Abnormality assessment device, abnormality assessment method, and abnormality assessment program

Abstract

To easily identify an onboard device in which an abnormality has occurred from among a plurality of onboard devices connected to a bus.SOLUTION: An abnormality assessment device installed in a vehicle, comprises: a monitoring unit provided with a plurality of switches for switching between supplying and not supplying a power source voltage to each of a plurality of onboard devices connected to a bus, the monitoring unit monitoring the state of the bus and performing an assessment process for assessing an abnormality related to the bus on the basis of the monitoring result; and a control unit that switches each of the plurality of switches between on and off states on the basis of the assessment result of the monitoring unit.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to an abnormality determination device, an abnormality determination method, and an abnormality determination program. [Background technology]

[0002] In an in-vehicle system, a technology has been developed to reduce power consumption by controlling the in-vehicle devices connected to a bus to enter a sleep state. For example, Patent Document 1 (JP 2015-154189 A) discloses the following technology. That is, the communication system is a communication system including communication nodes mounted on a vehicle and connected to a plurality of communication buses, and a gateway device connected between the plurality of communication buses and relaying communications between communication nodes connected to different communication buses, wherein the gateway device has a receiving unit that receives data transmitted by a communication node connected to one of the plurality of communication buses, and a control unit that identifies a communication node that transmits data from the one communication bus, increases a count value of a transmission number counter that counts the number of transmissions of data linked to the communication node that transmits the data, and disables data communication via the one communication bus when the count value of the transmission number counter is equal to or greater than a threshold value, wherein the control unit identifies a communication node that transmits data received by the receiving unit after the ignition of the vehicle is turned off and the gateway device itself transitions to a sleep state, and the communication node connected to the one communication bus transmits data to the one communication bus and receives data from the one communication bus, and a control unit that determines that the communication node itself is in a state where it can transition to a sleep state, and transitions to the sleep state when it does not receive data from another communication node for a predetermined time.

[0003] Furthermore, technologies for identifying an on-board device in which an abnormality has occurred have been developed. For example, Patent Document 2 (JP 2009-126286 A) discloses the following technology: That is, a junction box is an on-board junction box that houses an internal circuit for branch connection within a case, and houses a printed circuit board as the internal circuit on which a circuit for branch connection to a plurality of electronic control units that become nodes of CAN communication via a CAN communication line is provided, and each branch circuit on the printed circuit board is provided with a check switch that can switch between connection and disconnection of the circuit when checking for an abnormality in the connected electronic control unit. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2015-154189 [Patent Document 2] Japanese Patent Application Laid-Open No. 2009-126286 Summary of the Invention [Problem to be solved by the invention]

[0005] If an abnormality occurs in an in-vehicle device connected to the bus, the in-vehicle device may send an unintended wake-up request. In this case, if other in-vehicle devices connected to the bus transition to wake-up mode in response to the abnormality, power consumption in the in-vehicle system will increase. Therefore, it is desirable to identify the in-vehicle device where the abnormality occurred and stop the transmission of unnecessary wake-up requests from the in-vehicle device.

[0006] In the technology described in Patent Document 2, an on-board device in which an abnormality has occurred is identified by manually switching a switch provided in a junction box between an on state and an off state. There is a need for a technology that goes beyond the technology described in Patent Document 2 and that makes it possible to easily identify an on-board device in which an abnormality has occurred.

[0007] The present disclosure has been made to solve the above-mentioned problems, and its purpose is to provide an abnormality determination device, an abnormality determination method, and an abnormality determination program that can easily identify an on-board device in which an abnormality has occurred from among multiple on-board devices connected to a bus. [Means for solving the problem]

[0008] The abnormality determination device disclosed herein is an abnormality determination device mounted on a vehicle, and is provided with a plurality of switches that switch whether or not to supply power supply voltage to a plurality of on-board devices connected to a bus, and is equipped with a monitoring unit that performs a determination process that monitors the state of the bus and determines an abnormality related to the bus based on the monitoring results, and a control unit that switches each of the plurality of switches between an on state and an off state based on the determination results of the monitoring unit.

[0009] One aspect of the present disclosure can be realized not only as an abnormality determination device equipped with such a characteristic processing unit, but also as a semiconductor integrated circuit that realizes part or all of the abnormality determination device, or as a system that includes the abnormality determination device. [Effects of the Invention]

[0010] According to the present disclosure, it is possible to easily identify an in-vehicle device in which an abnormality has occurred from among a plurality of in-vehicle devices connected to a bus. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 1 is a diagram illustrating an example of a configuration of an in-vehicle system according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a diagram illustrating an example of a sequence of sleep control in the in-vehicle communication system according to the embodiment of the present disclosure. [Figure 3] FIG. 3 is a diagram illustrating an example of a configuration of an abnormality determination device according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram for explaining an example of a determination process performed by the abnormality determination device according to the embodiment of the present disclosure. [Figure 5] FIG. 5 is a diagram for explaining an example of a determination process performed by the abnormality determination device according to the embodiment of the present disclosure. [Figure 6] FIG. 6 is a diagram illustrating another example of the determination process performed by the abnormality determination device according to the embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram for explaining an example of switching control by the abnormality determination device according to the embodiment of the present disclosure. [Figure 8] FIG. 8 is a diagram for explaining an example of a determination result in a determination process after switching control is performed by the abnormality determination device according to the embodiment of the present disclosure. [Figure 9] FIG. 9 is a diagram for explaining another example of switching control by the abnormality determination device according to the embodiment of the present disclosure. [Figure 10] FIG. 10 is a diagram for explaining another example of the determination result in the determination process after the switching control is performed by the abnormality determination device according to the embodiment of the present disclosure. [Figure 11] FIG. 11 is a flowchart defining an example of an operation procedure when the abnormality determination device according to the embodiment of the present disclosure performs a determination process. [Figure 12] FIG. 12 is a flowchart defining an example of an operation procedure when the abnormality determination device according to the embodiment of the present disclosure performs a determination process. [Figure 13] FIG. 13 is a flowchart illustrating an example of an operation procedure when the abnormality determination device according to the embodiment of the present disclosure performs switching control. [Figure 14] FIG. 14 is a diagram for explaining an example of a determination process performed by a modified example of an abnormality determination device according to an embodiment of the present disclosure. [Figure 15] FIG. 15 is a diagram for explaining another example of the determination process by the modified example of the abnormality determination device according to the embodiment of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0012] First, the contents of the embodiments of the present disclosure will be listed and described. (1) An abnormality determination device according to an embodiment of the present disclosure is an abnormality determination device mounted on a vehicle, and is provided with a plurality of switches that switch whether or not to supply power supply voltage to a plurality of on-board devices connected to a bus, and is equipped with a monitoring unit that monitors the state of the bus and performs a determination process to determine an abnormality related to the bus based on the monitoring results, and a control unit that switches each of the plurality of switches between an on state and an off state based on the determination results of the monitoring unit.

[0013] With this configuration, if it is determined that the bus state is abnormal, the switch state can be automatically changed to monitor the bus state again, making it easy to identify the on-board device that caused the abnormality. Therefore, it is easy to identify the on-board device that has experienced the abnormality from among the on-board devices connected to the bus.

[0014] (2) In (1) above, when the monitoring unit determines that an abnormality has occurred in the bus, the control unit may turn off a first switch, which is one of the multiple switches, and the monitoring unit may perform the determination process with the first switch turned off.When the monitoring unit determines that the state of the bus is normal with the first switch turned off, the control unit may determine that an abnormality has occurred in the vehicle equipment corresponding to the first switch.

[0015] With this configuration, it is possible to more accurately identify the on-board device that is the cause of the abnormality that has occurred in the bus.

[0016] (3) In (2) above, when the monitoring unit determines that the state of the bus is abnormal when the first switch is off, the control unit may turn on the first switch, which is in an off state, and turn off a second switch, which is any one of the switches different from the first switch, and the monitoring unit may perform the determination process when the first switch is on and the second switch is off.

[0017] With this configuration, if an abnormality occurs in the bus even after the first switch is switched from the on state to the off state, it can be determined that the on-board device corresponding to the first switch is not the cause of the abnormality. In this case, by performing the determination process with the first switch on and the second switch off, it is possible to continue identifying other on-board devices that may be the cause of the abnormality.

[0018] (4) In the above (2) or (3), the monitoring unit may determine an abnormality related to the bus in the determination process based on time series data of the length of at least one of the wake-up time when the bus is in a wake-up state and the sleep time when the bus is in a sleep state, and the monitoring unit may determine an abnormality related to the bus based on the time series data of the bus when the first switch is in an off state.

[0019] A possible bus abnormality is when an in-vehicle device connected to the bus sends an unintended wake-up request to another in-vehicle device, causing at least one of the bus's wake-up time and sleep time to change compared to when the bus is in a normal state. With the above configuration, it is possible to accurately detect an abnormality related to the bus using the bus's wake-up time or sleep time.

[0020] (5) In (2) above, the monitoring unit may determine an abnormality related to the bus in the determination process based on time series data of the length of wake-up time during which the bus is in a wake-up state and the length of sleep time during which the bus is in a sleep state.

[0021] With this configuration, the state of the bus can be grasped more accurately using the wake-up time and sleep time of the bus.

[0022] (6) In (5) above, the monitoring unit may determine that an abnormality has occurred in the bus if the length of the wake-up time and the length of the sleep time remain below a predetermined first threshold and a predetermined second threshold, respectively, for a predetermined period of time or more.

[0023] With this configuration, it is possible to easily determine whether an abnormality has occurred on the bus.

[0024] (7) An abnormality determination method according to an embodiment of the present disclosure is an abnormality determination method in an abnormality determination device mounted on a vehicle, which includes a step of providing a plurality of switches for switching whether or not to supply power supply voltage to a plurality of on-board devices connected to a bus, monitoring the state of the bus, and performing a determination process for determining an abnormality related to the bus based on the monitoring results, and a step of switching each of the plurality of switches between an on state and an off state based on the determination results of the determination process.

[0025] With this method, if it is determined that the bus state is abnormal, the switch state can be automatically changed to monitor the bus state again, making it easy to identify the on-board device that caused the abnormality. Therefore, it is easy to identify the on-board device that has experienced the abnormality from among the on-board devices connected to the bus.

[0026] (8) An abnormality determination program according to an embodiment of the present disclosure is an abnormality determination program used in an abnormality determination device mounted on a vehicle, and is provided with a plurality of switches that switch whether or not to supply power supply voltage to a plurality of on-board devices connected to a bus, and is a program that causes a computer to function as a monitoring unit that performs a judgment process to monitor the state of the bus and judge an abnormality related to the bus based on the monitoring results, and a control unit that switches each of the plurality of switches between an on state and an off state based on the judgment results of the monitoring unit.

[0027] With this configuration, if it is determined that the bus state is abnormal, the switch state can be automatically changed to monitor the bus state again, making it easy to identify the on-board device that caused the abnormality. Therefore, it is easy to identify the on-board device that has experienced the abnormality from among the on-board devices connected to the bus.

[0028] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In the drawings, identical or corresponding parts are designated by the same reference numerals, and their description will not be repeated. Furthermore, at least some of the embodiments described below may be combined in any manner.

[0029] [In-vehicle system] Fig. 1 is a diagram illustrating an example of the configuration of an in-vehicle system according to an embodiment of the present disclosure. Referring to Fig. 1, the in-vehicle system 301 includes an in-vehicle relay device 101, a plurality of in-vehicle ECUs (Electronic Control Units) 201, an abnormality determination device 202, a power supply unit 51, and a plurality of relays 61. The in-vehicle system 301 is mounted on a vehicle 1. The in-vehicle ECU 201 is an example of an in-vehicle device. The relays 61 are an example of a switch.

[0030] The in-vehicle ECU 201 is an autonomous driving ECU, an engine ECU, a steering ECU, a brake ECU, a TCU (Telematics Communication Unit), etc. Note that the in-vehicle system 301 may include in-vehicle devices such as a sensor, a navigation device, a human-machine interface, and a camera instead of or in addition to the in-vehicle ECU 201.

[0031] The in-vehicle relay device 101 , the plurality of in-vehicle ECUs 201 and the abnormality determination device 202 constitute an in-vehicle network 401 .

[0032] In the example shown in FIG. 1, the in-vehicle system 301 includes the in-vehicle ECUs 201A, 201B, 201C, 201D, and 201E.

[0033] The in-vehicle ECUs 201A and 201B are connected to the in-vehicle relay device 101 via, for example, an Ethernet (registered trademark) cable 11. The in-vehicle ECUs 201C, 201D, and 201E and the abnormality determination device 202 are connected to the in-vehicle relay device 101 via, for example, a CAN bus 12 that complies with the CAN (Controller Area Network) standard.

[0034] In the example shown in FIG. 1, the Ethernet cable 11 includes Ethernet cables 11A and 11B.

[0035] The in-vehicle ECU 201A is connected to the in-vehicle relay device 101 via an Ethernet cable 11A. The in-vehicle ECU 201B is connected to the in-vehicle relay device 101 via an Ethernet cable 11B.

[0036] Hereinafter, the in-vehicle ECU 201 connected to the in-vehicle relay device 101 via the Ethernet cable 11 will also be referred to as an "Ethernet device." Also, the in-vehicle ECU 201 connected to the in-vehicle relay device 101 via the CAN bus 12 will also be referred to as a "CAN device."

[0037] The in-vehicle relay device 101 relays frames transmitted and received between the in-vehicle ECUs 201 .

[0038] For example, each in-vehicle ECU 201 creates a frame including various information to be described later, such as information to assist the automatic driving performed by the vehicle 1 and information used for entertainment, and transmits the created frame to another in-vehicle ECU 201 or the in-vehicle relay device 101. The in-vehicle relay device 101 relays a frame received from a certain in-vehicle ECU 201 to another in-vehicle ECU 201.

[0039] The in-vehicle system 301 is not limited to a configuration including five in-vehicle ECUs 201, but may be a configuration including two, three, four, six or more in-vehicle ECUs 201.

[0040] Furthermore, the in-vehicle ECUs 201C, 201D, 201E and the abnormality determination device 202 are not limited to being connected to the in-vehicle relay device 101 via the CAN bus 12, but may also be connected to the in-vehicle relay device 101 via a bus conforming to a communication standard such as CAN FD (CAN with Flexible Data Rate) and LIN (Local Interconnect Network).

[0041] (Power supply part) The power supply unit 51 supplies power to the vehicle 1. The power supply unit 51 is, for example, a battery. The on-board relay device 101, each on-board ECU 201, and the abnormality determination device 202 operate using the power supplied from the power supply unit 51.

[0042] The power supply unit 51 is connected to the vehicle-mounted relay device 101 via a power line 3. The power supply unit 51 is connected to the Ethernet device, the CAN device, and the abnormality determination device 202 via a power line 4.

[0043] (relay) The plurality of relays 61 switch whether or not to supply power supply voltage to each of the plurality of in-vehicle ECUs 201 connected to the CAN bus 12 .

[0044] For example, the relay 61 switches between an on state and an off state under the control of the control unit 33 in the abnormality determination device 202, which will be described later. When the relay 61 switches from the on state to the off state, the power supply to the in-vehicle ECU 201 corresponding to the relay 61 is stopped.

[0045] 1, the in-vehicle system 301 includes relays 61A, 61B, and 61C, which are a plurality of relays 61. The relay 61A is an example of a first switch, and the relay 61B is an example of a second switch.

[0046] The relay 61A, the relay 61B, and the relay 61C are provided corresponding to the in-vehicle ECU 201C, the in-vehicle ECU 201D, and the in-vehicle ECU 201E, respectively.

[0047] Specifically, relay 61A is connected between in-vehicle ECU 201C and power supply unit 51. Relay 61B is connected between in-vehicle ECU 201D and power supply unit 51. Relay 61C is connected between in-vehicle ECU 201E and power supply unit 51. The state of each relay 61 is, for example, an on state when the ignition power of vehicle 1 transitions from an off state to an on state.

[0048] (wake-up mode and sleep mode) The abnormality determination device 202 and the CAN device transition from wake-up mode to sleep mode and from sleep mode to wake-up mode. In wake-up mode, the abnormality determination device 202 and the CAN device communicate with other devices in the in-vehicle system 301, and in sleep mode, they stop communicating with other devices in the in-vehicle system 301. Specifically, the sleep mode is a mode in which power consumption is lower than in wake-up mode due to stopping some functions of the device, stopping the power supply to the device, or reducing the clock frequency of the device, etc.

[0049] For example, in the abnormality determination device 202 and the CAN device, a wake-up condition, which is a condition for transitioning to a wake-up mode, and a sleep condition, which is a condition for transitioning to a sleep mode, are set in advance.

[0050] For example, the sleep condition is that the ignition of the vehicle 1 is turned off, that the vehicle 1 is parked, etc. Also, for example, the wake-up condition is that the ignition of the vehicle 1 is turned on, that the vehicle 1 starts to move, etc.

[0051] FIG. 2 is a diagram illustrating an example of a sequence of sleep control in the in-vehicle communication system according to the embodiment of the present disclosure.

[0052] 2, first, in the wake-up mode (steps S11 and S12), the abnormality determination device 202 and the CAN device transmit to each other CAN frames (hereinafter also referred to as "NM frames") including NM (Network Management) messages conforming to AUTOSAR (AUTomotive Open System ARchitecture) (registered trademark). Specifically, the abnormality determination device 202 and the CAN device transmit NM frames to each other for alive monitoring (steps S13 and S14).

[0053] Next, when the CAN device's own sleep condition is met in the wake-up mode (step S15), the CAN device stops transmitting NM frames (step S16).

[0054] Next, if the CAN device does not receive an NM frame from the abnormality determination device 202 within a predetermined time period after the CAN device stops transmitting the NM frame, the CAN device transitions to sleep mode (step S17).

[0055] In this way, by using the NM frame to switch the operation mode of the CAN device from wake-up mode to sleep mode, the power consumption of the CAN device can be reduced.

[0056] In the sleep mode (step S17), if the CAN device's wake-up condition is satisfied, the CAN device transitions to the wake-up mode and starts periodic transmission of NM frames. In addition, in the sleep mode (step S17), if the CAN device receives a wake-up request from another device in the in-vehicle system 301, the CAN device transitions to the wake-up mode.

[0057] [Abnormality determination device] 3 is a diagram illustrating an example of the configuration of an abnormality determination device according to an embodiment of the present disclosure. Referring to FIG. 3, abnormality determination device 202 includes a communication unit 21, a processing unit 22, and a storage unit 23. Processing unit 22 includes an NM processing unit 31, a monitoring unit 32, and a control unit 33. One or both of communication unit 21 and processing unit 22 are realized, for example, by a processing circuit including one or more processors. Storage unit 23 is, for example, a nonvolatile memory included in the processing circuit.

[0058] (NM processing section) The NM processing unit 31 transmits an NM frame to the CAN device via the communication unit 21 while the operation mode of its own abnormality determination device 202 is in the wake-up mode.

[0059] More specifically, for example, the NM processing unit 31 determines whether or not the wake-up condition of its own abnormality determination device 202 is met.

[0060] For example, the storage unit 23 stores the wake-up conditions of its own abnormality determination device 202.

[0061] The NM processing unit 31 monitors the state of the vehicle 1, for example, periodically, and determines whether the wake-up conditions stored in the storage unit 23 are met based on the monitoring results.

[0062] For example, the storage unit 23 stores a CAN table that indicates the correspondence between CAN devices and CAN-IDs.

[0063] When the NM processing unit 31 determines that the wake-up condition is met, it creates an NM frame including a CAN-ID and an NM message corresponding to each CAN device by referring to the CAN table in the storage unit 23. Then, the NM processing unit 31 transmits the created NM frame to the destination CAN device via the communication unit 21.

[0064] (Monitoring Department) The monitoring unit 32 monitors the state of the CAN bus 12 and performs a determination process to determine whether there is an abnormality related to the CAN bus 12 based on the monitoring results.

[0065] More specifically, for example, the monitoring unit 32 performs the determination process each time the processing timing T arrives after its own abnormality determination device 202 operating in the sleep mode transitions to the wake-up mode.

[0066] Specifically, for example, the monitoring unit 32 performs the determination process for a predetermined time Tc after the processing timing T. The predetermined time Tc is, for example, 10 minutes.

[0067] For example, in the judgment process, the monitoring unit 32 judges an abnormality related to the CAN bus 12 based on time series data of the length of the wake-up time when the state of the CAN bus 12 (hereinafter also referred to as the "bus state") is in the wake-up state and the length of the sleep time when the bus state is in the sleep state.

[0068] For example, the wake-up state is a state in which an NM frame is being transmitted on the CAN bus 12. Also, for example, the sleep state is a state in which an NM frame is not being transmitted on the CAN bus 12.

[0069] <Example 1> 4 is a diagram illustrating an example of a determination process performed by the abnormality determination device according to the embodiment of the present disclosure, in which the abnormality determination device 202 receives a wake-up request from a CAN device at times t1 and t3 and determines that a sleep condition for the CAN device is met at time t2.

[0070] 3 and 4, for example, in the abnormality determination device 202, the monitor 32 measures the wake-up time and the sleep time of the CAN bus 12.

[0071] Specifically, for example, at time t1, when the monitor 32 receives a wake-up request and its own abnormality determination device 202 transitions to a wake-up mode, the monitor 32 starts a timer.

[0072] The monitor 32 periodically receives an NM frame via the communication unit 21 from the CAN device that has transitioned to the wake-up mode.

[0073] When a CAN device operating in wake-up mode meets its own sleep conditions, it transitions to sleep mode and stops transmitting NM frames.

[0074] At time t2, if the NM frame does not arrive from the CAN device for a predetermined time Td or more, the monitoring unit 32 determines that the NM frame is not being transmitted on the CAN bus 12, i.e., the bus state has transitioned from the wake-up state to the sleep state. The predetermined time Td is longer than the transmission period of the NM frame in the CAN device.

[0075] Then, the monitoring unit 32 checks the time Cw1 measured by the timer at time t2, that is, the wake-up time of the CAN bus 12.

[0076] For example, the storage unit 23 stores a wake-up time threshold Th1, which is sufficiently greater than the predetermined time Td. The threshold Th1 is, for example, 10 seconds.

[0077] The monitoring unit 32 checks whether the measurement time Cw1 is equal to or greater than the threshold value Th1 stored in the storage unit 23. Here, it is assumed that the measurement time Cw1 is equal to or greater than the threshold value Th1.

[0078] If the measured time Cw1 is equal to or greater than the threshold value Th1, the monitor 32 determines that the bus state is normal. Then, the monitor 32 associates the measured time Cw1 with the time t2, stores the time in the storage 23, and resets the timer.

[0079] Next, at time t3, when the monitor 32 receives an NM frame again from the CAN device via the communication unit 21, the monitor 32 checks the time Cs1 measured by the timer, that is, the sleep time of the CAN bus 12.

[0080] For example, the storage unit 23 stores a sleep time threshold Th2, which is sufficiently greater than the predetermined time Td. The threshold Th2 is, for example, 10 seconds.

[0081] The monitoring unit 32 checks whether the measurement time Cs1 is equal to or greater than the threshold value Th2 stored in the storage unit 23. Here, it is assumed that the measurement time Cs1 is equal to or greater than the threshold value Th2.

[0082] For example, if the measured time Cw1 is equal to or greater than the threshold value Th1 and the measured time Cs1 is equal to or greater than the threshold value Th2, the monitor 32 determines that the state of the CAN bus 12 is normal and resets the timer.

[0083] <Example 2> 5 is a diagram illustrating an example of a determination process performed by the abnormality determination device according to the embodiment of the present disclosure, in which the abnormality determination device 202 receives a wake-up request from a CAN device at times t11, t13, and t15, and determines that the sleep condition of the CAN device is satisfied at times t12 and t14.

[0084] Referring to FIG. 5, at time t11, for example, when monitor 32 receives a wake-up request and abnormality determination device 202 of its own transitions to a wake-up mode, monitor 32 starts a timer.

[0085] The monitor 32 periodically receives an NM frame via the communication unit 21 from the CAN device that has transitioned to the wake-up mode.

[0086] At time t12, if the NM frame does not arrive from the CAN device for a predetermined time Td or longer, the monitor 32 determines that the bus state has transitioned from the wakeup state to the sleep state.

[0087] The monitor 32 then checks whether the time Cw2 measured by the timer at time t12, that is, the wake-up time of the CAN bus 12, is equal to or greater than the threshold value Th1. Here, it is assumed that the measured time Cw2 is less than the threshold value Th1.

[0088] For example, if the measurement time Cw2 is less than the threshold value Th1, the monitoring unit 32 determines that the bus state may be abnormal. Then, the monitoring unit 32 associates the measurement time Cw2 with the time t12, stores the time t12 in the storage unit 23, and suspends resetting of the timer.

[0089] Next, at time t13, when the monitor 32 receives an NM frame again from the CAN device via the communication unit 21, the monitor 32 checks the time Ce measured by the timer.

[0090] The monitoring unit 32 then calculates a value Cs2 by subtracting the measurement time Cw2 stored in the memory unit 23 from the measurement time Ce at time t13. The value Cs2 indicates the length of the period from time t12 to time t13, i.e., the sleep time of the CAN bus 12.

[0091] After calculating the value Cs2, the monitoring unit 32 checks whether the calculation result is equal to or greater than the threshold value Th2. In the example shown in Fig. 5, it is assumed that the value Cs2 is equal to or greater than the threshold value Th2.

[0092] If the measured time Cw2 is less than the threshold value Th1 and the value Cs2 is equal to or greater than the threshold value Th2, the monitoring unit 32 determines that the bus state is normal and resets the timer.

[0093] Next, the monitor 32 periodically receives an NM frame via the communication unit 21 from the CAN device that has transitioned to the wake-up mode.

[0094] Next, at time t14, if the NM frame does not arrive from the CAN device for a predetermined time Td or longer, the monitor 32 determines that the bus state has transitioned from the wakeup state to the sleep state.

[0095] The monitor 32 then checks whether the time Cw3 measured by the timer at time t14, i.e., the wake-up time of the CAN bus 12, is equal to or greater than the threshold value Th1. Here, it is assumed that the length of the measured time Cw3 is equal to or greater than the threshold value Th1.

[0096] If the measured time Cw3 is equal to or greater than the threshold value Th1, the monitor 32 determines that the bus state is normal. Then, the monitor 32 associates the measured time Cw3 with time t14, stores the time in the storage unit 23, and resets the timer.

[0097] Next, at time t15, when the monitoring unit 32 receives the NM frame again from the CAN device via the communication unit 21, the monitoring unit 32 checks whether the measurement time Cs3 by the timer, i.e., the sleep time of the CAN bus 12, is equal to or greater than the threshold value Th2. Here, it is assumed that the length of the measurement time Cs3 is less than the threshold value Th2.

[0098] If the measurement time Cw3 is equal to or greater than the threshold value Th1 and the measurement time Cs3 is less than the threshold value Th2, the monitoring unit 32 determines that the bus state is normal and resets the timer.

[0099] <Example 3> 6 is a diagram illustrating another example of the determination process performed by the abnormality determination device according to the embodiment of the present disclosure, in which the abnormality determination device 202 receives a wake-up request from a CAN device at times t21 and t23 and determines that the sleep condition of the CAN device is satisfied at times t22 and t24.

[0100] Referring to FIG. 6, at time t21, for example, when monitor 32 receives a wake-up request and abnormality determination device 202 of its own transitions to a wake-up mode, monitor 32 starts a timer.

[0101] For example, the monitor 32 determines that an abnormality has occurred in the CAN bus 12 when the length of the wake-up time and the length of the sleep time remain below the threshold Th1 and threshold Th2, respectively, for a predetermined time or longer.

[0102] The monitor 32 periodically receives an NM frame via the communication unit 21 from the CAN device that has transitioned to the wake-up mode.

[0103] At time t22, if the NM frame does not arrive from the CAN device for a predetermined time Td or longer, the monitor 32 determines that the bus state has transitioned from the wakeup state to the sleep state.

[0104] The monitor 32 then checks whether the time Cw4 measured by the timer at time t22, i.e., the wake-up time of the CAN bus 12, is equal to or greater than the threshold value Th1. Here, it is assumed that the length of the measured time Cw4 is less than the threshold value Th1.

[0105] For example, when the monitoring unit 32 confirms that the length of the measurement time Cw4 is less than the threshold value Th1, the monitoring unit 32 associates the measurement time Cw4 with the time t22, stores the time in the storage unit 23, and suspends resetting of the timer.

[0106] Next, at time t23, when the monitor 32 receives an NM frame again from the CAN device via the communication unit 21, the monitor 32 checks the time Ce measured by the timer.

[0107] The monitoring unit 32 then calculates a value Cs4 by subtracting the measurement time Cw4 stored in the memory unit 23 from the measurement time Ce at time t23. The value Cs4 indicates the length of the period from time t22 to time t23, i.e., the sleep time of the CAN bus 12.

[0108] After calculating the value Cs4, the monitoring unit 32 checks whether the calculation result is equal to or greater than the threshold value Th2. In the example shown in Fig. 6, it is assumed that the value Cs4 is less than the threshold value Th2. Then, the monitoring unit 32 stores the calculated value Cs4 in the storage unit 23 and suspends resetting of the timer.

[0109] The monitor 32 also checks whether the measured time Ce at time t23 is equal to or greater than a threshold value Th3. The threshold value Th3 is greater than the threshold values Th1 and Th2. The threshold value Th3 is, for example, 300 seconds. In the example shown in FIG. 6, it is assumed that the measured time Ce is less than the threshold value Th3.

[0110] Next, at time t24, if the NM frame does not arrive from the CAN device for a predetermined time Td or longer, the monitor 32 determines that the bus state has transitioned from the wakeup state to the sleep state.

[0111] The monitoring unit 32 then checks the time Ce measured by the timer at time t24, and calculates a value Cw5 by subtracting the measured time Cw4 and value Cs4 stored in the memory unit 23 from the measured time Ce. The value Cw5 indicates the length of the period from time t23 to time t24, i.e., the length of the wake-up time of the CAN bus 12.

[0112] After calculating the value Cw5, the monitoring unit 32 checks whether the calculation result is equal to or greater than the threshold value Th1. Here, it is assumed that the length of the value Cw5 is less than the threshold value Th1. Then, the monitoring unit 32 stores the calculated value Cw5 in the storage unit 23 and suspends resetting of the timer.

[0113] Furthermore, the monitor 32 checks whether the length of the measurement time Ce at time t24 is equal to or greater than the threshold value Th3. In the example shown in Fig. 6, it is assumed that the length of the measurement time Ce at time t24 is less than the threshold value Th3.

[0114] Next, at time t25, when the monitor 32 receives an NM frame again from the CAN device via the communication unit 21, the monitor 32 checks the time Ce measured by the timer.

[0115] The monitoring unit 32 then calculates a value Cs5 by subtracting the measurement time Cw4, the value Cs4, and the value Cw5 stored in the memory unit 23 from the measurement time Ce at time t25. The value Cs5 indicates the length of the period from time t24 to time t25, i.e., the sleep time of the CAN bus 12.

[0116] After calculating the value Cs5, the monitoring unit 32 checks whether the calculation result is equal to or greater than the threshold value Th2. In the example shown in Fig. 6, it is assumed that the value Cs5 is less than the threshold value Th2.

[0117] The monitoring unit 32 also checks whether the measured time Ce at time t25 is equal to or greater than the threshold value Th3. In the example shown in FIG. 6, the measured time Ce is equal to or greater than the threshold value Th3. In this case, the monitoring unit 32 determines that the bus state is abnormal. The monitoring unit 32 then outputs abnormality occurrence information E1 to the control unit 33, indicating that an abnormality has occurred in the CAN bus 12.

[0118] (Switching control) FIG. 7 is a diagram for explaining an example of switching control by the abnormality determination device according to the embodiment of the present disclosure.

[0119] 3 and 7, control unit 33 switches each of a plurality of relays 61 between an on state and an off state based on the determination result of monitoring unit 32.

[0120] More specifically, for example, when the monitoring unit 32 determines that an abnormality has occurred in the CAN bus 12, the control unit 33 turns off any one of the plurality of relays 61.

[0121] Specifically, for example, when the control unit 33 receives abnormality occurrence information E1 from the monitoring unit 32, it turns off each relay 61 one by one in a predetermined order. Here, it is assumed that the control unit 33 turns off relay 61A and relay 61B in this order among the multiple relays 61. That is, when the control unit 33 receives abnormality occurrence information E1 from the monitoring unit 32, it performs switching control K1 to switch relay 61A from an on state to an off state.

[0122] When the control unit 33 completes the switching control K1, the control unit 33 outputs to the monitoring unit 32 a switching completion notification N1 indicating that the switching control K1 has been performed.

[0123] For example, the monitoring unit 32 performs the determination process when the relay 61A is in the OFF state. Specifically, for example, when the monitoring unit 32 receives a switching completion notification N1 from the control unit 33, the monitoring unit 32 performs the determination process as described above.

[0124] For example, when the monitoring unit 32 determines that the bus state is normal when the relay 61A is turned off, it determines that an abnormality has occurred in the in-vehicle ECU 201C corresponding to the relay 61A.

[0125] Specifically, for example, in the judgment process after receiving a switching completion notification N1 from the control unit 33, the monitoring unit 32 judges that the bus state is normal if at least one of the following conditions is met: the length of the wake-up time is equal to or greater than the threshold value Th1, and the length of the sleep time is equal to or greater than the threshold value Th2.

[0126] 7 shows a case where the monitoring unit 32 determines that the bus state is normal in the determination process after receiving a switching completion notification N1 from the control unit 33. In this case, the monitoring unit 32 determines that an abnormality has occurred in the in-vehicle ECU 201C to which the relay 61A is connected.

[0127] Then, the monitoring unit 32 transmits ECU abnormality information M1, which indicates that an abnormality has occurred in the in-vehicle ECU 201C, to a navigation device (not shown) via the communication unit 21.

[0128] For example, when the navigation device receives the ECU abnormality information M1 from the abnormality determination device 202, the navigation device performs notification processing based on the received ECU abnormality information M1. Specifically, for example, the navigation device displays the content indicated by the ECU abnormality information M1 on its own display unit. Note that the navigation device may be configured to notify the passengers of the vehicle 1 of the content indicated by the ECU abnormality information M1 by a method other than displaying it on its own display unit, for example, by voice.

[0129] 8 is a diagram illustrating an example of a determination result in a determination process after switching control is performed by the abnormality determination device according to the embodiment of the present disclosure. FIG. 8 shows a determination result in a determination process after switching control K1 is performed by the abnormality determination device 202.

[0130] Referring to Figure 8, if the monitoring unit 32 determines that the bus state is abnormal in the judgment process after receiving the switching completion notification N1 from the control unit 33, the monitoring unit 32 outputs abnormality occurrence information E2 to the control unit 33, indicating that an abnormality is continuing to occur in the CAN bus 12.

[0131] FIG. 9 is a diagram for explaining another example of switching control by the abnormality determination device according to the embodiment of the present disclosure.

[0132] 3 and 9, for example, when the monitoring unit 32 determines that the bus state is abnormal when the relay 61A is turned off, the control unit 33 turns on the relay 61A that is in the off state and turns off any one of the other relays 61 different from the relay 61A.

[0133] More specifically, for example, when the control unit 33 receives abnormality occurrence information E2 from the monitoring unit 32, the control unit 33 performs switching control K2 to switch the relay 61A from the off state to the on state and to switch the relay 61B from the on state to the off state.

[0134] When the control unit 33 completes the switching control K2, the control unit 33 outputs to the monitoring unit 32 a switching completion notification N2 indicating that the switching control K2 has been performed.

[0135] For example, the monitoring unit 32 performs the determination process in a state where the relay 61A is turned on and the relay 61B is turned off.

[0136] Specifically, for example, when the monitoring unit 32 receives a switching completion notification N2 from the control unit 33, the monitoring unit 32 performs the above-described determination process.

[0137] If the monitoring unit 32 determines that the bus state is normal in the determination process after receiving the switching completion notification N2 from the control unit 33, it determines that an abnormality has occurred in the in-vehicle ECU 201D to which the relay 61B is connected.

[0138] Then, the monitoring unit 32 transmits ECU abnormality information M2, which indicates that an abnormality has occurred in the in-vehicle ECU 201D, to the navigation device via the communication unit 21.

[0139] 10 is a diagram illustrating another example of a determination result in the determination process after the switching control is performed by the abnormality determination device 202 according to the embodiment of the present disclosure. FIG. 10 shows a determination result in the determination process after the switching control K2 is performed by the abnormality determination device 202.

[0140] Referring to Figure 10, if the monitoring unit 32 determines that the bus state is abnormal in the judgment process after receiving the switching completion notification N2 from the control unit 33, it determines that an abnormality has occurred in the in-vehicle ECU 201E to which the relay 61C is connected.

[0141] Then, the monitoring unit 32 transmits ECU abnormality information M3, which indicates that an abnormality has occurred in the in-vehicle ECU 201E, to the navigation device via the communication unit 21.

[0142] For example, when the navigation device receives the ECU abnormality information M2 or M3 from the abnormality determination device 202, the navigation device performs the above notification process based on the received ECU abnormality information M2 or M3.

[0143] [Operation flow] 11 and 12 are flowcharts defining an example of an operation procedure when the abnormality determination device according to the embodiment of the present disclosure performs a determination process.

[0144] 11 and 12, first, abnormality determining device 202 waits in wake-up mode (step S101) until processing timing T of determining the bus state arrives (NO in step S102).

[0145] Then, when the processing timing T arrives (YES in step S102), the abnormality determination device 202 starts a timer (step S103).

[0146] Next, the abnormality determination device 202 waits for reception of an NM frame from the CAN device (NO in step S104).

[0147] Next, if the abnormality determination device 202 receives an NM frame again from the CAN device before a predetermined time Td has elapsed since the time when the abnormality determination device 202 last received an NM frame from the CAN device (YES in step S104), it determines that the bus state is a wake-up state (step S105) and waits for the arrival of a new NM frame from the CAN device (NO in step S104).

[0148] On the other hand, if an NM frame does not arrive from the CAN device even after a predetermined time Td has elapsed since the time when the NM frame was last received from the CAN device (NO in step S104), the abnormality determination device 202 determines that the bus state is a sleep state (step S106).

[0149] Next, the abnormality determination device 202 checks whether the time measured by the timer, that is, the wake-up time, is equal to or greater than a threshold value Th1 (step S107).

[0150] Next, if the wake-up time is equal to or greater than the threshold value Th1 (YES in step S106), the abnormality determination device 202 resets the timer (step S108).

[0151] Next, the abnormality determination device 202 waits for reception of an NM frame from the CAN device (NO in step S109).

[0152] Then, when the abnormality determination device 202 receives the NM frame from the CAN device (YES in step S109), it determines that the bus state has transitioned from the sleep state to the wakeup state (step S110).

[0153] Next, the abnormality determination device 202 checks whether or not the time measured by the timer at the time when it is determined that the bus state has transitioned to the wakeup state, that is, the sleep time, is equal to or greater than a threshold value Th2 (step S111).

[0154] If the sleep time is equal to or greater than the threshold value Th2 (YES in step S111), the abnormality determination device 202 resets the timer (step S112).

[0155] Next, the abnormality determination device 202 checks whether the time Ce measured by the timer is less than the threshold value Th3 (step S113).

[0156] If the time Ce measured by the timer is less than the threshold value Th3 (YES in step S113), the abnormality determining device 202 checks whether a predetermined time Tc has elapsed since the processing timing T arrived (step S114).

[0157] Next, if the predetermined time Tc has elapsed since the processing timing T arrived (YES in step S114), the abnormality determination device 202 waits until the next processing timing T arrives (NO in step S102).

[0158] On the other hand, if the predetermined time Tc has not elapsed since the processing timing T arrived (NO in step S114), the abnormality determination device 202 waits for reception of a new NM frame from the CAN device (NO in step S104).

[0159] Furthermore, if the wake-up time is less than the threshold value Th1 (NO in step S107), the abnormality determination device 202 suspends resetting of the timer and waits for reception of a new NM frame from the CAN frame (NO in step S109).

[0160] Furthermore, if the sleep time is less than the threshold value Th2 (NO in step S111), the abnormality determination device 202 suspends resetting of the timer and checks whether the time Ce measured by the timer is less than the threshold value Th3 (step S113).

[0161] Furthermore, if the time Ce measured by the timer is equal to or greater than the threshold value Th3 (YES in step S113), the abnormality determining device 202 determines that the bus state is abnormal (step S115).

[0162] FIG. 13 is a flowchart illustrating an example of an operation procedure when the abnormality determination device according to the embodiment of the present disclosure performs switching control.

[0163] Referring to FIG. 13, first, when abnormality determination device 202 determines that the bus state is abnormal (YES in step S201), it turns off relay 61A among the plurality of relays 61 (step S202).

[0164] Next, the abnormality determination device 202 performs a determination process with the relay 61A turned off (step S203).

[0165] Next, if abnormality determination device 202 determines that the bus state is normal with relay 61A turned off (NO in step S204), it determines that an abnormality has occurred in in-vehicle ECU 201C to which relay 61A is connected (step S205).

[0166] Next, the abnormality determination device 202 transmits ECU abnormality information M1 indicating that an abnormality has occurred in the in-vehicle ECU 201C to the navigation device (step S206).

[0167] On the other hand, if the abnormality determination device 202 determines that the bus state is abnormal when the relay 61A is turned off (YES in step S204), it turns on the relay 61A and turns off any other relay 61 other than the relay 61A, specifically the relay 61B (step S207).

[0168] Next, the abnormality determination device 202 performs a determination process in a state where the relay 61A is turned on and the relay 61B is turned off (step S208).

[0169] Then, when abnormality determination device 202 determines that the bus state is normal with relay 61A turned on and relay 61B turned off (NO in step S209), it determines that an abnormality has occurred in in-vehicle ECU 201D to which relay 61B is connected (step S210).

[0170] Next, the abnormality determination device 202 transmits ECU abnormality information M2 indicating that an abnormality has occurred in the in-vehicle ECU 201D to the navigation device (step S211).

[0171] On the other hand, if the abnormality determination device 202 determines that the bus state is abnormal when relay 61A is turned on and relay 61B is turned off (YES in step S209), it determines that an abnormality has occurred in a relay 61 other than relays 61A and 61B, i.e., in the in-vehicle ECU 201E connected to relay 61C (step S212).

[0172] Next, the abnormality determination device 202 transmits ECU abnormality information M3 indicating that an abnormality has occurred in the in-vehicle ECU 201E to the navigation device (step S213).

[0173] In the in-vehicle system 301 according to the embodiment of the present disclosure, the abnormality determination device 202 is configured to turn off any one of the plurality of relays 61 to perform the determination process when it determines that an abnormality has occurred in the CAN bus 12, but this is not limited to this. The abnormality determination device 202 may be configured to turn off any two or more of the plurality of relays 61 to perform the determination process when it determines that an abnormality has occurred in the CAN bus 12.

[0174] Furthermore, in the in-vehicle system 301 according to the embodiment of the present disclosure, when it is determined that the state of the CAN bus 12 is abnormal with the relay 61A in the off state, the abnormality determination device 202 performs the determination process by turning on the relay 61A that is in the off state and turning off any one of the relays 61 other than the relay 61A, but this is not limited to this. When it is determined that the state of the CAN bus 12 is abnormal with the relay 61A in the off state, the abnormality determination device 202 may perform the determination process by turning on the relay 61A that is in the off state and turning off the other multiple relays 61 other than the relay 61A.

[0175] Furthermore, in the in-vehicle system 301 according to the embodiment of the present disclosure, the abnormality determination device 202 is configured to determine that an abnormality has occurred in the CAN bus 12 when the wake-up time of the CAN bus 12 and the sleep time of the CAN bus 12 remain below the threshold value Th1 and below the threshold value Th2, respectively, for a predetermined period of time or longer, but this is not limited to this. The abnormality determination device 202 may also be configured to determine that an abnormality has occurred in the CAN bus 12 when consecutive wake-up times and sleep times are below the threshold value Th1 and below the threshold value Th2, respectively.

[0176] Furthermore, although the in-vehicle system 301 according to the embodiment of the present disclosure is configured to include a plurality of relays 61 provided corresponding to the plurality of in-vehicle ECUs 201, the present disclosure is not limited to this. In the in-vehicle system 301, some or all of the plurality of relays 61 may be replaced with semiconductor switches.

[0177] In addition, in the in-vehicle system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 and the abnormality determination device 202 are separate devices, but this is not limiting. The in-vehicle relay device 101 may be configured to include part or all of the abnormality determination device 202.

[0178] [Variations] In the in-vehicle system 301, the abnormality determination device 202 may be configured to determine an abnormality related to the CAN bus 12 based on either the wake-up time of the CAN bus 12 or the sleep time of the CAN bus 12, instead of determining the abnormality based on both the wake-up time of the CAN bus 12 and the sleep time of the CAN bus 12.

[0179] FIG. 14 is a diagram for explaining an example of a determination process performed by a modified example of an abnormality determination device according to an embodiment of the present disclosure.

[0180] 3 and 14, at time t41, for example, when monitor 32 receives a wake-up request and abnormality determination device 202 thereof transitions to a wake-up mode, monitor 32 starts a timer.

[0181] The monitor 32 periodically receives an NM frame via the communication unit 21 from the CAN device that has transitioned to the wake-up mode.

[0182] At time t42, if the NM frame does not arrive from the CAN device for a predetermined time Td or longer, the monitor 32 determines that the bus state has transitioned from the wakeup state to the sleep state.

[0183] The monitoring unit 32 then checks whether the time Cw11 measured by the timer at time t42, i.e., the wake-up time of the CAN bus 12, is equal to or greater than the threshold value Th1. Here, it is assumed that the measured time Cw11 is less than the threshold value Th1. In this case, the monitoring unit 32 determines that the bus state is abnormal. The monitoring unit 32 then outputs abnormality occurrence information E1 to the control unit 33.

[0184] FIG. 15 is a diagram for explaining another example of the determination process by the modified example of the abnormality determination device according to the embodiment of the present disclosure.

[0185] Referring to FIG. 15, at time t51, for example, when monitor 32 receives a wake-up request and abnormality determination device 202 of its own transitions to a wake-up mode, monitor 32 starts a timer.

[0186] The monitor 32 periodically receives an NM frame via the communication unit 21 from the CAN device that has transitioned to the wake-up mode.

[0187] At time t52, if the NM frame does not arrive from the CAN device for a predetermined time Td or longer, the monitor 32 determines that the bus state has transitioned from the wakeup state to the sleep state.

[0188] The monitor 32 then checks whether the time Cw12 measured by the timer at time t52, that is, the wake-up time of the CAN bus 12, is equal to or greater than the threshold value Th1. Here, it is assumed that the measured time Cw12 is equal to or greater than the threshold value Th1.

[0189] If the measured time Cw12 is equal to or greater than the threshold value Th1, the monitoring unit 32 determines that the bus state is normal and resets the timer.

[0190] Next, at time t53, when the monitoring unit 32 receives an NM frame again from the CAN device via the communication unit 21, it checks whether the timer measurement time Cs21, i.e., the sleep time of the CAN bus 12, is equal to or greater than the threshold value Th2. Here, it is assumed that the length of the measurement time Cs21 is less than the threshold value Th2. In this case, the monitoring unit 32 determines that the bus state is abnormal. Then, the monitoring unit 32 outputs abnormality occurrence information E1 to the control unit 33.

[0191] The above-described embodiments should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is defined by the claims, not by the above description, and is intended to include all modifications within the meaning and scope of the claims.

[0192] Each process (each function) in the above-described embodiments is realized by a processing circuit including one or more processors. The processing circuit may be configured as an integrated circuit or the like that combines one or more memories, various analog circuits, and various digital circuits in addition to the one or more processors. The one or more memories store programs (instructions) that cause the one or more processors to execute each of the processes. The one or more processors may execute each of the processes according to the programs read from the one or more memories, or according to logic circuits pre-designed to execute each of the processes. The processor may be various processors suitable for computer control, such as a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), a DSP (Digital Signal Processor), an FPGA (Field Programmable Gate Array), and an ASIC (Application Specific Integrated Circuit). Note that the physically separate processors may execute each of the processes in cooperation with each other. For example, the processors mounted on a plurality of physically separated computers may cooperate with each other to execute the above processes via a network such as a LAN (Local Area Network), a WAN (Wide Area Network), the Internet, etc. The program may be installed into the memory from an external server device or the like via the network, or may be distributed in a state stored on a recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a semiconductor memory, and installed into the memory from the recording medium.

[0193] The above description includes the following additional features. [Appendix 1] An abnormality determination device mounted on a vehicle, a plurality of switches are provided for switching whether or not to supply a power supply voltage to a plurality of in-vehicle devices connected to the bus; a processing circuit; The processing circuitry monitors the state of the bus, and performs a determination process to determine an abnormality related to the bus based on the monitoring result; The abnormality determination device switches each of the plurality of switches between an on state and an off state based on the determination result of the determination process. [Explanation of symbols]

[0194] 1 vehicle 3,4 Power line 11, 11A, 11B Ethernet Cable 12 CAN bus 21 Communications Department 22 Processing section 23 Memory section 31 NM processing section 32 Monitoring Department 33 Control Unit 51 Power supply section 61, 61A, 61B, 61C Relays 101 Vehicle relay device 201,201A,201B,201C,201D,201E Vehicle ECU 202 Abnormality determination device 301 In-Vehicle Systems 401 In-Vehicle Network

Claims

1. An abnormality determination device mounted on a vehicle, a plurality of switches are provided for switching whether or not to supply a power supply voltage to a plurality of in-vehicle devices connected to the bus; a monitoring unit that monitors the state of the bus and performs a determination process to determine an abnormality related to the bus based on the monitoring result; and a control unit that switches each of the plurality of switches between an on state and an off state based on a determination result of the monitoring unit.

2. when the monitoring unit determines that an abnormality has occurred in the bus, the control unit turns off a first switch that is one of the plurality of switches; the monitoring unit performs the determination process in a state where the first switch is turned off, 2. The abnormality determination device according to claim 1, wherein the monitoring unit determines that an abnormality has occurred in the vehicle-mounted device corresponding to the first switch when the monitoring unit determines that the state of the bus is normal when the first switch is off.

3. when the monitoring unit determines that the state of the bus is abnormal with the first switch in an off state, the control unit turns on the first switch that is in an off state and turns off a second switch that is any one of the switches different from the first switch; The abnormality determination device according to claim 2 , wherein the monitoring unit performs the determination process in a state where the first switch is on and the second switch is off.

4. the monitoring unit determines an abnormality related to the bus based on time series data of at least one of a wake-up time during which the bus is in a wake-up state and a sleep time during which the bus is in a sleep state in the determination process; 4. The abnormality determination device according to claim 2, wherein the monitoring unit determines an abnormality related to the bus based on the time-series data of the bus when the first switch is in an OFF state.

5. 3. The abnormality determination device according to claim 2, wherein the monitoring unit, in the determination process, determines an abnormality related to the bus based on time series data of the length of a wake-up time during which the bus is in a wake-up state and the length of a sleep time during which the bus is in a sleep state.

6. 6. The abnormality determination device according to claim 5, wherein the monitoring unit determines that an abnormality has occurred in the bus if the length of the wake-up time and the length of the sleep time remain less than a predetermined first threshold and a predetermined second threshold, respectively, for a predetermined period of time or more.

7. An abnormality determination method for an abnormality determination device mounted on a vehicle, comprising: a plurality of switches are provided for switching whether or not to supply a power supply voltage to a plurality of in-vehicle devices connected to the bus; a step of monitoring the state of the bus and performing a determination process to determine an abnormality related to the bus based on the monitoring result; and switching each of the plurality of switches between an on state and an off state based on a determination result of the determination process.

8. An abnormality determination program used in an abnormality determination device mounted on a vehicle, a plurality of switches are provided for switching whether or not to supply a power supply voltage to a plurality of in-vehicle devices connected to the bus; Computer, a monitoring unit that monitors the state of the bus and performs a determination process to determine an abnormality related to the bus based on the monitoring result; a control unit that switches each of the plurality of switches between an on state and an off state based on a determination result of the monitoring unit; An abnormality detection program to function as a

Images