ACTUATOR SYSTEM, VEHICLE, VEHICLE CONTROL METHOD, AND PROGRAM

Abstract

To provide a vehicle capable of preventing a request (action plan) by application from being tampered.SOLUTION: A power train system 302 (actuator system) (first actuator system) includes a vehicle speed control application A (first application) and a vehicle speed control application B (first application) for setting an action plan (first action plan) of a vehicle 1, and a mediation part 302c (first mediation part) for mediating multiple action plans including the action plan.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present disclosure relates to an actuator system, a vehicle, a vehicle control method, and a program. [Background technology]

[0002] For example, the control device described in JP 2020-032892 A (Patent Document 1) includes a request arbitration unit that arbitrates motion requests from multiple application request units related to driving assistance. This request arbitration unit is provided in a brake ECU, which is a control device for controlling the brakes of a vehicle. The application request unit and the brake ECU (request arbitration unit) are included in different ECUs. That is, the application request unit and the brake ECU can communicate with each other through inter-ECU communication. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2020-032892 A Summary of the Invention [Problem to be solved by the invention]

[0004] In the control device described in the above Patent Document 1, as described above, the application request unit and the brake ECU (request arbitration unit) are included in different ECUs and can communicate with each other through inter-ECU communication. Therefore, when a request (action request) from the application request unit is transmitted to the request arbitration unit, the request (action plan) may be tampered with between the ECUs. Therefore, it is desired to prevent the request (action plan) by the application from being tampered with.

[0005] The present disclosure has been made to solve such problems, and an object of the present disclosure is to provide an actuator system, a vehicle, a vehicle control method, and a program that are capable of preventing tampering with requests (action plans) made by an application. [Means for solving the problem]

[0006] An actuator system according to a first aspect of the present disclosure is an actuator system for controlling an operation of a vehicle, comprising: No. 1 At least one application that sets an action plan and arbitrates a plurality of action plans including the action plan set by the at least one application. No. 1 The arbitration department, A first processing unit and a second processing unit provided separately from each other; Equipped with. The first processing unit determines whether a first action plan set by the application is normal or not, and rejects or modifies the first action plan when it is determined that the first action plan is not normal. The second processing unit determines whether a second action plan of the vehicle set by another actuator system different from the actuator system is normal or not, and rejects or modifies the second action plan when it is determined that the second action plan is not normal. The first arbitration unit arbitrates between the result processed by the first processing unit and the result processed by the second processing unit.

[0007] As described above, the actuator system according to the first aspect includes an application and an arbitration unit. Therefore, since the application and the arbitration unit are included in a common system (actuator system), the arbitration unit can easily obtain a request (action plan) by the application without using communication. As a result, the request (action plan) by the application is not tampered with during communication, so that the request (action plan) by the application can be suppressed from being tampered with.

[0008] The actuator system according to the first aspect described above preferably further comprises an actuator for controlling driving of the vehicle, and an actuator control unit for controlling operation of the actuator, the actuator control unit including an application and No. 1 With this configuration, the application and the arbitration unit are included in a common part (actuator control unit) of the actuator system, so that the arbitration unit can more easily obtain the request (action plan) by the application without using communication. As a result, it is possible to further prevent the request (action plan) by the application from being tampered with.

[0009] In the actuator system according to the first aspect, preferably ,a The actuator includes a power train. With this configuration, it is possible to prevent tampering with a request (action plan) from an actuator system (power train system) that controls the power train.

[0010] In this case, preferably, the at least one application includes an application for limiting the speed of the vehicle. With this configuration, it is possible to prevent tampering with the request (action plan) for limiting the speed of the vehicle.

[0011] A vehicle according to a second aspect of the present disclosure includes: And ,car Both a first actuator system for controlling the movement; a second actuator system different from the first actuator system; Equipped with do. The first actuator system includes at least one first application that sets a first action plan for the vehicle, and a first arbitration unit that arbitrates a plurality of action plans including the first action plan; A first processing unit and a second processing unit provided separately from each other; Includes. The first processing unit determines whether a first action plan set by the first application is normal or not, and rejects or modifies the first action plan when it is determined that the first action plan is not normal. The second processing unit determines whether a second action plan for the vehicle set by the second actuator system is normal or not, and rejects or modifies the second action plan when it is determined that the second action plan is not normal. The first arbitration unit arbitrates between the results processed by the first processing unit and the results processed by the second processing unit. .

[0012] In the vehicle according to the second aspect, as described above, the vehicle includes the at least one application and an arbitration unit that arbitrates a plurality of action plans including the action plan set by the at least one application. Therefore, since the first application and the first arbitration unit are included in a common system (first actuator system), the request (action plan) by the first application can be easily acquired by the first arbitration unit without using communication. As a result, it is possible to provide a vehicle that can prevent the request (first action plan) by the first application from being tampered with.

[0013] A vehicle according to the second aspect above. In , preferably The first actuator system arbitrates a plurality of action plans including the first action plan and includes a second arbitration unit different from the first arbitration unit. Vehicle number 3 A second application to set up an action plan and , 2nd keyThe result of the arbitration by the arbitration division and the second application 3 Action Plan and Mediation 3 The second application includes an arbitration unit. With this configuration, the request (action plan) of the second application is not directly input to the predetermined system to which the action plan by the second application is transmitted, but the result of arbitration of the request of the second application by the second arbitration unit is input. As a result, even if the number of requests (second action plans) by the second application is increased, there is no need to increase the interface between the second arbitration unit and the predetermined system. That is, the interface between the second actuator system and the predetermined system can be unified into the interface between the second arbitration unit and the predetermined system. As a result, even if the number of requests (second action plans) by the second application is increased, the configuration of the vehicle can be prevented from becoming complicated.

[0014] In this case, preferably, the vehicle further includes a driving assistance system that sets a driving assistance action plan regarding driving assistance for the vehicle, 3 The driving assistance action plan is set based on the result of the arbitration by the arbitration unit. With this configuration, the interface between the second actuator system and the driving assistance system can be unified with the interface between the second arbitration unit and the driving assistance system.

[0015] In the vehicle according to the second aspect, preferably, The driving assistance system includes a third application and a fourth application that set a driving assistance action plan. The second actuator system includes a fourth arbitration unit that arbitrates between the driving assistance action plan set by the third application and the driving assistance action plan set by the fourth application. The first actuator system includes a third processing unit that determines whether the fourth action plan based on the result of arbitration by the fourth arbitration unit is normal or not, and rejects or modifies the fourth action plan when it is determined that the fourth action plan is not normal, and controls the operation of the vehicle based on the arbitration result by the first arbitration unit and the processing result by the third processing unit. With this configuration, the second arbitration section included in the first actuator system can easily arbitrate between a request (action plan) made by a first application included in the first actuator system and a request (third action plan) made by a third actuator system different from the first actuator system.

[0016] In this case, preferably, the first actuator system includes a first processing unit and a second processing unit that are provided separately from each other, the first processing unit judges whether or not the first action plan set by the first application is normal, and rejects or modifies the first action plan when it is judged that the first action plan is not normal, the second processing unit judges whether or not the third action plan set by the third actuator system is normal, and rejects or modifies the third action plan when it is judged that the third action plan is not normal, and the second arbitration unit arbitrates between the result processed by the first processing unit and the result processed by the second processing unit. With this configuration, when at least one of the first action plan and the third action plan is abnormal, the first processing unit and the second processing unit can reject or modify the at least one of the abnormal plans. As a result, arbitration based on the abnormality can be suppressed in the second arbitration unit.

[0017] A vehicle control method according to a third aspect of the present disclosure includes: A vehicle control method using an actuator system for controlling the operation of a vehicle, comprising: a setting step of setting a first action plan for the vehicle; an arbitration step of arbitrating a plurality of action plans including the set first action plan; a first processing step of judging whether the set first action plan is normal or not, and rejecting or modifying the first action plan when it is judged that the first action plan is not normal; and a second processing step of judging whether a second action plan for the vehicle, set by another actuator system different from the actuator system, is normal or not, and rejecting or modifying the second action plan when it is judged that the second action plan is not normal. The arbitration step includes a step of arbitrating a result processed in the first processing step and a result processed in the second processing step. .

[0018] In the vehicle control method according to the third aspect, as described above, a plurality of action plans including an action plan set by at least one application included in the actuator system are accepted, and the plurality of action plans are arbitrated by an arbitration unit included in the actuator system. Therefore, since the first application and the first arbitration unit are included in a common system (first actuator system), the request (action plan) by the first application can be easily acquired by the first arbitration unit without using communication. As a result, it is possible to provide a vehicle control method capable of suppressing tampering with the request (first action plan) by the first application.

[0019] A program according to a fourth aspect of the present disclosure, The computer executes the vehicle control method according to the third aspect.

[0020] In the program according to the fourth aspect, as described above, the computer receives a plurality of action plans including an action plan set by at least one application included in the actuator system, and an arbitration unit included in the actuator system arbitrates the plurality of action plans. Therefore, since the first application and the first arbitration unit are included in a common system (first actuator system), the first arbitration unit can easily obtain a request (action plan) by the first application without using communication. As a result, it is possible to provide a program that can prevent tampering with the request (first action plan) by the first application. Effect of the Invention

[0021] According to the present disclosure, it is possible to prevent requests (action plans) made by applications from being tampered with. [Brief description of the drawings]

[0022] [Figure 1] 1 is a diagram showing a configuration of a vehicle according to a first embodiment. [Diagram 2] FIG. 2 is a diagram showing a detailed configuration of a vehicle according to the first embodiment. [Diagram 3] FIG. 2 is a flowchart showing a vehicle control method according to the first embodiment. [Figure 4] FIG. 11 is a diagram showing a configuration of a vehicle according to a second embodiment. [Diagram 5] FIG. 11 is a flowchart showing a vehicle control method according to a second embodiment. [Figure 6] FIG. 11 is a diagram showing a configuration of a vehicle according to a modification of the first and second embodiments. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] [First embodiment] Hereinafter, a first embodiment of the present disclosure will be described in detail with reference to the drawings. In the drawings, the same or corresponding parts are denoted by the same reference characters and their description will not be repeated.

[0024] (Vehicle configuration) 1 is a diagram showing an example of a configuration of a vehicle 1. As shown in FIG. 1, the vehicle 1 includes an ADAS-ECU (Electronic Control Unit) 10, a brake ECU 20, an actuator system 30, and a central ECU 40.

[0025] Vehicle 1 may be any vehicle having a configuration capable of realizing the functions of the driving assistance system described below, and may be, for example, a vehicle powered by an engine, an electric vehicle powered by an electric motor, or a hybrid vehicle equipped with an engine and an electric motor and using at least one of them as a power source.

[0026] The ADAS-ECU 10, the brake ECU 20, the powertrain ECU 302b described below, and the central ECU 40 are all computers having a processor that executes programs such as a CPU (Central Processing Unit), a memory, and an input / output interface. Therefore, each functional block (see FIG. 2) included in the brake ECU 20 and the powertrain ECU 302b is software that performs a function by executing a program by a computer.

[0027] The ADAS-ECU 10 includes a driving assistance system 100 having a function related to driving assistance of the vehicle 1. The driving assistance system 100 sets an action plan related to driving assistance of the vehicle 1. Specifically, the driving assistance system 100 is configured to realize various functions for assisting driving of the vehicle 1, including at least one of steering control, drive control, and braking control of the vehicle 1, by executing an application implemented therein. Examples of applications implemented in the driving assistance system 100 include an application that realizes the function of an autonomous driving system (AD), an application that realizes the function of an automatic parking system, and an application that realizes the function of an advanced driver assistance system (ADAS) (hereinafter referred to as an ADAS application). The action plan set by the driving assistance system 100 is an example of a "driving assistance action plan" of the present disclosure.

[0028] Examples of ADAS applications include at least one of the following: an application that realizes a function of adaptive cruise control (ACC (Adaptive Cruise Control) etc.) that maintains a constant distance from the vehicle ahead; an application that realizes an auto speed limiter (ASL) function that recognizes vehicle speed limits and maintains the upper limit of the vehicle's speed; an application that realizes a lane keeping assist (LKA (Lane Keeping Assist) or LTA (Lane Tracing Assist) etc.) that maintains the vehicle in the lane in which it is traveling; an application that realizes a collision mitigation braking function (AEB (Autonomous Emergency Braking) or PCS (Pre-Crash Safety) etc.) that automatically applies the brakes to reduce the damage of a collision; and an application that realizes a lane departure warning function (LDW (Lane Departure Warning) or LDA (Lane Departure Alert) etc.) that warns of vehicle 1 departing from its lane.

[0029] Each application of the driving assistance system 100 outputs a request for an action plan that ensures the marketability (function) of the application alone to the brake ECU 20 (more specifically, the motion manager 200) based on information on the vehicle surroundings situation acquired (input) from a plurality of sensors (not shown) and an assistance request from the driver. The plurality of sensors include, for example, a vision sensor such as a forward-facing camera, a radar, a LiDAR (Light Detection And Ranging), or a position detection device.

[0030] Each application acquires information on the vehicle's surroundings that is an integration of detection results from one or more sensors as recognition sensor information, and also acquires assistance requests from the driver via a user interface (not shown) such as a switch. Each application can recognize other vehicles, obstacles, or people around the vehicle by, for example, processing images and videos of the vehicle's surroundings acquired by multiple sensors using artificial intelligence (AI) or an image processing processor.

[0031] The action plan also includes, for example, requirements regarding the longitudinal acceleration / deceleration to be generated in the vehicle 1, requirements regarding the steering angle of the vehicle 1, requirements regarding keeping the vehicle 1 stationary, and the like.

[0032] The request related to the longitudinal acceleration / deceleration to be generated in the vehicle 1 includes, for example, an operation request to the powertrain system 302 and an operation request to the brake 304. The brake ECU 20 and the brake 304 configure a brake system 304a. The powertrain system 302 is an example of a "first actuator system" and an "actuator system" in the present disclosure. The brake system 304a is an example of a "second actuator system" in the present disclosure.

[0033] In addition, the applications implemented in the driving assistance system 100 are not limited to the applications described above, and applications that realize other functions may be added, or existing applications may be omitted, and there is no particular limit to the number of applications implemented.

[0034] In the first embodiment, the ADAS-ECU 10 is described as including the driving assistance system 100 configured by a plurality of applications, but, for example, an ECU may be provided for each application. For example, the driving assistance system 100 may be configured by an ECU in which an application for implementing the functions of an automatic driving system is implemented, an ECU in which an application for implementing the functions of an automatic parking system is implemented, and an ECU in which an ADAS application is implemented.

[0035] The brake ECU 20 includes a motion manager 200. In the first embodiment, a case where the brake ECU 20 is a hardware configuration including the motion manager 200 will be described as an example, but the motion manager 200 may be provided as a standalone ECU separate from the brake ECU 20, or may be included in another ECU different from the brake ECU 20. The brake ECU 20 is configured to be able to communicate with each of the ADAS-ECU 10, various ECUs included in the actuator system 30, and the central ECU 40.

[0036] The motion manager 200 requests the actuator system 30 to move the vehicle 1 in accordance with an action plan set in at least one of a plurality of applications of the driving assistance system 100. A detailed configuration of the motion manager 200 will be described later.

[0037] The actuator system 30 is configured to realize a request for the motion of the vehicle 1 output from the motion manager 200. The actuator system 30 includes a plurality of actuators. FIG. 1 shows an example in which the actuator system 30 includes, for example, a powertrain system 302 (powertrain 302a, see FIG. 2), a brake 304, and a steering system 306 (steering device) as actuators. Note that the number of actuators to which the motion manager 200 sends a request is not limited to three as described above, and may be four or more, or two or less. Note that the powertrain 302a is an example of an "actuator" in the present disclosure.

[0038] The powertrain system 302 controls the operation of the vehicle body 1a provided in the vehicle 1. The powertrain system 302 includes a powertrain 302a (see FIG. 2) capable of controlling the drive of the vehicle 1 (vehicle body 1a) (generating driving force to the drive wheels), and a powertrain ECU 302b (see FIG. 2) that controls the operation of the powertrain 302a. The powertrain 302a includes at least one of an internal combustion engine such as a gasoline engine or a diesel engine, a transmission including a gearbox and a differential device, a motor generator serving as a drive source, a power storage device that stores power to be supplied to the motor generator, a power conversion device that converts power between the motor generator and the power storage device, and a power generation source such as a fuel cell. The powertrain ECU 302b that controls the operation of the powertrain 302a controls the corresponding devices in the powertrain system 302 so as to realize a motion request from the motion manager 200 to the corresponding devices. The powertrain ECU 302b is an example of an "actuator control unit" in the present disclosure.

[0039] The brake system 304a controls the operation of the vehicle body 1a. The brake system 304a is a system different from (provided separately from) the powertrain system 302. The brake 304 includes, for example, a plurality of braking devices provided on each wheel of the vehicle 1. The braking device includes, for example, a hydraulic brake such as a disk brake that generates a braking force using hydraulic pressure. The braking device may further include, for example, a motor generator connected to the wheel and generating a regenerative torque. The braking operation of the vehicle 1 using the plurality of braking devices is controlled by the brake ECU 20. The brake ECU 20 includes, for example, a control unit (not shown) for controlling the brake 304, separate from the motion manager 200.

[0040] Steering system 306 includes, for example, a steering device capable of changing the steering angle of steered wheels (for example, front wheels) of vehicle 1, and an ECU (neither shown) that controls the operation of the steering device. The steering device includes, for example, a steering wheel that changes the steering angle according to the amount of operation, and an electric power steering (EPS: Electric Power Steering) that can adjust the steering angle by an actuator separately from the operation of the steering wheel. The ECU that controls the operation of the steering device controls the operation of the actuator of the EPS.

[0041] The central ECU 40 includes a memory 42 that can update stored contents. The central ECU 40 is configured to be able to communicate with, for example, the brake ECU 20, and is also configured to be able to communicate with a device (for example, a server) outside the vehicle 1 (not shown) via a communication module (not shown).

[0042] FIG. 2 is a diagram showing detailed configurations of the exercise manager 200, the driving assistance system 100, and the powertrain ECU 302b.

[0043] The powertrain ECU 302b includes a vehicle speed limiting application A (hereinafter referred to as the vehicle speed limiting application A) and a vehicle speed limiting application B (hereinafter referred to as the vehicle speed limiting application B) that set an action plan for the vehicle 1. The action plan (upper limit value of the vehicle speed) for the vehicle 1 set by each of the vehicle speed limiting application A and the vehicle speed limiting application B is arbitrated by the arbitration unit 302c. In this case, the smaller of the upper limit value of the vehicle speed set by the vehicle speed limiting application A and the upper limit value of the vehicle speed set by the vehicle speed limiting application B becomes the arbitration result in the arbitration unit 302c. The arbitration result of the arbitration unit 302c is input to the arbitration unit 201 of the exercise manager 200, which will be described later. Each of the vehicle speed limiting application A and the vehicle speed limiting application B is an example of the "first application" of the present disclosure. Also, the arbitration unit 302c is an example of the "first arbitration unit" and the "first arbitration arbitration unit" of the present disclosure. Moreover, the action plan for the vehicle 1 set by each of the vehicle speed limiting application A and the vehicle speed limiting application B is an example of the "first action plan" of the present disclosure.

[0044] The vehicle speed limiting application A includes, for example, a fixed speed limiter. Specifically, the vehicle speed limiting application A is an application for constantly limiting the upper limit of the vehicle speed so as not to exceed a predetermined value (for example, 80 km / h). The vehicle speed limiting application B includes, for example, a speed limiter using urea SCR (Selective Catalytic Reduction) for large diesel vehicles. Specifically, the vehicle speed limiting application B is an application for limiting the upper limit of the vehicle speed so as not to exceed a predetermined value (for example, 100 km / h) when the amount of the catalyst (urea) in the vehicle 1 becomes equal to or less than a predetermined amount. That is, the vehicle speed limiting application B sets the upper limit of the vehicle speed (action plan) to the above-mentioned predetermined value (100 km / h) when the amount of the catalyst (urea) in the vehicle 1 becomes equal to or less than the predetermined amount. As described above, the upper limit of the vehicle speed set by the vehicle speed limiting application A and the upper limit of the vehicle speed set by the vehicle speed limiting application B are different values.

[0045] One of the vehicle speed limiting application A and the vehicle speed limiting application B may be a speed limiter in range mode. The speed limiter in range mode is an application for setting the upper limit of the vehicle speed to a predetermined value (e.g., 90 km / h) so that long distance travel is possible based on, for example, the user's operation of the range of the vehicle 1 or the remaining battery level of the vehicle 1. An action plan (upper limit of the vehicle speed) of the speed limiter in range mode may be input to an unused input port 302d (described later) of the arbitration unit 302c. The control of the vehicle speed limiting application A and the vehicle speed limiting application B is not limited to the above example.

[0046] Here, when the speed limiting application A (speed limiting application B) and the arbitration unit 302c are included in different systems (ECUs), the request (action plan) by the speed limiting application A (speed limiting application B) may be tampered with between the systems (ECUs). Therefore, it is desirable to prevent the request (action plan) by the speed limiting application A (speed limiting application B) from being tampered with.

[0047] Therefore, in the first embodiment, the powertrain system 302 includes a vehicle speed limiting application A, a vehicle speed limiting application B, and an arbitration unit 302c. In other words, the vehicle speed limiting application A, the vehicle speed limiting application B, and the arbitration unit 302c are included in a common system (the powertrain system 302).

[0048] Specifically, the powertrain ECU 302b includes a vehicle speed limiting application A, a vehicle speed limiting application B, and the arbitration unit 302c. In other words, the vehicle speed limiting application A, the vehicle speed limiting application B, and the arbitration unit 302c are included in a common ECU (the powertrain ECU 302b).

[0049] As a result, the requests (action plans) from the speed limiting application A and the speed limiting application B are transmitted to the arbitration unit 302c without communication using a controller area network (CAN) or the like. In other words, the arbitration unit 302c acquires the requests (action plans) from each of the speed limiting application A and the speed limiting application B without using communication.

[0050] The arbitration unit 302c also includes a plurality of input ports 302d (three in FIG. 2) for acquiring action plans from a plurality of applications including a vehicle speed limiting application A and a vehicle speed limiting application B. In FIG. 2, one of the three input ports 302d has not received a request (action plan) from an application. Therefore, the arbitration unit 302c can arbitrate a request (action plan) from one more application.

[0051] The powertrain ECU 302b includes a processing unit 302e and a driving force control unit 302f. The driving force control unit 302f controls the driving force for driving the powertrain 302a. The processing unit 302e will be described in detail later.

[0052] Moreover, the brake system 304a (brake ECU 20, motion manager 200) includes an arbitration unit 201, a vehicle speed limiting application C (hereinafter referred to as vehicle speed limiting application C), an arbitration unit 202, and a distribution unit 203. Note that the arbitration unit 201 and the vehicle speed limiting application C are examples of a "second arbitration unit" and a "second application" of the present disclosure, respectively.

[0053] The vehicle speed limiting application C sets an action plan (upper limit of vehicle speed) for the vehicle 1. Specifically, the vehicle speed limiting application C is an application for limiting the upper limit of vehicle speed (e.g., 30 km / m) when an abnormality occurs in the steering system 306 (see FIG. 1). That is, the vehicle speed limiting application C sets the upper limit of vehicle speed (action plan) to the above-mentioned predetermined value (30 km / h) when an abnormality occurs in the steering system 306. Note that the vehicle speed limiting application C may be included in the steering system 306. The action plan set by the vehicle speed limiting application C is an example of the "second action plan" of the present disclosure.

[0054] In the first embodiment, the arbitration unit 201 arbitrates between the arbitration result by the arbitration unit 302c of the powertrain system 302 and the action plan (upper limit value of the vehicle speed) set by the vehicle speed limit application C. Specifically, the smaller one of the vehicle speed limit value by the arbitration unit 302c and the vehicle speed limit value set by the vehicle speed limit application C becomes the arbitration result in the arbitration unit 201.

[0055] As described above, the vehicle speed limiting application C and the arbitration unit 201 are included in a common ECU (the brake ECU 20). As a result, the request (action plan) by the vehicle speed limiting application C is transmitted to the arbitration unit 201 without using communication such as a CAN. In other words, the arbitration unit 201 obtains the request (action plan) by the vehicle speed limiting application C without using communication.

[0056] The arbitration unit 201 also includes multiple (three in FIG. 2) input ports 201a for acquiring the request (action plan) of the vehicle speed limiting application C and the arbitration result of the arbitration unit 302c. In FIG. 2, one of the three input ports 201a has not received a request (action plan) from an application. Therefore, the arbitration unit 201 can arbitrate a request (action plan) from one more application.

[0057] The driving assistance system 100 also includes an acceleration requesting application D (hereinafter referred to as acceleration requesting application D) and an acceleration requesting application E (hereinafter referred to as acceleration requesting application E).

[0058] Each of the acceleration request application D and the acceleration request application E is an application that sets a lower limit value of the acceleration of the vehicle 1 under a predetermined condition as a request (action plan). For example, the acceleration request application D sets the lower limit value of the acceleration to, for example, −30 m / s when a collision of the vehicle 1 is predicted. 2 In addition, the acceleration request application E normally sets the lower limit of acceleration to, for example, +10 m / s 2 That is, the lower limit of acceleration in the acceleration request application D and the lower limit of acceleration in the acceleration request application E are different values. Note that the control based on the acceleration request application D and the acceleration request application E is not limited to the above example.

[0059] Here, in the first embodiment, the driving assistance system 100 sets an action plan based on the arbitration result by the arbitration unit 201. Specifically, each of the acceleration request application D and the acceleration request application E sets a lower limit value of acceleration in the action plan using the vehicle speed limit value from the arbitration unit 201 of the exercise manager 200 as an input. The action plan (lower limit value of acceleration) set in each of the acceleration request application D and the acceleration request application E is accepted by a not-shown accepting unit of the exercise manager 200.

[0060] The arbitration unit 202 of the brake ECU 20 (exercise manager 200) arbitrates the action plans (lower limit of acceleration) of the acceleration request application D and the acceleration request application E received by the reception unit. Specifically, the arbitration unit 202 determines the smaller of the lower limit of acceleration set in the acceleration request application D and the lower limit of acceleration set in the acceleration request application E as the arbitration result.

[0061] Further, a calculation unit (not shown) of the motion manager 200 calculates a motion request based on the arbitration result in the arbitration unit 202 and the motion of the vehicle 1 determined based on the arbitration result. This motion request is a physical quantity for controlling at least one of the actuators of the actuator system 30, and includes a physical quantity different from the physical quantity of the request of the action plan. For example, when the request of the action plan (first request) is longitudinal acceleration, the calculation unit converts the acceleration into a driving force or driving torque and calculates the value as the motion request (second request).

[0062] The distributor 203 distributes the motion request calculated by the calculator to at least one actuator of the actuator system 30. For example, when acceleration of the vehicle 1 is required, the distributor 203 distributes the motion request only to the powertrain system 302. Alternatively, when deceleration of the vehicle 1 is required, the distributor 203 appropriately distributes the motion request to the powertrain system 302 and the brake 304 to achieve a target deceleration. In the first embodiment, the distributor 203 distributes the motion request to a processing unit 302e of the powertrain ECU 302b.

[0063] The processing unit 302e of the powertrain 302a judges whether the motion request (lower limit value of driving force) from the distribution unit 203 is normal or not. For example, the processing unit 302e judges whether the lower limit value of driving force from the distribution unit 203 is larger (or smaller) than a predetermined threshold. When the processing unit 302e judges that the motion request (lower limit value of driving force) is abnormal, it rejects or changes (reduces) the motion request.

[0064] Additionally, the processor 302e may detect a loss of communication with the exercise manager 200 and reject or modify the exercise request when it detects that communication has been lost.

[0065] A driving force control unit 302f of the powertrain ECU 302b determines a driving force to be output to the powertrain 302a based on the value output from the processing unit 302e and the accelerator opening (the amount of depression of the accelerator pedal 2 by the user).

[0066] (Vehicle control method) Next, a method of controlling the vehicle 1 using the actuator system 30 will be described with reference to FIG.

[0067] First, in step S1, an action plan (upper limit value of vehicle speed) set by each of a vehicle speed limiting application A (see FIG. 2) and a vehicle speed limiting application B (see FIG. 2) included in the powertrain system 302 is received by an arbitration unit 302c (see FIG. 2) included in the powertrain system 302.

[0068] Next, in step S2, the action plans (upper limit vehicle speed) set by the vehicle speed limit application A and the vehicle speed limit application B received in step S1 are reconciled by the arbitration unit 302c. Specifically, the arbitration unit 302c determines the smaller of the upper limit vehicle speed set by the vehicle speed limit application A and the upper limit vehicle speed set by the vehicle speed limit application B as the arbitration result.

[0069] The controls in steps S1 and S2 are executed by loading a predetermined program into a processor (not shown) of the powertrain ECU 302b. The processor is an example of the "computer" in the present disclosure.

[0070] Next, in step S3, an exercise request to be output to the distribution unit 203 (see FIG. 2) is calculated by the exercise manager 200 (a calculation unit, not shown) based on the arbitration result by the arbitration unit 302c. Specifically, the arbitration unit 202 (see FIG. 2) arbitrates the action plans (lower limit values ​​of acceleration) of the acceleration request application D and the acceleration request application E based on the arbitration result by the arbitration unit 302c, thereby calculating the exercise request.

[0071] Then, in step S4, the motion request calculated in step S3 is distributed by the distributor 203 to any one of the actuator systems 30.

[0072] As described above, in the vehicle 1 according to the first embodiment, the powertrain system 302 includes the vehicle speed limiting application A and the vehicle speed limiting application B that set an action plan for the vehicle 1, and the arbitration unit 302c. As a result, the vehicle speed limiting application A and the vehicle speed limiting application B, and the arbitration unit 302c are included in a common system (the powertrain system 302), and therefore there is no need to use communication between the vehicle speed limiting application A and the vehicle speed limiting application B, and the arbitration unit 302c. As a result, it is possible to prevent requests (action plans) made by the vehicle speed limiting application A and the vehicle speed limiting application B from being tampered with during communication.

[0073] Furthermore, the requests (action plans) of the vehicle speed limiting applications A and B are not directly input to the brake ECU 20, which is different from the powertrain system 302, but the result of arbitration of the vehicle speed limiting applications A and B by the arbitration unit 302c is input. As a result, even if the number of requests (action plans) by the applications is increased, there is no need to increase the interface between the arbitration unit 302c and the brake ECU 20. That is, the interface for transmitting data from the powertrain system 302 to the brake ECU 20 can be unified into the interface between the arbitration unit 302c and the brake ECU 20. As a result, even if the number of requests (action plans) by the applications is increased, the configuration of the vehicle 1 can be prevented from becoming complicated.

[0074] Furthermore, the vehicle speed limit application A, the vehicle speed limit application B, and the arbitration unit 302c are included in the powertrain ECU 302b. This can improve the responsiveness between the vehicle speed limit application A, the vehicle speed limit application B, and the arbitration unit 302c.

[0075] Moreover, the brake system 304a includes an arbitration unit 201 that arbitrates between the arbitration result by the arbitration unit 302c of the powertrain system 302 and the action plan set by the vehicle speed limiting application C. This makes it possible to distribute a more appropriate motion request to the powertrain 302a, compared to a case where arbitration is performed by only one of the arbitration unit 302c and the arbitration unit 201.

[0076] [Second embodiment] Next, a second embodiment of the present disclosure will be described with reference to Fig. 4 and Fig. 5. In the second embodiment, unlike the first embodiment in which a plurality of applications (vehicle speed limiting application A and vehicle speed limiting application B) of the powertrain system 302 are mediated, requests (action plans) from different systems are mediated. The same reference numerals are used for configurations similar to those of the first embodiment, and the same description will not be repeated.

[0077] (Vehicle configuration) 4 is a diagram showing an example of a configuration of the vehicle 11. As shown in FIG.

[0078] The vehicle 11 includes a brake system 314a that sets an action plan for the vehicle 11 and is different from a power train system 312 described below. The brake ECU 21 is included in the brake system 314a. The brake system 314a is an example of a "third actuator system" of the present disclosure.

[0079] The brake ECU 21 includes a motion manager 210. The brake ECU 21 is configured to be able to communicate with various ECUs included in the actuator system 31.

[0080] The actuator system 31 includes a powertrain system 312. The powertrain system 312 has a powertrain 312a and a powertrain ECU 312b. Each functional block (see FIG. 4) included in the brake ECU 21 and the powertrain ECU 312b is software that performs a function by a program being executed by a computer. The powertrain system 312 is an example of a "first actuator system" and an "actuator system" of the present disclosure. The powertrain 312a and the powertrain ECU 312b are an example of an "actuator" and an "actuator control unit", respectively.

[0081] The driving assistance system 110 includes an acceleration requesting application F (hereinafter referred to as acceleration requesting application F) and an acceleration requesting application G (hereinafter referred to as acceleration requesting application G).

[0082] Each of the acceleration request application F and the acceleration request application G is an application that sets an upper limit value of the acceleration of the vehicle 11 under a predetermined condition as an action plan. For example, the acceleration request application F sets the upper limit value of the acceleration to, for example, −30 m / s when a collision of the vehicle 11 is predicted. 2 In addition, the acceleration request application G normally sets the upper limit of acceleration to, for example, 0 m / s 2 That is, the upper limit of acceleration in the acceleration requesting application F and the upper limit of acceleration in the acceleration requesting application G are different values. Note that the control based on the acceleration requesting application F and the acceleration requesting application G is not limited to the above example.

[0083] In addition, the brake system 314 a (the brake ECU 21 and the motion manager 210 ) includes an arbitration unit 211 and a distribution unit 212 .

[0084] The action plans (upper limit of acceleration) set in each of the acceleration request application F and the acceleration request application G are received by a receiving unit (not shown) of the exercise manager 210.

[0085] The arbitration unit 211 of the brake ECU 21 (exercise manager 210) arbitrates the action plans (upper acceleration limit values) of the acceleration request application F and the acceleration request application G received by the reception unit. Specifically, the arbitration unit 211 determines the smaller of the upper acceleration limit values ​​set in the acceleration request application F and the upper acceleration limit values ​​set in the acceleration request application G as the arbitration result.

[0086] Also, a calculation unit (not shown) of the motion manager 210 calculates a motion requirement based on the arbitration result in the arbitration unit 211 and the motion of the vehicle 1 determined based on the arbitration result.

[0087] The distributor 212 distributes the motion request calculated by the calculator to at least one actuator of the actuator system 31. In the second embodiment, the distributor 212 distributes the motion request to a processor 312d (described later) of the powertrain ECU 312b.

[0088] The powertrain ECU 312b includes a vehicle speed limiting application H (hereinafter referred to as the vehicle speed limiting application H), a processing unit 312c, a processing unit 312d, an arbitration unit 312e, and a driving force control unit 312f. The processing unit 312c and the processing unit 312d are examples of the "first processing unit" and the "second processing unit" of the present disclosure, respectively. The vehicle speed limiting application H is an example of the "first application" of the present disclosure. The arbitration unit 312e is an example of the "first arbitration unit" and the "second arbitration arbitration unit" of the present disclosure.

[0089] The vehicle speed limiting application H includes, for example, a fixed speed limiter. The vehicle speed limiting application H also outputs an action plan related to the driving force of the powertrain 312a (upper limit of driving force) to the processing unit 312c. Here, the vehicle speed limiting application H is an application in which it is highly necessary to prevent the action plan (upper limit of vehicle speed, upper limit of driving force) to be set from being tampered with. The action plan (upper limit of vehicle speed, upper limit of driving force) set by the vehicle speed limiting application H is an example of the "first action plan" of the present disclosure.

[0090] The processing unit 312c and the processing unit 312d are provided separately from each other, and therefore perform processes based on different inputs.

[0091] The processor 312c determines whether the action plan (upper limit value of driving force) set by the vehicle speed limiting application H is normal or not, and rejects or modifies the action plan when it is determined that the action plan is not normal.

[0092] The processing unit 312d judges whether the action plan (upper limit of driving force) set by the brake system 314a (brake ECU 21) is normal or not, and rejects or modifies the action plan when it is judged that the action plan is not normal. The processing unit 312d may also detect the interruption of communication with the exercise manager 210, and reject or modify the action plan when it detects that the communication has been interrupted.

[0093] In addition, the processing unit 312c (processing unit 312d) may change the action plan by gradually increasing the upper limit value (action plan) of the driving force from 0 or the action plan (upper limit value of the driving force) from the vehicle speed limiting app H to the driving force based on the accelerator operation by the user.

[0094] Here, in the second embodiment, the arbitration unit 312e arbitrates between the action plan set by the vehicle speed limiting application H of the powertrain system 312 and the action plan set by the brake system 314a (brake ECU 21, motion manager 210). Specifically, the arbitration unit 312e arbitrates between the output of the processing unit 312c, which receives the action plan of the vehicle speed limiting application H as an input, and the output of the processing unit 312d, which receives the action plan set by the brake system 314a as an input. The arbitration unit 312e outputs the smaller of the output of the processing unit 312c and the output of the processing unit 312d to the driving force control unit 312f as the arbitration result. Note that, when one of the output of the processing unit 312c and the output of the processing unit 312d is rejected, the arbitration unit 312e sets the other of the output of the processing unit 312c and the output of the processing unit 312d as the arbitration result.

[0095] Here, in a case where the process in the arbitration unit 312e is performed before the process in the processing unit (the above-mentioned judgment and rejection process) (comparative example), the arbitration result in the arbitration unit 312e may be rejected by the processing unit. In this case, there is no request to the driving force control unit 312f, and the powertrain 312a cannot be controlled normally. In contrast, in the second embodiment, even if the action plan is rejected by one of the processing units 312c and 312d, arbitration is performed in the arbitration unit 312e based on the output from the other of the processing units 312c and 312d. As a result, it is possible to prevent the request to the driving force control unit 312f from being rejected.

[0096] The driving force control unit 312f of the powertrain ECU 312b determines the driving force to be output to the powertrain 312a based on the arbitration result of the arbitration unit 312e and the accelerator opening (the amount of depression of the accelerator pedal 2 by the user), thereby performing accelerator suppression control.

[0097] (Vehicle control method) Next, a method for controlling the vehicle 11 using the actuator system 31 will be described with reference to FIG.

[0098] First, in step S11, an action request (upper limit value of driving force) set by the brake system 314a (brake ECU 21) and an action plan (upper limit value of driving force) set by the vehicle speed limit application H (see FIG. 4) of the powertrain system 312 are received by the arbitration unit 312e (see FIG. 4) of the powertrain system 312. Specifically, the output of a processing unit 312d that receives as input the action request set by the brake system 314a (brake ECU 21) and the output of a processing unit 312c that receives as input the action request set by the vehicle speed limit application H are received by the arbitration unit 312e.

[0099] Next, in step S12, the output of processing unit 312c and the output of processing unit 312d accepted in step S11 are arbitrated in arbitration unit 312e.

[0100] Next, in step S13, the arbitration result in step S12 is input to the driving force control section 312f, whereby the driving force for driving the powertrain 312a is determined by the driving force control section 312f.

[0101] As described above, in the vehicle 11 according to the second embodiment, the multiple action plans arbitrated by the arbitration unit 312e include an action plan (upper limit value of driving force) set by the vehicle speed limiting application H of the powertrain system 312, as well as an action plan (output of the distribution unit 212) set by the brake system 314a (brake ECU 21). As a result, the driving force of the powertrain 312a can be more appropriately controlled based on the action plan set by the brake system 314a, compared to the case where the powertrain 312a is driven based only on the action plan set by the vehicle speed limiting application H.

[0102] In addition, the arbitration unit 312e arbitrates between the results of processing by the processing unit 312c and the results of processing by the processing unit 312d. As a result, even if either the action plan (upper limit value of driving force) set by the vehicle speed limiting application H or the action plan (output of the distribution unit 212) set by the brake system 314a (brake ECU 21) is abnormal, the power train 312a can be controlled based on the other.

[0103] Other configurations and effects of the second embodiment are the same as those of the first embodiment.

[0104] Also, as shown in Fig. 6, the configuration of the first embodiment and the configuration of the second embodiment may be integrated. A vehicle 41 shown in Fig. 6 includes a driving assistance system 120 including acceleration request applications D to G. The vehicle 41 also includes a brake system 324a (brake ECU 22, motion manager 220) including an arbitration unit 201, an arbitration unit 202, an arbitration unit 211, a distribution unit 203, a distribution unit 212, and a vehicle speed limit application C. The brake system 324a is an example of a "second actuator system" and a "third actuator system" of the present disclosure.

[0105] The vehicle 41 also includes a powertrain ECU 322b including an arbitration unit 302c, a processing unit 302e, a processing unit 312c, a processing unit 312d, an arbitration unit 312e, a vehicle speed limiting application A, a vehicle speed limiting application H, and a driving force control unit 322f. The powertrain ECU 322b and the powertrain 322a configure a powertrain system 322. The powertrain ECU 322b and the powertrain 322a are examples of an "actuator control unit" and an "actuator" in the present disclosure, respectively. The powertrain system 322 is also an example of a "first actuator system" and an "actuator system".

[0106] The driving force control unit 322f determines the driving force of the powertrain 322a based on the lower limit value of the driving force from the processing unit 302e, the upper limit value of the driving force from the arbitration unit 312e, and the input (driving force) from the accelerator pedal 2. Specifically, the driving force control unit 322f determines the larger (MAX) of the input value from the accelerator pedal 2 and the lower limit value of the driving force from the processing unit 302e, and the smaller (MIN) of the upper limit value of the driving force from the arbitration unit 312e, as the driving force of the powertrain 322a. Note that the same reference numerals as those in the first or second embodiment are used for the functional blocks that are the same as those in the first or second embodiment.

[0107] In the example shown in FIG. 6, the action plan (upper limit of vehicle speed) set by the vehicle speed limiting application A and the action plan (upper limit of vehicle speed) set by the vehicle speed limiting application H are reconciled in the reconciliation unit 302c.

[0108] In the first embodiment, the vehicle speed limiting application A (first application) and the vehicle speed limiting application B (first application) are included in the powertrain system 302b (first actuator system), but the present disclosure is not limited to this. Only one of the vehicle speed limiting application A and the vehicle speed limiting application B may be included in the powertrain system 302b, and the other of the vehicle speed limiting application A and the vehicle speed limiting application B may be included in another system (for example, the steering system 306 and the brake system 304a).

[0109] In the first embodiment, the vehicle speed limit application A (first application), the vehicle speed limit application B (first application), and the arbitration unit 302c (first arbitration unit) are included in the power train system 302b (first actuator system), but the present disclosure is not limited to this. The vehicle speed limit application A, the vehicle speed limit application B, and the arbitration unit 302c may be included in the brake system 304a (second actuator system) or the steering system 306. In the second embodiment, the vehicle speed limit application H (first application) and the arbitration unit 312e (first arbitration unit) may be included in the brake system 314a (third actuator system) or the steering system 306.

[0110] In the above-described first embodiment, an example has been described in which the vehicle speed limiting application A (B) (first application) is included in the powertrain system 302b (first actuator system), but the present disclosure is not limited to this. An application that limits parameters (e.g., acceleration and steering angle) other than the vehicle speed may be included in the powertrain system 302b. Also, the driving assistance system 110 may include an application that limits parameters (e.g., vehicle speed and steering angle) other than the acceleration. The same may be true in the above-described second embodiment.

[0111] In the above first embodiment, an example has been shown in which the vehicle speed limit application A (first application) and the vehicle speed limit application B (first application) are applications that set an upper limit value of the vehicle speed, but the present disclosure is not limited to this. The vehicle speed limit application A and the vehicle speed limit application B may be applications that set a lower limit value of the vehicle speed. Furthermore, the vehicle speed limit application H (first application) in the above second embodiment may be an application that sets a lower limit value of the vehicle speed.

[0112] It should be noted that the above-described modified examples may be combined in whole or in part as appropriate.

[0113] The embodiments disclosed herein should be considered to be illustrative and not restrictive in all respects. The scope of the present disclosure is defined by the claims, not the above description, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0114] 1, 11, 41 vehicle, 1a vehicle body, 201 arbitration unit (second arbitration unit), 302, 312, 322 powertrain system (first actuator system) (actuator system), 302a, 312a, 322a powertrain (actuator), 302b, 312b, 322b powertrain ECU (actuator control unit), 302c arbitration unit (first arbitration unit) (arbitration unit for first arbitration), 304a brake system (second actuator system), 312c processing unit (first processing unit), 312d processing unit (second processing unit), 312e arbitration unit (first arbitration unit) (arbitration unit for second arbitration), 314a brake system (third actuator system), 324a brake system (second actuator system) (third actuator system), A vehicle speed limit application (first application), B vehicle speed limit application (first application), C Speed ​​limit app (second application), H Speed ​​limit app (first application).

Claims

1. 1. An actuator system for controlling an operation of a vehicle, comprising: at least one application for setting a first action plan for the vehicle; a first arbitration unit that arbitrates a plurality of action plans including the action plans established by the at least one application; a first processing unit and a second processing unit provided separately from each other; the first processing unit determines whether the first action plan set by the application is normal or not, and when determining that the first action plan is not normal, rejects or modifies the first action plan; the second processing unit determines whether a second action plan for the vehicle, which is set by another actuator system different from the actuator system, is normal, and rejects or modifies the second action plan when it is determined that the second action plan is not normal; The first arbitration unit arbitrates between a result processed by the first processing unit and a result processed by the second processing unit.

2. An actuator for controlling the drive of the vehicle; An actuator control unit that controls the operation of the actuator, The actuator system according to claim 1 , wherein the actuator control unit includes the application and the first arbitration unit.

3. The actuator system of claim 2 , wherein the actuator comprises a power train.

4. The actuator system of claim 3 , wherein the at least one application includes an application for limiting a speed of the vehicle.

5. A vehicle, a first actuator system for controlling operation of the vehicle; a second actuator system different from the first actuator system; The first actuator system at least one first application that sets a first action plan for the vehicle; a first arbitration unit that arbitrates a plurality of action plans including the first action plan; a first processing unit and a second processing unit provided separately from each other; the first processing unit determines whether the first action plan set by the first application is normal or not, and when determining that the first action plan is not normal, rejects or modifies the first action plan; the second processing unit determines whether a second action plan for the vehicle set by the second actuator system is normal, and when determining that the second action plan is not normal, rejects or modifies the second action plan; The first arbitration unit arbitrates a result processed by the first processing unit and a result processed by the second processing unit.

6. the first actuator system includes a second arbitration unit that arbitrates a plurality of action plans including the first action plan and is different from the first arbitration unit; The second actuator system a second application for setting a third plan of action for the vehicle; The vehicle according to claim 5 , further comprising a third arbitration unit that arbitrates between a result of the arbitration by the second arbitration unit and the third action plan set by the second application.

7. A driving assistance system that sets a driving assistance action plan related to driving assistance of the vehicle, The vehicle according to claim 6 , wherein the driving assistance system sets the driving assistance action plan based on a result of the arbitration by the third arbitration unit.

8. The driving assistance system includes a third application and a fourth application that set the driving assistance action plan; the second actuator system includes a fourth arbitration unit that arbitrates between the driving assistance action plan set by the third application and the driving assistance action plan set by the fourth application; The first actuator system a third processing unit that determines whether a fourth action plan based on a result of arbitration by the fourth arbitration unit is normal or not, and rejects or modifies the fourth action plan when it is determined that the fourth action plan is not normal; The vehicle according to claim 7 , wherein an operation of the vehicle is controlled based on a result of the arbitration by the first arbitration unit and a result of the processing by the third processing unit.

9. A vehicle control method using an actuator system for controlling an operation of a vehicle, comprising: A setting step of setting a first action plan for the vehicle; an arbitration step of arbitrating a plurality of action plans including the set first action plan; a first processing step of determining whether the set first action plan is normal or not, and discarding or modifying the first action plan when it is determined that the first action plan is not normal; a second processing step of determining whether a second action plan for the vehicle, which is set by another actuator system different from the actuator system, is normal or not, and discarding or modifying the second action plan when it is determined that the second action plan is not normal, The vehicle control method, wherein the arbitration step includes a step of arbitrating a result processed in the first processing step and a result processed in the second processing step.

10. A program causing a computer to execute the vehicle control method according to claim 9.

Images