How to Rapidly Flash Sensor Nodes Over an Ethernet Network

Abstract

The present invention relates to a method for rapidly flushing sensor nodes over an Ethernet network having a head node and a plurality of associated nodes, the method comprising: a) determining, by the head node, a number of active nodes; b) classifying, by the head node, the identified nodes into two or more node classifications to prioritize Ethernet network communications; c) receiving, by the head node, reservation requests from at least some of the plurality of nodes; d) assigning, in response to the reservation requests, time slots of a subsequent communication window to one or more nodes, the assignment being based on node priority, and priorities being assigned to nodes according to their classification; after the number of active nodes has been determined, a required download data rate is determined and a current bus utilization is ascertained; the bus utilization is ascertained by calculating the time difference between the last beacon and the number of nodes, and bus cycles of the Ethernet network are optimized with respect to the required download data rate.

Description

[Background technology]

[0001] In addition to 100 Mbit / s, 1000 Mbit / s and multi-gigabit standardization underway, another Ethernet standard for automotive applications is becoming available at 10 Mbit / s (IEEE 802.3ch).

[0002] Ethernet and wireless technologies are only just beginning to find application in automobiles, and their open and standardized protocols make it possible for the first time to attack the car from the outside as well. There are increasing reports of attacks on vehicles where attackers have managed to gain access to the vehicle over the air and thus access critical vehicle functions.

[0003] One variant of the new standard is the CSMA / CD-based multi-drop mode. This is very different from other Ethernet standards (above 10Mbit / s) because it aims to design Ethernet more cost-effectively and therefore also to accommodate simpler control devices. This standard does not require any switches (switch ICs) but is rather designed as a bus (similar to CAN). This roughly halves the number of PHYs (transmitters and receivers) required. Thus, Ethernet is becoming a serious competitor to CAN / CAN-FD and FlexRay, since it can significantly reduce system costs. Furthermore, typical automotive interfaces such as SPI are also possible for communication between the controller and the physical transceivers (PHYs) instead of xMII.

[0004] Figure 1 compares the essential features of switched Ethernet and "Bus Ethernet" (multi-drop) as defined in the IEEE standard IEEE P802.3cg. The most important difference is that the resource bus access is exclusively available in switched Ethernet, which means that any Ethernet node (ECU) can transmit at any time without collisions occurring in the process. Newer Ethernet bus implementations in multi-drop mode use a shared medium, i.e. bus access must be reserved until this resource is available.

[0005] The IEEE P802.3cg standard uses, among other things, a newly defined mechanism (PLCA - Physical Layer Collision Avoidance) to avoid collisions during bus access and enforce fair access. In this case, exactly one PHY (Physical Transceiver) receives access to the bus at a time. This makes it possible to avoid collisions. The access is based on what is called a round-robin scheme. Each ECU (node) on the bus has the opportunity to transmit once within a defined cycle (or sequence).

[0006] In this case, a network controller, known as the head node, determines the cycle and repeatedly transmits a "beacon" on the bus. Thus, a node starts a timer based on a predefined identification ID, determines its turn as to when it is allowed to transmit, and is allowed to transmit after the timer expires and the node is recognized as next.

[0007] Figure 2 shows the basic sequence of communication on an Ethernet bus: after the beacon is transmitted, node 0 transmits next, and when it finishes its transmission, the next node is allowed to transmit (normally, only a single Ethernet frame can be transmitted in each slot in each case).

[0008] Figure 3 shows the physical representation of an Ethernet bus with stubs.

[0009] EP 2 585 940 A1 describes a system and method for scheduling network communications in a managed network that may include a network controller recognizing a plurality of network nodes, which classifies the recognized network nodes into two or more node classifications in order to prioritize network communications at the node level, the network controller receiving reservation requests from at least some of the plurality of network nodes, the reservation requests requesting one or more time slots for the respective network nodes in a subsequent communication window, and the network controller assigning time slots in the subsequent communication window to one or more network nodes in response to the reservation requests, the assignment being based on the network node priorities, which are assigned according to the node classifications. This patent application describes that the network controller creates a periodic medium access plan (MAP), and the access behavior of the network nodes is defined in each cycle. The basis is the required quality of service, the reservation requests from the respective nodes and the priority / lower priority of the nodes for the network controller to create the MAP. The network controller may also automatically send MAP messages without reservation requests.

[0010] In US 2005 213 503 A1, according to a particular implementation described, a coordinator performs a bandwidth allocation procedure based on information from a previously unfulfilled bandwidth allocation request and responds to a current bandwidth allocation request. The current bandwidth allocation request specifies the amount of bandwidth currently requested for multiple streams, and the current bandwidth allocation request may be received from multiple entities by multiple streams. The information from the previously unfulfilled bandwidth allocation request is taken into account when allocating the available bandwidth among the multiple streams or multiple entities for the currently requested bandwidth amount. "Unserved" access reservations from previous cycles are also taken into account by the head node when planning bus access for the network nodes.

[0011] In contrast to switched networks (like 100 / 1000 Mbit / s), at the aforementioned 10 Mbit / s the bus cannot be accessed immediately, but must be waited for the respective time. Compared to other Ethernet types, the 10 Mbit bus has a significantly lower data rate, so here the efficiency of the data transmission and the transmission latency (or rather also the access time) must be considered in particular. If security also becomes part of a 10 Mbit / s system, there is little data rate left for the payload data (as with current CAN-FD implementations).

[0012] Flashing control units, i.e. updating software, providing new functions and eliminating errors, is not really a new topic for the automotive industry, but will nevertheless become even more important in the coming years due to the new mobile communication standard 5G. Flashing is also not at all a problem over Ethernet (100 Mbit / s, 1000 Mbit / s, etc.) because on the one hand there is sufficient bandwidth and on the other hand exclusive access (point-to-point full duplex connections) is available.

[0013] The new 10 Mbit / s multi-drop bus has to deal with new challenges that were not considered in the cross-industry standards. This is because parallel transmission and reception is not possible on this bus, and each node can only transmit one frame per transmission cycle. There is currently no solution for efficient flushing of subscribers on the bus or practical time for software downloads or diagnostic queries. The remaining data rate with about 8 nodes is typically only 1-2 Mbit / s.

[0014] The problem currently is that as the number of subscribers on the bus increases, the remaining data rate for each node (here especially the master node or head node) decreases, since the standard only allows one frame to be transmitted per cycle.

[0015] The head node will be implemented either in a head unit, gateway, fusion unit or generally on a zone controller, i.e., the same control device where update or diagnostic queries are usually also issued.

[0016] It is known to use a mode, also known as burst mode, in which a node can transmit up to 255 packets during the cycle, but this mode must be statically preset and maintained.

[0017] Semi- and highly automated driving places increasing demands on vehicles that require hard real-time support from transmission networks and protocols, as is already the case in current aviation or industrial automation.

[0018] An object of the invention is to make it possible to optimize the flash time, and in particular the download time, of software or diagnostic queries of sensors or other control devices.

[0019] This object is achieved by the method according to claim 1, the control device according to claim 4 and the features of the Ethernet network according to claim 6.

[0020] The present invention advantageously adapts new Ethernet technologies for use in automobiles in terms of cost and implementation effort.

[0021] The invention proposes a method to adapt the bus cycle to the data rate requirements of the head node. This means that more bandwidth can be dynamically allocated to the head node when needed. The invention proposes a method to adapt the bus cycle depending on the size of the data to be transmitted, in such a way that the download / update requirements for the transmission time are not violated. In this case, the method calculates how much bandwidth must be provided at any given time. However, the method in the process always takes into account the standards and does not have to intervene on other nodes.

[0022] This proposal solves the problem that the beacon cycle time depends only on the bus and its configuration, but not on the individual nodes or their requirements. The fundamental change of the new architecture is characterized by the centralization of the software in fewer computing units. These so-called servers or central computers no longer consist of only one μC or μP, but contain several μCs, μPs, SOCs, and even Ethernet switches with a large number of ports, representing in each case its own local network with separate software (this also means that each software component does not (cannot) know that it is communicating with components located, for example, in the same housing).

[0023] Zonal architectures with a central server are known. Here, on the one hand, the server contains many powerful processors and, on the other hand, many software or applications run on it. The communication effort within the control device is enormous (this represents a unique local network). In the future, all software of the vehicle will run here, with each controller having its own software stack provided by different suppliers.

[0024] Concepts are known for (dynamically) transferring functions and applications to other control units / processors, i.e. also optimizing them. This is called live migration, reallocation, migration. Series applications for transferring software to other ECUs / processors are known.

[0025] As hardware becomes more commonplace and software becomes less platform-dependent, new architectures offer the possibility for the first time to implement all functions and software that were not previously possible on an ECU in the same way on different ECUs. Therefore, it is not necessarily determined at the time of system design which software will run on which control unit (server). The shift in software is not limited to operations between ECUs, but also applies to operations between controllers within the same ECU. Summary of the Invention [Problem to be solved by the invention]

[0026] Advantageously, the present invention can significantly optimize and shorten the flash time and thus the download of software from, for example, a control device. The concept can be implemented in compliance with standards without additional financial expenditures such as hardware costs. The use of the newly introduced Ethernet protocol in electric vehicles requires simple techniques and mechanisms that exploit given properties of the technology, since this can be done without expensive implementations and further additional hardware. The network system according to the present invention is improved in terms of reliability.

[0027] The advantage of determining more accurate and predictable delays per application is improved scheduling and execution of communication within the vehicle. This means that existing bus systems can be used more efficiently and a jump to expensive technologies (higher bandwidth) can be avoided. This can also have an impact on the required buffer storage, which can then be dispensed with (or made smaller). Fusion of different data (e.g. ultrasonic + radar or microphone) can thereby be improved and made more accurate. Furthermore, data logging can be made even more accurate.

[0028] The present invention presents a method that allows software to be designed more flexibly and to make the most of the underlying system without the need to permanently program it into the software in advance. The present invention allows software developers and designers to provide software / applications that can be more flexibly and more precisely adapted to the requirements of the application case. The incorporation of the aforementioned method into the software allows optimization to take place in the control unit in each case. This means that the software can be developed in a more platform-independent manner.

[0029] The present invention provides the advantage that in a 10 Mbit / s Ethernet bus system, software can be flashed approximately 8 times faster than was possible with the prior art, which means that memory size can be smaller or memory can be freed up for other applications.

[0030] If it is a software update then a more realistic time window can be returned via the present invention and there is no need to assume the worst case, thus allowing downloads / updates that would otherwise never be initiated or would be initiated later.

[0031] New technologies are no longer just limited to electric vehicles. Protocols such as IP, AVB and TSN have thousands of pages of specifications and test suites. It is not currently known whether these new protocols can be controlled in an automobile.

[0032] The advantage of the present invention is that it does not require any modifications to the usual hardware, so that existing hardware can continue to be used. The new method can be integrated into existing networks without compromising existing equipment. It uses existing protocols, so there is no violation of standards that must be adhered to.

[0033] The use of the method according to the invention can also be used in other industrial fields using 10 Mbit / s Ethernet, such as industrial automation. [Means for solving the problem]

[0034] This object is advantageously achieved by a method for rapidly flashing sensor nodes over an Ethernet network having a head node and a number of associated nodes, the method comprising: a) determining, by a head node, a number of active nodes; b) classifying, by the head node, the identified nodes into two or more node classifications to prioritize Ethernet network communications; c) receiving, by the head node, reservation requests from at least some of the plurality of nodes; d) allocating to one or more nodes in time slots of the subsequent communication window in response to reservation requests, the allocation being based on node priorities, and priorities being allocated to nodes according to their classification. After the number of active nodes is determined, the required download data rate is determined and the current bus utilization is ascertained, the bus utilization is ascertained by calculating the time difference of the last beacon and the number of nodes, and the bus cycles of the Ethernet network are optimized with respect to the required download data rate.

[0035] In an advantageous embodiment of the method, the bus utilization is monitored continuously.

[0036] A further advantageous embodiment of the method comprises: once the required download data rate has been determined, a current free data rate (D frei ) is determined, and the required data rate per bus cycle (D zus ) is determined, and the available data rate (D frei ) is the required data rate per bus cycle (D zus ), no change is made in the next bus cycle, and the free data rate in the Ethernet network in the last bus cycle of the Ethernet network (D frei ) is less than the required data rate per bus cycle, the change is made in the next bus cycle.

[0037] Particularly advantageous is an implementation with a control unit for an Ethernet network, in the form of a first node as a control unit for transmitting signals to and receiving signals from a second control unit of an Ethernet on-board network, determining a delay time of the signals on the connection path to the second control unit, determining a maximum speed of the connection path based on the delay time, and determining a type of transmission medium of the connection path based on the maximum speed, the control unit including at least a microprocessor, a volatile memory and a non-volatile memory, at least two communication interfaces, a synchronizable timer, and the non-volatile memory including program instructions which, when executed by the microprocessor, enable at least one embodiment of the method according to the invention to be implemented and executed.

[0038] Particularly advantageous is an implementation of an Ethernet network for a motor vehicle having a first control unit and a second control unit, the control units being connected to each other via at least one connection path, and the first control unit being designed to execute the method according to the invention.

[0039] A particularly advantageous embodiment of the Ethernet on-board network is distinguished in that the Ethernet network comprises a third control unit, which is only indirectly connected to the first control unit and directly connected to the second control unit via a third connection path, the third control unit being designed to determine the delay time of a third signal on the third connection path, and the first control unit being designed to trigger the determination of the delay time of the third signal by means of a service message to the third control unit.

[0040] By implementing the method disclosed in the present invention, higher quality and durable platform-independent software can be used. The present invention can be adopted in other communication systems and embedded systems that have clock synchronization components.

[0041] Exemplary embodiments of the invention are illustrated in the drawings and are explained in more detail below. [Brief description of the drawings]

[0042] [Figure 1] Shows a simplified diagram of the difference between an Ethernet bus (10 Mbit / s) and a switched network. [Diagram 2] This shows the basic flow of communication on an Ethernet bus. [Diagram 3] 1 shows a physical representation of an Ethernet bus with stubs. [Figure 4] The problem according to the present invention is shown in a simplified form. [Diagram 5] 1 illustrates a general solution of the present invention with dynamically changing beacon cycle times. [Figure 6] 4 illustrates optimization of beacon cycle time versus head node bandwidth requirements. [Figure 7] 1 illustrates a simple cycle optimization embodiment. [Figure 8] 1 illustrates an embodiment of an extended fair cycle optimization. [Figure 9] 13 illustrates an alternative for calculating the download data rate. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0043] Figure 1 shows a simplified diagram of the difference between an Ethernet bus (10 Mbit / s) and a switched network.

[0044] Figure 2 shows the basic communication flow on an Ethernet network bus. When a beacon is sent out, it is node 0's turn first, and when it finishes transmitting, the next node can transmit. Usually, only a single Ethernet frame can be transmitted in each slot.

[0045] Figure 3 shows a component-based representation of an Ethernet bus with stubs.

[0046] FIG. 4 shows a simplified representation of the objectives according to the invention.

[0047] In Fig. 5 the general solution of the invention is shown by a dynamically changing beacon cycle time, the beacon signal is shown as "B". The invention proposes a new method to optimize the efficiency of data transmission in an automotive 10 Mbit / s bus and to reduce the bus access time for the head node. The idea of ​​the invention describes the adaptation of the bus cycle of an Ethernet network. Unlike FlexRay, this has no negative or under-considered effects. The nodes do not have a fixed and clear time window, but only follow a transmission order based on a pre-set unique node ID.

[0048] Figure 6 shows the basis on which bus cycles are optimized. First, the head node determines what data must be transmitted in what time unit. This can be the size of a file or the duration of a stream. The absolute data rate on the bus is thus determined, taking into account the overhead of data transmission (Ethernet headers, etc.).

[0049] To avoid unnecessary optimization or adaptation of bus cycles, the method proposes to determine the current bus utilization, which can be determined by the time difference of the last beacon and the number of participating nodes. If the bus utilization is low, it can be statistically assumed that it will not increase sharply for the next cycle. However, it is proposed to continuously monitor the bus utilization, so that it is still possible to react to any changes.

[0050] In the final step, the bus cycles are adapted depending on the required data rate, for which two possibilities are proposed later.

[0051] Figure 7 shows partial steps of the method for comparing the required data rate with the current bus capacity. First, the required download data rate is calculated for a 10 Mbit bus. Then, the number of active nodes is determined by the head node. The slots of inactive subscribers, either passively listening only, in an error state or in sleep mode, are determined and D frei The metric is made available by a method for the head node called

[0052] This provides immediate bus optimization without actively disrupting ongoing communication and without muting nodes. It also allows the actual data rate to be returned to the application without having to always assume the worst case. This saves memory and provides a real-time window back to the application (and possibly the driver). This method is a first step towards optimizing cycles.

[0053] Another optimization step is described to prevent a subset (or even all) of the other subscribers on the bus (obviously excluding the head node) from transmitting based on the required data rate calculated by the head node, so that the head node can provide its required data rate even if the available bandwidth according to the normal bus operation is not enough, thus shortening the cycle time for download (or security update) purposes. For this purpose, the amount of data that the head node still has to transmit in the current cycle is always compared and this value is taken as a limit value that must not fall below 0 in this cycle, so that the cycle is terminated before the next beacon is transmitted. In this way, the highest possible fairness is provided towards the other bus subscribers, since only within a certain tolerance, as much bandwidth as is needed is used for the head node, while the remainder is still available for use by subsequent nodes. This remaining bandwidth does not allow an accurate prediction of the number of nodes that can still transmit in one cycle, since each bus subscriber is between 0 (not transmitting any data), 64 (transmitting the smallest Ethernet frame) and 1522 bytes (transmitting the largest Ethernet frame).

[0054] To further increase fairness, it is proposed that if a node can no longer transmit and the cycle is terminated by the next beacon (because the remaining required data rate in that slot is below the maximum potential Ethernet frame), it will carry over the “remaining bandwidth” to the next cycle, freeing it up for use by other bus subscribers in the next cycle.In this way, a kind of “credit” can be accumulated even though the bandwidth requirements at the head node are met.

[0055] However, to prevent the credits from increasing excessively, potentially causing large data bursts during which many other bus subscribers can transmit large amounts of data without interference, it is also proposed to limit the increase in credits either in time by saturating or resetting the credits after a configurable period in seconds, or by a cycle counter, when the credits are saturating or reset after a configurable number of bus cycles.

[0056] The sequence of this extended fairer cycle optimization is shown in FIG. 8. This type of cycle optimization is not the only one possible. An intermediate solution between "no fairness" as in FIG. 7 and "maximum possible fairness" as in FIG. 8 could be a simpler method, for example, where only the head node is allowed to transmit for several cycles, and a correspondingly large credit is quickly accumulated. This can be reduced at once by inserting cycles after a certain threshold, then giving all nodes the opportunity to transmit for a certain number of cycles before "resting" again. If desired, to simplify the method, this variant can also be implemented simply depending on the number of cycles without considering the credits (for example "only the head node transmits for 99 cycles, then all nodes transmit for 1 cycle"). However, in this case a certain jitter (dispersion) in the data rate of the head node cannot be eliminated.

[0057] FIG. 9 shows further alternative method steps of determining the number of active nodes, followed by determining the unused transmission potential and thereby calculating the absolute data rate for the head node per time unit.

[0058] In the following, the invention proposes a method already presented for determining the trustworthiness of a communication partner or its application, conditional on this being determined, an exchange of sensitive data can be carried out.

[0059] 3 also shows in schematic detail the overall system architecture, where the ECU (server) can be connected to further sensors and ECUs and components outside the vehicle. For example, the head node on the server is usually connected on the PCB (printed circuit board) via MII (media independent interface) or PCI Express, and can therefore always be managed without a transceiver (PHY).

[0060] Ethernet transmitters and receivers (PHYs) introduce latency in the triple nanosecond range, which may seem insignificant, but Layer 2 (MAC) latency is roughly in the single nanosecond range or tends towards zero, depending on how fine the measurement resolution is.

[0061] The method first determines the addresses of the applications that will exchange (receive, send or both) data.

[0062] The method then starts a delay measurement for this component. For example, the PDelay_Request method of the gPTP protocol (or 802.1AS) can be used here. Two responses are sent back in response, and the delay of the messages can be determined using hardware time stamps. The use of protocols with hardware time stamps - NTP, for example, is therefore ruled out because the resolution is too inaccurate.

[0063] Using this calculated value, the method calculates the physical distance to this subscriber, where the distance is not directly expressed in units such as meters or centimeters, but can be translated into the number of components (PHYs, switches) that are part of the connection, since this delay is important as opposed to the delay on the actual cable.

[0064] The method measures the latency to a subscriber / address by initiating a latency measurement (eg part of the PTP protocol) and calculating the distance from there to this subscriber.

[0065] The measured latency must first be evaluated to provide an indication of location. The software cannot know if the partner is located in the same ECU or not, or ideally if a generic SW is used instead of a special version, plus the IP address can be tampered with or changed. The latency of an MII-based connection does not require a PHY (transmitter / receiver). However, neither the time synchronization software nor the actual application commissioning this study knows this. The PHY is what converts and encodes the data into an electrical signal, which takes much longer than two Ethernet MACs communicating with each other over an MII-based line.

[0066] The presented method recognizes if the requesting subscriber is directly connected, if not, an appropriate protocol can be selected depending on the latency, for example using MAC-Sec or IP-Sec for the latency applied inside the vehicle, and other IP / TCP based schemes can be used if the latency is too high and the subscriber is definitely outside the vehicle.

Claims

1. 1. A method for rapidly flashing a sensor node, one of a number of associated nodes, over an Ethernet network having a head node and a number of associated nodes to which time slots of a communication window are assigned by the head node, the method comprising: a) determining, by a head node, a number of active nodes among the plurality of associated nodes; b) classifying, by the head node, the plurality of associated nodes into two or more node classifications for prioritizing Ethernet network communications at a node level; c) receiving, by the head node, a reservation request for a time slot for at least a portion of the plurality of associated nodes; d) allocating time slots of a subsequent communication window to one or more of said associated nodes in response to reservation requests, said allocation being based on node priorities, and said node priorities being assigned to said associated nodes according to their classification. In a method comprising: After the number of active nodes is determined, a download data rate required for allocation of time slots in response to the reservation requests is determined, and a current bus utilization is ascertained, the bus utilization being ascertained by calculating the time between the most recent beacons transmitted by the head node and the number of the associated nodes, and the bus cycles of the Ethernet network, which are the time between the beacons, are modified with respect to the required download data rate. The method comprising:

2. 2. The method of claim 1, wherein said bus utilization is monitored continuously.

3. Once the required download data rate has been determined, the current available data rate (D ｆｒｅｉ ) is determined, and a required data rate per bus cycle (D ｚｕｓ ) is determined, and the available data rate (D ｆｒｅｉ ) is the required data rate per bus cycle (D ｚｕｓ ), no bus cycle change is performed in the next bus cycle, and the free data rate (D ｆｒｅｉ 3. The method according to claim 1, further comprising the step of: if the required data rate per bus cycle is less than the required data rate per bus cycle, then a change of bus cycle is performed in the next bus cycle.

4. A control unit for an Ethernet network, comprising as a first node: - sending a signal to a second control unit of said Ethernet network and receiving said signal from said second control unit; determining a delay time of said signal on a connection path to said second control unit; determining a maximum speed of said connection path based on said delay time; determining a type of transmission medium for said connection path based on said maximum speed; It is designed as a control unit for - a microprocessor, - volatile and non-volatile memories, at least two communication interfaces, - Synchronizable timer and said non-volatile memory contains program instructions for carrying out the method according to any one of claims 1 to 3, when executed by said microprocessor.

5. 5. An Ethernet network for a motor vehicle, comprising a first control unit and a second control unit, the control units being connected to each other via at least one connection path, and the first control unit being the control unit described in claim 4.

6. 6. An Ethernet network according to claim 5, comprising a third control unit (5), the third control unit (5) being only indirectly connected to the first control unit (3) and directly connected to the second control unit via a third connection path, the third control unit being designed to determine a delay time of a third signal between the second control unit and the third control unit (5) on the third connection path, and the first control unit being designed to trigger the determination of the delay time of the third signal by a service message to the third control unit.

7. A computer program comprising instructions which, when executed by a computer, cause the computer to perform the method (200) according to any one of claims 1 to 3.

8. A computer readable medium having stored thereon the computer program of claim 7.

9. A vehicle having a plurality of the control units of claim 4 including an Ethernet network.

Images