On-board management system and management method

Abstract

To allow a vehicle to perform evacuation travel more reliably.SOLUTION: An in-vehicle management system for managing an operation mode of each of a plurality of in-vehicle devices configured to operate using electric power supplied by a first power supply or a second power supply, the in-vehicle management system including an acquisition unit configured to acquire power supply information indicating a state of the first power supply, and a control unit configured to, when the state indicated by the power supply information acquired by the acquisition unit indicates an abnormality related to the first power supply, cause one or more first in-vehicle devices, which are the in-vehicle devices, to transition to a limp-home traveling mode for causing a vehicle on which the in-vehicle management system is mounted to perform limp-home traveling, and a transition processing unit configured to perform transition processing that is processing for causing one or a plurality of second in-vehicle devices, which are other in-vehicle devices different from the first in-vehicle device, to transition to a power saving mode for executing a power saving operation of the second in-vehicle devices.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present disclosure relates to an in-vehicle management system and management method. [Background technology]

[0002] Conventionally, in an in-vehicle system having a plurality of in-vehicle devices, a technology has been developed in which, when an abnormality is detected in a power supply supplying power to each of the in-vehicle devices, the in-vehicle devices are operated by power supplied from a power supply different from the power supply that is currently being supplied. For example, Patent Document 1 (JP 2023-72940 A) discloses the following technology. That is, a power supply device includes a first system that supplies power from a first power supply to a first load, a second system that supplies power from a second power supply to a plurality of second loads, a connection unit that can connect and disconnect the first system and the second system, a load switch that can connect and disconnect the second load and the second system, and a control unit that, when a failure of the first power supply is detected, disconnects the connection unit and supplies power from the second power supply to the second load to perform fail-safe control. During the fail-safe control, the control unit prioritizes shutting off the load switch corresponding to a second load that has a long duration from the interruption of power supply to the second load over the load switches corresponding to the other second loads. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2023-72940 Summary of the Invention [Problem to be solved by the invention]

[0004] For example, in an in-vehicle system, if an abnormality in a certain power source is detected, the vehicle may be evacuated using another power source instead. In this case, if an abnormality occurs in the other power source, the evacuating operation may fail.

[0005] The present disclosure has been made to solve the above-mentioned problems, and its purpose is to provide an in-vehicle management system and management method that can more reliably cause a vehicle to evacuate. [Means for solving the problem]

[0006] The vehicle management system disclosed herein is an in-vehicle management system that manages the operating modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, and is provided with a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices, each corresponding to one of the plurality of in-vehicle devices, and is equipped with an acquisition unit that acquires power source information indicating the state of the first power source, and a transition processing unit that performs transition processing, when the state indicated by the power source information acquired by the acquisition unit indicates an abnormality related to the first power source, to transition one or more first in-vehicle devices that are the in-vehicle devices to an evacuation driving mode for driving a vehicle in which the in-vehicle management system is installed to an evacuation driving mode, and to transition one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

[0007] One aspect of the present disclosure can be realized not only as an in-vehicle management system equipped with such a characteristic processing unit, but also as a program for causing a computer to execute such characteristic processing steps, or as a semiconductor integrated circuit that realizes part or all of the in-vehicle management system. [Effects of the Invention]

[0008] According to the present disclosure, the vehicle can be driven to safety more reliably. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram illustrating an example of a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. [Figure 2]FIG. 2 is a diagram illustrating an example of the configuration of the vehicle-mounted relay device according to the embodiment of the present disclosure. [Figure 3] FIG. 3 is a diagram for explaining power supply switching control by the vehicle-mounted relay device according to the embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram illustrating an example of a correspondence table stored by the vehicle-mounted relay device according to the embodiment of the present disclosure. [Figure 5] FIG. 5 is a diagram for explaining the transition process performed by the vehicle-mounted relay device according to the embodiment of the present disclosure. [Figure 6] FIG. 6 is a flowchart defining an operation procedure when the vehicle-mounted relay device according to the embodiment of the present disclosure performs transition processing. [Figure 7] FIG. 7 is a flowchart defining an operation procedure when the vehicle-mounted relay device according to the embodiment of the present disclosure performs transition processing. [Figure 8] FIG. 8 is a flowchart defining an operation procedure when the vehicle-mounted relay device according to the embodiment of the present disclosure performs transition processing. [Figure 9] FIG. 9 is a diagram illustrating an example of a sequence of processes performed by the vehicle-mounted relay device, the evacuation-related device, and other devices in the vehicle-mounted communication system according to the embodiment of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0010] First, the contents of the embodiments of the present disclosure will be listed and described. (1) An in-vehicle management system according to an embodiment of the present disclosure is an in-vehicle management system that manages the operating modes of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, and includes a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices, each of which is provided corresponding to the plurality of in-vehicle devices. The in-vehicle management system includes an acquisition unit that acquires power source information indicating the state of the first power source, and a transition processing unit that performs transition processing, when the state indicated by the power source information acquired by the acquisition unit indicates an abnormality related to the first power source, to transition one or more first in-vehicle devices that are the in-vehicle devices to an evacuation driving mode for driving a vehicle in which the in-vehicle management system is installed to an evacuation driving mode, and to transition one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

[0011] In this way, when an abnormality in the first power source is detected, the first in-vehicle device used for the vehicle's evacuation drive is transitioned to the evacuation drive mode, and the second in-vehicle device different from the first in-vehicle device is transitioned to the power-saving mode. This configuration makes it possible to suppress a decrease in the remaining power of the second power source that replaces the first power source. This reduces the possibility that the vehicle's evacuation drive will fail midway. Therefore, the vehicle can be more reliably driven to evacuation.

[0012] (2) In the above (1), the power saving mode may include a stop mode in which the power supply to the second in-vehicle device is stopped by turning off the switching unit corresponding to the second in-vehicle device.

[0013] With this configuration, it is possible to further suppress a decrease in the remaining amount of the second power source while the vehicle is running to evacuate, and therefore the vehicle can be run to evacuate more reliably.

[0014] (3) In the above (2), the vehicle management system may further include a measurement unit that measures the second power source, and the transition processing unit may determine whether or not to transition the second vehicle equipment to the stop mode based on the measurement results of the measurement unit during the transition processing.

[0015] With this configuration, it is possible to more appropriately determine whether the second in-vehicle device should transition to the stop mode depending on the remaining amount of the second power source.

[0016] (4) In any of (1) to (3) above, the vehicle management system may further include a status notification unit that transmits information indicating the status of each of the first vehicle-mounted device and the second vehicle-mounted device to the multiple vehicle-mounted devices after the transition processing by the transition processing unit.

[0017] This configuration can prevent inconsistencies in the recognition of the status of each on-board device after the transition process by the on-board management system between the on-board devices, thereby enabling, for example, a certain on-board device to transition from its own operation mode to an appropriate operation mode according to the status of the on-board device of the communication partner.

[0018] (5) In any one of the above (1) to (4), the first power supply may include a power conversion device, and the second power supply may not include the power conversion device.

[0019] For example, hybrid vehicles and the like may be equipped with a main power supply including a power conversion device connected to a high-voltage battery and a backup power supply that does not include a power conversion device. With the above-described configuration, when a vehicle such as a hybrid vehicle equipped with a main power supply and a backup power supply is running to evacuate, it is possible to suppress a decrease in the remaining power of the backup power supply, thereby enabling the vehicle to run to evacuate reliably.

[0020] (6) In any of (1) to (5) above, the transition processing unit may determine the operating mode of each of the first in-vehicle device and the second in-vehicle device in the transition processing using correspondence information indicating a correspondence between the in-vehicle device and the operating mode of the in-vehicle device when the abnormality occurs.

[0021] With this configuration, when an abnormality occurs in the first power supply, the operation modes to which the first in-vehicle device and the second in-vehicle device should each transition can be easily identified using the correspondence information.

[0022] (7) A management method according to an embodiment of the present disclosure is a management method in an in-vehicle management system that manages the operating modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, and includes a step of acquiring power source information indicating the state of the first power source when a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices are provided corresponding to the plurality of in-vehicle devices, and a step of performing transition processing when the state indicated by the acquired power source information indicates an abnormality related to the first power source, which is processing for transitioning one or more first in-vehicle devices that are the in-vehicle devices to an evacuation driving mode for driving a vehicle in which the in-vehicle management system is installed to an evacuation driving mode, and a step of performing transition processing for transitioning one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

[0023] In this way, when an abnormality in the first power source is detected, the first in-vehicle device used for the vehicle's evacuation drive is transitioned to an evacuation drive mode, and the second in-vehicle device different from the first in-vehicle device is transitioned to a power-saving mode. This method can prevent a decrease in the remaining power of the second power source that replaces the first power source. This reduces the possibility that the vehicle's evacuation drive will fail midway. Therefore, the vehicle can be more reliably driven to an evacuation drive.

[0024] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In the drawings, identical or corresponding parts are designated by the same reference numerals, and their description will not be repeated. Furthermore, at least some of the embodiments described below may be combined in any manner.

[0025] [In-vehicle communication system] Fig. 1 is a diagram illustrating an example of the configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Referring to Fig. 1, the in-vehicle communication system 301 includes an in-vehicle relay device 101, an in-vehicle device group including a plurality of in-vehicle devices 201, a power supply unit 51, a plurality of power supply relays 81, and a plurality of control relays 91. The in-vehicle communication system 301 is mounted on a vehicle 1. The vehicle 1 may be a hybrid vehicle, an electric vehicle, or the like. The in-vehicle communication system 301 is an example of an in-vehicle management system. The control relay 91 is an example of a switching unit.

[0026] The in-vehicle devices 201 include an in-vehicle ECU (Electronic Control Unit), an OTA (Over The Air) master, a sensor, an actuator, a motor, a navigation device, a human-machine interface, a camera, etc. The in-vehicle ECUs include an autonomous driving ECU, an engine ECU, a headlamp ECU, a steering ECU, a brake ECU, and a TCU (Telematics Communication Unit).

[0027] The in-vehicle relay device 101 and the plurality of in-vehicle devices 201 constitute an in-vehicle network 401. The plurality of in-vehicle devices 201 are connected to the in-vehicle relay device 101 via a CAN bus 2 that conforms to the CAN (Controller Area Network) standard, for example.

[0028] 1, the in-vehicle communication system 301 includes in-vehicle devices 201A, 201B, 201C, 201D, 201E, 201F, 201G, and 201H that are in-vehicle devices 201. Also, in the example shown in FIG. 1, CAN buses 2A, 2B, 2C, and 2D are provided as the CAN bus 2.

[0029] The in-vehicle devices 201A and 201B are connected to the in-vehicle relay device 101 via a CAN bus 2A. The in-vehicle devices 201C and 201D are connected to the in-vehicle relay device 101 via a CAN bus 2B. The in-vehicle devices 201E and 201F are connected to the in-vehicle relay device 101 via a CAN bus 2C. The in-vehicle devices 201G and 201H are connected to the in-vehicle relay device 101 via a CAN bus 2D.

[0030] The vehicle-mounted relay device 101 performs a relay process for relaying frames transmitted and received between the vehicle-mounted devices 201 .

[0031] For example, each in-vehicle device 201 transmits a CAN frame including various information (described later) such as information for assisting the autonomous driving performed by the vehicle 1 and information used for entertainment, and a CAN-ID (Identifier) ​​indicating the type of data, to another in-vehicle device 201 or the in-vehicle repeater 101. The in-vehicle repeater 101 relays a CAN frame received from a certain in-vehicle device 201 to another in-vehicle device 201. The in-vehicle repeater 101 also creates a CAN frame including the above-mentioned various information and the CAN-ID, and transmits the created CAN frame to the destination in-vehicle device 201.

[0032] The in-vehicle communication system 301 is not limited to a configuration in which four CAN buses 2 are provided, but may be a configuration in which one, two, three, or five or more CAN buses 2 are provided.

[0033] In addition, the vehicle-mounted relay device 101 and the vehicle-mounted equipment 201 may be configured to communicate in accordance with communication protocols such as CAN FD (CAN with Flexible Data Rate), Ethernet (registered trademark), FlexRay (registered trademark), MOST (Media Oriented System Transport) (registered trademark), LIN (Local Interconnect Network), and CXPI (Clock Extension Peripheral Interface) (registered trademark), instead of or in addition to communication in accordance with the CAN standard.

[0034] The vehicle-mounted relay device 101 and each vehicle-mounted device 201 communicate with each other to provide various services to the vehicle 1.

[0035] Specifically, the in-vehicle network 401 executes services such as a service for performing evacuation driving of the vehicle 1 (hereinafter also referred to as the "evacuation driving service"), a service for updating various software used in the in-vehicle network 401 via OTA, a service for contactlessly charging the battery installed in the vehicle 1, a service for detecting malfunctions in the vehicle 1, and a service for remotely operating the vehicle 1.

[0036] 1, the in-vehicle devices 201E and 201F are in-vehicle devices 201 that perform an evacuation travel service (hereinafter also referred to as "evacuation-related devices"). The evacuation-related devices include an autonomous driving ECU, a headlamp ECU, a steering ECU, a brake ECU, a motor that drives an EPS (Electric Power Steering), and a brake actuator. The evacuation-related devices are an example of a first in-vehicle device.

[0037] The on-vehicle devices 201A, 201B, 201C, 201D, 201G, and 201H are other on-vehicle devices 201 (hereinafter also referred to as "other devices") that are different from the evacuation-related devices.

[0038] Hereinafter, the in-vehicle devices 201G and 201H, which are other devices connected to a control relay 91 described later, will also be referred to as "other device E1," and the in-vehicle devices 201A, 201B, 201C, and 201D, which are other devices not connected to the control relay 91, will also be referred to as "other device E2." In this embodiment, the activation method of the other device E1 and the activation method of the other device E2 are different from each other. The other device E1 is an example of a second in-vehicle device.

[0039] (Power supply part) The power supply unit 51 supplies power in the vehicle 1. The power supply unit 51 includes a first power supply 61 and a second power supply 62. Under normal circumstances, the first power supply 61 supplies power to each device in the in-vehicle communication system 301. When an abnormality occurs in the first power supply 61, the second power supply 62 supplies power to each device in the in-vehicle communication system 301. That is, when an abnormality in the first power supply 61 is detected in the in-vehicle communication system 301, the power supply source for each device is switched from the first power supply 61 to the second power supply 62. In this embodiment, a power supply management unit 22 in the in-vehicle relay device 101, which will be described later, controls the switching of the power supply source.

[0040] The first power supply 61 is connected to the in-vehicle repeater 101 via a power supply line 3. The second power supply 62 is connected to the in-vehicle repeater 101 via a power supply line 4. Each in-vehicle device 201 is connected to the in-vehicle repeater 101 via a power supply line 5. The power supply line 3 and the power supply line 5 are connected within the in-vehicle repeater 101. The power supply line 4 and the power supply line 5 are connected within the in-vehicle repeater 101.

[0041] 1, power lines 5A, 5B, 5C, and 5D are provided as the power line 5. The in-vehicle devices 201A and 201B are connected to the in-vehicle repeater 101 via the power line 5A. The in-vehicle devices 201C and 201D are connected to the in-vehicle repeater 101 via the power line 5B. The in-vehicle devices 201E and 201F are connected to the in-vehicle repeater 101 via the power line 5C. The in-vehicle devices 201G and 201H are connected to the in-vehicle repeater 101 via the power line 5D.

[0042] For example, the first power supply 61 includes a battery 71 and a DC / DC converter 72. The battery 71 is a high-voltage battery such as a lithium-ion battery. The DC / DC converter 72, for example, steps down a DC voltage Vb of the battery 71 to generate a DC voltage Vc. The DC / DC converter 72 then outputs the DC voltage Vc to the power supply line 3. The DC / DC converter 72 is an example of a power conversion device.

[0043] The second power supply 62 includes, for example, a low-voltage battery having a lower voltage than the battery 71 of the first power supply 61. For example, the second power supply 62 does not include a power conversion device.

[0044] (power relay) For example, the power supply relay 81 switches the power supply source for each device in the in-vehicle communication system 301 between the first power supply 61 and the second power supply 62 .

[0045] In the example shown in FIG. 1, the in-vehicle communication system 301 includes power supply relays 81A and 81B, which are the power supply relay 81.

[0046] The power supply relay 81A is connected between the first power supply 61 and the in-vehicle repeater 101. The power supply relay 81B is connected between the second power supply 62 and the in-vehicle repeater 101.

[0047] Normally, the power supply relay 81A is in the ON state, and the power supply relay 81B is in the OFF state.

[0048] (control relay) The control relay 91 switches whether to supply power from the first power source 61 or the second power source 62 to the in-vehicle device 201. For example, the control relay 91 switches between an on state and an off state under the control of a switching control unit 25 in the in-vehicle repeater 101, which will be described later. When the control relay 91 switches from an on state to an off state, the power supply to the in-vehicle device 201 is stopped.

[0049] 1, the in-vehicle communication system 301 includes control relays 91A, 91B, 91C, and 91D that are the control relay 91. The control relay 91A, the control relay 91B, the control relay 91C, and the control relay 91D are provided corresponding to the in-vehicle device 201E, the in-vehicle device 201F, the in-vehicle device 201G, and the in-vehicle device 201H, respectively.

[0050] Specifically, for example, the control relay 91A is connected between the in-vehicle device 201E and the in-vehicle relay device 101. The control relay 91B is connected between the in-vehicle device 201F and the in-vehicle relay device 101. The control relay 91C is connected between the in-vehicle device 201G and the in-vehicle relay device 101. The control relay 91D is connected between the in-vehicle device 201H and the in-vehicle relay device 101. The state of each control relay 91 is, for example, off when the ignition power of the vehicle 1 is off.

[0051] The other device transitions from normal mode to power saving mode and from power saving mode to normal mode. In normal mode, the other device communicates with other devices in the in-vehicle communication system 301, and in power saving mode, the other device stops communication with other devices in the in-vehicle communication system 301. The power saving mode is a mode in which power consumption is lower than in normal mode.

[0052] Specifically, for example, the power-saving modes of the other device E1 include a stop mode and a sleep mode. The stop mode is a mode in which the control relay 91 corresponding to the other device E1 is turned off, thereby stopping the power supply to the other device E1. The sleep mode is a mode in which power consumption is greater than that of the stop mode and less than that of the normal mode. Specifically, for example, the sleep mode is a mode in which some functions of the other device E1 are stopped, a mode in which the clock frequency of the other device E1 is reduced, etc.

[0053] The power saving mode of the other device E2 to which the control relay 91 is not connected is a mode in which some functions of the other device E2 are stopped, a mode in which the clock frequency of the other device E2 is reduced, or the like.

[0054] [In-vehicle relay device] FIG. 2 is a diagram illustrating an example of the configuration of an in-vehicle relay device according to an embodiment of the present disclosure. Referring to FIG. 2, the in-vehicle relay device 101 includes a relay unit 11, a processing unit 12, and a storage unit 13. The processing unit 12 includes a detection unit 21, a power management unit 22, a measurement unit 23, a transition processing unit 24, a switching control unit 25, a state notification unit 26, and a device control unit 27. One or both of the relay unit 11 and the processing unit 12 are realized, for example, by a processing circuit including one or more processors. The storage unit 13 is, for example, a non-volatile memory included in the processing circuit. The power management unit 22 is an example of an acquisition unit.

[0055] (Relay section) The relay unit 11 receives a CAN frame transmitted from a certain in-vehicle device 201. Then, the relay unit 11 checks whether the received CAN frame is a CAN frame that the in-vehicle relay device 101 of its own should receive.

[0056] The storage unit 13 stores, for example, a reception list indicating CAN-IDs included in CAN frames that should be received by the vehicle-mounted relay device 101. The reception list is registered in the storage unit 13 by the manufacturer of the vehicle 1, for example, when the vehicle 1 is shipped.

[0057] When the relay unit 11 receives a CAN frame, it refers to the reception list in the storage unit 13 to check whether the CAN-ID included in the CAN frame is registered in the reception list.

[0058] For example, if the CAN-ID included in the received CAN frame is not registered in the reception list, the relay unit 11 discards the CAN frame.

[0059] On the other hand, the relay unit 11 performs relay processing, for example, when the CAN-ID included in the received CAN frame is registered in the reception list and the destination of the CAN frame is the in-vehicle device 201. Furthermore, the relay unit 11 outputs the CAN frame to the processing unit 12, for example, when the CAN-ID included in the received CAN frame is registered in the reception list and the destination of the CAN frame is its own in-vehicle relay device 101.

[0060] Specifically, for example, the storage unit 13 stores a routing table indicating the correspondence between the CAN-ID, the device to which the CAN frame is to be transmitted, and the CAN bus 2 to which the device to which the CAN frame is to be transmitted (hereinafter also referred to as the "destination bus"). The routing table is registered in the storage unit 13 by the manufacturer of the vehicle 1, for example, when the vehicle 1 is shipped.

[0061] For example, if the CAN-ID contained in the CAN frame received from the in-vehicle device 201 is registered in the reception list, the relay unit 11 checks the destination device corresponding to the CAN-ID by referring to the routing table in the memory unit 13.

[0062] When the relay unit 11 confirms that the destination device of the received CAN frame is the in-vehicle device 201, it refers to the routing table to identify the destination bus corresponding to the destination device, and then outputs the received CAN frame to the identified destination bus.

[0063] On the other hand, when the relay unit 11 confirms that the device to which the received CAN frame is to be transmitted is its own in-vehicle relay unit 101 , it outputs the CAN frame to the processing unit 12 .

[0064] (Switching control unit) For example, the switching control unit 25 performs operation control to switch the control relays 91 connected to each of the evacuation-related devices and the other device E1 from an OFF state to an ON state, whereby the evacuation-related devices and the other device E1 are supplied with power from the power supply unit 51 and start operating.

[0065] More specifically, for example, when the switching control unit 25 detects that the ignition power of the vehicle 1 has been switched from an off state to an on state, the switching control unit 25 performs operation control.

[0066] Specifically, for example, switching control unit 25 detects the on / off switching of the ignition power supply by measuring the output voltage of the ignition power supply. If the measured voltage value is equal to or greater than a predetermined threshold value Th5, switching control unit 25 determines that the ignition power supply is in the on state, and if the measured voltage value is less than threshold value Th5, it determines that the ignition power supply is in the off state.

[0067] When the switching control unit 25 determines that the ignition power of the vehicle 1 has been switched from an off state to an on state, it performs operation control to start up the evacuation-related devices and other devices E1.

[0068] (Detection unit) For example, the detection unit 21 detects an abnormality related to the first power supply 61. For example, the detection unit 21 detects a state in which the output voltage of the first power supply 61 is reduced due to a failure of the DC / DC converter 72 or the like shown in FIG.

[0069] More specifically, the detection unit 21 performs a measurement process of measuring the output voltage of the first power supply 61, for example, periodically or irregularly.

[0070] For example, when the measured voltage value Va is equal to or greater than a predetermined threshold value Th1, the detection unit 21 determines that no abnormality has occurred in the first power supply 61. On the other hand, when the measured voltage value Va is less than the threshold value Th1, the detection unit 21 determines that an abnormality has occurred in the first power supply 61. Then, the detection unit 21 outputs abnormality detection information indicating that an abnormality has occurred in the first power supply 61 to the power supply management unit 22.

[0071] The configuration is not limited to the in-vehicle relay device 101 having the detection unit 21, and a certain in-vehicle device 201 may have the detection unit 21. In this case, when the detection unit 21 in the in-vehicle device 201 determines that an abnormality has occurred in the first power supply 61, it transmits abnormality detection information to the in-vehicle relay device 101.

[0072] [Problem description] In the in-vehicle communication system 301, for example, when the in-vehicle relay device 101 detects an abnormality in the first power source 61, it causes the vehicle 1 to run to safety by using the second power source 62 instead. In this case, if an abnormality occurs in the second power source 62, such as a decrease in the remaining power, the evacuation running may fail.

[0073] Therefore, the in-vehicle communication system 301 according to the embodiment of the present disclosure solves the above problem by the following configuration and operation.

[0074] [In-vehicle relay device] (Power management department) 2 again, in the in-vehicle relay device 101, the power supply management unit 22 acquires power supply information indicating the state of the first power supply 61. Specifically, for example, the power supply management unit 22 acquires, as the power supply information, abnormality detection information received from the detection unit 21. Then, the power supply management unit 22 outputs the abnormality detection information to the transition processing unit 24 and the device control unit 27.

[0075] FIG. 3 is a diagram for explaining power supply switching control by the vehicle-mounted relay device according to the embodiment of the present disclosure.

[0076] Referring to Figure 3, for example, when the detection unit 21 detects an abnormality in the first power supply 61, the power supply management unit 22 performs power supply switching control to switch the power supply source of each device in the in-vehicle communication system 301 from the first power supply 61 to the second power supply 62.

[0077] Specifically, for example, when power management unit 22 receives abnormality detection information from detection unit 21, it switches the state of power relay 81A from the on state to the off state, and switches the state of power relay 81B from the off state to the on state.

[0078] (Measurement section) 2 again, for example, measurement unit 23 measures second power supply 62. More specifically, for example, measurement unit 23 performs a remaining amount monitoring process for monitoring the remaining amount of second power supply 62 when power supply relay 81B is in the on state.

[0079] Specifically, for example, the measurement unit 23 measures the output current of the second power supply 62 at every predetermined time Sa. The measurement unit 23 also measures the elapsed time Sb from when the second power supply 62 is fully charged. The measurement unit 23 then multiplies the measured current value of the second power supply 62 by the elapsed time Sb to calculate the amount of power consumption of the second power supply 62.

[0080] For example, the memory unit 13 stores the charge amount when the second power source 62 is fully charged. When the measurement unit 23 calculates the power usage amount of the second power source 62, the measurement unit 23 calculates the remaining power of the second power source 62 by subtracting the power usage amount from the charge amount when the second power source 62 is fully charged, which is stored in the memory unit 13.

[0081] Then, the measuring unit 23 outputs remaining amount information indicating the calculation result to the transition processing unit 24. The measuring unit 23 performs such remaining amount monitoring processing periodically or irregularly.

[0082] The measuring unit 23 is not limited to a configuration that calculates the remaining amount of the second power source 62, and may be configured to measure the output voltage of the second power source 62 instead of or in addition to calculating the remaining amount.

[0083] (Transition processing section) The transition processing unit 24 performs transition processing when the state of the first power supply 61 indicated by the power supply information acquired by the power supply management unit 22 indicates an abnormality related to the first power supply 61. The transition processing is processing for transitioning the evacuation-related devices to an evacuation traveling mode for causing the vehicle 1 to travel for evacuation, and processing for transitioning the other device E1 to a power saving mode for executing the power saving operation of the other device E1.

[0084] For example, the evacuation driving mode includes a guidance mode that guides the vehicle 1 to a safe place such as a road shoulder. Note that the evacuation driving mode may include other modes in addition to or instead of the guidance mode, such as a mode that restricts the driving functions of the vehicle 1, such as the engine output value, a mode that notifies the driver of the vehicle 1 that an abnormality has occurred, and a mode that drives the vehicle 1 with the hazard lights turned on.

[0085] FIG. 4 is a diagram illustrating an example of a correspondence table stored by the vehicle-mounted relay device according to the embodiment of the present disclosure.

[0086] 4, for example, the storage unit 13 stores a correspondence table Tb indicating a correspondence relationship between the in-vehicle device 201 and an operation mode of the in-vehicle device 201 when an abnormality occurs in the first power supply 61 (hereinafter also referred to as an "abnormal operation mode"). The correspondence table Tb is registered in the storage unit 13 by the manufacturer of the vehicle 1, for example, when the vehicle 1 is shipped. The correspondence table Tb is an example of correspondence information.

[0087] 4, the abnormality operation mode corresponding to the in-vehicle devices 201E and 201F, which are the evacuation-related devices, is the “evacuation driving mode.” The abnormality operation mode corresponding to the in-vehicle devices 201G and 201H, which are the other devices E1, is the “power saving mode.”

[0088] For example, the transition processing unit 24 uses the correspondence table Tb in the storage unit 13 to determine the abnormality operation modes of each of the evacuation-related devices and the other device E1.

[0089] More specifically, for example, when the transition processing unit 24 receives abnormality detection information from the power management unit 22, it refers to the correspondence table Tb in the memory unit 13 to confirm that the abnormality operation mode of the evacuation-related equipment is the "evacuation driving mode" and that the abnormality operation mode of the other equipment E1 is the "power saving mode."

[0090] <Transition to evacuation driving mode> For example, as a process for transitioning the evacuation-related equipment to the evacuation driving mode in the transition process, the transition processing unit 24 performs a process of transmitting a CAN frame (hereinafter also referred to as a "transition request frame FA") to the evacuation-related equipment, the CAN frame including the CAN-ID of the evacuation-related equipment and request information R1 requesting transition to the evacuation driving mode.

[0091] For example, the storage unit 13 stores an ID table showing the correspondence between the in-vehicle device 201 and the CAN-ID.

[0092] When the transition processing unit 24 confirms that the operation mode in abnormality of the evacuation-related equipment is the "evacuation travel mode," it confirms the CAN-ID of each evacuation-related equipment by referring to the ID table in the storage unit 13. Then, the transition processing unit 24 creates a transition request frame FA for each evacuation-related equipment and outputs the created transition request frame FA to the relay unit 11.

[0093] When the relay unit 11 receives the transition request frame FA from the transition processing unit 24, it transmits the transition request frame FA to the evacuation-related device using the routing table as described above. Also, for example, the relay unit 11 outputs a request completion notification indicating that the transition request frame FA has been output to the status notification unit 26.

[0094] When the evacuation-related device receives the transition request frame FA from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the received transition request frame FA.

[0095] The evacuation-related device discards a transition request frame FA that does not include its own CAN-ID. On the other hand, when the evacuation-related device receives a transition request frame FA that includes its own CAN-ID, it transitions to the evacuation driving mode in accordance with the request information R1 included in the transition request frame FA. For example, an autonomous driving ECU, which is an example of the evacuation-related device, guides its own vehicle 1 to the shoulder of the road by autonomous driving in accordance with the request information R1.

[0096] Furthermore, for example, when the evacuation-related device receives a transition request frame FA including its own CAN-ID, it creates a CAN frame (hereinafter also referred to as a "response frame F1") including the CAN-ID of the in-vehicle relay device 101 and information indicating that the transition request frame FA has been received. Then, the evacuation-related device outputs the created response frame F1 to the CAN bus 2 to which the evacuation-related device is connected.

[0097] In the vehicle-mounted relay device 101, when the transition processing unit 24 receives the response frame F1 from the evacuation-related equipment via the relay unit 11, it determines that the transition request frame FA has reached the evacuation-related equipment.

[0098] <Transition from normal mode to stop mode> For example, in the transition process, the transition processing unit 24 determines whether or not to transition the other device E1 to a power saving mode based on the measurement result of the measurement unit 23. Here, an example will be described in which the transition processing unit 24 determines whether or not to transition the other device E1 to a stop mode based on the measurement result of the measurement unit 23.

[0099] More specifically, for example, when the transition processing unit 24 receives remaining capacity information from the measurement unit 23 and confirms by referring to the correspondence table Tb shown in Figure 4 that the abnormal operation mode of the other device E1 is the "power saving mode", it checks whether the remaining capacity of the second power source 62 indicated by the remaining capacity information is less than a predetermined threshold value Th2.

[0100] If the remaining power of the second power source 62 indicated by the remaining power information received from the measurement unit 23 is less than the threshold value Th2, the transition processing unit 24 determines to transition each other device E1 to the stop mode.

[0101] For example, as a process for transitioning another device E1 to a stop mode during the transition process, the transition processing unit 24 performs a process of transmitting a CAN frame (hereinafter also referred to as a "transition request frame FB") to the other device E1, the CAN-ID of the other device E1 and request information R2 requesting a transition to the stop mode.

[0102] Specifically, for example, when the transition processing unit 24 determines to transition each other device E1 to the stop mode, it checks the CAN-ID of each other device E1 by referring to the ID table in the storage unit 13. Then, the transition processing unit 24 creates a transition request frame FB for each other device E1 and outputs the created transition request frame FB to the relay unit 11.

[0103] When the relay unit 11 receives the transition request frame FB from the transition processing unit 24, it uses the routing table as described above to transmit the transition request frame FB to the other device E1.

[0104] When the other device E1 operating in the normal mode receives the transition request frame FB from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the received transition request frame FB.

[0105] The other device E1 discards the transition request frame FB that does not include its own CAN-ID. On the other hand, when the other device E1 receives the transition request frame FB that includes its own CAN-ID, it performs a predetermined shutdown operation and transitions to the stop mode.

[0106] For example, in the above-mentioned shutdown operation, the other device E1 creates a CAN frame (hereinafter also referred to as a "response frame F2") that includes the CAN-ID of the in-vehicle relay device 101 and information indicating that the transition request frame FB has been received.

[0107] Then, the other device E1 outputs the created response frame F2 to the CAN bus 2 to which the other device E1 is connected.

[0108] In the in-vehicle repeater 101, when the transition processing unit 24 receives the response frame F2 from the other device E1 via the repeater unit 11, it determines that the transition request frame FB has reached the other device E1. Then, the transition processing unit 24 outputs a switching request notification to the switching control unit 25, which requests that the control relay 91 connected to the other device E1 be switched from the on state to the off state.

[0109] FIG. 5 is a diagram for explaining the transition process performed by the vehicle-mounted relay device according to the embodiment of the present disclosure.

[0110] 2 and 5, when the switching control unit 25 receives a switching request notification from the transition processing unit 24, it switches the control relay 91 connected to the other device E1 from the on state to the off state. As a result, the other device E1 stops operating as the power supply from the power supply unit 51 is cut off.

[0111] 5, the switching control unit 25 controls the control relay 91C connected to the in-vehicle device 201G to be switched from the on state to the off state, and the switching control unit 25 controls the control relay 91D connected to the in-vehicle device 201H to be switched from the on state to the off state.

[0112] <Transition from normal mode to sleep mode> Referring back to FIG. 2, if the remaining power of the second power source 62 indicated by the remaining power information received from the measurement unit 23 is equal to or greater than the threshold value Th2, the transition processing unit 24 determines to transition the other device E1 to the sleep mode.

[0113] Then, the transition processing unit 24 checks the CAN-ID of each other device E1 by referring to the ID list in the storage unit 13. After checking the CAN-ID of each other device E1, the transition processing unit 24 creates a transition request frame FC including the corresponding CAN-ID and request information R3 requesting a transition to the sleep mode for each other device E1, and outputs the created transition request frame FC to the relay unit 11.

[0114] When the relay unit 11 receives the transition request frame FC from the transition processing unit 24, it uses the routing table as described above to output the transition request frame FC to the destination bus.

[0115] When the other device E1 operating in the normal mode receives the transition request frame FC from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the received transition request frame FC.

[0116] The other device E1 discards the transition request frame FC that does not include its own CAN-ID. On the other hand, when the other device E1 receives the transition request frame FC that includes its own CAN-ID, it transitions to the sleep mode in accordance with the request information R3 included in the transition request frame FC.

[0117] Also, for example, when another device E1 receives a transition request frame FC including its own CAN-ID, it creates a CAN frame (hereinafter also referred to as a "response frame F3") including the CAN-ID of the vehicle-mounted relay device 101 and information indicating that the transition request frame FC has been received.

[0118] Then, the other device E1 outputs the created response frame F3 to the CAN bus 2 to which the other device E1 is connected.

[0119] In the vehicle-mounted relay device 101, when the transition processing unit 24 receives the response frame F3 from the other device E1 via the relay unit 11, it determines that the transition request frame FC has reached the other device E1.

[0120] <Transition from sleep mode to halt mode> For example, if the remaining power of the second power source 62 after receiving the response frame F3 from the other device E1 is less than the threshold value Th2, the transition processing unit 24 transitions the other device E1 from the sleep mode to the stop mode.

[0121] More specifically, for example, after receiving a response frame F3 from another device E1, the transition processing unit 24 receives remaining capacity information from the measurement unit 23 and then checks whether the remaining capacity of the second power source 62 indicated by the remaining capacity information is less than the threshold value Th2.

[0122] If the remaining power of the second power source 62 indicated by the remaining power information received from the measurement unit 23 is less than the threshold value Th2, the transition processing unit 24 determines to transition the other device E1 from the sleep mode to the stop mode.

[0123] Then, the transition processing unit 24 transmits the transition request frame FB requesting a transition to the stop mode to the other device E1 via the relay unit 11.

[0124] For example, when the other device E1 is in a sleep mode, it can receive a CAN frame. When the other device E1 operating in the sleep mode receives a transition request frame FB from the in-vehicle relay device 101, it outputs the response frame F2 to the CAN bus 2 to which the other device E1 is connected.

[0125] In the vehicle-mounted relay device 101, when the transition processing unit 24 receives the response frame F2 from the other device E1 via the relay unit 11, it outputs a switching request notification to the switching control unit 25.

[0126] As described above, when the switching control unit 25 receives a switching request notification from the transition processing unit 24, it switches the control relay 91 connected to the other device E1 from the ON state to the OFF state. As a result, the other device E1 operating in the sleep mode stops operating as the power supply from the power supply unit 51 is cut off.

[0127] (Status notification section) For example, the status notification unit 26 performs notification processing N1 to transmit equipment status information P1 indicating the respective states of the evacuation-related equipment, other equipment E1, and other equipment E2 after the transition processing by the transition processing unit 24 to the group of in-vehicle equipment in the in-vehicle communication system 301.

[0128] 1 transmits a response frame F1, a response frame F2, or a response frame F3 to the in-vehicle repeater 101, and then transmits operation information M1 indicating its own operation mode to the in-vehicle repeater 101. Each in-vehicle device 201 transmits the operation information M1 to the in-vehicle repeater 101, for example, periodically or irregularly.

[0129] Specifically, each in-vehicle device 201 outputs the response frame F1, response frame F2, or response frame F3 to the CAN bus 2 to which the in-vehicle device 201 is connected, and then, for example, periodically or irregularly, creates a CAN frame (hereinafter also referred to as a "status frame F11") including its own CAN-ID and operation information M1. Then, each in-vehicle device 201 outputs the created status frame F11 to the CAN bus 2 to which the in-vehicle device 201 is connected.

[0130] In the vehicle-mounted relay device 101, when the relay unit 11 receives the status frame F11 from the vehicle-mounted device 201, the relay unit 11 stores the received status frame F11 in the storage unit 13.

[0131] For example, when a predetermined period H has elapsed since the state notification unit 26 received the request completion notification from the transition processing unit 24, the state notification unit 26 checks whether the state frame F11 is stored in the storage unit 13 or not.

[0132] When one or more status frames F11 are stored in the storage unit 13, the status notification unit 26 acquires the one or more status frames F11 from the storage unit 13. Below, a case where the status notification unit 26 acquires multiple status frames F11 from the storage unit 13 will be described.

[0133] When the status notification unit 26 acquires a plurality of status frames F11 from the storage unit 13, it identifies, for each acquired status frame F11, the in-vehicle device 201 corresponding to the CAN-ID included in the status frame F11 by referring to the ID table in the storage unit 13. That is, for each acquired status frame F11, the status notification unit 26 identifies the in-vehicle device 201 that is the transmission source of the status frame F11.

[0134] Then, the status notification unit 26 creates device status information P1 indicating a combination of the identified in-vehicle device 201 and the operation information M1 included in the status frame F11 corresponding to the in-vehicle device 201, and transmits the created device status information P1 to each in-vehicle device 201 via the relay unit 11. Also, for example, the status notification unit 26 deletes from the storage unit 13 the multiple status frames F11 corresponding to the created device status information P1.

[0135] When the in-vehicle device 201 receives the device status information P1 from the in-vehicle relay device 101, it refers to the received device status information P1 to recognize the operation mode of another in-vehicle device 201, for example, the communication partner in-vehicle device 201. For example, when the in-vehicle device 201 operating in the normal mode recognizes that the operation mode of the other device E1, which is the communication partner in-vehicle device 201, is the sleep mode, it transitions to the sleep mode in the same way as the other device E1.

[0136] For example, when the in-vehicle device 201, which is a navigation device, recognizes by referring to the device status information P1 received from the in-vehicle relay device 101 that the operating mode of the evacuation-related device is evacuation driving mode, it performs alarm processing such as displaying on its own display unit information indicating that the vehicle 1 is in evacuation driving or outputting a predetermined alarm sound.

[0137] In the vehicle-mounted relay device 101, for example, when a certain time has elapsed since the status notification unit 26 performed the notification process N1, the status notification unit 26 performs a new notification process N1 using the operation information M1 stored in the memory unit 13 by the relay unit 11 from the previous notification process N1 to the present.

[0138] The status notification unit 26 is not limited to a configuration in which it transmits device status information P1 indicating the respective states of the evacuation-related devices, other devices E1, and other devices E2 after the transition processing by the transition processing unit 24 to the group of in-vehicle devices in the in-vehicle communication system 301, but may also be configured to transmit device status information P2 indicating the respective states of the evacuation-related devices, other devices E1, and other devices E2 before the transition processing to the group of in-vehicle devices.

[0139] More specifically, during the period from startup to transmission of response frame F1, response frame F2, or response frame F3, each in-vehicle device 201 transmits operation information M2 indicating its own operation mode to the in-vehicle relay device 101, for example, periodically or irregularly.

[0140] Specifically, each in-vehicle device 201 creates a CAN frame (hereinafter also referred to as a "status frame F12") including its own CAN-ID and operation information M2. Then, each in-vehicle device 201 outputs the created status frame F12 to the CAN bus 2 to which the in-vehicle device 201 is connected.

[0141] In the vehicle-mounted relay device 101, when the relay unit 11 receives the status frame F12 from the vehicle-mounted device 201, the relay unit 11 stores the received status frame F12 in the storage unit 13.

[0142] For example, when a certain time has elapsed since the in-vehicle relay device 101 of its own is started up, the status notification unit 26 checks whether the status frame F12 is stored in the storage unit 13 or not.

[0143] When one or more status frames F12 are stored in the storage unit 13, the status notification unit 26 acquires the one or more status frames F12 from the storage unit 13. Below, a case where the status notification unit 26 acquires multiple status frames F12 will be described.

[0144] When the status notification unit 26 acquires multiple status frames F12 from the memory unit 13, as described above, it identifies the in-vehicle device 201 that sent the status frame F12 for each acquired status frame F12 by referring to the ID table in the memory unit 13.

[0145] Then, the status notification unit 26 creates device status information P2 indicating a combination of the identified in-vehicle device 201 and the operation information M2 included in the status frame F12 corresponding to that in-vehicle device 201, and transmits the created device status information P2 to each in-vehicle device 201 via the relay unit 11. Also, for example, the status notification unit 26 deletes the multiple status frames F12 corresponding to the created device status information P2 from the storage unit 13. The status notification unit 26 performs such notification processing N2 periodically or irregularly.

[0146] When the in-vehicle device 201 receives the device status information P2 from the in-vehicle relay device 101, it refers to the received device status information P2 to recognize the operation mode of another in-vehicle device 201, for example, the in-vehicle device 201 of the communication partner.

[0147] (Device control unit) Next, a process performed by the device control unit 27 in the vehicle-mounted relay device 101 to transition the other device E2 from the normal mode to the power saving mode and from the power saving mode to the normal mode will be described.

[0148] 1 and 2, for example, the device control unit 27 determines whether a condition G1 for the other device E2 to transition to the normal mode is met and whether a condition G2 for the other device E2 to transition to the power saving mode is met. The condition G1 is that the ignition power supply of the vehicle 1 transitions from an off state to an on state, and the vehicle 1 starts traveling, etc. The condition G2 is that an abnormality occurs in the first power supply 61, the ignition power supply of the vehicle 1 transitions from an on state to an off state, and the vehicle 1 is parked or stopped, etc.

[0149] More specifically, the device control unit 27 monitors the state of the vehicle 1 and performs a determination process to determine whether the condition G1 and the condition G2 are met based on the monitoring result. The device control unit 27 performs the determination process, for example, periodically.

[0150] <Transition to normal mode> When the device control unit 27 determines that the condition G1 is met, it causes the other device E2 to transition from the power saving mode to the normal mode.

[0151] More specifically, for example, when the device control unit 27 determines that the condition G1 is met, it creates a CAN frame (hereinafter also referred to as a "transition request frame Fw") including request information Rw requesting a transition to the normal mode.

[0152] When the device control unit 27 creates the transition request frame Fw, it checks the CAN-ID of the other device E2 that is to be transitioned to the normal mode by referring to the ID table in the storage unit 13. Then, the device control unit 27 includes the CAN-ID in the created transition request frame Fw and outputs the frame to the relay unit 11.

[0153] When the relay unit 11 receives the transition request frame Fw from the device control unit 27, it uses the routing table as described above to output the transition request frame Fw to the destination bus.

[0154] When the other device E2 receives the transition request frame Fw from the vehicle-mounted relay device 101, it transitions to the normal mode.

[0155] More specifically, for example, when another device E2 operating in a power saving mode receives a transition request frame Fw from the vehicle-mounted relay device 101, the other device E2 checks whether its own CAN-ID is included in the transition request frame Fw.

[0156] The other device E2 operating in the power saving mode discards the transition request frame FW that does not include its own CAN-ID. On the other hand, when the other device E2 operating in the power saving mode receives the transition request frame FW that includes its own CAN-ID, it activates a power supply IC (Integrated Circuitry) (not shown) provided in the other device E2 in accordance with the request information Rw included in the transition request frame FW, and transitions to the normal mode. As a result, the other device E2 communicates with other devices in the in-vehicle communication system 301 using the output voltage of the power supply IC.

[0157] <Transition to power saving mode> When the device control unit 27 determines that the condition G2 is met, the device control unit 27 transitions the other device E2 from the normal mode to the power saving mode. Hereinafter, a process will be described in which the device control unit 27 transitions the other device E2 from the normal mode to the power saving mode when an abnormality occurs in the first power supply 61, which is an example of the condition G2.

[0158] More specifically, for example, when the device control unit 27 receives abnormality detection information from the power management unit 22, it creates a CAN frame (hereinafter also referred to as a "transition request frame Fs") including request information Rs requesting a transition to a power saving mode.

[0159] When the device control unit 27 creates the transition request frame Fs, it checks the CAN-ID of the other device E2 to be transitioned to the power saving mode by referring to the ID table in the storage unit 13. Then, the device control unit 27 includes the CAN-ID in the created transition request frame Fs and outputs it to the relay unit 11.

[0160] When the relay unit 11 receives the transition request frame Fs from the device control unit 27, it uses the routing table as described above to output the transition request frame Fs to the destination bus.

[0161] When the other device E2 operating in the normal mode receives the transition request frame Fs from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the transition request frame Fs.

[0162] For example, another device E2 operating in normal mode discards a transition request frame Fs that does not include its own CAN-ID. On the other hand, when another device E2 operating in normal mode receives a transition request frame Fs that includes its own CAN-ID, it transitions to the power saving mode in accordance with the request information Rs included in the transition request frame Fs.

[0163] The operation mode of the other device E2 may be configured not to include the power saving mode. In this case, the device control unit 27 in the in-vehicle relay device 101 does not have a function to transition the other device E2 from the normal mode to the power saving mode, and maintains the operation mode of the other device E2 in the normal mode even if an abnormality occurs in the first power supply 61.

[0164] [Operation flow] Next, the flow of operations of each device in the in-vehicle communication system 301 according to the embodiment of the present disclosure will be described with reference to the drawings.

[0165] 6 to 8 are flowcharts showing an example of an operation procedure when the vehicle-mounted relay device according to the embodiment of the present disclosure performs transition processing. Figures 6 to 8 show the operation when the vehicle-mounted relay device 101 transitions the evacuation-related devices to the evacuation driving mode and transitions the other device E1 to the power-saving mode.

[0166] 6 to 8, first, the vehicle-mounted relay device 101 performs a measurement process to measure the output voltage of the first power source 61 (step S101).

[0167] Next, the vehicle-mounted relay device 101 checks whether the measured voltage value Va is less than the threshold value Th1 (step S102).

[0168] If the measured voltage value Va is equal to or greater than the threshold value Th1 (NO in step S102), the vehicle-mounted relay device 101 measures the output voltage of the first power source 61 at the timing of the next measurement process (step S101).

[0169] On the other hand, if the measured voltage value Va is less than the threshold value Th1 (YES in step S102), the vehicle-mounted relay device 101 determines that an abnormality has occurred in the first power supply 61 (step S103).

[0170] Next, the in-vehicle repeater 101 performs power supply switching control to switch the power supply source of each device in the in-vehicle communication system 301 from the first power supply 61 to the second power supply 62. For example, as described above, the in-vehicle repeater 101 switches the state of the power supply relay 81A from the on state to the off state, and switches the state of the power supply relay 81B from the off state to the on state (step S104).

[0171] Next, the vehicle-mounted relay device 101 transitions the evacuation-related device to the evacuation traveling mode. For example, as described above, the vehicle-mounted relay device 101 creates a transition request frame FA including the CAN-ID of the evacuation-related device and request information R1 requesting transition to the evacuation traveling mode, and outputs the frame to the destination bus (step S105).

[0172] Next, the vehicle-mounted relay device 101 checks whether the remaining amount of the second power source 62 is less than the threshold value Th2 (step S106).

[0173] Then, if the remaining amount of the second power source 62 is less than the threshold value Th2 (YES in step S106), the vehicle-mounted relay device 101 decides to transition the other device E1 to a stop mode in which power supply from the second power source 62 is stopped (step S107).

[0174] Next, the vehicle-mounted relay device 101 outputs a transition request frame FB including the CAN-ID of the other device E1 and request information R2 requesting transition to the stop mode to the destination bus (step S108).

[0175] Next, the vehicle-mounted repeater device 101 waits for the arrival of a response frame F2 from the other device E1 (NO in step S109), and upon receiving the response frame F2 (YES in step S109), switches the control relay 91 connected to the other device E1 from the on state to the off state (step S110).

[0176] Next, the vehicle-mounted relay device 101 waits for the arrival of operation information M1 indicating the operation mode of each vehicle-mounted device 201 from the vehicle-mounted device 201 (NO in step S111), and upon receiving the operation information M1 (YES in step S111), stores the received operation information M1 in the memory unit 13 (step S112).

[0177] Next, the vehicle-mounted relay device 101 receives and stores the operation information M1 (steps S111 and S112) until a certain time, for example, a predetermined period H, has elapsed since outputting the transition request frame FA (NO in step S113).

[0178] Then, when a predetermined period H has elapsed since the vehicle-mounted relay device 101 output the transition request frame FA (YES in step S113), the vehicle-mounted relay device 101 creates equipment status information P1 indicating the respective statuses of the evacuation-related equipment and other equipment E1 based on the operation information M1 stored in the memory unit 13 (step S114).

[0179] Next, the vehicle-mounted relay device 101 performs notification processing N1 to transmit the created equipment status information P1 to the vehicle-mounted equipment group in the vehicle-mounted communication system 301 (step S115), and receives new operation information M1 from each vehicle-mounted equipment 201 and stores the operation information M1 (steps S111 and S112) until a certain time has elapsed since the last notification processing N1 was performed (YES in step S113).

[0180] Then, after a certain time has elapsed since the previous notification process N1 was performed (YES in step S113), the vehicle-mounted relay device 101 creates new device status information P1 and performs the notification process N1 (steps S114 and S115).

[0181] On the other hand, if the remaining amount of the second power source 62 is equal to or greater than the threshold value Th2 (NO in step S106), the vehicle-mounted relay device 101 determines to transition the other device E1 to the sleep mode (step S116).

[0182] Next, the vehicle-mounted relay device 101 outputs a transition request frame FC including the CAN-ID of the other device E1 and request information R3 requesting transition to the sleep mode to the destination bus (step S117).

[0183] Next, the vehicle-mounted relay device 101 waits for the arrival of a response frame F3 from another device E1 (NO in step S118), and upon receiving the response frame F3 (YES in step S118), waits for the arrival of operation information M1 from each vehicle-mounted device 201 (NO in step S119).

[0184] Then, when the in-vehicle relay device 101 receives the operation information M1 (YES in step S119), the in-vehicle relay device 101 stores the received operation information M1 in the storage unit 13 (step S120).

[0185] Next, the vehicle-mounted relay device 101 receives and stores the operation information M1 (steps S119 and S120) until a certain time, for example, a predetermined period H, has elapsed since outputting the transition request frame FA (NO in step S121).

[0186] Then, when a predetermined period H has elapsed since the vehicle-mounted relay device 101 output the transition request frame FA (YES in step S121), the vehicle-mounted relay device 101 creates equipment status information P1 based on the operation information M1 stored in the memory unit 13 (step S122).

[0187] Next, the in-vehicle relay device 101 performs a notification process N1 to transmit the created device status information P1 to the in-vehicle devices in the in-vehicle communication system 301 (step S123).

[0188] Next, the vehicle-mounted relay device 101 checks whether the remaining amount of the second power source 62 is less than the threshold value Th2 (step S124).

[0189] Then, if the remaining power of the second power source 62 is less than the threshold value Th2 (YES in step S124), the vehicle-mounted relay device 101 decides to transition the other device E1 to a stop mode in which power supply from the second power source 62 is stopped (step S107).

[0190] On the other hand, if the remaining power of the second power source 62 is equal to or greater than the threshold value Th2 (NO in step S124), the vehicle-mounted relay device 101 determines to maintain the operation mode of the other device E1 in sleep mode (step S125), and receives new operation information M1 from each vehicle-mounted device 201 and stores the operation information M1 (steps S119 and S120) until a certain time has elapsed since the last notification process N1 was performed (NO in step S121).

[0191] 9 is a diagram illustrating an example of a sequence of processes of the in-vehicle relay device, the evacuation-related device, and other devices in the in-vehicle communication system according to the embodiment of the present disclosure. FIG. 9 illustrates a process performed by the in-vehicle relay device 101 to transition the other device E1 to the stop mode.

[0192] 9, first, the vehicle-mounted relay device 101 measures the output voltage of the first power supply 61. Here, it is assumed that the measured voltage value Va is less than the threshold value Th1 (step S201).

[0193] Next, the vehicle-mounted relay device 101 determines that an abnormality has occurred in the first power supply 61 (step S202).

[0194] Next, the vehicle-mounted relay device 101 performs power supply switching control to switch the power supply source of each device in the vehicle-mounted communication system 301 from the first power supply 61 to the second power supply 62 (step S203).

[0195] Next, the vehicle-mounted relay device 101 transmits to the evacuation-related device a transition request frame FA including the CAN-ID of the evacuation-related device and request information R1 requesting transition to the evacuation traveling mode (step S204).

[0196] Next, the evacuation-related equipment transitions to the evacuation traveling mode in accordance with the request information R1 included in the transition request frame FA received from the vehicle-mounted relay device 101 (step S205).

[0197] Next, the evacuation-related device transmits a response frame F1 indicating that the transition request frame FA has been received to the vehicle-mounted relay device 101 (step S206).

[0198] Next, the vehicle-mounted relay device 101 calculates the remaining amount of the second power source 62 and checks whether the calculated remaining amount is less than the threshold value Th2. Here, it is assumed that the vehicle-mounted relay device 101 checks that the calculated remaining amount is less than the threshold value Th2 (step S207).

[0199] Next, the vehicle-mounted relay device 101 determines to transition the other device E1 to the stop mode (step S208).

[0200] Next, the vehicle-mounted relay device 101 transmits to the other device E1 a transition request frame FB including the CAN-ID of the other device E1 and request information R2 requesting transition to the stop mode (step S209).

[0201] Next, the other device E1 performs a predetermined shutdown operation in accordance with the request information R2 included in the transition request frame FB received from the vehicle-mounted relay device 101, and transitions to the stop mode (step S210).

[0202] Next, the other device E1 transmits a response frame F2 indicating that it has received the transition request frame FB to the vehicle-mounted relay device 101. This operation is included in the shutdown operation (step S211).

[0203] Next, the vehicle-mounted relay device 101 switches the state of the control relay 91 connected to the other device E1 from the on state to the off state (step S212). Note that the order of the processes from step S204 to step S206 and the processes from step S207 to step S212 is not limited to the above, and they may be executed in reverse order or in parallel.

[0204] Next, each of the evacuation-related devices and other devices E1 transmits operation information M1 indicating its own operation mode to the vehicle-mounted relay device 101 (steps S213 and S214).

[0205] Next, the vehicle-mounted relay device 101 creates equipment status information P1 indicating the respective states of the evacuation-related equipment and the other equipment E1 after the transition processing based on the operation information M1 received from the evacuation-related equipment and the operation information M1 received from the other equipment E1 (step S215).

[0206] Next, the vehicle-mounted relay device 101 transmits the created device status information P1 to the evacuation-related devices and the other devices E1 (steps S216 and S217).

[0207] Next, the evacuation-related devices and other devices E1 refer to the device status information P1 received from the vehicle-mounted relay device 101 to recognize the status of the other vehicle-mounted devices 201 (steps S218 and S219).

[0208] In the in-vehicle relay device 101 according to the embodiment of the present disclosure, the processing unit 12 is configured to include multiple units, specifically, a detection unit 21, a power management unit 22, a measurement unit 23, a transition processing unit 24, a switching control unit 25, a state notification unit 26, and an equipment control unit 27, but this is not limited to this. The processing unit 12 may include some of the multiple units, and a device other than the in-vehicle relay device 101 in the in-vehicle network 401 may include the remaining units. Furthermore, a device other than the in-vehicle relay device 101 in the in-vehicle network 401 may be configured to include the multiple units.

[0209] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to transmit a transition request frame FA to the evacuation-related device as a process for transitioning the evacuation-related device to the evacuation driving mode in the transition process, but this is not limited to this. The in-vehicle relay device 101 may be configured to transmit a CAN frame to the evacuation-related device, instead of the transition request frame FA, as a process for transitioning the evacuation-related device to the evacuation driving mode, indicating that the state of the first power supply 61 is abnormal and that transition to the evacuation driving mode is recommended. In this case, for example, upon receiving the CAN frame from the in-vehicle relay device 101, the evacuation-related device determines whether to transition to the evacuation driving mode.

[0210] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to transmit a transition request frame FB to the other device E1 as a process for transitioning the other device E1 to the stop mode in the transition process, but this is not limited to this. Instead of the transition request frame FB, the in-vehicle relay device 101 may be configured to transmit a CAN frame to the other device E1 indicating that the state of the first power supply 61 is abnormal and that transition to the stop mode is recommended. In this case, for example, upon receiving the CAN frame from the in-vehicle relay device 101, the other device E1 determines whether to transition to the stop mode.

[0211] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the power supply relay 81 and the control relay 91 are configured to be provided outside the in-vehicle repeater 101, but this is not limited to this. The in-vehicle repeater 101 may be configured to include one or both of the power supply relay 81 and the control relay 91.

[0212] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle repeater 101 is configured to measure the second power source 62 and, in the transition process, determine whether or not to transition the other device E1 to the stop mode based on the measurement result, but this is not limited thereto. The in-vehicle repeater 101 may be configured to transition the other device E1 to the stop mode when it determines that an abnormality has occurred in the first power source 61 without measuring the second power source 62.

[0213] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the power saving mode of the other device E1 is configured to include a stop mode and a sleep mode, but this is not limited thereto. The power saving mode of the other device E1 may be configured not to include the stop mode. In this case, for example, when the in-vehicle relay device 101 determines that an abnormality has occurred in the first power source 61, the in-vehicle relay device 101 transitions the other device E1 to the sleep mode regardless of the remaining power of the second power source 62. Alternatively, the power saving mode of the other device E1 may be configured not to include the sleep mode. In this case, for example, when the in-vehicle relay device 101 determines that an abnormality has occurred in the first power source 61, the in-vehicle relay device 101 transitions the other device E1 to the stop mode regardless of the remaining power of the second power source 62.

[0214] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to transmit device status information P1 indicating the respective states of the evacuation-related devices and other devices E1 after the transition process to the in-vehicle device group in the in-vehicle communication system 301, but this is not limited thereto. The in-vehicle relay device 101 may also be configured not to transmit the device status information P1 to the in-vehicle device group.

[0215] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the first power source 61 includes a DC / DC converter as a power conversion device, and the second power source 62 does not include a power conversion device, but this is not limited to this. Neither the first power source 61 nor the second power source 62 may be configured to include a power conversion device. Alternatively, both the first power source 61 and the second power source 62 may be configured to include a power conversion device.

[0216] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to determine the abnormality operation mode of each of the evacuation-related devices and the other devices E1 using a correspondence table Tb indicating the correspondence between the in-vehicle devices 201 and the abnormality operation mode during the transition process. However, this is not limited to this. The evacuation-related devices and the other devices E1 may be configured to store mode information in their own storage units indicating the abnormality operation mode to which they should transition when an abnormality occurs in the first power source 61. In this case, for example, when the in-vehicle relay device 101 determines that an abnormality has occurred in the first power source 61, it transmits request information to the evacuation-related devices and the other devices E1 requesting a transition to the abnormality operation mode. Then, upon receiving the request information from the in-vehicle relay device 101, the evacuation-related devices and the other devices E1 transition to the abnormality operation mode indicated by the mode information in their own storage units.

[0217] Furthermore, although the in-vehicle communication system 301 according to the embodiment of the present disclosure has been described as having a configuration including a plurality of control relays 91 provided corresponding to the plurality of in-vehicle devices 201, the present disclosure is not limited to this. In the in-vehicle communication system 301, some or all of the plurality of control relays 91 may be replaced with semiconductor switches. In this case, when transitioning the other device E1 to the stop mode, the switching control unit 25 in the in-vehicle repeater 101 switches the semiconductor switch provided corresponding to the other device E1 from an on state to an off state.

[0218] The above-described embodiments should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is defined by the claims, not by the above description, and is intended to include all modifications within the meaning and scope of the claims.

[0219] Each process (each function) in the above-described embodiments is realized by a processing circuit including one or more processors. The processing circuit may be configured as an integrated circuit or the like that combines one or more memories, various analog circuits, and various digital circuits in addition to the one or more processors. The one or more memories store programs (instructions) that cause the one or more processors to execute each of the processes. The one or more processors may execute each of the processes according to the programs read from the one or more memories, or according to logic circuits pre-designed to execute each of the processes. The processor may be various processors suitable for computer control, such as a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), a DSP (Digital Signal Processor), an FPGA (Field Programmable Gate Array), and an ASIC (Application Specific Integrated Circuit). Note that the physically separate processors may execute each of the processes in cooperation with each other. For example, the processors mounted on a plurality of physically separated computers may cooperate with each other to execute the above processes via a network such as a LAN (Local Area Network), a WAN (Wide Area Network), the Internet, etc. The program may be installed into the memory from an external server device or the like via the network, or may be distributed in a state stored on a recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a semiconductor memory, and installed into the memory from the recording medium.

[0220] The above description includes the following additional features. [Appendix 1] A management program used in an in-vehicle management system that manages the operation modes of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, a plurality of switching units that switch between power supply from the first power source and power supply from the second power source are provided corresponding to the plurality of in-vehicle devices, Computer, an acquisition unit that acquires power supply information indicating a state of the first power supply; a transition processing unit that performs transition processing, when the state indicated by the power supply information acquired by the acquisition unit indicates an abnormality related to the first power supply, for transitioning one or more first in-vehicle devices that are the in-vehicle devices to an evacuation running mode for causing a vehicle equipped with the in-vehicle management system to run an evacuation run, and for transitioning one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing a power saving operation of the second in-vehicle devices; A management program to function as a

[0221] [Appendix 2] An in-vehicle management system that manages the operation modes of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, a plurality of switching units for switching whether or not to supply power to the in-vehicle devices are provided corresponding to the plurality of in-vehicle devices, The in-vehicle management system includes: processing circuitry; The processing circuitry acquiring power supply information indicating a state of the first power supply; When the status indicated by the acquired power supply information indicates an abnormality with the first power supply, the in-vehicle management system performs a transition process to transition one or more first in-vehicle devices, which are the in-vehicle devices, to an evacuation driving mode for driving the vehicle in which the in-vehicle management system is installed to an evacuation driving mode, and to transition one or more second in-vehicle devices, which are other in-vehicle devices different from the first in-vehicle devices, to a power saving mode for executing power saving operation of the second in-vehicle devices. [Explanation of symbols]

[0222] 1 vehicle 2 CAN bus 3,4,5 Power line 11 Relay Section 12 Processing section 13 Storage section 21 Detection unit 22 Power management section 23 Measurement section 24 Transition section 25 Switching control section 26 Status notification section 27 Equipment control section 51 Power supply section 61 1st power supply 62 2nd power supply 71 Battery 72 DC / DC converters 81 Power relay 91 Control Relay 101 Vehicle relay device 201 Automotive equipment 301 In-Vehicle Communication System 401 In-Vehicle Network Tb compatible table

Claims

1. An in-vehicle management system that manages operation modes of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, a plurality of switching units for switching whether to supply power from the first power source or the second power source to the in-vehicle devices are provided corresponding to the plurality of in-vehicle devices, an acquisition unit that acquires power supply information indicating a state of the first power supply; an in-vehicle management system comprising: a transition processing unit that performs transition processing, when the state indicated by the power supply information acquired by the acquisition unit indicates an abnormality regarding the first power supply, to transition one or more first in-vehicle devices, which are the in-vehicle devices, to an evacuation driving mode for causing the vehicle in which the in-vehicle management system is installed to evacuation driving, and to transition one or more second in-vehicle devices, which are other in-vehicle devices different from the first in-vehicle devices, to a power saving mode for executing power saving operation of the second in-vehicle devices.

2. 2. The vehicle management system according to claim 1, wherein the power saving mode includes a stop mode in which the power supply to the second vehicle device is stopped by turning off the switching unit corresponding to the second vehicle device.

3. the in-vehicle management system further includes a measurement unit that measures the second power supply; The in-vehicle management system according to claim 2 , wherein the transition processing unit determines whether or not to transition the second in-vehicle device to the stop mode based on a measurement result of the measurement unit in the transition processing.

4. The in-vehicle management system further comprises:

3. The vehicle management system according to claim 1, further comprising a status notification unit that transmits information indicating the status of each of the first vehicle-mounted device and the second vehicle-mounted device to the plurality of vehicle-mounted devices after the transition processing by the transition processing unit.

5. the first power supply includes a power converter; The in-vehicle management system according to claim 1 , wherein the second power supply does not include the power conversion device.

6. 3. The vehicle management system according to claim 1, wherein the transition processing unit determines the operating mode of each of the first vehicle-mounted device and the second vehicle-mounted device using correspondence information indicating a correspondence between the vehicle-mounted device and the operating mode of the vehicle-mounted device when the abnormality occurs.

7. A management method in an in-vehicle management system that manages operation modes of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, comprising: a plurality of switching units for switching whether to supply power from the first power source or the second power source to the in-vehicle devices are provided corresponding to the plurality of in-vehicle devices, obtaining power supply information indicating a state of the first power supply; A management method including a step of performing a transition process, in which, when the status indicated by the acquired power supply information indicates an abnormality related to the first power supply, one or more first on-board devices, which are the on-board devices, are transitioned to an evacuation driving mode for driving the vehicle in which the on-board management system is installed to an evacuation driving mode, and one or more second on-board devices, which are other on-board devices different from the first on-board devices, are transitioned to a power saving mode for executing power saving operations of the second on-board devices.

Images