Management apparatus, management method, and recording medium

Abstract

To enable fine power saving control without requiring complicated processing.SOLUTION: A management device includes one or more power supply control tables that define, for each of one or more devices connected to an in-vehicle network, a relationship between first service identification information for identifying a service and a relay state of a power supply relay that switches on / off of a power supply of the device, a specification unit that specifies second service identification information included in a message transmitted on the in-vehicle network, and a control unit that controls the power supply relay according to the power supply control table when the second service identification information specified by the specification unit matches the first service identification information included in the power supply control table.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to a management device, a management method, and a management program. [Background technology]

[0002] A vehicle is equipped with a variety of on-board devices, such as control system ECUs (Electronic Control Units) that control the engine, transmission, etc., body system ECUs that control headlights, power windows, etc., and information system ECUs for navigation devices, multimedia devices, etc. Each on-board device is connected to an on-board network and can communicate with each other.

[0003] As vehicles become more sophisticated, they are equipped with a large number of ECUs, which means there is a demand for power-saving functions that can respond precisely to the vehicle's status.

[0004] Patent Document 1 discloses a management device that identifies scenes based on the vehicle's situation, such as a scene where there is (or is not) an occupant in the vehicle, a scene where there is (or is not) an occupant in the passenger seat, a scene where there is (or is not) an occupant in the rear seat, a scene where the vehicle speed is above a predetermined upper limit, a scene where the shift position is other than reverse, a scene where the shift position is in parking and the vehicle speed is 0, a scene where the shift position is in drive, a scene where the shift position is in drive and the vehicle speed is below a predetermined lower limit, a scene where the engine switch is on and the low beam headlights are off, and a scene where the ambient temperature is above a predetermined lower limit (or below a predetermined upper limit), and controls a power relay that switches the ECU's power on / off depending on the identified scene. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Publication No. 2015-081021 Summary of the Invention [Problem to be solved by the invention]

[0006] The management device disclosed in Patent Document 1 needs to comprehensively determine the scene based on multiple pieces of information to identify the scene. This makes the scene identification process complicated. Furthermore, only scenes that are clear from the end user's perspective are considered, making it difficult to implement detailed power saving control. [Means for solving the problem]

[0007] A management device according to one embodiment of the present disclosure includes: one or more power control tables that define, for each of one or more devices connected to an in-vehicle network, a relationship between first service identification information for identifying a service and a relay state of a power relay that switches the power of the device on / off; an identification unit that identifies second service identification information included in a message transmitted through the in-vehicle network; and a control unit that controls the power relay in accordance with the power control table when the second service identification information identified by the identification unit matches the first service identification information included in the power control table. [Effects of the Invention]

[0008] According to the present disclosure, detailed power saving control is possible without requiring complex processing. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of an in-vehicle system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing an example of a hardware configuration of a control circuit of a management ECU according to the embodiment. [Figure 3] FIG. 3 is a functional block diagram illustrating an example of functions of the management ECU according to the embodiment. [Figure 4A] FIG. 4A is a diagram illustrating a first example of a power supply control table. [Figure 4B]FIG. 4B is a diagram showing a second example of the power supply control table. [Figure 5] FIG. 5 is a diagram illustrating a first example of the port table. [Figure 6] FIG. 6 is a diagram illustrating a first example of the connection table. [Figure 7] FIG. 7 is a diagram illustrating an example of adding a new device to the in-vehicle system according to the embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of adding a power supply control table. [Figure 9] FIG. 9 is a diagram illustrating a third example of the power supply control table. [Figure 10] FIG. 10 is a diagram illustrating a second example of the port table. [Figure 11] FIG. 11 is a diagram illustrating a second example of the connection table. [Figure 12] FIG. 12 is a flowchart illustrating an example of a power supply control process in the management ECU according to the embodiment. [Figure 13] FIG. 13 is a flowchart illustrating an example of a device addition process in the management ECU according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] <Summary of Embodiments of the Present Disclosure> The following provides an outline of embodiments of the present disclosure.

[0011] (1) A management device according to this embodiment includes one or more power control tables that define, for each of one or more devices connected to an in-vehicle network, a relationship between first service identification information for identifying a service and a relay state of a power relay that switches the power of the device on or off; an identification unit that identifies second service identification information included in a message transmitted through the in-vehicle network; and a control unit that controls the power relay in accordance with the power control table when the second service identification information identified by the identification unit matches the first service identification information included in the power control table. This allows for on / off control of the power of the corresponding device by identifying the service identification information included in the message transmitted through the in-vehicle network. Therefore, detailed power-saving control is possible without requiring complex processing.

[0012] (2) In the above (1), the power control table may further define a relationship between a first power state, which is a specified power state, and a relay state of the power relay, and the management device may further include a detection unit that detects the power state of the vehicle, and the control unit may control the power relay in accordance with the power control table when the second power state, which is the power state detected by the detection unit, matches the first power state included in the power control table. This makes it possible to control the power on / off of corresponding devices depending on the power state of the vehicle. This enables more detailed power saving control without requiring complex processing.

[0013] (3) In the above (1) or (2), the management device may further include an adding unit that, when a new device is added to the in-vehicle network, adds a new power supply control table corresponding to the new device, thereby enabling power supply control of the new device added to the in-vehicle network.

[0014] (4) In the above (3), the power control table may be associated with device identification information for identifying a device, and the management device may further include a reception unit that receives new device identification information for identifying the new device from the new device added to the in-vehicle network, and the adding unit may add the new power control table associated with the new device identification information received by the reception unit. This makes it possible to identify the power control table for each device by the device identification information. Furthermore, when a new device is added to the in-vehicle network, a new power control table may be added in association with the new device identification information.

[0015] (5) In the above (4), the management device may further include a storage unit that stores a plurality of candidate tables that are candidates for the device control table, and the adding unit may select a candidate table associated with the new device identification information from the plurality of candidate tables stored in the storage unit and add the selected candidate table as the new device control table. This makes it possible to easily add a new device table when a new device is added to the in-vehicle network.

[0016] (6) In any one of (1) to (5) above, the management device may be a relay device that relays messages between a plurality of devices, and the identifying unit may monitor messages transmitted through the in-vehicle network and identify second service identification information included in the messages. This allows the relay device connected to the in-vehicle network to control the power supplies of the devices connected to the in-vehicle network.

[0017] (7) In the above (6), the management device may further include a port table that defines a correspondence between a port connected to the device and the power relay, and the control unit may identify the power relay corresponding to the port connected to the device from the port table and control the identified power relay in accordance with the power control table. This makes it possible to identify the power relay connected to the device by the port connected to the device in the relay device.

[0018] (8) In the above (7), the management device may further include a registration unit that, when a new device is added to the in-vehicle network, registers in the port table a correspondence between a port to which the new device is connected and a power relay connected to the new device. In this way, when a new device is added to the in-vehicle network, the correspondence between the port and the power relay related to the new device can be added to the port table.

[0019] (9) A management method according to this embodiment includes the steps of: identifying service identification information included in a message transmitted through an in-vehicle network; and, for each of one or more devices connected to the in-vehicle network, controlling a power relay in accordance with one or more power control tables when the first service identification information, which is service identification information in the power control tables that defines the relationship between the service identification information for identifying a service and the relay state of a power relay that switches the power of the device on / off, matches the second service identification information, which is the identified service identification information. Thus, by identifying the service identification information included in the message transmitted through the in-vehicle network, it is possible to control the power on / off of the corresponding device. Therefore, detailed power-saving control is possible without requiring complex processing.

[0020] (10) A management program according to this embodiment causes a computer to execute the following steps: identifying service identification information included in a message transmitted through an in-vehicle network; and, for each of one or more devices connected to the in-vehicle network, controlling the power relay in accordance with one or more power control tables when the first service identification information, which is service identification information in the power control tables that defines the relationship between the service identification information for identifying a service and the relay state of the power relay that switches the power of the device on / off, matches the second service identification information, which is the identified service identification information. This allows the on / off of the power of the corresponding device to be controlled by identifying the service identification information included in the message transmitted through the in-vehicle network. Therefore, detailed power-saving control is possible without requiring complex processing.

[0021] The present disclosure can be realized not only as a management device having the above-described characteristic configuration, a management method including characteristic steps, and a management program for causing the management device to execute characteristic processing, but also as a management system including the management device, or as a semiconductor integrated circuit in which part or all of the management device is implemented.

[0022] <Details of the embodiment of the present disclosure> DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, detailed descriptions of embodiments of the present invention will be given with reference to the accompanying drawings. At least some of the embodiments described below may be combined in any desired manner.

[0023] [1. In-vehicle systems] FIG. 1 is a diagram illustrating an example of the configuration of an in-vehicle system according to an embodiment.

[0024] The in-vehicle system 10 includes a management ECU 100, a door control ECU 200A, a face authentication ECU 200B, a face authentication camera 200C, an external relay ECU 300, and a power supply 400.

[0025] At least a part of an in-vehicle network is configured by the management ECU 100 and the external relay ECU 300. The management ECU 100 and the external relay ECU 300 are connected to each other by a signal line (network cable).

[0026] The external relay ECU 300 can connect to a plurality of devices and relays communications between the connected devices. For example, the external relay ECU 300 is an Ethernet switch ("Ethernet" is a registered trademark).

[0027] For example, the management ECU 100 is a relay device. More specifically, the management ECU 100 is an Ethernet switch. In a specific example, the management ECU 100 has the functions of a Layer 2 switch (L2 switch) and a Layer 3 switch (L3 switch).

[0028] The management ECU 100 includes a plurality of ports 130A, 130B, 130C, and 130D. The external relay ECU 300 includes a plurality of ports (not shown). A first port of the external relay ECU 300 and a port 130A of the management ECU 100 are connected by an Ethernet cable.

[0029] The door control ECU 200A is connected to a second port of the external relay ECU 300 via an Ethernet cable.

[0030] The door control ECU 200A is an ECU for controlling the doors of the vehicle, for example, the door control ECU 200A can control the door locks of the vehicle.

[0031] A face authentication ECU 200B is connected via an Ethernet cable to a port 130B of the management ECU 100. A face authentication camera 200C is connected via an Ethernet cable to a port 130C of the management ECU 100.

[0032] The face recognition camera 200C includes an imaging element such as a charge coupled device (CCD) or a complementary metal oxide semiconductor (CMOS), etc. The face recognition camera 200C captures an image of the face of a person (for example, the driver) approaching the vehicle and outputs the captured image.

[0033] The face authentication ECU 200B processes the captured image output from the face authentication camera 200C. The face authentication ECU 200B recognizes the face of the subject through image processing. Data indicating the facial features (e.g., the positions of the eyes, nose, and mouth) of the vehicle user (driver) is registered in advance in the face authentication ECU 200B. The face authentication ECU 200B extracts the facial feature data of the subject from the captured image of the face authentication camera 200C and performs user authentication of the subject by comparing the extracted feature data with the registered data.

[0034] The in-vehicle system 10 is, for example, an IP (Internet Protocol) network. The door control ECU 200A, the face authentication ECU 200B, and the face authentication camera 200C, which are network nodes, transmit and receive IP packets. An IP packet is an example of a "message." A "message" here is a data communication unit defined by a communication protocol. For example, in TCP (Transmission Control Protocol) or UDP (User Datagram Protocol), a packet is a "message," and in Ethernet, an Ethernet frame is a "message." In CAN (Control Area Network), a CAN frame is a "message." In other words, a "message" is a PDU (Protocol Data Unit). At least a part of the in-vehicle system 10 may be a CAN network.

[0035] For example, a service is provided by one or more ECUs. In a specific example, a smart entry service is provided by cooperation between the door control ECU 200A, the face authentication ECU 200B, and the face authentication camera 200C. The smart entry service is a service that locks and unlocks the doors of a vehicle by face authentication. The door control ECU 200A, the face authentication ECU 200B, and the face authentication camera 200C transmit and receive messages to and from each other for the smart entry service.

[0036] [2. Management ECU Configuration] The configuration of the management ECU according to the embodiment will be described below.

[0037] As described above, the management ECU 100 is a relay device and has the functions of an L2 switch and an L3 switch.

[0038] Furthermore, the management ECU 100 is a power management device. The management ECU 100 manages the power supplies of the ECUs under its control. Specifically, the management ECU 100 individually manages the power supplies of the face authentication ECU 200B and the face authentication camera 200C. The management ECU 100 is an example of a "management device."

[0039] Furthermore, the management ECU 100 is an expansion device that expands the functions of the vehicle. The management ECU 100 can attach and detach devices to and from ports 130A, 130B, 130C, and 130D. That is, for example, a new device can be connected to the unused port 130D. The new device connected to the management ECU 100 expands the functions of the vehicle. For example, the face recognition ECU 200B and the face recognition camera 200C can be removed from ports 130B and 130C, respectively, and other new devices can be connected to ports 130B and 130C, respectively.

[0040] As shown in FIG. 1, the management ECU 100 includes a control circuit 110, a switch circuit 120, a relay unit 140, and an external storage unit 150.

[0041] 2 is a block diagram showing an example of a hardware configuration of a control circuit of a management ECU according to an embodiment. The control circuit 110 includes a processor 111, a nonvolatile memory 112, a volatile memory 113, and an interface (hereinafter also referred to as "I / F") 114. The processor 111 is connected to each of the nonvolatile memory 112, the volatile memory 113, and the I / F 114 via a bus 115.

[0042] The volatile memory 113 is, for example, a semiconductor memory such as an SRAM (Static Random Access Memory) or a DRAM (Dynamic Random Access Memory). The non-volatile memory 112 is, for example, a flash memory, a hard disk, or a ROM (Read Only Memory). The non-volatile memory 112 stores a management program 160, which is a computer program, and data used to execute the management program 160. The functions of the management ECU 100, which will be described later, are realized by the processor 111 executing the management program 160.

[0043] The processor 111 is, for example, a CPU (Central Processing Unit). However, the processor 111 is not limited to a CPU. The processor 111 may also be a GPU (Graphics Processing Unit). In a specific example, the processor 111 is a multi-core processor. The processor 111 may also be a single-core processor. The processor 111 is configured to be able to execute a computer program. However, the processor 111 may also be, for example, an ASIC (Application Specific Integrated Circuit) or a programmable logic device such as an FPGA (Field Programmable Gate Array). In this case, the ASIC or programmable logic device is configured to be able to execute the same function as the management program 160.

[0044] The I / F 114 includes an input / output interface. Specifically, the interface 114 of the control circuit 110 is connected to the switch circuit 120, the relay unit 140, and the external storage unit 150. The processor 111 can control the switch circuit 120, the relay unit 140, and the external storage unit 150 connected to the interface 114.

[0045] The nonvolatile memory 112 stores one or more power supply control tables 170A, 170B, a connection table 180, and a port table 190. The power supply control tables 170A, 170B, the connection table 180, and the port table 190 will be described later.

[0046] 1, the switch circuit 120 is an L2 switch and an L3 switch. The switch circuit 120 includes a plurality of ports. Each port of the switch circuit 120 is connected to a corresponding one of the ports 130A, 130B, 130C, and 130D by a signal line.

[0047] The relay unit 140 includes a plurality of relays 140A, 140B, and 140C. The relays 140A, 140B, and 140C are examples of "power supply relays." The relay unit 140 is connected to a power supply 400 external to the management ECU 100 via a power line. In FIG. 1, connections between a plurality of elements via signal lines are indicated by solid lines, and connections between a plurality of elements via power lines are indicated by dashed lines.

[0048] The relay 140A is disposed between the face authentication ECU 200B and the power source 400. The power source 400 includes, for example, an auxiliary battery. When the relay 140A is in the on state, power is supplied from the power source 400 to the face authentication ECU 200B, and the face authentication ECU 200B can be activated. When the relay 140A is in the off state, power supply from the power source 400 to the face authentication ECU 200B is stopped, and the face authentication ECU 200B is stopped.

[0049] Relay 140B is disposed between face recognition camera 200C and power supply 400. When relay 140B is in the ON state, power is supplied from power supply 400 to face recognition camera 200C, and face recognition camera 200C can be started. When relay 140B is in the OFF state, power supply from power supply 400 to face recognition camera 200C is stopped, and face recognition camera 200C is stopped.

[0050] The signal lines (Ethernet cables) extending from the ports 130A and 130B are combined one-to-one with the power lines extending from the relay unit 140. That is, the signal lines and power lines connected to the face authentication ECU 200B are combined, and the signal lines and power lines connected to the face authentication camera 200C are combined. For example, connectors are attached to the ends of the combined signal lines and power lines to form a harness. The harness is connected to the target extension device (the face authentication ECU 200B or the face authentication camera 200C).

[0051] For example, the external storage unit 150 is a nonvolatile memory such as a flash memory, a hard disk, a ROM, etc. For example, the external storage unit 150 has a larger storage capacity than the nonvolatile memory 112 of the control circuit 110.

[0052] [3. Functions of the management ECU] The functions of the management ECU according to the embodiment will be described below: Fig. 3 is a functional block diagram showing an example of the functions of the management ECU according to the embodiment.

[0053] When the processor 111 of the management ECU 100 executes the management program 160, the functions of an identification unit 161, a detection unit 162, a control unit 163, a reception unit 164, an addition unit 165, and a registration unit 166 are realized.

[0054] The identifying unit 161 identifies the service identification information (second service identification information) included in the message transmitted through the in-vehicle network. For example, the service identification information is a port number. In a specific example, the message is a TCP or UDP packet, and the service identification information is a TCP or UDP port number. The port number is assigned to the service (application). In a specific example, the port number is a dynamic, private port number ranging from "49152" to "65535." For example, the port numbers "50200," "50201," and "50202" are assigned to the "smart entry service." In another example, the service identification information is a CAN ID in a CAN network. In yet another example, the service identification information may be service identification information in a service-oriented protocol such as SOME / IP (a message ID in SOME / IP). A network management (NM) function may be used, in which an ECU transitions from a sleep state to an active state upon receiving a message. Specifically, the NM function divides the in-vehicle network into clusters called PNCs (Partial Network Clusters) for each service, wakes up the ECUs belonging to the PNC used to execute the service, and puts the ECUs of other PNCs to sleep. A message used for NM (NM message) includes a designation of the PNC to be woken up (activated), and an ECU that receives the NM message wakes up if the designated PNC matches the PNC to which the ECU belongs, and remains asleep if the designated PNC does not match the PNC to which the ECU belongs. In this case, the service identification information may be a PNC.

[0055] When the port number (service identification information) identified by the identification unit 161 matches the port number (first service identification information) included in the power control tables 170A and 170B, the control unit 163 controls the relays 140A and 140B in accordance with the power control tables 170A and 170B.

[0056] Here, the power supply control tables 170A and 170B will be described. The management ECU 100 stores the power supply control tables 170A and 170B for each device under the control of the management ECU 100 (i.e., each device to be managed). That is, the power supply control table 170A is a power supply control table for the face authentication ECU 200B, and the power supply control table 170B is a power supply control table for the face authentication camera 200C.

[0057] Fig. 4A is a diagram showing a first example of a power supply control table. Fig. 4A shows a power supply control table 170A for the face authentication ECU 200B. The power supply control table includes parameters for each of the following items: device ID, network type, number of control triggers, trigger type, power supply type, ON / OFF, port number, CAN ID, and power supply control action.

[0058] The device ID is identification information assigned to each device under the control of the management ECU 100. The device ID of the face authentication ECU 200B is "2." The device ID is an example of device identification information.

[0059] The item "Network Type" stores the network type supported by the device as a parameter. Specifically, the parameter "Ethernet" or "CAN" is stored corresponding to the item "Network Type." The network type supported by the face authentication ECU 200B is "Ethernet."

[0060] The item "Number of Control Triggers" indicates the number of power supply control triggers, that is, the number of triggers for controlling relays connected to devices to turn on or off (hereinafter also referred to as "power supply control triggers"). The number of control triggers specified in the power supply control table 170A is the number of power supply control triggers for controlling the relay 140A connected to the face authentication ECU 200B. In the example of FIG. 4A, the parameter of the item "Number of Control Triggers" is "4".

[0061] "Trigger type," "Power type," "ON / OFF," "Port number," "CAN ID," and "Power control action" are items that define the content of the power control trigger. A power control trigger is a combination of the conditions for controlling the power supply (relay) of a device and the control content (power on or off). In other words, the items "Trigger type," "Power type," "ON / OFF," "Port number," and "CAN ID" define the conditions for power control, while "Power control action" defines the power control content. In other words, when the conditions defined by "Trigger type," "Power type," "ON / OFF," "Port number," and "CAN ID" are met, the control defined in "Power control action" is executed.

[0062] The item "Trigger type" indicates the type of power control trigger. There are two types of power control triggers: a power control trigger caused by a power state and a power control trigger caused by a message. Devices under the control of the management ECU 100 can be started or stopped when a specific power state occurs. A power control trigger caused by a power state specifies the power control to be performed when a specific power state occurs. Devices under the control of the management ECU 100 can also be started or stopped when a specific message is transmitted to the in-vehicle network. A power control trigger caused by a message specifies the power control to be performed when a specific message is transmitted to the in-vehicle network. The parameter "Power" corresponding to the item "Trigger type" indicates a power control trigger caused by a power state, and the parameter "Message" corresponding to the item "Trigger type" indicates a power control trigger caused by a message.

[0063] The items "Power supply type" and "ON / OFF" indicate the conditions of the power supply state in the power supply control trigger caused by the power supply state. The power supply types include, for example, IG, ACC, and +B. That is, the power supply 400 includes the IG, ACC, and +B power supplies. For example, IG is a power supply that is turned on when the vehicle is in a state where it can run, and turned off when the vehicle is in a state where it cannot run. For example, ACC is a power supply that is turned on when a specific switch provided on the vehicle is pressed, and turned off when the switch is not pressed. For example, +B is a power supply that is always on regardless of the state of the vehicle. The item "ON / OFF" indicates whether the power supply specified in the item "Power supply type" is in an on or off state.

[0064] The items "Port number" and "CAN ID" indicate the message conditions in a message-induced power control trigger. When the network type is "Ethernet," the port number is specified as a parameter for "Port number" as service identification information. When the network type is "CAN," the CAN ID is specified as a parameter for "CAN ID." As another example, in the power control table 170A, a message ID in SOME / IP or a PNC in NM may be specified as service identification information.

[0065] The item "power control action" has a parameter "ON" or "OFF" specified. The parameter "ON" of the "power control action" indicates control to turn on the corresponding relay, and the parameter "OFF" of the "power control action" indicates control to turn off the corresponding relay.

[0066] One or more power control triggers are defined for one device. The face recognition ECU 200B has four power control triggers.

[0067] In the first power supply control trigger for face authentication ECU 200B, the parameter "power supply" for the item "trigger type", the parameter "IG" for the item "power supply type", the parameter "ON" for the item "ON / OFF", and the parameter "ON" for the item "power supply control action" are specified. Since the first power supply control trigger for face authentication ECU 200B is a power supply control trigger caused by the power supply state, parameters for the items "port number" and "CAN ID" are not specified. When the power supply state becomes IG on due to the first power supply control trigger for face authentication ECU 200B, relay 140A is turned on.

[0068] In the second power supply control trigger for face authentication ECU 200B, the parameter "power supply" for the item "trigger type", the parameter "IG" for the item "power supply type", the parameter "OFF" for the item "ON / OFF", and the parameter "OFF" for the item "power supply control action" are specified. Since the second power supply control trigger for face authentication ECU 200B is a power supply control trigger caused by the power supply state, parameters for the items "port number" and "CAN ID" are not specified. When the power supply state becomes IG off due to the second power supply control trigger for face authentication ECU 200B, relay 140A is turned off.

[0069] In the third power control trigger for the face authentication ECU 200B, the parameter "message" for the item "trigger type," the parameter "50200" for the item "port number," and the parameter "ON" for the item "power control action" are specified. Because the third power control trigger for the face authentication ECU 200B is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by the face authentication ECU 200B is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including the port number "50200" is transmitted over the in-vehicle network by the third power control trigger for the face authentication ECU 200B, relay 140A is turned on.

[0070] In the fourth power control trigger for the face authentication ECU 200B, the parameter "message" for the item "trigger type," the parameter "50201" for the item "port number," and the parameter "OFF" for the item "power control action" are specified. Because the fourth power control trigger for the face authentication ECU 200B is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by the face authentication ECU 200B is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including the port number "50201" is transmitted over the in-vehicle network by the fourth power control trigger for the face authentication ECU 200B, relay 140A is turned off.

[0071] Fig. 4B is a diagram showing a second example of a power supply control table, which is a power supply control table 170B for the face recognition camera 200C.

[0072] The device ID of the face recognition camera 200C is "3".

[0073] The network type supported by the face recognition camera 200C is "Ethernet."

[0074] The number of control triggers specified in the power supply control table 170B is the number of power supply control triggers for controlling the relay 140B connected to the face recognition camera 200C. In the example of Fig. 4B, the parameter of the item "Number of control triggers" is "5".

[0075] In the first power control trigger for face recognition camera 200C, the parameter "power" for the item "trigger type", the parameter "IG" for the item "power type", the parameter "ON" for the item "ON / OFF", and the parameter "ON" for the item "power control action" are specified. Since the first power control trigger for face recognition camera 200C is a power control trigger caused by the power state, parameters for the items "port number" and "CAN ID" are not specified. When the power state becomes IG on due to the first power control trigger for face recognition camera 200C, relay 140B is turned on.

[0076] In the second power control trigger for face recognition camera 200C, the parameter "power" for the item "trigger type", the parameter "IG" for the item "power type", the parameter "OFF" for the item "ON / OFF", and the parameter "OFF" for the item "power control action" are specified. Since the second power control trigger for face recognition camera 200C is a power control trigger caused by the power state, parameters for the items "port number" and "CAN ID" are not specified. When the power state becomes IG off due to the second power control trigger for face recognition camera 200C, relay 140B is turned off.

[0077] The third power control trigger for face recognition camera 200C specifies the parameter "message" for the item "trigger type," the parameter "50200" for the item "port number," and the parameter "ON" for the item "power control action." Because the third power control trigger for face recognition camera 200C is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by face recognition camera 200C is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including port number "50200" is transmitted over the in-vehicle network by the third power control trigger for face recognition camera 200C, relay 140B is turned on.

[0078] In the fourth power control trigger for face recognition camera 200C, the parameter "message" for the item "trigger type," the parameter "50201" for the item "port number," and the parameter "OFF" for the item "power control action" are specified. Because the fourth power control trigger for face recognition camera 200C is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by face recognition camera 200C is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including port number "50201" is transmitted over the in-vehicle network by the fourth power control trigger for face recognition camera 200C, relay 140B is turned off.

[0079] The fifth power control trigger for face recognition camera 200C specifies the parameter "message" for the item "trigger type," the parameter "50202" for the item "port number," and the parameter "OFF" for the item "power control action." Because the fifth power control trigger for face recognition camera 200C is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by face recognition camera 200C is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including port number "50202" is transmitted over the in-vehicle network, relay 140B is turned off by the fifth power control trigger for face recognition camera 200C.

[0080] Returning to FIG. 3, for example, the identification unit 161 monitors messages transmitted through the in-vehicle network. The identification unit 161 identifies a port number included in the monitored message. In a specific example, when the switch circuit 120 receives a message to be relayed (a message whose destination is not the management ECU 100), the switch circuit 120 outputs the received message to the control circuit 110. The identification unit 161 analyzes the message output from the switch circuit 120 and identifies the port number included in the message.

[0081] The port table 190 defines the correspondence between the ports 130A, 130B, 130C, and 130D connected to devices and the relays 140A, 140B, and 140C. That is, the port table 190 associates the ports and relays connected to the same device. FIG. 5 is a diagram showing a first example of the port table. In the example of FIG. 5, the port 130B connected to the face authentication ECU 200B is associated with the relay 140A connected to the face authentication ECU 200B. Furthermore, the port 130C connected to the face authentication camera 200C is associated with the relay 140B connected to the face authentication camera 200C.

[0082] 3, the control unit 163 identifies the relay corresponding to the port connected to the device from the port table 190. The control unit 163 controls the identified relay in accordance with the power supply control tables 170A and 170B.

[0083] For example, the control unit 163 identifies the port connected to the device from the device ID. That is, the control unit 163 determines whether the condition of the power control trigger is satisfied for each power control trigger defined in the power control tables 170A and 170B. If a power control trigger that satisfies the condition exists, the control unit 163 determines the device ID specified in the power control table 170A or 170B in which the power control trigger is defined as the device ID of the device to be power controlled. The control unit 163 identifies the port to which the target device is connected from the device ID, and identifies the relay corresponding to the identified port from the port table 190. The control unit 163 controls the identified relay in accordance with the power control trigger that satisfies the condition in the power control table.

[0084] For example, a connection table 180 is used to identify a port corresponding to a device ID. FIG. 6 is a diagram showing a first example of the connection table. The connection table 180 defines a correspondence relationship between a device ID and ports 130A, 130B, 130C, and 130D connected to the device. That is, the connection table 180 associates a device ID with a port to which a device identified by the device ID is connected. In the example of FIG. 6, the device ID "2" of the face authentication ECU 200B is associated with the port 130B to which the face authentication ECU 200B is connected. Furthermore, the device ID "3" of the face authentication camera 200C is associated with the port 130C to which the face authentication camera 200C is connected.

[0085] For example, consider a case where a message including port number "50200" is broadcast from door control ECU 200A. In this case, management ECU 100 receives the message including port number "50200". Identification unit 161 analyzes the message and identifies port number "50200" included in the message. Port number "50200" is specified in the third power control trigger in power control table 170A and the third power control trigger in power control table 170B. Control unit 163 refers to power control tables 170A and 170B and identifies device ID "2" specified in power control table 170A and device ID "3" specified in power control table 170B.

[0086] The control unit 163 refers to the connection table 180 and identifies the port "130B" corresponding to the identified device ID "2" and the port "130C" corresponding to the identified device ID "3."

[0087] The control unit 163 refers to the port table 190, and identifies the relay "140A" corresponding to the identified port "130B", and identifies the relay "140B" corresponding to the identified port "130C". The control unit 163 controls the identified relay 140A, and controls the identified relay 140B. As a result, the relay 140A switches from an off state to an on state, and the face authentication ECU 200B is activated. The relay 140B switches from an off state to an on state, and the face authentication camera 200C is activated.

[0088] It should be noted that the relay corresponding to the port may not be identified using the port table 190. For example, the correspondence between the port and the relay may be incorporated into the code of the management program 160.

[0089] Detection unit 162 detects the power supply state of the vehicle. In a specific example, detection unit 162 detects whether the current state of power supply 400 is IG on, IG off, ACC on, ACC off, or +B.

[0090] For example, a power management ECU (not shown) that manages the power source 400 is connected to the in-vehicle network. The power management ECU periodically or irregularly transmits a message indicating the current state of the power source 400 by broadcast or unicast to a specific destination. The detection unit 162 detects the current power state by receiving the message transmitted from the power management ECU. As another example, the management ECU 100 may manage the state of the power source 400. In this case, the detection unit 162 can directly detect the power state by monitoring the state of the power source 400.

[0091] When the power supply state (second power supply state) detected by the detection unit 162 matches the power supply state (first power supply state) included in the power supply control tables 170A and 170B, the control unit 163 controls the relays 140A and 140B in accordance with the power supply control tables 170A and 170B.

[0092] For example, consider a case where the state of the power supply 400 transitions from IG OFF to IG ON. In this case, the detection unit 162 detects the power supply state "IG ON." The power supply states "IG" and "ON" are specified in the first power supply control trigger in the power supply control table 170A and the first power supply control trigger in the power supply control table 170B. The control unit 163 references the power supply control tables 170A and 170B, and identifies the device ID "2" specified in the power supply control table 170A and the device ID "3" specified in the power supply control table 170B.

[0093] The control unit 163 refers to the connection table 180 and identifies the port "130B" corresponding to the identified device ID "2" and the port "130C" corresponding to the identified device ID "3."

[0094] The control unit 163 refers to the port table 190, and identifies the relay "140A" corresponding to the identified port "130B", and identifies the relay "140B" corresponding to the identified port "130C". The control unit 163 controls the identified relay 140A, and controls the identified relay 140B. As a result, the relay 140A switches from an off state to an on state, and the face authentication ECU 200B is activated. The relay 140B switches from an off state to an on state, and the face authentication camera 200C is activated.

[0095] As described above, a new device can also be connected to the management ECU 100. The management ECU 100 can control the power supply of the new device that is connected.

[0096] When a new device is added to the in-vehicle network, the adding unit 165 adds a power supply control table corresponding to the new device.

[0097] For example, the receiving unit 164 receives a device ID for identifying a new device from a new device added to the in-vehicle network. The adding unit 165 adds the device ID received by the receiving unit 164 to the power control table.

[0098] In a more specific example, the external storage unit 150 stores a plurality of candidate tables that are candidates for the device control table. For example, the power control tables of a plurality of devices that can be connected as extension devices are stored as candidate tables in the external storage unit 150. That is, the plurality of candidate tables stored in the external storage unit 150 also includes candidate tables for devices that are not installed in the vehicle (i.e., devices that are not connected to the management ECU 100).

[0099] The adding unit 165 selects a candidate table associated with the device ID accepted by the accepting unit 164 from the plurality of candidate tables stored in the external storage unit 150. The adding unit 165 adds the selected candidate table as a device control table. That is, the adding unit 165 adds a copy of the candidate table selected in the external storage unit 150 to the non-volatile memory 112 as a device control table.

[0100] 7 is a diagram illustrating an example of adding a new device to the in-vehicle system according to the embodiment. In the example of FIG. 7, an LED light 200D is added to the in-vehicle system 10. That is, the LED light 200D is a new device. The LED light 200D is an LED light for face authentication. That is, the LED light 200D is placed near the face authentication camera 200C and is turned on when an image is captured by the face authentication camera 200C.

[0101] The LED light 200D is capable of communication via Ethernet and is connected to the port 130D of the management ECU 100 via an Ethernet cable.

[0102] The LED light 200D is connected to the relay 140C via a power line. When the relay 140C is in the off state, no power is supplied to the LED light 200D. When the relay 140C is in the on state, power is supplied to the LED light 200D, and the LED light 200D is activated.

[0103] When the LED light 200D is connected to the management ECU 100, the LED light 200D performs communication in accordance with, for example, LLDP (Link Layer Discovery Protocol). That is, the LED light 200D and the management ECU 100 send and receive LLDP frames. Specifically, the management ECU 100 notifies the LED light 200D of the port 130D to which the LED light 200D is connected by LLDP. The LED light 200D transmits the port information acquired by LLDP (information about the port 130D to which the LED light 200D is connected) together with its own device ID to the management ECU 100. Here, the device ID of the LED light 200D is assumed to be "4".

[0104] The receiving unit 164 receives the device ID and port information transmitted from the LED light 200D. The adding unit 165 adds the device ID received by the receiving unit 164 to the power control table in association with the device ID.

[0105] FIG. 8 is a diagram illustrating an example of adding a power control table. A plurality of candidate tables 171A, 171B, 171C, 171D, 171E, and so on are stored in the external storage unit 150. The candidate table 171C corresponds to the LED light 200D. That is, the candidate table 171C includes the device ID "4" of the LED light 200D. The adding unit 165 selects the candidate table 171C that includes the device ID "4" from among the plurality of candidate tables 171A, 171B, 171C, 171D, 171E, and so on stored in the external storage unit 150. The adding unit 165 adds a copy of the selected candidate table 171C to the non-volatile memory 112 as the power control table 170C.

[0106] Fig. 9 is a diagram showing a third example of a power supply control table, which shows a power supply control table 170C for the LED light 200D.

[0107] In the power supply control table 170C, the device ID "4" is specified for the LED light 200D.

[0108] The network type supported by the LED Light 200D is "Ethernet."

[0109] The number of control triggers defined in the power supply control table 170C is the number of power supply control triggers for controlling the relay 140C connected to the LED light 200D. In the example of Fig. 9, the parameter for the item "number of control triggers" is "2".

[0110] In the first power control trigger for LED light 200D, the parameter "message" for the item "trigger type," the parameter "50200" for the item "port number," and the parameter "ON" for the item "power control action" are specified. Because the first power control trigger for LED light 200D is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by LED light 200D is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including port number "50200" is transmitted over the in-vehicle network by the first power control trigger for LED light 200D, relay 140C is turned on.

[0111] The second power control trigger for LED light 200D specifies the parameter "message" for the item "trigger type," the parameter "50202" for the item "port number," and the parameter "OFF" for the item "power control action." Because the second power control trigger for LED light 200D is a message-induced power control trigger, parameters for the items "power type" and "ON / OFF" are not specified. Because the network type supported by LED light 200D is "Ethernet," a parameter for the item "CAN ID" is not specified. When a message including port number "50202" is transmitted over the in-vehicle network by the second power control trigger for LED light 200D, relay 140C is turned off.

[0112] Returning to FIG. 3, when a new device is added to the in-vehicle network, the registration unit 166 registers in the port table 190 a correspondence between the port to which the new device is connected and the relay connected to the new device. FIG. 10 is a diagram showing a second example of the port table. For example, when an LED light 200D is added to the in-vehicle system 10, the device ID and port information of the LED light 200D are notified from the LED light 200D as described above. The registration unit 166 associates the port "130D" notified from the LED light 200D with the relay "140C" to which the LED light 200D is connected, and adds them to the port table 190.

[0113] 3, when a new device is added to the in-vehicle network, the registration unit 166 may further register in the connection table 180 a correspondence relationship between the device ID of the new device and the port to which the new device is connected. Fig. 11 is a diagram showing a second example of the connection table. For example, when an LED light 200D is added to the in-vehicle system 10, the registration unit 166 associates the device ID "4" notified by the LED light 200D with the port "130D" notified by the LED light 200D and adds them to the connection table 180.

[0114] [4. Operation of in-vehicle systems] Next, the operation of the management ECU 100 according to the embodiment will be described.

[0115] 12 is a flowchart showing an example of a power supply control process in the management ECU according to the embodiment. The processor 111 of the management ECU 100 executes the following power supply control process according to the management program 160.

[0116] The processor 111 monitors messages transmitted in the in-vehicle network. The processor 111 determines whether or not a message to be relayed has been received (step S101). If a message to be relayed has been received (YES in step S101), the processor 111 identifies the port number included in the message (step S102).

[0117] The processor 111 refers to each of the power supply control tables 170A and 170B, and determines whether or not the identified port number matches a port number specified in at least one of the power supply control tables 170A and 170B (step S103).

[0118] If the identified port number matches the port number specified in at least one of the power supply control tables 170A and 170B (YES in step S103), the processor 111 proceeds to step S106.

[0119] If the message to be relayed has not been received (NO in step S101), or if the identified port number does not match all of the port numbers specified in all of the power supply control tables 170A, 170B (NO in step S103), the processor 111 detects the power supply state of the vehicle (step S104).

[0120] The processor 111 refers to each of the power supply control tables 170A and 170B, and determines whether the detected power supply state matches the power supply state specified in at least one of the power supply control tables 170A and 170B (step S105).

[0121] If the detected power supply state matches the power supply state specified in at least one of the power supply control tables 170A and 170B (YES in step S105), the processor 111 proceeds to step S106.

[0122] If the detected power supply state does not match any of the power supply states specified in any of the power supply control tables 170A and 170B (NO in step S105), the processor 111 ends the power supply control process.

[0123] The processor 111 identifies the device ID of the control target (step S106). That is, the processor 111 identifies the device ID specified in the power control table that includes a port number that matches the identified port number or a power state that matches the detected power state.

[0124] The processor 111 refers to the connection table 180 and identifies the connection port (the port connected to the device to be controlled) corresponding to the device ID (step S107).

[0125] The processor 111 refers to the port table 190 and identifies the relay corresponding to the identified connection port (step S108).

[0126] The processor 111 controls the identified relay in accordance with the power control action specified in the power control table including the port number that matches the identified port number or the power control table including the power state that matches the detected power state (more specifically, the power control action specified in the power control trigger including the port number that matches the identified port number or the power control trigger including the power state that matches the detected power state) (step S109). This completes the power control process.

[0127] 13 is a flowchart showing an example of device addition processing in the management ECU according to the embodiment. The processor 111 of the management ECU 100 executes the following device addition processing by using the management program 160.

[0128] When a new device is connected to a port of the management ECU 100, the new device acquires port information for identifying the port to which the new device is connected by LLDP. The new device notifies the management ECU 100 of its own device ID and the acquired port information. The processor 111 receives the notification of the device ID and port information of the new device (step S201).

[0129] Processor 111 selects a candidate table including the notified device ID from a plurality of candidate tables stored in external storage unit 150 (step S202).

[0130] The processor 111 adds (a copy of) the selected candidate table to the nonvolatile memory 112 as a power supply control table (step S203).

[0131] The processor 111 associates the notified connection port with the relay to which the new device is connected, and registers them in the port table 190 (step S204).

[0132] Processor 111 associates the notified device ID with the notified connection port and registers them in connection table 180 (step S205). This completes the device addition process.

[0133] [5. Modifications] In the above-described embodiment, the in-vehicle system 10 is configured using an Ethernet network, but is not limited to this. The in-vehicle system 10 may also be configured using a CAN network. The in-vehicle system 10 may include both a CAN network and an Ethernet network. In this case, the management ECU 100 may have a protocol conversion function between CAN and Ethernet. When the in-vehicle system 10 includes a CAN network, devices connected to the management ECU 100 may be capable of communicating using the CAN protocol.

[0134] In the above-described embodiment, the plurality of candidate tables 171A, 171B, 171C, 171D, 171E, ... are stored in the external storage unit 150 mounted on the management ECU 100, but this is not limiting. For example, the plurality of candidate tables 171A, 171B, 171C, 171D, 171E, ... may be stored in a server external to the vehicle. In this case, when a new device is added, the management ECU 100 can download a candidate table including the device ID of the new device from the server and add the downloaded candidate table as a power supply control table.

[0135] [6. Notes] a management device connected to an in-vehicle network; one or more devices connected to the in-vehicle network; Equipped with The management device one or more power control tables that define, for each of the one or more devices, a relationship between first service identification information for identifying a service and a relay state of a power relay that switches on / off a power supply of the device; an identification unit that identifies second service identification information included in a message transmitted through the in-vehicle network; a control unit that controls the power relay in accordance with the power control table when the second service identification information identified by the identification unit matches the first service identification information included in the power control table; Including, In-vehicle systems.

[0136] [7. Supplementary Notes] The embodiments disclosed herein are illustrative in all respects and are not restrictive. The scope of the present invention is defined by the claims rather than the above-described embodiments, and includes meanings equivalent to the claims and all modifications within the scope thereof. [Explanation of symbols]

[0137] 10 In-Vehicle Systems 100 Management ECU 110 control circuit 111 processors 112 Non-volatile memory 113 Volatile Memory 114 Interface (I / F) 115 Bus 120 Switch Circuit 130A, 130B, 130C, 130D ports 140 Relay Section 140A, 140B, 140C Relay (Power Relay) 150 External memory unit 160 Management Program 161 Specific section 162 Detection unit 163 Control Unit 164 Reception Department 165 Additional Section 166 Registration Department 170A, 170B Power Control Table 170C Power Control Table (New Power Control Table) 171A, 171B, 171C, 171D, 171E Candidate Table 180 Connection Table 190 Port Table 200A Door Control ECU 200B Face Recognition ECU 200C Facial Recognition Camera 200D LED light (new equipment) 300 External relay ECU 400 power supply

Claims

1. one or more power control tables that define, for each of one or more devices connected to the in-vehicle network, a relationship between first service identification information for identifying a service and a relay state of a power relay that switches on / off a power supply of the device; an identification unit that identifies second service identification information included in a message transmitted through the in-vehicle network; a control unit that controls the power relay in accordance with the power control table when the second service identification information identified by the identification unit matches the first service identification information included in the power control table; Equipped with Management device.

2. the power supply control table further defines a relationship between a first power supply state, which is a designated power supply state, and a relay state of the power supply relay; the management device further includes a detection unit that detects a power supply state of the vehicle; the control unit controls the power relay in accordance with the power control table when a second power state, which is the power state detected by the detection unit, matches the first power state included in the power control table. The management device according to claim 1 .

3. an adding unit that, when a new device is added to the in-vehicle network, adds a new power supply control table corresponding to the new device; The management device according to claim 1 .

4. the power supply control table is associated with device identification information for identifying a device; the management device further includes a receiving unit configured to receive, from the new device added to the in-vehicle network, new device identification information for identifying the new device; the adding unit adds the new power supply control table associated with the new device identification information received by the receiving unit. The management device according to claim 3 .

5. the management device further includes a storage unit that stores a plurality of candidate tables that are candidates for the device control table; the adding unit selects a candidate table associated with the new device identification information from the plurality of candidate tables stored in the storage unit, and adds the selected candidate table as the new device control table. The management device according to claim 4 .

6. the management device is a relay device that relays messages between a plurality of devices, the identifying unit monitors messages transmitted through the in-vehicle network and identifies second service identification information included in the messages; The management device according to any one of claims 1 to 5.

7. the management device further includes a port table that defines a correspondence between a port connected to the device and the power relay; the control unit identifies the power supply relay corresponding to the port connected to the device from the port table, and controls the identified power supply relay in accordance with the power supply control table. The management device according to claim 6.

8. a registration unit that, when a new device is added to the in-vehicle network, registers in the port table a correspondence between a port to which the new device is connected and a power relay connected to the new device. The management device according to claim 7 .

9. Identifying service identification information included in a message transmitted over an in-vehicle network; a step of controlling the power relay in accordance with one or more power control tables when first service identification information, which is service identification information in one or more power control tables that define a relationship between service identification information for identifying a service and a relay state of a power relay that switches on / off a power supply of the device, matches second service identification information, which is the specified service identification information; Including, Management method.

10. On the computer, Identifying service identification information included in a message transmitted over an in-vehicle network; a step of controlling the power relay in accordance with one or more power control tables when first service identification information, which is service identification information in one or more power control tables that define a relationship between service identification information for identifying a service and a relay state of a power relay that switches on / off a power supply of the device, matches second service identification information, which is the specified service identification information; In order to execute Management program.

Images