Relay device and in-vehicle network system

Abstract

To provide a relay device that can suppress erroneous determination of a failure by a second device.SOLUTION: An in-vehicle network system includes, as an ECU having a network management function, a first device 61, a second device 62, and a third device. The second device 62 executes failure determination to determine that the first device 61 has failed when periodic reception of a message periodically transmitted by the first device 61 is interrupted. The third device has a partial network function in addition to the network management function. A relay device 10 relays messages exchanged between a first communication bus connected to the first device 61 and a second communication bus connected to the second device 62 and the third device. The relay device 10 acquires state information including information indicating whether the first device 61 is in a standby state or an operation state. Then, the relay device 10 transmits the acquired state information to the second device 62.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present invention relates to a relay device and an in-vehicle network system. [Background technology]

[0002] Patent Document 1 describes an in-vehicle network system. This in-vehicle network system is composed of multiple electronic control units (ECUs). Hereinafter, an electronic control unit will be referred to as an ECU. The multiple ECUs include a mixture of ECUs that, when receiving a message from another ECU, check the destination of the message and ECUs that do not check the destination of the message. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2023-109566 Summary of the Invention [Problem to be solved by the invention]

[0004] An ECU has an operating state in which it can communicate with other ECUs, and a standby state in which it stops communication to reduce power consumption. An ECU has a network management function that transitions from the standby state to the operating state when it is requested to operate via a message. Hereinafter, the network management function will be referred to as the NM function. Among ECUs that have the NM function, there are ECUs that have the partial network function and ECUs that do not have the partial network function. Hereinafter, the partial network function will be referred to as the PN function.

[0005] An ECU with a PN function sends a PN message containing information indicating the destination. The PN message is sent to activate other ECUs with a PN function. When an ECU with a PN function receives a PN message, it checks the destination of the message. Then, the ECU with a PN function activates only if the message is addressed to the ECU itself.

[0006] An ECU without PN functionality sends an NM message. The NM message is sent to put other ECUs without PN functionality into operation. An ECU without PN functionality enters operation without checking the destination, regardless of whether the received message is an NM message or a PN message.

[0007] In an in-vehicle network system, both ECUs with PN functionality and ECUs without PN functionality may be connected to a single communication bus. ECUs without PN functionality connected to such a communication bus can enter an operating state by receiving a PN message, even if no NM message has been sent. At this time, ECUs without PN functionality connected to another communication bus may be in a standby state because no NM message has been sent.

[0008] In this way, an ECU without the PN function may be in an operating state even when other ECUs without the PN function are in a standby state. An ECU with the NM function has a function that determines that a monitored ECU has failed when periodic reception of messages from the monitored ECU is interrupted. Therefore, if only some ECUs are in an operating state, the operating ECU without the PN function may erroneously determine that the monitored ECU in a standby state has failed. [Means for solving the problem]

[0009] A relay device for solving the above problem is applied to an in-vehicle network system. The in-vehicle network system includes a first device, a second device, and a third device as electronic control devices having a network management function that transitions from a standby state in which communication is not performed to an operating state in which communication is possible when an operation is requested through a message. In the in-vehicle network system, the second device performs a failure determination to determine that the first device has failed when periodic reception of the message periodically transmitted by the first device is interrupted. In the in-vehicle network system, the third device has, in addition to the network management function, a partial network function that does not transition from the standby state to the operating state when operation is requested through the message and the message is not addressed to the third device. The in-vehicle network system includes a first communication bus connected to the first device and a second communication bus connected to the second device and the third device. In the in-vehicle network system, a relay device relays the messages exchanged between the first communication bus and the second communication bus. The relay device acquires status information including information indicating whether the first device is in the standby state or the operating state, and then transmits the acquired status information to the second device.

[0010] An in-vehicle network system for solving the above problems includes a first device, a second device, and a third device as electronic control devices having a network management function that transitions from a standby state in which communication is not performed to an operating state in which communication is possible when operation is requested via a message. In the in-vehicle network system, the second device performs a failure determination to determine that the first device has failed when periodic reception of the message periodically transmitted by the first device is interrupted. In the in-vehicle network system, the third device has, in addition to the network management function, a partial network function that does not transition from the standby state to the operating state when operation is requested via the message and the message is not addressed to the third device. The in-vehicle network system includes a first communication bus connected to the first device, a second communication bus connected to the second device and the third device, and a relay device. In the in-vehicle network system, the relay device relays the messages exchanged between the first communication bus and the second communication bus. In the in-vehicle network system, the relay device acquires status information including information indicating whether the first device is in the standby state or the operating state. Then, in the in-vehicle network system, the relay device transmits the acquired status information to the second device. In the in-vehicle network system, if the second device receives the status information indicating that the first device is in the standby state while performing the failure determination, the second device stops the failure determination for the first device. [Effects of the Invention]

[0011] The relay device and the in-vehicle network system can prevent the second device, which is an ECU without a PN function, from making an erroneous determination of a failure. [Brief explanation of the drawings]

[0012] [Figure 1] FIG. 1 is a schematic diagram showing the configuration of an in-vehicle network system including a relay device according to an embodiment. [Figure 2]FIG. 2 is a schematic diagram illustrating a manner in which the relay device of the embodiment causes the ECUs on the first communication bus to transition to a standby state. [Figure 3] FIG. 3 is a table showing a list of state information of ECUs that do not have the PN function, which is stored in the relay device of the embodiment. [Figure 4] FIG. 4 is a sequence diagram showing a mode of communication in an in-vehicle network system including a relay device according to an embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] An embodiment of a relay device will be described below with reference to FIGS. <Configuration of In-Vehicle Network System 100> As shown in Fig. 1, the in-vehicle network system 100 is configured with multiple electronic control units (ECUs). Hereinafter, the electronic control units will be referred to as ECUs. The ECUs included in the in-vehicle network system 100 are divided into an ECU with an NM function and a relay device 10. In Fig. 1, each ECU is represented by a rectangle.

[0014] When an ECU with NM functionality is requested to operate via a message, it transitions from a standby state in which it does not communicate to an operating state in which it can communicate. ECUs with NM functionality include ECUs with PN functionality and ECUs without PN functionality.

[0015] In the in-vehicle network system 100, the ECUs having the PN function are a first PN device 31, a second PN device 32, and a third PN device 33. In the in-vehicle network system 100, the ECUs that do not have the PN function are the first NM device 21, the second NM device 22, the third NM device 23, the fourth NM device 24, the fifth NM device 25, and the sixth NM device 26.

[0016] 1, the in-vehicle network system 100 includes a first communication bus 41, a second communication bus 42, and a third communication bus 43. The first communication bus 41 connects the first NM device 21, the second NM device 22, and the third NM device 23. The second communication bus 42 connects the fourth NM device 24, the fifth NM device 25, and the first PN device 31. The third communication bus 43 connects the second PN device 32, the third PN device 33, and the sixth NM device 26.

[0017] The ECUs in the in-vehicle network system 100 are connected to each other so as to be able to communicate by sending and receiving messages via a communication bus. In the in-vehicle network system 100, the first NM device 21, the second NM device 22, and the third NM device 23 send and receive messages via a first communication bus 41. In the in-vehicle network system 100, the fourth NM device 24, the fifth NM device 25, and the first PN device 31 send and receive messages via a second communication bus 42. In the in-vehicle network system 100, the second PN device 32, the third PN device 33, and the sixth NM device 26 send and receive messages via a third communication bus 43.

[0018] 1, the relay device 10 includes a storage device 12 in which programs are stored, and a processing device 11 that executes various processes by executing the programs stored in the storage device 12. The processing device 11 includes a processor.

[0019] In the in-vehicle network system 100, the relay device 10 is connected to all of the first communication bus 41, the second communication bus 42, and the third communication bus 43. The relay device 10 relays messages exchanged among the first communication bus 41, the second communication bus 42, and the third communication bus 43. For example, the relay device 10 receives a message transmitted by the first NM device 21 via the first communication bus 41. The relay device 10 then transmits the message received from the first NM device 21 to the ECUs connected to the second communication bus 42 and the third communication bus 43.

[0020] An ECU in the in-vehicle network system 100 communicates with other ECUs to realize a specific function in the vehicle. At this time, the combination of ECUs that realize a specific function in the in-vehicle network system 100 varies depending on the function to be realized. Also, in the in-vehicle network system 100, an ECU with a PN function communicates with other ECUs that have the PN function to realize the specific function. On the other hand, in the in-vehicle network system 100, an ECU without a PN function communicates with other ECUs that do not have the PN function to realize the specific function.

[0021] When each ECU in the in-vehicle network system 100 performs a specific function, it requests other ECUs that need to operate to perform the function to operate by sending a message.

[0022] 1, an ECU having a PN function transmits a PN message 51. The PN message 51 is a message transmitted by an ECU having a PN function to request the operation of another ECU that also has the PN function. At this time, the ECU having the PN function transmits the PN message 51 together with identification information of the ECU that is the destination of the request to operate.

[0023] 1, an ECU without the PN function transmits an NM message 50. The NM message 50 is a message transmitted by an ECU without the PN function to request the operation of another ECU that also does not have the PN function. Unlike an ECU with the PN function, an ECU without the PN function transmits the NM message 50 without attaching identification information of the ECU that is the destination of the request to operate.

[0024] Among the ECUs that receive a message requesting operation, an ECU with a PN function checks the destination of the received message. If the message is a PN message 51 with its own identification information attached as the destination, the ECU with the PN function transitions from a standby state to an operating state. On the other hand, if the message is an NM message 50 or a PN message 51 without its own identification information attached as the destination, the ECU with the PN function does not transition to an operating state.

[0025] Among the ECUs that receive a message requesting operation, an ECU that does not have the PN function transitions from a standby state to an operating state without checking the destination of the received message. In other words, when an ECU that does not have the PN function receives a message requesting startup, it transitions from a standby state to an operating state regardless of whether the message is an NM message 50 or a PN message 51.

[0026] In this way, when an ECU with a PN function transmits a PN message 51, among the ECUs that receive the message, ECUs that do not have the PN function and ECUs that have the PN function and are the destinations of the PN message 51 transition to the operating state. On the other hand, when an ECU without a PN function transmits an NM message 50, among the ECUs that receive the message, only ECUs that do not have the PN function transition to the operating state.

[0027] As described above, the relay device 10 relays message exchanges between communication buses. The relay device 10 transmits a PN message 51 sent by an ECU having a PN function to a communication bus to which another ECU having a PN function is connected. For example, when the first PN device 31 transmits a PN message 51, the relay device 10 transmits the PN message 51 to the third communication bus 43, which is a communication bus to which the second PN device 32 and the third PN device 33 are connected.

[0028] Furthermore, the relay device 10 transmits an NM message 50 sent by an ECU that does not have the PN function to a communication bus to which another ECU that does not have the PN function is connected. For example, when the first NM device 21 sends an NM message 50, the relay device 10 transmits the NM message 50 to the second communication bus 42 to which the fourth NM device 24 and the fifth NM device 25 are connected and to the third communication bus 43 to which the sixth NM device 26 is connected.

[0029] The relay device 10 also transmits the NM message 50 and the PN message 51. While receiving the PN message 51 from another ECU, the relay device 10 relays the PN message 51 and also transmits the PN message 51 toward the communication bus to which the ECU having the PN function is connected. Therefore, as shown in FIG. 1 , while receiving the PN message 51 from another ECU, the relay device 10 transmits the PN message 51 toward the second communication bus 42 and the third communication bus 43.

[0030] While receiving an NM message 50 from another ECU, the relay device 10 relays the NM message 50 and also transmits the NM message 50 toward a communication bus to which an ECU that does not itself have a PN function is connected. Therefore, as shown in Fig. 1, while receiving an NM message 50 from another ECU, the relay device 10 transmits the NM message 50 toward the first communication bus 41, the second communication bus 42, and the third communication bus 43.

[0031] 1, each ECU in the in-vehicle network system 100 transmits a control message 52 in addition to a PN message 51 and an NM message 50. The control message 52 is a message transmitted by each ECU to exchange information required to realize a specific function. For example, each ECU transmits information such as the engine speed of the vehicle to other ECUs as a control message. In this embodiment, the control message 52 is a collective term for all messages transmitted by each ECU in the in-vehicle network system 100, excluding messages requesting operation.

[0032] In the in-vehicle network system 100, the second NM device 22 and the third NM device 23 periodically transmit control messages 52. In the in-vehicle network system 100, the fifth NM device 25 receives the control messages 52 periodically transmitted by the second NM device 22 and the third NM device 23. The fifth NM device 25 determines that the second NM device 22 has failed when the periodic reception of the control message 52 from the second NM device 22 is interrupted. Furthermore, the fifth NM device 25 determines that the third NM device 23 has failed when the periodic reception of the control message 52 from the third NM device 23 is interrupted. In this way, the fifth NM device 25 performs failure determination on the second NM device 22 and the third NM device 23.

[0033] Hereinafter, in the in-vehicle network system 100, the ECU that periodically transmits the control message 52 to have a failure determination performed is referred to as the first device 61. In the in-vehicle network system 100, the second NM device 22 and the third NM device 23 are the first device 61.

[0034] Hereinafter, in the in-vehicle network system 100, an ECU that determines that the first device 61 has failed when the periodic reception of the control message 52 periodically transmitted by the first device 61 is interrupted is referred to as the second device 62. In the in-vehicle network system 100, the fifth NM device 25 is the second device 62.

[0035] Hereinafter, in the in-vehicle network system 100, an ECU having a PN function that is connected to the same communication bus as the second device 62 will be referred to as a third device 63. In the in-vehicle network system 100, the first PN device 31 is the third device 63.

[0036] <Aspects of Transitioning ECU to Standby State in In-Vehicle Network System 100> As mentioned above, when each ECU realizes a specific function, it sends a message to other ECUs that need to operate to realize that function, requesting their operation. Each ECU periodically sends a message requesting its operation until it has completed the realization of the specific function. Once it has completed the realization of the specific function, the ECU stops sending messages requesting its operation.

[0037] Fig. 2 shows a state in which an ECU without a PN function has completed realizing a specific function in the in-vehicle network system 100 shown in Fig. 1. In other words, in Fig. 2, all ECUs without a PN function have stopped transmitting NM messages 50.

[0038] When all ECUs that do not have the PN function stop transmitting the NM message 50, the relay device 10 stops receiving the NM message 50 from the other ECUs. The relay device 10 that has stopped receiving the NM message 50 also stops transmitting the NM message 50 itself.

[0039] An ECU that has transitioned to the operating state continues to remain in the operating state for a certain period of time each time it receives a message requesting operation.When it no longer receives messages requesting operation from other ECUs, it transitions from the operating state to the standby state.

[0040] In the example shown in FIG. 2, all ECUs that do not have the PN function have stopped transmitting the NM message 50, and therefore the ECUs connected to the first communication bus 41 no longer receive the NM message 50. Also, as described above, the relay device 10 does not relay the PN message 51 to the ECUs connected to the first communication bus 41. Thus, in the example shown in FIG. 2, the ECUs connected to the first communication bus 41 no longer receive messages requesting operation. Therefore, the ECUs included in the area enclosed by a rectangle in FIG. 2 transition from an operating state to a standby state. Thus, in the example shown in FIG. 2, the first device 61 transitions to a standby state.

[0041] On the other hand, in the example shown in FIG. 2 , the ECUs connected to the second communication bus 42 stop receiving the NM message 50, just like the ECUs connected to the first communication bus 41. However, as shown in FIG. 2 , the first PN device 31, which is an ECU with a PN function, is connected to the second communication bus 42. Therefore, the PN message 51 is transmitted to the ECUs connected to the second communication bus 42. Thus, in the example shown in FIG. 2 , the ECUs connected to the second communication bus 42 continue to receive messages requesting operation even after the NM message 50 is no longer transmitted. Therefore, in the example shown in FIG. 2 , the fourth NM device 24 and the fifth NM device 25, which are ECUs without a PN function, continue to operate even after the NM message 50 is no longer transmitted. Thus, in the example shown in FIG. 2 , the second device 62 connected to the second communication bus 42 remains operating even after the NM message 50 is no longer transmitted because the third device 63 is connected to the same bus.

[0042] 2, the first device 61 transitions to a standby state, while the second device 62 maintains an operating state. In such a case, the first device 61 transitions to the standby state and stops periodically transmitting the control message 52. In this case, the second device 62, which no longer receives the control message 52, erroneously determines that the first device 61 has failed.

[0043] To prevent such erroneous determination, relay device 10 transmits status information to second device 62. The status information includes information indicating whether first device 61 is in a standby state or an operating state.

[0044] <Status Information Acquired by Relay Device 10> Fig. 3 shows a list summarizing whether an ECU without a PN function is in a standby state or an operating state in the in-vehicle network system 100. The relay device 10 stores a list such as that shown in Fig. 3 in the storage device 12. The relay device 10 stores information indicating whether an ECU without a PN function is in a standby state or an operating state as shown in Fig. 3 in the storage device 12 as state information.

[0045] As described above, the relay device 10 transmits the PN message 51 to the communication bus to which the ECU with the PN function is connected. On the other hand, the relay device 10 transmits the NM message 50 to the communication bus to which the ECU without the PN function is connected. In this way, the relay device 10 transmits a message requesting operation according to the ECU connected to the communication bus.

[0046] The relay device 10 acquires status information of each ECU that does not have a PN function based on the operation request message that it transmits to each communication bus. For example, in the example shown in FIG. 2, the relay device 10 stops transmitting operation request messages to the first communication bus 41. At this time, the relay device 10 detects that the first NM device 21, the second NM device 22, and the third NM device 23 connected to the first communication bus 41 have transitioned to a standby state. The relay device 10 then acquires status information indicating that the first NM device 21, the second NM device 22, and the third NM device 23 are in a standby state.

[0047] 2, the relay device 10 continues to transmit PN messages 51 to the second communication bus 42 and the third communication bus 43. Therefore, the relay device 10 acquires status information regarding the fourth NM device 24 and the fifth NM device 25 connected to the second communication bus 42 and the sixth NM device 26 connected to the third communication bus 43 as being in an operating state.

[0048] 3, the relay device 10 records in a list the acquired state information for each ECU that does not have the PN function in the in-vehicle network system 100. The ECUs that do not have the PN function include the second NM device 22, which is a first device 61, and the third NM device 23. Therefore, the relay device 10 acquires state information for each first device 61 and then compiles the acquired multiple pieces of state information into a list.

[0049] <Communication flow for preventing erroneous determination in failure determination by the second device 62> FIG. 4 shows a mode of communication executed by the relay device 10, the first device 61, and the second device 62 in the in-vehicle network system 100 for failure determination by the first device 61.

[0050] 4, the first device 61 periodically transmits a control message 52 while in operation. The relay device 10 receives the control message 52 from the first device 61 and relays the control message 52 to the second device 62.

[0051] After receiving control message 52 from relay device 10, second device 62 executes a fault determination. At this time, second device 62 determines that first device 61 is not at fault by receiving control message 52 from first device 61.

[0052] As shown in the middle part of FIG. 4, when the first device 61 transitions to the standby state, the first device 61 stops transmitting the control message 52 that it had been transmitting periodically. When the first device 61 transitions to a standby state, the relay device 10 stops transmitting a message requesting operation to the first communication bus 41 to which the first device 61 is connected. The relay device 10 detects that the first device 61 has transitioned to a standby state based on the stop of the message transmission. Then, upon detecting that the first device 61 has transitioned to a standby state, the relay device 10 updates the list shown in FIG. 3. That is, the relay device 10 records in the list that the second NM 22 and the third NM 23, which are the first device 61, are in a standby state. Note that in the in-vehicle network system 100, when the first device 61 transitions to a standby state, the first NM device 21 also transitions to a standby state, and therefore the relay device 10 also records in the list that the first NM device 21 is in a standby state.

[0053] As shown in the middle part of FIG. 4, after updating the list, the relay device 10 transmits information about the updated list to the second device 62. The information about the updated list includes status information about both ECUs whose status information has been updated and ECUs whose status information has not been updated. Note that the information about the updated list may include only status information about ECUs whose status information has been updated. In this way, the relay device 10 compiles the acquired multiple pieces of status information into a single list and transmits it to the second device 62.

[0054] The information in the updated list is transmitted to all ECUs in the in-vehicle network system 100, including the second device 62. Note that the information in the updated list may be transmitted only to the ECU that is performing the fault determination for the ECU whose status information has been updated.

[0055] The relay device 10 transmits the updated list information at the timing when the control message 52 would have been transmitted to the second device 62 if the first device 61 had been in an operating state. In other words, when the first device 61 transitions from an operating state to a standby state, the relay device 10 transmits the status information instead of the first device 61 at the timing when the first device 61 would have next transmitted the control message 52.

[0056] 4, the second device 62, upon receiving the updated list information, determines from the information that the first device 61 has transitioned to a standby state. The second device 62 then turns off the failure determination function. In this way, when the received status information indicates that the first device 61 is in a standby state, the second device 62 stops determining whether the first device 61 is in a standby state.

[0057] 4, when the first device 61 transitions from the standby state to the operating state, the first device 61 resumes the periodic transmission of the control message 52 to the second device 62. The relay device 10 that receives the control message 52 from the first device 61 relays the control message 52 to the second device 62.

[0058] When the first device 61 transitions to the operating state, the relay device 10 resumes transmitting a message requesting operation to the first communication bus 41 to which the first device 61 is connected. Based on the resumption of message transmission, the relay device 10 detects that the first device 61 has transitioned to the operating state. Then, upon detecting that the first device 61 has transitioned to the operating state, the relay device 10 updates the list shown in FIG. 3. That is, the relay device 10 records in the list that the second NM device 22 and the third NM device 23, which are the first device 61, are in the operating state. Note that in the in-vehicle network system 100, when the first device 61 transitions to the operating state, the first NM device 21 also transitions to the operating state, and therefore the relay device 10 similarly records in the list that the first NM device 21 is in the operating state.

[0059] As shown in the lower part of Figure 4, the relay device 10, which has updated the list, transmits information about the updated list to the second device 62. The second device 62, which has received the information about the updated list, understands from the information that the first device 61 has transitioned to an operating state. The second device 62 then turns on the failure determination function. In this way, when the second device 62 receives status information from the relay device 10 after stopping the failure determination, if the received status information indicates that the first device 61 is in an operating state, the second device 62 resumes the failure determination for the first device.

[0060] <Operation of this embodiment> Relay device 10 notifies second device 62 whether first device 61 is in a standby state or an operating state. In other words, relay device 10 causes second device 62 to determine whether first device 61 has failed, taking into account the state information from relay device 10.

[0061] <Effects of this embodiment> (1) The relay device 10 can prevent the second device 62 from erroneously determining that a failure has occurred. (2) In the in-vehicle network system 100, the first communication bus 41 is connected to a plurality of first devices 61. The relay device 10 acquires status information for each of the first devices 61. The relay device 10 then compiles the acquired plurality of status information into one list and transmits the list to the second device 62.

[0062] The relay device 10 lists the status information of the plurality of first devices 61 and transmits the list to the second device 62. This allows the relay device 10 to make the second device 62 grasp the status information of the plurality of first devices 61 simultaneously.

[0063] (3) When the first device 61 transitions from an operating state to a standby state, the relay device 10 transmits, instead of the first device 61, status information indicating that the first device 61 is in a standby state to the second device 62. At this time, the relay device 10 transmits the status information at the timing when the first device 61, which has been periodically transmitting the control message 52, would next transmit the control message 52.

[0064] When the first device 61 transitions to a standby state, the relay device 10 transmits the status information at the same timing that the first device 61 would normally transmit a control message 52 for fault determination. This allows the relay device 10 to notify the second device 62 that the first device 61 has transitioned to a standby state.

[0065] (4) The in-vehicle network system 100 includes a first device 61, a second device 62, and a third device 63 as ECUs having a network management function. When an ECU having the network management function is requested to operate via a message, it transitions from a standby state in which it does not communicate to an operating state in which it is capable of communicating. In the in-vehicle network system 100, the second device 62 performs a failure determination to determine that the first device 61 has failed when periodic reception of the control message 52 periodically transmitted by the first device 61 is interrupted. In the in-vehicle network system 100, the third device 63 has a partial network function in addition to the network management function. When the third device 63 is requested to operate via a message, the third device 63 having the partial network function does not transition from a standby state to an operating state if the message is not addressed to the third device 63. The in-vehicle network system 100 includes a first communication bus 41 connected to a first device 61, a second communication bus 42 connected to a second device 62 and a third device 63, and a relay device 10. In the in-vehicle network system 100, the relay device 10 relays messages exchanged between the first communication bus 41 and the second communication bus 42. In the in-vehicle network system 100, the relay device 10 acquires status information including information indicating whether the first device 61 is in a standby state or an operating state. Then, in the in-vehicle network system 100, the relay device 10 transmits the acquired status information to the second device 62. In the in-vehicle network system 100, if the second device 62 receives status information indicating that the first device 61 is in a standby state while performing a failure determination, the second device 62 stops the failure determination for the first device 61.

[0066] In the in-vehicle network system 100, the second device 62 recognizes from the status information from the relay device 10 that the state of the first device 61, which is the target of the failure determination, has transitioned to a standby state. Then, the second device 62 stops the failure determination for the first device 61. This allows the in-vehicle network system 100 to prevent the second device 62 from erroneously determining a failure.

[0067] (5) In the in-vehicle network system 100, after the second device 62 has stopped fault determination, if the second device 62 receives status information from the relay device 10 and the received status information indicates that the first device 61 is in operation, the second device 62 resumes fault determination for the first device 61.

[0068] In the in-vehicle network system 100, the second device 62 recognizes from the status information from the relay device 10 that the first device 61, which is the target of the failure determination, has transitioned to an operating state. The second device 62 then resumes the failure determination of the first device 61. This allows the in-vehicle network system 100 to again perform the failure determination on the first device 61, which has transitioned from a standby state to an operating state.

[0069] <Example of change> This embodiment can be modified as follows: This embodiment and the following modifications can be combined and implemented within the scope of technical compatibility.

[0070] The number of communication buses and the number of connected ECUs are not limited to those in the above embodiment, as long as the in-vehicle network system 100 includes the first communication bus 41 including the first device 61, the second communication bus 42 including the second device 62 and the third device 63, and the relay device 10. Furthermore, the topology of the in-vehicle network system 100 is not limited to those in the above embodiment.

[0071] In the in-vehicle network system 100 in the above embodiment, no ECU having a PN function is connected to the first communication bus 41. On the other hand, in the in-vehicle network system 100, an ECU having a PN function may be connected to the first communication bus 41 to which the first device 61 is connected.

[0072] As described above, an ECU having the PN function will not transition to an operating state even if another ECU having the PN function is in an operating state unless the operating ECU has sent a PN message 51 addressed to itself. Therefore, even if an ECU having the PN function is connected to the first communication bus 41, there may be a case where a message requesting operation is not sent to the first communication bus 41, but a message requesting operation is sent to the second communication bus 42.

[0073] In the in-vehicle network system 100 in the above embodiment, a plurality of first devices 61 are connected to the first communication bus 41. However, only one first device 61 may be connected to the first communication bus 41.

[0074] In the in-vehicle network system 100 according to the above embodiment, the second device 62 performs failure determination on multiple first devices 61. However, the second device 62 may perform failure determination on only one first device 61.

[0075] In the in-vehicle network system 100 of the above embodiment, the relay device 10 is connected to the first communication bus 41, the second communication bus 42, and the third communication bus 43. The relay device may be configured with multiple ECUs. For example, in the in-vehicle network system 100, one ECU is installed corresponding to each communication bus, and the ECUs may communicate with each other to fulfill the role of the relay device 10 of the above embodiment.

[0076] In this case, one ECU is connected to each of the first communication bus 41, the second communication bus 42, and the third communication bus 43 in the in-vehicle network system 100. Hereinafter, the ECU connected to each communication bus and serving as the relay device 10 will be referred to as a control ECU.

[0077] Each control ECU receives a message from an ECU with an NM function connected to the corresponding communication bus and transmits it to another control ECU. Also, each control ECU transmits a message received from another control ECU to an ECU with an NM function connected to the corresponding communication bus. In this way, the control ECU can function as a relay device 10 by communicating with other control ECUs.

[0078] Each control ECU manages a list that summarizes the status information of ECUs that do not have the PN function and are connected to the corresponding communication bus. When a control ECU updates the list it stores, it transmits the updated list information to the other control ECUs. Upon receiving the list information, the control ECU transmits the information to the corresponding communication bus.

[0079] In this way, in the in-vehicle network system 100, a plurality of control devices can act in place of the relay device 10. [Explanation of symbols]

[0080] 10... relay device, 11... processing device, 12... storage device, 21... first NM device, 22... second NM device, 23... third NM device, 24... fourth NM device, 25... fifth NM device, 26... sixth NM device, 31... first PN device, 32... second PN device, 33... third PN device, 41... first communication bus, 42... second communication bus, 43... third communication bus, 50... NM message, 51... PN message, 52... control message, 61... first device, 62... second device, 63... third device, 100... in-vehicle network system

Claims

1. An electronic control device having a network management function that, when requested to operate through a message, transitions from a standby state in which no communication is performed to an operating state in which the communication is possible, a first device; and a second device that executes a failure determination to determine that the first device has failed when periodic reception of the message periodically transmitted by the first device is interrupted; a third device having, in addition to the network management function, a partial network function of not transitioning from the standby state to the operating state when an operation is requested through the message and the message is not addressed to the third device; a first communication bus connecting the first device; a second communication bus connecting the second device and the third device; a relay device that relays the messages exchanged between the first communication bus and the second communication bus, acquiring state information including information indicating whether the first device is in the standby state or the operating state; Transmitting the acquired status information to the second device. Relay device.

2. In the in-vehicle network system, the first communication bus is connected to a plurality of the first devices, acquiring the status information for each of the first devices; The acquired plurality of pieces of status information are compiled into one list and transmitted to the second device. The relay device according to claim 1 .

3. When the first device transitions from the operating state to the standby state, At the timing when the first device, which has been periodically transmitting the message, was next to transmit the message, transmitting the state information indicating that the first device is in the standby state to the second device instead of the first device; 3. The relay device according to claim 1 or 2.

4. An electronic control device having a network management function that, when requested to operate through a message, transitions from a standby state in which no communication is performed to an operating state in which the communication is possible, a first device; and a second device that executes a failure determination to determine that the first device has failed when periodic reception of the message periodically transmitted by the first device is interrupted; a third device having, in addition to the network management function, a partial network function of not transitioning from the standby state to the operating state when an operation is requested through the message and the message is not addressed to the third device; a first communication bus connecting the first device; a second communication bus connecting the second device and the third device; a relay device that relays the messages exchanged between the first communication bus and the second communication bus; An in-vehicle network system comprising: The relay device acquiring state information including information indicating whether the first device is in the standby state or the operating state; transmitting the acquired status information to the second device; The second device is If the first device receives the state information indicating that the first device is in the standby state during the execution of the failure determination, Stopping the failure determination for the first device In-vehicle network system.

5. The second device is After the failure determination is stopped, when the status information is received from the relay device, If the received state information indicates that the first device is in the operating state, the failure determination for the first device is resumed. The in-vehicle network system according to claim 4 .

Images