Communication relay device

Abstract

To appropriately determine whether or not there is a communication abnormality.SOLUTION: A communication relay device relays data transmission and reception between a plurality of control devices on an in-vehicle network. The communication relay device determines that communication is abnormal when an index value indicating a communication volume per unit time of data being relayed is greater than a specified value. The communication relay device acquires, for each control device, service information indicating the type of function being executed by the control device (S62). The communication relay device sets the value of the specified value according to the acquired multiple pieces of service information.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a communication relay device.

Background Art

[0002] The communication relay device of Patent Document 1 is interposed between an internal network and an external network. The communication relay device relays the transmission and reception of data between a plurality of hosts on the internal network and the external network. Further, the communication relay device monitors the communication volume per unit time between the internal network and the external network to detect an unauthorized intrusion into the internal network. Specifically, the communication relay device determines whether the communication volume per unit time between the internal network and the external network is greater than a predetermined threshold value. Then, when the communication volume per unit time between the internal network and the external network is greater than the predetermined threshold value, the communication relay device determines that the communication is abnormal, that is, there is an unauthorized intrusion.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In a system such as that of Patent Document 1, the communication volume per unit time between the internal network and the external network can vary depending on the situation of the internal network. In particular, when the technology of the communication relay device of Patent Document 1 is applied to a vehicle network system, the communication volume per unit time relayed by the communication relay device is likely to change significantly depending on the operating situation of the vehicle. Therefore, when the technology of the communication relay device of Patent Document 1 is applied to a vehicle network system, it is difficult to uniquely determine an appropriate threshold value for determining that there is an unauthorized intrusion.

Means for Solving the Problem

[0005] The communication relay device for solving the above problems relays the transmission and reception of data between a plurality of control devices on an in-vehicle network, determines that the communication is abnormal when an index value indicating the communication volume per unit time of the relayed data is greater than a specified value, acquires service information indicating the type of function being executed by the control device for each control device, and sets the value of the specified value according to the acquired plurality of pieces of service information.

[0006] The communication relay device for solving the above problems relays the transmission and reception of data between a plurality of control devices on an in-vehicle network, determines that the communication is abnormal when an index value indicating the communication volume per unit time of the relayed data is greater than a specified value, determines in which of a plurality of predetermined operation modes the vehicle is operating, and sets the value of the specified value according to the operation mode in which the vehicle is operating.

Advantages of the Invention

[0007] According to the above configuration, the value of the specified value is set in consideration of the operating situation of the vehicle. Thereby, for example, compared with the case where the specified value is set as a specific fixed value, the presence or absence of communication abnormality can be appropriately determined.

Brief Description of the Drawings

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Embodiments for Carrying Out the Invention

[0009] <Overview of Vehicle Configuration> Hereinafter, an embodiment of the present invention will be described with reference to FIGS. 1 to 5. First, the overview of the vehicle 100 will be described.

[0010] As shown in FIG. 1, the vehicle 100 includes a communication relay device 10, a plurality of control devices 20, a DCM 50, and a display 76. The vehicle 100 also includes a first external bus 61, a second external bus 62, a third external bus 63, and a fourth external bus 64. Note that "DCM" is an abbreviation for Data Communication Module.

[0011] The communication relay device 10 relays the transmission and reception of data between the plurality of control devices 20 and the DCM 50. The communication relay device 10 includes an execution device 11 and a storage device 12. An example of the execution device 11 is a CPU. The storage device 12 includes a read-only ROM, a volatile RAM that can be read and written, and a non-volatile storage that can be read and written. The storage device 12 stores various programs and various data in advance. Specifically, the storage device 12 stores in advance the setting table TS and the initial value of the specified value Z as various data. Here, the specified value Z is a threshold value determined in advance for the determination control described later. The setting table TS is a table for setting the specified value Z. A specific description of the setting table TS will be given later. The execution device 11 realizes various processes described later by executing the programs stored in the storage device 12. An example of the communication relay device 10 is an ECU that controls the entire vehicle 100, so-called a central ECU. Note that "ECU" is an abbreviation for Electronic Control Unit.

[0012] The DCM50 is connected to the communication relay device 10 via the first external bus 61. Therefore, the DCM50 is also a control device on the in-vehicle network. The DCM50 can wirelessly communicate with devices outside the vehicle 100 via an external communication network NW. Therefore, the communication relay device 10 can wirelessly communicate with devices outside the vehicle 100 via the first external bus 61 and the DCM50. An example of an external device is the server 200.

[0013] Each control device 20 includes an execution device 21 and a storage device 22. An example of the execution device 21 is a CPU. The storage device 22 includes a ROM, a RAM, and a storage. The storage device 22 stores various programs and various data in advance. The execution device 21 realizes various processes described below by executing the programs stored in the storage device 22. Hereinafter, it is assumed that the vehicle 100 includes three control devices 20. An example of the three control devices 20 is an advanced driving assistance ECU, a meter ECU, and a multimedia ECU. In this specification, when a plurality of control devices 20 are collectively described, they are simply referred to as the control device 20. When a plurality of control devices 20 are described separately, they are referred to as the first control device 20A, the second control device 20B, and the third control device 20C.

[0014] The first control device 20A can communicate with the communication relay device 10 via the second external bus 62. The second control device 20B can communicate with the communication relay device 10 via the third external bus 63. The third control device 20C can communicate with the communication relay device 10 via the fourth external bus 64. Therefore, all of these control devices 20 are control devices on the in-vehicle network.

[0015] The display 76 can display various information. In the present embodiment, the display 76 is located near the driver's seat of the vehicle 100. The communication relay device 10 outputs a control signal to the display 76 to display various information on the display 76.

[0016] <Judgment control> Next, with reference to FIG. 2, the determination control executed by the communication relay device 10 will be described. The determination control is control for determining whether there is an unauthorized intrusion from the outside of the vehicle 100 into the inside of the vehicle 100. In the present embodiment, the communication relay device 10 starts the determination control at every predetermined control period.

[0017] As shown in FIG. 2, when the execution device 11 of the communication relay device 10 starts the determination control, it executes the process of step S11. In step S11, the execution device 11 acquires a communication index value CS. Here, the communication index value CS is an index value indicating the communication amount per unit time of the data relayed by the communication relay device 10. In the present embodiment, the communication index value CS indicates the ratio of the measured value of the communication amount per unit time of the data flowing from the DCM 50 to the communication relay device 10 via the first external bus 61 to the upper limit value of the communication amount per unit time of the data. Therefore, the communication index value CS is represented by the following formula (1).

[0018] Formula (1): (Measured value of communication amount per unit time of data flowing from DCM 50 to communication relay device 10 via first external bus 61) / (Upper limit value of communication amount per unit time of data flowing from DCM 50 to communication relay device 10 via first external bus 61) × 100 Note that the upper limit value of the communication amount per unit time of the data flowing from the DCM 50 to the communication relay device 10 via the first external bus 61 is predetermined for the first external bus 61. An example of the above upper limit value is "1000 Mbps". Also, the unit of the communication index value CS is "%". After step S11, the execution device 11 advances the process to step S21.

[0019] In step S21, the execution device 11 determines whether the communication index value CS is less than or equal to a predetermined specified value Z. Here, the specified value Z is an initial value stored in the storage device 12 or a value set by the setting control described later. In the present embodiment, during the period from when the communication relay device 10 starts up until the setting control described later is completed, the execution device 11 sets the initial value stored in the storage device 12 as the specified value Z. In other words, during the period from when the communication relay device 10 starts up until the value of the specified value Z is set according to the service information IS described later, instead of the value of the specified value Z set according to the service information IS, the execution device 11 sets the initial value stored in the storage device 12 as the specified value Z. In the present embodiment, the initial value stored in the storage device 12 is a value larger than the maximum value among the specified values Z that can be set according to the service information IS. An example of the initial value stored in the storage device 12 is "90%". If the execution device 11 determines in step S21 that the communication index value CS is less than or equal to the specified value Z (S21: YES), the execution device 11 proceeds to step S31 with the processing.

[0020] In step S31, the execution device 11 determines that the communication is normal. In other words, the execution device 11 determines that there is no unauthorized intrusion from outside the vehicle 100 into the interior of the vehicle 100. After step S31, the execution device 11 ends the current determination control.

[0021] On the other hand, if the execution device 11 determines in step S21 described above that the communication index value CS is greater than the specified value Z (S21: NO), the execution device 11 proceeds to step S41 with the processing.

[0022] In step S41, the execution device 11 determines that the communication is abnormal. In other words, the execution device 11 determines that there is an unauthorized intrusion from outside the vehicle 100 into the vehicle 100. Further, the execution device 11 notifies the user of the vehicle 100 or the like that the communication is abnormal. For example, the execution device 11 outputs a control signal to the display 76 to display on the display 76 that the communication is abnormal. After step S41, the execution device 11 ends the current determination control.

[0023] <Acquisition control> Next, with reference to FIG. 3, the acquisition control executed by the communication relay device 10 and the plurality of control devices 20 will be described. The acquisition control is control for the communication relay device 10 to acquire the service information IS used in the setting control described later. In the present embodiment, the control device 20 starts the acquisition control at each predetermined control cycle.

[0024] As shown in FIG. 3, when the execution device 21 of the control device 20 starts the acquisition control, it executes the process of step S61. In step S61, the execution device 21 of the control device 20 generates service information IS indicating the type of function being executed by the execution device 21. The service information IS indicating the type of function being executed by the execution device 21 corresponds to the first service information. As described above, the DCM 50 is a control device on the in-vehicle network. However, in the present embodiment, since there is only one type of function that the DCM 50 can execute, the DCM 50 does not generate the service information IS. After step S61, the execution device 21 advances the process to step S62.

[0025] In step S62, the execution device 21 of the control device 20 transmits the service information IS generated in step S61 to the communication relay device 10. Each of the execution devices 21 of the three control devices 20 executes the processes of step S61 and step S62 in parallel. That is, the execution device 11 of the communication relay device 10 can acquire the service information IS generated in step S61 for each control device 20. When the execution device 11 of the communication relay device 10 acquires the service information IS, the process proceeds to step S71.

[0026] In step S71, the execution device 11 of the communication relay device 10 generates service information IS indicating the type of function being executed by the execution device 11. In other words, in step S71, the execution device 11 acquires service information IS indicating the type of function being executed by the execution device 11. The service information IS indicating the type of function being executed by the execution device 11 corresponds to the second service information. After step S71, the execution device 11 ends the current acquisition control.

[0027] <Setting control> Next, with reference to FIG. 4, the setting control executed by the communication relay device 10 will be described. The setting control is control for setting a specified value Z. In the present embodiment, the communication relay device 10 starts the setting control every time the above acquisition control ends.

[0028] As shown in FIG. 4, when starting the setting control, the execution device 11 of the communication relay device 10 executes the process of step S81. In step S81, the execution device 11 determines whether a total of four pieces of service information IS have been acquired by the acquisition control. If the execution device 11 determines in step S81 that a total of four pieces of service information IS have been acquired by the acquisition control (S81: YES), the execution device 11 proceeds with the process to step S91.

[0029] In step S91, the execution device 11 of the communication relay device 10 sets the value of the specified value Z according to the three service information ISs for the three control devices 20, the service information IS for the communication relay device 10, and the setting table TS. Here, as shown in FIG. 5, the setting table TS defines the relationship between the combination of the four service information ISs and the operation mode of the vehicle 100. Further, the setting table TS defines the specified value Z corresponding to the operation mode of the vehicle 100. In other words, the setting table TS shows the relationship between the combination of the four service information ISs and the specified value Z. In the present embodiment, as the operation modes of the vehicle 100, the first operation mode to the third operation mode are predefined. An example of the first operation mode to the third operation mode is the normal driving mode, the automatic driving mode, and the automatic valet parking mode.

[0030] Specifically, in step S91, first, the execution device 11 of the communication relay device 10 determines the operation mode of the vehicle 100 by associating the types of functions indicated by the total of four service information ISs with the setting table TS. In other words, the execution device 11 determines in which operation mode among the plurality of predefined operation modes the vehicle 100 is operating. Then, the execution device 11 sets the value of the specified value Z according to the operation mode in which the vehicle 100 is operating. For example, as shown in FIG. 5, assuming that the types of functions indicated by the four service information ISs are function A, function C, function F, and function H in the order of the first control device 20A, the second control device 20B, the third control device 20C, and the communication relay device 10. In this case, the execution device 11 of the communication relay device 10 determines that the operation mode of the vehicle 100 is the first operation mode by associating the types of functions indicated by the above four service information ISs with the setting table TS. Further, the execution device 11 specifies "80%" as a candidate for the value of the specified value Z by associating the above operation mode of the vehicle 100 with the setting table TS. Then, the execution device 11 sets the specified value Z as the specified value "80%". As shown in FIG. 4, after step S91, the execution device 11 ends the current setting control.

[0031] On the other hand, in step S81, when the execution device 11 determines that it cannot obtain a total of four pieces of service information IS by acquisition control (S81: NO), the execution device 11 advances the process to step S92. In other words, when the execution device 11 obtains only a part of the total four pieces of service information IS to be associated with the setting table TS, the process advances to step S92. Examples of situations where a negative determination is made in step S81 include cases where, although acquisition control is executed, the service information IS data is incomplete or the communication with the control device 20 is interrupted, resulting in the inability to appropriately obtain the service information IS.

[0032] In step S92, the execution device 11 of the communication relay device 10 sets the value of the specified value Z according to a part of the service information IS and the setting table TS. At this time, when there is one candidate for the specified value Z when only the obtained part of the service information IS is associated with the setting table TS, the execution device 11 sets the candidate for the specified value Z as the specified value Z. For example, assume that the execution device 11 of the communication relay device 10 cannot obtain the service information IS from the first control device 20A. And assume that the types of functions indicated by the three pieces of service information IS obtained by the execution device 11 are function C, function F, and function H in the order of the second control device 20B, the third control device 20C, and the communication relay device 10. In this case, the execution device 11 of the communication relay device 10 determines that the operation mode of the vehicle 100 is the first operation mode by associating only the service information IS of the second control device 20B, the third control device 20C, and the communication relay device 10 with the setting table TS. Further, the execution device 11 specifies "80%" as a candidate for the value of the specified value Z by associating the above operation mode of the vehicle 100 with the setting table TS. Then, the execution device 11 sets the specified value Z as the specified value "80%".

[0033] Further, when there are candidates for a plurality of specified values Z when only some of the acquired service information IS is associated with the setting table TS, the execution device 11 sets the maximum value among the candidates for the plurality of specified values Z as the specified value Z. For example, assume that the execution device 11 of the communication relay device 10 cannot acquire the service information IS from the second control device 20B. And assume that the types of functions indicated by the three pieces of service information IS acquired by the execution device 11 are function A, function F, and function H in the order of the first control device 20A, the third control device 20C, and the communication relay device 10. In this case, the execution device 11 of the communication relay device 10 determines that the operation mode of the vehicle 100 is the first operation mode or the second operation mode by associating only the service information IS of the first control device 20A, the third control device 20C, and the communication relay device 10 with the setting table TS. Further, the execution device 11 specifies "80%" and "65%" as candidates for the value of the specified value Z by associating the above operation mode of the vehicle 100 with the setting table TS. Then, the execution device 11 sets "80%", which is the maximum value among the candidates for the plurality of specified values Z, as the specified value Z. After step S92, the execution device 11 ends the current setting control.

[0034] <Operation of this Embodiment> As shown in FIG. 3, in steps S61 to S71 of the acquisition control, the execution device 11 of the communication relay device 10 acquires the service information IS indicating the type of the function being executed by the control device 20 and the service information IS indicating the type of the function being executed by the communication relay device 10. And when the execution device 11 of the communication relay device 10 can acquire a total of four pieces of service information IS, as shown in FIG. 4, in step S91 of the setting control, the execution device 11 sets the value of the specified value Z according to the total of four pieces of service information IS. Specifically, the execution device 11 determines the operation mode of the vehicle 100 by associating the types of functions indicated by the total of four pieces of service information IS with the setting table TS. Further, the execution device 11 specifies candidates for the value of the specified value Z by associating the above operation mode of the vehicle 100 with the setting table TS. Then, the execution device 11 sets the specified value Z to the specified value.

[0035] <Effects of the present embodiment> (1) In the vehicle 100, even if the communication is normal, the communication index value CS can change according to the operating status of the vehicle 100, specifically according to the function being executed by the control device 20. According to the present embodiment, the value of the specified value Z is set according to the service information IS indicating the type of function being executed by the control device 20. In other words, the value of the specified value Z is set in consideration of the operating status of the vehicle 100. As a result, even if the communication index value CS changes according to the function being executed by the control device 20, the value of the specified value Z is set in accordance with the change in the communication index value CS. As a result, for example, compared to the case where the specified value Z is set as a specific fixed value, it is possible to appropriately determine the presence or absence of communication abnormality in the determination control.

[0036] (2) In the vehicle 100, not only the function being executed by the control device 20 but also the communication index value CS can change according to the function being executed by the communication relay device 10. In this regard, the execution device 11 of the communication relay device 10 sets the value of the specified value Z according to the service information IS indicating the type of function being executed by the control device 20 and the service information IS indicating the type of function being executed by the communication relay device 10. As a result, the value of the specified value Z can be set more accurately in consideration of the operating status of the vehicle 100.

[0037] (3) If the execution device 11 of the communication relay device 10 acquires only a part of the total of four service information IS by acquisition control, there may be a plurality of candidates for the specified value Z when only the acquired part of the service information IS is associated with the setting table TS. And, for example, when the execution device 11 sets the minimum value among the plurality of candidates for the specified value Z as the specified value Z, due to the fact that the specified value Z is smaller than the true specified value Z that should be set, there is a possibility that the communication index value CS is determined to be larger than the specified value Z even though the communication is normal.

[0038] In this regard, in step S92, when the execution device 11 of the communication relay device 10 acquires only a part of the total four service information ISs by acquisition control and associates only the acquired part of the service information IS with the setting table TS, if there are candidates for a plurality of specified values Z, the maximum value among the candidates for the plurality of specified values Z is set as the specified value Z. Thereby, it is possible to suppress the determination in step S21 of the determination control that the communication index value CS is larger than the specified value Z despite normal communication. In other words, it is possible to suppress the determination that the communication is abnormal in the determination control despite normal communication.

[0039] (4) During the period from when the communication relay device 10 is started up to when the value of the specified value Z is set according to the service information IS, the execution device 11 of the communication relay device 10 sets the initial value stored in the storage device 12 as the specified value Z instead of the value of the specified value Z set according to the service information IS. Therefore, a situation where a series of determination controls cannot be executed because the specified value Z is not set does not occur.

[0040] (5) The initial value of the specified value Z stored in the storage device 12 is a value larger than the maximum value among the specified values Z that can be set according to the service information IS. By setting the initial value of the specified value Z to a relatively large value in this way, it is possible to suppress the determination in step S21 of the determination control that the communication index value CS is larger than the specified value Z despite normal communication. On the other hand, the above initial value is set in a relatively short period until the value of the specified value Z is set according to the service information IS in the setting control. Therefore, even if a relatively large value is set as the initial value of the specified value Z, an appropriate specified value Z is set promptly thereafter.

[0041] <Modification example> This embodiment can be implemented with the following modifications. This embodiment and the following modification examples can be implemented in combination with each other within a technically consistent range.

[0042] · In the above embodiment, the determination control may be changed. For example, the communication index value CS in step S11 may be changed. As a specific example, the communication index value CS may indicate the ratio of the measured value of the communication volume per unit time of the data flowing through both the DCM 50 and the communication relay device 10 via the first external bus 61 to the upper limit value of the communication volume per unit time of the data. In other words, the communication index value CS may be a value indicating the ratio of the data transmitted and received, rather than the received data. Also, as a specific example, the communication index value CS may be the measured value of the communication volume per unit time of the data flowing from the DCM 50 to the communication relay device 10 via the first external bus 61, rather than a ratio.

[0043] Furthermore, as a specific example, the target of the communication index value CS may be changed. First, assume that the vehicle 100 includes other communication devices connected to the first control device 20A separately from the DCM 50. And assume that the communication relay device 10 can perform wireless communication with devices outside the vehicle 100 via the second external bus 62, the first control device 20A, and the above communication devices. In this configuration, in step S11, the execution device 11 of the communication relay device 10 may acquire the communication index value CS corresponding to the second external bus 62 in addition to, or instead of, the communication index value CS corresponding to the first external bus 61. In this case, the execution device 11 may execute the processes after step S21 for the acquired communication index value CS.

[0044] ·For example, the initial value of the specified value Z may be changed. The initial value of the specified value Z may be the same as the maximum value among the specified values Z that can be set according to the service information IS by the setting control, or may be a value smaller than the maximum value. However, from the perspective of suppressing the determination that the communication index value CS is larger than the specified value Z despite normal communication, it is preferable that the initial value of the specified value Z is equal to or greater than the maximum value among the specified values Z that can be set according to the service information IS by the setting control.

[0045] · For example, the execution conditions of the determination control may be changed. As a specific example, the execution device 11 of the communication relay device 10 may start the determination control on the condition that a specified value Z is set by the setting control.

[0046] · In the above embodiment, the acquisition control may be changed. For example, in the acquisition control, the execution device 11 of the communication relay device 10 may acquire other service information IS. As a specific example, when there are a plurality of types of functions that the DCM50 can execute, the execution device 11 of the communication relay device 10 may acquire the service information IS indicating the type of the function that the DCM50 is executing.

[0047] · For example, the process of step S71 can be omitted. As a specific example, when the change in the communication index value CS corresponding to the function being executed by the communication relay device 10 is relatively small, even if the process of step S71 is omitted, the impact is small.

[0048] · In the above embodiment, the acquisition control can be omitted. For example, in the vehicle 100, the following configuration can be adopted. First, the execution device 11 of the communication relay device 10 determines the operation mode of the vehicle 100. Subsequently, the execution device 11 of the communication relay device 10 outputs an instruction signal corresponding to the determined operation mode to a plurality of control devices 20. Further, the execution device 21 of each control device 20 executes various functions according to the acquired instruction signal. Here, in the above configuration, even if the acquisition control is omitted, the execution device 11 of the communication relay device 10 can grasp the operation mode of the vehicle 100 determined by the execution device 11. Therefore, after omitting the acquisition control, the execution device 11 may determine in which operation mode among a plurality of predetermined operation modes the vehicle 100 is operating. And the execution device 11 may set the value of the specified value Z according to the operation mode in which the vehicle 100 is operating.

[0049] · In the above embodiment, the setting control may be changed. For example, in step S92, when there are candidates for a plurality of specified values Z when only a part of the acquired service information IS is associated with the setting table TS, it is not necessary to set the maximum value among the candidates for the plurality of specified values Z as the specified value Z. As a specific example, the execution device 11 may set a value other than the maximum value among the candidates for the plurality of specified values Z as the specified value Z. Also, as a specific example, the execution device 11 may set, as the specified value Z, the initial value stored in the storage device 12 instead of the candidates for the plurality of specified values Z when associated with the setting table TS. Note that from the viewpoint of suppressing the determination that the communication index value CS is larger than the specified value Z despite normal communication, it is preferable for the execution device 11 to set, as the specified value Z, a value greater than or equal to the maximum value among the candidates for the plurality of specified values Z.

[0050] · For example, the process of step S81 can be omitted. As a specific example, in the acquisition control step S62, the execution device 11 of the communication relay device 10 may proceed to step S71 on the condition that a total of three pieces of service information IS have been acquired. In this case, the processes of step S81 and step S92 can be omitted. Note that in this configuration, the execution device 11 of the communication relay device 10 may execute the process of step S91 when starting the setting control.

[0051] · In the above embodiment, the configuration of the vehicle 100 may be changed. For example, the number of operation modes included in the setting table TS may be changed. As a specific example, the number of operation modes included in the setting table TS may be two, or four or more. Also, for example, the types of operation modes included in the setting table TS may be changed.

[0052] · For example, the number of control devices 20 provided in the vehicle 100 may be changed. As a specific example, the number of control devices 20 provided in the vehicle 100 may be two, or four or more. Also, for example, the types of control devices 20 provided in the vehicle 100 may be changed.

Explanation of Signs

[0053] 10…Communication relay device 11…Execution device 12…Memory device 20…Control device 21…Execution device 22…Memory device 50…DCM 61…First external bus 62…Second external bus 63…Third external bus 64…Fourth external bus 76…Display 100…Vehicle 200…Server

Claims

1. Relaying transmission and reception of data between a plurality of control devices on an in-vehicle network; determining that communication is abnormal when an index value indicating a communication volume per unit time of relayed data is greater than a specified value; acquiring service information indicating a type of a function being executed by each of the control devices; setting the specified value according to the plurality of pieces of service information acquired; Run Communications relay device.

2. acquiring second service information, which is service information indicating a type of a function being executed by the communication relay device, separately from first service information, which is the service information; setting the specified value according to the acquired plurality of first service information and the acquired second service information; Run The communication relay device according to claim 1 .

3. a setting table indicating a relationship between a combination of a plurality of pieces of service information and the specified value is stored in advance; setting the specified value by associating the acquired service information with the setting table; It is possible to execute acquiring only a part of the plurality of pieces of service information to be associated with the setting table, and in the case where a plurality of candidates for the prescribed value are present when only the acquired part of the service information is associated with the setting table, setting a maximum value among the plurality of candidates for the prescribed value as the prescribed value; Run The communication relay device according to claim 1 .

4. during a period from when the device is started to when the specified value is set in accordance with the service information, an initial value is set as the specified value instead of the specified value set in accordance with the service information; Run The initial value is equal to or greater than the maximum value of the specified values ​​that can be set according to the service information. The communication relay device according to claim 1 .

5. Relaying transmission and reception of data between a plurality of control devices on an in-vehicle network; determining that communication is abnormal when an index value indicating a communication volume per unit time of relayed data is greater than a specified value; Determining in which of a plurality of predetermined operating modes the vehicle is operating; setting the value of the predetermined value depending on the operating mode in which the vehicle is operating; Run Communications relay device.

Images