Communication control device, vehicle, communication control method, and communication control program

Abstract

To make it possible to reduce the possibility of problems occurring caused by poor communication after network setting changes, even if neither a communication control device nor a switching control unit connected to the communication control device knows new network settings that are required due to changes in network communication settings.SOLUTION: A central ECU 22 as a communication control device includes: a reception unit 200 that receives a change notification regarding a change in communication settings of an in-vehicle network 14 from a center server 40; a determination unit 250 that determines whether at least one of the central ECU 22 and an Ethernet switch 30 stores new setting information of the in-vehicle network 14 that is required with the change notification; and a request unit 270 that requests the center server 40 for the setting information if it is determined that neither the central ECU 22 nor the Ethernet switch 30 stores the setting information.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to a communication control device for controlling communication over a network, a vehicle, a communication control method, and a program. [Background technology]

[0002] Patent Document 1 discloses a Software Defined Networking (SDN) technology that can change communication settings in a network (hereinafter also referred to as "network settings"). The SDN network includes an SDN controller and multiple SDN switches, and the SDN controller distributes network settings to the SDN switches, which then control the network. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2017-169044 Summary of the Invention [Problem to be solved by the invention]

[0004] With conventional technology, if the SDN controller or SDN switch does not know the new network settings required when changing external systems, such as activating software via a distribution package (OTA: Over The Air) or adding plug-and-play functionality, there is a concern that communication will not work properly after the network settings are changed, resulting in problems.

[0005] The present invention has been made in consideration of the above facts, and aims to provide a communication control device, vehicle, communication control method, and communication control program that can reduce the possibility of problems occurring due to poor communication after a change in network settings, even if neither the communication control device nor a switching control unit connected to the communication control device knows the new network settings that are required when the network communication settings are changed. [Means for solving the problem]

[0006] The communication control device according to claim 1 is a communication control device that controls communication of a network, and includes: a reception unit that receives a change notification related to a change in communication settings of the network; and a reception unit that receives new setting information of the network that is required in accordance with the change notification, Based on the result of verifying whether the communication control device has the setting information and the result of verifying whether the switching control unit connected to the communication control device has the setting information, the communication control device and Anniversary The communication control device includes a determination unit that determines whether at least one of the communication control units stores the setting information, and a request unit that requests the setting information from an external device outside the network if the determination unit determines that neither the communication control unit nor the switching control unit stores the setting information.

[0007] In the communication control device according to claim 1, a communication control device for controlling communication of a network, wherein a reception unit receives a change notification relating to a change in communication settings of the network, and a determination unit determines new setting information of the network that is required in accordance with the change notification, Based on the result of verifying whether the communication control device has the setting information and the result of verifying whether the switching control unit connected to the communication control device has the setting information, the communication control device and Anniversary The communication control device can reduce the possibility of problems occurring due to poor communication after a change in network settings, even if neither the communication control device nor the switching control unit knows new network settings that are required in response to a change in network communication settings.

[0008] The communication control device of claim 2 is the communication control device of claim 1, wherein the change notification is a notification regarding a software update in a device connected to the network, and the determination unit determines whether the setting information is stored based on information about the software to be updated.

[0009] According to the communication control device of claim 2, it is possible to determine whether setting information is stored based on information about software to be updated.

[0010] A communication control device according to a third aspect of the present invention is the communication control device according to the first or second aspect, wherein the accepting unit accepts the change notification from the external device.

[0011] According to the communication control device of claim 3, it is possible to receive a change notification from a device outside the network.

[0012] A communication control device according to a fourth aspect of the present invention is the communication control device according to any one of the first to third aspects, wherein the accepting unit accepts the change notification together with an update of software executed in a control device on the network.

[0013] According to the communication control device of claim 4, it is possible to receive a change notification together with updating the software.

[0014] A communication control device according to a fifth aspect of the present invention is the communication control device according to any one of the first to fourth aspects, wherein the accepting unit accepts the change notification when a new control device is connected to the network.

[0015] According to the communication control device of claim 5, when a new control device is connected to the network, a change notification can be received.

[0016] A vehicle described in claim 6 includes the communication control device described in any one of claims 1 to 5, one or more of the switching control units, and a control device connected to the switching control unit.

[0017] According to the vehicle described in claim 6, even if neither the communication control device nor the switching control unit knows the new network settings that are required in conjunction with a change in the network communication settings, it is possible to reduce the possibility of problems occurring due to poor communication after the network settings are changed, thereby ensuring the safety of the vehicle's driving.

[0018] A communication control method according to claim 7 is a communication control method for controlling communication on a network, comprising: receiving a change notification relating to a change in communication settings of the network; and, regarding new setting information of the network that is required in response to the change notification, Based on the result of verifying whether the communication control device has the setting information and the result of verifying whether the switching control unit connected to the communication control device has the setting information, Communication control device and Anniversary The computer determines whether at least one of the communication control device and the switching control unit has stored the setting information, and if it determines that neither the communication control device nor the switching control unit has stored the setting information, it executes a process of requesting the setting information from an external device outside the network.

[0019] The communication control method according to claim 7 is a communication control method for controlling communication over a network, wherein a computer receives a change notification relating to a change in communication settings of the network, and performs the following with respect to new setting information of the network that is required in response to the change notification: Based on the result of verifying whether the communication control device has the setting information and the result of verifying whether the switching control unit connected to the communication control device has the setting information, Communication control device and Anniversary and if it is determined that neither the communication control device nor the switching control unit has stored the setting information, it requests the setting information from an external device outside the network. Therefore, according to this communication control method, even if neither the communication control device nor the switching control unit knows new network settings that are required in conjunction with a change in network communication settings, it is possible to reduce the possibility of problems occurring due to poor communication after a network setting change.

[0020] A communication control program according to claim 8 is a communication control program for controlling communication over a network, the program receiving a change notification relating to a change in communication settings of the network, and for new setting information of the network required in response to the change notification, Based on the result of verifying whether the communication control device has the setting information and the result of verifying whether the switching control unit connected to the communication control device has the setting information, Communication control device and Anniversary The computer determines whether at least one of the communication control device and the switching control unit has stored the setting information, and if it determines that neither the communication control device nor the switching control unit has stored the setting information, the computer executes a process to request the setting information from an external device outside the network.

[0021] The communication control program according to claim 8 is a communication control program for controlling communication over a network, and causes a computer to execute the following process: the computer receives a change notification relating to a change in communication settings of the network, and, with respect to new setting information of the network that is required in response to the change notification, Based on the result of verifying whether the communication control device has the setting information and the result of verifying whether the switching control unit connected to the communication control device has the setting information, Communication control device and Anniversary and if it is determined that neither the communication control device nor the switching control unit stores the setting information, it requests the setting information from an external device outside the network. Therefore, according to the program, even if neither the communication control device nor the switching control unit knows new network settings that are required in conjunction with a change in network communication settings, it is possible to reduce the possibility of problems occurring due to poor communication after a network setting change. [Effects of the Invention]

[0022] According to the present invention, even if neither the communication control device nor the switching control unit connected to the communication control device knows the new network settings required in connection with a change in the network communication settings, the possibility of problems occurring due to poor communication after the network settings are changed can be reduced. [Brief explanation of the drawings]

[0023] [Figure 1] 1 is a diagram showing a schematic configuration of a communication control system according to a first embodiment. [Figure 2] 2 is a block diagram showing the hardware configuration of an ECU in the vehicle of the first embodiment. FIG. [Figure 3] 1 is a block diagram showing a functional configuration of a communication control system according to a first embodiment. [Figure 4] FIG. 3 is a sequence diagram showing the flow of OTA processing in the communication control system of the first embodiment. [Figure 5] FIG. 3 is a sequence diagram showing the flow of OTA processing in the communication control system of the first embodiment. [Figure 6] FIG. 3 is a sequence diagram showing the flow of OTA processing in the communication control system of the first embodiment. [Figure 7] 5 is a flowchart showing the flow of an inquiry process executed in the central ECU of the first embodiment. [Figure 8] FIG. 2 is a front view showing an example of a display provided to a user in the first embodiment. [Figure 9] FIG. 3 is a sequence diagram showing the flow of plug-and-play processing in the communication control system of the first embodiment. [Figure 10] FIG. 3 is a sequence diagram showing the flow of plug-and-play processing in the communication control system of the first embodiment. [Figure 11] FIG. 10 is a block diagram showing a hardware configuration of an ECU in a vehicle according to a second embodiment. [Figure 12] FIG. 10 is a block diagram showing a hardware configuration of an ECU in a vehicle according to a third embodiment. [Figure 13] FIG. 10 is a block diagram showing the functional configuration of a communication control system according to a third embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0024] A communication control system including a communication control device of the present invention will be described. The communication control system is a system for performing communication in a vehicle, is compatible with SDN (Software Defined Networking), and is configured to be able to obtain setting information related to communication settings from a server outside the vehicle as needed.

[0025] [First embodiment] (Overall composition) 1, a communication control system 10 of the first embodiment includes a vehicle 12 and a center server 40 as an external device. The center server 40 is installed in an establishment that manages and operates the communication control system 10, such as the manufacturer of the vehicle 12. The vehicle 12 and the center server 40 are connected to each other via a public network N.

[0026] (vehicle) In the vehicle 12 of this embodiment, an in-vehicle network 14 is configured, which includes a plurality of ECUs 20, a plurality of Ethernet switches 30, and a DCM (Data Communication Module) 32. The in-vehicle network 14 is an example of a network. The ECU 20 also includes a central ECU 22 that oversees control of the vehicle 12, and an ECU 24 whose communications are controlled by the central ECU 22. Examples of the ECU 24 include an ADAS (Advanced Driver Assistance System)-ECU, a steering ECU, a body ECU, and an information system ECU. The ECU 24 is an example of a control device.

[0027] 2, the ECU 20 includes at least a control unit 21 that functions as an SDN controller, and may also include an Ethernet switch 30 as needed. The control unit 21 includes a central processing unit (CPU) 20A, a read-only memory (ROM) 20B, a random access memory (RAM) 20C, an in-vehicle communication interface (I / F) 20D, and an input / output I / F 20E. The CPU 20A, the ROM 20B, the RAM 20C, the in-vehicle communication I / F 20D, and the input / output I / F 20E are connected to each other via an internal bus 20G so as to be able to communicate with each other.

[0028] The CPU 20A is a central processing unit that executes various programs and controls each part. That is, the CPU 20A reads out the programs from the ROM 20B and executes the programs using the RAM 20C as a working area.

[0029] The ROM 20B stores various programs and various data. In this embodiment, the ROM 20B stores a control program 100 that controls the ECU 20, including communication. The ROM 20B also stores an application program 110 that allows the ECU 20 to execute an application. The control program 100 is an example of a communication control program. The RAM 20C temporarily stores programs or data as a working area.

[0030] The in-vehicle communication I / F 20D is an interface for connecting with each ECU 20. The interface uses a communication standard based on Ethernet (registered trademark). The in-vehicle communication I / F 20D is connected to the external bus 20H (see FIG. 1).

[0031] The input / output I / F 20E is an interface that connects the control unit 21 with other devices that constitute the ECU 20. For example, an Ethernet switch 30 is connected to the input / output I / F 20E of the central ECU 22.

[0032] The Ethernet switch 30 is a relay device that performs communication via Ethernet (registered trademark), and the Ethernet switch 30 of this embodiment functions as an SDN switch. The Ethernet switch 30 performs communication between ECUs 20 based on communication information related to communication settings of the in-vehicle network 14. The Ethernet switch 30 is also configured to be able to acquire communication information from the control unit 21 or another Ethernet switch 30. The Ethernet switch 30 is an example of a switching control unit.

[0033] The DCM 32 is a module that communicates according to a communication standard such as 5G, 4G, or LTE. The DCM 32 is connected to a public network N (see FIG. 1). In the vehicle 12, the DCM 32 is connected to the control unit 21 of the central ECU 22, but this is not a limitation and the DCM 32 may be built into the central ECU 22 or another ECU 24.

[0034] (Central ECU) The central ECU 22 is an ECU 20 equipped with a control unit 21 and an Ethernet switch 30. In the central ECU 22 of this embodiment, a CPU 20A executes a control program 100 to function as an integrated control unit 50 and a communication control unit 52 shown in Fig. 3. The central ECU 22 is an example of a communication control device.

[0035] The overall control unit 50 controls downloading of software updates such as the application program 110, and execution of plug-and-play when a new ECU 20 is connected to the in-vehicle network 14. The overall control unit 50 includes a reception unit 200, a query unit 210, and an execution unit 220.

[0036] The reception unit 200 has a function of receiving a download of the application program 110 and detecting plug-and-play of the ECU 20. In addition, the reception unit 200 of this embodiment receives a change notification related to a change in the communication settings of the in-vehicle network 14.

[0037] The inquiry unit 210 has a function of inquiring of the user of the vehicle 12 as to whether or not to change the settings of the in-vehicle network 14 .

[0038] The execution unit 220 as a reflection unit has a function of executing setting changes of the in-vehicle network 14 in accordance with software download or plug-and-play execution. When updating software, the execution unit 220 of this embodiment reflects the setting information in the communication control unit 52 and the Ethernet switch 30 when the download of the application program 110 is completed. When executing plug-and-play, the execution unit 220 reflects the setting information in the communication control unit 52 and the Ethernet switch 30 when the vehicle 12 is restarted (i.e., when the ignition is turned from OFF to ON).

[0039] The communication control unit 52 functions as an SDN controller. The communication control unit 52 includes a determination unit 250, a notification unit 260, and a request unit 270.

[0040] The determining unit 250 has a function of determining whether the communication control unit 52 and the Ethernet switch 30 have appropriate setting information when downloading software or performing plug-and-play.

[0041] The notification unit 260 has a function of notifying the overall control unit 50 of the states of the communication control unit 52 and the Ethernet switch 30. In the present embodiment, the notification unit 260 transmits a diagnostic code to the overall control unit 50 when a fault occurs in the in-vehicle network 14. This allows the center server 40 or the like that acquires the diagnostic code through the overall control unit 50 to understand the cause of the fault.

[0042] The request unit 270 has a function of requesting appropriate setting information when the communication control unit 52 and the Ethernet switch 30 do not have appropriate setting information. In this case, the request unit 270 of this embodiment requests setting information from the overall control unit 50 or the center server 40.

[0043] (Flow of Control) The flow of processing executed in the communication control system 10 of this embodiment will be described with reference to the sequence diagrams of Figures 4 to 6, the flowchart of Figure 7, the display screen of Figure 8, and the sequence diagrams of Figures 9 and 10. The processing in the central ECU 22 is executed by the CPU 20A functioning as the overall control unit 50 and the communication control unit 52.

[0044] First, we will explain the processing flow of the entire system in the center server 40, the control unit 21 of the central ECU 22, the Ethernet switch 30, and the ECU 24. Note that each sequence diagram shows only one Ethernet switch 30 and one ECU 24, but this is not limited to this and any Ethernet switch 30 and ECU 24 on the in-vehicle network 14 are included.

[0045] 4, the center server 40 transmits a package program to the general control unit 50 of the control unit 21. The package program includes the application program 110 and setting information for the in-vehicle network 14.

[0046] In step S11, the general control unit 50 of the control unit 21 transmits setting information to the communication control unit 52.

[0047] In step S12, the communication control unit 52 of the control unit 21 transmits the setting information to the Ethernet switch 30.

[0048] In step S13, the communication control unit 52 of the control unit 21 executes a verification process. Specifically, the communication control unit 52 of the control unit 21 verifies whether appropriate setting information is stored. Here, the appropriate setting information is setting information that allows the application program 110 downloaded in step S10 to operate on the in-vehicle network 14.

[0049] In step S14, the communication control unit 52 of the control unit 21 makes a verification request to the Ethernet switch 30. Specifically, the communication control unit 52 requests the Ethernet switch 30 to transmit the verification result indicating whether or not the Ethernet switch 30 stores appropriate setting information.

[0050] In step S15, the Ethernet switch 30 executes a verification process. Specifically, the Ethernet switch 30 verifies whether or not appropriate setting information is stored.

[0051] In step S16, the Ethernet switch 30 transmits the verification result to the communication control unit 52 of the control unit 21. Specifically, the Ethernet switch 30 transmits to the communication control unit 52 the verification result as to whether or not the Ethernet switch 30 stores the setting information.

[0052] In step S17, the communication control unit 52 of the control unit 21 executes a determination process. Specifically, the communication control unit 52 determines whether the communication control unit 52 and the Ethernet switch 30 have appropriate setting information.

[0053] In step S18, the communication control unit 52 of the control unit 21 transmits to the overall control unit 50 the determination result of the determination process executed in step S17.

[0054] In step S19, the overall control unit 50 of the control unit 21 determines whether at least one of the communication control unit 52 and the Ethernet switch 30 stores appropriate setting information, i.e., whether the communication control unit 52 and the Ethernet switch 30 are operable according to the setting information. If the overall control unit 50 determines that the communication control unit 52 and the Ethernet switch 30 are operable (step S19: YES), the process proceeds to step S40. On the other hand, if the overall control unit 50 determines that the communication control unit 52 and the Ethernet switch 30 are inoperable (step S19: NO), the process proceeds to step S30.

[0055] Next, the flow of processing of the entire system in the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 when the overall control unit 50 of the control unit 21 determines that the communication control unit 52 and the Ethernet switch 30 are inoperable will be described.

[0056] 5, the central control unit 50 of the control unit 21 requests the center server 40 for setting information that enables the Ethernet switch 30 to operate. Here, if the central control unit 50 determines in step S19 that the communication control unit 52 and the Ethernet switch 30 are inoperable, it generates a diagnostic code indicating that they are inoperable and the cause of the inoperability. Then, the central control unit 50 transmits, together with a command requesting the setting information, a diagnostic code indicating that the ECU 20 and the Ethernet switch 30 are inoperable and the cause of the inoperability to the in-vehicle network 14.

[0057] In step S31, the center server 40 transmits setting information that enables the application program 110 to operate on the in-vehicle network 14 to the general control unit 50 of the control unit 21.

[0058] Then, the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 execute the same processes as those from step S11 to step S18 shown in FIG.

[0059] Next, we will explain the flow of processing in the entire system in the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 when the overall control unit 50 of the control unit 21 determines that the communication control unit 52 and the Ethernet switch 30 are operable.

[0060] 6, the central control unit 50 of the control unit 21 executes a query process. Details of the query process will be described later.

[0061] In step S41, the overall control unit 50 of the control unit 21 determines whether or not the setting information can be reflected based on the processing result of step S40. If the overall control unit 50 determines that the setting information can be reflected (step S41: YES), the process proceeds to step S42. On the other hand, if the overall control unit 50 determines that the setting information cannot be reflected (step S41: NO), the process ends.

[0062] In step S42, the central control unit 50 of the control unit 21 transmits the application program 110 to the ECU 24 in which the application program 110 is to be installed.

[0063] In step S43, the ECU 24 notifies the general control unit 50 of the control unit 21 that the download of the application program 110 has been completed.

[0064] In step S44, the overall control unit 50 of the control unit 21 requests activation from the communication control unit 52. Specifically, the overall control unit 50 requests the communication control unit 52 to reflect the setting information.

[0065] In step S45, the communication control unit 52 of the control unit 21 requests activation from the Ethernet switch 30. Specifically, the communication control unit 52 requests the Ethernet switch 30 to reflect the setting information.

[0066] In step S46, the communication control unit 52 of the control unit 21 executes a reflection process. Specifically, the communication control unit 52 reflects the setting information in the communication control unit 52.

[0067] In step S47, the Ethernet switch 30 executes a reflection process. Specifically, the Ethernet switch 30 reflects the setting information in the Ethernet switch 30.

[0068] In step S48, the ECU 24 executes a reflection process, specifically, the ECU 24 reflects the installed application program 110 and the setting information.

[0069] In step S49, the Ethernet switch 30 notifies the communication control unit 52 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30.

[0070] In step S50, the communication control unit 52 of the control unit 21 notifies the overall control unit 50 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30 and the communication control unit 52.

[0071] In step S51, the ECU 24 notifies the general control unit 50 of the control unit 21 that the application program 110 installed in the ECU 24 and the setting information have been reflected.

[0072] In step S52, the control unit 21, the Ethernet switch 30, and the ECU 24 start communication in association with the execution of the application program 110 installed in the ECU 24.

[0073] Next, the query processing in FIG. 7 will be described. In step S100 of Fig. 7, the integrated control unit 50 displays the inquiry on a monitor provided on the instrument panel or meter panel of the vehicle 12. Specifically, as shown in Fig. 8, a message is displayed indicating that the communication settings need to be updated in order to reflect the software that is the application program 110, and that the vehicle 12 cannot be restarted for a certain period of time while the communication settings are being updated. If the user of the vehicle 12 wants to reflect the software including the communication settings update, the user selects a button 80 marked "Yes." On the other hand, if the user of the vehicle 12 does not want to reflect the software including the communication settings update, the user selects a button 82 marked "No."

[0074] In step S101, the central control unit 50 determines whether or not the timer time has elapsed (for example, one minute since the start of displaying the query content). If the timer time has elapsed (step S101: YES), the central control unit 50 proceeds to step S102. On the other hand, if the timer time has elapsed (step S101: NO), the central control unit 50 proceeds to step S105.

[0075] In step S102, the central control unit 50 determines whether or not a selection as to whether to update the communication settings has been accepted. If the central control unit 50 has accepted the selection as to whether to update the communication settings (step S102: YES), the central control unit 50 proceeds to step S103. On the other hand, if the central control unit 50 has not accepted the selection as to whether to update the communication settings (step S102: NO), the central control unit 50 returns to step S100.

[0076] In step S103, the central control unit 50 determines whether the communication settings can be updated. Specifically, the central control unit 50 determines whether the button 80 has been selected. If the communication settings can be updated (step S103: YES), the central control unit 50 proceeds to step S104. On the other hand, if the communication settings cannot be updated (step S103: NO), the central control unit 50 proceeds to step S105.

[0077] In step S104, the central control unit 50 determines to update the communication settings.

[0078] In step S105, the central control unit 50 suspends the update of the communication settings.

[0079] In step S106, the central control unit 50 outputs the selection result of the user of the vehicle 12. Specifically, the central control unit 50 outputs the selection result of the user as to whether or not to update the communication settings accepted in the determination of step S102. Then, the central control unit 50 ends this inquiry process and returns to step S40 in FIG. 6.

[0080] Next, the flow of plug-and-play processing when a new ECU 24 is connected to the in-vehicle network 14 will be described with reference to FIGS.

[0081] 4 and the processing flow of the communication control system 10 shown in Fig. 9 differ in that the processing of step S60 is applied instead of the processing of step S10, and that the processing proceeds to step S70 when a positive determination is made in step S19. Note that the setting information verified during plug and play is setting information that enables the newly connected ECU 24 to operate in the in-vehicle network 14.

[0082] Steps that execute the same processes as those in the processing flow in the communication control system 10 shown in FIG. 4 are assigned the same step numbers as in FIG. 4, and descriptions thereof will be omitted.

[0083] In step S60 of FIG. 9, the ECU 24 transmits the setting information to the general control unit 50 of the control unit 21.

[0084] Next, the flow of processing in the entire system including the center server 40, the control unit 21, the Ethernet switch 30, and the ECU 24 when the determination in step S19 is affirmative will be described.

[0085] 10, the overall control unit 50 of the control unit 21 executes the inquiry process. The flow of the inquiry process is the same as the flow of the process shown in FIG.

[0086] In step S71, the overall control unit 50 of the control unit 21 determines whether or not the setting information can be reflected based on the processing result of step S70. If the overall control unit 50 determines that the setting information can be reflected (step S71: YES), the process proceeds to step S72. On the other hand, if the overall control unit 50 determines that the setting information cannot be reflected (step S71: NO), the process ends.

[0087] In step S72, the vehicle 12 is restarted. Specifically, the vehicle 12 is controlled so that the ignition is turned off once and then turned on again.

[0088] In step S73, the overall control unit 50 of the control unit 21 requests activation from the communication control unit 52. Specifically, the overall control unit 50 requests the communication control unit 52 to reflect the setting information.

[0089] In step S74, the communication control unit 52 of the control unit 21 requests activation from the Ethernet switch 30. Specifically, the communication control unit 52 requests the Ethernet switch 30 to reflect the setting information.

[0090] In step S75, the central control unit 50 of the control unit 21 requests activation from the ECU 24. Specifically, the central control unit 50 requests the ECU 24 to reflect the setting information.

[0091] In step S76, the communication control unit 52 of the control unit 21 executes a reflection process. Specifically, the communication control unit 52 reflects the setting information in the communication control unit 52.

[0092] In step S77, the Ethernet switch 30 executes a reflection process. Specifically, the Ethernet switch 30 reflects the setting information in the Ethernet switch 30.

[0093] In step S78, the ECU 24 executes a reflection process. Specifically, the ECU 24 reflects the setting information in the ECU 24.

[0094] In step S79, the Ethernet switch 30 notifies the communication control unit 52 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30.

[0095] In step S80, the communication control unit 52 of the control unit 21 notifies the overall control unit 50 of the control unit 21 that the setting information has been reflected in the Ethernet switch 30 and the communication control unit 52.

[0096] In step S81, the ECU 24 notifies the general control unit 50 of the control unit 21 that the setting information has been reflected in the ECU 24.

[0097] In step S82, the control unit 21, the Ethernet switch 30, and the ECU 24 start communication.

[0098] (summary) In the central ECU 22 of this embodiment, when the communication control unit 52 determines that the Ethernet switch 30 is inoperable according to the setting information, it notifies the user of the vehicle 12 that the Ethernet switch 30 is inoperable and of a diagnostic code according to the setting information. This allows the user to know that the Ethernet switch 30 is inoperable and the cause of the inoperability according to the setting information.

[0099] Furthermore, in the central ECU 22 of this embodiment, when the communication control unit 52 determines that the Ethernet switch 30 is inoperable according to the setting information, it requests setting information that enables the Ethernet switch 30 from the center server 40. Therefore, even if the Ethernet switch 30 is inoperable according to the setting information, it is possible to obtain setting information that enables the Ethernet switch 30 to operate.

[0100] In the central ECU 22 of this embodiment, the integrated control unit 50 receives a change notification together with an update of the application program 110 executed by the control device on the vehicle network of the ECU 24. Therefore, the change notification can be received together with the update of the application program 110.

[0101] Furthermore, in the central ECU 22 of this embodiment, the integrated control unit 50 receives a change notification when the ECU 24 is newly connected. Therefore, when the ECU 24 is newly connected, the change notification can be received.

[0102] The change notification in this embodiment is a notification related to the update of the application program 110, and in the central ECU 22, the communication control unit 52 determines whether setting information is stored based on the application program 110 to be updated. Therefore, it is possible to determine whether setting information is stored based on the information of the application program 110.

[0103] Furthermore, in the central ECU 22 of this embodiment, the integrated control unit 50 receives a change notification from the center server 40. Therefore, it is possible to receive a change notification from a device outside the in-vehicle network 14.

[0104] Furthermore, when changing the communication settings of the in-vehicle network 14, the central ECU 22 of this embodiment receives a change notification regarding the change of the communication settings, and then, at a predetermined opportunity, reflects the new setting information in the communication control unit 52 and the Ethernet switch 30. Therefore, according to this embodiment, the communication settings of the communication control unit 52 and the Ethernet switch 30 in the in-vehicle network 14 are reflected at a predetermined opportunity, thereby suppressing communication problems when changing the network settings.

[0105] In particular, this embodiment reduces communication problems that may occur when communication settings are changed during OTA software downloads, and also reduces communication problems that may occur when communication settings are changed during plug-and-play associated with connecting a new ECU 24.

[0106] The vehicle 12 of this embodiment also includes a central ECU 22, one or more Ethernet switches 30, and an ECU 24. As described above, the vehicle 12 of this embodiment can reduce the possibility of problems occurring due to poor communication after a network setting change, even if neither the communication control unit 52 nor the Ethernet switch 30 knows the setting information. This ensures safe driving of the vehicle 12.

[0107] [Second embodiment] The second embodiment differs from the first embodiment in that the Ethernet switch 30 is configured as a separate entity from the central ECU 22. The differences from the first embodiment will be described below.

[0108] 11, the central ECU 22 includes only the control unit 21, and does not include the Ethernet switch 30. In other words, the Ethernet switch 30 is configured as a separate entity from the central ECU 22.

[0109] As described above, in this embodiment, the Ethernet switch 30 is configured as a separate entity from the central ECU 22. Therefore, according to this embodiment, even if the central ECU 22 does not include the Ethernet switch 30, if the network communication settings are changed without the user's knowledge, it is possible to prevent the switching control unit from subsequently becoming unable to operate in accordance with the new network settings.

[0110] [Third embodiment] The third embodiment differs from the first embodiment in that the general control unit 50 of the control unit 21 functions by an ECU 20 separate from the central ECU 22. The differences from the first embodiment will be described below.

[0111] 12, a vehicle 12 of this embodiment has an in-vehicle network 14 including a plurality of ECUs 20, a plurality of Ethernet switches 30, and a DCM 32. The ECUs 20 each include a central ECU 22, an ECU 24, and a management ECU 26. The DCM 32 is connected to a public network N via the management ECU 26.

[0112] The central ECU 22 functions as a communication control unit 52 shown in Fig. 13 when the CPU 20A executes the control program 100. On the other hand, the management ECU 26 functions as an overall control unit 50 shown in Fig. 13 when the CPU 20A executes the control program 100. That is, in the vehicle 12 of this embodiment, the processing of the communication control unit 52 and the overall control unit 50 related to changing the network settings is realized by multiple CPUs 20A.

[0113] As described above, in this embodiment, the overall control unit 50 of the control unit 21 functions by an ECU 20 different from the central ECU 22. Therefore, according to this embodiment, even if the overall control unit 50 of the control unit 21 functions by an ECU 20 different from the central ECU 22, if the network communication settings are changed without the user's knowledge, it is possible to prevent the switching control unit from being unable to operate according to the new network settings from becoming apparent after the fact.

[0114] [remarks] The processing related to changing the network settings in each of the above embodiments has been exemplified as processing when the application program 110, which is software, is downloaded, and processing in the case of plug-and-play when the ECU 24 is added to the in-vehicle network 14. However, the cases in which the processing related to changing the network settings of the present embodiment is applied are not limited to these, and the processing may also be applied when the configuration of the in-vehicle network 14 is established when the vehicle 12 is manufactured, or when the in-vehicle network 14 is attacked from the outside and enters a fail-safe state.

[0115] The various processes executed by the CPU 20A after reading software (programs) in the above embodiment may be executed by various processors other than a CPU. Examples of such processors include programmable logic devices (PLDs) (such as field-programmable gate arrays (FPGAs)) whose circuit configuration can be changed after fabrication, and dedicated electrical circuits, such as application-specific integrated circuits (ASICs), which are processors with circuit configurations specifically designed to execute specific processes. Each of the above processes may be executed by one of these various processors, or by a combination of two or more processors of the same or different types (e.g., multiple FPGAs, or a combination of a CPU and an FPGA). The hardware structure of these various processors is, more specifically, an electrical circuit that combines circuit elements such as semiconductor devices.

[0116] In the above embodiment, each program is described as being pre-stored (installed) in a computer-readable non-transitory recording medium. For example, the control program 100 in the ECU 20 is pre-stored in the ROM 20B. However, the present invention is not limited to this. Each program may be provided in a form recorded on a non-transitory recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a USB (Universal Serial Bus) memory. The program may also be downloaded from an external device via a network.

[0117] The processing flow described in the above embodiment is an example, and unnecessary steps may be deleted, new steps may be added, or the processing order may be changed within the scope of the gist of the invention. [Explanation of symbols]

[0118] 12 vehicles 14 In-vehicle network (network) 22 Central ECU (communication control unit) 24 ECU (control unit) 30 Ethernet switch (switching control unit) 40 Center Server (External Device) 200 Reception 250 Judgment section 270 Request part 100 Control program (communication control program)

Claims

1. A communication control device that controls communication on a network, a reception unit that receives a change notification regarding a change in communication settings of the network; a determination unit that determines whether at least one of the communication control device and the switching control unit stores new setting information of the network that becomes necessary in response to the change notification, based on a result of verifying whether the communication control device has the setting information and a result of verifying whether a switching control unit connected to the communication control device has the setting information; and a request unit that requests the setting information from an external device outside the network when the determination unit determines that neither the communication control device nor the switching control unit stores the setting information; A communication control device comprising:

2. The change notification is a notification related to a software update in a device connected to the network, the determination unit determines whether the setting information is stored based on information about the software to be updated. The communication control device according to claim 1 .

3. the reception unit receives the change notification from the external device; The communication control device according to claim 1 or 2.

4. 4. The communication control device according to claim 1, wherein the accepting unit accepts the change notification together with an update of software executed in the control device on the network.

5. 5. The communication control device according to claim 1, wherein the reception unit receives the change notification when a new control device is connected to the network.

6. A communication control device according to any one of claims 1 to 5; One or more of the switching control units; a control device connected to the switching control unit; A vehicle equipped with.

7. A communication control method for controlling communication in a network, comprising: receiving a change notification regarding a change in communication settings of the network; determining whether at least one of the communication control device and the switching control unit has stored new setting information of the network that becomes necessary in response to the change notification, based on a result of verifying whether the communication control device has the setting information and a result of verifying whether a switching control unit connected to the communication control device has the setting information; If it is determined that neither the communication control device nor the switching control unit stores the setting information, the setting information is requested from an external device outside the network. A communication control method in which processing is executed by a computer.

8. A communication control program for controlling communication on a network, receiving a change notification regarding a change in communication settings of the network; determining whether at least one of the communication control device and the switching control unit has stored new setting information of the network that becomes necessary in response to the change notification, based on a result of verifying whether the communication control device has the setting information and a result of verifying whether a switching control unit connected to the communication control device has the setting information; If it is determined that neither the communication control device nor the switching control unit stores the setting information, the setting information is requested from an external device outside the network. A communication control program that causes a computer to execute processing.

Images