On-vehicle device, abnormality detection method, and abnormality detection program

Abstract

To provide an on-vehicle device, an abnormality detection method, and an abnormality detection program that can perform more stable time synchronization among on-vehicle devices.SOLUTION: The on-vehicle device includes a processing unit and a detection unit. The processing unit, on the basis of the propagation delay time of data between the other on-vehicle device, which is another on-vehicle device, and own on-vehicle device of the same, performs time synchronization between the other device and own on-vehicle device of the same, receives request information from the other device to request time information used for updating the propagation delay time, and transmits the time information to the other device. The detection unit detects an abnormality related to the time synchronization and obtains information about the detected abnormality.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present disclosure relates to an in-vehicle device, an abnormality detection method, and an abnormality detection program. [Background technology]

[0002] Conventionally, a technology related to an in-vehicle network having a plurality of in-vehicle devices has been developed. For example, Japanese Patent Application Laid-Open Publication No. 2013-168865 (Patent Document 1) discloses an in-vehicle network system as follows. That is, the in-vehicle network system includes an in-vehicle control device having a memory for storing definition data that defines a part of a communication protocol used on an in-vehicle network that depends on the implementation on the in-vehicle network, and a communication protocol issuing device that issues the definition data to the in-vehicle control device. When the communication protocol issuing device receives a registration request requesting the in-vehicle control device to participate in the in-vehicle network from a registration device that causes the in-vehicle control device to participate in the in-vehicle network, the communication protocol issuing device performs authentication for the registration device, creates the definition data that complies with the implementation on the in-vehicle network, and returns it to the registration device. The registration device receives the definition data transmitted by the communication protocol issuing device, and requests the in-vehicle control device to store the received definition data in the memory. The vehicle control device receives definition data from the registration device and stores it in the memory, and communicates using the vehicle network in accordance with the communication protocol in accordance with the portion defined by the definition data. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2013-168865 A Summary of the Invention [Problem to be solved by the invention]

[0004] Each in-vehicle device in the in-vehicle network periodically updates the data propagation delay time between the in-vehicle devices in accordance with a protocol defined by a standard such as IEEE 802.1, and performs time synchronization between the in-vehicle devices using the updated propagation delay time.

[0005] However, there is a possibility that anomalies in time synchronization may occur, such as a sudden change in data propagation delay time between vehicle-mounted devices. In such cases, there is a risk of problems such as a decrease in the accuracy of time synchronization.

[0006] The present invention has been made to solve the above-mentioned problems, and its object is to provide an in-vehicle device, an anomaly detection method, and an anomaly detection program that can perform time synchronization between in-vehicle devices more stably. [Means for solving the problem]

[0007] The in-vehicle device of the present disclosure includes a processing unit that transmits request information to another in-vehicle device to request time information used to update the propagation delay time of data between the in-vehicle device and the other in-vehicle device, updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time, and a detection unit that detects an abnormality regarding the time synchronization and acquires information regarding the detected abnormality.

[0008] The in-vehicle device of the present disclosure performs time synchronization between another in-vehicle device and its own in-vehicle device based on the data propagation delay time between the other in-vehicle device and its own in-vehicle device, and is equipped with a processing unit that receives request information from the other device to request time information used to update the propagation delay time and transmits the time information to the other device, and a detection unit that detects an abnormality regarding the time synchronization and acquires information regarding the detected abnormality.

[0009] The anomaly detection method disclosed herein is an anomaly detection method in an in-vehicle device, and includes the steps of transmitting request information to another in-vehicle device to request time information used to update the propagation delay time of data between the in-vehicle device and the in-vehicle device itself, receiving the time information transmitted from the other device, updating the propagation delay time based on the received time information, performing time synchronization with the other device based on the updated propagation delay time, and detecting an anomaly related to the time synchronization and acquiring information related to the detected anomaly.

[0010] The anomaly detection method disclosed herein is an anomaly detection method in an in-vehicle device, in which time synchronization is performed between another in-vehicle device and the in-vehicle device itself based on a propagation delay time of data between the other device and the in-vehicle device itself, and includes a step of receiving request information from the other device to request time information used to update the propagation delay time, a step of transmitting the time information to the other device, and a step of detecting an anomaly related to the time synchronization and acquiring information related to the detected anomaly.

[0011] The abnormality detection program disclosed herein is an abnormality detection program used in an in-vehicle device, and causes a computer to function as a processing unit that sends request information to another in-vehicle device to request time information used to update the propagation delay time of data between the in-vehicle device and the in-vehicle device itself, updates the propagation delay time based on the time information sent from the other device, and performs time synchronization with the other device based on the updated propagation delay time, and a detection unit that detects an abnormality related to the time synchronization and acquires information related to the detected abnormality.

[0012] The abnormality detection program disclosed herein is an abnormality detection program used in an in-vehicle device, and causes a computer to function as a processing unit that performs time synchronization between another device, which is another in-vehicle device, and the in-vehicle device itself based on the data propagation delay time between the other device and the in-vehicle device itself, receives request information from the other device to request time information used to update the propagation delay time, and transmits the time information to the other device, and a detection unit that detects abnormalities related to the time synchronization and acquires information related to the detected abnormality.

[0013] The present disclosure can be realized not only as an in-vehicle device equipped with such a characteristic processing unit, but also as a semiconductor integrated circuit that realizes part or all of the in-vehicle device, or as an in-vehicle network system that includes the in-vehicle device. Effect of the Invention

[0014] According to the present disclosure, time synchronization between in-vehicle devices can be performed more stably. [Brief description of the drawings]

[0015] [Figure 1] FIG. 1 is a diagram showing a configuration of an in-vehicle network system according to an embodiment of the present disclosure. [Diagram 2] FIG. 2 is a diagram illustrating a configuration of a switch device according to an embodiment of the present disclosure. [Diagram 3] FIG. 3 is a diagram illustrating a configuration of a functional unit on the master side according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram for explaining a method of updating a propagation delay time by a switch device according to an embodiment of the present disclosure. [Diagram 5] FIG. 5 is a diagram illustrating a configuration of a functional unit on the slave side according to an embodiment of the present disclosure. [Figure 6] FIG. 6 is a diagram for explaining a method of updating a propagation delay time by a slave-side functional unit according to an embodiment of the present disclosure. [Figure 7]FIG. 7 is a diagram illustrating an example of a case where a sudden change occurs in the data propagation delay time between the master side functional unit and the switch device according to the embodiment of the present disclosure. [Figure 8] FIG. 8 is a diagram illustrating an example of a case where data transmission between a functional unit and a switch device according to an embodiment of the present disclosure is interrupted. [Figure 9] FIG. 9 is a diagram illustrating an example of a list of error codes stored in a storage unit in a switch device and a functional unit according to an embodiment of the present disclosure. [Figure 10] FIG. 10 is a diagram illustrating a sequence of updating a propagation delay time and detecting an anomaly related to time synchronization by a plurality of in-vehicle devices in the in-vehicle network system according to the embodiment of the present disclosure. [Figure 11] FIG. 11 is a diagram showing a sequence of time correction by a plurality of in-vehicle devices in the in-vehicle network system according to the embodiment of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0016] First, the contents of the embodiments of the present disclosure will be listed and described. (1) An in-vehicle device according to an embodiment of the present disclosure includes a processing unit that transmits request information to another in-vehicle device to request time information used to update a propagation delay time of data between the in-vehicle device and the other in-vehicle device, updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time, and a detection unit that detects an abnormality regarding the time synchronization and acquires information regarding the detected abnormality.

[0017] In this way, the configuration for detecting anomalies in time synchronization makes it possible to grasp the occurrence of an anomaly and take measures such as quickly taking measures to eliminate the cause of the anomaly, thereby enabling more stable time synchronization between in-vehicle devices.

[0018] (2) An in-vehicle device according to an embodiment of the present disclosure performs time synchronization between another in-vehicle device and its own in-vehicle device based on a data propagation delay time between the other in-vehicle device and its own in-vehicle device, and is equipped with a processing unit that receives request information from the other device to request time information used to update the propagation delay time and transmits the time information to the other device, and a detection unit that detects an abnormality related to the time synchronization and acquires information related to the detected abnormality.

[0019] In this way, the configuration for detecting an abnormality in time synchronization allows the occurrence of the abnormality to be grasped, and measures such as taking prompt action to eliminate the cause of the abnormality can be taken. Therefore, time synchronization between on-board devices can be performed more stably. In addition, the configuration for detecting an abnormality in time synchronization in the on-board device that is the source of time information, i.e., the on-board device that holds the reference time in the on-board network, allows the abnormality in time synchronization to be detected more reliably.

[0020] (3) Preferably, the in-vehicle device further includes a recording unit configured to store, in a memory unit, information relating to the abnormality detected by the detection unit.

[0021] In this way, by storing information regarding an abnormality that has occurred in an in-vehicle device in the in-vehicle device, it is possible, for example, to grasp the occurrence of an abnormality without using any device other than the in-vehicle device for information transmission, and, for example, to take measures to resolve the cause of the abnormality more quickly.

[0022] (4) Preferably, the detection unit detects, as the time synchronization abnormality, an abnormality in transmission of at least one of the request information and the time information.

[0023] With this configuration, it is possible to detect changes in the propagation delay time of messages used for time synchronization, thereby making it possible to more reliably detect abnormalities related to time synchronization.

[0024] (5) More preferably, the detection unit detects a delay or interruption in transmission of at least one of the request information and the time information as the abnormality regarding the time synchronization.

[0025] Here, even if a delay or interruption in message transmission occurs temporarily due to communication congestion or the like, if the cause is eliminated, the message transmission is normal and information related to such an anomaly is not recorded, so that the administrator, etc. may not be able to grasp the anomaly. In this way, if the anomaly cannot be grasped, it is not possible to take measures against the cause of the anomaly, and the same anomaly may be repeated. In contrast, with the above-mentioned configuration, even if the anomaly occurs temporarily and may be eliminated, the anomaly can be detected and information related to the anomaly can be recorded, so that measures can be taken to eliminate the cause of the anomaly.

[0026] (6) An anomaly detection method according to an embodiment of the present disclosure is an anomaly detection method in an in-vehicle device, and includes the steps of: transmitting request information to another in-vehicle device to request time information used to update a propagation delay time of data between the in-vehicle device and the in-vehicle device itself; receiving the time information transmitted from the other device; updating the propagation delay time based on the received time information; performing time synchronization with the other device based on the updated propagation delay time; and detecting an anomaly related to the time synchronization and acquiring information related to the detected anomaly.

[0027] In this way, the method for detecting anomalies in time synchronization makes it possible to grasp the occurrence of an anomaly and take measures such as quickly taking measures to eliminate the cause of the anomaly, thereby enabling more stable time synchronization between in-vehicle devices.

[0028] (7) An anomaly detection method according to an embodiment of the present disclosure is an anomaly detection method in an in-vehicle device, in which time synchronization is performed between another in-vehicle device and the in-vehicle device itself based on a propagation delay time of data between the other in-vehicle device and the in-vehicle device itself, and includes a step of receiving request information from the other device to request time information used to update the propagation delay time, a step of transmitting the time information to the other device, and a step of detecting an anomaly related to the time synchronization and acquiring information related to the detected anomaly.

[0029] In this way, the method for detecting anomalies in time synchronization allows the occurrence of an anomaly to be grasped, and measures such as quickly taking measures to eliminate the cause of the anomaly can be taken. Therefore, time synchronization between on-board devices can be performed more stably. Furthermore, the method for detecting anomalies in time synchronization in the on-board device that is the source of time information, i.e., the on-board device that holds the reference time in the on-board network, allows for more reliable detection of anomalies in time synchronization.

[0030] (8) An anomaly detection program according to an embodiment of the present disclosure is an anomaly detection program used in an in-vehicle device, which causes a computer to function as a processing unit that transmits request information to another in-vehicle device to request time information used to update the propagation delay time of data between the in-vehicle device and the in-vehicle device itself, updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time, and a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly.

[0031] In this way, the configuration for detecting anomalies in time synchronization makes it possible to grasp the occurrence of an anomaly and take measures such as quickly taking measures to eliminate the cause of the anomaly, thereby enabling more stable time synchronization between in-vehicle devices.

[0032] (9) An anomaly detection program according to an embodiment of the present disclosure is an anomaly detection program used in an in-vehicle device, which causes a computer to function as a processing unit that performs time synchronization between another device, which is another in-vehicle device, and the in-vehicle device itself based on a data propagation delay time between the other device and the in-vehicle device itself, receives request information from the other device for requesting time information used to update the propagation delay time, and transmits the time information to the other device, and a detection unit that detects an anomaly related to the time synchronization and acquires information related to the detected anomaly.

[0033] In this way, the configuration for detecting an abnormality in time synchronization allows the occurrence of the abnormality to be grasped, and measures such as taking prompt action to eliminate the cause of the abnormality can be taken. Therefore, time synchronization between on-board devices can be performed more stably. In addition, the configuration for detecting an abnormality in time synchronization in the on-board device that is the source of time information, i.e., the on-board device that holds the reference time in the on-board network, allows the abnormality in time synchronization to be detected more reliably.

[0034] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In the drawings, the same or corresponding parts are denoted by the same reference numerals, and the description thereof will not be repeated. In addition, at least some of the embodiments described below may be arbitrarily combined.

[0035] <Configuration and basic operation> [Overall configuration] Fig. 1 is a diagram showing a configuration of an in-vehicle network system according to an embodiment of the present disclosure. With reference to Fig. 1, an in-vehicle network system 301 is mounted on a vehicle 1, and includes a switch device 101 and a plurality of functional units 111. Fig. 1 shows two functional units 111A and 111B as an example of the functional unit 111. The switch device 101 and each functional unit 111 are in-vehicle devices, such as an ECU (Electronic Control Unit).

[0036] The switch device 101 is connected to a plurality of functional units 111 by, for example, an Ethernet (registered trademark) cable 10, and is capable of communicating with the plurality of functional units 111 connected to the switch device 101 itself.

[0037] Specifically, the switch device 101 performs a relay process to relay data from a functional unit 111 to another functional unit 111. Between the switch device 101 and the functional unit 111, information is exchanged using, for example, an Ethernet frame in which an IP packet is stored.

[0038] The functional unit 111 includes an exterior communication ECU, a sensor, a camera, a navigation device, an autonomous driving processing ECU, an engine control device, an automatic transmission (AT) control device, a hybrid electric vehicle (HEV) control device, a brake control device, a chassis control device, a steering control device, and an instrument display control device.

[0039] [Switch device and master side functional parts] (Switch device configuration) Fig. 2 is a diagram showing a configuration of a switch device according to an embodiment of the present disclosure. Referring to Fig. 2, the switch device 101 includes a relay unit 51, a time synchronization unit 52, a storage unit 53, and a plurality of communication ports 54. The relay unit 51 and the time synchronization unit 52 are realized by a processor such as a CPU (Central Processing Unit) and a DSP (Digital Signal Processor). The storage unit 53 is, for example, a non-volatile memory.

[0040] The relay unit 51 includes a switch unit 61 and a control unit 62. The time synchronization unit 52 includes a processing unit 63, a detection unit 64, and a recording unit 65.

[0041] (Relay processing by switch device) The communication port 54 is, for example, a terminal to which an Ethernet cable 10 can be connected. The communication port 54 may be a terminal of an integrated circuit. Each of the multiple communication ports 54 is connected to one of the multiple functional units 111 via the Ethernet cable 10. In this example, the communication port 54A is connected to the functional unit 111A, and the communication port 54B is connected to the functional unit 111B.

[0042] The storage unit 53 stores an address table Ta1 that indicates the correspondence between the port number of the communication port 54 and the MAC (Media Access Control) address of the connection destination device.

[0043] The switch unit 61 relays data between other in-vehicle devices. That is, when the switch unit 61 receives an Ethernet frame transmitted from a functional unit 111 via the communication port 54 corresponding to the functional unit 111, the switch unit 61 performs a relay process on the received Ethernet frame.

[0044] More specifically, the switch unit 61 refers to the address table Ta1 stored in the storage unit 53, and identifies the port number corresponding to the destination MAC address included in the received Ethernet frame. Then, the switch unit 61 transmits the received Ethernet frame from the communication port 54 of the identified port number.

[0045] The switch device 101 updates the data propagation delay time Td1 between the master functional unit 111 and its own switch device 101. Here, it is assumed that the functional unit 111A is the master functional unit 111, and the functional unit 111B is the slave functional unit 111. The functional unit 111A holds a reference time in the in-vehicle network system 301.

[0046] (Configuration of the master side functional section) Fig. 3 is a diagram showing a configuration of a master-side functional unit according to an embodiment of the present disclosure. Referring to Fig. 3, the master-side functional unit 111A includes a communication unit 81A, a time synchronization unit 82A, a storage unit 83A, and a communication port 84A. The communication unit 81A and the time synchronization unit 82A are realized by a processor such as a CPU and a DSP. The storage unit 83A is, for example, a non-volatile memory.

[0047] The time synchronization unit 82A includes a processing unit 91A, a detection unit 92A, and a recording unit 93A. The communication port 84A is a terminal to which an Ethernet cable 10 can be connected, for example. The communication port 84A may be a terminal of an integrated circuit, etc. The communication port 84A is connected to the switch device 101 via the Ethernet cable 10.

[0048] (Update of data propagation delay between the master function unit and the switch device) FIG. 4 is a diagram for explaining a method of updating a propagation delay time by a switch device according to an embodiment of the present disclosure.

[0049] 2 to 4, the processing unit 63 in the switch device 101 periodically or irregularly updates the propagation delay time Td1 of data between the functional unit 111A and the switch device 101. More specifically, the processing unit 63 transmits request information (Pdelay_Req) ​​for requesting time information used to update the propagation delay time Td1 to the functional unit 111A via the relay unit 51 and the communication port 54A. Hereinafter, the request information is also referred to as a "request message."

[0050] The communication section 81A in the functional section 111A receives the request message transmitted from the switch device 101 via the communication port 84A, and outputs the received request message to the time synchronization section 82A.

[0051] The processing unit 91A in the time synchronization unit 82A receives the request message from the communication unit 81A and outputs time information (Pdelay_Resp) for the request message to the communication unit 81A. The communication unit 81A transmits the time information received from the processing unit 91A to the switch device 101 via the communication port 84A. At this time, the processing unit 91A transmits the time information including the reception time t2 of the request message. Hereinafter, the time information is also referred to as a "response message."

[0052] After transmitting the response message, the processing unit 91A outputs a follow-up message (Pdelay_Resp_Follow_Up) including the transmission time t3 of the response message to the communication unit 81A. The communication unit 81A transmits the follow-up message received from the processing unit 91A to the switch device 101 via the communication port 84A.

[0053] The control unit 62 in the switch device 101 receives the response message and the follow-up message transmitted from the functional unit 111A via the communication port 54A. Then, the control unit 62 notifies the time synchronizer 52 of the time t2 included in the response message and the time t3 included in the follow-up message.

[0054] The control unit 62 also notifies the time synchronizer 52 of the transmission time t1 of the request message and the reception time t4 of the response message. More specifically, the switch device 101 includes a counter (not shown). The control unit 62 notifies the time synchronizer 52 of the count value of the counter at the transmission timing of the request message as the transmission time t1. The control unit 62 also notifies the time synchronizer 52 of the count value of the counter at the reception timing of the response message as the reception time t4.

[0055] The processing unit 63 in the time synchronization unit 52 calculates a propagation delay time Td1 of data between the functional unit 111A and the switch device 101 based on the times t1, t2, t3, and t4 notified from the control unit 62. Specifically, the processing unit 63 calculates the propagation delay time Td1=((t4-t1)-(t3-t2)) / 2. Then, the processing unit 63 updates the propagation delay time Td1 stored in the storage unit 53 to the newly calculated propagation delay time Td1.

[0056] (Time correction in switch device) The processing unit 91A in the functional unit 111A periodically or irregularly outputs a Sync message to the communication unit 81A. The communication unit 81A transmits the Sync message received from the processing unit 91A to the switch device 101 via the communication port 84A. After transmitting the Sync message, the processing unit 91A outputs a follow-up message (Follow_Up) including the transmission time tm of the Sync message to the communication unit 81A. The communication unit 81A transmits the follow-up message received from the processing unit 91A to the switch device 101 via the communication port 84A.

[0057] The control unit 62 in the switch device 101 receives the Sync message and the follow-up message transmitted from the functional unit 111A via the communication port 54A. Then, the control unit 62 notifies the time synchronizer 52 of the time tm included in the follow-up message. The control unit 62 also notifies the time synchronizer 52 of the count value of the counter at the timing of receiving the Sync message as the receiving time tx of the Sync message.

[0058] The processing unit 63 in the time synchronization unit 52 performs time synchronization with the functional unit 111A based on the times tm, tx notified from the control unit 62 and the propagation delay time Td1 stored in the storage unit 53. More specifically, the processing unit 63 calculates a time difference Tx1=tm-Td1-tx, which is the difference between the time of the functional unit 111A and the time of the switch device 101, based on the times tm, tx and the propagation delay time Td1.

[0059] Then, the processing unit 63 uses the calculated time difference Tx1 to correct the time in its own switching device 101. As a result, time synchronization between the functional unit 111A and the switching device 101 is established.

[0060] [Slave side function] Fig. 5 is a diagram showing a configuration of a slave-side functional unit according to an embodiment of the present disclosure. Referring to Fig. 5, the slave-side functional unit 111B includes a communication unit 81B, a time synchronization unit 82B, a storage unit 83B, and a communication port 84B. The communication unit 81B and the time synchronization unit 82B are realized by a processor such as a CPU and a DSP. The storage unit 83B is, for example, a non-volatile memory.

[0061] The time synchronization unit 82B includes a processing unit 91B, a detection unit 92B, and a recording unit 93B. The communication port 84B is a terminal to which an Ethernet cable 10 can be connected, for example. The communication port 84B may be a terminal of an integrated circuit, etc. The communication port 84B is connected to the switch device 101 via the Ethernet cable 10.

[0062] Hereinafter, each of the memory unit 83A in the functional unit 111A and the memory unit 83B in the functional unit 111B will also be referred to as a "memory unit 83." Additionally, each of the detection unit 92A in the functional unit 111A and the detection unit 92B in the functional unit 111B will also be referred to as a "detection unit 92." Additionally, each of the recording unit 93A in the functional unit 111A and the recording unit 93B in the functional unit 111B will also be referred to as a "recording unit 93."

[0063] (Update of data propagation delay time between switch device and slave side functional unit) The slave functional unit 111B updates the data propagation delay time Td2 between the switch device 101 and itself.

[0064] FIG. 6 is a diagram for explaining a method of updating a propagation delay time by a slave-side functional unit according to an embodiment of the present disclosure.

[0065] 5 and 6, the processing unit 91B in the slave side functional unit 111B periodically or irregularly updates the propagation delay time Td2 of data between the switching device 101 and its own functional unit 111B, similar to the processing unit 63 in the switching device 101 shown in Fig. 2. More specifically, the processing unit 91B transmits a request message for requesting time information used to update the propagation delay time Td2 to the switching device 101 via the communication unit 81B and the communication port 84B.

[0066] When the control unit 62 in the switch device 101 receives the request message transmitted from the functional unit 111B via the communication port 54B, it outputs the request message to the processing unit 63.

[0067] When the processing unit 63 receives the request message from the control unit 62, it transmits a response message to the request message to the functional unit 111B via the relay unit 51 and the communication port 54B. At this time, the processing unit 63 transmits the response message including the reception time t22 of the request message.

[0068] Furthermore, after transmitting the response message, the processing unit 63 transmits a follow-up message including the transmission time t13 of the response message to the functional unit 111B via the relay unit 51 and the communication port 54B.

[0069] The communication unit 81B in the functional unit 111B receives the response message and the follow-up message transmitted from the switch device 101 via the communication port 84. Then, the communication unit 81B notifies the time synchronizer 82B of the time t12 included in the response message and the time t13 included in the follow-up message.

[0070] Furthermore, the communication unit 81B notifies the time synchronization unit 82B of the transmission time t11 of the request message and the reception time t14 of the response message. More specifically, the function unit 111B includes a counter (not shown). The communication unit 81B notifies the time synchronization unit 82B of the count value of the counter at the transmission timing of the request message as the transmission time t11. The communication unit 81B also notifies the time synchronization unit 82B of the count value of the counter at the reception timing of the response message as the reception time t14.

[0071] The processing unit 91B in the time synchronization unit 82B calculates a propagation delay time Td2 of data between the switch device 101 and the functional unit 111B based on the times t11, t12, t13, and t14 notified from the communication unit 81B. Specifically, the processing unit 91B calculates the propagation delay time Td2=((t14-t11)-(t13-t12)) / 2. Then, the processing unit 91B updates the propagation delay time Td2 stored in the storage unit 83 to the newly calculated propagation delay time Td2.

[0072] (Time correction in the slave function unit) The processing unit 63 in the switch device 101 periodically or irregularly transmits a Sync message to the slave side functional unit 111B. After transmitting the Sync message, the processing unit 63 transmits a follow-up message including the transmission time ty of the Sync message to the functional unit 111B.

[0073] The communication unit 81B in the functional unit 111B receives the Sync message and the follow-up message transmitted from the switch device 101 via the communication port 84B. Then, the communication unit 81B notifies the time synchronization unit 82B of the time ty included in the follow-up message. The communication unit 81B also notifies the time synchronization unit 82B of the count value of the counter at the reception timing of the Sync message as the reception time ts of the Sync message.

[0074] The processing unit 91B in the time synchronization unit 82B performs time synchronization with the switch device 101 based on the times ty and ts notified from the communication unit 81B and the propagation delay time Td2 stored in the storage unit 83B. More specifically, the processing unit 91B calculates a time difference Tx2=ty-Td2-ts, which is the difference between the time of the switch device 101 and the time of the functional unit 111B. The processing unit 91B then corrects the time in its own functional unit 111B using the calculated time difference Tx2.

[0075] Here, when time synchronization is established between the master side functional unit 111A and the switch device 101, the time ty included in the follow-up message transmitted from the switch device 101 to the functional unit 111B is the time synchronized with the functional unit 111A. Therefore, the processing unit 91B in the functional unit 111B corrects the time, thereby establishing time synchronization between the functional unit 111B and the switch device 101, and as a result, time synchronization is established between the functional unit 111B and the functional unit 111A.

[0076] [Detection of time synchronization anomalies] The detection unit 64 in the switch device 101 and the detection unit 92 in the function unit 111 detect an abnormality related to time synchronization and obtain information about the detected abnormality. An abnormality related to time synchronization is, for example, an abnormality in the transmission of at least one of a request message and a response message, or an abnormality in the time stamp function. The details of the detection performed by the detection unit 64 and the detection unit 92 will be described below.

[0077] (a) Detection of sudden changes in propagation delay time The detection unit 64 in the switch device 101 detects, for example, a sudden change in the data propagation delay time Td1 between the master functional unit 111A and the switch device 101 as an abnormality related to time synchronization.

[0078] FIG. 7 is a diagram illustrating an example of a case where a sudden change occurs in the data propagation delay time between the master side functional unit and the switch device according to the embodiment of the present disclosure.

[0079] 2 and 7, it is assumed here that the switch device 101 transmits a request message to the functional unit 111A at time t21, that the functional unit 111A receives the request message at time t22, and that the functional unit 111A transmits a response message to the switch device 101 at time t23. It is further assumed that the functional unit 111A transmits a follow-up message to the switch device 101 after transmitting the response message.

[0080] Also, suppose that for some reason the propagation delay time Td1 suddenly increases between time t22 and time t23, that is, the time T2 from time t23 to time t24 becomes longer than the time T1 from time t21 to time t22.

[0081] 2 receives a response message and a follow-up message via the communication port 54A, as described above, and notifies the time synchronization unit 52 of the time t22 included in the response message and the time t23 included in the follow-up message. The control unit 62 also notifies the time synchronization unit 52 of the transmission time t21 of the request message and the reception time t24 of the response message.

[0082] As described above, the processing unit 63 in the time synchronization unit 52 calculates the propagation delay time Td1=((t24-t21)-(t23-t22)) / 2 using the notified times t21, t22, t23, and t24. However, since the above formula is based on the premise that the times T1 and T2 are equal, if there is a difference between the times T1 and T2, an incorrect propagation delay time Td1 will be obtained.

[0083] Therefore, the detection unit 64 in the time synchronization unit 52 determines, based on the times t21, t22, t23, and t24 notified from the control unit 62, whether or not a sudden change has occurred in the propagation delay time Td1.

[0084] Specifically, it is assumed that the time T2 from time t23 to time t24 is greater than the time T1 from time t21 to time t22 by a predetermined value or more. In this case, the detection unit 64 determines that the propagation delay time Td1 is suddenly increased and that a delay is occurring in the transmission of the response message between the switch device 101 and the functional unit 111A.

[0085] Then, the detection unit 64 notifies the recording unit 65 of the occurrence of a delay in the transmission of the response message as a detection result. At this time, the detection unit 64 notifies, for example, the time at which it is determined that a delay has occurred in the transmission of the response message, together with the detection result.

[0086] The detection unit 92B in the slave side functional unit 111B, similar to the detection unit 64 in the switch device 101 described above, determines, for example, whether or not a sudden change has occurred in the data propagation delay time Td2 between the switch device 101 and the functional unit 111B.

[0087] Then, if the detection unit 92B determines that the propagation delay time Td2 has suddenly increased and that a delay has occurred in the transmission of the response message between the switch device 101 and the functional unit 111B, it notifies the recording unit 93B of the detection result that a delay has occurred in the transmission of the response message.

[0088] (b) Detection of disruptions to data transmission between devices The detection unit 64 in the switch device 101 detects, for example, a disruption of data transmission between the switch device 101 and the functional unit 111B as an abnormality related to time synchronization.

[0089] FIG. 8 is a diagram illustrating an example of a case where data transmission between a functional unit and a switch device according to an embodiment of the present disclosure is interrupted.

[0090] 2 and 8, it is assumed here that a request message transmitted from the functional unit 111B to the switch device 101 at time t31 is not received by the switch device 101 and is discontinued. In this case, the switch device 101 does not transmit a response message or a follow-up message.

[0091] Furthermore, the detection unit 64 in the switch device 101 monitors the relay unit 51 to monitor the reception status of the request message from the functional unit 111B in the switch device 101. For example, after predetermined information for starting communication is exchanged between the switch device 101 and the functional unit 111B at the start of the in-vehicle network system 301, it is assumed that the request message from the functional unit 111B does not reach the switch device 101 for a predetermined period of time or more. In this case, the detection unit 64 determines that the request message from the functional unit 111B has been interrupted.

[0092] Then, the detection unit 64 notifies the recording unit 65 of the fact that the request message from the functional unit 111B has been interrupted as a detection result. At this time, the detection unit 64 notifies, for example, the detection result including the time at which it was determined that the request message from the functional unit 111B has been interrupted.

[0093] The detection unit 92A in the master-side functional unit 111A, like the detection unit 64 in the switch device 101 described above, determines whether or not there has been an interruption in data transmission between the functional unit 111A and the switch device 101. If the detection unit 92A determines that there has been an interruption in data, it notifies the recording unit 93A of the occurrence of the interruption in data as a detection result.

[0094] (c) Detection of message transmission delays Referring back to FIG. 2, the detection unit 64 in the switch device 101 detects, for example, the occurrence of a delay in message transmission from the switch device 101 as an anomaly related to time synchronization.

[0095] More specifically, the processing unit 63 is configured to periodically transmit a request message to the functional unit 111A. In this case, the detection unit 64, for example, monitors the relay unit 51, and determines that a delay in transmission of the request message has occurred if a situation in which the processing unit 63 has not transmitted a new request message continues for a predetermined period of time or more.

[0096] In this case, the detection unit 64 notifies the recording unit 65 of the occurrence of a delay in transmission of the request message as a detection result. At this time, the detection unit 64 notifies, for example, the time when it is determined that a delay in transmission of the request message has occurred, together with the detection result.

[0097] The detection unit 92 of each of the functional units 111A and 111B determines whether or not a delay in message transmission from its own functional unit 111 has occurred, similar to the detection unit 64 in the above-described switch device 101. If the detection unit 92 determines that a delay in message transmission from its own functional unit 111 has occurred, it notifies the recording unit 93 of the occurrence of a delay in the transmission of the message as a detection result.

[0098] (d) Detection of malfunctions in the time stamp function Here, as described above, the control unit 62 checks the count value of a counter (not shown) included in the switch device 101, and notifies the time synchronization unit 52 of the message transmission time or the message reception time. In other words, the control unit 62 notifies the time using a time stamp function, and if a malfunction occurs in the time stamp function, the control unit 62 cannot notify the time synchronization unit 52 of the correct time.

[0099] For this reason, the detection unit 64 in the switch device 101 detects, for example, that a malfunction has occurred in the time stamp function in the switch device 101 as an abnormality related to time synchronization.

[0100] Specifically, the detection unit 64 checks whether the counter is operating normally, for example, periodically or irregularly. If the counter is not operating normally, the detection unit 64 notifies the recording unit 65 of the detection result that a malfunction has occurred in the time stamp function. At this time, the detection unit 64 notifies the detection result by including, for example, the time when it has been determined that the malfunction has occurred in the time stamp function.

[0101] Similar to the detection unit 64 in the above-described switch device 101, the detection unit 92 of each of the functional units 111A and 111B determines whether or not a malfunction has occurred in the time stamp function of its own functional unit 111. If the detection unit 92 determines that a malfunction has occurred in the time stamp function of its own functional unit 111, it notifies the recording unit 93 of the fact that a malfunction has occurred in the time stamp function as a detection result.

[0102] The detection unit 64 or the detection unit 92 may be configured to detect other types of abnormalities related to time synchronization instead of or in addition to the abnormalities described in (a) to (d) above. The detection unit 64 or the detection unit 92 may be configured to detect some of the abnormalities described in (a) to (d) above.

[0103] [Recording of detection results] The recording unit 65 in the switch device 101 stores information relating to the abnormality detected by the detection unit 64 in the storage unit 53 based on the detection result notified from the detection unit 64. In addition, the recording unit 93 in the functional unit 111 stores information relating to the abnormality detected by the detection unit 92 in the storage unit 83 based on the detection result notified from the detection unit 92.

[0104] More specifically, recording unit 65 and recording unit 93 identify the time of occurrence of the abnormality, the location of occurrence of the abnormality, the cause of the abnormality, etc. based on the notified detection result. Also, memory unit 53 and memory unit 83 store an error code list Ta2 indicating the correspondence between the location of occurrence of the abnormality, the cause of the abnormality, and the error code.

[0105] The recording unit 65 refers to the error code list Ta2 stored in the storage unit 53, and stores in the storage unit 53 the error code corresponding to the identified location and cause of occurrence. The recording unit 93 also refers to the error code list Ta2 stored in the storage unit 83, and stores in the storage unit 83 the error code corresponding to the identified location and cause of occurrence.

[0106] FIG. 9 is a diagram illustrating an example of a list of error codes stored in a storage unit in a switch device and a functional unit according to an embodiment of the present disclosure.

[0107] 9, the error code list Ta2 indicates that if the location of the abnormality is the switch device 101 and the cause of the abnormality is a malfunction of the time stamp function, the error code is "1." The error code list Ta2 also indicates that if the location of the abnormality is the master side functional unit 111A and the cause of the abnormality is a malfunction of the time stamp function, the error code is "2." The error code list Ta2 also indicates that if the location of the abnormality is the slave side functional unit 111B and the cause of the abnormality is a malfunction of the time stamp function, the error code is "3."

[0108] Furthermore, error code list Ta2 indicates that if the location of the abnormality is switch device 101 and the cause of the abnormality is a delay in message transmission, the error code is "4." Furthermore, error code list Ta2 indicates that if the location of the abnormality is master-side functional unit 111A and the cause of the abnormality is a delay in message transmission, the error code is "5." Furthermore, error code list Ta2 indicates that if the location of the abnormality is slave-side functional unit 111B and the cause of the abnormality is a delay in message transmission, the error code is "6."

[0109] Furthermore, the error code list Ta2 indicates that if the location of the abnormality is the data transmission path between the master functional unit 111A and the switch device 101 and the cause of the abnormality is a message transmission delay, the error code is "7." Furthermore, the error code list Ta2 indicates that if the location of the abnormality is the data transmission path between the slave functional unit 111B and the switch device 101 and the cause of the abnormality is a message transmission delay, the error code is "8."

[0110] Furthermore, the error code list Ta2 indicates that if the location of the abnormality is the data transmission path between the master functional unit 111A and the switch device 101 and the cause of the abnormality is a message interruption, the error code is "9." Furthermore, the error code list Ta2 indicates that if the location of the abnormality is the data transmission path between the slave functional unit 111B and the switch device 101 and the cause of the abnormality is a message interruption, the error code is "10."

[0111] (Example 1 of recorded information) For example, suppose that the recording unit 65 in the switch device 101 receives a detection result indicating that a delay has occurred in the transmission of a response message between the switch device 101 and the functional unit 111A. In this case, the recording unit 65 identifies the data propagation path between the master functional unit 111A and the switch device 101 as the location where the abnormality has occurred. The recording unit 65 also identifies the message propagation delay as the cause of the abnormality. The recording unit 65 also identifies the time included in the detection result as the time when the abnormality has occurred.

[0112] Then, the recording unit 65 refers to the error code list Ta2 and stores the error code "7" corresponding to the identified occurrence location and cause, and the time when the abnormality occurred, in the storage unit 53. Note that the time when the abnormality occurred is stored with a data length of the number of bits that can be recorded down to nanoseconds, for example.

[0113] (Example 2 of recorded information) For example, suppose that the recording unit 65 in the switch device 101 receives a detection result indicating that a request message from the functional unit 111B has been interrupted. In this case, the recording unit 65 identifies the data propagation path between the slave functional unit 111B and the switch device 101 as the location where the abnormality occurred. The recording unit 65 also identifies the interruption of the message as the cause of the abnormality. The recording unit 65 also identifies the time included in the detection result as the time when the abnormality occurred.

[0114] Then, the recording unit 65 refers to the error code list Ta2 and stores in the memory unit 53 the error code “10” corresponding to the identified occurrence location and cause, and the time when the abnormality occurred.

[0115] (Example 3 of recorded information) For example, suppose that the recording unit 65 in the switch device 101 receives a detection result indicating that a delay in transmission of a request message from its own switch device 101 has occurred. In this case, the recording unit 65 identifies the switch device 101 as the location where the abnormality has occurred. The recording unit 65 also identifies the delay in message transmission as the cause of the abnormality. The recording unit 65 also identifies the time included in the detection result as the time when the abnormality occurred.

[0116] Then, the recording unit 65 refers to the error code list Ta2 and stores in the memory unit 53 the error code “4” corresponding to the identified occurrence location and cause, and the time when the abnormality occurred.

[0117] (Example 4 of recorded information) For example, suppose that the recording unit 65 in the switch device 101 receives a detection result indicating that a malfunction has occurred in the time stamp function of the switch device 101. In this case, the recording unit 65 identifies the switch device 101 as the location where the abnormality has occurred. The recording unit 65 also identifies a delay in message transmission as the cause of the abnormality. The recording unit 65 also identifies the time included in the detection result as the time when the abnormality occurred.

[0118] Then, the recording unit 65 refers to the error code list Ta2 and stores in the memory unit 53 the error code “1” corresponding to the identified occurrence location and cause, as well as the time when the abnormality occurred.

[0119] The recording unit 93 in the functional unit 111 operates in the same manner as the recording unit 65 in the switch device 101 described above.

[0120] In the switch device 101 according to the embodiment of the present disclosure, the time synchronization unit 52 includes the detection unit 64 and the recording unit 65. That is, the detection unit 64 is configured to detect only anomalies related to time synchronization, but is not limited to this. For example, the detection unit 64 and the recording unit 65 may be provided outside the time synchronization unit 52 and may be configured to further detect anomalies other than the anomalies related to time synchronization and store them in the storage unit 53.

[0121] In addition, in the functional unit 111 according to the embodiment of the present disclosure, the time synchronization unit 82 includes the detection unit 92 and the recording unit 93. That is, the detection unit 92 is configured to detect only anomalies related to time synchronization, but is not limited to this. For example, the detection unit 92 and the recording unit 93 may be provided outside the time synchronization unit 82 and may be configured to further detect anomalies other than the anomalies related to time synchronization and store them in the storage unit 83.

[0122] Furthermore, the switch device 101 may not include the recording unit 65. In this case, instead of notifying the recording unit 65 of the detection result, the detection unit 64 notifies, for example, an external server of the detection result. Furthermore, the function unit 111 may not include the recording unit 93. In this case, instead of notifying the recording unit 93 of the detection result, the detection unit 92 notifies, for example, a server outside the vehicle 1 of the detection result.

[0123] <Operation flow> Next, the operations of the master side functional unit 111A, the switch device 101, and the slave side functional unit 111B in the in-vehicle network system 301 when updating the propagation delay time and detecting an abnormality in time synchronization will be described with reference to the drawings.

[0124] Each device in the in-vehicle network system 301 includes a computer including a memory, and a processor such as a CPU in the computer reads out from the memory a program including some or all of the steps of the following sequence and executes it. Each of the programs for the multiple devices can be installed from the outside. Each of the programs for the multiple devices is distributed in a state where it is stored in a recording medium.

[0125] [Operation procedure for updating propagation delay time and detecting abnormalities in time synchronization] FIG. 10 is a diagram illustrating a sequence of updating a propagation delay time and detecting an anomaly related to time synchronization by a plurality of in-vehicle devices in the in-vehicle network system according to the embodiment of the present disclosure.

[0126] 10, first, processing unit 63 in switch device 101 transmits a request message for requesting time information to functional unit 111A via relay unit 51 and communication port 54A (step S101).

[0127] Next, the processing unit 91A in the functional unit 111A transmits a response message to the request message transmitted from the switching device 101 to the switching device 101. At this time, the functional unit 111A transmits the response message including the reception time t2 of the request message (step S102).

[0128] Next, after transmitting the response message, the processing unit 91A in the functional unit 111A transmits a follow-up message including the transmission time t3 of the response message to the switching device 101 (step S103).

[0129] Next, the detection unit 92A in the functional unit 111A detects an abnormality related to time synchronization (step S104).

[0130] Next, when the detection unit 92A detects an abnormality related to time synchronization such as a transmission delay of a response message ("YES" in step S104), the detection unit 92A notifies the recording unit 93A of the detection result. Then, the recording unit 93A stores information related to the abnormality indicated by the detection result notified from the detection unit 92A in the storage unit 83A (step S105).

[0131] On the other hand, if there is no abnormality regarding time synchronization ("NO" in step S104), the detection unit 92A does not notify the recording unit 93A of the detection result, for example.

[0132] Next, the control unit 62 in the switch device 101 receives the response message and the follow-up message transmitted from the functional unit 111A, and notifies the processing unit 63 of the time t2 contained in the response message and the time t3 contained in the follow-up message. The control unit 62 also notifies the processing unit 63 of the transmission time t1 of the request message and the reception time t4 of the response message (step S106).

[0133] The processing unit 63 updates the data propagation delay time Td1 between the functional unit 111A and the switch device 101 based on the times t1, t2, t3, and t4 notified from the control unit 62 (step S107).

[0134] Next, the detection unit 64 in the switch device 101 detects an abnormality related to time synchronization (step S108).

[0135] Next, when the detection unit 64 detects an abnormality related to time synchronization, such as a transmission delay of a response message ("YES" in step S108), the detection unit 64 notifies the recording unit 65 of the detection result. Then, the recording unit 65 stores information related to the abnormality indicated by the detection result notified from the detection unit 64 in the storage unit 53 (step S109).

[0136] On the other hand, if there is no abnormality regarding time synchronization ("NO" in step S108), the detection unit 64 does not notify the recording unit 65 of the detection result, for example.

[0137] Next, the processing unit 91B in the functional unit 111B transmits a request message for requesting time information to the switch device 101 via the communication unit 81B and the communication port 84B (step S110).

[0138] Next, when the processing unit 63 in the switch device 101 receives the request message transmitted from the functional unit 111B via the communication port 54B and the control unit 62, it transmits a response message to the request message to the functional unit 111B via the relay unit 51 and the communication port 54B. At this time, the processing unit 63 transmits the response message including the reception time t12 of the request message (step S111).

[0139] Next, after transmitting the response message, the processing unit 63 transmits a follow-up message including the transmission time t13 of the response message to the functional unit 111B via the relay unit 51 (step S112).

[0140] Next, the communication unit 81B in the functional unit 111B receives the response message and the follow-up message transmitted from the switch device 101 via the communication port 84B, and notifies the time synchronization unit 82B of the time t12 included in the response message and the time t13 included in the follow-up message. The communication unit 81B also notifies the time synchronization unit 82B of the transmission time t11 of the request message and the reception time t14 of the response message (step S113).

[0141] The processing unit 91B in the time synchronizer 82B updates the data propagation delay time Td2 between the switch device 101 and the functional unit 111B based on the times t11, t12, t13, and t14 notified from the communication unit 81B (step S114).

[0142] Next, the detection unit 92B in the functional unit 111B detects an abnormality related to time synchronization (step S115).

[0143] Next, when the detection unit 92B detects an abnormality related to time synchronization such as a transmission delay of a response message ("YES" in step S115), the detection unit 92B notifies the recording unit 93B of the detection result. Then, the recording unit 93B stores information related to the abnormality indicated by the detection result notified from the detection unit 92B in the storage unit 83B (step S116).

[0144] On the other hand, if there is no abnormality regarding time synchronization ("NO" in step S115), the detection unit 92B does not notify the recording unit 93B of the detection result, for example.

[0145] The operations of steps S101 to S103 may be performed after the operations of steps S104 and S105. Moreover, the operations of steps S101 to S103 and the operations of steps S104 and S105 may be performed in parallel.

[0146] Furthermore, the operations of steps S106 and S107 may be performed after the operations of steps S108 and S109. Furthermore, the operations of steps S106 and S107 and the operations of steps S108 and S109 may be performed in parallel.

[0147] Furthermore, the operations of steps S110 to S114 may be performed after the operations of steps S115 and S116. Furthermore, the operations of steps S110 to S114 and the operations of steps S115 and S116 may be performed in parallel.

[0148] [Procedure for time correction] Next, the operation of the switch device 101 and the slave side functional unit 111B in the in-vehicle network system 301 when correcting the time will be described with reference to the drawings.

[0149] FIG. 11 is a diagram showing a sequence of time correction by a plurality of in-vehicle devices in the in-vehicle network system according to the embodiment of the present disclosure.

[0150] 11, first, the processing unit 91A in the functional unit 111A transmits a Sync message to the switch device 101 (step S121).

[0151] Next, the processor 91A transmits a follow-up message including the transmission time tm of the Sync message to the switch device 101 (step S122).

[0152] Next, the control unit 62 in the switch device 101 receives the Sync message and the follow-up message sent from the functional unit 111A via the communication port 54A, and notifies the time synchronization unit 52 of the time tm contained in the follow-up message and the reception time tx of the Sync message (step S123).

[0153] Next, the processing unit 63 in the time synchronization unit 52 calculates the time difference Tx1 = tm - Td1 - tx between the time of the functional unit 111A and the time of the switch device 101 based on the times tm, tx notified from the control unit 62 and the propagation delay time Td1 stored in the memory unit 53.

[0154] Then, the processing unit 63 uses the calculated time difference Tx1 to correct the time in its own switching device 101. As a result, time synchronization is established between the functional unit 111A and the switching device 101 (step S124).

[0155] Next, the processing unit 63 in the switch device 101 transmits a Sync message to the functional unit 111B via the communication port 54B (step S125).

[0156] Next, the processing unit 63 transmits a follow-up message including the transmission time ty of the Sync message to the functional unit 111B via the communication port 54B (step S126).

[0157] Next, the communication unit 81B in the functional unit 111B receives the Sync message and the follow-up message sent from the switch device 101 via the communication port 84B, and notifies the time synchronization unit 82B of the time ty contained in the follow-up message and the reception time ts of the Sync message (step S127).

[0158] Next, the processing unit 91B in the time synchronization unit 82B calculates the time difference Tx2=ty-Td2-ts between the time of the switch device 101 and the time of the functional unit 111B based on the times ty, ts notified from the communication unit 81B and the propagation delay time Td2 stored in the memory unit 83B.

[0159] Then, the processing unit 91B corrects the time in its own functional unit 111B by using the calculated time difference Tx2. This establishes time synchronization between the functional unit 111B and the switch device 101, and as a result, establishes time synchronization between the functional unit 111B and the functional unit 111A (step S128).

[0160] The operations of steps S121 to S124 may be performed after the operations of steps S125 to S128. Moreover, the operations of steps S121 to S124 and the operations of steps S125 to S128 may be performed in parallel.

[0161] Meanwhile, each in-vehicle device in an in-vehicle network periodically updates the data propagation delay time between the in-vehicle devices in accordance with a protocol defined by a standard such as IEEE 802.1, and performs time synchronization between the in-vehicle devices using the updated propagation delay time.

[0162] However, there is a possibility that anomalies in time synchronization may occur, such as a sudden change in data propagation delay time between vehicle-mounted devices. In such cases, there is a risk of problems such as a decrease in the accuracy of time synchronization.

[0163] In contrast, in the switch device 101, which is an in-vehicle device according to the embodiment of the present disclosure, the processing unit 63 transmits to the other device, which is another in-vehicle device, request information for requesting time information used to update the propagation delay time of data between the switch device 101 and the other device. The processing unit 63 also updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time. The detection unit 64 detects an abnormality in the time synchronization and obtains information regarding the detected abnormality.

[0164] In addition, in the slave functional unit 111B which is an in-vehicle device according to the embodiment of the present disclosure, the processing unit 91B transmits request information to another device which is another in-vehicle device, for requesting time information used to update the propagation delay time of data between the functional unit 111B itself and the other device. The processing unit 91B also updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time. The detection unit 92B detects an abnormality in the time synchronization and obtains information regarding the detected abnormality.

[0165] In addition, in the time synchronization method in the switch device 101 according to the embodiment of the present disclosure, first, the processing unit 63 transmits request information to another device, which is another in-vehicle device, to request time information used to update the propagation delay time of data between the switch device 101 itself and the other device. Next, the processing unit 63 receives the time information transmitted from the other device. Next, the processing unit 63 updates the propagation delay time based on the received time information. Next, the processing unit 63 performs time synchronization with the other device based on the updated propagation delay time. Next, the detection unit 64 detects an abnormality regarding the time synchronization and obtains information regarding the detected abnormality.

[0166] In addition, in the time synchronization method in the slave-side functional unit 111B according to the embodiment of the present disclosure, first, the processing unit 91B transmits request information to another device, which is another in-vehicle device, to request time information used to update the propagation delay time of data between the functional unit 111B itself and the other device. Next, the processing unit 91B receives the time information transmitted from the other device. Next, the processing unit 91B updates the propagation delay time based on the received time information. Next, the processing unit 91B performs time synchronization with the other device based on the updated propagation delay time. Next, the detection unit 92B detects an abnormality in the time synchronization and obtains information regarding the detected abnormality.

[0167] In this way, by using a configuration that detects abnormalities in time synchronization, it is possible to grasp the occurrence of an abnormality and take appropriate measures, such as quickly taking steps to resolve the cause of the abnormality.

[0168] Therefore, in the in-vehicle device and the time synchronization method according to the embodiment of the present disclosure, time synchronization between the in-vehicle devices can be performed more stably.

[0169] Furthermore, time synchronization is performed between the functional unit 111A on the master side, which is an in-vehicle device according to the embodiment of the present disclosure, and another device, which is another in-vehicle device, based on a data propagation delay time between the functional unit 111A and the other device. In the functional unit 111A, the processing unit 91A receives request information for requesting time information used to update the propagation delay time from the other device, and transmits the time information to the other device. The detection unit 92A detects an abnormality in the time synchronization and obtains information related to the detected abnormality.

[0170] In the time synchronization method in the master side functional unit 111A according to the embodiment of the present disclosure, first, the processing unit 91A receives request information for requesting time information used to update the propagation delay time from another device, which is another in-vehicle device. Next, the processing unit 91A transmits the time information to the other device. Next, the detection unit 92A detects an abnormality related to the time synchronization and obtains information related to the detected abnormality.

[0171] In this way, by using a configuration that detects abnormalities in time synchronization, it is possible to grasp the occurrence of an abnormality and take appropriate measures, such as quickly taking steps to resolve the cause of the abnormality.

[0172] Therefore, in the in-vehicle device and the time synchronization method according to the embodiment of the present disclosure, time synchronization between the in-vehicle devices can be performed more stably.

[0173] Furthermore, by detecting an abnormality in time synchronization in the functional unit 111A that is the source of the time information, i.e., the in-vehicle device that holds the reference time in the in-vehicle network system 301, an abnormality in time synchronization can be detected more reliably.

[0174] The above-described embodiments should be considered as illustrative and not restrictive in all respects. The scope of the present disclosure is defined by the claims, not the above description, and is intended to include all modifications within the meaning and scope of the claims.

[0175] The above description includes the following additional features. [Appendix 1] An in-vehicle device, a processing unit that transmits request information to the other device, which is another in-vehicle device, for requesting time information used to update a propagation delay time of data between the in-vehicle device and the in-vehicle device itself, updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time; a detection unit that detects an abnormality related to the time synchronization and acquires information about the detected abnormality; The detection unit is capable of detecting an abnormality other than the time synchronization abnormality in addition to the time synchronization abnormality, The in-vehicle device further comprises: A recording unit that stores information about the abnormality detected by the detection unit in a storage unit, The recording unit stores at least one of a time when the abnormality occurred, a location where the abnormality occurred, and a cause of the abnormality in the storage unit as information regarding the abnormality.

[0176] [Appendix 2] An in-vehicle device, time synchronization is performed between the other device, which is another in-vehicle device, and the in-vehicle device itself based on a data propagation delay time between the other device and the in-vehicle device itself; a processing unit that receives request information for requesting time information used to update the propagation delay time from the other device and transmits the time information to the other device; a detection unit that detects an abnormality related to the time synchronization and acquires information about the detected abnormality; the in-vehicle device holds a reference time in an in-vehicle network; The detection unit is capable of detecting an abnormality other than the time synchronization abnormality in addition to the time synchronization abnormality, The in-vehicle device further comprises: A recording unit that stores information about the abnormality detected by the detection unit in a storage unit, The recording unit stores at least one of a time when the abnormality occurred, a location where the abnormality occurred, and a cause of the abnormality in the storage unit as information regarding the abnormality. [Explanation of symbols]

[0177] 1 vehicle 10 Ethernet cable 51 Relay Section 52,82A,82B Time synchronization part 53,83,83A,83B Storage section 54, 54A, 54B, 84A, 84B Communication ports 61 Switch section 62 Control section 63, 91A, 91B Processing section 64, 92, 92A, 92B Detection unit 65, 93, 93A, 93B Recording section 81A, 81B Communication section 101 Switching device 111,111A,111B Functional part 301 In-vehicle network system

Claims

1. An in-vehicle device, a processing unit that transmits request information to the other device, which is another in-vehicle device, for requesting time information used to update a propagation delay time of data between the in-vehicle device and the in-vehicle device itself, updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time; a detection unit that detects an abnormality related to the time synchronization and acquires information about the detected abnormality; the detection unit is capable of detecting, as the abnormality related to the time synchronization, a plurality of types of abnormality related to transmission of at least one of the request information and the time information, and an abnormality related to a time stamp function; The in-vehicle device further comprises: An in-vehicle device comprising: a recording unit configured to store, in a memory unit of the in-vehicle device itself, identification information corresponding to a type of abnormality detected by the detection unit.

2. An in-vehicle device, time synchronization is performed between the other device, which is another in-vehicle device, and the in-vehicle device itself based on a data propagation delay time between the other device and the in-vehicle device itself; a processing unit that receives request information for requesting time information used to update the propagation delay time from the other device and transmits the time information to the other device; a detection unit that detects an abnormality related to the time synchronization and acquires information about the detected abnormality; the detection unit is capable of detecting, as the abnormality related to the time synchronization, a plurality of types of abnormality related to transmission of at least one of the request information and the time information, and an abnormality related to a time stamp function; The in-vehicle device further comprises: An in-vehicle device comprising: a recording unit configured to store, in a memory unit of the in-vehicle device itself, identification information corresponding to a type of abnormality detected by the detection unit.

3. The in-vehicle device according to claim 1 , wherein the detection unit detects a delay or interruption in transmission of at least one of the request information and the time information as the abnormality regarding the time synchronization.

4. A method for detecting an abnormality in an in-vehicle device, comprising: transmitting request information to the other in-vehicle device for requesting time information used for updating a propagation delay time of data between the other in-vehicle device and the in-vehicle device of the own; receiving the time information transmitted from the other device; updating the propagation delay time based on the received time information; performing time synchronization with the other device based on the updated propagation delay time; detecting an anomaly related to the time synchronization and acquiring information related to the detected anomaly; In the step of detecting an anomaly, as the anomaly related to the time synchronization, a plurality of types of anomalies related to transmission of at least one of the request information and the time information, and an anomaly related to a time stamp function can be detected; The anomaly detection method further comprises: An anomaly detection method comprising the step of storing identification information corresponding to a type of the detected anomaly in a memory unit of the in-vehicle device.

5. A method for detecting an abnormality in an in-vehicle device, comprising: time synchronization is performed between the other device, which is another in-vehicle device, and the in-vehicle device itself based on a data propagation delay time between the other device and the in-vehicle device itself; receiving request information from the other device for requesting time information used to update the propagation delay time; transmitting the time information to the other device; detecting an anomaly related to the time synchronization and acquiring information related to the detected anomaly; In the step of detecting an anomaly, as the anomaly related to the time synchronization, a plurality of types of anomalies related to transmission of at least one of the request information and the time information, and an anomaly related to a time stamp function can be detected; The anomaly detection method further comprises: An anomaly detection method comprising the step of storing identification information corresponding to a type of the detected anomaly in a memory unit of the in-vehicle device.

6. An abnormality detection program for use in an in-vehicle device, Computer, a processing unit that transmits request information to the other device, which is another in-vehicle device, for requesting time information used to update a propagation delay time of data between the in-vehicle device and the in-vehicle device itself, updates the propagation delay time based on the time information transmitted from the other device, and performs time synchronization with the other device based on the updated propagation delay time; A detection unit that detects an abnormality related to the time synchronization and acquires information regarding the detected abnormality; It is a program to function as the detection unit is capable of detecting, as the abnormality related to the time synchronization, a plurality of types of abnormality related to transmission of at least one of the request information and the time information, and an abnormality related to a time stamp function; In addition, the computer a recording unit that stores identification information corresponding to the type of abnormality detected by the detection unit in a memory unit of the in-vehicle device; An anomaly detection program to function as a

7. An abnormality detection program for use in an in-vehicle device, time synchronization is performed between the other device, which is another in-vehicle device, and the in-vehicle device itself based on a data propagation delay time between the other device and the in-vehicle device itself; Computer, a processing unit that receives request information for requesting time information used to update the propagation delay time from the other device and transmits the time information to the other device; A detection unit that detects an abnormality related to the time synchronization and acquires information regarding the detected abnormality; It is a program to function as the detection unit is capable of detecting, as the abnormality related to the time synchronization, a plurality of types of abnormality related to transmission of at least one of the request information and the time information, and an abnormality related to a time stamp function; In addition, the computer a recording unit that stores identification information corresponding to the type of abnormality detected by the detection unit in a memory unit of the in-vehicle device; An anomaly detection program to function as a

Images