Communication system, electronic control device, and management device

Abstract

To individually manage activation of a plurality of electronic control devices in a communication system having the plurality of electronic control devices.SOLUTION: A communication system 1 comprises ECUs 2 to 6 connected to each other so that they can transmit and receive communication frames. Each of slave ECUs 3 and 5 receives power supply from a battery 7 via relays 25 and 26. The master ECU 2 sets the relays 25 and 26 to any one of a conduction state and a disconnection state on the basis of an NM frame. The NM frame is the communication frame containing two pieces of switching information indicating whether or not to set the relays 25 and 26 to the conduction state, and two pieces of activation information indicating whether or not to activate the slave ECUs 4 and 6 that are not connected to the relays 25 and 26.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a communication system including a plurality of electronic control devices. [Background technology]

[0002] Patent document 1 describes an in-vehicle network system that includes a power supply relay that individually switches the power supply of each of a plurality of electronic control devices on / off, determines the control content for switching the power supply of a specific electronic control device on / off for a specific electronic control device that corresponds to a scene identified based on the vehicle situation, and uses the power supply relay to switch the power supplied to the specific electronic control device on / off based on the determined control content. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2015-81021 A Summary of the Invention [Problem to be solved by the invention]

[0004] As a result of detailed investigation by the inventors, the following problem was found. In the in-vehicle network system described in Patent Document 1, all of the electronic control devices connected to the management device receive power from a power source via a relay. Therefore, in the technology described in Patent Document 1, in a communication system in which electronic control devices connected to relays and electronic control devices not connected to relays are mixed, it is not possible to individually manage the startup of multiple electronic control devices.

[0005] An object of the present disclosure is to individually manage the startup of a plurality of electronic control devices in a communication system including the plurality of electronic control devices. [Means for solving the problem]

[0006] One aspect of the present disclosure is a communication system (1, 100) including a plurality of electronic control devices (2 to 6, 101, 104 to 116, 118) connected to be capable of transmitting and receiving communication frames. The plurality of electronic control devices include a power supply switching device (3, 5, 13, 14, 108, 109) and a management device (2, 101, 104).

[0007] The power supply switching device receives power from a power source (7, 117) via a power supply switching unit (25, 26, 195, 196) configured to switch between a conductive state that connects the power supply path (10, 12, 127, 128) and a cut-off state that cuts off the power supply path.

[0008] The management device is connected to the plurality of electronic control devices so as to be able to transmit and receive communication frames therebetween, and is configured to control the operation of one or more power supply switching units. At least one of the plurality of electronic control devices includes a frame generating unit (21, 41, 151, 191, 211, 231, 251, 271, 291, 311, 331) and a frame transmitting unit (22 to 23, 42, 154 to 157, 192 to 193, 212 to 213, 232 to 233, 252 to 253, 272, 292, 312, 332).

[0009] The frame generating unit is configured to generate a management frame according to the service when it determines to provide a preset service based on the detected event. The management frame is a communication frame including one or more pieces of switching information indicating whether or not to set each of the one or more power supply switching units to a conductive state, and one or more pieces of activation information indicating whether or not to activate each of the one or more continuous power supply devices as an electronic control device that is not connected to the power supply switching unit.

[0010] The frame transmitter is configured to transmit a management frame. The management device includes a power supply control unit (S30, S130). The power supply control unit is configured to set each of the one or more power supply switching units to either a conductive state or a cut-off state based on the management frame.

[0011] In the communication system of the present disclosure configured as above, the management device can set one or more power supply switching units to either a conductive state or a cut-off state based on one or more switching information included in the management frame. Furthermore, in the communication system of the present disclosure, the management device can instruct one or more continuous power supply devices whether to start them up based on one or more startup information included in the management frame. Therefore, the communication system of the present disclosure can individually manage the startup of multiple electronic control units when electronic control units connected to a power supply switching unit and electronic control units not connected to a power supply switching unit are mixed.

[0012] Another aspect of the present disclosure is a communication system (1, 100) including a plurality of electronic control devices (2 to 6, 101, 104 to 116, 118) connected to each other so as to be able to transmit and receive communication frames.

[0013] The plurality of electronic control devices include a power supply switching device (3, 5, 108, 109) and a management device (2, 101, 104). The power supply switching device receives power from a power source (7, 117) via a power supply switching unit (25, 26, 195, 196) configured to switch between a conductive state that connects the power supply path (10, 12, 127, 128) and a cut-off state that cuts off the power supply path.

[0014] The management device is connected to the plurality of electronic control devices so as to be able to transmit and receive communication frames therebetween, and is configured to control the operation of one or more power supply switching units. The management device includes a power supply control unit (S30, S130). Upon receiving the management frame, the power supply control unit is configured to set each of the one or more power supply switching units to either a conductive state or a cut-off state based on the management frame. The management frame is a communication frame including one or more pieces of switching information indicating whether or not each of the one or more power supply switching units is to be set to a conductive state, and one or more pieces of activation information indicating whether or not an electronic control device that is not connected to the power supply switching unit is to be activated as a continuous power supply device for each of the one or more continuous power supply devices.

[0015] In the communication system of the present disclosure configured as above, the management device can set one or more power supply switching units to either a conductive state or a cut-off state based on one or more switching information included in the management frame. Furthermore, in the communication system of the present disclosure, the management device can instruct one or more continuous power supply devices whether to start them up based on one or more startup information included in the management frame. Therefore, the communication system of the present disclosure can individually manage the startup of multiple electronic control units when electronic control units connected to a power supply switching unit and electronic control units not connected to a power supply switching unit are mixed.

[0016] Yet another aspect of the present disclosure is an electronic control device (2-6, 101, 104-116, 118) included in a communication system (1, 100) having one or more power supply switching units (25, 26, 195, 196) configured to switch between a conductive state that connects a power supply path (10, 12, 127, 128) from a power source (7, 117) to a power supply switching device (3, 5, 108, 109) and a cut-off state that cuts off the power supply path.

[0017] The electronic control device includes a frame generating unit (21, 41, 151, 191, 211, 231, 251, 271, 291, 311, 331) and a frame transmitting unit (22 to 23, 42, 154 to 157, 192 to 193, 212 to 213, 232 to 233, 252 to 253, 272, 292, 312, 332). When it is determined to provide a preset service, the frame generating unit is configured to generate a management frame, which is a communication frame including one or more pieces of switching information indicating whether or not to set each of one or more power supply switching units to a conductive state and one or more pieces of activation information indicating whether or not to activate each of one or more continuous power supply devices not connected to the power supply switching unit, in accordance with the service. The communication unit is configured to transmit the management frame.

[0018] The electronic control device of the present disclosure configured in this manner is a device used in the communication system of the present disclosure, and can obtain the same effects as the communication system of the present disclosure. Yet another aspect of the present disclosure is a management device (2) configured to control operation of one or more power supply switching units (25, 26) that are connected to a plurality of electronic control devices (2-6) so as to be able to transmit and receive communication frames therebetween and are configured to switch between a conductive state that connects a power supply path (10, 12) from a power source (7) to a power supply switching device (3, 5) and a cut-off state that cuts off the power supply path, and includes a power supply control unit (S30).

[0019] The management device of the present disclosure configured in this manner is a device used in the communication system of the present disclosure, and can obtain the same effects as the communication system of the present disclosure. [Brief description of the drawings]

[0020] [Figure 1] FIG. 1 is a block diagram showing a configuration of a communication system. [Diagram 2] FIG. 1 is a diagram showing the structure of an NM frame. [Diagram 3] 13 is a flowchart showing a management process. [Figure 4]11A and 11B are diagrams showing the configurations of a startup table and a diagnostic mask table. [Diagram 5] FIG. 11 is a block diagram showing a configuration of a communication system according to a second embodiment. [Figure 6] FIG. 2 is a diagram showing a correspondence relationship between control objects and clusters. [Figure 7] FIG. 13 is a block diagram showing a configuration of a communication system according to a third embodiment. [Figure 8] FIG. 11 is a block diagram showing the configuration of a central ECU and an upstream power distribution unit according to a third embodiment. [Figure 9] FIG. 11 is a first block diagram showing a configuration of a zone ECU according to a third embodiment. [Figure 10] FIG. 13 is a second block diagram showing the configuration of the zone ECU according to the third embodiment. [Figure 11] FIG. 11 is a block diagram showing a configuration of a slave ECU according to a third embodiment. [Figure 12] 13 is a flowchart showing a central management process. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0021] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. A communication system 1 according to the present embodiment is mounted on a vehicle, and as shown in Fig. 1, includes a master ECU 2, slave ECUs 3, 4, 5, and 6, and a battery 7. ECU is an abbreviation for Electronic Control Unit.

[0022] The master ECU 2 and the slave ECUs 3, 4, and 5 are connected to each other via a communication bus 8 so as to be able to communicate data with each other. The master ECU 2 and the slave ECU 6 are connected to each other via a communication bus 9 so as to be able to communicate data with each other.

[0023] The battery 7 supplies power to each part of the vehicle at a DC battery voltage (for example, 12 V). The master ECU 2 and the slave ECUs 3 to 6 operate by receiving power from the battery 7.

[0024] The master ECU 2 includes a control unit 21, CAN communication units 22 and 23, a storage unit 24, and relays 25 and 26. CAN is an abbreviation for Controller Area Network. Note that the communication protocol of the communication system 1 is not limited to CAN.

[0025] The control unit 21 is an electronic control device mainly composed of a microcomputer including a CPU 31, a ROM 32, a RAM 33, etc. Various functions of the microcomputer are realized by the CPU 31 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 32 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 31 may be configured as hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 21 may be one or more.

[0026] The CAN communication unit 22 communicates with the slave ECUs 3, 4, and 5 connected to the communication bus 8 by transmitting and receiving communication frames based on the CAN communication protocol. The CAN communication unit 23 communicates with the slave ECU 6 connected to the communication bus 9 by transmitting and receiving communication frames based on the CAN communication protocol. Hereinafter, a CAN communication frame will be referred to as a CAN frame.

[0027] The storage unit 24 is a storage device for storing various data, and stores a management table 35 and a diagnostic mask table 36, which will be described later. The relay 25 is disposed on a power supply path 10 between the battery 7 and the slave ECU 3. The relay 26 is disposed on a power supply path 12 between the battery 7 and the slave ECU 5. The slave ECU 4 receives power from the battery 7 via a power supply path 11.

[0028] The relay 25 is configured to switch between a conductive state in which the power supply path 10 is conductive and a cut-off state in which the power supply path 10 is cut off in response to a command from the control unit 21 . Relay 26 is configured to switch between a conductive state in which power supply path 12 is connected and a cut-off state in which power supply path 12 is cut off in response to a command from control unit 21. Hereinafter, the conductive state will also be referred to as an on state, and the cut-off state will also be referred to as an off state.

[0029] Each of the slave ECUs 3 to 6 includes a control unit 41, a CAN communication unit 42, and a storage unit 43. The control unit 41 is an electronic control device mainly composed of a microcomputer including a CPU 51, a ROM 52, a RAM 53, etc. Various functions of the microcomputer are realized by the CPU 51 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 52 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 51 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 41 may be one or more.

[0030] The CAN communication units 42 of the slave ECUs 3 to 5 communicate with the communication devices connected to the communication bus 8 (that is, the master ECU 2 and the slave ECUs 3 to 5) based on the CAN communication protocol.

[0031] The CAN communication unit 42 of the slave ECU 6 communicates with a communication device (that is, the master ECU 2) connected to the communication bus 9 based on the CAN communication protocol. The storage unit 43 is a storage device for storing various data. The storage unit 34 stores a management table 55 and a diagnostic mask table 56, which will be described later.

[0032] A CAN frame consists of a start of frame, an arbitration field, a control field, a data field, a CRC field, an ACK field, and an end of frame. The arbitration field consists of an 11-bit or 29-bit identifier (i.e., ID) and a 1-bit RTR bit.

[0033] The 11-bit identifier used in CAN communication is called CANID. The CANID is preset based on the contents of the data included in the CAN frame, the sender of the CAN frame, the destination of the CAN frame, etc.

[0034] The data field is a payload made up of first data, second data, third data, fourth data, fifth data, sixth data, seventh data, and eighth data, each of which is 8 bits (i.e., 1 byte).

[0035] The master ECU 2 and the slave ECUs 3, 4, 5, 6 are configured to switch between a wake-up state (i.e., an active state) and a sleep state (i.e., a dormant state). The wake-up state is a normal operating state in which functions assigned to the ECUs can be used without restrictions. The sleep state is a low-power operating state in which the available functions are restricted.

[0036] In the communication system 1, an NM frame, which is a CAN frame including switching information and startup information, is used to switch the relays 25, 26 to an ON state or an OFF state, and to switch the slave ECUs 4, 6 that are not connected to the relays 25, 26 to a wake-up state or a sleep state. NM is an abbreviation for Network Management.

[0037] The switching information is information indicating whether or not to turn on the relays 25, 26. The start-up information is information indicating whether or not to put the slave ECUs 4, 6 into a wake-up state. The switching information and start-up information are set, for example, as shown in Fig. 2. DLC is an abbreviation for Data Length Code, and is an area that indicates the size of the data field in the CAN frame in bytes. In other words, the switching information and start-up information are stored in the data field of the CAN frame. For simplicity of explanation, a case where DLC is 1 byte (i.e., 8 bits) is shown here.

[0038] Switching information for relay 25, switching information for relay 26, start-up information for slave ECU 4, and start-up information for slave ECU 6 are assigned to each bit of the 8-bit data. In the NM frame shown in FIG. 2, switching information for relay 25 is assigned to the most significant bit of the first data, startup information for slave ECU 4 is assigned to the most significant second bit of the first data, switching information for relay 26 is assigned to the most significant third bit of the first data, and startup information for slave ECU 6 is assigned to the most significant fourth bit of the first data.

[0039] In the NM frame shown in FIG. 2, the most significant bit of the first data is set to 1, and therefore the NM frame shown in FIG. 2 instructs to turn on the relay 25.

[0040] In addition, in the NM frame shown in FIG. 2, since 0 is set in the second most significant bit of the first data, the NM frame shown in FIG. 2 instructs the slave ECU 4 to go into a sleep state.

[0041] In addition, in the NM frame shown in FIG. 2, 0 is set in the third most significant bit of the first data, and therefore the NM frame shown in FIG. 2 instructs to turn relay 26 to the OFF state. In addition, in the NM frame shown in FIG. 2, since the fourth most significant bit of the first data is set to 1, the NM frame shown in FIG. 2 instructs the slave ECU 6 to enter a wake-up state.

[0042] 4, the management tables 35, 55 shown in Fig. 1 set a correspondence relationship between the service and the switching information and start information for each of a plurality of services provided to vehicle occupants using the master ECU 2 and the slave ECUs 3 to 6. Note that the management tables 35, 55 of the master ECU 2 and the slave ECUs 3 to 6 do not need to store the switching information and start information for a service for which it is not possible to determine whether the start condition of the service is satisfied based on an event detected by the respective devices.

[0043] In the management tables 35 and 55, for example, for the first service, the switching information for relay 25 is set to the on state, the switching information for relay 26 is set to the off state, the startup information for slave ECU 4 is set to the wake-up state, and the startup information for slave ECU 6 is set to the sleep state.

[0044] In the management tables 35 and 55, for example, for the second service, the switching information for relay 25 is set to the off state, the switching information for relay 26 is set to the on state, the startup information for slave ECU 4 is set to the sleep state, and the startup information for slave ECU 6 is set to the wake-up state.

[0045] By rewriting the management tables 35, 55, it is possible to update the switching information and start-up information contained in the NM frames transmitted by the master ECU 2 and the slave ECUs 3 to 6.

[0046] The management tables 35, 55 may include start-up information of the slave ECUs 3, 5 which receive power from the battery 7 via the relays 25, 26. The diagnostic mask tables 36, 56 shown in Fig. 1 associate, for each service, a slave ECU to which power supply via a relay is cut off (hereinafter, a cut-off ECU), a slave ECU that goes into a sleep state (hereinafter, a sleep ECU), and a CAN ID of a CAN frame that is not received (hereinafter, a non-received frame ID), as shown in Fig. 4. Therefore, in the diagnostic mask tables 36, 56, for one service, one or more combinations of a cut-off ECU and a non-received frame ID and combinations of a sleep ECU and a non-received frame ID are set.

[0047] The diagnostic mask tables 36 and 56 set, for example, a combination of the slave ECU 5 and a first CAN ID and a combination of the slave ECU 6 and a second CAN ID for a first service.

[0048] The diagnostic mask tables 36 and 56 set, for example, a combination of the slave ECU 3 and the third CAN ID and a combination of the slave ECU 4 and the fourth CAN ID for the second service.

[0049] Therefore, when the master ECU 2 and the slave ECUs 3 to 6 detect that the start condition of a service is satisfied, they extract the switching information and start-up information corresponding to the corresponding service from the management tables 35, 55, and generate and transmit an NM frame including the extracted switching information and start-up information. Furthermore, the master ECU 2 and the slave ECUs 3 to 6 extract a combination of a shut-off ECU or sleep ECU corresponding to the corresponding service and a not-received frame ID from the diagnostic mask tables 36, 56, and transmit the extracted combination as diagnostic mask information.

[0050] In addition, when multiple NM frames corresponding to multiple services are being transmitted, the ECU receiving the NM frames turns the relay on with OR (i.e., logical sum) of the switching information, and turns the relay off with AND (i.e., logical product) of the switching information. On the other hand, when the same ECU generates NM frames corresponding to multiple services, the NM frame may be generated and transmitted as a single NM frame corresponding to multiple services, with OR for switching information that turns the relay on and AND for switching information that turns the relay off.

[0051] This allows the master ECU 2 and the slave ECUs 3 to 6 to not regard the communication as being abnormal even when it is determined that communication has been interrupted with respect to the shutdown ECU and the sleep ECU.

[0052] By rewriting the diagnostic mask tables 36, 56, it is possible to update the diagnostic mask information transmitted by the master ECU 2 and the slave ECUs 3 to 6. Next, a description will be given of the procedure of the management process executed by the control unit 21 of the master ECU 2. The management process is a process that is repeatedly executed while the master ECU 2 is running.

[0053] When the management process is executed, the CPU 31 of the control unit 21 determines whether or not an NM frame has been received in S10, as shown in Fig. 3. If an NM frame has not been received, the CPU 31 ends the management process. Note that the master ECU 2 may generate and transmit an NM frame, and in this case, the operation is the same as when an NM frame is received.

[0054] On the other hand, when an NM frame is received, the CPU 31 transfers the received NM frame in S20. That is, the CPU 31 transmits the received NM frame to a slave ECU other than the slave ECU that sent the frame. When a slave ECU that is not connected to the relays 25, 26 (i.e., the slave ECUs 4, 6) receives an NM frame from the master ECU 2, the slave ECUs put their own devices into a wake-up state or a sleep state based on the start-up information that is included in the received NM frame and that corresponds to the own devices. For example, when the start-up information that is included in the received NM frame and that corresponds to the own devices is 1, the slave ECUs 4, 6 put their own devices into a wake-up state.

[0055] In S30, the CPU 31 sets the relays 25 and 26 to the ON or OFF state based on the switching information included in the NM frame received in S10, and ends the management process. For example, when the switching information included in the NM frame received in S10 and corresponding to the relay 25 is 1, the CPU 31 sets the relay 25 to the ON state.

[0056] The communication system 1 thus configured includes ECUs 2 to 6 that are connected so as to be capable of transmitting and receiving CAN frames. The slave ECUs 3 and 5 receive power from the battery 7 via relays 25 and 26 that are configured to switch between a conductive state that connects the power supply paths 10 and 12 and a cut-off state that cuts off the power supply paths 10 and 12, respectively.

[0057] The master ECU 2 is connected to the slave ECUs 3 to 6 so as to be able to transmit and receive CAN frames to and from the slave ECUs 3 to 6, and is configured to control the operations of the relays 25 and . Upon receiving the NM frame, the master ECU 2 is configured to set each of the relays 25, 26 to either a conductive state or a cut-off state based on the NM frame. The NM frame is a CAN frame that includes two pieces of switching information indicating whether or not to set each of the relays 25, 26 to a conductive state, and two pieces of activation information indicating whether or not to activate each of the slave ECUs 4, 6 that are not connected to the relays 25, 26.

[0058] When the master ECU 2 and the slave ECUs 3 to 6 determine that a start condition for a service is satisfied, they are configured to generate and transmit an NM frame including switching information and start information corresponding to the relevant service.

[0059] In such a communication system 1, the master ECU 2 can set the relays 25, 26 to either a conductive state or a cut-off state based on two pieces of switching information included in the NM frame. Furthermore, in the communication system 1, the master ECU 2 can instruct the slave ECUs 4, 6 whether to activate them or not based on two pieces of activation information included in the NM frame. Therefore, the communication system 1 can individually manage the activation of multiple ECUs when ECUs connected to relays and ECUs not connected to relays are mixed.

[0060] Furthermore, when the master ECU 2 receives an NM frame, the master ECU 2 is configured to transfer the received NM frame to the slave ECUs 4 and 6. In such a communication system 1, the master ECU 2 can instruct the slave ECUs 4 and 6 as to whether or not to start up by transferring the received NM frame. Therefore, the communication system 1 can simplify the process of instructing whether or not to start up, and can reduce the processing load of the master ECU 2.

[0061] Furthermore, the master ECU 2 includes a management table 35, and each of the slave ECUs 3 to 6 includes a management table 55. The management tables 35 and 55 indicate, for each of a plurality of preset services, a correspondence relationship between the service and two pieces of switching information and two pieces of startup information. This allows the communication system 1 to update the switching information and startup information included in the NM frames transmitted by the master ECU 2 and the slave ECUs 3 to 6 by rewriting the management tables 35 and 55.

[0062] In the above-described embodiment, the ECUs 2 to 6 correspond to a plurality of electronic control devices, the relays 25 and 26 correspond to a power supply switching unit, the battery 7 corresponds to a power source, the slave ECUs 3 and 5 correspond to a power supply switching device, and the master ECU 2 corresponds to a management device.

[0063] Moreover, the slave ECUs 4 and 6 correspond to continuous power supply devices, the NM frame corresponds to a management frame, S30 corresponds to processing as a power supply control unit, and S20 corresponds to processing as a transfer unit.

[0064] Moreover, the control units 21 and 41 correspond to a frame generating unit, and the CAN communication units 22, 23, and 42 correspond to a frame transmitting unit. [Second embodiment] A second embodiment of the present disclosure will be described below with reference to the drawings. In the second embodiment, only the parts different from the first embodiment will be described. The same reference numerals will be used to designate the same configurations.

[0065] As shown in FIG. 5, the communication system 1 of the second embodiment differs from the first embodiment in that a smart sensor 13, a smart actuator 14, a wireless device 15, and relays 27 and 28 are added.

[0066] The smart sensor 13 is a sensor equipped with a CAN communication unit 45. The smart actuator 14 is an actuator equipped with a CAN communication unit 46 . The CAN communication units 45 and 46 communicate with devices connected to the communication bus 8 by transmitting and receiving communication frames based on the CAN communication protocol.

[0067] The wireless device 15 is a wireless communication device for performing wireless communication with an external communication device installed outside the vehicle. The wireless device 15 is, for example, a DCM. DCM is an abbreviation for Data Communication Module.

[0068] The relay 27 is disposed on the power supply path 16 between the battery 7 and the smart sensor 13. The relay 28 is disposed on the power supply path 17 between the battery 7 and the smart actuator 14.

[0069] Each of the relays 27 and 28 is configured to switch between a conductive state in which the power supply paths 16 and 17 are conductive and a cut-off state in which the power supply paths 16 and 17 are cut off in response to a command from the control unit 21 .

[0070] Hereinafter, the master ECU 2, the slave ECUs 3 to 6, the smart sensor 13 and the smart actuator 14 will also be collectively referred to as nodes. (Prerequisite) The master ECU 2, the slave ECU 4, and the slave ECU 6 are always powered by the battery 7 without using a relay, and can switch to a wake-up state or a sleep state independently. Hereinafter, the master ECU 2, the slave ECU 4, and the slave ECU 6 are also referred to as NM-equipped nodes. An NM-equipped node is a node that has a function of generating an NM frame.

[0071] The slave ECU 3, the slave ECU 5, the smart sensor 13, and the smart actuator 14 are powered via relays, and cannot be switched to a wake-up state or a sleep state by themselves. That is, they enter a wake-up state when the relay is turned on, and enter a sleep state when the relay is turned off. Hereinafter, the slave ECU 3, the slave ECU 5, the smart sensor 13, and the smart actuator 14 are also referred to as non-NM nodes. A non-NM node is a node that does not have the function of generating and interpreting an NM frame.

[0072] The non-NM node includes at least one of an actuator and a sensor in addition to an ECU having a control function. The power supply paths of the non-NM nodes are connected to relays 25, 26, 27, and 28 of the master ECU 2, respectively.

[0073] A non-NM node and a relay may be connected on a one-to-one basis, or multiple non-NM nodes belonging to the same cluster (i.e., a group that starts up simultaneously) may be connected under one relay.

[0074] The master ECU 2 and the NM-equipped node have a CAN communication unit and are capable of transmitting and receiving NM frames. An NM-equipped node determines whether it is in a wake-up state or a sleep state based on the NM frames it sends and receives via the communication bus.

[0075] The master ECU 2 turns on or off the relays 25, 26, 27, and 28 to which the non-NM nodes are connected, based on the NM frame transmitted and received via the communication bus. The payload (i.e., data area) of the NM frame transmitted and received by the master ECU 2 and the NM-equipped node stores one or more bits of information indicating which cluster to start.

[0076] One or more master ECUs (ie, ECUs with built-in relays) are installed in a vehicle. As shown in Figure 6, one or more nodes belonging to each cluster are determined in advance by the system developer. Although it is possible to assign a cluster to each node, multiple nodes can be registered in one cluster. When the bit corresponding to each cluster is active (i.e., bit=1), the cluster wakes up. In the case of the master ECU, waking up means turning on the relay.

[0077] (First startup example) The first activation example is an operation example in which a fault diagnosis of the slave ECU 3 is performed in response to a request from the cloud.

[0078] First, a connection request is sent from the base station (that is, the cloud) to the vehicle's wireless device 15. Next, when the wireless device 15 judges that the connection is valid, it notifies the master ECU 2 of the event received from the cloud.

[0079] Next, the master ECU 2 determines a service called "fault diagnosis of the slave ECU 3" based on the event, and generates an NM frame in which the bit of the third cluster to which only the slave ECU 3 belongs is enabled in order to start the slave ECU 3.

[0080] Next, the master ECU 2 transmits the generated NM frame onto the communication buses 8 and 9. Since there are no NM-equipped nodes belonging to the third cluster on communication buses 8 and 9, there are no changes in the devices on the communication buses.

[0081] Next, the master ECU 2 executes processing based on the NM frame in the control unit 21, assuming that it has received an NM frame in which the bit of the third cluster is enabled at the same time as the above. Next, the control unit 21 of the master ECU 2 determines a wake-up instruction to the third cluster based on the NM frame, and turns on the relay 25 since the third cluster includes the relay 25.

[0082] When the relay 25 is turned on, power is supplied to the downstream slave ECU 3 and the slave ECU 3 is started up. The master ECU 2 waits for the slave ECU 3 to start up, requests a diagnostic code from the slave ECU 3, and transmits a response from the slave ECU 3 to the base station via the wireless device 15.

[0083] (Second startup example) The second activation example is an operation example in which a fault diagnosis of the slave ECU 4 is performed in response to a request from the cloud.

[0084] First, a connection request is sent from the base station (that is, the cloud) to the vehicle's wireless device 15. Next, when the wireless device 15 judges that the connection is valid, it notifies the master ECU 2 of the event received from the cloud.

[0085] Next, the master ECU 2 determines a service called "fault diagnosis of the slave ECU 4" based on the event, and generates an NM frame in which the bit of the fourth cluster to which only the slave ECU 4 belongs is enabled in order to start the slave ECU 4.

[0086] Next, the master ECU 2 transmits the generated NM frame onto the communication buses 8 and 9. Since the slave ECU 4 is present on the communication bus 8 as a node belonging to the fourth cluster, the slave ECU 4 wakes up.

[0087] Next, the master ECU 2 executes processing based on the NM frame in the control unit 21, assuming that it has received an NM frame in which the bit of the fourth cluster is enabled at the same time as the above. Next, even if the control unit 21 of the master ECU 2 determines to issue a wake-up instruction to the fourth cluster based on the NM frame, the fourth cluster does not include the corresponding relay, so the control unit 21 ignores the instruction.

[0088] When the slave ECU 4 is started, the master ECU 2 requests a diagnostic code from the slave ECU 4 via the communication bus 8, and transmits a response from the slave ECU 4 to the base station via the wireless device 15.

[0089] (Third startup example) The third activation example is an operation example in which a user activates a remote air conditioning device using a smartphone. First, the user issues a command to turn on the vehicle air conditioner via the smartphone.

[0090] When the wireless device 15 receives the instruction signal from the smartphone and determines that the instruction signal is valid, the wireless device 15 transmits the event received from the cloud (i.e., the instruction signal) to the master ECU 2.

[0091] The master ECU2 determines the "air conditioning service" based on the event, and generates an NM frame in which the second cluster is activated as the air conditioning cluster. The master ECU 2 periodically transmits the generated NM frame to the communication buses 8 and 9 until an instruction to stop the air conditioner is received. If it is desired to continue the active state, it is necessary to continue transmitting the NM frame periodically. At the same time, the control unit 21 of the master ECU 2 executes processing based on the NM frame.

[0092] When an NM frame that activates the second cluster occurs on the communication bus 8, the slave ECU 4 (that is, the air conditioner ECU) that belongs to the second cluster receives the NM frame and wakes up in accordance with the received NM frame.

[0093] When the control unit 21 of the master ECU 2 detects that the second cluster is active, it turns on the relays 27 and 28 that belong to the second cluster. When relay 27 and relay 28 are in the ON state, power is supplied to smart sensor 13 (i.e., temperature sensor) and smart actuator 14 (i.e., compressor).

[0094] As a result of the above, power supply to the air conditioner ECU, smart sensor 13, and smart actuator 14 begins, making it possible to turn on the in-vehicle air conditioner. When the user issues an instruction to turn off the in-vehicle air conditioner via the smartphone, the master ECU 2 stops the periodic transmission of the NM frame.

[0095] When the NM frame is interrupted, the slave ECU 4 transitions to a sleep state, and the master ECU 2 turns off the relays 27 and 28. This stops the vehicle air conditioner. (4th startup example) The fourth activation example is an operation example in which the slave ECU 4 activates the vehicle air conditioner.

[0096] Since the slave ECU 4 is always supplied with power even when the vehicle is stopped, it is possible for the slave ECU 4 to wake up when it detects an input of a signal indicating that the start switch connected to the slave ECU 4 has been turned on, even when the slave ECU 4 is in sleep mode.

[0097] When the woken up slave ECU 4 confirms an input to start the in-vehicle air conditioner, it generates an NM frame with the bit corresponding to the second cluster turned on. The slave ECU 4 transmits the generated NM frame via the CAN communication unit 42. When the master ECU 2 receives this NM frame, the master ECU 2 turns on the relays 27 and 28 belonging to the second cluster.

[0098] When the start switch of the vehicle air conditioner is turned off, the slave ECU 4 stops transmitting NM frames and enters a sleep state after a while. When the NM frame is discontinued, the master ECU 2 turns off the relays 27 and 28 after a while and ends the control.

[0099] If the master ECU 2 determines that control needs to continue even after the transmission of the NM frame has stopped, the master ECU 2 transmits an NM frame with the bit corresponding to the second cluster turned on. This allows the slave ECU 4 and the relays 27 and 28 to maintain their active states until the transmission of the NM frame generated by the master ECU 2 stops.

[0100] (Power shutdown process extension) NM-equipped nodes are supplied with power without going through a relay, and can execute shutdown processing to transition to a low power consumption state. However, non-NM-equipped nodes cannot execute shutdown processing if the power supply is suddenly cut off by turning off the relay. Examples of shutdown processing include saving logs during operation, saving diagnostics, saving learning results, and setting input / output devices to their initial positions for the next startup.

[0101] The communication system 1 of the second embodiment can take the following first, second, third and fourth measures in order to secure time for the termination process. (First Measure) Before turning off the relays, the master ECU 2 controlling the relays 25, 26, 27, and 28 notifies the subordinate nodes (i.e., the slave ECUs 3 and 5, the smart sensor 13, and the smart actuator 14) of a relay-off notice message via the CAN communication unit 22. The master ECU 2 also stops transmission of CAN communications other than emergency communications. The notice message may have a predetermined CAN ID and data pattern.

[0102] The master ECU 2 manages the time required for the termination process of the nodes under its control (i.e., the slave ECUs 3 and 5, the smart sensor 13, and the smart actuator 14). After sending the above-mentioned notice message, the master ECU 2 measures the elapsed time, and when the above-mentioned necessary time for the termination process is exceeded, it turns off the relays 25, 26, 27, and 28. When the non-NM-equipped node receives the relay-off notice message, it stops communication, executes the termination process, and waits for the power supply to be cut off.

[0103] (Second Measure) Before turning off the relay, the master ECU 2 notifies subordinate nodes (i.e., the slave ECUs 3 and 5, the smart sensor 13, and the smart actuator 14) of a relay-off advance notice message via the CAN communication unit 22. The master ECU 2 also stops transmission of CAN communications other than emergency communications. The advance notice message may have a predetermined CAN ID and data pattern.

[0104] The master ECU 2 manages the time required for the termination process of each of the subordinate nodes (i.e., the slave ECUs 3 and 5, the smart sensor 13, and the smart actuator 14). After sending the above-mentioned notice message, the master ECU 2 measures the elapsed time, and if the above-mentioned required termination process time is exceeded, it sequentially turns off the relays corresponding to the nodes. When a non-NM-equipped node receives the relay-off notice message, it stops communication, executes termination process, and waits for the power supply to be cut off.

[0105] (Third Measure) The master ECU 2 and the NM-equipped node transmit and receive NM frames to each other, thereby enabling them to synchronize their sleep timing.

[0106] When the sleep condition is satisfied due to the end of the service it provides, the master ECU 2 stops communication including NM frames. The master ECU 2 then turns off the relay when the total time (e.g., 5 seconds) of the time it takes for the non-NM node to determine that NM frames have been discontinued (e.g., 3 seconds) and the time required for the non-NM node to complete its termination process (e.g., 2 seconds) has elapsed. The non-NM node monitors NM frames on the communication bus 8, and when it detects that NM frames have been discontinued for a certain period of time (e.g., 3 seconds), it stops transmission from its own node onto the communication bus 8, executes termination processing, and waits for the power supply to be cut off.

[0107] In addition, if a non-NM node is not likely to be able to complete the termination process within a predetermined required time, it can send a predetermined command to the master ECU 2 to request an extension of the time until the relay is turned off.

[0108] (Fourth Measure) The master ECU 2 and the NM-equipped node transmit and receive NM frames to each other, thereby enabling them to synchronize their sleep timing.

[0109] When the sleep condition of a specific cluster is satisfied with the end of a service provided, the master ECU2 sets the bit corresponding to the cluster in the NM frame to 0. Then, when a certain time (e.g., 3 seconds) has elapsed since all the bits became 0, the master ECU2 stops communication including the NM frame. After that, when the time required for the termination process of the non-NM node (e.g., 2 seconds) has elapsed, the master ECU2 sets the relay to the off state. The non-NM node here has a function to receive and interpret the NM frame. The non-NM node constantly monitors the NM frame transmitted by the master ECU2, and starts the termination process when all the bits of the cluster including the upstream relay that supplies power to the node are 0. This allows the non-NM node to complete the termination process before the relay that supplies power to the node is turned off. The NM-equipped node goes to sleep according to the NM frame transmitted to and from the master ECU2.

[0110] If the non-NM node is unlikely to be able to complete the termination process within a predetermined required time, it can send a predetermined command to the master ECU 2 to request an extension of the time before turning off the relay. In this case, the master ECU 2 waits for the relay to be turned off while receiving the extension request from the non-NM node.

[0111] [Third embodiment] A third embodiment of the present disclosure will be described below with reference to the drawings. In the third embodiment, differences from the first embodiment will be described.

[0112] 7, a communication system 100 of the third embodiment includes a central ECU 101, upstream power distribution units 102, 103, zone ECUs 104, 105, 106, 107, slave ECUs 108, 109, 110, 111, 112, 113, 114, 115, 116, a battery 117, and a slave ECU 118. In the following, the central ECU 101, the zone ECUs 104 to 107, and the slave ECUs 108 to 116, 118 are also collectively referred to as nodes.

[0113] The battery 117 supplies power to each part of the vehicle at a DC battery voltage (for example, 12 V). The central ECU 101, the upstream power distribution units 102 and 103, the zone ECUs 104 to 107, and the slave ECUs 108 to 116 and 118 operate by receiving power supplied from the battery 117.

[0114] The upstream power supply distribution unit 102 receives power supply from the battery 117 via a power supply path 121 between the battery 7 and the upstream power supply distribution unit 102 . The upstream power supply distribution unit 103 receives power supply from the battery 117 via a power supply path 122 between the battery 7 and the upstream power supply distribution unit 103 .

[0115] The zone ECUs 104 and 105 receive power from a battery 117 via power supply paths 123 and 124 between the upstream power distribution unit 102 and the zone ECUs 104 and 105, respectively.

[0116] The zone ECUs 106 and 107 receive power from a battery 117 via power supply paths 125 and 126 between the upstream power distribution unit 103 and the zone ECUs 106 and 107, respectively.

[0117] The slave ECUs 108 and 109 receive power from the battery 117 via power supply paths 127 and 128 between the zone ECU 104 and the slave ECUs 108 and 109, respectively.

[0118] The slave ECUs 110 and 111 are supplied with power from a battery 117 via power supply paths 129 and 130 between the zone ECU 105 and the slave ECUs 110 and 111, respectively.

[0119] The slave ECUs 112, 113, and 114 receive power from a battery 117 via power supply paths 131, 132, and 133 between the zone ECU 106 and the slave ECUs 112, 113, and 114, respectively.

[0120] The slave ECUs 115 and 116 are supplied with power from a battery 117 via power supply paths 134 and 135 between the zone ECU 107 and the slave ECUs 115 and 116, respectively.

[0121] The slave ECU 118 receives power from the battery 117 via a power supply path 136 . The central ECU 101 and the upstream power distribution unit 102 are connected to each other via a communication line 141 so as to be able to communicate data with each other.

[0122] The central ECU 101 and the upstream power distribution unit 103 are connected to each other via a communication line 142 so as to be able to communicate data with each other. The central ECU 101 and the zone ECUs 104, 105, 106, and 107 are connected to each other via communication lines 143, 144, 145, and 146, respectively, so as to be able to communicate data with each other.

[0123] The zone ECU 104 and the slave ECUs 108, 109, and 118 are connected to each other via a communication bus 147 so as to be able to communicate data with each other. The zone ECU 105 and the slave ECUs 110 and 111 are connected to each other via a communication bus 148 so as to be able to communicate data with each other.

[0124] The zone ECU 106 and the slave ECUs 112, 113, and 114 are connected to each other via a communication bus 149 so as to be able to communicate data with each other. The zone ECU 107 and the slave ECUs 115 and 116 are connected to each other via a communication bus 150 so as to be able to communicate data with each other.

[0125] As shown in FIG. 8, the central ECU 101 includes a control unit 151, communication units 152, 153, 154, 155, 156, and 157, and a storage unit 158. The control unit 151 is an electronic control device mainly composed of a microcomputer including a CPU 161, a ROM 162, a RAM 163, etc. Various functions of the microcomputer are realized by the CPU 161 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 162 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 161 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 151 may be one or more.

[0126] The communication unit 152 communicates with the upstream power distribution unit 102 connected to the communication line 141 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. Ethernet is a registered trademark.

[0127] The communication unit 153 communicates with the upstream power distribution unit 103 connected to the communication line 142 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. The communication unit 154 communicates with the zone ECU 104 connected to the communication line 143 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0128] The communication unit 155 communicates with the zone ECU 105 connected to the communication line 144 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. The communication unit 156 communicates with the zone ECU 106 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0129] The communication unit 157 communicates with the zone ECU 107 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol. The storage unit 158 ​​is a storage device for storing various data, and stores a management table 165 and a diagnostic mask table 167, which will be described later.

[0130] The upstream power distribution unit 102 includes a control circuit 171 , a communication unit 172 , and electronic fuses 173 and 174 . The control circuit 171 performs control to switch the electronic fuses 173 and 174 between an on state and an off state based on an instruction obtained from the central ECU 101 via a communication unit 172 .

[0131] The communication unit 172 communicates with the central ECU 101 connected to the communication line 141 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0132] The electronic fuse 173 is disposed between the power supply path 121 and the power supply path 123. The electronic fuse 174 is disposed between the power supply path 121 and the power supply path . The upstream power distribution unit 103 includes a control circuit 181 , a communication unit 182 , and electronic fuses 183 and 184 .

[0133] The control circuit 181 performs control to switch the electronic fuses 183 and 184 between the on state and the off state based on an instruction obtained from the central ECU 101 via the communication unit 182 .

[0134] The communication unit 182 communicates with the central ECU 101 connected to the communication line 142 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0135] The electronic fuse 183 is disposed between the power supply path 122 and the power supply path 125. The electronic fuse 184 is disposed between the power supply path 122 and the power supply path 126. As shown in FIG. 9, the zone ECU 104 includes a control unit 191, a communication unit 192, a CAN communication unit 193, a storage unit 194, and electronic fuses 195 and 196.

[0136] The control unit 191 is an electronic control device mainly composed of a microcomputer including a CPU 201, a ROM 202, a RAM 203, etc. Various functions of the microcomputer are realized by the CPU 201 executing a program stored in a non-transient real recording medium. In this example, the ROM 202 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 201 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 191 may be one or more.

[0137] The communication unit 192 communicates with the central ECU 101 connected to the communication line 143 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0138] The CAN communication unit 193 communicates with the slave ECUs 108 and 109 connected to the communication bus 147 by transmitting and receiving communication frames based on the CAN communication protocol.

[0139] The storage unit 194 is a storage device for storing various data. The storage unit 194 stores a management table 205 and a diagnostic mask table 207, which will be described later. The electronic fuse 195 is disposed between the power supply path 123 and the power supply path 127. The electronic fuse 196 is disposed between the power supply path 123 and the power supply path 128.

[0140] The zone ECU 105 includes a control unit 211, a communication unit 212, a CAN communication unit 213, a storage unit 214, and electronic fuses 215 and 216. The control unit 211 is an electronic control device mainly composed of a microcomputer including a CPU 221, a ROM 222, a RAM 223, etc. Various functions of the microcomputer are realized by the CPU 221 executing a program stored in a non-transient real recording medium. In this example, the ROM 222 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 221 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 211 may be one or more.

[0141] The communication unit 212 communicates with the central ECU 101 connected to the communication line 144 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0142] The CAN communication unit 213 communicates with the slave ECUs 110 and 111 connected to the communication bus 148 by transmitting and receiving communication frames based on the CAN communication protocol.

[0143] The storage unit 214 is a storage device for storing various data. The storage unit 214 stores a management table 225 and a diagnostic mask table 227, which will be described later. The electronic fuse 215 is disposed between the power supply path 124 and the power supply path 129. The electronic fuse 216 is disposed between the power supply path 124 and the power supply path 130.

[0144] As shown in FIG. 10, the zone ECU 106 includes a control unit 231, a communication unit 232, a CAN communication unit 233, a storage unit 234, and electronic fuses 235, 236, and 237. The control unit 231 is an electronic control device mainly composed of a microcomputer including a CPU 241, a ROM 242, a RAM 243, etc. Various functions of the microcomputer are realized by the CPU 241 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 242 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 241 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 231 may be one or more.

[0145] The communication unit 232 communicates with the central ECU 101 connected to the communication line 145 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0146] The CAN communication unit 233 communicates with the slave ECUs 112, 113, and 114 connected to the communication bus 149 by transmitting and receiving communication frames based on the CAN communication protocol.

[0147] The storage unit 234 is a storage device for storing various data. The storage unit 194 stores a management table 245 and a diagnostic mask table 247, which will be described later. The electronic fuse 235 is disposed between the power supply path 125 and the power supply path 131. The electronic fuse 236 is disposed between the power supply path 125 and the power supply path 132. The electronic fuse 237 is disposed between the power supply path 125 and the power supply path 133.

[0148] The zone ECU 107 includes a control unit 251, a communication unit 252, a CAN communication unit 253, a storage unit 254, and electronic fuses 255 and 256. The control unit 251 is an electronic control device mainly composed of a microcomputer including a CPU 261, a ROM 262, a RAM 263, etc. Various functions of the microcomputer are realized by the CPU 261 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 262 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 261 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 251 may be one or more.

[0149] The communication unit 252 communicates with the central ECU 101 connected to the communication line 146 by transmitting and receiving communication frames based on, for example, the Ethernet communication protocol.

[0150] The CAN communication unit 253 communicates with the slave ECUs 115 and 116 connected to the communication bus 150 by transmitting and receiving communication frames based on the CAN communication protocol.

[0151] The storage unit 254 is a storage device for storing various data. The storage unit 254 stores a management table 265 and a diagnostic mask table 267, which will be described later. The electronic fuse 255 is disposed between the power supply path 126 and the power supply path 134. The electronic fuse 256 is disposed between the power supply path 126 and the power supply path 135.

[0152] As shown in FIG. 11, the slave ECUs 108, 109, and 118 each include a control unit 271, a CAN communication unit 272, and a storage unit 273. The control unit 271 is an electronic control device mainly composed of a microcomputer including a CPU 281, a ROM 282, a RAM 283, etc. Various functions of the microcomputer are realized by the CPU 281 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 282 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 281 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 271 may be one or more.

[0153] The CAN communication unit 272 communicates with the zone ECUs 104 connected to the communication bus 147 based on the CAN communication protocol. The storage unit 273 is a storage device for storing various data. The storage unit 273 stores a management table 285 and a diagnostic mask table 287, which will be described later.

[0154] The slave ECUs 110 and 111 each include a control unit 291 , a CAN communication unit 292 , and a storage unit 293 . The control unit 291 is an electronic control device mainly composed of a microcomputer including a CPU 301, a ROM 302, a RAM 303, etc. Various functions of the microcomputer are realized by the CPU 301 executing a program stored in a non-transient real recording medium. In this example, the ROM 302 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 301 may be configured in hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 291 may be one or more.

[0155] The CAN communication unit 292 communicates with the zone ECU 105 connected to the communication bus 148 based on the CAN communication protocol. The storage unit 293 is a storage device for storing various data. The storage unit 293 stores a management table 305 and a diagnostic mask table 307, which will be described later.

[0156] The slave ECUs 112 , 113 , and 114 each include a control unit 311 , a CAN communication unit 312 , and a storage unit 313 . The control unit 311 is an electronic control device mainly composed of a microcomputer including a CPU 321, a ROM 322, a RAM 323, etc. Various functions of the microcomputer are realized by the CPU 321 executing a program stored in a non-transient real recording medium. In this example, the ROM 322 corresponds to the non-transient real recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 321 may be configured as hardware using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 311 may be one or more.

[0157] The CAN communication unit 312 communicates with the zone ECU 106 connected to the communication bus 149 based on the CAN communication protocol. The storage unit 313 is a storage device for storing various data, and stores a management table 325 and a diagnostic mask table 327, which will be described later.

[0158] The slave ECUs 115 and 116 each include a control unit 331 , a CAN communication unit 332 , and a storage unit 333 . The control unit 331 is an electronic control device mainly composed of a microcomputer including a CPU 341, a ROM 342, a RAM 343, etc. Various functions of the microcomputer are realized by the CPU 341 executing a program stored in a non-transitive substantial recording medium. In this example, the ROM 342 corresponds to the non-transitive substantial recording medium storing the program. Furthermore, the execution of this program executes a method corresponding to the program. Note that some or all of the functions executed by the CPU 341 may be configured in hardware form using one or more ICs, etc. Also, the number of microcomputers constituting the control unit 331 may be one or more.

[0159] The CAN communication unit 332 communicates with the zone ECU 107 connected to the communication bus 150 based on the CAN communication protocol. The storage unit 333 is a storage device for storing various data. The storage unit 333 stores a management table 345 and a diagnostic mask table 347, which will be described later.

[0160] The management tables 165, 205, 225, 245, 265, 285, 305, 325, and 345 set, for each of a plurality of services provided to vehicle occupants using the central ECU 101, the zone ECUs 104 to 107, and the slave ECUs 108 to 116, and 118, a correspondence relationship between the service and the switching information and start information.

[0161] Therefore, in the management tables 165, 205, 225, 245, 265, 285, 305, 325, and 345, switching information is set for the electronic fuses 173, 174, 183, 184, 195, 196, 215, 216, 235, 236, 237, 255, and 256, and startup information is set for the central ECU 101 and the slave ECU 118.

[0162] The management tables 165, 205, 225, 245, 265, 285, 305, 325, and 345 do not need to store switch information and start information for a service for which the device itself cannot detect the satisfaction of the start condition of the service.

[0163] The diagnostic mask tables 167, 207, 227, 247, 267, 287, 307, 327, and 347 correspond, for each service, the slave ECU to which power supply via the electronic fuse is cut off (hereinafter referred to as the cut-off ECU), the slave ECU to which the power supply is cut off (hereinafter referred to as the sleep ECU), and the CAN ID of the CAN frame that is not received (hereinafter referred to as the non-received frame ID).

[0164] Therefore, when the central ECU 101, the zone ECUs 104-107, and the slave ECUs 108-116, 118 determine that the start condition of a service is satisfied based on the detected event, they extract the switching information and start information corresponding to the corresponding service from the management tables 165, 205, 225, 245, 265, 285, 305, 325, 345, and generate and transmit an NM frame including the extracted switching information and start information. Furthermore, the central ECU 101, the zone ECUs 104-107, and the slave ECUs 108-116, 118 extract a combination of a cutoff ECU or sleep ECU corresponding to the corresponding service and a non-received frame ID from the diagnostic mask tables 167, 207, 227, 247, 267, 287, 307, 327, 347, and transmit the extracted combination as diagnostic mask information.

[0165] Next, a description will be given of a procedure of central management processing executed by the control unit 151 of the central ECU 101. The central management processing is processing that is repeatedly executed while the central ECU 101 is running.

[0166] When the central management process is executed, the CPU 161 of the control unit 151 determines whether or not an NM frame has been received in S110, as shown in Fig. 12. If an NM frame has not been received, the CPU 161 proceeds to S140.

[0167] On the other hand, when an NM frame is received, the CPU 161 transfers the received NM frame to the zone ECUs 104-107 at S120. The zone ECUs 104-107 that received the NM frame from the central ECU 101 transfer the NM frame to their subordinate slave ECUs. Furthermore, the zone ECUs 104-107 that received the NM frame from the central ECU 101 set their built-in electronic fuses to the ON or OFF state based on the switching information included in the received NM frame.

[0168] In S130, the CPU 161 transmits a power supply switching control instruction to the upstream power distribution units 102, 103 to instruct them to turn on or off the electronic fuses 173, 174, 183, 184 of the upstream power distribution units 102, 103 based on the switching information contained in the NM frame received in S10, and then proceeds to S140.

[0169] In S140, the CPU 161 determines whether or not a service start condition that is preset for the central ECU 101 is satisfied. If the service start condition is not satisfied, the CPU 161 ends the central management process.

[0170] On the other hand, if the service start condition is met, the CPU 161 extracts, at S150, from the management table 165, switching information and startup information corresponding to the service established at S140, generates an NM frame including the extracted switching information and startup information, and transmits it to the zone ECUs 104 to 107.

[0171] In S160, the CPU 161 refers to the management table 165 and transmits a power supply switching control instruction to the upstream power distribution units 102, 103 instructing them to turn the electronic fuses 173, 174, 183, 184 of the upstream power distribution units 102, 103 on or off based on the switching information corresponding to the service established in S140, and then terminates the central management processing.

[0172] The communication system 100 thus configured includes ECUs 101, 104 to 116, and 118 that are connected to each other so as to be capable of transmitting and receiving communication frames. The slave ECUs 108 and 109 are each supplied with power from the battery 117 via electronic fuses 195 and 196 that are configured to switch between a conductive state that connects the power supply paths 127 and 128 and a cut-off state that cuts off the power supply paths 127 and 128, respectively.

[0173] The central ECU 101 is connected to the zone ECU 104 and the slave ECUs 108 and 109 so as to be able to transmit and receive communication frames therebetween, and is configured to control the operations of the electronic fuses 195 and 196 .

[0174] When the ECUs 101, 104 to 116, 118 decide to provide a preset service based on the detected event, they are configured to generate an NM frame according to the service. The NM frame is a communication frame including switching information indicating whether or not to make each of the electronic fuses 195, 196, 215, 216, 235, 236, 237, 255, 256 conductive, and activation information indicating whether or not to activate the slave ECU 118 that is not connected to the electronic fuse.

[0175] The ECUs 101, 104 to 116, and 118 are configured to transmit the generated management frames. The central ECU 101 is configured to set each of the electronic fuses 195, 196 to either a conductive state or a cut-off state based on the NM frame.

[0176] In such a communication system 100, the central ECU 101 can set the electronic fuses 195, 196 to either a conductive state or a cut-off state based on two pieces of switching information included in the NM frame. Furthermore, in the communication system 100, the central ECU 101 can instruct the slave ECU 118 whether or not to activate it based on one piece of activation information included in the NM frame. Therefore, when ECUs connected to electronic fuses and ECUs not connected to electronic fuses are mixed, the communication system 100 can individually manage the activation of multiple ECUs.

[0177] In the above-described embodiment, the ECUs 101, 104 to 116, and 118 correspond to a plurality of electronic control devices, the electronic fuses 195 and 196 correspond to a power supply switching unit, the battery 117 corresponds to a power source, the slave ECUs 108 and 109 correspond to a power supply switching device, and the central ECU 101 corresponds to a management device.

[0178] Moreover, the slave ECU 118 corresponds to a continuous power supply device, the NM frame corresponds to a management frame, and S130 corresponds to processing as a power supply control unit. Moreover, the control units 151, 191, 211, 231, 251, 271, 291, 311, and 331 correspond to frame generating units, and the communication units 154 to 157, 192, 212, 232, and 252 and the CAN communication units 193, 213, 233, 253, 272, 292, 312, and 332 correspond to frame transmitting units.

[0179] Although one embodiment of the present disclosure has been described above, the present disclosure is not limited to the above embodiment and can be implemented in various modified forms. The control unit 21, 41 and the method described in the present disclosure may be realized by a dedicated computer provided by configuring a processor and a memory programmed to execute one or more functions embodied in a computer program. Alternatively, the control unit 21, 41 and the method described in the present disclosure may be realized by a dedicated computer provided by configuring a processor with one or more dedicated hardware logic circuits. Alternatively, the control unit 21, 41 and the method described in the present disclosure may be realized by one or more dedicated computers configured by a combination of a processor and a memory programmed to execute one or more functions and a processor configured with one or more hardware logic circuits. In addition, the computer program may be stored in a computer-readable non-transient tangible recording medium as instructions executed by a computer. The method for realizing the functions of each unit included in the control unit 21, 41 does not necessarily need to include software, and all of the functions may be realized using one or more hardware.

[0180] In the above embodiments, multiple functions of one component may be realized by multiple components, or one function of one component may be realized by multiple components. Also, multiple functions of multiple components may be realized by one component, or one function realized by multiple components may be realized by one component. Also, part of the configuration of the above embodiments may be omitted. Also, at least part of the configuration of the above embodiments may be added to or substituted for the configuration of another of the above embodiments.

[0181] In addition to the above-mentioned ECUs 2-6, 101, 104-116, 118, the present disclosure can also be realized in various forms, such as a system having the ECUs 2-6, 101, 104-116, 118 as components, a program for causing a computer to function as the ECUs 2-6, 101, 104-116, 118, a non-transient physical recording medium such as a semiconductor memory on which this program is recorded, and a communication management method. [Technical idea disclosed in this specification] [Item 1] A communication system (1, 100) including a plurality of electronic control devices (2-6, 101, 104-116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, The plurality of electronic control devices include a power supply switching device (3, 5, 13, 14, 108, 109) configured to receive power from a power source (7, 117) via a power supply switching unit (25, 26, 195, 196) configured to switch between a conductive state for connecting a power supply path (10, 12, 127, 128) and a cut-off state for cutting off the power supply path; a management device (2, 101, 104) that is connected to a plurality of the electronic control devices so as to be able to transmit and receive the communication frame and is configured to control the operation of one or more of the power supply switching units; At least one of the plurality of electronic control devices is a frame generating unit (21, 41, 151, 191, 211, 231, 251, 271, 291, 311, 331) configured to generate a management frame, which is the communication frame, including one or more pieces of switching information indicating whether or not to place each of one or more of the power supply switching units in the conductive state in accordance with the service, and one or more pieces of activation information indicating whether or not to activate each of the one or more continuous power supply devices as a continuous power supply device, the electronic control unit that is not connected to the power supply switching unit; A frame transmitting unit (22 to 23, 42, 154 to 157, 192 to 193, 212 to 213, 232 to 233, 252 to 253, 272, 292, 312, 332) configured to transmit the management frame, The management device includes: A communication system comprising a power supply control unit (S30, S130) configured to set each of the one or more power supply switching units to either the conductive state or the cut-off state based on the management frame.

[0182] [Item 2] A communication system (1, 100) including a plurality of electronic control devices (2-6, 101, 104-116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, The plurality of electronic control devices include a power supply switching device (3, 5, 108, 109) configured to receive power from a power source (7, 117) via a power supply switching unit (25, 26, 195, 196) configured to switch between a conductive state for connecting a power supply path (10, 12, 127, 128) and a cut-off state for cutting off the power supply path; a management device (2, 101, 104) that is connected to a plurality of the electronic control devices so as to be able to transmit and receive the communication frame and is configured to control the operation of one or more of the power supply switching units; The management device includes: a power supply control unit (S30, S130) configured to, upon receiving a management frame, which is the communication frame including one or more pieces of switching information indicating whether or not to set each of the one or more power supply switching units to the conductive state, and one or more pieces of startup information indicating whether or not to start up each of the one or more continuous power supply devices, the electronic control unit that is not connected to the power supply switching unit, as a continuous power supply device, based on the management frame, and to set each of the one or more power supply switching units to either the conductive state or the cut-off state.

[0183] [Item 3] The communication system according to item 1 or 2, The management device further comprises: a transfer unit (S20) configured to transfer the received management frame to one or more of the continuous power supply devices upon receiving the management frame;

[0184] [Item 4] A communication system according to any one of items 1 to 3, Each of the plurality of electronic control devices further comprises: A communication system comprising: a management table (35, 55) indicating, for each of a plurality of preset services, a correspondence relationship between the service and one or more pieces of switching information and one or more pieces of startup information.

[0185] [Item 5] A communication system according to any one of items 1 to 4, The management frame includes information indicating whether or not to activate the power supply switching device that receives power supply from the power source via the power supply switching unit.

[0186] [Item 6] A communication system according to any one of items 1 to 5, The continuous power supply device is configured to switch between a wake-up state and a sleep state based on the startup information included in the management frame.

[0187] [Item 7] A communication system according to any one of items 1 to 6, A communication system in which the management device is configured to transfer the received management frame to the power supply switching device.

[0188] [Item 8] A communication system according to any one of items 1 to 7, The management device includes: a communication system configured to transmit a notification message to a power supply switching device connected to the power supply switching unit to be switched to the cut-off state before switching the power supply switching unit to the cut-off state, notifying the user that the power supply switching unit will be switched to the cut-off state, and to switch the power supply switching unit to the cut-off state when a preset required termination processing time has elapsed as a time required for the power supply switching device to execute termination processing after the notification message has been transmitted.

[0189] [Item 9] Item 9. A communication system according to item 8, a communication system in which the required termination process time is set individually for each of the one or more power supply switching devices connected to the power supply switching unit;

[0190] [Item 10] A communication system according to any one of items 1 to 7, The management device includes: a communication system configured to stop transmission of the management frame when a preset sleep condition for switching the management device to a sleep state is satisfied, and to switch the power supply switching unit to the cut-off state when a total time of a time required for the power supply switching device to determine that the management frame has been interrupted and a time required for termination processing of the power supply switching device has elapsed.

[0191] [Item 11] A communication system according to any one of items 1 to 7, The management device includes: when a preset sleep condition for switching the management device to a sleep state is satisfied, all bits of the switching information and the startup information contained in the management frame are changed from 1 to 0, and when a certain time has elapsed since all bits of the switching information and the startup information have become 0, the power supply switching unit is switched to the cut-off state.

[0192] [Item 12] An electronic control device (2 to 6, 101, 104 to 116, 118) included in a communication system (1, 100) including one or more power supply switching units (25, 26, 195, 196) configured to switch between a conductive state for conducting a power supply path (10, 12, 127, 128) from a power source (7, 117) to a power supply switching device (3, 5, 108, 109) and a cut-off state for cutting off the power supply path, a frame generating unit (21, 41, 151, 191, 211, 231, 251, 271, 291, 311, 331) configured to generate a management frame, which is a communication frame including, when it is determined to provide a preset service based on the detected event, one or more pieces of switching information indicating whether or not to place each of the one or more power supply switching units in the conductive state and one or more pieces of startup information indicating whether or not to start each of the one or more continuous power supply devices not connected to the power supply switching unit, in response to the service; a frame transmitting unit (22 to 23, 42, 154 to 157, 192 to 193, 212 to 213, 232 to 233, 252 to 253, 272, 292, 312, 332) configured to transmit the management frame; An electronic control device comprising:

[0193] [Item 13] Item 13. The electronic control device according to item 12, an electronic control device that stops transmitting the management frame when a sleep condition for transitioning to a sleep state is satisfied following the end of the service;

[0194] [Item 14] Item 14. The electronic control device according to item 12 or 13, The plurality of electronic control devices include The power supply switching device receives power from the power source via the power supply switching unit as a slave control device (108), a zone control device (104) connected to the slave control device so as to be able to transmit and receive the communication frame to and from the slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; the electronic control unit is the central control unit, The central control device is configured to generate and transmit the management frame when it determines to provide the service.

[0195] [Item 15] A communication frame can be transmitted and received between the electronic control devices (2 to 6), A management device (2) configured to control the operation of one or more power supply switching units (25, 26) configured to switch between a conductive state for connecting a power supply path (10, 12) from a power source (7) to a power supply switching device (3, 5) and a cut-off state for cutting off the power supply path, a management device including a power supply control unit (S30) configured, upon receiving a management frame which is a communication frame including one or more pieces of switching information indicating whether or not to set each of the one or more power supply switching units to the conductive state, and one or more pieces of startup information indicating whether or not to start up each of the one or more continuous power supply devices, the electronic control unit that is not connected to the power supply switching unit, as a continuous power supply device, based on the management frame,

[0196] [Item 16] A communication system according to any one of items 1 to 11, The plurality of electronic control devices include The power supply switching device receives power from the power source via the power supply switching unit as a slave control device (108), a zone control device (104) connected to the slave control device so as to be able to transmit and receive the communication frame to and from the slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The management device is a communication system configured by the central control device and the zone control devices. [Explanation of symbols]

[0197] 1... communication system, 2... master ECU, 3-6... slave ECU, 7... battery, 10,12... power supply path, 21,41... control unit, 22,23,42... CAN communication unit, 25,26... relay, 100... communication system, 102... central ECU, 104-107... zone ECU, 108-116,118... slave ECU, 117... battery, 127,128... power supply path, 151,191,211,231,251,271,291,311,331... control unit, 154-157,192,212,232,252... communication unit, 193,213,233,253,272,292,312,332... CAN communication unit, 195,196... electronic fuse

Claims

1. A communication system (1, 100) including a plurality of electronic control devices (2 to 6, 101, 104 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, The plurality of electronic control devices include a power supply switching device (3, 5, 13, 14, 108, 109) configured to switch between a conductive state for conducting a power supply path (10, 12, 127, 128) and a cut-off state for cutting off the power supply path, and a management device (2, 101, 104) that is connected to a plurality of the electronic control devices so as to be able to transmit and receive the communication frame and that is configured to control the operation of one or more of the power supply switching units; At least one of the plurality of electronic control devices is a frame generating unit (21, 41, 151, 191, 211, 231, 251, 271, 291, 311, 331) configured to generate a management frame, which is the communication frame, including one or more pieces of switching information indicating whether or not to place each of one or more of the power supply switching units in the conductive state according to the service, and one or more pieces of activation information indicating whether or not to activate each of the one or more continuous power supply devices as a continuous power supply device, the electronic control unit not connected to the power supply switching unit; a frame transmitting unit (22-23, 42, 154-157, 192-193, 212-213, 232-233, 252-253, 272, 292, 312, 332) configured to transmit the management frame; The management device includes: A communication system including a power supply control unit (S30, S130) configured to set each of the one or more power supply switching units to either the conductive state or the cut-off state based on the management frame.

2. A communication system (1, 100) including a plurality of electronic control devices (2 to 6, 101, 104 to 116, 118) connected to each other so as to be capable of transmitting and receiving communication frames, The plurality of electronic control devices include a power supply switching device (3, 5, 108, 109) configured to receive power from a power source (7, 117) via a power supply switching unit (25, 26, 195, 196) configured to switch between a conductive state for conducting a power supply path (10, 12, 127, 128) and a cut-off state for cutting off the power supply path; a management device (2, 101, 104) that is connected to a plurality of the electronic control devices so as to be able to transmit and receive the communication frame and that is configured to control the operation of one or more of the power supply switching units; The management device includes: a power supply control unit (S30, S130) configured to, upon receiving a management frame, which is a communication frame including one or more pieces of switching information indicating whether or not to set each of the one or more power supply switching units to the conductive state, and one or more pieces of startup information indicating whether or not to start up each of the one or more continuous power supply devices, the electronic control unit that is not connected to the power supply switching unit, as a continuous power supply device, based on the management frame,

3. A communication system according to claim 1 or 2, The management device further comprises: A communication system comprising: a forwarding unit (S20) configured to, upon receiving the management frame, forward the received management frame to one or more of the continuous power supply devices.

4. A communication system according to claim 1 or 2, Each of the plurality of electronic control devices further comprises: A communication system comprising a management table (35, 55) indicating, for each of a plurality of preset services, a correspondence relationship between the service and one or more pieces of switching information and one or more pieces of startup information.

5. A communication system according to claim 1 or 2, The management frame includes information indicating whether or not to activate the power supply switching device that receives power supply from the power source via the power supply switching unit.

6. A communication system according to claim 1 or 2, The continuous power supply device is configured to switch between a wake-up state and a sleep state based on the startup information included in the management frame.

7. A communication system according to claim 1 or 2, A communication system in which the management device is configured to transfer the received management frame to the power supply switching device.

8. A communication system according to claim 1 or 2, The management device includes: a communication system configured to transmit a notification message to a power supply switching device connected to the power supply switching unit to be switched to the cut-off state before switching the power supply switching unit to the cut-off state, notifying the user that the power supply switching unit will be switched to the cut-off state, and to switch the power supply switching unit to the cut-off state when a preset required termination processing time has elapsed as a time required for the power supply switching device to execute termination processing after the notification message has been transmitted.

9. 9. The communication system according to claim 8, a communication system in which the required termination process time is set individually for each of the one or more power supply switching devices connected to the power supply switching unit;

10. A communication system according to claim 1 or 2, The management device includes: a communication system configured to stop transmission of the management frame when a preset sleep condition for switching the management device to a sleep state is satisfied, and to switch the power supply switching unit to the cut-off state when a total time of a time required for the power supply switching device to determine that the management frame has been interrupted and a time required for termination processing of the power supply switching device has elapsed.

11. A communication system according to claim 1 or 2, The management device includes: a communication system configured to change all of the switching information and startup information bits contained in the management frame from 1 to 0 when a preset sleep condition for switching the management device to a sleep state is satisfied, and to switch the power supply switching unit to the cut-off state when a certain time has elapsed since all of the switching information and startup information bits have become 0.

12. An electronic control device (2-6, 101, 104-116, 118) included in a communication system (1, 100) including one or more power supply switching units (25, 26, 195, 196) configured to switch between a conductive state for conducting a power supply path (10, 12, 127, 128) from a power source (7, 117) to a power supply switching device (3, 5, 108, 109) and a cut-off state for cutting off the power supply path, a frame generating unit (21, 41, 151, 191, 211, 231, 251, 271, 291, 311, 331) configured to generate a management frame, which is a communication frame including, when it is determined to provide a preset service based on the detected event, one or more pieces of switching information indicating whether or not to set each of the one or more power supply switching units to the conductive state and one or more pieces of startup information indicating whether or not to start each of the one or more continuous power supply devices not connected to the power supply switching units, in response to the service; a frame transmitting unit (22-23, 42, 154-157, 192-193, 212-213, 232-233, 252-253, 272, 292, 312, 332) configured to transmit the management frame; An electronic control device comprising:

13. 13. The electronic control device according to claim 12, an electronic control device that stops transmitting the management frame when a sleep condition for transitioning to a sleep state is satisfied following the end of the service;

14. 14. The electronic control device according to claim 12 or 13, The plurality of electronic control devices include The power supply switching device receives power supply from the power source via the power supply switching unit as a slave control device (108), a zone control device (104) connected to the slave control device so as to be able to transmit and receive the communication frame to and from the slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; the electronic control unit is the central control unit, The central control device is configured to generate and transmit the management frame when it determines to provide the service.

15. a communication frame can be transmitted and received between the electronic control devices (2 to 6); A management device (2) configured to control the operation of one or more power supply switching units (25, 26) configured to switch between a conductive state for conducting a power supply path (10, 12) from a power source (7) to a power supply switching device (3, 5) and a cut-off state for cutting off the power supply path, a management device including a power supply control unit (S30) configured, upon receiving a management frame which is a communication frame including one or more pieces of switching information indicating whether or not to set each of the one or more power supply switching units to the conductive state, and one or more pieces of startup information indicating whether or not to start up each of the one or more continuous power supply devices, the electronic control unit that is not connected to the power supply switching unit, as a continuous power supply device, based on the management frame,

16. A communication system according to claim 1 or 2, The plurality of electronic control devices include The power supply switching device receives power supply from the power source via the power supply switching unit as a slave control device (108), a zone control device (104) connected to the slave control device so as to be able to transmit and receive the communication frame to and from the slave control device and configured to control an operation of the power supply switching unit; a central control device (101) connected to the zone control devices so as to be capable of transmitting and receiving the communication frame; The management device is a communication system configured by the central control device and the zone control devices.

Images