Communication control device, vehicle, communication control method, and communication control program

Abstract

To make it possible to prevent the fact that a switching control unit cannot operate according to new network settings from becoming apparent, after the fact, when network communication settings are changed in the state where a user does not recognize the situation.SOLUTION: A central ECU 22 as a communication control device includes: a reception unit 200 that receives a change notification regarding a change in communication settings of in-vehicle network 14; a determination unit 250 that determines whether an Ethernet switch 30 is operable according to new setting information that is required with the change notification; and an inquiry unit 210 that inquires a user whether the setting information is to be reflected in the Ethernet switch 30 when it is determined that the Ethernet switch 30 is operable according to the setting information.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to a communication control device for controlling communication over a network, a vehicle, a communication control method, and a program. [Background technology]

[0002] Patent Document 1 discloses a Software Defined Networking (SDN) technology that can change communication settings in a network (hereinafter also referred to as "network settings"). The SDN network includes an SDN controller and multiple SDN switches, and the SDN controller distributes network settings to the SDN switches, which then control the network. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2017-169044 Summary of the Invention [Problem to be solved by the invention]

[0004] Conventional technologies have the problem that if a user allows changes to an external system, such as software activation via a distribution package (OTA) or adding an ECU via plug-and-play, and then it becomes apparent that the SDN switch cannot operate according to the new network settings required by the changes, user convenience can be reduced.

[0005] The present invention has been made in consideration of the above facts, and aims to provide a communication control device, vehicle, communication control method, and communication control program that can prevent the switching control unit from subsequently becoming unable to operate in accordance with the new network settings when the network communication settings are changed without the user's knowledge. [Means for solving the problem]

[0006] The communication control device according to claim 1 is a communication control device that controls communication over a network, and includes: a receiving unit that receives a change notification related to a change in communication settings of the network; a determining unit that determines whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in accordance with the change notification; a query unit that, when it is determined that the switching control unit is operable according to the setting information, queries a user as to whether or not to reflect the new setting information in the switching control unit; and a communication control unit that transmits the new setting information to the switching control unit and transmits a request to the switching control unit to verify whether or not appropriate setting information that allows a downloaded application program to operate on the network is stored. The communication control unit receives from the switching control unit the verification result of the switching control unit in response to the verification request sent to the switching control unit, the judgment unit judges whether the communication control unit and the switching control unit are operable based on the verification result from the switching control unit, and the inquiry unit queries the user if the judgment unit judges that the communication control unit and the switching control unit are operable.

[0007] In the communication control device according to claim 1, a communication control device that controls communication of a network includes a receiving unit that receives a change notification related to a change in communication settings of the network, a determining unit that determines whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in accordance with the change notification, and a query unit that determines whether the switching control unit is operable according to the setting information, and queries a user about whether to reflect the new setting information in the switching control unit. Therefore, according to the communication control device, when the communication settings of the network are changed without the user's knowledge, it is possible to prevent the inability of the switching control unit to operate according to the new network setting from becoming apparent after the fact.

[0008] The communication control device of claim 2 is the communication control device of claim 1, and is further provided with a notification unit that, when the determination unit determines that the switching control unit is inoperable in accordance with the new setting information, notifies the user that the switching control unit is inoperable in accordance with the new setting information and the cause of the inoperability.

[0009] According to the communication control device of claim 2, the user can know that the switching control unit is inoperable according to the setting information and the cause of the inoperability.

[0010] The communication control device of claim 3 is a communication control device of claim 1 or 2, which includes a request unit that, when the determination unit determines that the switching control unit is inoperable according to the setting information, requests setting information that enables the switching control unit to operate from an external device outside the network.

[0011] According to the communication control device of claim 3, even if the switching control unit is inoperable according to the setting information, it is possible to acquire setting information that enables the switching control unit to operate.

[0012] A communication control device according to a fourth aspect of the present invention is the communication control device according to any one of the first to third aspects, wherein the accepting unit accepts the change notification together with an update of software executed in a control device on the network.

[0013] According to the communication control device of claim 4, it is possible to receive a change notification together with updating the software.

[0014] A communication control device according to a fifth aspect of the present invention is the communication control device according to any one of the first to fourth aspects, wherein the accepting unit accepts the change notification when a new control device is connected to the network.

[0015] According to the communication control device of claim 5, when a new control device is connected to the network, a change notification can be received.

[0016] A vehicle described in claim 6 includes the communication control device described in any one of claims 1 to 5, one or more of the switching control units, and a control device connected to the switching control unit.

[0017] According to the vehicle described in claim 6, when the network communication settings are changed without the user's knowledge, it is possible to prevent the switching control unit from subsequently becoming aware that it is unable to operate in accordance with the new network settings, thereby ensuring the safety of vehicle driving.

[0018] The communication control method according to claim 7 comprises: The device includes a reception unit, a determination unit, a query unit, and a communication control unit, A communication control method for controlling communication in a network, comprising: The reception unit, receiving a change notification regarding a change in communication settings of the network; The determination unit: determining whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in accordance with the change notification; The inquiry unit: when it is determined that the switching control unit is operable in accordance with the setting information, inquiring of a user as to whether or not the new setting information should be reflected in the switching control unit; The communication control unit The new setting information is transmitted to the switching control unit, and a request is transmitted to the switching control unit to verify whether the new setting information is stored as appropriate setting information that allows the downloaded application program to operate on the network. The communication control unit receives from the switching control unit a verification result of the switching control unit in response to a verification request transmitted to the switching control unit, the determination unit determines whether the communication control unit and the switching control unit are operable based on the verification result from the switching control unit, and the inquiry unit makes an inquiry to the user when the determination unit determines that the communication control unit and the switching control unit are operable. The processing is performed by a computer.

[0019] A communication control method according to claim 7 is a communication control method for controlling network communications, in which a computer receives a change notification related to a change in communication settings of the network. The communication control method also determines whether a switching control unit connected to a communication control device is operable according to new network setting information required in the change notification. If the communication control method determines that the switching control unit is operable according to the setting information, the method inquires of a user as to whether the new setting information should be reflected in the switching control unit. Therefore, this communication control method can prevent a situation in which the switching control unit is unable to operate according to the new network setting after the fact, when the network communication setting is changed without the user's knowledge.

[0020] The communication control program according to claim 8, The device includes a reception unit, a determination unit, a query unit, and a communication control unit, A communication control program for controlling communication on a network, The reception unit, receiving a change notification regarding a change in communication settings of the network; The determination unit: determining whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in accordance with the change notification; The inquiry unit: when it is determined that the switching control unit is operable in accordance with the setting information, inquiring of a user as to whether or not the new setting information should be reflected in the switching control unit; The communication control unit The new setting information is transmitted to the switching control unit, and a request is transmitted to the switching control unit to verify whether the new setting information is stored as appropriate setting information that allows the downloaded application program to operate on the network. The communication control unit receives from the switching control unit a verification result of the switching control unit in response to a verification request transmitted to the switching control unit, the determination unit determines whether the communication control unit and the switching control unit are operable based on the verification result from the switching control unit, and the inquiry unit makes an inquiry to the user when the determination unit determines that the communication control unit and the switching control unit are operable. , and have the computer execute the processing.

[0021] The communication control program according to claim 8 is a communication control program for controlling network communications, and causes a computer to execute the following processes. Specifically, the computer executes a process for receiving a change notification related to a change in the communication settings of the network. The computer also determines whether a switching control unit connected to the computer is operable according to new setting information of the network that becomes necessary in accordance with the change notification. If the computer determines that the switching control unit is operable according to the setting information, the computer inquires of a user whether to reflect the new setting information in the switching control unit. Therefore, this program can prevent a situation in which the switching control unit is unable to operate according to the new network setting after the fact from becoming apparent when the communication settings of the network are changed without the user's knowledge. [Effects of the Invention]

[0022] According to the present invention, when network communication settings are changed without the user's knowledge, it is possible to prevent the switching control unit from subsequently becoming aware that it is unable to operate in accordance with the new network settings. [Brief explanation of the drawings]

[0023] [Figure 1] 1 is a diagram showing a schematic configuration of a communication control system according to a first embodiment. [Figure 2] 2 is a block diagram showing the hardware configuration of an ECU in the vehicle of the first embodiment. FIG. [Figure 3] 1 is a block diagram showing a functional configuration of a communication control system according to a first embodiment. [Figure 4] FIG. 3 is a sequence diagram showing the flow of OTA processing in the communication control system of the first embodiment. [Figure 5] FIG. 3 is a sequence diagram showing the flow of OTA processing in the communication control system of the first embodiment. [Figure 6] FIG. 3 is a sequence diagram showing the flow of OTA processing in the communication control system of the first embodiment. [Figure 7] 5 is a flowchart showing the flow of an inquiry process executed in the central ECU of the first embodiment. [Figure 8] FIG. 2 is a front view showing an example of a display provided to a user in the first embodiment. [Figure 9] FIG. 3 is a sequence diagram showing the flow of plug-and-play processing in the communication control system of the first embodiment. [Figure 10] FIG. 3 is a sequence diagram showing the flow of plug-and-play processing in the communication control system of the first embodiment. [Figure 11] FIG. 10 is a block diagram showing a hardware configuration of an ECU in a vehicle according to a second embodiment. [Figure 12] FIG. 10 is a block diagram showing a hardware configuration of an ECU in a vehicle according to a third embodiment. [Figure 13] FIG. 10 is a block diagram showing the functional configuration of a communication control system according to a third embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0024] A communication control system including a communication control device of the present invention will be described. The communication control system is a system for performing communication in a vehicle, is compatible with SDN (Software Defined Networking), and is configured to be able to obtain setting information related to communication settings from a server outside the vehicle as needed.

[0025] [First embodiment] (Overall composition) 1, a communication control system 10 of the first embodiment includes a vehicle 12 and a center server 40 as an external device. The center server 40 is installed in an establishment that manages and operates the communication control system 10, such as the manufacturer of the vehicle 12. The vehicle 12 and the center server 40 are connected to each other via a public network N.

[0026] (vehicle) In the vehicle 12 of this embodiment, an in-vehicle network 14 is configured, which includes a plurality of ECUs 20, a plurality of Ethernet switches 30, and a DCM (Data Communication Module) 32. The in-vehicle network 14 is an example of a network. The ECU 20 also includes a central ECU 22 that oversees control of the vehicle 12, and an ECU 24 whose communications are controlled by the central ECU 22. Examples of the ECU 24 include an ADAS (Advanced Driver Assistance System)-ECU, a steering ECU, a body ECU, and an information system ECU. The ECU 24 is an example of a control device.

[0027] 2, the ECU 20 includes at least a control unit 21 that functions as an SDN controller, and may also include an Ethernet switch 30 as needed. The control unit 21 includes a central processing unit (CPU) 20A, a read-only memory (ROM) 20B, a random access memory (RAM) 20C, an in-vehicle communication interface (I / F) 20D, and an input / output I / F 20E. The CPU 20A, the ROM 20B, the RAM 20C, the in-vehicle communication I / F 20D, and the input / output I / F 20E are connected to each other via an internal bus 20G so as to be able to communicate with each other.

[0028] The CPU 20A is a central processing unit that executes various programs and controls each part. That is, the CPU 20A reads out a program from the ROM 20B and executes the program using the RAM 20C as a work area.

[0029] The ROM 20B stores various programs and various data. In this embodiment, the ROM 20B stores a control program 100 that controls the ECU 20, including communication. The ROM 20B also stores an application program 110 that allows the ECU 20 to execute an application. The control program 100 is an example of a communication control program. The RAM 20C temporarily stores programs or data as a working area.

[0030] The in-vehicle communication I / F 20D is an interface for connecting with each ECU 20. The interface uses a communication standard based on Ethernet (registered trademark). The in-vehicle communication I / F 20D is connected to the external bus 20H (see FIG. 1).

[0031] The input / output I / F 20E is an interface that connects the control unit 21 with other devices that constitute the ECU 20. For example, an Ethernet switch 30 is connected to the input / output I / F 20E of the central ECU 22.

[0032] The Ethernet switch 30 is a relay device that performs communication via Ethernet (registered trademark), and the Ethernet switch 30 of this embodiment functions as an SDN switch. The Ethernet switch 30 performs communication between ECUs 20 based on communication information related to communication settings of the in-vehicle network 14. The Ethernet switch 30 is also configured to be able to acquire communication information from the control unit 21 or another Ethernet switch 30. The Ethernet switch 30 is an example of a switching control unit.

[0033] The DCM 32 is a module that communicates according to a communication standard such as 5G, 4G, or LTE. The DCM 32 is connected to a public network N (see FIG. 1). In the vehicle 12, the DCM 32 is connected to the control unit 21 of the central ECU 22, but this is not a limitation and the DCM 32 may be built into the central ECU 22 or another ECU 24.

[0034] (Central ECU) The central ECU 22 is an ECU 20 equipped with a control unit 21 and an Ethernet switch 30. In the central ECU 22 of this embodiment, a CPU 20A executes a control program 100 to function as an integrated control unit 50 and a communication control unit 52 shown in Fig. 3. The central ECU 22 is an example of a communication control device.

[0035] The overall control unit 50 controls downloading of software updates such as the application program 110, and execution of plug-and-play when a new ECU 20 is connected to the in-vehicle network 14. The overall control unit 50 includes a reception unit 200, a query unit 210, and an execution unit 220.

[0036] The reception unit 200 has a function of receiving a download of the application program 110 and detecting plug-and-play of the ECU 20. In addition, the reception unit 200 of this embodiment receives a change notification related to a change in the communication settings of the in-vehicle network 14.

[0037] The inquiry unit 210 has a function of inquiring of the user of the vehicle 12 as to whether or not to change the settings of the in-vehicle network 14 .

[0038] The execution unit 220 as a reflection unit has a function of executing setting changes of the in-vehicle network 14 in accordance with software download or plug-and-play execution. When updating software, the execution unit 220 of this embodiment reflects the setting information in the communication control unit 52 and the Ethernet switch 30 when the download of the application program 110 is completed. When executing plug-and-play, the execution unit 220 reflects the setting information in the communication control unit 52 and the Ethernet switch 30 when the vehicle 12 is restarted (i.e., when the ignition is turned from OFF to ON).

[0039] The communication control unit 52 functions as an SDN controller. The communication control unit 52 includes a determination unit 250, a notification unit 260, and a request unit 270.

[0040] The determining unit 250 has a function of determining whether the communication control unit 52 and the Ethernet switch 30 have appropriate setting information when downloading software or performing plug-and-play.

[0041] The notification unit 260 has a function of notifying the overall control unit 50 of the states of the communication control unit 52 and the Ethernet switch 30. In the present embodiment, the notification unit 260 transmits a diagnostic code to the overall control unit 50 when a fault occurs in the in-vehicle network 14. This allows the center server 40 or the like that acquires the diagnostic code through the overall control unit 50 to understand the cause of the fault.

[0042] The request unit 270 has a function of requesting appropriate setting information when the communication control unit 52 and the Ethernet switch 30 do not have appropriate setting information. In this case, the request unit 270 of this embodiment requests setting information from the overall control unit 50 or the center server 40. The request unit 270 also requests the Ethernet switch 30 to verify its operation. The request unit 270 also requests activation of the Ethernet switch 30.

[0043] (Flow of Control) The flow of processing executed in the communication control system 10 of this embodiment will be described with reference to the sequence diagrams of Figures 4 to 6, the flowchart of Figure 7, the display screen of Figure 8, and the sequence diagrams of Figures 9 and 10. The processing in the central ECU 22 is executed by the CPU 20A functioning as the overall control unit 50 and the communication control unit 52.

[0044] First, we will explain the processing flow of the entire system in the center server 40, the control unit 21 of the central ECU 22, the Ethernet switch 30, and the ECU 24. Note that each sequence diagram shows only one Ethernet switch 30 and one ECU 24, but this is not limited to this and any Ethernet switch 30 and ECU 24 on the in-vehicle network 14 are included.

[0045] 4, the center server 40 transmits a package program to the general control unit 50 of the control unit 21. The package program includes the application program 110 and setting information for the in-vehicle network 14.

[0046] In step S11, the general control unit 50 of the control unit 21 transmits setting information to the communication control unit 52.

[0047] In step S12, the communication control unit 52 of the control unit 21 transmits the setting information to the Ethernet switch 30.

[0048] In step S13, the communication control unit 52 of the control unit 21 executes a verification process. Specifically, the communication control unit 52 of the control unit 21 verifies whether appropriate setting information is stored. Here, the appropriate setting information is setting information that allows the application program 110 downloaded in step S10 to operate on the in-vehicle network 14.

[0049] In step S14, the communication control unit 52 of the control unit 21 makes a verification request to the Ethernet switch 30. Specifically, the communication control unit 52 requests the Ethernet switch 30 to transmit the verification result indicating whether or not the Ethernet switch 30 stores appropriate setting information.

[0050] In step S15, the Ethernet switch 30 executes a verification process. Specifically, the Ethernet switch 30 verifies whether or not appropriate setting information is stored.

[0051] In step S16, the Ethernet switch 30 transmits the verification result to the communication control unit 52 of the control unit 21. Specifically, the Ethernet switch 30 transmits to the communication control unit 52 the verification result as to whether or not the Ethernet switch 30 stores the setting information.

[0052] In step S17, the communication control unit 52 of the control unit 21 executes a determination process. Specifically, the communication control unit 52 determines whether the communication control unit 52 and the Ethernet switch 30 have appropriate setting information.

[0053] In step S18, the communication control unit 52 of the control unit 21 transmits to the overall control unit 50 the determination result of the determination process executed in step S17.

[0054] In step S19, the overall control unit 50 of the control unit 21 determines whether at least one of the communication control unit 52 and the Ethernet switch 30 stores appropriate setting information, i.e., whether the communication control unit 52 and the Ethernet switch 30 are operable according to the setting information. If the overall control unit 50 determines that the communication control unit 52 and the Ethernet switch 30 are operable (step S19: YES), the process proceeds to step S40. On the other hand, if the overall control unit 50 determines that the communication control unit 52 and the Ethernet switch 30 are inoperable (step S19: NO), the process proceeds to step S30.

[0055] Next, the flow of processing of the entire system in the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 when the overall control unit 50 of the control unit 21 determines that the communication control unit 52 and the Ethernet switch 30 are inoperable will be described.

[0056] 5, the central control unit 50 of the control unit 21 requests the center server 40 for setting information that enables the Ethernet switch 30 to operate. Here, if the central control unit 50 determines in step S19 that the communication control unit 52 and the Ethernet switch 30 are inoperable, it generates a diagnostic code indicating that they are inoperable and the cause of the inoperability. Then, the central control unit 50 transmits, together with a command requesting the setting information, a diagnostic code indicating that the ECU 20 and the Ethernet switch 30 are inoperable and the cause of the inoperability to the in-vehicle network 14. In step S31, the center server 40 transmits setting information that enables the application program 110 to operate on the in-vehicle network 14 to the general control unit 50 of the control unit 21.

[0057] Then, the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 execute the same processes as those from step S11 to step S18 shown in FIG.

[0058] Next, we will explain the flow of processing in the entire system in the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 when the overall control unit 50 of the control unit 21 determines that the communication control unit 52 and the Ethernet switch 30 are operable.

[0059] 6, the central control unit 50 of the control unit 21 executes a query process. Details of the query process will be described later.

[0060] In step S41, the overall control unit 50 of the control unit 21 determines whether or not the setting information can be reflected based on the processing result of step S40. If the overall control unit 50 determines that the setting information can be reflected (step S41: YES), the process proceeds to step S42. On the other hand, if the overall control unit 50 determines that the setting information cannot be reflected (step S41: NO), the process ends.

[0061] In step S42, the central control unit 50 of the control unit 21 transmits the application program 110 to the ECU 24 in which the application program 110 is to be installed.

[0062] In step S43, the ECU 24 notifies the general control unit 50 of the control unit 21 that the download of the application program 110 has been completed.

[0063] In step S44, the overall control unit 50 of the control unit 21 requests activation from the communication control unit 52. Specifically, the overall control unit 50 requests that the setting information be reflected in the communication control unit 52. In addition, in step S44, the overall control unit 50 also requests activation from the ECU 24.

[0064] In step S45, the communication control unit 52 of the control unit 21 requests activation from the Ethernet switch 30. Specifically, the communication control unit 52 requests the Ethernet switch 30 to reflect the setting information.

[0065] In step S46, the communication control unit 52 of the control unit 21 executes a reflection process. Specifically, the communication control unit 52 reflects the setting information in the communication control unit 52.

[0066] In step S47, the Ethernet switch 30 executes a reflection process. Specifically, the Ethernet switch 30 reflects the setting information in the Ethernet switch 30.

[0067] In step S48, the ECU 24 executes a reflection process, specifically, the ECU 24 reflects the installed application program 110 and the setting information.

[0068] In step S49, the Ethernet switch 30 notifies the communication control unit 52 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30.

[0069] In step S50, the communication control unit 52 of the control unit 21 notifies the overall control unit 50 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30 and the communication control unit 52.

[0070] In step S51, the ECU 24 notifies the general control unit 50 of the control unit 21 that the application program 110 installed in the ECU 24 and the setting information have been reflected.

[0071] In step S52, the control unit 21, the Ethernet switch 30, and the ECU 24 start communication in association with the execution of the application program 110 installed in the ECU 24.

[0072] Next, the query processing in FIG. 7 will be described. In step S100 of Fig. 7, the integrated control unit 50 displays the inquiry on a monitor provided on the instrument panel or meter panel of the vehicle 12. Specifically, as shown in Fig. 8, a message is displayed indicating that the communication settings need to be updated in order to reflect the software that is the application program 110, and that the vehicle 12 cannot be restarted for a certain period of time while the communication settings are being updated. If the user of the vehicle 12 wants to reflect the software including the communication settings update, the user selects a button 80 marked "Yes." On the other hand, if the user of the vehicle 12 does not want to reflect the software including the communication settings update, the user selects a button 82 marked "No."

[0073] In step S101, the central control unit 50 determines whether or not the timer time has elapsed (for example, one minute since the start of displaying the query content). If the timer time has elapsed (step S101: YES), the central control unit 50 proceeds to step S102. On the other hand, if the timer time has elapsed (step S101: NO), the central control unit 50 proceeds to step S105.

[0074] In step S102, the central control unit 50 determines whether or not a selection as to whether to update the communication settings has been accepted. If the central control unit 50 has accepted the selection as to whether to update the communication settings (step S102: YES), the central control unit 50 proceeds to step S103. On the other hand, if the central control unit 50 has not accepted the selection as to whether to update the communication settings (step S102: NO), the central control unit 50 returns to step S100.

[0075] In step S103, the central control unit 50 determines whether the communication settings can be updated. Specifically, the central control unit 50 determines whether the button 80 has been selected. If the communication settings can be updated (step S103: YES), the central control unit 50 proceeds to step S104. On the other hand, if the communication settings cannot be updated (step S103: NO), the central control unit 50 proceeds to step S105.

[0076] In step S104, the central control unit 50 determines to update the communication settings.

[0077] In step S105, the central control unit 50 suspends the update of the communication settings.

[0078] In step S106, the central control unit 50 outputs the selection result of the user of the vehicle 12. Specifically, the central control unit 50 outputs the selection result of the user as to whether or not to update the communication settings accepted in the determination of step S102. Then, the central control unit 50 ends this inquiry process and returns to step S40 in FIG. 6.

[0079] Next, the flow of plug-and-play processing when a new ECU 24 is connected to the in-vehicle network 14 will be described with reference to FIGS.

[0080] 4 and the processing flow of the communication control system 10 shown in Fig. 9 differ in that the processing of step S60 is applied instead of the processing of step S10, and that the processing proceeds to step S70 when a positive determination is made in step S19. Note that the setting information verified during plug and play is setting information that enables the newly connected ECU 24 to operate in the in-vehicle network 14.

[0081] Steps that execute the same processes as those in the processing flow in the communication control system 10 shown in FIG. 4 are assigned the same step numbers as in FIG. 4, and descriptions thereof will be omitted.

[0082] In step S60 of FIG. 9, the ECU 24 transmits the setting information to the general control unit 50 of the control unit 21.

[0083] Next, the flow of processing in the entire system including the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 when the determination in step S19 is affirmative will be described.

[0084] 10, the overall control unit 50 of the control unit 21 executes the inquiry process. The flow of the inquiry process is the same as the flow of the process shown in FIG.

[0085] In step S71, the overall control unit 50 of the control unit 21 determines whether or not the setting information can be reflected based on the processing result of step S70. If the overall control unit 50 determines that the setting information can be reflected (step S71: YES), the process proceeds to step S72. On the other hand, if the overall control unit 50 determines that the setting information cannot be reflected (step S71: NO), the process ends.

[0086] In step S72, the vehicle 12 is restarted. Specifically, the vehicle 12 is controlled so that the ignition is turned off once and then turned on again.

[0087] In step S73, the overall control unit 50 of the control unit 21 requests activation from the communication control unit 52. Specifically, the overall control unit 50 requests the communication control unit 52 to reflect the setting information.

[0088] In step S74, the communication control unit 52 of the control unit 21 requests activation from the Ethernet switch 30. Specifically, the communication control unit 52 requests the Ethernet switch 30 to reflect the setting information.

[0089] In step S75, the central control unit 50 of the control unit 21 requests activation from the ECU 24. Specifically, the central control unit 50 requests the ECU 24 to reflect the setting information.

[0090] In step S76, the communication control unit 52 of the control unit 21 executes a reflection process. Specifically, the communication control unit 52 reflects the setting information in the communication control unit 52.

[0091] In step S77, the Ethernet switch 30 executes a reflection process. Specifically, the Ethernet switch 30 reflects the setting information in the Ethernet switch 30.

[0092] In step S78, the ECU 24 executes a reflection process. Specifically, the ECU 24 reflects the setting information in the ECU 24.

[0093] In step S79, the Ethernet switch 30 notifies the communication control unit 52 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30.

[0094] In step S80, the communication control unit 52 of the control unit 21 notifies the overall control unit 50 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30 and the communication control unit 52.

[0095] In step S81, the ECU 24 notifies the general control unit 50 of the control unit 21 that the setting information has been reflected in the ECU 24.

[0096] In step S82, the control unit 21, the Ethernet switch 30, and the ECU 24 start communication.

[0097] (summary) In the central ECU 22 of this embodiment, when the communication control unit 52 determines that the Ethernet switch 30 is inoperable according to the setting information, it notifies the user of the vehicle 12 that the Ethernet switch 30 is inoperable and of a diagnostic code according to the setting information. This allows the user to know that the Ethernet switch 30 is inoperable and the cause of the inoperability according to the setting information.

[0098] Furthermore, in the central ECU 22 of this embodiment, when the communication control unit 52 determines that the Ethernet switch 30 is inoperable according to the setting information, it requests setting information that enables the Ethernet switch 30 from the center server 40. Therefore, even if the Ethernet switch 30 is inoperable according to the setting information, it is possible to obtain setting information that enables the Ethernet switch 30 to operate.

[0099] In the central ECU 22 of this embodiment, the integrated control unit 50 receives a change notification together with an update of the application program 110 executed by the control device on the vehicle network of the ECU 24. Therefore, the change notification can be received together with the update of the application program 110.

[0100] Furthermore, in the central ECU 22 of this embodiment, the integrated control unit 50 receives a change notification when the ECU 24 is newly connected. Therefore, when the ECU 24 is newly connected, the change notification can be received.

[0101] The change notification in this embodiment is a notification related to the update of the application program 110, and in the central ECU 22, the communication control unit 52 determines whether setting information is stored based on the application program 110 to be updated. Therefore, it is possible to determine whether setting information is stored based on the information of the application program 110.

[0102] Furthermore, in the central ECU 22 of this embodiment, the integrated control unit 50 receives a change notification from the center server 40. Therefore, it is possible to receive a change notification from a device outside the in-vehicle network 14.

[0103] Furthermore, when changing the communication settings of the in-vehicle network 14, the central ECU 22 of this embodiment receives a change notification regarding the change of the communication settings, and then, at a predetermined opportunity, reflects the new setting information in the communication control unit 52 and the Ethernet switch 30. Therefore, according to this embodiment, the communication settings of the communication control unit 52 and the Ethernet switch 30 in the in-vehicle network 14 are reflected at a predetermined opportunity, thereby suppressing communication problems when changing the network settings.

[0104] In particular, this embodiment reduces communication problems that may occur when communication settings are changed during OTA software downloads, and also reduces communication problems that may occur when communication settings are changed during plug-and-play associated with connecting a new ECU 24.

[0105] The vehicle 12 of this embodiment includes a central ECU 22, one or more Ethernet switches 30, and an ECU 24. According to the vehicle 12 of this embodiment, when the network communication settings are changed without the user's knowledge, it is possible to prevent the switching control unit from being unable to operate according to the new network settings from becoming apparent after the fact, thereby ensuring the safety of vehicle travel.

[0106] [Second embodiment] The second embodiment differs from the first embodiment in that the Ethernet switch 30 is configured as a separate entity from the central ECU 22. The differences from the first embodiment will be described below.

[0107] 11, the central ECU 22 includes only the control unit 21, and does not include the Ethernet switch 30. In other words, the Ethernet switch 30 is configured as a separate entity from the central ECU 22.

[0108] As described above, in this embodiment, the Ethernet switch 30 is configured as a separate entity from the central ECU 22. Therefore, according to this embodiment, even if the central ECU 22 does not include the Ethernet switch 30, if the communication settings of the in-vehicle network 14 are changed without the user's knowledge, it is possible to prevent the inability of the Ethernet switch 30 to operate according to the new network settings from becoming apparent after the fact.

[0109] [Third embodiment] The third embodiment differs from the first embodiment in that the general control unit 50 of the control unit 21 functions by an ECU 20 separate from the central ECU 22. The differences from the first embodiment will be described below.

[0110] 12, a vehicle 12 of this embodiment has an in-vehicle network 14 including a plurality of ECUs 20, a plurality of Ethernet switches 30, and a DCM 32. The ECUs 20 each include a central ECU 22, an ECU 24, and a management ECU 26. The DCM 32 is connected to a public network N via the management ECU 26.

[0111] The central ECU 22 functions as a communication control unit 52 shown in Fig. 13 when the CPU 20A executes the control program 100. On the other hand, the management ECU 26 functions as an overall control unit 50 shown in Fig. 13 when the CPU 20A executes the control program 100. That is, in the vehicle 12 of this embodiment, the processing of the communication control unit 52 and the overall control unit 50 related to changing the network settings is realized by multiple CPUs 20A.

[0112] As described above, in this embodiment, the overall control unit 50 of the control unit 21 functions using an ECU 20 separate from the central ECU 22. Therefore, according to this embodiment, even when the overall control unit 50 of the control unit 21 functions using an ECU 20 separate from the central ECU 22, if the communication settings of the in-vehicle network 14 are changed without the user's knowledge, it is possible to prevent the inability of the Ethernet switch 30 to operate according to the new network settings from becoming apparent after the fact.

[0113] [remarks] The processing related to changing the network settings in each of the above embodiments has been exemplified as processing when the application program 110, which is software, is downloaded, and processing in the case of plug-and-play when the ECU 24 is added to the in-vehicle network 14. However, the cases in which the processing related to changing the network settings of the present embodiment is applied are not limited to these, and the processing may also be applied when the configuration of the in-vehicle network 14 is established when the vehicle 12 is manufactured, or when the in-vehicle network 14 is attacked from the outside and enters a fail-safe state.

[0114] The various processes executed by the CPU 20A after reading software (programs) in the above embodiment may be executed by various processors other than a CPU. Examples of such processors include programmable logic devices (PLDs) (such as field-programmable gate arrays (FPGAs)) whose circuit configuration can be changed after fabrication, and dedicated electrical circuits, such as application-specific integrated circuits (ASICs), which are processors with circuit configurations specifically designed to execute specific processes. Each of the above processes may be executed by one of these various processors, or by a combination of two or more processors of the same or different types (e.g., multiple FPGAs, or a combination of a CPU and an FPGA). The hardware structure of these various processors is, more specifically, an electrical circuit that combines circuit elements such as semiconductor devices.

[0115] In the above embodiment, each program is described as being pre-stored (installed) in a computer-readable non-transitory recording medium. For example, the control program 100 in the ECU 20 is pre-stored in the ROM 20B. However, the present invention is not limited to this. Each program may be provided in a form recorded on a non-transitory recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a USB (Universal Serial Bus) memory. The program may also be downloaded from an external device via a network.

[0116] The processing flow described in the above embodiment is an example, and unnecessary steps may be deleted, new steps may be added, or the processing order may be changed within the scope of the gist of the invention. [Explanation of symbols]

[0117] 12 vehicles 14 In-vehicle network (network) 22 Central ECU (communication control unit) 24 ECU (control unit) 30 Ethernet switch (switching control unit) 40 Center Server (External Device) 200 Reception 210 Enquiry Department 250 Judgment section 260 Notification Department 270 Request part 100 Control program (communication control program)

Claims

1. A communication control device that controls communication on a network, a reception unit that receives a change notification regarding a change in communication settings of the network; a determination unit that determines whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in response to the change notification; a query unit that queries a user as to whether or not the new setting information should be reflected in the switching control unit when it is determined that the switching control unit is operable in accordance with the setting information; a communication control unit that transmits the new setting information to the switching control unit and transmits a request to the switching control unit to verify whether the switching control unit stores appropriate setting information that allows the downloaded application program to operate on the network; Equipped with the communication control unit receives, from the switching control unit, a verification result of the switching control unit in response to the verification request transmitted to the switching control unit; the determination unit determines whether the communication control unit and the switching control unit are operable based on the verification result from the switching control unit; the inquiry unit makes an inquiry to the user when the determination unit determines that the communication control unit and the switching control unit are operable. Communications control device.

2. and a notification unit that, when the determination unit determines that the switching control unit is inoperable in accordance with the new setting information, notifies the user that the switching control unit is inoperable in accordance with the new setting information and of the cause of the inoperability. The communication control device according to claim 1 .

3. a request unit that, when the determination unit determines that the switching control unit is inoperable according to the setting information, requests setting information that enables the switching control unit to operate from an external device outside the network. The communication control device according to claim 1 or 2.

4. 4. The communication control device according to claim 1, wherein the accepting unit accepts the change notification together with an update of software executed in the control device on the network.

5. 5. The communication control device according to claim 1, wherein the reception unit receives the change notification when a new control device is connected to the network.

6. A communication control device according to any one of claims 1 to 5; One or more of the switching control units; a control device connected to the switching control unit; A vehicle equipped with.

7. A communication control method for controlling network communications, comprising a reception unit, a determination unit, a query unit, and a communication control unit, the receiving unit receives a change notification related to a change in communication settings of the network; the determination unit determines whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in accordance with the change notification; when the inquiry unit determines that the switching control unit is operable in accordance with the setting information, inquiring of a user as to whether or not the new setting information should be reflected in the switching control unit; the communication control unit transmits the new setting information to the switching control unit, and transmits a request to the switching control unit to verify whether appropriate setting information that allows the downloaded application program to operate on the network is stored; the communication control unit receives, from the switching control unit, a verification result of the switching control unit in response to the verification request transmitted to the switching control unit; the determination unit determines whether the communication control unit and the switching control unit are operable based on the verification result from the switching control unit; the inquiry unit makes an inquiry to the user when the determination unit determines that the communication control unit and the switching control unit are operable. A communication control method in which processing is executed by a computer.

8. A communication control program that includes a reception unit, a determination unit, a query unit, and a communication control unit, and controls communication on a network, the receiving unit receives a change notification related to a change in communication settings of the network; the determination unit determines whether a switching control unit connected to the communication control device is operable according to new setting information of the network that becomes necessary in accordance with the change notification; when the inquiry unit determines that the switching control unit is operable in accordance with the setting information, inquiring of a user as to whether or not the new setting information should be reflected in the switching control unit; the communication control unit transmits the new setting information to the switching control unit, and transmits a request to the switching control unit to verify whether appropriate setting information that allows the downloaded application program to operate on the network is stored; the communication control unit receives, from the switching control unit, a verification result of the switching control unit in response to the verification request transmitted to the switching control unit; the determination unit determines whether the communication control unit and the switching control unit are operable based on the verification result from the switching control unit; the inquiry unit makes an inquiry to the user when the determination unit determines that the communication control unit and the switching control unit are operable. A communication control program that causes a computer to execute processing.

Images