On-vehicle device

Abstract

To provide a technique that enables an ECU to confirm that a connection target is normally connected to the ECU.SOLUTION: An on-vehicle system 1 includes an ECU 20, a signal line 40 connecting a connection target 12 to the ECU 20, and a communication device 30 connected to the signal line 40. The ECU 20 transmits verification information to the signal line 40. A communication device 30 receives verification information from the signal line 40 and performs a reply process of transmitting the received verification information to the ECU 20 via wireless communication as reply information. The ECU 20 performs a verification process of determining whether the reply information received from the communication device 30 matches the verification information transmitted to the signal line 40.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to an in-vehicle device. [Background technology]

[0002] Patent Document 1 discloses an in-vehicle electronic system that is installed in a vehicle, and describes connecting a connection target such as a switch to an ECU directly via a wire. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-154558 Summary of the Invention [Problem to be solved by the invention]

[0004] In the configuration of Patent Document 1, if the connection target does not have a means for responding to a notification from the ECU, it is difficult for the ECU to confirm whether the connection target has been successfully connected.

[0005] The present disclosure aims to provide a technique that enables an ECU to confirm that a connection target is normally connected to the ECU. [Means for solving the problem]

[0006] The in-vehicle device of the present disclosure is ECU and a signal line connecting a connection target to the ECU; a communication device connected to the signal line, The ECU transmits the verification information to the signal line, the communication device receives the verification information from the signal line, and performs a reply process of transmitting the received verification information as reply information to the ECU via a communication line different from the signal line or via wireless communication; The ECU performs a verification process to determine whether the reply information received from the communication device matches the verification information transmitted on the signal line. [Effects of the Invention]

[0007] According to the technology of the present disclosure, the ECU can confirm that the connection target has been normally connected to the ECU. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating a configuration of an in-vehicle system according to the first embodiment. [Figure 2] FIG. 2 is a sequence diagram of the in-vehicle device of the first embodiment. [Figure 3] FIG. 3 is a diagram illustrating a configuration of an in-vehicle system according to the second embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] [Description of the embodiments of the present disclosure] First, embodiments of the present disclosure will be listed and described.

[0010] [1] ECU and a signal line connecting a connection target to the ECU; a communication device connected to the signal line, The ECU transmits the verification information to the signal line, the communication device receives the verification information from the signal line, and performs a reply process of transmitting the received verification information as reply information to the ECU via a communication line different from the signal line or via wireless communication; The ECU performs a verification process to determine whether the reply information received from the communication device matches the verification information transmitted to the signal line. In-vehicle device.

[0011] In the above-described in-vehicle device, the ECU transmits verification information to a signal line. The verification information transmitted to the signal line is received by a communication device and transmitted as reply information from the communication device to the ECU. The ECU determines whether the received reply information matches the verification information transmitted to the signal line. If they match, the ECU can determine that the connection target has been successfully connected.

[0012] [2] In the reply process, the communication device transmits the reply information to the ECU by wireless communication. The in-vehicle device described in [1].

[0013] According to the above-described in-vehicle device, the communication device transmits the reply information to the ECU by wireless communication, so there is no need to provide a communication line separate from the signal line between the ECU and the communication device.

[0014] [3] The ECU encrypts the verification information and transmits it to the signal line; In the reply process, the communication device receives the encrypted verification information from the signal line, decrypts the encrypted verification information, and transmits the decrypted verification information to the ECU as the reply information. The in-vehicle device according to [1] or [2].

[0015] According to this configuration, since the communication device is required to have a compound function, it is possible to prevent the use of unauthorized communication devices.

[0016] [4] A power line is provided to supply power from the ECU to the connection target, the ECU is configured to switch between a power supply state in which power is supplied to the power line and a power cut-off state in which power is not supplied to the power line, and transmits the verification information to the signal line when the ECU switches to the power supply state; The communication device is connected to the power line, is maintained in an off state when no power is supplied to the power line, and is switched to an on state when power is supplied to the power line to perform the reply process. The in-vehicle device according to any one of [1] to [3].

[0017] In the above-described in-vehicle device, when power supply to the power line is started, verification information is transmitted to the signal line. As power is supplied to the power line, the communication device is switched to an ON state. The communication device then receives the verification information transmitted to the signal line and transmits the received verification information to the ECU as reply information. In other words, the above-described in-vehicle device can supply power to the connection target and the communication device via a common power line. Moreover, in the above-described in-vehicle device, the communication device performs reply processing when the communication device is switched to an ON state, making it easy to predict the timing at which the ECU should transmit the verification information and the timing at which the ECU will receive the reply information. This allows the ECU to smoothly check whether the connection target is properly connected.

[0018] [5] If the ECU determines that the signals match as a result of the verification process, the ECU permits transmission and reception of signals with the connection target via the signal line, and if the ECU determines that the signals do not match, the ECU prohibits transmission and reception of signals with the connection target via the signal line. The in-vehicle device according to any one of [1] to [4].

[0019] If the ECU determines that the connection target matches, it determines that the connection target is normally connected and can permit transmission and reception of signals with the connection target. On the other hand, if the ECU determines that the connection target does not match, it determines that the connection target is not normally connected and can prohibit transmission and reception of signals with the connection target.

[0020] [6] The connection object is a sensor or an actuator. The in-vehicle device according to any one of [1] to [5].

[0021] The ECU can determine that the sensor or actuator is connected normally.

[0022] [Details of the embodiments of the present disclosure] 1. First embodiment 1-1.Configuration of in-vehicle system 1 1 is a system mounted on a vehicle. The vehicle system 1 includes a power supply unit 11, a connection target 12, and an in-vehicle device 13.

[0023] The power supply unit 11 functions as a power supply source that supplies power to the connection target 12 and the in-vehicle device 13. The power supply unit 11 is, for example, a battery.

[0024] The connection target 12 is a device that is directly connected to the ECU 20 of the in-vehicle device 13 via a signal line 40. The signal line 40 is a so-called direct line. The connection target 12 is not connected to a communication bus that constitutes an in-vehicle network. The connection target 12 is mounted, for example, on a vehicle for a specific purpose (e.g., an ambulance, a refrigerated truck, etc.) and is used to expand the functionality of a general vehicle. The connection target 12 does not have a means for responding by communication. The connection target 12 is, for example, a sensor, an actuator, a switch, etc.

[0025] The in-vehicle device 13 includes an ECU 20, a communication device 30, a signal line 40, and a power line 41. The signal line 40 is an electric line that connects the connection object 12 to the ECU 20. The power line 41 is an electric line that supplies power from the ECU 20 to the connection object 12.

[0026] The ECU 20 is an electronic control unit (ECU) and includes a microcomputer 21, a power supply circuit unit 22, a transmitter / receiver unit 23, and an ECU-side wireless communication unit 24.

[0027] Power supply circuit unit 22 is connected to power supply unit 11, power line 41, and microcomputer 21. Power supply circuit unit 22 is connected to connection target 12 via power line 41. Power supply circuit unit 22 is controlled by microcomputer 21 and switches between a state in which power from power supply unit 11 is supplied to power line 41 and a state in which power from power supply unit 11 is not supplied to power line 41. As a result, ECU 20 switches between a power supply state in which power is supplied to power line 41 and a power cut-off state in which power is not supplied to power line 41.

[0028] The transmitting / receiving unit 23 is connected to the signal line 40 and the microcomputer 21. The transmitting / receiving unit 23 is connected to the connection target 12 via the signal line 40. The transmitting / receiving unit 23 is a transmitting / receiving interface that transmits and receives signals between the microcomputer 21 and the signal line 40.

[0029] The ECU-side wireless communication unit 24 is connected to the microcomputer 21. The ECU-side wireless communication unit 24 is a wireless communication interface that performs wireless communication with the communication device 30. The wireless communication is, for example, short-range wireless communication such as Bluetooth (registered trademark).

[0030] The microcomputer 21 encrypts the verification information and transmits it from the transmitter / receiver 23 to the signal line 40. The microcomputer 21 transmits the verification information to the signal line 40 when the microcomputer 21 switches to the power supply state. The microcomputer 21 switches to the power supply state when a predetermined start condition is met. The start condition is, for example, when the ECU 20 switches to the on state, when the ECU 20 transitions from a sleep state to an active state, or when an activation condition for the connection target 12 is met. The timing at which the ECU 20 switches to the on state or when the ECU 20 transitions to the active state is, for example, when the start switch of the vehicle is switched to the on state. The start switch is, for example, an ignition switch or a power switch.

[0031] The communication device 30 includes a receiving unit 31, a decryption unit 32, and a wireless communication unit 33. The receiving unit 31 is connected to the signal line 40 via a first branch line 42 branching from the signal line 40. The receiving unit 31 is an interface that receives a signal from the signal line 40. The receiving unit 31 receives encrypted verification information from the signal line 40.

[0032] The decryption unit 32 is configured by, for example, a microcomputer. The decryption unit 32 stores a decryption key in advance. The decryption unit 32 acquires the encrypted verification information from the receiving unit 31 and decrypts it using the key.

[0033] The wireless communication unit 33 is a wireless communication interface that performs wireless communication with the ECU-side wireless communication unit 24 of the ECU 20. The verification information decoded by the decode unit 32 is transmitted to the ECU 20 as reply information by wireless communication via the wireless communication unit 33.

[0034] In this way, the communication device 30 receives the verification information from the signal line 40 and performs a reply process of transmitting the received verification information as reply information to the ECU 20 by wireless communication. In addition, in the reply process, the communication device 30 receives the encrypted verification information from the signal line 40, decrypts it, and transmits the decrypted verification information to the ECU 20 as reply information.

[0035] Furthermore, the communication device 30 is connected to the power line 41 via a second branch line 43 branching off from the power line 41. The communication device 30 is maintained in an off state when no power is supplied to the power line 41, and switches to an on state and performs a reply process when power is supplied to the power line 41.

[0036] The ECU 20 performs a matching process to determine whether the reply information received from the communication device 30 matches the matching information transmitted over the signal line 40. If the ECU 20 determines that the reply information matches as a result of the matching process, it permits transmission and reception of signals with the connection target 12 via the signal line 40. If the ECU 20 determines that the reply information does not match, it prohibits transmission and reception of signals with the connection target 12 via the signal line 40.

[0037] 1-2. Operation of the in-vehicle device 13 When the above-described start condition is satisfied, the in-vehicle device 13 starts the process shown in FIG. 2. The ECU 20 of the in-vehicle device 13 generates verification information (step S11). The verification information is, for example, a random number. The ECU 20 stores the verification information generated in step S11 (step S12) and encrypts it (step S13). The ECU 20 causes the power supply circuit unit 22 to start supplying power to the power line 41 (step S14), and then transmits the verification information encrypted in step S13 to the signal line 40 (step S15). The ECU 20 transmits the verification information to the signal line 40 by serial communication. The ECU 20 transmits the verification information after a predetermined time has elapsed since the power supply circuit unit 22 started supplying power to the power line 41. The predetermined time is set to be equal to or longer than the time required for the communication device 30 to receive power supply from the power line 41, switch to the ON state, and become capable of communication.

[0038] The communication device 30 receives power from the power line 41, switches to the ON state, and becomes capable of communication (step S21). The communication device 30 receives the encrypted verification information from the signal line 40 (step S22) and decrypts it (step S23). The communication device 30 transmits the decrypted verification information to the ECU 20 as reply information (step S24).

[0039] The ECU 20 receives the reply information transmitted from the communication device 30 (step S31) and performs a matching process based on the received reply information (step S32). As a result of the matching process, the ECU 20 determines whether the reply information received from the communication device 30 matches the stored matching information (step S33). If the ECU 20 determines that they match (Yes in step S33), it permits transmission and reception of signals with the connection target 12 via the signal line 40 (step S34). If the ECU 20 determines that they do not match (No in step S33), it prohibits transmission and reception of signals with the connection target 12 via the signal line 40 (step S35).

[0040] 1-3. Effects of in-vehicle devices 13 In the in-vehicle device 13, the ECU 20 transmits the verification information to the signal line 40. The verification information transmitted to the signal line 40 is received by the communication device 30 and transmitted as reply information from the communication device 30 to the ECU 20. The ECU 20 determines whether the received reply information matches the verification information transmitted to the signal line 40. If they match, the ECU 20 can determine that the connection target 12 is normally connected.

[0041] According to the in-vehicle device 13, the communication device 30 transmits the reply information to the ECU 20 by wireless communication, so there is no need to provide a communication line other than the signal line 40 between the ECU 20 and the communication device 30.

[0042] According to the in-vehicle device 13, the communication device 30 is required to have a compound function, so that it is possible to prevent the use of an unauthorized communication device.

[0043] In the in-vehicle device 13, when power supply to the power line 41 starts, the verification information is transmitted to the signal line 40. As power is supplied to the power line 41, the communication device 30 is switched to the ON state. The communication device 30 receives the verification information transmitted to the signal line 40 and transmits the received verification information to the ECU 20 as reply information. That is, according to the in-vehicle device 13, power supply to the connection target 12 and power supply to the communication device 30 can be performed over the common power line 41. Moreover, according to the in-vehicle device 13, the communication device 30 performs reply processing when the communication device 30 is switched to the ON state, making it easy to predict the timing at which the ECU 20 should transmit the verification information and the timing at which the ECU 20 will receive the reply information. This allows the ECU 20 to smoothly check whether the connection target 12 is normally connected.

[0044] If the ECU 20 determines that they match, it determines that the connection object 12 is normally connected, and it can permit transmission and reception of signals with the connection object 12. On the other hand, if the ECU 20 determines that they do not match, it determines that the connection object 12 is not normally connected, and it can prohibit transmission and reception of signals with the connection object 12.

[0045] 2. Second embodiment In the first embodiment, an example in which reply information is transmitted by wireless communication is described. In contrast, in the second embodiment, an example in which reply information is transmitted via a communication line is described. In the description of the second embodiment, the same components as in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

[0046] 3, the in-vehicle system 201 of the second embodiment includes a power supply unit 11, an in-vehicle device 212, and a connection target 12. The in-vehicle device 212 includes an ECU 220, a communication device 230, a signal line 40, a power line 41, and a communication line 44. The communication line 44 is a communication path provided separately from the signal line 40.

[0047] The ECU 220 includes a microcomputer 21, a power supply circuit unit 22, a transmitter / receiver unit 23, and an ECU-side communication unit 224. A communication line 44 is connected to the ECU-side communication unit 224. The ECU-side communication unit 224 is a communication interface that performs communication via the communication line 44. The ECU-side communication unit 224 communicates with a communication device 230 via the communication line 44.

[0048] The communication device 230 includes a receiving unit 31, a combining unit 32, and a communication unit 233. A communication line 44 is connected to the communication unit 233. The communication unit 233 is a communication interface that performs communication via the communication line 44. The communication unit 233 communicates with the ECU 220 via the communication line 44. The communication device 230 transmits reply information to the ECU 220 via the communication line 44.

[0049] Even with this configuration, the ECU 220 can determine whether the connection target 12 is normally connected or not.

[0050] <Other embodiments> The present disclosure is not limited to the embodiments described above and in the drawings. For example, any combination of features of the above-described or following embodiments is possible within a range that does not contradict. Furthermore, any feature of the above-described or following embodiments may be omitted unless explicitly stated as essential. Furthermore, the above-described embodiment may be modified as follows.

[0051] In each of the above embodiments, the verification information is encrypted, but the verification information may not be encrypted.

[0052] The embodiments disclosed herein should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is not limited to the embodiments disclosed herein, but is defined by the claims, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0053] 1. In-vehicle systems 11...Power supply section 12...Connection target 13…In-vehicle device 20…ECU 21...Microcomputer 22…Power circuit section 23...Transmitter / receiver 24...ECU side wireless communication unit 30...Communication equipment 31...Receiver 32…Composite section 33...Radio communication section 40...Signal line 41...Power line 42...First branch line 43...Second branch line 44...Communication line 201...In-vehicle systems 212...In-vehicle device 220…ECU 224...ECU communication section 230...Communication equipment 233…Communications Department

Claims

1. ECU and a signal line connecting a connection target to the ECU; a communication device connected to the signal line, The ECU transmits verification information to the signal line, the communication device receives the verification information from the signal line, and performs a reply process of transmitting the received verification information as reply information to the ECU via a communication line separate from the signal line or via wireless communication; The ECU performs a verification process to determine whether the reply information received from the communication device matches the verification information transmitted via the signal line. In-vehicle device.

2. In the reply process, the communication device transmits the reply information to the ECU by wireless communication. The in-vehicle device according to claim 1 .

3. The ECU encrypts the verification information and transmits it to the signal line, In the reply process, the communication device receives the encrypted verification information from the signal line, decrypts the encrypted verification information, and transmits the decrypted verification information to the ECU as the reply information. The in-vehicle device according to claim 1 or 2.

4. a power line for supplying power from the ECU to the connection target; the ECU is configured to switch between a power supply state in which power is supplied to the power line and a power cut-off state in which power is not supplied to the power line, and transmits the verification information to the signal line when the ECU switches to the power supply state; The communication device is connected to the power line, is maintained in an off state when no power is supplied to the power line, and is switched to an on state when power is supplied to the power line to perform the reply process. The in-vehicle device according to claim 1 or 2.

5. If the ECU determines that the signals match as a result of the verification process, the ECU permits transmission and reception of signals with the connection target via the signal line, and if the ECU determines that the signals do not match, the ECU prohibits transmission and reception of signals with the connection target via the signal line. The in-vehicle device according to claim 1 or 2.

6. The connection target is a sensor or an actuator. The in-vehicle device according to claim 1 or 2.

Images