourth ECU 13D, when in fact no break has occurred.

[0031] <Communications performed in the false positive detection system 20>

[0032] Figure 3 This illustrates the communication method executed in the false fault detection system 20 when the fault diagnosis device 17 determines that a predetermined fault has occurred. Here, the predetermined fault is a break in the communication line 14. Figure 3 In the accompanying description, the processing performed by the processing circuit 31 is described as the processing performed by the management server 30. Figure 3 In the description, the processing performed by the processing circuit 41 is described as the processing performed by the simulator 40.

[0033] like Figure 3 As shown, after the fault diagnosis device 17 determines that a predetermined fault has occurred, the vehicle 11 sends diagnostic information and history information DH to the management server 30. The diagnostic information indicates the type of fault determined by the fault diagnosis device 17. The history information DH indicates the operational history of the vehicle 11 at the time when the fault diagnosis device 17 determined that the predetermined fault had occurred.

[0034] like Figure 3 As shown, the management server 30, upon receiving diagnostic information and history information DH, searches for combined information from the storage device 32. Although described later, in the event that the fault determination based on the fault diagnosis device 17 is a misjudgment, the management server 30 stores the combined information at the time of the misjudgment in the storage device 32. The combined information is information about the combination of diagnostic information and history information DH. When the management server 30 receives diagnostic information and history information DH, it searches the combined information stored in the storage device 32 for combined information that matches the combination of the received diagnostic information and history information DH.

[0035] like Figure 3 As shown, based on the results of the search for combined information by the management server 30, whether there is combined information that matches the combination of the received diagnostic information and history information DH, the communication method performed in the misjudgment detection system 20 is different.

[0036] like Figure 3 As shown, if the management server 30 searches for combined information and finds no combined information matching the received combination, the management server 30 sends a "no matching" notification to the vehicle 11 that sent the diagnostic information and history information DH. The "no matching" notification indicates that the combined information matching the combination of diagnostic information and history information DH sent from vehicle 11 is not stored in the storage device 32.

[0037] like Figure 3 As shown, if the management server 30 does not find any combination information that matches the received combination when searching for combination information, the management server 30 sends the received history information DH to the simulator 40.

[0038] The simulator 40, having received the history information DH, uses the received history information DH and the simulation model MS to reproduce the diagnosis based on the diagnostic procedure PD. Then, the simulator 40 determines whether the determination based on the fault diagnosis device 17 is a misjudgment based on the diagnostic results of the diagnostic procedure PD obtained as a result of the simulation and the status of the communication network system 12.

[0039] For example, if the fault diagnosis device 17 determines that a break has occurred on the communication line 14, the simulator 40 uses the received history information DH and the simulation model MS to simulate the power supply status when the communication interruption occurs. Then, if the diagnostic result of the diagnostic program PD obtained as a result of the simulation is a determination that a break has occurred on the communication line 14, and if at least one of the communication devices 13 that were conducting the interrupted communication is not powered, the simulator 40 determines that the determination based on the fault diagnosis device 17 is a misjudgment.

[0040] exist Figure 3 In the simulation, simulator 40 determines that the judgment based on fault diagnosis device 17 is a misjudgment after performing the simulation. For example... Figure 3 As shown, if the simulator 40 determines that the determination based on the fault diagnosis device 17 is a misjudgment, it sends a misjudgment notification to the management server 30 indicating that the determination based on the fault diagnosis device 17 is a misjudgment. Conversely, if the simulator 40 determines that the determination based on the fault diagnosis device 17 is not a misjudgment, it terminates without sending a misjudgment notification. Figure 3 communications shown.

[0041] like Figure 3 As shown, when the management server 30 receives a misjudgment notification from the simulator 40, it stores the combination of the diagnostic information and history information DH received from the vehicle 11 as combined information.

[0042] The history information DH included in the combined information stored in the management server 30 becomes useful data when improving the diagnostic procedure PD to suppress false judgments. For example, the designer of the diagnostic procedure PD can perform a modification to the diagnostic procedure PD to prevent false judgments based on the history information DH stored in the management server 30. If the modified diagnostic procedure PD is distributed to update the diagnostic procedure PD stored in the storage device 32 of the vehicle 11, the occurrence of false judgments in the vehicle 11 can be suppressed.

[0043] Furthermore, it is also possible to consider sending the diagnostic information and history information DH received from vehicle 11 to dealers, etc., when the management server 30 receives a misjudgment notification from the simulator 40. This would allow dealers to identify misjudgments that occurred even after performing pre-defined operations.

[0044] like Figure 3 As shown, if the management server 30 finds a combination of information that matches the received combination when searching for the combination information, the management server 30 determines that the determination based on the fault diagnosis device 17 is a misjudgment. Thus, if the fault diagnosis device 17 determines that the history information DH at the time of the predetermined fault occurrence matches the history information DH stored in the storage device 32, the management server 30 will not perform a simulation and will instead determine that the determination is a misjudgment.

[0045] Then, the management server 30 sends a misjudgment notification to the vehicle 11 that sent the diagnostic information and history information DH, indicating that the judgment based on the fault diagnosis device 17 is a misjudgment. As a result, the misjudgment detection system 20 can suppress the display of information based on the incorrect diagnostic result of the vehicle 11 or the execution of processing for faults based on the incorrect diagnostic result.

[0046] <The function of this implementation method>

[0047] The diagnostic results of the diagnostic procedure PD in the simulation results indicate that a predetermined fault has occurred. However, if no predetermined fault occurs in the communication network system 12 in the simulation results, the judgment based on the diagnostic procedure PD is likely to be a misjudgment.

[0048] The aforementioned misjudgment detection system 20 can verify the consistency of diagnostic results by using simulation of the simulation model MS.

[0049] <Effects of this implementation method>

[0050] (1) The erroneous determination detection system 20 can detect erroneous determinations in the diagnostic procedure PD. If it is known that erroneous determinations will occur when performing a predetermined operation, it can prevent unnecessary component replacements or time-consuming repairs.

[0051] (2) The false alarm detection system 20 stores the same diagnostic program PD as the fault diagnosis device 17, which diagnoses the disconnection of communication line 14 as a predetermined fault, in the storage device 42. The processing circuit 41 uses the operating history of the vehicle 11 and the simulation model MS when a communication interruption occurs in the communication network system 12 to simulate the power supply status of the multiple communication devices 13 constituting the communication network system 12 when a communication interruption occurs. If the diagnostic result of the diagnostic program PD obtained as a result of the simulation is a determination that the communication line 14 is disconnected, and if at least one of the communication devices 13 that is conducting the interrupted communication is not powered, the processing circuit 41 determines that the determination based on the fault diagnosis device 17 is a false alarm.

[0052] In the communication network system 12, the number and type of communication devices 13 supplied with power change depending on the operating status of the vehicle 11. Therefore, even if there is no fault on the communication line 14, communication between the communication devices 13 may be interrupted if any of the communication devices 13 performing communication is not supplied with power.

[0053] The false positive detection system 20 uses the operation history when communication interruption occurs between the communication devices 13 to reproduce the power supply status of the communication devices 13 that performed the interrupted communication. Furthermore, it uses the operation history when communication interruption occurs between the communication devices 13 to reproduce the diagnosis based on the diagnostic procedure PD.

[0054] The aforementioned false detection system 20, referring to the reproduced results, determines that the determination of a broken communication line 14 based on the diagnostic program PD is a false determination when no power is supplied to the communication device 13.

[0055] Thus, the aforementioned false detection system 20 can detect false detections of a broken communication line 14 when a communication interruption occurs.

[0056] (3) When the determination based on the fault diagnosis device 17 is a false determination, the processing circuit 31 performs the process of storing the history information DH of the vehicle 11 at the time when the fault diagnosis device 17 determined that the predetermined fault occurred in the storage device 32.

[0057] Information about the vehicle 11's operation history at the time of a misjudgment based on the fault diagnosis device 17 becomes useful data when improving the diagnostic procedure PD to suppress such misjudgments. Furthermore, if the information about the vehicle 11's operation history at the time of a misjudgment based on the fault diagnosis device 17 is the history information DH at the time of the misjudgment, then the judgment made by the fault diagnosis device 17 when performing the same operation can also be treated as a misjudgment. When the misjudgment detection system 20 determines that a misjudgment has occurred, it stores information about the simulated user's operation history. Therefore, the misjudgment detection system 20 can collect useful data regarding misjudgments based on the fault diagnosis device 17.

[0058] (4) The false judgment detection system 20 can communicate with multiple vehicles 11 equipped with a communication network system 12. In the communication network system 12 of any of the multiple vehicles 11, when the fault diagnosis device 17 determines that a predetermined fault has occurred, the processing circuit 31 confirms the history information DH stored in the storage device 32. If the operation history of the vehicle 11 at the time when the fault diagnosis device 17 determines that the predetermined fault has occurred is consistent with the history information DH stored in the storage device 32, the simulation is not performed and the judgment based on the fault diagnosis device 17 is determined to be a false judgment.

[0059] If the operational history of vehicle 11 matches the history information DH from the simulation that was determined to be a misjudgment, the misjudgment detection system 20 will not perform the simulation. Therefore, the misjudgment detection system 20 can reduce the number of simulations performed.

[0060] (5) When the processing circuit 31 determines that the determination based on the fault diagnosis device 17 is a false determination without performing a simulation, it notifies the vehicle 11 that the determination based on the fault diagnosis device 17 is a false determination.

[0061] Therefore, the misjudgment detection system 20 is able to suppress the processing of erroneous diagnostic results in the vehicle 11.

[0062] <Example of Change>

[0063] This embodiment can be modified as follows. This embodiment and the following modifications can be combined with each other within the scope of technical inconsistency.

[0064] • An example is shown in which the fault diagnosis device 17 determines the broken line of the communication line 14 as a predetermined fault, but the predetermined fault is not limited to the broken line of the communication line 14.

[0065] The fault diagnosis device 17 can diagnose multiple types of faults, not just one. A single fault diagnosis device can diagnose various faults. The false positive detection system 20 can simulate multiple faults separately and determine whether the diagnosis result for each fault is a false positive.

[0066] • The false judgment detection system 20 may not store the combined information in the storage device 32 after determining that the judgment based on the fault diagnosis device 17 is a false judgment.

[0067] • The false positive detection system 20 can perform simulations each time it receives diagnostic information and history information DH from vehicle 11 without searching for combined information.

[0068] • The false determination detection system 20 may not send a false determination notification to the vehicle 11 if it determines that the determination based on the fault diagnosis device 17 is a false determination without performing a simulation.

[0069] ·like Figure 1 As shown, the misjudgment detection system 20 consists of a management server 30 and a simulator 40. The misjudgment detection system 20 can also be composed of a single device.

[0070] The structure of the communication network system 12 of vehicle 11 is not limited to... Figure 2 As shown. For example, the number of communication devices 13 in the communication network system 12 can be greater than... Figure 2 The number of cases can vary, from many to few. Furthermore, in... Figure 2 In the communication network system 12 shown, the communication devices 13 are connected in series via communication lines 14, but the communication devices 13 can also be connected in parallel via communication lines 14.

[0071] In the above embodiment, the management server 30 stores combined information of diagnostic information and history information DH. For example, if the types of diagnostic information that can be sent from vehicle 11 are limited, the management server 30 may store only the history information DH and not the combined information. In this case, the management server 30 receives the history information DH from vehicle 11 and searches for a history information DH that matches the received history information DH from the information stored in the storage device 32.

[0072] Symbol Explanation

[0073] 11-Vehicle, 12-Communication network system, 13-Communication device, 13A-1st ECU, 13B-2nd ECU, 13C-3rd ECU, 13D-4th ECU, 13E-5th ECU, 14-Communication line, 15-Power line, 16-Battery, 17-Fault diagnosis device, 18-Storage device, 19-Processing circuit, 20-False judgment detection system, 30-Management server, 31-Processing circuit, 32-Storage device, 40-Simulator, 41-Processing circuit, 42-Storage device, DH-History information, MS-Simulation model, PD-Diagnostic program.

Claims

1. A false fault detection system, which detects false faults based on a fault diagnosis device, wherein the fault diagnosis device determines the occurrence of a predetermined fault in a communication network system installed in a vehicle, the false fault detection system being characterized by comprising: Processing circuitry; and storage devices, The storage device stores a simulation model of the communication network system and the same diagnostic procedure as the fault diagnosis device. The processing circuit performs the following processing: The fault diagnosis device is used to determine the vehicle's operating history and the simulation model at the time the predetermined fault occurred, and a simulation based on the diagnosis procedure is performed to reproduce the result; and Based on the diagnostic results of the diagnostic procedure obtained as a result of the simulation and the status of the communication network system, it is determined whether the determination based on the fault diagnosis device is a misjudgment.

2. The false judgment detection system according to claim 1, characterized in that, The storage device stores the same diagnostic program as the fault diagnosis device that diagnoses a broken communication line as the predetermined fault. The processing circuit performs the following processing: Using the vehicle's operational history and the simulation model during a communication interruption in the communication network system, a simulation is performed to reproduce the power supply status of the multiple communication devices constituting the communication network system during a communication interruption; and If the diagnostic result of the diagnostic procedure obtained as a result of the simulation is a determination that a communication line break has occurred, and if at least one of the communication devices that is conducting interrupted communication is not powered, the determination based on the fault diagnosis device is determined to be a false determination.

3. The false judgment detection system according to claim 1 or 2, characterized in that, When the processing circuit determines that the determination based on the fault diagnosis device is a misjudgment, the following processing is performed: the operation history information of the vehicle at the time when the fault diagnosis device determined that the predetermined fault occurred is stored in the storage device.

4. The false judgment detection system according to claim 3, characterized in that, It is capable of communicating with multiple vehicles equipped with the aforementioned communication network system. When the fault diagnosis device determines that the predetermined fault has occurred in the communication network system of any of the plurality of vehicles, The processing circuit performs the following processing: confirming the history information stored in the storage device, if the vehicle's operation history at the time the fault diagnosis device determines that the predetermined fault occurred is consistent with the history information stored in the storage device, without performing the simulation, it performs a judgment that the judgment of the fault diagnosis device is a misjudgment.

5. The false judgment detection system according to claim 4, characterized in that, If the processing circuit determines that the fault diagnosis device's determination is incorrect without performing the simulation, it notifies the vehicle that the fault diagnosis device's determination is incorrect.

Images