Relay device, relay method, and relay program

Abstract

To construct an on-vehicle network of a new configuration while maintaining stable operation in the on-vehicle network.SOLUTION: A detection unit configured to detect addition of a function unit to the in-vehicle network; and a control unit configured to restrict a relay process of a frame transmitted from a new function unit other than a frame used for a setting process for performing communication in a new network, the new network being the in-vehicle network further including the new function unit, the new function unit being the function unit detected by the detection unit, and to relax restriction of the relay process when the setting process is completed.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present disclosure relates to a relay device, a monitoring device, a relay program, and a monitoring program. [Background technology]

[0002] Technologies for changing the configuration of an in-vehicle network have been developed. For example, Patent Document 1 (International Publication No. 2020 / 145334) discloses the following technology. That is, a vehicle control device controls a plurality of repeaters based on a control scenario that associates the state of a vehicle in which a vehicle network made up of a plurality of repeaters is built with control content to be set for each of the plurality of repeaters. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] International Publication No. 2020 / 145334 Summary of the Invention [Problem to be solved by the invention]

[0004] When the settings of an in-vehicle network are dynamically changed, the setting changes may affect communication in the in-vehicle network.

[0005] The present disclosure has been made to solve the above-mentioned problems, and its purpose is to provide a relay device, a monitoring device, a relay program, and a monitoring program that are capable of constructing an in-vehicle network with a new configuration while maintaining stable operation in the in-vehicle network. [Means for solving the problem]

[0006] The relay device disclosed herein is a relay device used in an in-vehicle network that includes multiple functional units, and includes a relay unit that performs relay processing to relay frames transmitted and received between the functional units, a detection unit that detects the addition of a functional unit to the in-vehicle network, and a control unit that restricts the relay processing of frames sent from the new functional unit other than frames used for configuration processing for communication in a new network, which is the in-vehicle network that further includes the new functional unit that is the functional unit detected by the detection unit, and relaxes the restriction on the relay processing when the configuration processing is completed.

[0007] One aspect of the present disclosure may be realized not only as a relay device having such a characteristic processing unit, but also as a relay method including such characteristic processing steps. Furthermore, one aspect of the present disclosure may be realized as a semiconductor integrated circuit that realizes part or all of the relay device, or as a system including the relay device.

[0008] One aspect of the present disclosure can be realized not only as a monitoring device having such a characteristic processing unit, but also as a monitoring method having such characteristic processing steps. Furthermore, one aspect of the present disclosure can be realized as a semiconductor integrated circuit that realizes part or all of the monitoring device, or as a system including the monitoring device. [Effects of the Invention]

[0009] According to the present disclosure, it is possible to build an in-vehicle network with a new configuration while maintaining stable operation of the in-vehicle network. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is a diagram showing a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a diagram illustrating a configuration of a relay device according to an embodiment of the present disclosure. [Figure 3] FIG. 3 is a diagram illustrating a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram illustrating a configuration of a relay device according to an embodiment of the present disclosure. [Figure 5] FIG. 5 is a diagram illustrating an example of a setting state of a relay device in the in-vehicle communication system according to the embodiment of the present disclosure. [Figure 6] FIG. 6 is a diagram illustrating an example of a sequence of a process for establishing a new network in an in-vehicle communication system according to an embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram illustrating another example of a sequence of a process for establishing a new network in an in-vehicle communication system according to an embodiment of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0011] First, the contents of the embodiments of the present disclosure will be listed and described. (1) A relay device according to an embodiment of the present disclosure is a relay device used in an in-vehicle network including a plurality of functional units, and includes a relay unit that performs relay processing to relay frames transmitted and received between the functional units, a detection unit that detects the addition of a functional unit to the in-vehicle network, and a control unit that restricts the relay processing of frames transmitted from the new functional unit other than frames used in a configuration process for communication in a new network, the in-vehicle network further including the new functional unit that is the functional unit detected by the detection unit, and that relaxes the restriction on the relay processing when the configuration process is completed.

[0012] In this way, by limiting relay processing of frames transmitted from the new functional unit when the setting change for the new network has not been completed, it is possible to prevent influences on existing communications between functional units, such as an increase in traffic volume and a decrease in transmission quality in the in-vehicle network, which are caused by frames transmitted from the new functional unit in this state. Therefore, it is possible to build an in-vehicle network with a new configuration while maintaining stable operation of the in-vehicle network.

[0013] (2) In the above (1), the in-vehicle network may further include one or more second relay devices other than the first relay device, which are relay devices that relay frames transmitted and received between the functional units, and the control unit may relax the restrictions on the relay processing when the setting processing of all relay devices in the in-vehicle network is completed.

[0014] With this configuration, in an in-vehicle network including a plurality of relay devices, it is possible to prevent influence on existing communications between functional units due to differences in the timing at which the setting process is completed between the relay devices.

[0015] (3) In the above (2), the first relay device may further include a setting unit that sends a predetermined notification to other devices in the in-vehicle network when the setting process of the first relay device is completed.

[0016] With this configuration, in an in-vehicle network including a plurality of relay devices, the completion of the setting process in the plurality of relay devices can be easily recognized by the other devices.

[0017] (4) In any of (1) to (3) above, an authentication process of the new function unit is performed prior to the setting process, and the control unit may restrict the relay process of frames sent from the new function unit other than frames used in the authentication process of the new function unit, and when the authentication process is completed, may restrict the relay process of frames sent from the new function unit other than frames used in the setting process.

[0018] With this configuration, it is possible to appropriately set the restrictions on the relay process depending on the progress of the authentication process for the new function unit and the setting process for the in-vehicle network.

[0019] (5) A monitoring device according to an embodiment of the present disclosure is a monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, and includes an update confirmation unit that confirms completion in the plurality of relay devices of a configuration process for communication in a new in-vehicle network in which a new functional unit that is a new functional unit is connected to the relay devices, and a notification unit that, when the completion is confirmed by the update confirmation unit, notifies the relay device to which the new functional unit is connected of the completion.

[0020] With this configuration, a relay device to which a new functional unit is connected can limit relay processing of frames transmitted from the new functional unit when the configuration changes for the new network have not been completed in each relay device. This prevents influences on existing communications between functional units, such as an increase in traffic volume and a decrease in transmission quality in the in-vehicle network, which are caused by frames transmitted from the new functional unit in this state. Therefore, it is possible to build an in-vehicle network with a new configuration while maintaining stable operation of the in-vehicle network.

[0021] (6) In the above (5), the monitoring device may further create settings for communication in the new network and notify one or more of the relay devices.

[0022] With this configuration, the process of setting up a new network and confirmation of completion of the setting process in each relay device can be managed in an integrated manner, thereby realizing a more efficient in-vehicle network.

[0023] (7) A relay program according to an embodiment of the present disclosure is a relay program for a relay device used in an in-vehicle network including multiple functional units, and causes a computer to function as a relay unit that performs relay processing to relay frames transmitted and received between the functional units, a detection unit that detects the addition of a functional unit to the in-vehicle network, and a control unit that restricts the relay processing of frames sent from the new functional unit other than frames used for configuration processing for communication in a new network, which is the in-vehicle network that further includes the new functional unit that is the functional unit detected by the detection unit, and that relaxes the restriction on the relay processing when the configuration processing is completed.

[0024] In this way, by limiting relay processing of frames transmitted from the new functional unit when the setting change for the new network has not been completed, it is possible to prevent influences on existing communications between functional units, such as an increase in traffic volume and a decrease in transmission quality in the in-vehicle network, which are caused by frames transmitted from the new functional unit in this state. Therefore, it is possible to build an in-vehicle network with a new configuration while maintaining stable operation of the in-vehicle network.

[0025] (8) A monitoring program according to an embodiment of the present disclosure is a monitoring program for a monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, and is a program for causing a computer to function as an update confirmation unit that confirms the completion of the configuration process in the plurality of relay devices for communication in a new in-vehicle network in which a new functional unit, which is a new functional unit, is connected to the relay devices, and a notification unit that, when the completion is confirmed by the update confirmation unit, notifies the relay device to which the new functional unit is connected of the completion.

[0026] In this way, by limiting relay processing of frames transmitted from the new functional unit when the setting change for the new network has not been completed, it is possible to prevent influences on existing communications between functional units, such as an increase in traffic volume and a decrease in transmission quality in the in-vehicle network, which are caused by frames transmitted from the new functional unit in this state. Therefore, it is possible to build an in-vehicle network with a new configuration while maintaining stable operation of the in-vehicle network.

[0027] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In the drawings, identical or corresponding parts are designated by the same reference numerals, and their description will not be repeated. Furthermore, at least some of the embodiments described below may be combined in any manner.

[0028] [In-vehicle communication system] 1 is a diagram illustrating a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Referring to FIG. 1, an in-vehicle communication system 301 includes one or more in-vehicle Electronic Control Units (ECUs) 202 and one or more relay devices 101.

[0029] 1, the in-vehicle communication system 301 includes in-vehicle ECUs 202A and 202B that are in-vehicle ECUs 202, and relay devices 101A and 101B that are relay devices 101. The in-vehicle communication system 301 is mounted on a vehicle 501. The in-vehicle ECU 202 and the relay device 101 configure an in-vehicle network 401. The in-vehicle ECU 202 is an example of a functional unit. The relay device 101A is an example of a monitoring device.

[0030] The in-vehicle communication system 301 is not limited to a configuration including two in-vehicle ECUs 202, but may be a configuration including one or three or more in-vehicle ECUs 202. The in-vehicle communication system 301 is not limited to a configuration including two relay devices 101, but may be a configuration including one or three or more relay devices 101.

[0031] In the in-vehicle network 401, the in-vehicle ECU 202 is connected to the relay device 101 via, for example, an Ethernet (registered trademark) cable.

[0032] More specifically, the relay device 101 includes a plurality of communication ports 51. The communication ports 51 are terminals to which, for example, Ethernet cables can be connected. Each relay device 101 and each in-vehicle ECU 202 is connected to another relay device 101 or in-vehicle ECU 202 via the communication ports 51 and the Ethernet cables.

[0033] The relay device 101 is used in an in-vehicle network 401 including a plurality of in-vehicle ECUs 202. The relay device 101 is, for example, a gateway device, and is capable of relaying data between the plurality of in-vehicle ECUs 202 connected thereto. The relay device 101 is capable of performing relay processing according to, for example, Layer 2 and Layer 3, which is higher than Layer 2.

[0034] More specifically, the relay device 101 performs relay processing of frames exchanged between the in-vehicle ECUs 202 connected via an Ethernet cable in accordance with, for example, the Ethernet communication standard.

[0035] In addition, the in-vehicle communication system 301 is not limited to a configuration in which frames are relayed in accordance with the Ethernet communication standard, but may be a configuration in which frames are relayed in accordance with communication standards such as CAN (Controller Area Network), CAN FD (CAN with Flexible Data Rate), FlexRay (registered trademark), MOST (Media Oriented Systems Transport) (registered trademark), and LIN (Local Interconnect Network).

[0036] The in-vehicle ECU 202 is, for example, an autonomous driving ECU, an engine ECU, a sensor, a navigation device, a human-machine interface, a camera, and the like.

[0037] Each relay device 101 and each in-vehicle ECU 202 generates a frame including various information, which will be described later, and transmits the frame to another in-vehicle ECU 202 or relay device 101 .

[0038] [Relay device 101B] 2 is a diagram illustrating a configuration of a relay device according to an embodiment of the present disclosure, and shows the configuration of relay device 101B shown in FIG.

[0039] 2, relay device 101B includes a relay unit 11, a detection unit 12, an authentication unit 13, a setting unit 14, a control unit 15, and a storage unit 16. Storage unit 16 is, for example, a nonvolatile memory.

[0040] The relay unit 11 performs a relay process to relay frames transmitted and received between the in-vehicle ECUs 202. More specifically, when the relay unit 11 receives a frame from a certain in-vehicle ECU 202 or relay device 101A, the relay unit 11 transmits the received frame to the destination in-vehicle ECU 202 or relay device 101A.

[0041] Furthermore, when the relay unit 11 receives a frame addressed to its own relay device 101 from a new function unit newly added to the in-vehicle network 401 , it outputs the received frame to the detection unit 12 or the authentication unit 13 .

[0042] 3 is a diagram illustrating a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Fig. 3 illustrates a configuration of an in-vehicle network 401 in which an in-vehicle ECU 202C is newly added to the in-vehicle network 401 illustrated in Fig. 1.

[0043] Referring to FIG. 3, the in-vehicle ECU 202C is connected to the communication port 51 in the relay device 101B via, for example, an Ethernet cable.

[0044] The detection unit 12 detects the addition of a functional unit to the in-vehicle network 401. That is, the detection unit 12 detects a new functional unit that is newly added to the in-vehicle network 401, in this case, the in-vehicle ECU 202C.

[0045] When the in-vehicle ECU 202C is connected to the communication port 51 of the relay device 101B and receives power supply, the in-vehicle ECU 202C transmits a frame including connection request information for requesting a communication connection in the in-vehicle network 401 to the relay device 101B.

[0046] The detection unit 12 receives a frame including connection request information via the relay unit 11, detects the in-vehicle ECU 202C that is the new functional unit that sent the connection request information, and transmits a frame including a connection request response to the in-vehicle ECU 202C via the relay unit 11. The detection unit 12 also notifies the control unit 15 that it has detected the new functional unit.

[0047] The detection unit 12 may be configured to periodically broadcast a search message for detecting a new function unit via the relay unit 11. In this case, the new function unit receives the search message and transmits the connection request information in response to the received search message.

[0048] The detection unit 12 may also be configured to detect, as a new function unit, an application to be installed in an existing in-vehicle ECU 202 in the in-vehicle network 401. That is, the new function unit may be hardware or software.

[0049] Hereinafter, the in-vehicle network 401 including the new functional unit will also be referred to as a new network, the in-vehicle network 401 before the new functional unit is added will also be referred to as an existing network, and the functional unit included in the existing network will also be referred to as an existing functional unit.

[0050] In the in-vehicle communication system 301, for example, authentication processing of the new function unit is performed prior to the network setting processing described later.

[0051] More specifically, the in-vehicle ECU 202C receives the connection request response from the relay device 101B, and transmits a frame including its own ID and authentication password to the relay device 101B.

[0052] The authentication unit 13 in the relay device 101B receives the frame transmitted from the in-vehicle ECU 202C via the relay unit 11, and performs authentication processing for the in-vehicle ECU 202C using the ID and authentication password included in the received frame.

[0053] When the authentication unit 13 has successfully authenticated the in-vehicle ECU 202C, the authentication unit 13 transmits a frame including authentication success information indicating that the authentication has been successful to the in-vehicle ECU 202C via the relay unit 11.

[0054] When the authentication unit 13 has succeeded in authenticating the new function unit as described above, it transmits a frame including device connection information indicating the ID of the new function unit to the relay device 101A via the relay unit 11, for example.

[0055] The in-vehicle ECU 202C may be configured to further include its own ID and authentication password in the frame including the connection request information and transmit the frame to the relay device 101B.

[0056] [Relay device 101A] 4 is a diagram illustrating a configuration of a relay device according to an embodiment of the present disclosure, and shows the configuration of relay device 101A shown in FIG.

[0057] 4, relay device 101A includes a relay unit 1, an update checking unit 2, a generating unit 3, a setting unit 4, a notifying unit 5, and a storage unit 6. Storage unit 6 is, for example, a flash memory.

[0058] The relay unit 1 performs a relay process to relay frames transmitted and received between the in-vehicle ECUs 202. More specifically, when the relay unit 1 receives a frame from a certain in-vehicle ECU 202 or relay device 101B, the relay unit 1 transmits the received frame to the destination in-vehicle ECU 202 or relay device 101B.

[0059] The generation unit 3 acquires device information including information on the new function unit, the existing function unit, and the network configuration of the relay devices 101A and 101B, for example, on a layer lower than the application layer.

[0060] More specifically, when the generation unit 3 receives device connection information from the relay device 101B via the relay unit 1, the generation unit 3 acquires device information of the new function unit indicated by the device connection information, as well as device information of the existing function unit and the relay devices 101A and 101B.

[0061] For example, the generation unit 3 acquires, as equipment information, information that can recognize the specifications of hardware devices such as the on-board ECU 202 and relay device 101 in the new network, as well as information that can recognize the topology of the new network, constraints on the placement of applications in the hardware devices in the new network, and constraints on the communication method in the new network.

[0062] The generation unit 3 acquires at least one type of information from among the following as information that can recognize the specifications of the hardware device and the topology of the new network: the device type indicating the identifier, name, sensor type, etc. of the hardware device, memory size, the number of physical ports provided for each communication protocol, the identifier of the physical port, power supply configuration, power consumption, VLAN (Virtual Local Area Network) ID, subnet address and functional domain; information regarding the specifications of the CPU or GPU (Graphics Processing Unit) installed in the hardware device; information regarding the connection relationship between the hardware devices; information regarding the bandwidth of communication between the hardware devices; and information regarding the specifications of the relay device 101.

[0063] The generation unit 3 acquires at least one type of information from among information that can recognize constraints regarding the placement of applications in hardware devices, such as information regarding the calculation speed required to execute an application in the in-vehicle ECU 202, memory usage, constraints of the OS (Operating System) environment, and constraints of communication protocols such as TCP (Transmission Control Protocol) and UDP (User Datagram Protocol).

[0064] The generation unit 3 acquires at least one type of information from the application in the on-board ECU 202, such as the communication data size, communication frequency, whether burst transmission is required, the allowable delay time, the allowable loss amount, the required security level, the operation timing, the communication type, for example, indicating whether the communication is periodic or irregular, the identifier of the application with which the communication is to be performed, and the messaging method, such as request-response type or publish-subscribe type, as well as information regarding the priority of communication by the application, as information that can be used to recognize the constraints of the communication method in the new network.

[0065] For example, the generating unit 3 identifies one or more types of device information required to generate setting information for a new network from among the types of device information described above.

[0066] The generation unit 3 transmits an information request notification indicating that the identified type of device information should be transmitted to the existing function unit, the new function unit, and the relay device 101B.

[0067] In response to the information request notice received from the generation unit 3, the existing function unit, the new function unit, and the relay device 101B transmit to the generation unit 3, for example, their own device information of the type specified in the information request notice.

[0068] Furthermore, the generation unit 3 refers to the storage unit 6 and acquires from the storage unit 6 the device information of the relay device 101A of the identified type.

[0069] The generating unit 3 generates setting information for the new network based on the acquired device information.

[0070] More specifically, the generating unit 3 generates setting information indicating the setting contents of the relay devices 101A and 101B for performing communication in the new network.

[0071] For example, based on the acquired device information, the generation unit 3 generates setting information indicating the setting contents of the relay device 101, such as filtering, communication bandwidth and VLAN settings in the relay devices 101A and 101B, for communication between each functional unit and the relay devices 101A and 101B in the new network.

[0072] Based on the generated setting information, the generation unit 3 notifies at least one of the relay devices 101A and 101B of the setting contents for performing communication in the new network.

[0073] For example, based on the setting information, the generation unit 3 notifies the relay device 101 whose setting needs to be changed of the setting contents. If there is no relay device 101 whose setting needs to be changed in the new network, the generation unit 3 does not notify the setting contents, for example. Furthermore, the generation unit 3 outputs updated device information indicating the device to which the setting contents are to be notified to the update confirmation unit 2.

[0074] When notifying relay device 101A of the setting contents, generation unit 3 notifies setting unit 4 of the setting contents. When notifying relay device 101B of the setting contents, generation unit 3 transmits setting information indicating the setting contents to relay device 101B via relay unit 1.

[0075] When the setting unit 4 in the relay device 101A and the setting unit 14 in the relay device 101B are notified of the setting contents from the generation unit 3, they change various settings in accordance with the notified setting contents.

[0076] In addition, the generation unit 3 may be configured to generate setting information that further indicates the setting contents of the existing functional unit and the new functional unit, and based on the setting information, notify the functional unit of the setting contents for communication in the new network in addition to the relay device 101.

[0077] The functional units and relay devices 101A and 101B in the new network communicate with each other according to the changed settings.

[0078] [assignment] FIG. 5 is a diagram illustrating an example of a setting state of a relay device in the in-vehicle communication system according to the embodiment of the present disclosure.

[0079] 5, first, the new functional unit is connected to the in-vehicle network 401. At this time, the settings of the relay devices 101A and 101B are the old settings, that is, the settings of the existing network (timing t1).

[0080] Next, relay device 101A starts network setting processing such as collecting device information and generating setting information for a new network, etc. At this time, the settings of relay devices 101A and 101B remain the same as the old settings (timing t2).

[0081] Next, in relay device 101A, the settings for communication in the new network are changed based on the setting information. At this time, the settings of relay device 101A are updated to new settings, i.e., settings for the new network, because they are internally processed, while the settings of relay device 101B remain the old settings due to delays in communication processing, etc. (timing t3).

[0082] Next, relay device 101B, which has received the setting information from relay device 101A, changes the setting contents based on the setting information to perform communication in the new network. As a result, the settings of relay devices 101A and 101B both become the new settings (timing t4).

[0083] Here, if the new functional unit sends a frame addressed to another functional unit at any of the times t1 to t3, i.e., when some of the configuration changes for the new network have not been completed, the frame may increase the amount of traffic in the in-vehicle network 401, resulting in a decrease in transmission quality such as delays in frames between existing functional units, or frames may be discarded due to frames being stuck in the relay device 101, which may affect existing communications between the functional units.

[0084] Therefore, the in-vehicle communication system according to the embodiment of the present disclosure solves the above problem by adopting the following configuration.

[0085] In the relay device 101B, the control unit 15 restricts relay processing of frames transmitted from the new functional unit other than frames used in a setting process for performing communication in the new network, which is the in-vehicle network 401 that further includes the new functional unit that is the functional unit detected by the detection unit 12. Then, when the setting process is completed, the control unit 15 relaxes the restriction on the relay processing.

[0086] For example, when the setting process for all relay devices 101 in the in-vehicle network 401 is completed, the control unit 15 relaxes the restriction on the relay process.

[0087] Furthermore, for example, the control unit 15 restricts relay processing of frames transmitted from the new function unit other than frames used in the authentication processing of the new function unit. Then, when the authentication processing is completed, the control unit 15 restricts relay processing of frames transmitted from the new function unit other than frames used in the setting processing.

[0088] That is, the control unit 15 performs filtering setting in two stages: communication required for device authentication and communication required for changing settings for a new network.

[0089] For example, the control unit 15 sets the relay processing details of the relay unit 11 by changing the value of a setting register of the relay unit 11. As an example, the relay unit 11 performs filtering in accordance with IEEE802.1Qci. In accordance with the settings of the control unit 15, the relay unit 11 allows or discards a frame depending on the MAC address, VLAN ID, IP address, DSCP (Differentiated Services Code Point) value, protocol, port number, etc. included in the received frame.

[0090] More specifically, in the initial state, the control unit 15 configures the relay unit 11 to allow the relaying of frames containing connection request information, and to discard frames other than frames containing connection request information from an empty port, i.e., a communication port 51 to which no other device is connected.

[0091] The control unit 15 receives notification from the detection unit 12 that a new functional unit has been detected as described above, and changes the setting in the relay unit 11 of the communication port 51 that has changed from an empty port to a connected port, i.e., the communication port 51 to which the new functional unit is connected. Specifically, the control unit 15 allows the relay unit 11 to relay frames for authentication processing from the communication port 51 to which the new functional unit is connected, and continues the setting to discard frames other than the frame in question.

[0092] The relay unit 11 outputs the frame for authentication processing received from the connection port to the authentication unit 13. The authentication unit 13 performs the authentication processing as described above and notifies the control unit 15 that the authentication of the new function unit has been successful.

[0093] The control unit 15 receives a notification from the authentication unit 13 that the authentication of the new function unit has been successful, and changes the setting in the relay unit 11 of the connection port. Specifically, the control unit 15 allows the relay unit 11 to relay frames for network setting processing from the communication port 51 to which the new function unit is connected, and continues the setting to discard frames other than the frame in question.

[0094] Furthermore, for example, when the setting process of the relay device 101B using the frame for the network setting process is completed, the setting unit 14 sends a predetermined notification to other devices in the in-vehicle network 401.

[0095] Specifically, the setting unit 14 transmits an update completion notification to the update checking unit 2 in the relay device 101A via the relay unit 11, the update completion notification indicating that various setting changes in accordance with the setting contents notified by the generation unit 3 have been completed.

[0096] In the relay device 101A, the update confirmation unit 2 confirms the completion of the setting process in multiple relay devices, here relay devices 101A and 101B, for communication in a new network, which is an in-vehicle network 401 in which a new function unit is connected to the relay device 101B.

[0097] When the update confirmation unit 2 confirms the completion, the notification unit 5 notifies the relay device 101B to which the new function unit is connected of the completion.

[0098] Specifically, the setting unit 4 outputs to the update check unit 2 an update completion notification indicating that various setting changes in accordance with the setting contents notified by the generation unit 3 have been completed.

[0099] When the update confirmation unit 2 receives update completion notifications from all devices indicated in the update device information received from the generation unit 3, for example, from relay devices 101A and 101B, it determines that the network setting process, i.e., the setting process for communicating in the new network, has been completed, and notifies the notification unit 5 of the completion.

[0100] The notification unit 5 transmits a frame permission notification to the relay device 101B via the relay unit 1, indicating that the network setting process has been completed and that frame transmission from the new function unit is permitted.

[0101] In relay device 101B, control unit 15 receives the frame permission notification from relay device 101A via relay unit 11 and changes the setting in relay unit 11 of the connection port. Specifically, control unit 15 cancels the setting to discard frames from communication port 51 to which the new functional unit is connected, and allows relay unit 11 to relay all frames from that communication port 51. Note that control unit 15 may be configured to continue the setting to prohibit relaying frames from that communication port 51 to a specific in-vehicle ECU 202, for example, in accordance with the settings of the new network made by generation unit 3.

[0102] [Operation flow] FIG. 6 is a diagram illustrating an example of a sequence of a process for establishing a new network in an in-vehicle communication system according to an embodiment of the present disclosure.

[0103] Referring to FIG. 6, first, relay unit 11 in relay device 101B is set to prohibit relaying and discard frames other than frames containing connection request information received at an empty port (step S31).

[0104] Next, the new function unit is connected to an available port of the relay device 101B. The new function unit transmits connection request information to the relay device 101B (step S32).

[0105] Next, the relay device 101B receives the connection request information, detects the new function part (step S33), and permits relay of the frame for authentication processing received at the connection port (step S34).

[0106] Next, the relay device 101B transmits a response to the connection request to the new function unit (step S35), and various information is transmitted and received between the relay device 101B and the new function unit, and authentication processing of the new function unit is performed (step S36).

[0107] Next, if the relay device 101B succeeds in the authentication process of the new function unit, it permits relaying of a frame for network setting process received at the connection port (step S37), and transmits device connection information to the relay device 101A (step S38).

[0108] Next, the relay device 101A transmits an information request notification for requesting device information to the relay device 101B, the new function unit, and each existing function unit (steps S39 to S41).

[0109] Next, in response to the information request notice, the relay device 101B, the new function unit, and each existing function unit transmit their own device information of the type specified in the information request notice to the relay device 101A (steps S42 to S44).

[0110] Next, the relay device 101A generates setting information for the new network based on the device information received from the relay device 101B, the new function unit, and each existing function unit, as well as the device information of the relay device 101A (step S45).

[0111] Next, relay device 101A changes various settings of itself based on the generated setting information (step S46), and notifies relay device 101B of the setting contents (step S47).

[0112] Next, relay device 101B changes various settings in accordance with the setting contents notified from relay device 101A (step S48).

[0113] Next, relay device 101B transmits an update completion notification to relay device 101A (step S49).

[0114] Next, relay device 101A confirms that the setting changes for all relay devices have been completed by receiving an update completion notification from setting unit 4 in relay device 101A and relay device 101B (step S50), and sends a frame permission notification to relay device 101B (step S51).

[0115] Next, the relay device 101B permits relaying of all frames from the communication port 51 to which the new function unit is connected (step S52).

[0116] Next, the relay devices 101A and 101B, the new function unit, and each existing function unit in the new network communicate with each other according to the changed settings (step S53).

[0117] Here, the difference in the timing at which the setting process is completed between relay devices 101 tends to increase as the number of relay devices 101 provided in the in-vehicle network 401 increases. Therefore, as described above, the effect of permitting relaying of frames transmitted by the new functional unit after the network setting process is completed is increased.

[0118] The network setting process by the generation unit 3 and the setting units 4, 14, etc. may include setting the priority of frames transmitted from each functional unit in the new network.

[0119] As a result, even if the new functional unit is an in-vehicle ECU that transmits information with a large amount of data, such as video, the priority of that information is lowered and after the network setting process is completed to increase the priority of information related to the driving control of the vehicle 501, the frames transmitted from the new functional unit can be transmitted over the in-vehicle network 401, thereby more reliably preventing any impact on the driving of the vehicle 501.

[0120] Furthermore, the in-vehicle communication system 301 may be configured not to perform the authentication process of the new function unit as described above.

[0121] FIG. 7 is a diagram illustrating another example of a sequence of a process for establishing a new network in an in-vehicle communication system according to an embodiment of the present disclosure.

[0122] Referring to FIG. 7, first, relay unit 11 in relay device 101B is set to prohibit relaying and discard frames other than frames containing connection request information received at an empty port (step S61).

[0123] Next, the new function unit is connected to an available port of the relay device 101B. The new function unit transmits connection request information to the relay device 101B (step S62).

[0124] Next, the relay device 101B receives the connection request information, detects the new function unit (step S63), allows relaying of the frame for network setting processing received at the connection port (step S64), and transmits the device connection information to the relay device 101A (step S65).

[0125] The processing in steps S66 to S80 is the same as the processing in steps S39 to S53 shown in FIG.

[0126] In the in-vehicle communication system according to the embodiment of the present disclosure, relay device 101A is configured to function as a monitoring device, but this is not limiting. In-vehicle communication system 301 may be configured to include a device that includes update check unit 2 and notification unit 5, separate from relay device 101A.

[0127] Furthermore, the relay device 101A may further include a detection unit 12, an authentication unit 13, and a control unit 15, and may perform the same processing as the relay device 101B when a new function unit is connected. In this case, the in-vehicle communication system 301 may be configured to include only one relay device 101A, without including the relay device 101B.

[0128] Furthermore, the relay device 101B may not include the authentication unit 13, and a server or the like outside the vehicle 501 may perform authentication processing for the new function unit.

[0129] Furthermore, in the in-vehicle communication system according to the embodiment of the present disclosure, the setting unit 14 in the relay device 101B is configured to send a predetermined notification to the relay device 101A, which is another device in the in-vehicle network 401, when the setting process of the relay device 101B using the frame for network setting process is completed. However, this is not limited to this. The setting unit 14 may be configured not to send the predetermined notification. In this case, for example, the relay device 101A sends a frame permission notification to the relay device 101B, indicating that frame transmission from the new function unit is permitted, after a predetermined time has elapsed since the relay device 101A notified the relay device 101B of the setting contents for communication in the new network.

[0130] Each process (each function) in the above-described embodiments is realized by a processing circuit including one or more processors. The processing circuit may be configured as an integrated circuit or the like that combines one or more memories, various analog circuits, and various digital circuits in addition to the one or more processors. The one or more memories store programs (instructions) that cause the one or more processors to execute each of the processes. The one or more processors may execute each of the processes according to the program read from the one or more memories, or according to a logic circuit pre-designed to execute each of the processes. The processor may be various processors suitable for computer control, such as a central processing unit (CPU), a graphics processing unit (GPU), a digital signal processor (DSP), a field programmable gate array (FPGA), and an application-specific integrated circuit (ASIC). Note that the physically separate processors may cooperate with each other to execute each of the processes. For example, the processors mounted on a plurality of physically separated computers may cooperate with each other to execute the above processes via a network such as a LAN (Local Area Network), a WAN (Wide Area Network), the Internet, etc. The program may be installed into the memory from an external server device or the like via the network, or may be distributed in a state stored on a recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a semiconductor memory, and installed into the memory from the recording medium.

[0131] The above-described embodiments should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is defined by the claims, not by the above description, and is intended to include all modifications within the meaning and scope of the claims.

[0132] The above description includes the following additional features. [Appendix 1] A relay device used in an in-vehicle network including a plurality of functional units, a relay unit that performs a relay process for relaying frames transmitted and received between the functional units; a detection unit that detects addition of a functional unit to the in-vehicle network; a control unit that restricts the relay processing of frames transmitted from the new functional unit other than frames used in a setting process for performing communication in the new network, which is the in-vehicle network further including the new functional unit that is the functional unit detected by the detection unit, and relaxes the restriction on the relay processing when the setting process is completed; When the setting process is completed, the control unit permits relay of all frames transmitted from the new function unit, The setting process includes setting the priority of frames transmitted from each functional unit in the new network.

[0133] [Appendix 2] A monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, an update confirmation unit that confirms completion of a setting process in the plurality of relay devices for communication in a new network, the new network being the in-vehicle network to which a new functional unit that is a new functional unit is connected, in the plurality of relay devices; a notification unit that notifies the relay device to which the new function unit is connected of the completion when the completion is confirmed by the update confirmation unit, The setting process includes setting the priority of frames transmitted from each functional unit in the new network.

[0134] [Appendix 3] A relay device used in an in-vehicle network including a plurality of functional units, processing circuitry; The processing circuitry performing a relay process for relaying frames transmitted and received between the functional units; detecting the addition of a functional unit to the in-vehicle network, and restricting the relay processing of frames transmitted from the new functional unit other than frames used in a setting process for performing communication in the new network, which is the in-vehicle network that further includes the detected new functional unit; When the setting process is completed, the relay device relaxes the restriction on the relay process.

[0135] [Appendix 4] A monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, processing circuitry; The processing circuitry confirming completion of a setting process in the plurality of relay devices for communication in the new network, which is the in-vehicle network in which the new functional unit, which is a new functional unit, is connected to the relay device; When the completion is confirmed, the monitoring device notifies the relay device to which the new function unit is connected of the completion.

[0136] [Appendix 5] A relay method in a relay device used in an in-vehicle network including a plurality of functional units, which performs a relay process of relaying frames transmitted and received between the functional units, comprising: detecting the addition of a functional unit to the in-vehicle network; restricting the relaying process of frames transmitted from the new functional unit other than frames used in a setting process for performing communication in the new network, which is the in-vehicle network further including the detected new functional unit; and when the setting process is completed, relaxing the restriction on the relay process.

[0137] [Appendix 6] A monitoring method for a monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, comprising: a step of confirming completion of a setting process in the plurality of relay devices for communication in a new network, the new network being the in-vehicle network to which the new functional unit, which is a new functional unit, is connected; and when the completion is confirmed, notifying the relay device to which the new function unit is connected of the completion. [Explanation of symbols]

[0138] 1 Relay section 2 Update confirmation section 3 Generation part 4. Settings 5 Notification section 6 Memory section 11 Relay Section 12 Detection unit 13 Authentication Section 14 Setting section 15 Control Unit 16 Memory section 51 communication port 101, 101A, 101B Repeater 202,202A,202B,202C Automotive ECU 301 In-Vehicle Communication System 401 In-Vehicle Network 501 vehicles

Claims

1. A relay device used in an in-vehicle network including a plurality of functional units, a relay unit that performs a relay process for relaying frames transmitted and received between the functional units; a detection unit that detects addition of a functional unit to the in-vehicle network; A relay device comprising: a control unit that restricts the relay processing of frames transmitted from the new functional unit other than frames used in a configuration process for communication in a new network, which is an in-vehicle network that further includes a new functional unit that is the functional unit detected by the detection unit, and that relaxes the restriction on the relay processing when the configuration process is completed.

2. In the in-vehicle network, one or more second relay devices are further provided as relay devices other than the first relay device that is the relay device, and that relay frames transmitted and received between the functional units; The relay device according to claim 1 , wherein the control unit relaxes the restriction on the relay process when the setting process of all relay devices in the in-vehicle network is completed.

3. The first relay device further comprises: The relay device according to claim 2 , further comprising a setting unit that, when the setting process of the first relay device is completed, issues a predetermined notification to other devices in the in-vehicle network.

4. An authentication process for the new function unit is performed prior to the setting process, 4. The relay device according to claim 1, wherein the control unit restricts the relay processing of frames sent from the new function unit other than frames used in the authentication processing of the new function unit, and when the authentication processing is completed, restricts the relay processing of frames sent from the new function unit other than frames used in the setting processing.

5. A monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, an update confirmation unit that confirms completion of a setting process in the plurality of relay devices for communication in a new network, the new network being the in-vehicle network to which a new functional unit that is a new functional unit is connected, in the plurality of relay devices; a notification unit that, when the completion is confirmed by the update confirmation unit, notifies the relay device to which the new function unit is connected of the completion.

6. The monitoring device further comprises: The monitoring device according to claim 5 , further comprising a generating unit that generates settings for communication in the new network and notifies the one or more relay devices of the settings.

7. A relay program for a relay device used in an in-vehicle network including a plurality of functional units, Computer, a relay unit that performs a relay process for relaying frames transmitted and received between the functional units; a detection unit that detects addition of a functional unit to the in-vehicle network; a control unit that restricts the relay processing of frames transmitted from the new functional unit other than frames used in a setting process for performing communication in the new network, which is the in-vehicle network further including the new functional unit that is the functional unit detected by the detection unit, and relaxes the restriction on the relay processing when the setting process is completed; A relay program to function as a

8. A monitoring program for a monitoring device used in an in-vehicle network including a plurality of functional units and a plurality of relay devices that relay frames transmitted and received between the functional units, Computer, an update confirmation unit that confirms completion of a setting process in the plurality of relay devices for communication in a new network, the new network being the in-vehicle network to which a new functional unit that is a new functional unit is connected, in the plurality of relay devices; a notification unit that notifies the relay device to which the new function unit is connected of the completion when the completion is confirmed by the update confirmation unit; A monitoring program to function as a

Images