In-vehicle system

Abstract

To provide a technique capable of determining an abnormality in which an on / off state is not switched for an ECU in which the on / off state is switched according to switching of a relay.SOLUTION: The in-vehicle system 1 includes a ECU12 mounted in the vehicle, and an in-vehicle control device 16 that communicates with the ECU12. The vehicle-mounted control device 16 is configured to control the relay 13 that switches the power supplying state from the power source unit 10 to the ECU12, and determines that the ECU12 is abnormal based on the control state of the relay 13 and the communication state of the ECU12.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to in-vehicle systems. [Background technology]

[0002] The power supply control device disclosed in Patent Document 1 includes a microcomputer and a switch connected to the microcomputer. The switch uses a semiconductor fuse and is connected to the ECU whose power supply is to be controlled. The switch controls the on / off of the connected ECU based on a control signal input from the microcomputer. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2013-192108 Summary of the Invention [Problem to be solved by the invention]

[0004] According to the configuration of Patent Document 1, the microcomputer controls the switch, thereby controlling the on / off of the ECU. In such a configuration, an on or off failure of the switch can cause an abnormality in which the ECU does not switch over normally, so it is preferable that such an abnormality can be determined.

[0005] The present disclosure aims to provide a technology capable of determining an abnormality in which an ECU, whose on / off state is switched in response to switching of a relay, does not switch on / off. [Means for solving the problem]

[0006] The in-vehicle system of the present disclosure comprises: An ECU installed in a vehicle; an in-vehicle control device that communicates with the ECU, The vehicle control device is configured to control a relay that switches the power supply state from a power supply unit to the ECU, and determines whether the ECU is abnormal based on the control state of the relay and the communication state of the ECU. [Effects of the Invention]

[0007] According to the technology of the present disclosure, it is possible to determine an abnormality in which an ECU, which switches between on and off states in response to relay switching, does not switch between on and off states. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating a configuration of an in-vehicle system according to the first embodiment. [Figure 2] FIG. 2 is a flowchart showing the first half of a process that starts when the vehicle-mounted control device of the first embodiment controls the relay to be in the OFF state. [Figure 3] FIG. 3 shows the latter half of a flowchart of the process that starts when the vehicle-mounted control device of the first embodiment controls the relay to the off state. [Figure 4] FIG. 4 is a flowchart of a process that starts when the vehicle-mounted control device of the first embodiment controls the relay to be in the on state. [Figure 5] FIG. 5 is a flowchart of the processing performed by the ECU of the first embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] [Description of the embodiments of the present disclosure] First, embodiments of the present disclosure will be listed and described.

[0010] [1] An ECU installed in a vehicle; an in-vehicle control device that communicates with the ECU, The vehicle-mounted control device is configured to control a relay that switches a state of power supply from a power supply unit to the ECU, and determines whether the ECU is abnormal based on the control state of the relay and the communication state of the ECU. In-vehicle systems.

[0011] The in-vehicle control device can determine that an ECU is abnormal by checking the communication state that does not match the control state of the relay. That is, the in-vehicle control device can determine that an abnormality has occurred in an ECU where the on / off state does not change in response to relay switching.

[0012] [2] The vehicle-mounted control device determines whether the ECU is abnormal based on a target value that is at least one of a current flowing through a conduction path between the relay and the ECU and a voltage of the conduction path, a control state of the relay, and a communication state of the ECU. 10. The in-vehicle system according to claim 1.

[0013] When the relay is switched between on and off, a change should occur in the target value. The vehicle control device can determine whether the ECU is abnormal by taking the target value into consideration.

[0014] [3] The ECU switches to an ON state when power is supplied from the power supply unit and transmits a startup completion notification; The in-vehicle control device determines that the ECU is abnormal if the startup completion notification is received before the target value exceeds a threshold value after switching the relay to an on state. 3. The in-vehicle system according to claim 2.

[0015] When the relay is switched to the on state, the ECU should transmit a startup completion notification after the target value exceeds a certain value. After switching the relay to the on state, the in-vehicle control device can determine that the ECU is abnormal if it receives the startup completion notification before the target value exceeds a first threshold value.

[0016] [4] The vehicle control device switches the relay to an off state, and determines that the ECU is abnormal if the ECU is communicating after the target value becomes equal to or less than the threshold value. 3. The in-vehicle system according to claim 2.

[0017] When the relay is switched to the OFF state and the target value becomes equal to or less than the second threshold, the ECU communication should stop. After the relay is switched to the OFF state, the in-vehicle control device can determine that the ECU is abnormal if the ECU is communicating.

[0018] [5] The vehicle control device determines that the ECU is abnormal when the target value is greater than a threshold value while controlling the relay to be in an off state. 5. An in-vehicle system according to claim 2.

[0019] When the relay is in the OFF state, the target value should be equal to or less than a certain value. When the target value is greater than a first threshold value while the relay is in the OFF state, the in-vehicle control device can determine that the ECU is abnormal.

[0020] [6] The ECU switches to an ON state when power is supplied from the power supply unit and transmits a startup completion notification; The vehicle control device determines that the ECU is abnormal when the start-up completion notification is received while the relay is being controlled to be in the off state. 5. An in-vehicle system according to any one of claims 1 to 4.

[0021] When the relay is in the OFF state, the startup completion notification should not be transmitted. The above-mentioned in-vehicle control device can determine that the ECU is abnormal if it receives the startup completion notification while controlling the relay to be OFF.

[0022] [7] After switching the relay to the on state, if an on-determination period has elapsed without the target value exceeding the threshold value, the vehicle-mounted control device determines that the ECU is abnormal. 5. An in-vehicle system according to claim 2.

[0023] When the relay is switched to the on state, the target value should exceed the first threshold value within a certain time. After the relay is switched to the on state, if the on determination period has elapsed without the target value exceeding the first threshold value, the in-vehicle control device can determine that the ECU is abnormal.

[0024] [8] The ECU switches to an ON state when power is supplied from the power supply unit and transmits a startup completion notification; The vehicle-mounted control device determines that the ECU is abnormal if an ON determination period has elapsed without receiving the startup completion notification after switching the relay to the ON state. 5. An in-vehicle system according to any one of claims 1 to 4.

[0025] When the relay is switched to the ON state, a startup completion notification should be transmitted within a certain time. After the relay is switched to the ON state, if the ON determination period has elapsed without receiving the startup completion notification, the in-vehicle control device can determine that the ECU is abnormal.

[0026] [9] After switching the relay to the off state, if an off determination period has elapsed without the target value becoming equal to or less than a threshold value, the vehicle control device determines that the ECU is abnormal. 5. An in-vehicle system according to claim 2.

[0027] When the relay is switched to the off state, the target value should become equal to or less than the second threshold within a certain time. After the relay is switched to the off state, if the off determination period has elapsed without the target value becoming equal to or less than the second threshold, the in-vehicle control device can determine that the ECU is abnormal.

[0028]

[10] A separate ECU is provided, When the in-vehicle control device determines that the ECU is abnormal, the in-vehicle control device notifies the other ECU that the ECU is abnormal. 5. An in-vehicle system according to any one of claims 1 to 4.

[0029] The vehicle-mounted control device can notify other ECUs that an ECU is abnormal.

[0030]

[11] The ECU switches to an ON state when power is supplied from the power supply unit and transmits a startup completion notification; After switching the relay to the on state, the on-board control device determines that a target value, which is at least one of a current flowing through a conduction path between the relay and the ECU and a voltage of the conduction path, has become greater than a threshold value, and thereafter, when determining that the startup completion notification has been received, determines that the ECU has switched to the on state; Furthermore, another ECU different from the ECU is provided, When the in-vehicle control device determines that the ECU has switched to an ON state, the in-vehicle control device notifies the other ECU that the ECU has switched to an ON state. 5. An in-vehicle system according to any one of claims 1 to 4.

[0031] The vehicle control device can notify other ECUs that the ECU has switched on.

[0032]

[12] After switching the relay to the off state, the vehicle control device determines that the ECU has switched to the off state when determining that a target value, which is at least one of a current flowing through a conduction path between the relay and the ECU and a voltage of the conduction path, is equal to or less than a threshold value; Furthermore, another ECU different from the ECU is provided, When the in-vehicle control device determines that the ECU has switched to the off state, the in-vehicle control device notifies the other ECU that the ECU has switched to the off state. 5. An in-vehicle system according to any one of claims 1 to 4.

[0033] The vehicle control device can notify other ECUs that the ECU has switched to the off state.

[0034] [Details of the embodiments of the present disclosure] 1. First embodiment 1-1.Configuration of in-vehicle system 1 As shown in FIG. 1, the in-vehicle system 1 of the first embodiment includes a power supply unit 10, a power line 11, an ECU 12, a relay 13, a detection unit 14, a bus 15, and an in-vehicle control device 16.

[0035] The power supply unit 10 includes, for example, a battery. The power supply unit 10 may include, for example, a low-voltage battery, or may include a high-voltage battery and a DC-DC converter that steps down the output voltage of the high-voltage battery.

[0036] The power path 11 is an electrical path that supplies power from the power supply unit 10 to the ECU 12. The power path 11 has a common path 11X electrically connected to the power supply unit 10 and a plurality of branch paths 11A, 11B, and 11C branching from the common path 11X. The ECU 12 is electrically connected to each of the branch paths 11A, 11B, and 11C.

[0037] The ECU 12 is mounted on a vehicle. The ECU 12 is an electronic control unit. The ECU 12 is maintained in an off state when power is not supplied from the power supply unit 10, and switches to an on state (specifically, an activated state) when power is supplied. In the on state, the ECU 12 may transition to a sleep state that consumes less power than the activated state. The ECU 12 includes ECUs 12A, 12B, and 12C. The ECU 12A is electrically connected to the branch path 11A. The ECU 12B is electrically connected to the branch path 11B. The ECU 12C is electrically connected to the branch path 11C.

[0038] The relay 13 switches the state of power supply from the power supply unit 10 to the ECU 12 by switching between an on and off state. The relay 13 is configured by, for example, a semiconductor switch such as a MOSFET or a mechanical switch. When the relay 13 is in the on state, it allows power supply from the power supply unit 10 to the ECU 12, and when the relay 13 is in the off state, it cuts off the power supply from the power supply unit 10 to the ECU 12. The relay 13 includes relays 13A, 13B, and 13C that switch the state of power supply from the power supply unit 10 to the ECU 12 in each of the branch paths 11A, 11B, and 11C.

[0039] The detection unit 14 includes, for example, a known current sensor and detects the current flowing through the conductive path 20 between the relay 13 and the ECU 12. The detection unit 14 includes, for example, a known voltage detection circuit and detects the voltage of the conductive path 20. Information indicating the detection result of the detection unit 14 is input to the on-board control device 16. The detection unit 14 includes detection units 14A, 14B, and 14C that detect the current and voltage of the conductive paths 20A, 20B, and 20C in the branch paths 11A, 11B, and 11C, respectively.

[0040] The bus 15 is a communication line used for communication between the ECU 12 and the vehicle control device 16 .

[0041] The in-vehicle control device 16 can communicate with each ECU 12. The in-vehicle control device 16 includes, for example, a microcomputer. The in-vehicle control device 16 controls a relay 13 that switches the state of power supply from the power supply unit 10 to the ECU 12. The in-vehicle control device 16 controls the relay 13 to switch the on / off state of the ECU 12.

[0042] 1-2. Operation of the in-vehicle control device 16 2 and 3 for the ECU 12 whose corresponding relay 13 is controlled to be in the off state. In step S11, the vehicle control device 16 determines whether the on condition for the ECU 12 is met.

[0043] The in-vehicle control device 16 determines, for example, based on the vehicle state, whether or not an ON condition is established for each ECU 12. For example, the in-vehicle control device 16 stores in advance correspondence information indicating the correspondence relationship between the vehicle state and the ON / OFF state of each ECU 12, identifies an ECU 12 that should be in the ON state based on the correspondence information and the vehicle state, and determines that the ON condition is established for that ECU 12.

[0044] The vehicle state is determined by, for example, a combination of a basic vehicle state and a service state. The basic vehicle state is a state that transitions at least between a vehicle running state and a vehicle parked state. The service state is a state determined by the enablement / disablement of service functions provided by the vehicle. Service functions include, for example, a perimeter monitoring service that monitors the perimeter of the vehicle, and an air conditioning management service that manages the air conditioning inside the vehicle when there is no one inside.

[0045] If the on-condition is not satisfied, the on-board control device 16 determines in step S12 whether the target value is greater than a predetermined threshold value. The target value is at least one of the current flowing through the conductive path 20 and the voltage of the conductive path 20. That is, the on-board control device 16 determines at least one of whether the current flowing through the conductive path 20 is greater than a threshold current and whether the voltage of the conductive path 20 is greater than a threshold voltage.

[0046] If the in-vehicle control device 16 determines that the target value is not greater than the threshold value, it determines in step S13 whether or not a startup completion notification has been received from the ECU 12. If the in-vehicle control device 16 determines that a startup completion notification has not been received, it returns to step S11. That is, the in-vehicle control device 16 repeats the processes of steps S11, S12, and S13 until it determines Yes in any of steps S11, S12, and S13.

[0047] If the on-board control device 16 determines in step S12 that the target value is greater than the threshold value even though the relay 13 corresponding to the ECU 12 is controlled to be in the off state, the on-board control device 16 determines in step S14 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S13 that a startup completion notification has been received even though the relay 13 corresponding to the ECU 12 is controlled to be in the off state, the on-board control device 16 determines in step S14 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S14 that the ECU 12 is abnormal, the on-board control device 16 notifies the other ECUs 12 of this fact in step S29. For example, if the ECU 12 determined to be abnormal is ECU 12A, the on-board control device 16 notifies ECUs 12B and 12C that ECU 12A is abnormal. If the on-condition is determined to be satisfied, the on-board control device 16 switches the relay 13 corresponding to the ECU 12 for which the on-condition is satisfied to the on state in step S15.

[0048] After controlling the relay 13 to the ON state, the in-vehicle control device 16 determines whether or not the target value is greater than the threshold value in step S21 of FIG. 3. If the in-vehicle control device 16 determines that the target value is not greater than the threshold value, the in-vehicle control device 16 determines whether or not a startup completion notification has been received from the ECU 12 in step S22. If the in-vehicle control device 16 determines that a startup completion notification has not been received, the in-vehicle control device 16 determines whether or not the time elapsed since the relay 13 was switched to the ON state has exceeded the ON determination period in step S23. If the in-vehicle control device 16 determines that the ON determination period has not passed, the process returns to step S21. That is, the in-vehicle control device 16 repeats the processes of steps S21, S22, and S23 until a Yes determination is made in any of steps S21, S22, and S23.

[0049] If the in-vehicle control device 16 determines in step S22 that it has received a startup completion notification even though the target value has not exceeded the threshold, it determines in step S24 that the ECU 12 is abnormal. If the in-vehicle control device 16 determines in step S24 that the ECU 12 is abnormal, it notifies the other ECUs 12 of this in step S29. If the in-vehicle control device 16 determines in step S23 that the on-determination period has elapsed without the target value exceeding the threshold, it determines in step S24 that the ECU 12 is abnormal.

[0050] If the in-vehicle control device 16 determines that the target value is greater than the threshold, it determines in step S25 whether or not it has received a startup completion notification. If it determines that it has not received a startup completion notification, it determines in step S26 whether or not the time that has elapsed since the relay 13 was switched to the on state has elapsed an on-determination period. If the in-vehicle control device 16 determines that the on-determination period has not elapsed, it returns to step S25. That is, the in-vehicle control device 16 repeats the processes of steps S25 and S26 until it determines Yes in either step S25 or S26.

[0051] If the on-board control device 16 determines in step S26 that the on-determination period has elapsed even though the startup completion notification has not been received, the on-board control device 16 determines in step S27 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S27 that the ECU 12 is abnormal, the on-board control device 16 notifies the other ECUs 12 of that fact in step S29.

[0052] If the in-vehicle control device 16 determines in step S25 that it has received the startup completion notification, it determines in step S28 that the ECU 12 has switched to the ON state. If the in-vehicle control device 16 determines in step S28 that the ECU 12 has switched to the ON state, it notifies the other ECUs 12 of this in step S29. For example, if the ECU 12 determined to have switched to the ON state is ECU 12A, the in-vehicle control device 16 notifies ECUs 12B and 12C that ECU 12A has switched to the ON state.

[0053] 4 for the ECU 12 whose corresponding relay 13 is controlled to be in the on state. In step S31, the in-vehicle control device 16 determines whether or not the off condition is satisfied for the ECU 12. For example, similar to the determination of whether or not the on condition is satisfied as described above, the in-vehicle control device 16 identifies the ECU 12 that should be in the off state based on the correspondence information and the vehicle state, and determines that the off condition is satisfied for that ECU 12.

[0054] If the in-vehicle control device 16 determines that the off condition is not satisfied, then in step S32, it determines whether the target value is equal to or less than a predetermined threshold. Specifically, the in-vehicle control device 16 determines at least one of whether the current flowing through the conductive path 20 is equal to or less than a threshold current and whether the voltage of the conductive path 20 is equal to or less than a threshold voltage. If the in-vehicle control device 16 determines that the target value is not equal to or less than the threshold, it returns to step S31. That is, the in-vehicle control device 16 repeats the processing of steps S31 and S32 until it determines Yes in either step S31 or S32.

[0055] If the on-board control device 16 determines that the target value is equal to or less than the threshold value despite controlling the relay 13 to the on state, the on-board control device 16 determines that the ECU 12 is abnormal in step S33. If the on-board control device 16 determines that the ECU 12 is abnormal in step S33, the on-board control device 16 notifies the other ECUs 12 of this in step S39. If the on-board control device 16 determines that the off-condition is met, the on-board control device 16 switches the relay 13 corresponding to the ECU 12 for which the off-condition is met to the off state in step S34.

[0056] After switching the relay 13 to the OFF state, the in-vehicle control device 16 determines in step S35 whether the target value is equal to or less than the threshold value. If the in-vehicle control device 16 determines that the target value is not equal to or less than the threshold value, the in-vehicle control device 16 determines in step S36 whether the time elapsed since switching the relay 13 to the OFF state has exceeded the OFF determination period. If the in-vehicle control device 16 determines that the OFF determination period has not passed, the process returns to step S35. That is, the in-vehicle control device 16 repeats the processes of steps S35 and S36 until it determines Yes in either step S35 or S36.

[0057] If the on-board control device 16 determines that the OFF determination period has elapsed without the target value becoming equal to or less than the threshold, it determines in step S36 that the ECU 12 is abnormal. If the on-board control device 16 determines that the target value is equal to or less than the threshold, it determines in step S37 that the ECU 12 has switched to the OFF state. If the on-board control device 16 determines in step S37 that the ECU 12 is abnormal, it notifies the other ECUs 12 of that fact in step S39.

[0058] When the in-vehicle control device 16 determines in step S38 that the ECU 12 has switched to the OFF state, the in-vehicle control device 16 notifies the other ECUs 12 of this in step S39. For example, if the ECU 12 determined to have switched to the OFF state is ECU 12A, the in-vehicle control device 16 notifies ECUs 12B and 12C that ECU 12A has switched to the OFF state.

[0059] 1-3. Operation of ECU12 5 when the relay 13 corresponding to the ECU 12 is switched to the ON state and power is supplied from the power supply unit 10. The ECU 12 switches to the ON state in step S41. After switching to the ON state, the ECU 12 transmits a startup completion notification via the in-vehicle control device 16. The ECU 12 switches to the OFF state when the relay 13 corresponding to the ECU 12 is switched to the OFF state and power supply from the power supply unit 10 is interrupted.

[0060] 1-4. Actions and Effects of In-Vehicle System 1 The in-vehicle control device 16 is capable of communicating with the ECU 12. The in-vehicle control device 16 is configured to control the relay 13, which switches the state of power supply from the power supply unit 10 to the ECU 12. The in-vehicle control device 16 determines an abnormality based on the control state of the relay 13 and the communication state of the ECU 12. With this configuration, the in-vehicle control device 16 can determine that the ECU 12 is abnormal by checking the communication state that does not match the control state of the relay 13. In other words, the in-vehicle control device 16 can determine an abnormality in which the on / off state of the ECU 12, which is switched on / off in response to switching of the relay 13, does not switch.

[0061] The vehicle control device 16 determines whether an abnormality has occurred based on a target value, which is at least one of the current flowing through the conductive path 20 between the relay 13 and the ECU 12 and the voltage of the conductive path 20, the control state of the relay 13, and the communication state of the ECU 12. When the on / off state of the relay 13 is switched, a change should occur in the target value. The vehicle control device 16 can determine whether an abnormality has occurred in the ECU 12 by taking the target value into consideration.

[0062] The ECU 12 switches to the ON state when power is supplied from the power supply unit 10, and transmits a startup completion notification. The in-vehicle control device 16 determines that the ECU 12 is abnormal if it receives the startup completion notification before the target value exceeds the threshold value after switching the relay 13 to the ON state. When the relay 13 switches to the ON state, the ECU 12 should transmit the startup completion notification after the target value exceeds a certain value. The in-vehicle control device 16 can determine that the ECU 12 is abnormal if it receives the startup completion notification before the target value exceeds the threshold value after switching the relay 13 to the ON state.

[0063] The on-board control device 16 switches the relay 13 to the off state, and if the ECU 12 is communicating after the target value becomes equal to or less than the threshold value, the on-board control device 16 determines that the ECU 12 is abnormal. If the relay 13 is switched to the off state and the target value becomes equal to or less than the threshold value, the communication of the ECU 12 should stop. The on-board control device 16 can determine that the ECU 12 is abnormal if the ECU 12 is communicating after the relay 13 is switched to the off state.

[0064] The on-board control device 16 determines that the ECU 12 is abnormal when the target value is greater than the threshold value while the relay 13 is controlled to be in the off state. When the relay 13 is in the off state, the target value should be equal to or less than a certain value. The on-board control device 16 can determine that the ECU 12 is abnormal when the target value is greater than the threshold value while the relay 13 is controlled to be in the off state.

[0065] When the ECU 12 receives power from the power supply unit 10, it switches to the ON state and transmits a startup completion notification. The in-vehicle control device 16 determines that the ECU 12 is abnormal when it receives the startup completion notification while controlling the relay 13 to the OFF state. When the relay 13 is in the OFF state, the startup completion notification should not be transmitted. The in-vehicle control device 16 can determine that the ECU 12 is abnormal when it receives the startup completion notification while controlling the relay 13 to the OFF state.

[0066] After switching the relay 13 to the on state, the in-vehicle control device 16 determines that the ECU 12 is abnormal if the on-determination period has elapsed without the target value exceeding the threshold. When the relay 13 is switched to the on state, the target value should exceed the threshold within a certain time. After switching the relay 13 to the on state, the in-vehicle control device 16 can determine that the ECU 12 is abnormal if the on-determination period has elapsed without the target value exceeding the threshold.

[0067] When the ECU 12 receives power supply from the power supply unit 10, the ECU 12 switches to the ON state and transmits a startup completion notification. After the relay 13 is switched to the ON state, the in-vehicle control device 16 determines that the ECU 12 is abnormal if an ON determination period has elapsed without receiving a startup completion notification. When the relay 13 is switched to the ON state, the startup completion notification should be transmitted within a certain time. After the relay 13 is switched to the ON state, the in-vehicle control device 16 can determine that the ECU 12 is abnormal if an ON determination period has elapsed without receiving a startup completion notification.

[0068] The in-vehicle control device 16 determines that the ECU 12 is abnormal if the off determination period has elapsed without the target value becoming equal to or less than the threshold value after switching the relay 13 to the off state. When the relay 13 is switched to the off state, the target value should become equal to or less than the threshold value within a certain time. The in-vehicle control device 16 can determine that the ECU 12 is abnormal if the off determination period has elapsed without the target value becoming equal to or less than the threshold value after switching the relay 13 to the off state.

[0069] The in-vehicle control device 16 can notify other ECUs 12 that the ECU 12 is abnormal. The in-vehicle control device 16 can notify other ECUs 12 that the ECU 12 has switched to an ON state. The in-vehicle control device 16 can notify other ECUs 12 that the ECU 12 has switched to an OFF state.

[0070] <Other embodiments> The present disclosure is not limited to the embodiments described above and in the drawings. For example, any combination of features of the above-described or following embodiments is possible within a range that does not contradict. Furthermore, any feature of the above-described or following embodiments may be omitted unless explicitly stated as essential. Furthermore, the above-described embodiment may be modified as follows.

[0071] In the first embodiment, the ECUs 12 are connected to the same bus 15, but the ECUs 12 may be connected to different buses 15.

[0072] The embodiments disclosed herein should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is not limited to the embodiments disclosed herein, but is defined by the claims, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0073] 1. In-vehicle systems 10...Power supply section 11…Power line 11A...Fork 11B...Fork in the road 11C...Fork in the road 11X...Common route 12...ECU 12A…ECU 12B…ECU 12C…ECU 13...Relay 13A...Relay 13B...Relay 13C...Relay 14...Detection unit 14A…Detection unit 14B…Detection unit 14C…Detection unit 15...Bus 16...In-vehicle control device 20...Conductive path 20A...Conductive path 20B…Conducting path 20C…Conducting path

Claims

1. An ECU mounted on a vehicle; an in-vehicle control device that communicates with the ECU, The vehicle-mounted control device is configured to control a relay that switches a state of power supply from a power supply unit to the ECU, and determines whether the ECU is abnormal based on the control state of the relay and the communication state of the ECU. In-vehicle systems.

2. The vehicle-mounted control device determines whether the ECU is abnormal based on a target value that is at least one of a current flowing through a conduction path between the relay and the ECU and a voltage of the conduction path, a control state of the relay, and a communication state of the ECU. The in-vehicle system according to claim 1 .

3. The ECU switches to an ON state when power is supplied from the power supply unit, and transmits a startup completion notification. The vehicle control device determines that the ECU is abnormal if the startup completion notification is received before the target value exceeds a threshold value after switching the relay to an on state. The in-vehicle system according to claim 2 .

4. The vehicle control device switches the relay to an OFF state, and determines that the ECU is abnormal if the ECU is communicating after the target value becomes equal to or less than a threshold value. The in-vehicle system according to claim 2 .

5. The vehicle control device determines that the ECU is abnormal when the target value is greater than a threshold value while the relay is controlled to be in an off state. The in-vehicle system according to any one of claims 2 to 4.

6. The ECU switches to an ON state when power is supplied from the power supply unit, and transmits a startup completion notification. The vehicle-mounted control device determines that the ECU is abnormal when the vehicle-mounted control device receives the start-up completion notification while controlling the relay to be in the off state. The in-vehicle system according to any one of claims 1 to 4.

7. The vehicle-mounted control device determines that the ECU is abnormal if an on-determination period has elapsed without the target value exceeding a threshold value after the relay is switched on. The in-vehicle system according to any one of claims 2 to 4.

8. The ECU switches to an ON state when power is supplied from the power supply unit, and transmits a startup completion notification. The vehicle-mounted control device determines that the ECU is abnormal if an ON determination period has elapsed without receiving the startup completion notification after switching the relay to the ON state. The in-vehicle system according to any one of claims 1 to 4.

9. The vehicle-mounted control device determines that the ECU is abnormal if an OFF determination period has elapsed without the target value becoming equal to or less than a threshold value after the relay has been switched to an OFF state. The in-vehicle system according to any one of claims 2 to 4.

10. The ECU is different from the ECU. When the vehicle-mounted control device determines that the ECU is abnormal, it notifies the other ECU that the ECU is abnormal. The in-vehicle system according to any one of claims 1 to 4.

11. The ECU switches to an ON state when power is supplied from the power supply unit, and transmits a startup completion notification. After switching the relay to the on state, the on-board control device determines that a target value, which is at least one of a current flowing through a conduction path between the relay and the ECU and a voltage of the conduction path, has become greater than a threshold value, and thereafter, when determining that the startup completion notification has been received, determines that the ECU has switched to the on state; Furthermore, another ECU different from the ECU is provided, When the in-vehicle control device determines that the ECU has been switched to an ON state, the in-vehicle control device notifies the other ECU that the ECU has been switched to an ON state. The in-vehicle system according to any one of claims 1 to 4.

12. the on-board control device determines that the ECU has been switched to the off state when it determines that a target value, which is at least one of a current flowing through a conduction path between the relay and the ECU and a voltage of the conduction path, is equal to or less than a threshold value after switching the relay to the off state; Furthermore, another ECU different from the ECU is provided, When the in-vehicle control device determines that the ECU has been switched to the off state, the in-vehicle control device notifies the other ECU that the ECU has been switched to the off state. The in-vehicle system according to any one of claims 1 to 4.

Images