Communication system

Abstract

To improve the accuracy of abnormality detection in a communication system.SOLUTION: An ECU 3 receives power supply from a battery 7 via an electronic fuse 15. An ECU 5 is connected so as to be able to transmit and receive frames to and from the ECU 3. An ECU 2 controls the operation of the electronic fuse 15. The ECUs 3 and 5 store a diagnostic mask table 45. In the diagnostic mask table 45, one or more combinations are set, each of which is a combination of a communication group, an ECU to which power supply via electronic fuses 15 and 16 is cut off, an ECU that shifts into a sleep state, and a CANID of a CAN frame that is not received. The ECU 2 determines an activation group based on acquired activation trigger information. The ECU 2 transmits a frame indicating the determined activation group to the ECUs 3 and 5.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a communication system including a plurality of electronic control devices. [Background technology]

[0002] Patent document 1 describes an in-vehicle network system that includes a power supply relay that individually switches the power supply of each of a plurality of electronic control devices on / off, determines the control content for switching the power supply of a specific electronic control device on / off for a specific electronic control device that corresponds to a scene identified based on the vehicle situation, and uses the power supply relay to switch the power supplied to the specific electronic control device on / off based on the determined control content. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2015-81021 A Summary of the Invention [Problem to be solved by the invention]

[0004] As a result of detailed investigation by the inventors, a problem was found in a communication system that has multiple electronic control devices and is configured to switch the power supply of the multiple electronic control devices on and off, in which a communication interruption is erroneously detected, resulting in reduced accuracy in detecting the abnormality.

[0005] The present disclosure aims to improve the accuracy of anomaly detection in a communication system. [Means for solving the problem]

[0006] One aspect of the present disclosure is a communication system (1) including a plurality of electronic control devices (2 to 6) connected to each other so as to be capable of transmitting and receiving communication frames. Each of the electronic control devices belongs to at least one of the communication groups. The communication system is configured to be able to switch one or more electronic control devices belonging to each communication group between a wake-up state and a sleep state collectively, for each communication group.

[0007] The plurality of electronic control devices include a first control device (3), a second control device (5), and a third control device (2). The first control device receives power supply from a power source (7) via a power supply switching unit (15) configured to switch between a conductive state in which the power supply path is conductive and a cut-off state in which the power supply path is cut off.

[0008] The second control device is connected to the first control device so as to be capable of transmitting and receiving communication frames therebetween. The third control device is connected to the first control device and the second control device so as to be able to transmit and receive communication frames therebetween, and is configured to control the operation of the power supply switching unit.

[0009] The first control device and the second control device store a diagnostic mask table (45). The diagnostic mask table has one or more start / stop combinations set as combinations of a communication group, a cutoff device which is an electronic control device to which power supply via a power supply switching unit is cut off, a sleep device which is an electronic control device that goes into a sleep state, and non-received frame identification information which is identification information of a communication frame that is not received. In other words, a non-received frame is a communication frame that is not transmitted from an electronic control device (i.e., a cutoff device or a sleep device) due to the cutoff of the power supply or the transition to a sleep state.

[0010] The third control device includes a group determination unit (S20) and an activation group transmission unit (S30). The group determination unit is configured to, when acquiring activation trigger information for determining an activation group that is a communication group to be put into a wake-up state, determine the activation group based on the acquired activation trigger information. The group determination unit may determine a service to be started based on the activation trigger information, and determine an activation group corresponding to the service.

[0011] The activation group transmitter is configured to transmit, to the first control device and the second control device, a management frame which is a communication frame indicating the activation group determined by the group determiner. In the communication system of the present disclosure thus configured, the second control device can recognize the combination of the above-mentioned cutoff device and the non-received frame identification information, and the combination of the above-mentioned sleep device and the non-received frame identification information, by referring to the diagnostic mask table based on the activation group indicated by the management frame received from the third control device. Therefore, even if the power supply via the power supply switching unit is cut off in the first control device and the communication frame cannot be received from the first control device, the second control device can suppress the occurrence of a situation in which the first control device determines that an abnormality in communication interruption has occurred. Furthermore, even if the second control device cannot receive a communication frame from the first control device that has entered a sleep state, the second control device can suppress the occurrence of a situation in which the first control device determines that an abnormality in communication interruption has occurred. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0012] Another aspect of the present disclosure is a communication system (1) including a plurality of electronic control devices (2 to 6) connected to each other so as to be capable of transmitting and receiving communication frames. Each of the electronic control devices belongs to at least one of the communication groups. The communication system is configured to be able to switch one or more electronic control devices belonging to each communication group between a wake-up state and a sleep state collectively, for each communication group.

[0013] The plurality of electronic control devices include a first control device (3), a second control device (5), and a third control device (2). The third control device stores a diagnostic mask table (27).

[0014] The diagnostic mask table has one or more start-stop combinations set, which are combinations of a communication group, a cut-off device which is an electronic control device to which power supply via a power supply switching unit is cut off, a sleep device which is an electronic control device that goes into a sleep state, and non-received frame identification information which is identification information for communication frames that are not received.

[0015] The third control device includes a group determination unit (S220) and a sleep mask information transmission unit (S230). The group determination unit is configured to, when acquiring activation trigger information for determining an activation group that is a communication group to be put into a wake-up state, determine the activation group based on the acquired activation trigger information.

[0016] The sleep mask information transmission unit is configured to transmit, as diagnostic mask information, to the first control device and the second control device, a activation / shutdown combination corresponding to the activation group determined by the group determination unit.

[0017] In the communication system of the present disclosure configured as described above, the second control device can recognize the combination of the above-mentioned cutoff device and the non-received frame identification information, and the combination of the above-mentioned sleep device and the non-received frame identification information, based on the diagnostic mask information received from the third control device. Therefore, even if the power supply via the power supply switching unit is cut off in the first control device and the communication frame cannot be received from the first control device, the second control device can suppress the occurrence of a situation in which the first control device determines that an abnormality in communication interruption has occurred. Furthermore, even if the second control device cannot receive a communication frame from the first control device that has entered a sleep state, the second control device can suppress the occurrence of a situation in which the first control device determines that an abnormality in communication interruption has occurred. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0018] Yet another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames. Each of the electronic control devices belongs to at least one of the communication groups. The communication system is configured to be able to switch one or more electronic control devices belonging to each communication group between a wake-up state and a sleep state collectively, for each communication group.

[0019] The plurality of electronic controllers includes a first slave controller (108), a second slave controller (109), a zone controller (104), and a central controller (101). The first slave control device receives power from a power source (117) via a power supply switching unit (195) configured to switch between a conductive state that connects the power supply path and a cut-off state that cuts off the power supply path.

[0020] The second slave control device is connected to the first slave control device so as to be capable of transmitting and receiving communication frames therebetween. The zone control device is connected to the first slave control device and the second slave control device so as to be able to transmit and receive communication frames therebetween, and is configured to control the operation of the power supply switching unit.

[0021] The central control device is connected to the zone control devices so as to be able to transmit and receive communication frames therebetween. The zone control device, the first slave control device and the second slave control device store a diagnostic mask table (207, 287). In the diagnostic mask table, one or more start / stop combinations are set, which are combinations of a communication group, a cutoff device which is an electronic control device to which power supply via a power supply switching unit is cut off, a sleep device which is an electronic control device that goes into a sleep state, and non-received frame identification information which is identification information of a communication frame that is not received.

[0022] The central control device includes a group determination unit (S320) and an activation group transmission unit (S330). The group determination unit is configured to, when acquiring activation trigger information for determining an activation group that is a communication group to be put into a wake-up state, determine the activation group based on the acquired activation trigger information.

[0023] The activation group transmission unit is configured to transmit, to the zone control device, a management frame, which is a communication frame indicating the activation group determined by the group determination unit. The zone control device includes a frame forwarding unit (S420).

[0024] The frame forwarding unit is configured to forward the management frame received from the central control device to the first slave control device and the second slave control device. In the communication system of the present disclosure thus configured, the second slave control device can recognize the combination of the above-mentioned cutoff device and the non-received frame identification information, and the combination of the above-mentioned sleep device and the non-received frame identification information, by referring to the diagnostic mask table based on the activation group indicated by the management frame received from the zone control device. Therefore, even if the power supply via the power supply switching unit is cut off in the first slave control device and the communication frame cannot be received from the first slave control device, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. Furthermore, even if the second slave control device cannot receive a communication frame from the first slave control device that has entered a sleep state, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0025] Yet another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames. The plurality of electronic controllers includes a first slave controller (108), a second slave controller (109), a zone controller (104), and a central controller (101).

[0026] The central controller stores a diagnostic mask table (167). The diagnostic mask table has one or more start-stop combinations set, which are combinations of a communication group, a cut-off device which is an electronic control device to which power supply via a power supply switching unit is cut off, a sleep device which is an electronic control device that goes into a sleep state, and non-received frame identification information which is identification information for communication frames that are not received.

[0027] The central control device includes a group determination unit (S620) and a sleep mask information transmission unit (S630). The group determination unit is configured to, when acquiring activation trigger information for determining an activation group that is a communication group to be put into a wake-up state, determine the activation group based on the acquired activation trigger information.

[0028] The sleep mask information transmission unit is configured to transmit, to the zone control device, as diag mask information, a start / stop combination corresponding to the start group determined by the group determination unit.

[0029] The zone control device includes a mask information transfer unit (S720). The mask information transfer unit is configured to transfer the diagnostic mask information received from the central control device to the first slave control device and the second slave control device.

[0030] In the communication system of the present disclosure configured as described above, the second slave control device can recognize the combination of the above-mentioned cutoff device and the non-received frame identification information, and the combination of the above-mentioned sleep device and the non-received frame identification information, based on the diagnostic mask information received from the zone control device. Therefore, even if the power supply via the power supply switching unit is cut off in the first slave control device and the communication frame cannot be received from the first slave control device, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. Furthermore, even if the second slave control device cannot receive a communication frame from the first slave control device that has entered a sleep state, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0031] Yet another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames. The plurality of electronic controllers includes a first slave controller (108), a second slave controller (109), a zone controller (104), and a central controller (101).

[0032] The zone control device, the first slave control device and the second slave control device store diagnostic mask tables (207, 287). In the diagnostic mask table, for the first slave control device and the second slave control device subordinate to the zone control device, one or more start / stop combinations are set, which are combinations of a communication group, a cutoff device which is an electronic control device to which power supply via a power supply switching unit is cut off, a sleep device which is an electronic control device that goes into a sleep state, and non-received frame identification information which is identification information of a communication frame that is not received.

[0033] The central control device includes a group determination unit (S320) and an activation group transmission unit (S330). The group determination unit is configured to, when acquiring activation trigger information for determining an activation group that is a communication group to be put into a wake-up state, determine the activation group based on the acquired activation trigger information.

[0034] The activation group transmission unit is configured to transmit, to the zone control device, a management frame, which is a communication frame indicating the activation group determined by the group determination unit. The zone control device includes a frame forwarding unit (S420).

[0035] The frame forwarding unit is configured to forward the management frame received from the central control device to the first slave control device and the second slave control device. In the communication system of the present disclosure thus configured, the second slave control device can recognize the combination of the above-mentioned cutoff device and the non-received frame identification information, and the combination of the above-mentioned sleep device and the non-received frame identification information, by referring to the diagnostic mask table based on the activation group indicated by the management frame received from the zone control device. Therefore, even if the power supply via the power supply switching unit is cut off in the first slave control device and the communication frame cannot be received from the first slave control device, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. Furthermore, even if the second slave control device cannot receive a communication frame from the first slave control device that has entered a sleep state, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. As a result, the communication system of the present disclosure can improve the accuracy of abnormality detection.

[0036] Yet another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames. The plurality of electronic controllers includes a first slave controller (108), a second slave controller (109), a zone controller (104), and a central controller (101).

[0037] Yet another aspect of the present disclosure is a communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames. The plurality of electronic controllers includes a first slave controller (108), a second slave controller (109), a zone controller (104), and a central controller (101).

[0038] The zone control device stores a diagnostic mask table (207). In the diagnostic mask table, one or more start / stop combinations are set for a first slave control device and a second slave control device subordinate to the zone control device, the start / stop combinations being combinations of a communication group, a cutoff device which is an electronic control device to which power supply via a power supply switching unit is cut off, a sleep device which is an electronic control device that goes into a sleep state, and non-received frame identification information which is identification information of a communication frame that is not received.

[0039] The central control device includes a group determination unit (S620) and an activation group transmission unit (S632). The group determination unit is configured to, when acquiring activation trigger information for determining an activation group that is a communication group to be put into a wake-up state, determine the activation group based on the acquired activation trigger information.

[0040] The activation group transmission unit is configured to transmit, to the zone control device, a management frame, which is a communication frame indicating the activation group determined by the group determination unit. The zone control device includes a sleep mask information transmitting unit (S920).

[0041] The sleep mask information transmitting unit is configured to transmit, as diag mask information, to the first slave control device and the second slave control device, an activation / deactivation combination corresponding to an activation group indicated by a management frame received from the central control device.

[0042] In the communication system of the present disclosure thus configured, the second slave control device can recognize the combination of the above-mentioned cutoff device and the non-received frame identification information, and the combination of the above-mentioned sleep device and the non-received frame identification information, based on the diagnostic mask information received from the zone control device. Therefore, even if the power supply via the power supply switching unit is cut off in the first slave control device and the communication frame cannot be received from the first slave control device, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. Furthermore, even if the second slave control device cannot receive a communication frame from the first slave control device that has entered a sleep state, the second slave control device can suppress the occurrence of a situation in which the first slave control device determines that an abnormality in communication interruption has occurred. [Brief description of the drawings]

[0043] [Figure 1] 1 is a block diagram showing a configuration of a communication system according to a first embodiment. [Diagram 2] 11 is an explanatory diagram illustrating an example of affiliation information and startup information; [Diagram 3] 5 is a flowchart showing a boot management process according to the first embodiment. [Figure 4] 13 is a flowchart showing a diagnostic mask process. [Diagram 5] FIG. 11 is a block diagram showing a configuration of a communication system according to a second embodiment. [Figure 6] 13 is a flowchart showing a boot management process according to a second embodiment. [Figure 7] 11A and 11B are diagrams showing the configurations of a startup table and a diagnostic mask table. [Figure 8] FIG. 13 is a block diagram showing a configuration of a communication system according to a third embodiment. [Figure 9] FIG. 2 is a diagram showing a correspondence relationship between control objects and clusters. [Figure 10] FIG. 13 is a block diagram showing a configuration of a communication system according to a fourth embodiment. [Figure 11]FIG. 13 is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to a fourth embodiment. [Figure 12] FIG. 13 is a first block diagram showing a configuration of a zone ECU according to a fourth embodiment. [Figure 13] FIG. 13 is a second block diagram showing the configuration of a zone ECU according to the fourth embodiment. [Figure 14] FIG. 13 is a block diagram showing a configuration of a slave ECU according to a fourth embodiment. [Figure 15] FIG. 13 is a diagram showing the configuration of a startup table according to the fourth embodiment. [Figure 16] FIG. 13 is a diagram showing a configuration of a diagnostic mask table according to the fourth embodiment. [Figure 17] 13 is a flowchart showing a central management process according to a fourth embodiment. [Figure 18] 13 is a flowchart showing a zone management process according to the fourth embodiment. [Figure 19] 13 is a flowchart showing a slave management process according to the fourth embodiment. [Figure 20] FIG. 13 is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to a fifth embodiment. [Figure 21] FIG. 13 is a first block diagram showing a configuration of a zone ECU according to a fifth embodiment. [Figure 22] FIG. 13 is a second block diagram showing the configuration of a zone ECU according to the fifth embodiment. [Figure 23] FIG. 13 is a block diagram showing a configuration of a slave ECU according to a fifth embodiment. [Figure 24] 13 is a flowchart showing a central management process according to the fifth embodiment. [Diagram 25] 13 is a flowchart showing a zone management process according to the fifth embodiment. [Figure 26] 13 is a flowchart showing a slave management process according to the fifth embodiment. [Figure 27] FIG. 23 is a diagram showing the configuration of a startup table according to the sixth embodiment. [Figure 28] FIG. 13 is a first block diagram showing a configuration of a zone ECU according to a sixth embodiment. [Figure 29] FIG. 23 is a second block diagram showing the configuration of a zone ECU according to the sixth embodiment. [Diagram 30] FIG. 23 is a diagram showing a configuration of a diagnostic mask table in the sixth embodiment. [Diagram 31] 23 is a flowchart showing a central management process according to the sixth embodiment. [Diagram 32] 23 is a flowchart showing a zone management process according to the sixth embodiment. [Diagram 33] FIG. 23 is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to a seventh embodiment. [Diagram 34] FIG. 23 is a first block diagram showing a configuration of a zone ECU according to a seventh embodiment. [Diagram 35] FIG. 23 is a second block diagram showing the configuration of the zone ECU according to the seventh embodiment. [Diagram 36] 23 is a flowchart showing a central management process according to the seventh embodiment. [Figure 37] 23 is a flowchart showing a zone management process according to the seventh embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0044] [First embodiment] A first embodiment of the present disclosure will be described below with reference to the drawings. A communication system 1 according to the present embodiment is mounted on a vehicle, and includes a master ECU 2, slave ECUs 3, 4, 5, and 6, and a battery 7, as shown in Fig. 1. ECU is an abbreviation for Electronic Control Unit. In the following description, the master ECU 2 and the slave ECUs 3, 4, 5, and 6 are also collectively referred to as nodes.

[0045] The master ECU 2 and the slave ECUs 3, 4, and 5 are connected to each other via a communication bus 8 so as to be able to communicate data with each other. The master ECU 2 and the slave ECU 6 are connected to each other via a communication bus 9 so as to be able to communicate data with each other.

[0046] The battery 7 supplies power to each part of the vehicle at a DC battery voltage (for example, 12 V). The master ECU 2 and the slave ECUs 3 to 6 operate by receiving power from the battery 7.

[0047] The master ECU 2 includes a control unit 11, CAN communication units 12 and 13, a storage unit 14, and electronic fuses 15 and 16. CAN is an abbreviation for Controller Area Network. The control unit 11 is an electronic control device mainly composed of a microcomputer including a CPU 21, a ROM 22, a RAM 23, etc. Various functions of the microcomputer are realized by the CPU 21 executing a program stored in a non-transient real recording medium. In this example, the ROM 22 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 21 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 11 may be one or more.

[0048] The CAN communication unit 12 communicates with the slave ECUs 3, 4, and 5 connected to the communication bus 8 by transmitting and receiving communication frames based on the CAN communication protocol. The CAN communication unit 13 communicates with the slave ECU 6 connected to the communication bus 9 by transmitting and receiving communication frames based on the CAN communication protocol. Hereinafter, a CAN communication frame is referred to as a CAN frame.

[0049] The storage unit 14 is a storage device for storing various data. The storage unit 14 stores a startup table 25, which will be described later. The electronic fuse 15 is disposed on the power supply path between the battery 7 and the slave ECU 3. The electronic fuse 16 is disposed on the power supply path between the battery 7 and the slave ECU 4.

[0050] The electronic fuses 15 and 16 each include a switching element (e.g., a MOSFET) and a control circuit. The control circuit of the electronic fuses 15 and 16 is configured to switch the switching element from an on state to an off state to cut off the power supply path when the current value flowing through the power supply path exceeds a preset overcurrent determination value.

[0051] The control circuits of the electronic fuses 15 and 16 are configured to turn on or off the switching elements in accordance with commands from the control unit 11, thereby making or breaking the power supply path.

[0052] Each of the slave ECUs 3 to 6 includes a control unit 31, a CAN communication unit 32, and a storage unit 33. The control unit 31 is an electronic control device mainly composed of a microcomputer including a CPU 41, a ROM 42, a RAM 43, etc. Various functions of the microcomputer are realized by the CPU 41 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 42 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 41 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 31 may be one or more.

[0053] The CAN communication units 32 of the slave ECUs 3 to 5 communicate with the communication devices (that is, the master ECU 2 and the slave ECUs 3 to 5) connected to the communication bus 8 based on the CAN communication protocol.

[0054] The CAN communication unit 32 of the slave ECU 6 communicates with a communication device (that is, the master ECU 2) connected to the communication bus 9 based on the CAN communication protocol. The storage unit 33 is a storage device for storing various data. The storage unit 33 stores a diagnostic mask table 45, which will be described later.

[0055] A CAN frame consists of a start of frame, an arbitration field, a control field, a data field, a CRC field, an ACK field, and an end of frame. The arbitration field consists of an 11-bit or 29-bit identifier (i.e., ID) and a 1-bit RTR bit.

[0056] The 11-bit identifier used in CAN communication is called CANID. The CANID is preset based on the contents of the data included in the CAN frame, the sender of the CAN frame, the destination of the CAN frame, etc.

[0057] The data field is a payload made up of first data, second data, third data, fourth data, fifth data, sixth data, seventh data, and eighth data, each of which is 8 bits (i.e., 1 byte).

[0058] The communication system 1 forms a partial network, which is a power supply control method based on the communication control of the CAN protocol standard specified in ISO11898-6. For this reason, the communication system 1 achieves low power consumption by collectively transitioning one or more nodes belonging to each communication group (described later) to a wake-up state (i.e., an active state) or a sleep state (i.e., a dormant state) individually for each communication group. By waking up, a node enters a normal operating state in which the functions assigned to the node can be used without restrictions, and by sleeping, it enters a low-power operating state in which the available functions are restricted.

[0059] In the communication system 1, when waking up a node in a sleep state, an NM frame, which is a CAN frame including startup information that specifies an activation group, is used. NM is an abbreviation for Network Management.

[0060] The activation information is set, for example, as shown in Fig. 2. DLC is an abbreviation for Data Length Code, and is an area that indicates the size of the data field in the CAN frame in bytes. In other words, the activation information is stored in the data field of the CAN frame. For ease of explanation, a case where DLC is 1 byte (i.e., 8 bits) is shown here. Each bit of the 8-bit data that indicates the activation information is associated with an activation group.

[0061] In the activation information set in the NM frame, a bit corresponding to the activation group to be activated is set to 1. Each node (i.e., the master ECU 2 and slave ECUs 3-6) stores affiliation information indicating the activation group to which the node belongs. The affiliation information has the same data length as the activation information, and the allocation of each bit is also the same as that of the activation information. In the affiliation information, the bit corresponding to the activation group to which the node belongs is set to 1.

[0062] Each node compares the activation information extracted from the NM frame with the membership information stored in the node itself to determine whether the communication group to which the node itself belongs is an activation target.

[0063] For example, the affiliation information shown in Fig. 2 indicates that the node belongs to the first communication group, the third communication group, and the fifth communication group. The startup information shown in Fig. 2 indicates that the second communication group, the third communication group, the fourth communication group, and the fifth communication group are to be started. Since the third communication group and the fifth communication group are included in both the affiliation information and the startup information shown in Fig. 2, the local node determines that the local node is to be started as the third communication group and the fifth communication group.

[0064] The start trigger information includes a plurality of NM frames and a plurality of pieces of event occurrence information. The event occurrence information is information indicating that a preset event has occurred. For example, if the slave ECU 6 is a door control ECU, when a door switch is turned on, the slave ECU 6 transmits information indicating that the door has been opened (hereinafter, a door opening event) to the master ECU 2 as the event occurrence information.

[0065] In the activation table 25 shown in Fig. 1, a communication group to be activated (i.e., an activation group) is set for each event as shown in Fig. 7. In the activation table 25, for example, the first communication group is set as the activation group for a door opening event.

[0066] The activation table 25 further includes a correspondence between the activation groups and the electronic fuses to be turned on (hereinafter, called conductive fuses). For example, the activation table 25 is set so that when the activation group is the first communication group, the continuity fuse is electronic fuse 15. For example, the activation table 25 is set so that when the activation group is the second communication group, the continuity fuse is electronic fuse 15, 16. For example, the activation table 25 is set so that when the activation group is the third communication group, the continuity fuse is electronic fuse 16. For example, the activation table 25 is set so that when the activation group is the fourth communication group, there is no continuity fuse.

[0067] Next, a description will be given of a procedure of the startup management process executed by the control unit 11 of the master ECU 2. The startup management process is a process that is repeatedly executed while the master ECU 2 is in startup. When the start-up management process is executed, the CPU 21 of the control unit 11 determines whether or not start-up trigger information (that is, an NM frame or event occurrence information) has been input to the master ECU 2 in S10, as shown in FIG.

[0068] Here, if the activation trigger information has not been input, the CPU 21 ends the activation management process. On the other hand, if the activation trigger information has been input, the CPU 21 determines the activation group based on the input activation trigger information in S20. Specifically, if the activation trigger information is an NM frame, the CPU 21 determines that the communication group corresponding to the bit set to 1 in the input NM frame is the activation group. If the activation trigger information is event occurrence information, the CPU 21 determines the activation group based on the event indicated by the event occurrence information by referring to the activation table 25. For example, if the event occurrence information is the door opening event, the CPU 21 determines that the activation group is the first communication group.

[0069] In S30, the CPU 21 starts transmitting an NM frame indicating the activation group determined in S20. For example, when the CPU 21 determines that the activation group is the first and third communication groups, it transmits an NM frame in which the bits corresponding to the first and third communication groups are set to 1. After starting transmission of the NM frame in S30, the CPU 21 periodically transmits the same NM frame thereafter.

[0070] In S40, the CPU 21 refers to the activation table 25 to execute electronic fuse control to turn on the electronic fuses corresponding to the activation group determined in S20 and to turn off the electronic fuses other than the electronic fuses corresponding to the activation group, and terminates the activation management process.

[0071] If there are multiple activation groups, CPU 21 turns on the electronic fuses corresponding to the multiple activation groups using OR (i.e., logical sum), and turns off the electronic fuses other than the electronic fuses corresponding to the multiple activation groups using AND (i.e., logical product). Even if multiple events occur and an NM frame with the 1st, 3rd, and 5th communication groups as activation groups and an NM frame with the 1st, 4th, and 6th communication groups as activation groups are generated, CPU 21 refers to both NM frames and turns off the electronic fuses other than the electronic fuses corresponding to the multiple activation groups using AND (i.e., logical product).

[0072] Next, there will be described the procedure of the diagnostic mask process executed by the control unit 31 of each of the slave ECUs 3 to 6. The diagnostic mask process is a process that is repeatedly executed while each of the slave ECUs 3 to 6 is running.

[0073] When the diagnostic mask process is executed, the CPU 41 of the control unit 31 judges in S110 whether or not the own node has just been started, as shown in FIG. 4. If the own node has not just been started, the CPU 41 proceeds to S130. On the other hand, if the own node has just been started, the CPU 41 executes diagnostic masking on the master ECU 2 and the slave ECUs 3 to 6 for a preset certain period of time in S120, and proceeds to S130. The diagnostic masking is to not regard an abnormality as occurring even when it is determined that the communication has been interrupted because a CAN frame cannot be received from the target ECU. Note that the diagnostic mask may be set so that the communication interruption diagnostic is not stored even when it is determined that the communication has been interrupted.

[0074] In S130, the CPU 41 determines whether or not an NM frame has been received. If an NM frame has not been received, the CPU 41 ends the diagnostic mask process.

[0075] On the other hand, when an NM frame is received, the CPU 41 sets a diagnostic mask based on the received NM frame by referring to the diagnostic mask table 45 at S140, and ends the diagnostic mask process. As shown in FIG. 7, the diagnostic mask table 45 sets, for each activation group, an ECU to which power supply via an electronic fuse is cut off (hereinafter, a cutoff device) and an ECU to which a sleep state is entered (hereinafter, a sleep device), in association with a CAN ID of a CAN frame that is not received (hereinafter, a non-received frame ID). A non-received frame ID is a CAN frame that is no longer transmitted from the cutoff device and the sleep device, and is a CAN frame that cannot be received by the receiving side ECU. Therefore, in the diagnostic mask table 45, one or more combinations of a cutoff device and a non-received frame ID and a combination of a sleep device and a non-received frame ID are set for one activation group.

[0076] The diagnostic mask table 45 sets, for example, for the first communication group, a combination of the slave ECU 4 and a first CAN ID, and a combination of the slave ECU 5 and a second CAN ID. The diagnostic mask table 45 sets, for example, for the second communication group, a combination of the slave ECU 6 and a third CAN ID.

[0077] By setting the diagnostic mask, the CPU 41 can avoid regarding an abnormality even when it is determined that communication has been interrupted for the shutoff device and the sleep device. For example, when the CPU 41 sets the diagnostic mask for the first communication group, the CPU 41 does not regard an abnormality as occurring even when it is unable to receive a CAN frame of the first CANID from the slave ECU 4. Also, when the CPU 41 sets the diagnostic mask for the first communication group, the CPU 41 does not regard an abnormality as occurring even when it is unable to receive a CAN frame of the second CANID from the slave ECU 5. Note that when the activation information is changed from 0 to 1 in the NM frame, the CPU 41 cancels the setting of the diagnostic mask for the corresponding activation group.

[0078] Furthermore, when the master ECU 2 receives an updated diagnostic mask table 45 from the diagnostic tester connected to the master ECU 2, the master ECU 2 is configured to transmit the updated diagnostic mask table 45 to the slave ECUs 3 to 6. The master ECU 2 may obtain the updated diagnostic mask table 45 from a server by wireless communication. This allows the communication system 1 to execute an appropriate diagnostic mask corresponding to a change in the configuration of the communication system 1.

[0079] The communication system 1 thus configured includes a master ECU 2 and slave ECUs 3, 4, 5, and 6 that are connected to each other so as to be capable of transmitting and receiving CAN frames. The master ECU 2 and the slave ECUs 3, 4, 5, and 6 each belong to at least one of a plurality of communication groups. The communication system 1 is configured to be able to switch, for each communication group, one or more ECUs belonging to the communication group collectively between a wakeup state and a sleep state.

[0080] The slave ECU 3 receives power from the battery 7 via an electronic fuse 15 that is configured to switch between a conductive state that connects the power supply path and a cut-off state that cuts off the power supply path.

[0081] The slave ECU 5 is connected to the slave ECU 3 so as to be able to transmit and receive CAN frames to and from the slave ECU 3 . The master ECU 2 is connected to the slave ECUs 3 and 5 so as to be able to transmit and receive CAN frames to and from the slave ECUs 3 and 5, and is configured to control the operation of the electronic fuse 15.

[0082] The slave ECUs 3 and 5 store a diagnostic mask table 45 . The diagnostic mask table 45 has set, for each communication group, one or more combinations (hereinafter referred to as start-stop combinations) of an ECU to which power supply via electronic fuses 15, 16 is cut off (i.e., the above-mentioned cut-off device), an ECU to which power goes into sleep mode (i.e., the above-mentioned sleep device), and the CAN ID of a CAN frame that is not received (i.e., the above-mentioned non-received frame ID).

[0083] The master ECU 2 is configured to, upon acquiring the activation trigger information for determining the communication group to be put into the wake-up state (that is, the above-mentioned activation group), determine the activation group based on the acquired activation trigger information.

[0084] The master ECU 2 is configured to transmit to the slave ECUs 3 and 5 a communication frame indicating the determined activation group (that is, the above-mentioned NM frame). In such a communication system 1, the slave ECU 5 can recognize the combination of the above-mentioned cutoff device and the non-received frame ID and the combination of the above-mentioned sleep device and the non-received frame ID by referring to the diagnostic mask table 45 based on the activation group indicated by the NM frame received from the master ECU 2. Therefore, even if the power supply via the electronic fuse 15 is cut off in the slave ECU 3 and the slave ECU 5 cannot receive a CAN frame from the slave ECU 3, the slave ECU 5 can suppress the occurrence of a situation in which the slave ECU 5 determines that an abnormality such as a communication interruption has occurred in the slave ECU 3. Furthermore, even if the slave ECU 5 cannot receive a CAN frame from the slave ECU 3 that has entered a sleep state, the slave ECU 5 can suppress the occurrence of a situation in which the slave ECU 5 determines that an abnormality such as a communication interruption has occurred in the slave ECU 3. This allows the communication system 1 to improve the abnormality detection accuracy.

[0085] The activation trigger information also includes event occurrence information indicating that a preset event has occurred. The master ECU 2 includes an activation table 25 that associates one or more events with an activation group. Upon acquiring the event occurrence information, the master ECU 2 is configured to determine the activation group by referring to the activation table 25. Such a communication system 1 can suppress the occurrence of erroneous detection of a communication interruption anomaly even when an event has occurred.

[0086] In the embodiment described above, the CAN frame corresponds to a communication frame, the master ECU 2 and the slave ECUs 3 to 6 correspond to multiple electronic control devices, the electronic fuse 15 corresponds to a power supply switching unit, the battery 7 corresponds to a power source, and the slave ECU 3 corresponds to a first control device.

[0087] Moreover, the slave ECU 5 corresponds to the second control device, the master ECU 2 corresponds to the third control device, and the non-received frame ID corresponds to the non-received frame identification information. Moreover, S20 corresponds to a process performed by a group determination unit, and S30 corresponds to a process performed by an activation group transmission unit.

[0088] [Second embodiment] A second embodiment of the present disclosure will be described below with reference to the drawings. In the second embodiment, only the parts different from the first embodiment will be described. The same reference numerals will be used to designate the same configurations.

[0089] As shown in FIG. 5, the communication system 1 of the second embodiment differs from the first embodiment in that the diagnostic mask table 45 is omitted and a diagnostic mask table 27 is added.

[0090] The diagnostic mask table 27 is stored in the storage unit 14 of the master ECU 2 . In the diagnostic mask table 27, similarly to the diagnostic mask table 45, one or more combinations of cut-off devices and sleep devices with non-received frame IDs (that is, activation / shutdown combinations) are set for each activation group.

[0091] 7, the diagnostic mask table 27 further sets, for each of the electronic fuses 15, 16, an ECU powered from the battery 7 via the electronic fuses 15, 16 (hereinafter, power supply ECU) in association with a CAN ID of a CAN frame not received (i.e., a non-received frame ID). Therefore, the diagnostic mask table 27 further sets, for each electronic fuse, one or more combinations of a power supply ECU and a non-received frame ID (hereinafter, fuse combinations).

[0092] Next, a description will be given of a procedure of the startup management process executed by the control unit 11 of the master ECU 2. The startup management process is a process that is repeatedly executed while the master ECU 2 is in startup. When the start-up management process of the second embodiment is executed, the CPU 21 of the control unit 11 determines in S210 whether or not start-up trigger information has been input to the master ECU 2, as in S10, as shown in FIG.

[0093] Here, if the activation trigger information has not been input, the CPU 21 proceeds to S250. On the other hand, if the activation trigger information has been input, the CPU 21 determines the activation group based on the input activation trigger information in S220, in the same manner as in S20.

[0094] In S230, the CPU 21 transmits the diagnostic mask information based on the activation group determined in S220. Specifically, the CPU 21 extracts the activation / stop combination corresponding to the activation group determined in S220 from the diagnostic mask table 27, and transmits the extracted activation / stop combination to the slave ECUs 3 to 6 as the diagnostic mask information.

[0095] For example, when the CPU 21 determines that the activation group is the first communication group, it transmits the combination of the slave ECU 4 and the first CAN ID and the combination of the slave ECU 5 and the second CAN ID as the diagnostic mask information. For example, when the CPU 21 determines that the activation group is the second communication group, it transmits the combination of the slave ECU 6 and the third CAN ID as the diagnostic mask information.

[0096] When the slave ECUs 3 to 6 receive the diagnostic mask information, they set the diagnostic mask based on the received diagnostic mask information. As a result, for example, when the slave ECUs 3, 5, and 6 receive a combination of the slave ECU 4 and the first CAN ID as the diagnostic mask information, they are able to not regard it as an abnormality even if they cannot receive a CAN frame of the first CAN ID from the slave ECU 4.

[0097] In S240, the CPU 21, in the same manner as in S40, refers to the activation table 25 to execute electronic fuse control for turning on the electronic fuses corresponding to the activation group determined in S220 and turning off the electronic fuses other than the electronic fuses corresponding to the activation group, and then proceeds to S250.

[0098] In S250, the CPU 21 determines whether the electronic fuse 15 or the electronic fuse 16 has changed from the on state to the off state. If the electronic fuse 15 and the electronic fuse 16 have not changed from the on state to the off state, the CPU 21 ends the startup management process.

[0099] On the other hand, when the electronic fuse 15 or the electronic fuse 16 changes from the on state to the off state, the CPU 21 transmits the diagnostic mask information based on the change in the state of the electronic fuse 15 or the electronic fuse 16 by referring to the diagnostic mask table 27 in S260, and ends the startup management process. For example, when the electronic fuse 15 changes from the on state to the off state, the CPU 21 extracts from the diagnostic mask table 27 a non-received frame ID associated with the electronic fuse 15 as a power supply ECU, and transmits the combination of the extracted power supply ECU and the non-received frame ID as diagnostic mask information to the slave ECUs 3 to 6.

[0100] The master ECU 2 of the communication system 1 configured as above stores a diagnostic mask table 27. In the diagnostic mask table 27, one or more combinations of a cutoff device, a sleep device, and a non-received frame ID (i.e., activation / shutdown combinations) are set for each communication group.

[0101] The master ECU 2 is configured to, upon acquiring the activation trigger information, determine the activation group based on the acquired activation trigger information. The master ECU 2 is configured to transmit the activation / stop combination corresponding to the determined activation group to the slave ECUs 3 and 5 as diagnostic mask information.

[0102] In such a communication system 1, the slave ECU 5 can recognize the combination of the cutoff device and the unreceived frame ID, and the combination of the sleep device and the unreceived frame ID, based on the diagnostic mask information received from the master ECU 2. Therefore, even if the power supply via the electronic fuse 15 is cut off in the master ECU 2 and the slave ECU 5 cannot receive the CAN frame from the slave ECU 3, the slave ECU 5 can suppress the occurrence of a situation in which the slave ECU 5 determines that an abnormality such as a communication interruption has occurred in the slave ECU 3. Furthermore, even if the slave ECU 5 cannot receive the CAN frame from the slave ECU 3 that has entered the sleep state, the slave ECU 5 can suppress the occurrence of a situation in which the slave ECU 5 determines that an abnormality such as a communication interruption has occurred in the slave ECU 3. This allows the communication system 1 to improve the accuracy of abnormality detection.

[0103] The diagnostic mask table 27 further includes one or more combinations (i.e., the above-mentioned fuse combinations) of the slave ECU 3 to which power is supplied via the electronic fuse 15 and the unreceived frame ID. The master ECU 2 is configured to transmit the fuse combination to the slave ECU 5 as diagnostic mask information when the electronic fuse 15 is switched from the on state to the off state.

[0104] In such a communication system 1, even if the electronic fuse 15 is turned off under a condition other than the start trigger information, it is possible to prevent the slave ECU 3 from determining that an abnormality such as a communication interruption has occurred. Therefore, the communication system 1 can further improve the abnormality detection accuracy.

[0105] In the embodiment described above, S220 corresponds to the processing performed by the group determination unit, S230 corresponds to the processing performed by the sleep mask information transmission unit, S260 corresponds to the processing performed by the switching mask information transmission unit, and the fuse combination corresponds to the switching unit combination.

[0106] [Third embodiment] A third embodiment of the present disclosure will be described below with reference to the drawings. In the third embodiment, only the parts different from the first embodiment will be described. The same reference numerals will be used to designate the same configurations.

[0107] As shown in FIG. 8, the communication system 1 of the third embodiment differs from the first embodiment in that a smart sensor 501, a smart actuator 502, a wireless device 503, and electronic fuses 504 and 505 are added.

[0108] The smart sensor 501 is a sensor having a communication function. The smart sensor 501 is connected to a communication bus 8. The smart actuator 502 is an actuator having a communication function. The smart actuator 502 is connected to a communication bus 8.

[0109] The wireless device 503 is a wireless communication device for performing wireless communication with an external communication device installed outside the vehicle. The wireless device 503 is, for example, a DCM. DCM is an abbreviation for Data Communication Module.

[0110] The electronic fuse 504 is disposed on the power supply path between the battery 7 and the smart sensor 501. The electronic fuse 505 is disposed on the power supply path between the battery 7 and the smart actuator 502.

[0111] Each of the electronic fuses 504 and 505 is configured to switch, in response to a command from the control unit 11, between a conductive state in which the power supply path is conductive and a cut-off state in which the power supply path is cut off.

[0112] Hereinafter, the master ECU 2, the slave ECUs 3 to 6, the smart sensor 501, and the smart actuator 502 are also collectively referred to as nodes. (Prerequisite) The master ECU 2 and the slave ECUs 5 and 6 are always powered by the battery 7 without using a relay, and can switch to a wake-up state or a sleep state independently. Hereinafter, the master ECU 2 and the slave ECUs 5 and 6 are also referred to as NM-equipped nodes. An NM-equipped node is a node that has a function of generating an NM frame.

[0113] The slave ECUs 3 and 4, the smart sensor 501, and the smart actuator 502 are powered via relays, and cannot be switched to a wake-up state or a sleep state by themselves. That is, they enter a wake-up state when the relay is turned on, and enter a sleep state when the relay is turned off. Hereinafter, the slave ECUs 3 and 5, the smart sensor 501, and the smart actuator 502 are also referred to as non-NM nodes. A non-NM node is a node that does not have the function of generating and interpreting an NM frame.

[0114] The non-NM node includes at least one of an actuator and a sensor in addition to an ECU having a control function. The power supply paths of the non-NM nodes are connected to electronic fuses 15, 16, 504, and 505 of the master ECU 2, respectively.

[0115] A non-NM node and a relay may be connected one-to-one, or multiple non-NM nodes belonging to the same cluster (i.e., a group that starts up simultaneously) may be connected under one electronic fuse.

[0116] The master ECU 2 and the NM-equipped node have a CAN communication unit and are capable of transmitting and receiving NM frames. An NM-equipped node determines whether it is in a wake-up state or a sleep state based on the NM frames it sends and receives via the communication bus.

[0117] The master ECU 2 turns on or off the electronic fuses 15, 16, 504, and 505 to which the non-NM nodes are connected, based on the NM frame transmitted and received via the communication bus.

[0118] The payload (i.e., data area) of the NM frame transmitted and received by the master ECU 2 and the NM-equipped node stores one or more bits of information indicating which cluster to start.

[0119] One or more master ECUs (ie, ECUs with built-in electronic fuses) are installed in a vehicle. As shown in Figure 9, one or more nodes belonging to each cluster are determined in advance by the system developer. Although it is possible to assign a cluster to each node, multiple nodes can be registered in one cluster. When the bit corresponding to each cluster is active (i.e., bit=1), the cluster wakes up. In the case of the master ECU, waking up means turning on the electronic fuse.

[0120] (First startup example) The first activation example is an operation example in which a fault diagnosis of the slave ECU 3 is performed in response to a request from the cloud.

[0121] First, a connection request is sent from the base station (i.e., the cloud) to the vehicle's wireless device 503. Next, if the wireless device 503 determines that the connection is valid, it notifies the master ECU 2 of the event received from the cloud.

[0122] Next, the master ECU2 determines a service called "fault diagnosis of the slave ECU3" based on the event, and generates an NM frame in which the bit of the third cluster to which only the slave ECU3 belongs is enabled in order to start the slave ECU3.

[0123] Next, the master ECU 2 transmits the generated NM frame onto the communication buses 8 and 9. Since there are no NM-equipped nodes belonging to the third cluster on communication buses 8 and 9, there are no changes in the devices on the communication buses.

[0124] Next, the master ECU 2 executes processing based on the NM frame in the control unit 11, assuming that it has received an NM frame in which the bit of the third cluster is enabled at the same time as the above. Next, the control unit 11 of the master ECU 2 determines a wake-up instruction to the third cluster based on the NM frame, and turns on the electronic fuse 15 since the third cluster includes the electronic fuse 15.

[0125] When the electronic fuse 15 is turned on, power is supplied to the downstream slave ECU 3 and the slave ECU 3 starts up. The master ECU 2 waits for the slave ECU 3 to start up, requests a diagnostic code from the slave ECU 3, and transmits a response from the slave ECU 3 to the base station via the wireless device 503.

[0126] (Second startup example) The second startup example is an operation example in which a fault diagnosis of the slave ECU 5 is performed in response to a request from the cloud.

[0127] First, a connection request is sent from the base station (i.e., the cloud) to the vehicle's wireless device 503. Next, if the wireless device 503 determines that the connection is valid, it notifies the master ECU 2 of the event received from the cloud.

[0128] Next, the master ECU 2 determines a service called "fault diagnosis of the slave ECU 5" based on the event, and generates an NM frame in which the bit of the fourth cluster to which only the slave ECU 5 belongs is enabled in order to start the slave ECU 5.

[0129] Next, the master ECU 2 transmits the generated NM frame onto the communication buses 8 and 9. Since the slave ECU 5 is present on the communication bus 8 as a node belonging to the fourth cluster, the slave ECU 5 wakes up.

[0130] Next, the master ECU 2 executes processing based on the NM frame in the control unit 11, assuming that it has received an NM frame in which the bit of the fourth cluster is enabled at the same time as the above. Next, even if the control unit 11 of the master ECU 2 determines to issue a wake-up instruction to the fourth cluster based on the NM frame, the fourth cluster does not include the corresponding relay, so the control unit 11 ignores the instruction.

[0131] When the slave ECU 5 is started, the master ECU 2 requests a diagnostic code from the slave ECU 5 via the communication bus, and transmits a response from the slave ECU 5 to the base station via the wireless device 503.

[0132] (Third startup example) The third activation example is an operation example in which a user activates a remote air conditioning device using a smartphone. First, the user issues a command to turn on the vehicle air conditioner via the smartphone.

[0133] When the wireless device 503 receives the instruction signal from the smartphone and determines that the instruction signal is valid, it transmits the event received from the cloud (i.e., the instruction signal) to the master ECU 2.

[0134] The master ECU2 determines the "air conditioning service" based on the event, and generates an NM frame in which the second cluster is activated as the air conditioning cluster. The master ECU 2 periodically transmits the generated NM frame to the communication buses 8 and 9 until an instruction to stop the air conditioner is received. If it is desired to continue the active state, it is necessary to continue transmitting the NM frame periodically. At the same time, the control unit 11 of the master ECU 2 executes processing based on the NM frame.

[0135] When an NM frame that activates the second cluster occurs on the communication bus 8, the slave ECU 5 (that is, the air conditioner ECU) that belongs to the second cluster receives the NM frame and wakes up in accordance with the received NM frame.

[0136] When the control unit 11 of the master ECU 2 detects that the second cluster is active, it turns on the electronic fuses 504 and 505 that belong to the second cluster. When electronic fuse 504 and electronic fuse 505 are in the ON state, power is provided to smart sensor 501 (ie, temperature sensor) and smart actuator 502 (ie, compressor).

[0137] As a result of the above, power supply to the air conditioner ECU, smart sensor 501, and smart actuator 502 begins, making it possible to turn on the in-vehicle air conditioner. When the user issues an instruction to turn off the in-vehicle air conditioner via the smartphone, the master ECU 2 stops the periodic transmission of the NM frame.

[0138] When the NM frame is interrupted, the slave ECU 5 transitions to a sleep state, and the master ECU 2 turns off the electronic fuse 504 and the electronic fuse 505. This stops the in-vehicle air conditioner.

[0139] (4th startup example) The fourth activation example is an operation example in which the slave ECU 5 activates the vehicle air conditioner. Since the slave ECU 5 is always supplied with power even when the vehicle is stopped, it is possible for the slave ECU 5 to wake up when it detects an input of a signal indicating that the start switch connected to the slave ECU 5 has been turned on, even when the slave ECU 5 is in sleep mode.

[0140] When the woken up slave ECU 5 confirms an input to start the in-vehicle air conditioner, it generates an NM frame with the bit corresponding to the second cluster turned on. The slave ECU 5 transmits the generated NM frame via the CAN communication unit 32. When the master ECU 2 receives this NM frame, the master ECU 2 turns on the electronic fuses 504 and 505 that belong to the second cluster.

[0141] When the start switch of the in-vehicle air conditioner is turned off, the slave ECU 5 stops transmitting the NM frame and enters a sleep state after a while. When the NM frame is discontinued, the master ECU 2 turns off the electronic fuses 504 and 505 after a while and ends the control.

[0142] If the master ECU 2 determines that control needs to continue even after the transmission of the NM frame has stopped, the master ECU 2 transmits an NM frame with the bit corresponding to the second cluster turned on. This allows the slave ECU 5 and the electronic fuses 504 and 505 to remain active until the transmission of the NM frame generated by the master ECU 2 stops.

[0143] [Fourth embodiment] A fourth embodiment of the present disclosure will be described below with reference to the drawings. In the fourth embodiment, differences from the first embodiment will be described.

[0144] 10, the communication system 100 of the fourth embodiment is mounted on a vehicle and includes a central ECU 101, upstream power distribution units 102, 103, zone ECUs 104, 105, 106, 107, slave ECUs 108, 109, 110, 111, 112, 113, 114, 115, 116, a battery 117, and a slave ECU 118. Hereinafter, the central ECU 101, the zone ECUs 104 to 107, and the slave ECUs 108 to 116, 118 will be collectively referred to as nodes.

[0145] The battery 117 supplies power to each part of the vehicle at a DC battery voltage (for example, 12 V). The central ECU 101, the upstream power distribution units 102 and 103, the zone ECUs 104 to 107, and the slave ECUs 108 to 116 and 118 operate by receiving power supplied from the battery 117.

[0146] The upstream power supply distribution unit 102 receives power supply from the battery 117 via a power supply path 121 between the battery 117 and the upstream power supply distribution unit 102 . The upstream power supply distribution unit 103 receives power supply from the battery 117 via a power supply path 122 between the battery 117 and the upstream power supply distribution unit 103 .

[0147] The zone ECUs 104 and 105 receive power from a battery 117 via power supply paths 123 and 124 between the upstream power distribution unit 102 and the zone ECUs 104 and 105, respectively.

[0148] The zone ECUs 106 and 107 receive power from a battery 117 via power supply paths 125 and 126 between the upstream power distribution unit 103 and the zone ECUs 106 and 107, respectively.

[0149] The slave ECUs 108 and 109 receive power from the battery 117 via power supply paths 127 and 128 between the zone ECU 104 and the slave ECUs 108 and 109, respectively.

[0150] The slave ECUs 110 and 111 are supplied with power from a battery 117 via power supply paths 129 and 130 between the zone ECU 105 and the slave ECUs 110 and 111, respectively.

[0151] The slave ECUs 112, 113, and 114 receive power from a battery 117 via power supply paths 131, 132, and 133 between the zone ECU 106 and the slave ECUs 112, 113, and 114, respectively.

[0152] The slave ECUs 115 and 116 are supplied with power from a battery 117 via power supply paths 134 and 135 between the zone ECU 107 and the slave ECUs 115 and 116, respectively.

[0153] The slave ECU 118 receives power from the battery 117 via a power supply path 136 . The central ECU 101 and the upstream power distribution unit 102 are connected to each other via a communication line 141 so as to be able to communicate data with each other.

[0154] The central ECU 101 and the upstream power distribution unit 103 are connected to each other via a communication line 142 so as to be able to communicate data with each other. The central ECU 101 and the zone ECUs 104, 105, 106, and 107 are connected to each other via communication lines 143, 144, 145, and 146, respectively, so as to be able to communicate data with each other.

[0155] The zone ECU 104 and the slave ECUs 108, 109, and 118 are connected to each other via a communication bus 147 so as to be able to communicate data with each other. The zone ECU 105 and the slave ECUs 110 and 111 are connected to each other via a communication bus 148 so as to be able to communicate data with each other.

[0156] The zone ECU 106 and the slave ECUs 112, 113, and 114 are connected to each other via a communication bus 149 so as to be able to communicate data with each other. The zone ECU 107 and the slave ECUs 115 and 116 are connected to each other via a communication bus 150 so as to be able to communicate data with each other.

[0157] As shown in FIG. 11, the central ECU 101 includes a control unit 151, communication units 152, 153, 154, 155, 156, and 157, and a storage unit 158. The control unit 151 is an electronic control device mainly composed of a microcomputer including a CPU 161, a ROM 162, a RAM 163, etc. Various functions of the microcomputer are realized by the CPU 161 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 162 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 161 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 151 may be one or more.

[0158] The communication unit 152 communicates with the upstream power distribution unit 102 connected to the communication line 141 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. Ethernet is a registered trademark.

[0159] The communication unit 153 communicates with the upstream power distribution unit 103 connected to the communication line 142 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. The communication unit 154 communicates with the zone ECU 104 connected to the communication line 143 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0160] The communication unit 155 communicates with the zone ECU 105 connected to the communication line 144 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. The communication unit 156 communicates with the zone ECU 106 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0161] The communication unit 157 communicates with the zone ECU 107 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. The storage unit 158 ​​is a storage device for storing various data. The storage unit 158 ​​stores a startup table 165, which will be described later.

[0162] The upstream power distribution unit 102 includes a control circuit 171 , a communication unit 172 , and electronic fuses 173 and 174 . The control circuit 171 performs control to switch the electronic fuses 173 and 174 between an on state and an off state based on an instruction obtained from the central ECU 101 via a communication unit 172 .

[0163] The communication unit 172 communicates with the central ECU 101 connected to the communication line 141 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0164] The electronic fuse 173 is disposed between the power supply path 121 and the power supply path 123. The electronic fuse 174 is disposed between the power supply path 121 and the power supply path . The upstream power distribution unit 103 includes a control circuit 181 , a communication unit 182 , and electronic fuses 183 and 184 .

[0165] The control circuit 181 performs control to switch the electronic fuses 183 and 184 between the on state and the off state based on an instruction obtained from the central ECU 101 via the communication unit 182 .

[0166] The communication unit 182 communicates with the central ECU 101 connected to the communication line 142 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0167] The electronic fuse 183 is disposed between the power supply path 122 and the power supply path 125. The electronic fuse 184 is disposed between the power supply path 122 and the power supply path 126. As shown in FIG. 12, the zone ECU 104 includes a control unit 191, a communication unit 192, a CAN communication unit 193, a storage unit 194, and electronic fuses 195 and 196.

[0168] The control unit 191 is an electronic control device mainly composed of a microcomputer including a CPU 201, a ROM 202, a RAM 203, etc. Various functions of the microcomputer are realized by the CPU 201 executing a program stored in a non-transient real recording medium. In this example, the ROM 202 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 201 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 191 may be one or more.

[0169] The communication unit 192 communicates with the central ECU 101 connected to the communication line 143 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0170] The CAN communication unit 193 communicates with the slave ECUs 108 and 109 connected to the communication bus 147 by transmitting and receiving communication frames based on the CAN communication protocol.

[0171] The storage unit 194 is a storage device for storing various data. The storage unit 194 stores a diagnostic mask table 207, which will be described later. The electronic fuse 195 is disposed between the power supply path 123 and the power supply path 127. The electronic fuse 196 is disposed between the power supply path 123 and the power supply path 128.

[0172] The zone ECU 105 includes a control unit 211, a communication unit 212, a CAN communication unit 213, a storage unit 214, and electronic fuses 215 and 216. The control unit 211 is an electronic control device mainly composed of a microcomputer including a CPU 221, a ROM 222, a RAM 223, etc. Various functions of the microcomputer are realized by the CPU 221 executing a program stored in a non-transient real recording medium. In this example, the ROM 222 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 221 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 211 may be one or more.

[0173] The communication unit 212 communicates with the central ECU 101 connected to the communication line 144 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0174] The CAN communication unit 213 communicates with the slave ECUs 110 and 111 connected to the communication bus 148 by transmitting and receiving communication frames based on the CAN communication protocol.

[0175] The storage unit 214 is a storage device for storing various data. The storage unit 214 stores a diagnostic mask table 227, which will be described later. The electronic fuse 215 is disposed between the power supply path 124 and the power supply path 129. The electronic fuse 216 is disposed between the power supply path 124 and the power supply path 130.

[0176] As shown in FIG. 13, the zone ECU 106 includes a control unit 231, a communication unit 232, a CAN communication unit 233, a storage unit 234, and electronic fuses 235, 236, and 237. The control unit 231 is an electronic control device mainly composed of a microcomputer including a CPU 241, a ROM 242, a RAM 243, etc. Various functions of the microcomputer are realized by the CPU 241 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 242 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 241 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 231 may be one or more.

[0177] The communication unit 232 communicates with the central ECU 101 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0178] The CAN communication unit 233 communicates with the slave ECUs 112, 113, and 114 connected to the communication bus 149 by transmitting and receiving communication frames based on the CAN communication protocol.

[0179] The storage unit 234 is a storage device for storing various data. The storage unit 194 stores a diagnostic mask table 247, which will be described later. The electronic fuse 235 is disposed between the power supply path 125 and the power supply path 131. The electronic fuse 236 is disposed between the power supply path 125 and the power supply path 132. The electronic fuse 237 is disposed between the power supply path 125 and the power supply path 133.

[0180] The zone ECU 107 includes a control unit 251, a communication unit 252, a CAN communication unit 253, a storage unit 254, and electronic fuses 255 and 256. The control unit 251 is an electronic control device mainly composed of a microcomputer including a CPU 261, a ROM 262, a RAM 263, etc. Various functions of the microcomputer are realized by the CPU 261 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 262 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 261 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 251 may be one or more.

[0181] The communication unit 252 communicates with the central ECU 101 connected to the communication line 146 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0182] The CAN communication unit 253 communicates with the slave ECUs 115 and 116 connected to the communication bus 150 by transmitting and receiving communication frames based on the CAN communication protocol.

[0183] The storage unit 254 is a storage device for storing various data. The storage unit 254 stores a diagnostic mask table 267, which will be described later. The electronic fuse 255 is disposed between the power supply path 126 and the power supply path 134. The electronic fuse 256 is disposed between the power supply path 126 and the power supply path 135.

[0184] As shown in FIG. 14, the slave ECUs 108, 109, and 118 each include a control unit 271, a CAN communication unit 272, and a storage unit 273. The control unit 271 is an electronic control device mainly composed of a microcomputer including a CPU 281, a ROM 282, a RAM 283, etc. Various functions of the microcomputer are realized by the CPU 281 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 282 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 281 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 271 may be one or more.

[0185] The CAN communication unit 272 communicates with the zone ECUs 104 connected to the communication bus 147 based on the CAN communication protocol. The storage unit 273 is a storage device for storing various data. The storage unit 273 stores a diagnostic mask table 287, which will be described later.

[0186] The slave ECUs 110 and 111 each include a control unit 291 , a CAN communication unit 292 , and a storage unit 293 . The control unit 291 is an electronic control device mainly composed of a microcomputer including a CPU 301, a ROM 302, a RAM 303, etc. Various functions of the microcomputer are realized by the CPU 301 executing a program stored in a non-transient real recording medium. In this example, the ROM 302 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 301 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 291 may be one or more.

[0187] The CAN communication unit 292 communicates with the zone ECU 105 connected to the communication bus 148 based on the CAN communication protocol. The storage unit 293 is a storage device for storing various data. The storage unit 293 stores a diagnostic mask table 307, which will be described later.

[0188] The slave ECUs 112 , 113 , and 114 each include a control unit 311 , a CAN communication unit 312 , and a storage unit 313 . The control unit 311 is an electronic control device mainly composed of a microcomputer including a CPU 321, a ROM 322, a RAM 323, etc. Various functions of the microcomputer are realized by the CPU 321 executing a program stored in a non-transient real recording medium. In this example, the ROM 322 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 321 may be configured as hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 311 may be one or more.

[0189] The CAN communication unit 312 communicates with the zone ECU 106 connected to the communication bus 149 based on the CAN communication protocol. The storage unit 313 is a storage device for storing various data. The storage unit 313 stores a diagnostic mask table 327, which will be described later.

[0190] The slave ECUs 115 and 116 each include a control unit 331 , a CAN communication unit 332 , and a storage unit 333 . The control unit 331 is an electronic control device mainly composed of a microcomputer including a CPU 341, a ROM 342, a RAM 343, etc. Various functions of the microcomputer are realized by the CPU 341 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 342 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 341 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 331 may be one or more.

[0191] The CAN communication unit 332 communicates with the zone ECU 107 connected to the communication bus 150 based on the CAN communication protocol. The storage unit 333 is a storage device for storing various data. The storage unit 333 stores a diagnostic mask table 347, which will be described later.

[0192] 15, in the activation table 165 of the central ECU 101, a communication group to be activated (i.e., an activation group) is set for each event. In the activation table 165, a correspondence relationship between the activation group and the slave ECU to be put into a wake-up state is further set. In the activation table 165, a correspondence relationship between the slave ECU and the electronic fuse connected to the slave ECU is further set. Note that the activation table 165 may be set in such a way that the correspondence relationship of which zone ECU the slave ECU is under can be known.

[0193] As shown in Fig. 16, the diagnosis mask tables 207, 227, 247, 267, 287, 307, 327, and 347 have an activation group set for each event. The diagnosis mask tables 207, 227, 247, 267, 287, 307, 327, and 347 further have a correspondence between the activation group, the slave ECU (hereinafter, cut-off device) to which power supply via an electronic fuse is cut off, the slave ECU (hereinafter, sleep device) to which a sleep state is entered, and the CAN ID of a CAN frame that is not received (hereinafter, non-received frame ID). The diagnosis mask tables 207, 227, 247, 267, 287, 307, 327, and 347 may be set in such a way that the correspondence between the zone ECU under which the slave ECU is located can be known. Also, the diagnostic mask tables 207, 227, 247, 267, 287, 307, 327, and 347 do not necessarily need to include a correspondence table between events and activation groups (that is, the table on the left in FIG. 16).

[0194] 16, for example, when the activation group is the second communication group, hatched rectangles are added to the slave ECUs 110, 111, and 112. This indicates that the slave ECUs 110, 111, and 112 are interruption devices, and non-received frame IDs corresponding to the slave ECUs 110, 111, and 112 are set.

[0195] Next, a description will be given of a procedure of central management processing executed by the control unit 151 of the central ECU 101. The central management processing is processing that is repeatedly executed while the central ECU 101 is running.

[0196] When the central management process is executed, the CPU 161 of the control unit 151 determines whether or not start trigger information (that is, an NM frame or event occurrence information) has been input to the master ECU 2 in S310, as shown in FIG.

[0197] Here, if the activation trigger information has not been input, the CPU 161 ends the central management process. On the other hand, if the activation trigger information has been input, the CPU 161 determines the activation group based on the input activation trigger information in S320. Specifically, if the activation trigger information is an NM frame, the CPU 161 determines that the communication group corresponding to the bit set to 1 in the input NM frame is the activation group. Also, if the activation trigger information is event occurrence information, the CPU 161 determines the activation group based on the event indicated by the event occurrence information by referring to the activation table 165. The CPU 161 generates an NM frame indicating the determined activation group.

[0198] At S330, the CPU 161 starts a process of transmitting an NM frame indicating the activation group determined at S320 to the zone ECUs 104, 105, 106, and 107. After starting transmission of the NM frame at S330, the CPU 161 periodically transmits the same NM frame.

[0199] In S340, the CPU 161 refers to the activation table 165 to instruct the electronic fuses corresponding to the activation group determined in S320 to be turned on, and transmits electronic fuse control instructions to the upstream power distribution units 102, 103 and the zone ECUs 104, 105, 106, and 107 to turn off electronic fuses other than the electronic fuses corresponding to the activation group, and then terminates the central management processing.

[0200] The upstream power distribution unit 102 turns the electronic fuses 173 and 174 to the on or off state based on the received electronic fuse control instruction. The upstream power distribution unit 103 turns the electronic fuses 183 and 184 to the on or off state based on the received electronic fuse control instruction.

[0201] The zone ECU 104 turns the electronic fuses 195 and 196 on or off based on the received electronic fuse control instruction. The zone ECU 105 turns the electronic fuses 215 and 216 on or off based on the received electronic fuse control instruction.

[0202] The zone ECU 106 turns the electronic fuses 235, 236, and 237 on or off based on the received electronic fuse control instruction. The zone ECU 107 turns the electronic fuses 255 and 256 on or off based on the received electronic fuse control instruction.

[0203] Next, a description will be given of the procedure of the zone management process executed by the control units 191, 211, 231, and 251 of the zone ECUs 104, 105, 106, and 107. The zone management process is repeatedly executed while the zone ECUs 104, 105, 106, and 107 are running.

[0204] When the zone management process is executed, the CPUs 201, 221, 241, and 261 of the control units 191, 211, 231, and 251 determine whether or not an NM frame has been received in S410, as shown in Fig. 18. If an NM frame has not been received, the CPUs 201, 221, 241, and 261 end the zone management process.

[0205] On the other hand, when an NM frame is received, the CPUs 201, 221, 241, and 261 transfer the received NM frame to the slave ECUs under their control at S420. The slave ECUs under the control of the zone ECU 104 are slave ECUs 108, 109, and 118. The slave ECUs under the control of the zone ECU 105 are slave ECUs 110 and 111. The slave ECUs under the control of the zone ECU 106 are slave ECUs 112, 113, and 114. The slave ECUs under the control of the zone ECU 107 are slave ECUs 115 and 116.

[0206] In S430, the CPU 201, 221, 241, 261 sets a diagnostic mask based on the received NM frame by referring to the diagnostic mask table 207, 227, 247, 267, and ends the zone management process.

[0207] Next, a description will be given of the procedure of slave management processing executed by the control units 271 of the slave ECUs 108 and 109. The slave management processing is processing that is repeatedly executed during the startup of the slave ECUs 108 and 109. Note that the slave ECUs 110 to 116 execute the slave management processing in the same manner as the slave ECUs 108 and 109.

[0208] When the slave management process is executed, the CPU 281 of the control unit 271 determines whether or not an NM frame has been received in S510, as shown in Fig. 19. If an NM frame has not been received, the CPU 281 ends the slave management process.

[0209] On the other hand, if an NM frame has been received, the CPU 281 sets the diagnostic mask based on the received NM frame by referring to the diagnostic mask table 287 in S520, and ends the slave management process.

[0210] The communication system 100 thus configured includes a central ECU 101, zone ECUs 104 to 107, and slave ECUs 108 to 116, 118 that are connected to each other so as to be capable of transmitting and receiving communication frames.

[0211] Each of the central ECU 101, the zone ECUs 104 to 107, and the slave ECUs 108 to 116, 118 belongs to at least one of a plurality of communication groups. The communication system 100 is configured to be able to switch the ECUs belonging to each communication group between a wakeup state and a sleep state individually, one by one, or all together.

[0212] The slave ECU 108 receives power from the battery 117 via an electronic fuse 195 configured to switch between a conductive state for connecting the power supply path and a cut-off state for cutting off the power supply path. The slave ECU 109 receives power from the battery 117 via an electronic fuse 196 configured to switch between a conductive state for connecting the power supply path and a cut-off state for cutting off the power supply path. The slave ECU 118 receives power from the battery 117 without going through an electronic fuse.

[0213] The slave ECU 109 is connected to the slave ECU 108 so as to be able to transmit and receive communication frames therebetween. The slave ECU 108, the slave ECU 109, the slave ECU 118 and the zone ECU 104 are connected to each other so as to be able to transmit and receive communication frames to and from each other. The zone ECU 104 is configured to control the operation of the electronic fuses 195 and 196.

[0214] The central ECU 101 is connected to the zone ECUs 104 so as to be able to transmit and receive communication frames therebetween. The slave ECU 108, the slave ECU 109, and the slave ECU 118 store a diagnostic mask table 287. In the diagnostic mask table 287, one or more combinations (hereinafter, "start / stop combinations") are set, of a communication group, an ECU to which power supply via an electronic fuse is cut off (i.e., the above-mentioned cutoff device), an ECU to which a sleep state is entered (i.e., the above-mentioned sleep device), and a CAN ID of a CAN frame that is not received (i.e., the above-mentioned non-received frame ID).

[0215] The central ECU 101 is configured to, upon acquiring the activation trigger information for determining the communication group to be put into the wake-up state (that is, the above-mentioned activation group), determine the activation group based on the acquired activation trigger information.

[0216] The central ECU 101 is configured to transmit to the zone ECU 104 a communication frame indicating the determined activation group (i.e., the above-mentioned NM frame). The zone ECU 104 is configured to forward the NM frame received from the central ECU 101 to the slave ECU 108 , the slave ECU 109 and the slave ECU 118 .

[0217] In such a communication system 100, the slave ECU 109 can recognize the combination of the above-mentioned cutoff device and the non-received frame ID and the combination of the above-mentioned sleep device and the non-received frame ID by referring to the diagnostic mask table 287 based on the activation group indicated by the NM frame received from the zone ECU 104. Therefore, even if the power supply via the electronic fuse 195 is cut off in the slave ECU 108 and the slave ECU 109 cannot receive a CAN frame from the slave ECU 108, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 109 determines that an abnormality such as a communication interruption has occurred in the slave ECU 108. Furthermore, even if the slave ECU 109 cannot receive a CAN frame from the slave ECU 108 that has entered a sleep state, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 109 determines that an abnormality such as a communication interruption has occurred in the slave ECU 108. This allows the communication system 100 to improve the abnormality detection accuracy.

[0218] In the embodiment described above, the central ECU 101, the zone ECUs 104 to 107, and the slave ECUs 108 to 116, 118 correspond to a plurality of electronic control devices, the electronic fuse 195 corresponds to a power supply switching unit, and the battery 117 corresponds to a power source.

[0219] Moreover, the slave ECU 108 corresponds to a first slave control device, the slave ECU 109 corresponds to a second slave control device, the zone ECU 104 corresponds to a zone control device, and the central ECU 101 corresponds to a central control device.

[0220] Moreover, S320 corresponds to the processing performed by a group determination unit, S330 corresponds to the processing performed by an activation group transmission unit, and S420 corresponds to the processing performed by a frame forwarding unit. [Fifth embodiment] A fifth embodiment of the present disclosure will be described below with reference to the drawings. In the fifth embodiment, only the parts different from the fourth embodiment will be described. The same reference numerals will be used to designate the same components.

[0221] As shown in FIG. 20, the communication system 100 of the fifth embodiment is different from the fourth embodiment in that the storage unit 158 ​​of the central ECU 101 further stores a diagnostic mask table 167.

[0222] 16, an activation group is set for each event in the diagnostic mask table 167. The diagnostic mask table 167 further sets a correspondence relationship between the activation group, the cut-off device, the sleep device, and the non-received frame ID.

[0223] Also, as shown in FIG. 21, in the storage unit 194 of the zone ECU 104, the diagnostic mask table 207 is omitted, which is different from the fourth embodiment. Also, the storage unit 214 of the zone ECU 105 is different from the fourth embodiment in that the diagnostic mask table 227 is omitted.

[0224] Also, as shown in FIG. 22, in the storage unit 234 of the zone ECU 106, the diagnostic mask table 247 is omitted, which is different from the fourth embodiment. Also, the storage unit 254 of the zone ECU 107 is different from the fourth embodiment in that the diagnostic mask table 267 is omitted.

[0225] Also, as shown in FIG. 23, in the storage unit 273 of each of the slave ECUs 108, 109, and 118, the diagnostic mask table 287 is omitted, which is different from the fourth embodiment. Also, the third embodiment differs from the fourth embodiment in that the diagnosis mask table 307 is omitted in the storage unit 293 of each of the slave ECUs 110 and 111.

[0226] Also, the third embodiment differs from the fourth embodiment in that the diagnosis mask table 327 is omitted in the storage unit 313 of each of the slave ECUs 112, 113, and 114. Also, the third embodiment differs from the fourth embodiment in that the diagnosis mask table 347 is omitted in the storage unit 333 of the slave ECUs 115 and 116.

[0227] Next, the procedure of the central management process of the fifth embodiment will be described. When the central management process of the fifth embodiment is executed, the CPU 161 of the control unit 151 determines whether or not start trigger information (that is, an NM frame or event occurrence information) has been input to the central ECU 101 in S610, as shown in FIG.

[0228] If the activation trigger information has not been input, the CPU 161 ends the central management process. On the other hand, if the activation trigger information has been input, the CPU 161 determines the activation group based on the input activation trigger information in S620.

[0229] In S630, the CPU 161 refers to the diagnostic mask table 167 based on the activation group determined in S620 and generates diagnostic mask information. For example, if the activation group is the second communication group, the activation / stop combination related to the second communication group in the diagnostic mask table 167 is extracted and used as the diagnostic mask information. The CPU 161 transmits the generated diagnostic mask information to the zone ECUs 104, 105, 106, and 107.

[0230] In S640, the CPU 161 refers to the activation table 165 to instruct the electronic fuses corresponding to the activation group determined in S620 to be turned on, and transmits electronic fuse control instructions to the upstream power distribution units 102, 103 and the zone ECUs 104, 105, 106, and 107 to turn off electronic fuses other than the electronic fuses corresponding to the activation group, and then terminates the central management processing.

[0231] Next, the procedure of the zone management process of the fifth embodiment will be described. When the zone management process of the fifth embodiment is executed, the CPUs 201, 221, 241, and 261 of the control units 191, 211, 231, and 251 determine whether or not the diagnostic mask information has been received in S710, as shown in Fig. 25. If the diagnostic mask information has not been received, the CPUs 201, 221, 241, and 261 end the zone management process.

[0232] On the other hand, when the diagnostic mask information is received, the CPU 201, 221, 241, 261 transfers the received diagnostic mask information to the slave ECU under control in S720.

[0233] In step S730, the CPU 201, 221, 241, 261 sets a diagnostic mask based on the received diagnostic mask information, and ends the zone management process. Next, the procedure of the slave management process of the fifth embodiment will be described.

[0234] When the slave management process of the fifth embodiment is executed, the CPU 281 of the control unit 271 determines whether or not the diagnostic mask information has been received in S810, as shown in Fig. 26. If the diagnostic mask information has not been received, the CPU 281 ends the slave management process.

[0235] On the other hand, if the diagnostic mask information has been received, the CPU 281 sets the diagnostic mask based on the received diagnostic mask information in S820, and ends the slave management process.

[0236] The central ECU 101 of the communication system 100 configured in this manner stores a diagnostic mask table 167 . In the diagnostic mask table 167, one or more combinations of communication groups, cut-off devices, sleep devices, and non-received frame IDs (that is, activation / deactivation combinations) are set.

[0237] The central ECU 101 is configured to, upon acquiring the activation trigger information, determine an activation group based on the acquired activation trigger information. The central ECU 101 is configured to transmit the activation / stop combination corresponding to the determined activation group to the zone ECU 104 as diagnostic mask information.

[0238] The zone ECU 104 is configured to transfer the diagnostic information received from the central ECU 101 to the slave ECU 108 and the slave ECU 109 . In such a communication system 100, the slave ECU 109 can recognize a combination of a cutoff device and a non-received frame ID and a combination of a sleep device and a non-received frame ID based on the diagnostic mask information received from the zone ECU 104. Therefore, even if the power supply to the slave ECU 108 via the electronic fuse 195 is cut off and the slave ECU 109 cannot receive a CAN frame from the slave ECU 108, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 108 determines that an abnormality such as a communication interruption has occurred. Furthermore, even if the slave ECU 109 cannot receive a CAN frame from the slave ECU 108 that has entered a sleep state, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 108 determines that an abnormality such as a communication interruption has occurred. This allows the communication system 100 to improve the abnormality detection accuracy. Note that the zone ECU 104 also achieves the same effect as the slave ECU 109 by using the diagnostic mask information received from the central ECU 101.

[0239] In the embodiment described above, S620 corresponds to the processing performed by the group determination unit, S630 corresponds to the processing performed by the sleep mask information transmission unit, and S720 corresponds to the processing performed by the mask information transfer unit.

[0240] [Sixth embodiment] A sixth embodiment of the present disclosure will be described below with reference to the drawings. In the sixth embodiment, only the parts different from the fourth embodiment will be described. The same reference numerals will be used to designate the same components.

[0241] 27, the communication system 100 of the sixth embodiment is different from the fourth embodiment in that the configuration of the activation table 165 included in the central ECU 101 is changed. That is, an activation group is set for each event in the activation table 165 of the sixth embodiment. In other words, the activation table 165 of the sixth embodiment does not set a correspondence between an activation group and a slave ECU to be put into a wake-up state.

[0242] As shown in FIG. 28, the second embodiment differs from the fourth embodiment in that the storage unit 194 of the zone ECU 104 further stores an activation table 205, which will be described later. The second embodiment differs from the fourth embodiment in that the storage unit 214 of the zone ECU 105 further stores an activation table 225, which will be described later.

[0243] As shown in FIG. 29, the second embodiment differs from the fourth embodiment in that the storage unit 234 of the zone ECU 106 further stores an activation table 245, which will be described later. The fourth embodiment differs from the fourth embodiment in that the storage unit 254 of the zone ECU 107 further stores an activation table 265, which will be described later.

[0244] 27, in the activation table 205, a correspondence relationship between an activation group and a slave ECU to be put into a wake-up state is set for the slave ECUs 108, 109, and 118 under the control of the zone ECU 104. In the activation table 205, a correspondence relationship between the slave ECUs 108, 109, and 118 and electronic fuses connected to the slave ECUs 108, 109, and 118 is further set.

[0245] The activation table 225 sets the correspondence between the activation group and the slave ECU to be put into the wake-up state for the slave ECUs 110 and 111 under the zone ECU 105. The activation table 225 further sets the correspondence between the slave ECUs 110 and 111 and the electronic fuses connected to the slave ECUs 110 and 111.

[0246] The activation table 245 sets the correspondence between the activation groups and the slave ECUs to be put into the wake-up state for the slave ECUs 112, 113, and 114 under the zone ECU 106. The activation table 225 further sets the correspondence between the slave ECUs 112, 113, and 114 and the electronic fuses connected to the slave ECUs 112, 113, and 114.

[0247] The activation table 265 sets the correspondence between the activation group and the slave ECU to be put into the wake-up state for the slave ECUs 115, 116 under the control of the zone ECU 107. The activation table 265 further sets the correspondence between the slave ECUs 115, 116 and the electronic fuses connected to the slave ECUs 115, 116.

[0248] Also, the third embodiment differs from the fourth embodiment in that the configurations of the diagnostic mask tables 207, 227, 247, 267, 287, 307, 327, and 347 have been changed. As shown in FIG. 30, in the diagnosis mask tables 207 and 287, for the slave ECUs 108, 109, and 118 under the zone ECU 104, the correspondence between the activation group, the cut-off device, the sleep device, and the non-received frame ID is set.

[0249] In the diagnostic mask tables 227 and 307, for the slave ECUs 110 and 111 under the zone ECU 105, the correspondence between the activation group, the cut-off device, the sleep device, and the non-received frame ID is set.

[0250] In the diagnosis mask tables 247 and 327, for the slave ECUs 112, 113, and 114 under the zone ECU 106, the correspondence between the activation group, the cut-off device, the sleep device, and the non-received frame ID is set.

[0251] In the diagnosis mask tables 267 and 347, for the slave ECUs 115 and 116 under the control of the zone ECU 107, the correspondence between the activation group, the cut-off device, the sleep device, and the non-received frame ID is set.

[0252] Also, the second embodiment differs from the fourth embodiment in that the central management process and the zone management process have been changed. Next, the procedure of the central management process of the sixth embodiment will be described.

[0253] As shown in FIG. 31, the central management process of the sixth embodiment differs from that of the fourth embodiment in that the process of S340 is omitted. That is, when the process of S330 ends, the CPU 161 ends the central management process.

[0254] Next, the procedure of the zone management process of the sixth embodiment will be described. As shown in FIG. 32, the zone management process of the sixth embodiment differs from that of the fourth embodiment in that the processes of S440 to S480 are added.

[0255] That is, if an NM frame has not been received in S410, the CPU 201, 221, 241, 261 proceeds to S460. Also, when the processing of S430 is completed, in S440, the CPU 201, 221, 241, 261 performs electronic fuse control for the subordinate slave ECUs by referring to the activation tables 205, 225, 245, 265 to turn on the electronic fuses corresponding to the activation group indicated by the NM frame and to turn off electronic fuses other than the electronic fuses corresponding to the activation group.

[0256] In S450, the CPU 201, 221, 241, 261 generates diagnostic mask information by referring to the diagnostic mask tables 207, 227, 247, 267 based on the activation group indicated by the received NM frame. The CPU 201, 221, 241, 261 transmits the generated diagnostic mask information to other zone ECUs via the central ECU 101, and proceeds to S460.

[0257] At S460, the CPU 201, 221, 241, 261 determines whether or not it has received diagnostic mask information transmitted from another zone ECU. If it has not received diagnostic mask information, the CPU 201, 221, 241, 261 ends the zone management process.

[0258] On the other hand, when the diagnostic mask information is received, the CPU 201, 221, 241, 261 transfers the received diagnostic mask information to the slave ECU under control in S470.

[0259] In step S480, the CPUs 201, 221, 241, and 261 refer to the diagnostic mask information transmitted from the other zone ECUs and perform additional setting of the diagnostic mask. For example, the CPU 201 can refer to the diagnosing mask table 207 and generate diagnosing mask information for the slave ECUs 108, 109, and 118. However, since the CPU 201 cannot generate diagnosing mask information for slave ECUs other than the slave ECUs 108, 109, and 118, the CPU 201 sets the diagnosing masks using diagnosing mask information transmitted from other zone ECUs.

[0260] When the CPUs 201, 221, 241, and 261 have set the diagnostic mask information for all the slave ECUs, they end the zone management process. The slave ECUs 108, 109, and 118 set a diagnostic mask by referring to the diagnostic mask table 287 using the NM frame transmitted from the zone ECU 104. The slave ECUs 108, 109, and 118 also use the diagnostic mask information transmitted from the zone ECU 104 to additionally set a diagnostic mask.

[0261] Similarly, the slave ECUs 110 and 111 set a diagnostic mask by referring to the diagnostic mask table 307 using the NM frame transmitted from the zone ECU 105. Also, the slave ECUs 110 and 111 use the diagnostic mask information transmitted from the zone ECU 105 to additionally set a diagnostic mask.

[0262] The slave ECUs 112, 113, and 114 set a diagnostic mask by referring to the diagnostic mask table 327 using the NM frame transmitted from the zone ECU 106. The slave ECUs 112, 113, and 114 also use the diagnostic mask information transmitted from the zone ECU 105 to additionally set a diagnostic mask.

[0263] The slave ECUs 115 and 116 set a diagnostic mask by referring to the diagnostic mask table 347 using the NM frame transmitted from the zone ECU 107. The slave ECUs 115 and 116 also use the diagnostic mask information transmitted from the zone ECU 107 to additionally set a diagnostic mask.

[0264] The communication system 100 thus configured includes a central ECU 101, zone ECUs 104 to 107, and slave ECUs 108 to 116, 118 that are connected to each other so as to be capable of transmitting and receiving communication frames.

[0265] The zone ECU 104 and the slave ECUs 108 and 109 store diagnostic mask tables 207 and 287. In the diagnostic mask tables 207 and 287, one or more combinations of a communication group, a cutoff device, a sleep device, and a non-received frame ID (hereinafter, referred to as a start / stop combination) are set for the slave ECUs 108 and 109 under the control of the zone ECU 104.

[0266] The central ECU 101 is configured to, upon acquiring the activation trigger information for determining the communication group to be put into the wake-up state (that is, the above-mentioned activation group), determine the activation group based on the acquired activation trigger information.

[0267] The central ECU 101 is configured to transmit an NM frame indicating the determined activation group to the zone ECU 104 . The zone ECU 104 is configured to forward the NM frames received from the central ECU 101 to the slave ECUs 108 and 109 .

[0268] In such a communication system 100, the slave ECU 109 can recognize the combination of the above-mentioned cutoff device and the non-received frame ID and the combination of the above-mentioned sleep device and the non-received frame ID by referring to the diagnostic mask table 287 based on the activation group indicated by the NM frame received from the zone ECU 104. Therefore, even if the power supply via the electronic fuse 195 is cut off in the slave ECU 108 and the slave ECU 109 cannot receive a CAN frame from the slave ECU 108, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 109 determines that an abnormality such as a communication interruption has occurred in the slave ECU 108. Furthermore, even if the slave ECU 109 cannot receive a CAN frame from the slave ECU 108 that has entered a sleep state, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 109 determines that an abnormality such as a communication interruption has occurred in the slave ECU 108. This allows the communication system 100 to improve the abnormality detection accuracy.

[0269] In the embodiment described above, S320 corresponds to the processing performed by the group determination unit, S330 corresponds to the processing performed by the activation group transmission unit, and S420 corresponds to the processing performed by the frame forwarding unit.

[0270] [Seventh embodiment] A seventh embodiment of the present disclosure will be described below with reference to the drawings. In the seventh embodiment, differences from the fifth embodiment will be described. The same reference numerals will be used to designate the same configurations.

[0271] As shown in FIG. 33, the communication system 100 of the seventh embodiment is different from the fifth embodiment in that the diagnostic mask table 167 is omitted in the storage unit 158 ​​of the central ECU 101.

[0272] As shown in FIG. 34, the fifth embodiment differs from the sixth embodiment in that the storage unit 194 of the zone ECU 104 stores a diagnostic mask table 207 similar to that of the sixth embodiment. The fifth embodiment differs from the sixth embodiment in that the storage unit 214 of the zone ECU 105 stores a diagnostic mask table 227 similar to that of the sixth embodiment.

[0273] As shown in FIG. 35, the fifth embodiment differs from the sixth embodiment in that the storage unit 234 of the zone ECU 106 stores a diagnostic mask table 247 similar to that of the sixth embodiment. The fifth embodiment differs from the sixth embodiment in that the storage unit 254 of the zone ECU 107 stores a diagnostic mask table 267 similar to that of the sixth embodiment.

[0274] Also, the fifth embodiment differs from the fifth embodiment in that the central management process and the zone management process have been changed. Next, the procedure of the central management process of the seventh embodiment will be described.

[0275] As shown in FIG. 36, the central management process of the seventh embodiment differs from that of the fifth embodiment in that the process of S632 is executed instead of S630. That is, when the process of S620 ends, in S632, the CPU 161 refers to the activation table 165 based on the activation group determined in S620, and generates an NM frame. The CPU 161 transmits the generated NM frame to the zone ECUs 104, 105, 106, and 107, and proceeds to S640.

[0276] Next, the procedure of the zone management process of the seventh embodiment will be described. When the zone management process is executed, the CPU 201, 221, 241, 261 determines whether or not an NM frame has been received in S910, as shown in Fig. 37. If an NM frame has not been received, the CPU 201, 221, 241, 261 ends the zone management process.

[0277] On the other hand, when an NM frame is received, the CPU 201, 221, 241, 261 generates diagnostic mask information based on the activation group indicated by the NM frame at S420 by referring to the diagnostic mask table 207, 227, 247, 267. The CPU 201, 221, 241, 261 transmits the generated diagnostic mask information to the slave ECUs under its control, and also transmits the generated diagnostic mask information to other zone ECUs via the central ECU 101.

[0278] In step S930, the CPU 201, 221, 241, or 261 sets a diagnostic mask based on the received NM frame by referring to the diagnostic mask table 207, 227, 247, or 267.

[0279] At S940, the CPU 201, 221, 241, 261 determines whether or not the diagnostic mask information transmitted from another zone ECU has been received. If the diagnostic mask information has not been received, the CPU 201, 221, 241, 261 ends the zone management process.

[0280] On the other hand, when the diagnostic mask information is received, the CPU 201, 221, 241, 261 transfers the received diagnostic mask information to the slave ECU under control in S950.

[0281] In step S960, the CPUs 201, 221, 241, and 261 refer to the diagnostic mask information transmitted from the other zone ECUs and perform additional setting of the diagnostic mask. For example, the CPU 201 can refer to the diagnosing mask table 207 and generate diagnosing mask information for the slave ECUs 108, 109, and 118. However, since the CPU 201 cannot generate diagnosing mask information for slave ECUs other than the slave ECUs 108, 109, and 118, the CPU 201 sets the diagnosing masks using diagnosing mask information transmitted from other zone ECUs.

[0282] When the CPUs 201, 221, 241, and 261 have set the diagnostic mask information for all the slave ECUs, they end the zone management process. The zone ECU 104 of the communication system 100 configured as above stores a diagnostic mask table 207. In the diagnostic mask table 207, one or more combinations of communication groups, cutoff devices, sleep devices, and non-received frame IDs (hereinafter, "activation / stop combinations") are set for the slave ECUs 108 and 109 under the control of the zone ECU 104.

[0283] The central ECU 101 is configured to, upon acquiring the activation trigger information, determine an activation group based on the acquired activation trigger information. The central ECU 101 is configured to transmit an NM frame indicating the determined activation group to the zone ECU 104 .

[0284] The zone ECU 104 is configured to transmit a start / stop combination corresponding to the start group indicated by the NM frame from the central ECU 101 as diagnostic mask information to the slave ECUs 108, 109, and 118. The zone ECU 104 also transmits this diagnostic mask information to the other zone ECUs 105, 106, and 107 via the central ECU 101. The zone ECU 104 sets a diagnostic mask based on this diagnostic mask information.

[0285] When the zone ECU 104 receives the diagnostic mask information transmitted from the other zone ECUs 105, 106, and 107, the zone ECU 104 transmits the diagnostic mask information to the slave ECUs 108, 109, and 118. The zone ECU 104 additionally sets a diagnostic mask based on the received diagnostic mask information.

[0286] The slave ECUs 108, 109, and 118 use the diagnostic mask information transmitted from the zone ECU 104 to set and add diagnostic masks. In such a communication system 100, the slave ECU 109 can recognize a combination of a cutoff device and a non-received frame ID and a combination of a sleep device and a non-received frame ID based on the diagnostic mask information received from the zone ECU 104. Therefore, even if the power supply to the slave ECU 108 via the electronic fuse 195 is cut off and the slave ECU 109 cannot receive a CAN frame from the slave ECU 108, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 108 determines that an abnormality such as a communication interruption has occurred. Furthermore, even if the slave ECU 109 cannot receive a CAN frame from the slave ECU 108 that has entered a sleep state, the slave ECU 109 can suppress the occurrence of a situation in which the slave ECU 108 determines that an abnormality such as a communication interruption has occurred. This allows the communication system 100 to improve the accuracy of abnormality detection. Note that the zone ECU 104 also achieves the same effect as the slave ECU 109 by setting and additionally setting diagnostic masks based on the diagnostic mask information generated by the zone ECU 104 itself and the diagnostic mask information received from other zone ECUs.

[0287] In the embodiment described above, S620 corresponds to the processing performed by the group determination unit, S632 corresponds to the processing performed by the activation group transmission unit, and S920 corresponds to the processing performed by the sleep mask information transmission unit.

[0288] Although one embodiment of the present disclosure has been described above, the present disclosure is not limited to the above embodiment and can be implemented in various modified forms. [Variation 1] In the above embodiment, power is supplied from the battery 7 via the electronic fuses 15 and 16. However, it is sufficient if the power supply path is configured to be switched between a conductive state and a cut-off state, and for example, it may be a mechanical relay that opens and closes a mechanical contact by electromagnetic action.

[0289] The control unit 11, 31 and the method described in the present disclosure may be realized by a dedicated computer provided by configuring a processor and a memory programmed to execute one or more functions embodied in a computer program. Alternatively, the control unit 11, 31 and the method described in the present disclosure may be realized by a dedicated computer provided by configuring a processor with one or more dedicated hardware logic circuits. Alternatively, the control unit 11, 31 and the method described in the present disclosure may be realized by one or more dedicated computers configured by a combination of a processor and a memory programmed to execute one or more functions and a processor configured with one or more hardware logic circuits. In addition, the computer program may be stored in a computer-readable non-transitory tangible recording medium as instructions executed by a computer. The method for realizing the functions of each unit included in the control unit 11, 31 does not necessarily need to include software, and all of the functions may be realized using one or more hardware.

[0290] In the above embodiments, multiple functions of one component may be realized by multiple components, or one function of one component may be realized by multiple components. Also, multiple functions of multiple components may be realized by one component, or one function realized by multiple components may be realized by one component. Also, part of the configuration of the above embodiments may be omitted. Also, at least part of the configuration of the above embodiments may be added to or substituted for the configuration of another of the above embodiments.

[0291] In addition to the above-mentioned ECUs 2-6, 101, 104-116, 118, the present disclosure can also be realized in various forms, such as a system having the ECUs 2-6, 101, 104-116, 118 as components, a program for causing a computer to function as the ECUs 2-6, 101, 104-116, 118, a non-transient physical recording medium such as a semiconductor memory on which this program is recorded, and a communication management method. [Technical idea disclosed in this specification] [Item 1] A communication system (1) including a plurality of electronic control devices (2 to 6) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first control device (3) that receives power from a power source (7) via a power supply switching unit (15) that is configured to switch between a conductive state that connects a power supply path and a cut-off state that cuts off the power supply path; a second control device (5) connected to the first control device so as to be capable of transmitting and receiving the communication frame; a third control device (2) connected to the first control device and the second control device so as to be capable of transmitting and receiving the communication frame between the first control device and the second control device and configured to control an operation of the power supply switching unit; The first control device and the second control device are a diagnostic mask table (45) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The third control device is a group determination unit (S20) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S30) configured to transmit, to the first control device and the second control device, a management frame which is the communication frame indicating the startup group determined by the group determination unit; A communication system comprising:

[0292] [Item 2] Item 1 is a communication system according to the present invention, The first control device and the second control device are A communication system configured to set a diagnostic mask for the activation group indicated by the received management frame by referring to the diagnostic mask table.

[0293] [Item 3] The communication system according to item 1 or 2, The third control device is configured to transmit the updated diagnostic mask table to the first control device and the second control device when the third control device obtains the updated diagnostic mask table.

[0294] [Item 4] A communication system (1) including a plurality of electronic control devices (2 to 6) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first control device (3) that receives power from a power source (7) via a power supply switching unit (15) that is configured to switch between a conductive state that connects a power supply path and a cut-off state that cuts off the power supply path; a second control device (5) connected to the first control device so as to be capable of transmitting and receiving the communication frame; a third control device (2) connected to the first control device and the second control device so as to be capable of transmitting and receiving the communication frame between the first control device and the second control device and configured to control an operation of the power supply switching unit; The third control device is a diagnostic mask table (27) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; a group determination unit (S220) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a sleep mask information transmission unit (S230) configured to transmit the activation / stop combination corresponding to the activation group determined by the group determination unit as diagnosing mask information to the first control device and the second control device; A communication system comprising:

[0295] [Item 5] Item 5. A communication system according to item 4, The first control device and the second control device are The communication system is configured to set a diagnostic mask based on the received diagnostic mask information.

[0296] [Item 6] The communication system according to item 4 or 5, The diagnosis mask table further includes one or more switching unit combinations, which are combinations of the first control device powered through the power supply switching unit and the non-received frame identification information, The third control device is The communication system further includes a switching mask information transmission unit (S260) configured to transmit the switching unit combination as the diag mask information to the second control device when the power supply switching unit is switched from an on state to an off state.

[0297] [Item 7] A communication system according to any one of items 1 to 6, A communication system including a communication frame in which the wake-up trigger information is configured such that one bit is assigned to each of a plurality of communication groups, and a 1 is set to the bit corresponding to the communication group to be put into the wake-up state.

[0298] [Item 8] A communication system according to any one of items 1 to 6, the activation trigger information includes event occurrence information indicating that a preset event has occurred, The third control device includes an activation table (25) that associates one or more of the events with the activation group, The group determination unit of the third control device is configured to determine the activation group by referring to the activation table when the event occurrence information is acquired.

[0299] [Item 9] A communication system according to any one of items 1 to 8, The power supply switching unit includes an electronic fuse.

[0300] [Item 10] A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that connects a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) that is connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and that is configured to control the operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The zone control device, the first slave control device, and the second slave control device, a diagnostic mask table (207, 287) in which one or more start / stop combinations are set, the combinations being the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device to be put into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The central control device includes: a group determination unit (S320) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S330) configured to transmit, to the zone control device, a management frame that is the communication frame indicating the startup group determined by the group determination unit; The zone control device includes: A communication system comprising a frame forwarding unit (S420) configured to forward the management frame received from the central control device to the first slave control device and the second slave control device.

[0301] [Item 11] A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that connects a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) that is connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and that is configured to control the operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The central control device includes: a diagnostic mask table (167) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device to be put into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; a group determination unit (S620) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a sleep mask information transmission unit (S630) configured to transmit the activation / stop combination corresponding to the activation group determined by the group determination unit as diagnosing mask information to the zone control device; The zone control device includes: A communication system comprising a mask information transfer unit (S720) configured to transfer the diagnostic mask information received from the central control device to the first slave control device and the second slave control device.

[0302] [Item 12] A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that connects a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) that is connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and that is configured to control the operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The zone control device, the first slave control device, and the second slave control device, a diagnostic mask table (207, 287) is stored in which one or more start / stop combinations are set for the first slave control device and the second slave control device subordinate to the zone control device, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The central control device comprises: a group determination unit (S320) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S330) configured to transmit, to the zone control device, a management frame that is the communication frame indicating the startup group determined by the group determination unit; The zone control device includes: A communication system comprising a frame forwarding unit (S420) configured to forward the management frame received from the central control device to the first slave control device and the second slave control device.

[0303] [Item 13] A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that connects a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) that is connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and that is configured to control the operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The zone control device includes: a diagnostic mask table (207) is stored in which one or more start / stop combinations are set for the first slave control device and the second slave control device subordinate to the zone control device, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The central control device includes: a group determination unit (S620) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S632) configured to transmit, to the zone control device, a management frame that is the communication frame indicating the startup group determined by the group determination unit; The zone control device includes: A communication system comprising a sleep mask information transmission unit (S920) configured to transmit the activation / deactivation combination corresponding to the activation group indicated in the management frame received from the central control device as diag mask information to the first slave control device and the second slave control device. [Explanation of symbols]

[0304] 1...communication system, 2...master ECU, 3-6...slave ECU, 7...battery, 11...control unit, 15...electronic fuse, 27...diagnosis mask table, 31...control unit, 45...diagnosis mask table, 100...communication system, 102...central ECU, 104-107...zone ECU, 108-116, 118...slave ECU, 117...battery, 167, 207, 287...diagnosis mask table, 195...electronic fuse

Claims

1. A communication system (1) including a plurality of electronic control devices (2 to 6) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first control device (3) that receives power from a power source (7) via a power supply switching unit (15) that is configured to switch between a conductive state that conducts a power supply path and a cut-off state that cuts off the power supply path; a second control device (5) connected to the first control device so as to be capable of transmitting and receiving the communication frame; a third control device (2) connected to the first control device and the second control device so as to be capable of transmitting and receiving the communication frame between the first control device and the second control device and configured to control an operation of the power supply switching unit; The first control device and the second control device are a diagnostic mask table (45) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The third control device is a group determination unit (S20) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S30) configured to transmit, to the first control device and the second control device, a management frame which is the communication frame indicating the startup group determined by the group determination unit; A communication system comprising:

2. 2. The communication system according to claim 1, The first control device and the second control device are A communication system configured to set a diagnostic mask for the activation group indicated by the received management frame by referring to the diagnostic mask table.

3. A communication system according to claim 1 or 2, The third control device is configured to transmit the updated diagnostic mask table to the first control device and the second control device when the third control device obtains the updated diagnostic mask table.

4. A communication system (1) including a plurality of electronic control devices (2 to 6) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first control device (3) that receives power from a power source (7) via a power supply switching unit (15) that is configured to switch between a conductive state that conducts a power supply path and a cut-off state that cuts off the power supply path; a second control device (5) connected to the first control device so as to be capable of transmitting and receiving the communication frame; a third control device (2) connected to the first control device and the second control device so as to be capable of transmitting and receiving the communication frame between the first control device and the second control device and configured to control an operation of the power supply switching unit; The third control device is a diagnostic mask table (27) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; a group determination unit (S220) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a sleep mask information transmission unit (S230) configured to transmit the activation / stop combination corresponding to the activation group determined by the group determination unit as diagnosing mask information to the first control device and the second control device; A communication system comprising:

5. 5. The communication system according to claim 4, The first control device and the second control device are The communication system is configured to set a diagnostic mask based on the received diagnostic mask information.

6. A communication system according to claim 4 or claim 5, The diagnosis mask table further includes one or more switching unit combinations, which are combinations of the first control device powered through the power supply switching unit and the non-received frame identification information, The third control device is The communication system further includes a switching mask information transmission unit (S260) configured to transmit the switching unit combination as the diagnostic mask information to the second control device when the power supply switching unit switches from an on state to an off state.

7. A communication system according to claim 1 or claim 4, A communication system including a communication frame in which the wake-up trigger information is configured such that one bit is assigned to each of a plurality of communication groups, and a 1 is set to the bit corresponding to the communication group to be put into the wake-up state.

8. A communication system according to claim 1 or claim 4, the activation trigger information includes event occurrence information indicating that a preset event has occurred, The third control device includes an activation table (25) that associates one or more of the events with the activation group; The group determination unit of the third control device is configured to determine the activation group by referring to the activation table when the event occurrence information is acquired.

9. A communication system according to claim 1 or 2, The power supply switching unit includes an electronic fuse.

10. A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that conducts a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The zone control device, the first slave control device, and the second slave control device a diagnostic mask table (207, 287) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The central control device comprises: a group determination unit (S320) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S330) configured to transmit, to the zone control device, a management frame that is the communication frame indicating the startup group determined by the group determination unit; The zone control device includes: A communication system comprising a frame forwarding unit (S420) configured to forward the management frame received from the central control device to the first slave control device and the second slave control device.

11. A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that conducts a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The central control device comprises: a diagnostic mask table (167) in which one or more start / stop combinations are set, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; a group determination unit (S620) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a sleep mask information transmission unit (S630) configured to transmit the activation / stop combination corresponding to the activation group determined by the group determination unit as diagnosing mask information to the zone control device; The zone control device includes: A communication system comprising a mask information transfer unit (S720) configured to transfer the diagnostic mask information received from the central control device to the first slave control device and the second slave control device.

12. A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that conducts a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The zone control device, the first slave control device, and the second slave control device a diagnostic mask table (207, 287) is stored in which one or more start / stop combinations are set for the first slave control device and the second slave control device subordinate to the zone control device, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The central control device comprises: a group determination unit (S320) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S330) configured to transmit, to the zone control device, a management frame that is the communication frame indicating the startup group determined by the group determination unit; The zone control device includes: A communication system comprising a frame forwarding unit (S420) configured to forward the management frame received from the central control device to the first slave control device and the second slave control device.

13. A communication system (100) including a plurality of electronic control devices (101 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, Each of the plurality of electronic control devices belongs to at least one of a plurality of communication groups; the communication system is configured to be able to collectively switch one or more of the electronic control devices belonging to each communication group between a wakeup state and a sleep state, for each communication group individually; The plurality of electronic control devices include a first slave control device (108) that receives power from a power source (117) via a power supply switching unit (195) that is configured to switch between a conductive state that conducts a power supply path and a cut-off state that cuts off the power supply path; a second slave control device (109) connected to the first slave control device so as to be capable of transmitting and receiving the communication frame; a zone control device (104) connected to the first slave control device and the second slave control device so as to be capable of transmitting and receiving the communication frame between the first slave control device and the second slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The zone control device includes: a diagnostic mask table (207) is stored in which one or more start / stop combinations are set for the first slave control device and the second slave control device subordinate to the zone control device, the start / stop combinations being combinations of the communication group, a cutoff device which is the electronic control device to which power supply via the power supply switching unit is cut off, a sleep device which is the electronic control device that goes into the sleep state, and non-received frame identification information which is identification information of the communication frame that is not received; The central control device comprises: a group determination unit (S620) configured to, when acquiring activation trigger information for determining an activation group that is the communication group to be put into the wake-up state, determine the activation group based on the acquired activation trigger information; a startup group transmission unit (S632) configured to transmit, to the zone control device, a management frame that is the communication frame indicating the startup group determined by the group determination unit; The zone control device includes: A communication system comprising a sleep mask information transmitting unit (S920) configured to transmit the activation / stop combination corresponding to the activation group indicated in the management frame received from the central control device as diag mask information to the first slave control device and the second slave control device.

Images