The Automotive Ethernet System Supporting Flexible Access for Wirelessly Communicable Edge Modules

Abstract

The present invention relates to a vehicle Ethernet system that supports flexible access, which is equipped inside a vehicle and allows for the flexible addition of wirelessly communicating edge modules, comprising a sub-controller connected to a central control unit via an Ethernet network and an edge module that communicates wirelessly with said sub-controller, wherein the sub-controller performs mutual conversion between a wired Ethernet protocol and a wireless protocol, thereby enabling the flexible integration of a new edge module into the vehicle Ethernet system even in places where physical communication wiring connections are difficult.

Description

Technology Field

[0001] The present invention relates to a vehicle Ethernet system that supports flexible access, which is equipped inside a vehicle and allows for the flexible addition of wirelessly communicating edge modules, comprising a sub-controller connected to a central control unit via an Ethernet network and an edge module that communicates wirelessly with said sub-controller, wherein the sub-controller performs mutual conversion between a wired Ethernet protocol and a wireless protocol, thereby enabling the flexible integration of a new edge module into the vehicle Ethernet system even in places where physical communication wiring connections are difficult. Background Technology

[0003] Recently, due to advancements in autonomous driving, connected services, and high-quality infotainment systems, the amount of data that must be processed and exchanged within vehicles is increasing exponentially. Low-speed automotive communication methods, such as CAN (Controller Area Network) and LIN (Local Interconnect Network), which were widely used in the past, have reached their limits in smoothly processing such large volumes of data. While CAN communication supports speeds of up to about 1 Mbps and is suitable for real-time control, it is insufficient for processing large volumes of data, such as high-resolution camera images, radar, and lidar data.

[0004] Automotive Ethernet technology emerged to solve these problems. Automotive Ethernet supports high data transmission speeds of 100 Mbps, 1 Gbps, and even over 10 Gbps, and is establishing itself as the core backbone network of vehicles based on the reliability and scalability of existing Ethernet technology. Automotive Ethernet systems generally feature a star or tree topology structure in which Electronic Control Units (ECUs), which perform different functions, are connected via physical cables (e.g., UTP, Unshielded Twisted Pair) through switches, centered around a central gateway or Domain Control Unit (DCU). Through this, it was possible to overcome the limitations of the aforementioned conventional technology and achieve high-speed communication.

[0005] However, these wired-based automotive Ethernet systems have fundamental limitations. These are issues of 'flexibility' and 'scalability'. When adding new sensors, actuators, convenience devices (which can be called 'edge modules') in addition to the ECUs determined during the vehicle design phase, physical wiring work must be involved.

[0006] However, vehicles contain numerous hinges and folding components, as well as spaces that must be physically separated for safety or regulatory reasons. The process of laying new cables within these limited interior spaces and connecting them to Ethernet switch ports is very complex and costly. In particular, this inflexibility acts as a significant disadvantage in the aftermarket, where features are added according to user needs after the vehicle is released, or in the future automotive development environment where modular design is essential.

[0007] In addition, while various wireless communication technologies such as Bluetooth, Wi-Fi, and UWB (ultra-wideband) are already in use within vehicles, they are mostly operated independently for specific purposes, such as smartphone connectivity or smart key systems. There is currently a lack of a standardized integrated structure that allows these wireless devices to directly and seamlessly exchange data with the vehicle's core Ethernet backbone network. Therefore, there is an urgent need to develop a new concept of automotive Ethernet system that supports true flexible access—based on a high-speed automotive Ethernet backbone—and allows edge modules of various wireless communication methods to be easily and safely added or removed as needed without physical wiring. The problem to be solved

[0009] The present invention aims to provide a vehicle Ethernet system that supports flexible access, which is equipped inside a vehicle and allows for the flexible addition of wirelessly communicating edge modules, comprising a sub-controller connected to a central control unit via an Ethernet network and an edge module that communicates wirelessly with said sub-controller, wherein the sub-controller performs mutual conversion between a wired Ethernet protocol and a wireless protocol, thereby enabling the flexible integration of a new edge module into the vehicle Ethernet system even in locations where physical communication wiring connections are difficult. means of solving the problem

[0011] In order to solve the above problems, one embodiment of the present invention provides a vehicle Ethernet system that supports flexible access, wherein a wireless communication-capable edge module can be flexibly added, and comprises: a sub-controller that performs Ethernet communication with a central control unit via an Ethernet network and is responsible for a physically allocated section within the vehicle; and an edge module capable of wireless communication with the sub-controller; wherein the sub-controller comprises: an Ethernet communication module for connection with the Ethernet network; a sub-communication module that supports wireless communication with one or more edge modules that can be connected to the sub-controller; a protocol conversion module that performs mutual conversion between an Ethernet protocol used for Ethernet communication and a wireless protocol used for wireless communication with the edge module; and a sub-control unit connected to the Ethernet communication module, the sub-communication module, and the protocol conversion module, and controlling the communication and protocol conversion process with the central control unit and the edge module.

[0012] In one embodiment of the present invention, the edge module comprises: a first edge communication unit that supports wireless communication with a sub-controller to be connected to itself; a second edge communication unit that supports wireless communication with the outside of the vehicle; and an edge control unit that controls the operation and communication of the edge module. The first edge communication unit performs wireless communication with the sub-controller to be connected to itself through a communication method including at least one of Bluetooth, UWB, Wi-Fi, and Zigbee, and the second edge communication unit can perform wireless communication with the outside of the vehicle through a wide-area communication method including at least one of LTE or 5G.

[0013] In one embodiment of the present invention, the vehicle Ethernet system further comprises a central control unit including one or more memories and one or more processors; and the Ethernet network has a structure in which a plurality of the sub-controllers are connected in parallel to a bus line connected to the central control unit, and the central control unit may include a central control unit including one or more memories and one or more processors; a data transmission and reception unit that performs data communication with a plurality of sub-controllers through the Ethernet network; a security module that performs operations related to the security of the Ethernet system; and a central communication module that performs communication with the outside of the vehicle.

[0014] In one embodiment of the present invention, the protocol conversion module performs: an encapsulation step of encapsulating an Ethernet frame used for Ethernet communication in the Ethernet network into a wireless frame having the wireless protocol; and a decapsulation step of decapsulating a wireless frame used for wireless communication between the edge module and the sub-controller into an Ethernet frame having the Ethernet protocol; and during the execution of the encapsulation step or the decapsulation step, data of the payload included in the Ethernet frame before conversion or the wireless frame before conversion may be preserved.

[0015] In one embodiment of the present invention, the vehicle Ethernet system performs an edge module connection step in which, when a new edge module is added, a sub-controller near the added edge module is connected to the edge module, and the edge module connection step comprises: a step of broadcasting a search signal to search for a sub-controller when power is applied at the edge module; a step of determining at the sub-controller whether the strength of the received search signal is greater than or equal to a preset strength, and if it is greater than or equal to the preset strength, establishing a wireless communication channel with the edge module; a step of requesting a signature from the edge module through the wireless communication channel at the sub-controller; and a step of performing the signature using its own private key stored at the edge module and transmitting its signature and its own public key certificate stored at the edge module together to the sub-controller. The method includes the step of verifying the signature and certificate of the edge module based on a stored ownership voucher in the sub-controller, signing the verification result with its own stored verification key, and transmitting it to the edge module; and when the edge module receives the verification result signed by the sub-controller, an end-to-end secure communication tunnel is created between the sub-controller and the edge module, and only mutually verified sub-controllers and edge modules can communicate in the secure communication tunnel.

[0016] In one embodiment of the present invention, when the sub-controller performs communication with a plurality of edge modules, the sub-controller performs a collision prevention step to prevent communication data between each of the edge modules from colliding, and the collision prevention step may include: a step of assigning unique identification information to each of the plurality of edge modules at the sub-controller; a step of transmitting a beacon signal signifying the start of a communication cycle to each of the plurality of edge modules at the sub-controller; a step of receiving the beacon signal at each of the plurality of edge modules and synchronizing an internal clock; and a step of the sub-controller performing communication with each of the plurality of edge modules sequentially for a preset communication time.

[0017] In one embodiment of the present invention, the collision prevention step may further include: determining whether there is data to transmit when a turn to communicate with the sub-controller returns at each of the plurality of edge modules, and if there is no data to transmit, transferring the authority to communicate to another edge module before the communication time allocated to it ends.

[0018] In one embodiment of the present invention, wireless communication between the sub-communication module and the edge module is implemented as a wireless communication method applying Phase-Shift Keying (PSK) in a frequency band of 700 MHz to 900 MHz, and the wireless protocol may be characterized by applying a frequency-division or time-division-based data division method to the wireless frame.

[0019] In one embodiment of the present invention, the frequency-division may be characterized by dividing the wireless frame into channels of 100KHz or 200KHz, and the time-division may be characterized by dividing it into time units of less than 100 milliseconds (ms).

[0020] In one embodiment of the present invention, the sub-communication module and the edge module have a radio frequency (RF) output of 0 dBm and a receiving sensitivity of -90 dBm, and the wireless connection between the sub-controller and the edge module can establish a fixed secure communication channel through mutual authentication once before the vehicle is shipped. Effects of the invention

[0023] According to one embodiment of the present invention, a new wireless edge module can be flexibly added to a wired Ethernet network without physical wiring work, thereby significantly improving the scalability of the in-vehicle network system.

[0024] According to one embodiment of the present invention, by replacing a part of the complex wiring harness inside a vehicle with wireless communication, it is possible to achieve the effect of reducing the overall weight and manufacturing cost of the vehicle.

[0025] According to one embodiment of the present invention, since data payloads between Ethernet protocols and wireless protocols are mutually converted without loss through the protocol conversion function of the sub-controller, the effect of smoothly integrating and operating heterogeneous communication networks can be achieved.

[0026] According to one embodiment of the present invention, when a single sub-controller communicates with a plurality of edge modules, a unique communication time is sequentially allocated to each edge module to prevent data collisions, thereby enabling the establishment of a stable and highly reliable wireless communication environment.

[0027] According to one embodiment of the present invention, when a specific edge module has no data to transmit, it transfers its communication authority to another edge module, thereby maximizing the usage efficiency of the wireless communication channel and improving the responsiveness of the entire system.

[0028] According to one embodiment of the present invention, edge modules can be easily added or replaced without wiring work even in areas with a lot of movement, such as doors, trunks, and side mirrors, or areas where physical wiring connection is difficult, such as bumpers and roofs, thereby increasing the design freedom of the vehicle and significantly improving maintenance convenience.

[0029] According to one embodiment of the present invention, by not dividing the sub-controllers by domain and including a high-performance processor to control physically separated sections in the vehicle, it is possible to reduce the length and weight of the wiring harness required in the past and facilitate vehicle updates and maintenance. Brief explanation of the drawing

[0031] FIG. 1 schematically illustrates a configuration in which a central control unit and a plurality of sub-controllers are connected through an Ethernet network according to an embodiment of the present invention. FIG. 2 schematically illustrates the configuration of a vehicle Ethernet system according to one embodiment of the present invention, in which a sub-controller is disposed in each physically separated compartment of a vehicle. FIG. 3 schematically illustrates the internal configuration of a sub-controller and the connection configuration with an edge module according to one embodiment of the present invention. FIG. 4 schematically illustrates the internal configuration of an edge module and the wireless communication target of the edge module according to an embodiment of the present invention. FIG. 5 schematically illustrates the internal configuration of a central control unit and the connection configuration with a sub-controller according to one embodiment of the present invention. FIG. 6 schematically illustrates the process of performing an encapsulation step according to one embodiment of the present invention. FIG. 7 schematically illustrates the process of performing a decapsulation step according to one embodiment of the present invention. FIG. 8 schematically illustrates the steps of performing the edge module connection step according to one embodiment of the present invention. FIG. 9 schematically illustrates the process of determining a sub-controller connected to an edge module when a plurality of sub-controllers receive a search signal of an edge module according to an embodiment of the present invention. FIGS. 10 and 11 schematically illustrate the process of performing a collision prevention step according to an embodiment of the present invention. FIG. 12 schematically illustrates the process of transferring communication authority from one edge module to another edge module in order to increase the efficiency of a wireless communication channel according to one embodiment of the present invention. FIG. 13 schematically illustrates the process of monitoring the communication status of each edge module using an artificial intelligence-based model according to one embodiment of the present invention. Specific details for implementing the invention

[0032] Hereinafter, various embodiments and / or aspects are disclosed with reference to the drawings. For illustrative purposes, numerous specific details are disclosed in the following description to aid in a general understanding of one or more aspects. However, it will also be recognized by those skilled in the art that these aspects may be practiced without such specific details. The following description and the accompanying drawings describe specific exemplary aspects of one or more aspects in detail. However, these aspects are exemplary, and some of the various methods in the principles of the various aspects may be used, and the description is intended to include all such aspects and their equivalents.

[0034] In addition, various aspects and features will be presented by a system that may include multiple devices, components and / or modules, etc. It should also be understood and recognized that various systems may include additional devices, components and / or modules, etc., and / or may not include all of the devices, components, modules, etc. discussed in relation to the drawings.

[0035] Terms such as “embodiment,” “example,” “aspect,” “example,” etc. as used herein may not be interpreted as implying that any aspect or design described is superior or more advantageous than other aspects or designs. Terms used below, such as “part,” “component,” “module,” “system,” “interface,” etc., generally refer to computer-related entities and may, for example, refer to hardware, a combination of hardware and software, or software.

[0036] Additionally, the terms “comprising” and / or “comprising” should be understood to mean that the relevant feature and / or component is present, but not to exclude the presence or addition of one or more other features, components and / or groups thereof.

[0037] Additionally, terms including ordinal numbers, such as first, second, etc., may be used to describe various components, but said components are not limited by said terms. Such terms are used solely for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be named the second component, and similarly, the second component may be named the first component. The term "and / or" includes a combination of a plurality of related described items or any of a plurality of related described items.

[0038] Furthermore, in the embodiments of the present invention, all terms used herein, including technical or scientific terms, unless otherwise defined, have the same meaning as generally understood by those skilled in the art to which the present invention pertains. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant technology, and should not be interpreted in an ideal or overly formal sense unless explicitly defined in the embodiments of the present invention.

[0039] FIG. 1 schematically illustrates a configuration in which a central control unit (1000) and a plurality of sub-controllers (2000) are connected through an Ethernet network according to one embodiment of the present invention.

[0041] As illustrated in FIG. 1, a vehicle Ethernet system supporting flexible access, in which a wirelessly communicable edge module (3000) can be flexibly added, is provided inside a vehicle and includes: a central control unit (1000) comprising one or more memories and one or more processors; a sub-controller (2000) that performs Ethernet communication with the central control unit (1000) through an Ethernet network and is responsible for a physically allocated section within the vehicle; and an edge module (3000) capable of wireless communication with the sub-controller (2000).

[0043] Specifically, the vehicle Ethernet system of the present invention has a structure in which a central control unit (1000) and a plurality of sub-controllers (2000) are connected in a tree-like form as shown in FIG. 1, and the central control unit (1000) and the plurality of sub-controllers (2000) are connected to an Ethernet network to perform data communication with each other. More specifically, Ethernet communication through the Ethernet network may mean that each communication entity exchanges Ethernet frames with each other, and it is preferable to interpret the Ethernet frame as the broadest concept including a communication data frame having an Ethernet protocol.

[0044] The Ethernet network above is a network system in which a bus line (10) serves as a backbone network, wherein the bus line (10) is connected to a central control unit (1000), and each of the plurality of sub-controllers (2000) is connected in parallel to the bus line (10) to form a tree-shaped network topology overall. Here, "parallel connection" means that each sub-controller (2000) is configured to communicate logically at the same layer with the central control unit (1000) via a switch port branch or branch connector of the bus line (10).

[0045] As illustrated in FIG. 1, the present invention supports communication between the central control unit (1000) and each of the plurality of sub-controllers (2000) by utilizing an Ethernet network, thereby enabling the processing of large volume data (e.g., high-resolution camera images, radar and lidar data, or data for autonomous driving and high-speed communication) that cannot be resolved by conventional communication methods such as LIN (Local Interconnect Network), CAN (Controller Area Network), FlexRay, and MOST (Media Oriented System Transport).

[0046] In addition, with reference to FIG. 2, each sub-controller (2000) is not separated by domain but is responsible for the physical section assigned to it, thereby enabling a significant reduction in the length and number of wires and components such as ECUs compared to the current configuration where communication lines are separated by domain. Further explanation regarding this will be provided below.

[0048] FIG. 2 schematically illustrates the configuration of a vehicle Ethernet system according to one embodiment of the present invention, in which a sub-controller (2000) is disposed in each physically separated compartment of a vehicle.

[0050] Specifically, as briefly mentioned earlier, in the past, communication lines were separated by domain based on vehicle functions, such as infotainment, chassis, powertrain, and ADAS (Advanced Driver Assistance System), and independent Electronic Control Units (ECUs) had to be provided for each line to control these communication lines. Recently, as vehicle software functions have advanced, the number of required ECUs has gradually increased, which has become a factor in increasing vehicle development and maintenance costs and complexity.

[0051] In addition, as the number of ECUs increases, the wiring harness becomes longer, which leads to an increase in vehicle weight and raises the difficulty of assembly and maintenance, thereby increasing overall costs. Furthermore, in this domain-based structure, each ECU operates independently, and since software provided by various vendors is mixed, there are disadvantages such as difficulty in updating the entire vehicle's software, including OTA (Over-The-Air), and vulnerability to security issues.

[0053] To compensate for the aforementioned disadvantages, the present invention discloses a configuration in which a vehicle is divided by physical concepts rather than functions, as illustrated in FIG. 2, and a sub-controller (2000) in each section integrally controls all functions of that section. More specifically, the sub-controller (2000) of the present invention is designed to have higher performance than a conventional ECU and is characterized by the ability to process multiple functions simultaneously in a complex manner. By placing such a sub-controller (2000) in each section, the number of ECUs can be drastically reduced compared to the prior art, and wiring and software update problems can be resolved.

[0054] Referring to FIG. 2, a vehicle Ethernet system including a central control unit (1000) and a plurality of sub-controllers (2000) may be provided in a tree shape as shown in FIG. 1, and a plurality of edge modules (3000) (shown as circular marks in FIG. 2) may be connected to each sub-controller (2000). Here, the term edge module (3000) is preferably interpreted as a concept including various types of sensing devices that can be connected to the sub-controller (2000) (e.g., devices capable of detecting the environment and state required in each compartment, such as temperature, pressure, seat position, door opening / closing, radar, lidar, ultrasonic sensor, light sensor, camera, etc.) or actuators (e.g., door lock motor, window actuator, mirror adjustment motor, seat adjustment motor, lamp, turn signal, washer pump, etc.).

[0055] However, even in areas with many curves or repetitive movements, such as door hinges, tailgates, sliding doors, seats, and roof panels, or areas where compartments must be physically separated for reasons such as waterproofing, sound insulation, safety, or regulations, the present invention can minimize the installation of wire penetration and harnesses, thereby allowing the placement of edge modules (3000) to be flexibly determined in accordance with mechanical constraints and reducing the packaging trade-off caused by wiring paths.

[0056] In addition, by utilizing wireless communication, the harness length, the number of connectors, and the number of body penetrations (grommets or sealings, etc.) can be reduced, thereby reducing weight and the number of parts, and mitigating mechanical failure factors such as leakage, corrosion, and disconnection. In the assembly process, subassemblies such as doors and seats can be mounted independently of the electrical harness, which simplifies the process and improves compatibility between different vehicle models, and makes it easy to add or relocate edge modules (3000) even after mass production. Furthermore, since the edge modules (3000) can be increased or decreased wirelessly while maintaining the same sub-controller (2000), the effect of lowering response costs when changing option configurations or installing aftermarket parts can be expected.

[0057] In other words, the present invention allows the edge module (3000) to be wirelessly extended to areas where wiring is difficult or separate installation is required, while maintaining the reliability and ease of management of the wired backbone (bus line (10)) using an Ethernet frame, thereby enabling the vehicle to simultaneously achieve design freedom, mass production flexibility, and maintenance convenience. Below, the detailed configurations of the central control unit (1000), sub-controller (2000), and edge module (3000) constituting the vehicle Ethernet system of the present invention, as well as the communication methods between them, will be described in more detail.

[0059] FIG. 3 schematically illustrates the internal configuration of a sub-controller (2000) and the connection configuration with an edge module (3000) according to one embodiment of the present invention.

[0061] As illustrated in FIG. 3, the present invention comprises a vehicle Ethernet system supporting flexible access in which a wireless communication-capable edge module (3000) can be flexibly added, the system including: a sub-controller (2000) that performs Ethernet communication with a central control unit (1000) via an Ethernet network and is responsible for a physically assigned section within the vehicle; and an edge module (3000) capable of wireless communication with the sub-controller (2000); wherein the sub-controller (2000) comprises: an Ethernet communication module (2100) for connection with the Ethernet network; a sub-communication module (2300) that supports wireless communication with one or more edge modules (3000) that can be connected to the sub-controller (2000); and a protocol conversion module (2200) that performs mutual conversion between an Ethernet protocol used for Ethernet communication and a wireless protocol used for wireless communication with the edge module (3000). and includes a sub-control unit (2400) connected to the Ethernet communication module (2100), the sub-communication module (2300), and the protocol conversion module (2200), which controls the communication and protocol conversion process with the central control unit (1000) and the edge module (3000).

[0063] Specifically, as described above in the description of FIG. 1, each of the plurality of sub-controllers (2000) is connected in parallel to a bus line (10), which is the backbone network of an Ethernet network, and the sub-controller (2000) includes an Ethernet communication module (2100); a protocol conversion module (2200); a sub-communication module (2300); and a sub-control unit (2400); and the sub-controller (2000) can communicate wirelessly with a plurality of edge modules (3000) connected to the sub-controller (2000) through the sub-communication module (2300).

[0065] More specifically, the Ethernet communication module (2100) is configured to support communication with a central control unit (1000) or another sub-controller (2000) by connecting to the Ethernet network, and includes an interface capable of connecting to the Ethernet network. In a preferred embodiment, the Ethernet communication module (2100) may be implemented with a hardware chipset processing PHY and MAC layers capable of transmitting and receiving Ethernet frames and a physical Ethernet port.

[0066] Through this, an Ethernet frame received through the bus line (10) can be transmitted to the protocol conversion module (2200) and / or the sub-control unit (2400), or an Ethernet frame received from the protocol conversion module (2200) and / or the sub-control unit (2400) can be transmitted to the central control unit (1000) and / or another sub-controller (2000) through the bus line (10). As an embodiment of the present invention, when the Ethernet communication module (2100) receives general data from the protocol conversion module (2200) and / or the sub-control unit (2400), it can convert it into an Ethernet frame and transmit it through the bus line (10).

[0068] The above protocol conversion module (2200) corresponds to a configuration responsible for converting between heterogeneous communication protocols, namely a wired communication Ethernet protocol and a wireless communication wireless protocol. More specifically, the above protocol conversion module (2200) performs an encapsulation step of encapsulating an Ethernet frame received through the bus line (10) into a wireless frame for communication with the edge module (3000), or, as the opposite concept of the encapsulation step, performs a decapsulation step of decapsulating a wireless frame received from the edge module (3000) into the Ethernet frame.

[0069] As an embodiment of the present invention, the protocol conversion module (2200) may include configurations such as a packet parser, a frame generator, and a data buffer as a configuration for performing the encapsulation step and the decapsulation step. This means that even if the protocol module does not explicitly include the packet parser, frame generator, data buffer, etc., the same functions as the aforementioned configurations can be implemented in the protocol conversion module (2200) in hardware or software. Further explanation regarding the encapsulation step and decapsulation will be provided later in the description of FIGS. 6 and 7.

[0071] As shown in FIG. 3, the sub-communication module (2300) performs the function of establishing and maintaining a direct wireless communication channel with N (where N is a natural number greater than or equal to 1) edge modules (3000), and may include known electrical / electronic / communication configurations such as antennas and RF transceivers to perform the said function, and it is preferable that it be implemented to support at least one of short-range wireless communication standards such as Bluetooth, UWB, Wi-Fi, Zigbee, etc. Additionally, when the first or new edge module (3000) is added to the sub-controller (2000), the sub-communication module (2300) can transmit and receive signals and data necessary for the process of searching for the edge module (3000) and establishing a secure channel, and can perform the function of preventing data collisions between each edge module (3000) when performing communication with a plurality of edge modules (3000). Further explanations regarding the aforementioned functions will be covered in more detail in the description of Figures 9 through 13.

[0073] The sub-control unit (2400) includes one or more processors and one or more memories and can control the overall operation of the sub-controller (2000). In particular, it can manage the operation of the Ethernet communication module (2100), the protocol conversion module (2200), and the sub-communication module (2300) to ensure that the communication flow with the central control unit (1000) is smooth. In particular, referring to the description of FIG. 2, the sub-controller (2000) performs all types of operations / functions that can be sensed or performed in the allocated area, and the sub-control unit (2400) ensures that these operations / functions are performed normally without latency or error.

[0074] More specifically, the sub-control unit (2400) preferably includes a high-performance MCU (Micro Controller Unit) or a System-On-Chip (SoC) with multiple functions integrated for real-time control and data processing. As an embodiment of the present invention, it may include a multi-core processor for performing communication with a plurality of edge modules (3000); Ethernet communication; and security operations in parallel. The memory included in the sub-control unit (2400) may include volatile memory such as flash memory for storing an operating system (OS), firmware, security keys, etc., and SRAM or DRAM for executing programs and temporarily storing data.

[0075] Additionally, according to one embodiment of the present invention, the sub-control unit (2400) can reduce the load on the Ethernet backbone network by optimizing the amount of data transmitted to the central control unit (1000) by performing a pre-processing process of aggregating and filtering data according to priority, going beyond simply transmitting various types of data collected from edge modules (3000) within the zone managed by the sub-controller (2000). Furthermore, according to another embodiment of the present invention, it is possible to independently determine and control some events occurring within the zone in real time without the intervention of the central control unit (1000). For example, if a value exceeding a threshold is detected from a specific edge module (3000) (sensor), a primary measure can be taken by immediately operating another edge module (3000) (actuator) within the zone before reporting to the central control unit (1000), thereby increasing the responsiveness of the vehicle and improving the stability of the system. In addition, as another embodiment of the present invention, it can perform the role of integrally managing and distributing power for a plurality of edge modules (3000) connected within the corresponding section. For example, it can selectively turn the power of a specific module on or off and monitor power consumption to optimize the overall power efficiency of the vehicle. Here, all of the aforementioned embodiments regarding the sub-control unit (2400) correspond to compatible embodiments.

[0077] Meanwhile, as an embodiment of the present invention, the sub-controller (2000) may include various automotive communication interfaces such as CAN, LIN communication controllers and GPIO (General Purpose Input / Output Port) in hardware, considering the possibility of being connected not only to the edge module (3000) but also to other wired sensors or actuators within the assigned section, and may further include a PMIC (Power Management IC) for efficient power management.

[0078] Additionally, in this specification, if a connection between components is depicted with a solid line, it signifies a wired connection unless otherwise noted, and if a connection between components is depicted with a dotted line, it signifies a wireless connection unless otherwise noted.

[0080] FIG. 4 schematically illustrates the internal configuration of an edge module (3000) and the wireless communication target of the edge module (3000) according to one embodiment of the present invention.

[0082] As illustrated in FIG. 4, the edge module (3000) comprises: a first edge communication unit (3100) that supports wireless communication with a sub-controller (2000) to be connected to it; a second edge communication unit (3200) that supports wireless communication with the outside of the vehicle; and an edge control unit (3300) that controls the operation and communication of the edge module (3000). The first edge communication unit (3100) performs wireless communication with the sub-controller (2000) to be connected to it through a communication method including at least one of Bluetooth, UWB, Wi-Fi, and Zigbee, and the second edge communication unit (3200) performs wireless communication with the outside of the vehicle through a wide-area communication method including at least one of LTE or 5G.

[0083] In addition, wireless communication between the sub-communication module and the edge module is implemented using a wireless communication method that applies Phase-Shift Keying (PSK) in a frequency band of 700 MHz to 900 MHz, and the wireless protocol is characterized by applying a frequency-division or time-division-based data division method to the wireless frame.

[0084] In addition, the frequency-division is characterized by dividing the wireless frame into channels of 100KHz or 200KHz, and the time-division is characterized by dividing it into time units of less than 100 milliseconds (ms).

[0086] In summary, FIG. 4(a) illustrates the process of an edge module (3000) communicating with a sub-communication module (2300) of a sub-controller (2000) connected to it, and FIG. 4(b) illustrates the process of the edge module (3000) performing OTA communication with an external server.

[0088] Specifically, as described above, the edge module (3000) is distributed at specific locations within the vehicle (especially locations where wiring connection is difficult) and is a device that performs unique functions such as sensors or actuators. Each edge module (3000) is configured to enable flexible access (flexible expansion) through organic communication with a sub-controller (2000) connected to it, and as shown in FIG. 4, it includes a first edge communication unit (3100), a second edge communication unit (3200), an edge control unit (3300), and a core function operation unit (3400).

[0090] The first edge communication unit (3100) includes an interface for the edge module (3000) to perform short-range wireless communication with the sub-controller (2000) assigned to it, and according to one embodiment of the present invention, it may further include an RF transceiver, a baseband processor, and a small antenna such as a chip antenna or a PCB pattern antenna. In addition, as described above, it is preferable that the first edge communication unit (3100) supports at least one of communication standards such as Bluetooth, UWB, Wi-Fi, Zigbee, etc. Additionally, it receives a wireless frame encapsulated by the protocol conversion module (2200) of the sub-controller (2000) or transmits a wireless frame containing data to be transmitted to the sub-controller (2000).

[0092] The above second edge communication unit (3200) includes a wide-area communication interface for direct communication with a network outside the vehicle, and according to one embodiment of the present invention, it may further include a cellular modem chipset, an eSIM (embedded SIM), and an antenna for cellular communication, and additionally, may further include a configuration capable of performing a function of connecting to a mobile communication network such as LTE or 5G.

[0093] Meanwhile, as a preferred embodiment of the present invention, the second edge communication unit (3200) is characterized by the technical feature of establishing a direct communication channel with the corresponding component or the vehicle manufacturer's OTA (Over-the-Air) server without passing through the internal components of the vehicle Ethernet system (sub-controller (2000), central control unit (1000), etc.). Through this, update data for one's own firmware or software can be received directly without passing through the sub-controller (2000) or the central control unit (1000), thereby enabling independent software updates. This can achieve the effect of efficiently performing functional improvements or security patches for a specific edge module (3000) while reducing the communication load of the entire Ethernet network or the computational load of the sub-controller (2000) or the central control unit (1000) that were caused by conventional updates.

[0095] The edge control unit (3300) is a computing unit that oversees all operations and functions performed in the corresponding edge module (3000), and may include one or more processors and one or more memories. As an embodiment of the present invention, it may be implemented as a low-power MCU, etc. The edge control unit (3300) controls the communication operation of the first edge communication unit (3100) and the second edge communication unit (3200), processes data collected from the core function operation unit (3400), or interprets commands received from the outside, thereby enabling the core function operation unit (3400) to operate. For example, the efficiency of communication data can be increased by performing primary operations, such as noise filtering or data compression, on raw data collected from the core function operation unit (3400). In addition, the edge control unit (3300) can also process security-related operations, such as generating a signature using its own secret key when creating a secure channel with the sub-controller (2000) described later.

[0097] The core function operation unit (3400) includes physical components for performing the specific purpose of the corresponding edge module (3000). In other words, the core function operation unit (3400) corresponds to a configuration in which the corresponding edge module (3000) generates data as a sensor or performs physical operations as an actuator. For example, if the edge module (3000) corresponds to a camera module, the core function operation unit (3400) may include an image sensor, a lens assembly, an image signal processor (ISP), etc., to capture images or generate image data. As another embodiment, if the edge module (3000) is a radar sensor, the core function operation unit (3400) may include a transceiver and an antenna for transmitting and receiving radar signals, and thereby transmit radar signals and receive reflected signals to generate data including distance information of an object.

[0099] Meanwhile, as an embodiment of the present invention, the wireless communication between the sub-communication module and the edge module is technically characterized by being implemented as a wireless communication method applying Phase-Shift Keying (PSK) in a frequency band of 700 MHz to 900 MHz. More specifically, the wireless communication is characterized by optimizing power consumption and implementation logic area while satisfying the communication speed and reliability of several Mbps required for automotive sensor networks by applying the Phase-Shift Keying method, compared to cases where OFDM methods requiring high power consumption and large logic volume are used, or FSK or GMSK methods which are difficult to satisfy the communication speed and reliability of automotive sensor networks.

[0100] In particular, the present invention aims to configure a wireless communication system based on SDV (autonomous driving, software-operated future vehicle) of an automobile. Since high reliability is generally required for smooth wireless communication to respond to specific reliability unique to automobiles, such as driving conditions and climate change (temperature change / vibration / deterioration, etc.), the aforementioned wireless communication method can be adopted to achieve the effect of satisfying the reliability required by the market.

[0101] In addition, in order to establish a stable communication line through wireless communication within a vehicle, it must possess diffraction properties to effectively reach the non-visible areas of the vehicle, while simultaneously possessing directivity properties to be robust against ambient noise or interference. To this end, the present invention adopts a 700 to 900 MHz band in which the diffraction properties and directivity properties coexist appropriately. Furthermore, to compensate for the lower data transmission speed compared to high-frequency bands (e.g., 2.4 GHz band, etc.), the present invention is characterized by the technical application of an FD / TD-based data division method in which wireless frames transmitted and received in the 700 to 900 MHz band are used by frequency division of 100 kHz or 200 kHz, and the wireless frames are time-divisioned into units of a few milliseconds or tens of milliseconds.

[0102] Additionally, as an embodiment of the present invention, instead of Orthogonal Frequency Division Multiplexing (OFDM), which requires high power consumption and a large logic volume; FSK, which applies a lightweight Bluetooth communication method that is difficult to satisfy the communication speed and reliability of an automotive sensor network; or the conventional Gaussian filtered Minimum Shift Keying (GMSK) method, the present invention performs wireless communication through Phase-Shift Keying (PSK), thereby enabling the appropriate operation of communication speed and reliability, power consumption, and implementation logic area. Furthermore, the sub-communication module and the edge module are characterized by having a radio frequency (RF) output of 0 dBm and a reception sensitivity of -90 dBm.

[0104] FIG. 5 schematically illustrates the internal configuration of a central control unit (1000) and the connection configuration with a sub-controller (2000) according to one embodiment of the present invention.

[0106] As illustrated in FIG. 5, the vehicle Ethernet system further comprises a central control unit (1000) including one or more memories and one or more processors; the Ethernet network has a structure in which a plurality of sub-controllers (2000) are connected in parallel to a bus line connected to the central control unit (1000); the central control unit (1000) comprises a central control unit (1100) including one or more memories and one or more processors; a data transmission and reception unit (1300) that performs data communication with a plurality of sub-controllers (2000) through the Ethernet network; a security module (1400) that performs operations related to the security of the Ethernet system; and a central communication module (1200) that performs communication with the outside of the vehicle.

[0108] Specifically, the Central Control Unit (1000) is the highest-level control unit within the vehicle Ethernet system of the present invention, oversees the entire vehicle Ethernet system, and can integrally manage / control a plurality of sub-controllers (2000) or a plurality of edge modules (3000). According to one embodiment of the present invention, it may correspond to a vehicle's Central Computer or High-Performance Computer (HPC). The Central Control Unit (1000) includes a central control unit (1100), a data transmission and reception unit (1300), a central communication module (1200), and a security module (1400).

[0110] The central control unit (1100) is a core computational unit of the central control device (1000), and it is preferable that it includes one or more high-performance processors and large-capacity memory. An application processor (AP) with multiple cores integrated to simultaneously process complex computations such as autonomous driving and infotainment, a Graphics Processing Unit (GPU) for graphics processing, or a Neural Processing Unit (NPU) for accelerating neural network computations may be implemented / equipped in hardware in the central control unit (1100). Additionally, high-speed, large-capacity memory and storage systems such as LPDDR RAM and UFS may be implemented / equipped for the execution of an operating system and large-scale applications. The central control unit (1100) can perform control logic to determine the state of the vehicle by comprehensively analyzing data received from each of the multiple sub-controllers (2000), and based on this, make global decisions for the vehicle, such as establishing a driving strategy and calculating a path.

[0111] The data transmission and reception unit (1300) may include an interface that is physically or virtually implemented for the central control unit (1000) to communicate with the Ethernet network. Additionally, the data transmission and reception unit (1300) may include an Ethernet switch IC having multiple ports that is directly connected to a bus line (10) forming the vehicle's backbone network, and through this, can transmit and receive high-speed Ethernet frames with each of a plurality of sub-controllers (2000) connected in parallel to the bus line (10).

[0112] According to one embodiment of the present invention, the data transmission and reception unit (1300) may further include a configuration that performs, in addition to simply transmitting and receiving data, a function of managing traffic coming from each sub-controller (2000), controlling the priority of data according to a Quality of Service (QoS) policy, and accurately routing necessary data to the corresponding sub-controller (2000).

[0114] The central communication module (1200) is configured to support communication with the outside of the vehicle, and it is preferable that it be implemented as a module integrating cellular communication such as 5G / LTE-A, V2X (Vehicle-to-Everything) communication, and GNSS reception functions for high-precision positioning. The central communication module (1200) can be connected to a cloud server, traffic infrastructure, etc., outside the vehicle to receive real-time traffic information or map data, etc., from the external server, etc. In particular, it can directly receive OTA (Over-the-Air) update data for the entire vehicle system, such as the operating system and autonomous driving software stack of the central control unit (1000), from an external server and transmit it to the central control unit (1100).

[0116] The above security module (1400) corresponds to a configuration that manages, controls, and monitors all security-related operations performed in the vehicle Ethernet system of the present invention. The above security module (1400) may include a Hardware Security Module (HSM) for secure storage of encryption keys and high-speed cryptographic operations, and may further include a configuration capable of implementing functions such as an Intrusion Detection System (IDS) or a firewall for detecting abnormal traffic in the network inside the vehicle. The above security module (1400) can encrypt and authenticate all communication with an external server through the central communication module (1200), and can create, establish, and distribute security policies for each sub-controller (2000) and edge module (3000). That is, it can perform not only end-to-end security operations performed at the sub-controller (2000)-edge module (3000) level, but also comprehensive security functions that establish a security framework for the entire vehicle system and protect the system from external cyber threats.

[0118] FIG. 6 schematically illustrates the process of performing an encapsulation step according to one embodiment of the present invention, and FIG. 7 schematically illustrates the process of performing a decapsulation step according to one embodiment of the present invention.

[0120] As illustrated in FIGS. 6 and 7, the protocol conversion module (2200) performs an encapsulation step of encapsulating an Ethernet frame used for Ethernet communication in the Ethernet network into a wireless frame having the wireless protocol; and a decapsulation step of decapsulating a wireless frame used for wireless communication between the edge module (3000) and the sub-controller (2000) into an Ethernet frame having the Ethernet protocol; and during the execution of the encapsulation step or the decapsulation step, the data of the payload included in the Ethernet frame before conversion or the wireless frame before conversion is preserved.

[0122] In summary, FIG. 6(a) illustrates the process of transmitting an Ethernet frame received by an Ethernet communication module (2100) to a protocol conversion module (2200), FIG. 6(b) illustrates the process of performing an encapsulation step in which the Ethernet frame is converted into a wireless frame in the protocol conversion module, and FIG. 6(c) illustrates the process of transmitting the converted wireless frame by the protocol conversion module (2200) to a sub-communication module (2300).

[0123] Additionally, FIG. 7(a) illustrates the process of transmitting a wireless frame from a sub-communication module (2300) to a protocol conversion module (2200), FIG. 7(b) illustrates the process of performing a decapsulation step in which the wireless frame is converted into an Ethernet frame in the protocol conversion module (2200), and FIG. 7(c) illustrates the process in which the protocol conversion module (2200) transmits the converted Ethernet frame to an Ethernet communication module (2100).

[0125] Specifically, when the central control unit (1000) intends to transmit specific data to a specific edge module (3000), the central control unit (1000) generates the data to be transmitted as an Ethernet frame and transmits the generated Ethernet frame to the Ethernet communication module (2100) through the bus line (10). Subsequently, as illustrated in FIG. 6 (a), when the Ethernet communication module (2100) transmits the received Ethernet frame to the protocol conversion module (2200), the protocol conversion module (2200) performs an encapsulation step of converting the Ethernet frame into a wireless frame.

[0126] More specifically, the protocol conversion module (2200) generates a new wireless header that conforms to the wireless protocol (e.g., Wi-Fi, UWB, etc.) standard with the edge module (3000) to which the data is to be transmitted. At this time, as an embodiment of the present invention, the protocol conversion module (2200) may temporarily store the received Ethernet frame in a data buffer, analyze the header of the Ethernet frame to identify control information such as MAC address and data type, and use a frame generator to generate a header that conforms to the wireless protocol standard for wireless communication with the edge module (3000).

[0127] Subsequently, as shown in FIG. 6(b), the protocol conversion module (2200) can construct a wireless frame by adding a generated wireless header to the front of the original Ethernet frame, and in this process, data including the payload of the Ethernet frame can be preserved, and the wireless frame after conversion is transmitted to the sub-communication module (2300) as shown in FIG. 6(c), and then transmitted to the edge module (3000).

[0129] Meanwhile, when the edge module (3000) intends to transmit specific data to the central control unit (1000), the edge module (3000) generates the data to be transmitted as a wireless frame and transmits the generated wireless frame to the sub-communication module (2300) via a wireless communication method. Subsequently, as illustrated in FIG. 7 (a), when the sub-communication module (2300) transmits the received wireless frame to the protocol conversion module (2200), the protocol conversion module (2200) performs a decapsulation step of converting the wireless frame into an Ethernet frame.

[0130] More specifically, the protocol conversion module (2200) can derive an Ethernet frame by stripping or parsing and removing a wireless header from the wireless frame, as shown in FIG. 7(b) as an embodiment of the present invention, and as another embodiment of the present invention, the protocol conversion module (2200) can derive an Ethernet frame by analyzing the wireless header to extract a payload, generating a new Ethernet header that conforms to the Ethernet standard used in the Ethernet network, and combining the extracted payload with the Ethernet header. In this process, a destination MAC address, etc., can be set according to pre-configured routing information. The Ethernet frame that has been converted in this way can be transmitted to the Ethernet communication module (2100), as shown in FIG. 7(c), and then transmitted to the central control unit (1000) or another sub-controller (2000).

[0132] FIG. 8 schematically illustrates the steps of performing the edge module connection step according to one embodiment of the present invention.

[0134] As illustrated in FIG. 8, when a new edge module (3000) is added, an edge module connection step is performed to connect the edge module (3000) to a sub-controller (2000) near the added edge module (3000). The edge module connection step comprises: a step of broadcasting a search signal to search for the sub-controller (2000) when power is applied from the edge module (3000); a step of determining whether the strength of the received search signal is greater than or equal to a preset strength from the sub-controller (2000), and if it is greater than or equal to the preset strength, a step of establishing a wireless communication channel with the edge module (3000); and a step of requesting a signature from the edge module (3000) through the wireless communication channel from the sub-controller (2000). In the edge module (3000), the step of performing the signature using one's own secret key stored in advance, and transmitting one's signature and one's own public key certificate stored in advance together to the sub-controller (2000); The method includes the step of verifying the signature and certificate of the edge module (3000) based on a previously stored ownership voucher in the sub-controller (2000), signing the verification result with its own previously stored verification key, and transmitting it to the edge module (3000); and when the edge module (3000) receives the verification result signed by the sub-controller (2000), an end-to-end secure communication tunnel is created between the sub-controller (2000) and the edge module (3000), and only mutually verified sub-controllers (2000) and edge modules (3000) can communicate in the secure communication tunnel.

[0136] Specifically, for the vehicle to be assembled, the edge module (3000) may be installed on the vehicle for the first time, or the existing installed edge module (3000) may be replaced for reasons such as repair, or a new edge module (3000) may be installed on the vehicle at the request of the vehicle owner. In this case, the edge module (3000) is installed at a specific location on the vehicle, and when power is applied, the edge module (3000) searches for a sub-controller (2000) to be connected to it, and an edge module connection step is performed in which the edge module (3000) and the searched sub-controller (2000) are connected to each other.

[0137] More specifically, when power is supplied to the edge module (3000), the edge module (3000) broadcasts (S10) a search signal to search for a sub-controller (2000) adjacent to itself. At this time, the edge module (3000) may receive power through a battery or through the power supply line of the vehicle. When a sub-controller (2000) receives (S11) the search signal broadcast from the edge module (3000), the sub-controller (2000) determines (S12) whether the strength of the received search signal is greater than or equal to a preset strength. The process corresponds to a process for determining whether the sub-controller (2000) is a sub-controller (2000) adjacent to the edge module (3000), and in various embodiments of the present invention, a plurality of sub-controllers (2000) may receive the search signal. In such cases, the vehicle Ethernet system of the present invention performs a process of determining the sub-controller (2000) located closest to the edge module (3000) or in the location with the best communication environment, which will be described later in the description of FIG. 9.

[0138] In step S12 above, if it is determined that the strength of the search signal received by the sub-controller (2000) is greater than or equal to the preset strength, the sub-controller (2000) establishes a wireless communication channel (S13) with the edge module (3000). The wireless communication channel can be interpreted as a temporary channel through which only the sub-controller (2000) and the edge module (3000) can communicate wirelessly. The sub-controller (2000) requests a signature (S14) through the wireless communication channel. The signature may correspond to a security configuration intended to allow only connections with authorized edge modules (3000). Upon receiving the signature through the wireless communication channel, the edge module (3000) signs the signature using its own secret key (S15). The above secret key corresponds to a unique key stored in the edge module (3000) during the manufacturing stage of the edge module (3000).

[0139] Subsequently, the edge module (3000) transmits a signature signed with the secret key and its own public key certificate together to the sub-controller (2000). The public key, like the secret key, may correspond to a key stored in the edge module (3000) during the manufacturing stage of the edge module (3000). It is preferable that the public key certificate be interpreted as data having the meaning that "this signature can only be created with my own unique private key, and my identity can be verified with this certificate."

[0140] The sub-controller (2000) that receives the signature and the public key certificate (S16) verifies the signature and the public key certificate (S17). At this time, the sub-controller (2000) may perform step S17 based on a previously stored ownership voucher. The ownership voucher is a digital document that cryptographically tracks and proves how ownership of a specific edge module was transferred from the manufacturer to the final owner (in this case, the automobile manufacturer), and may include the unique identifier of the edge module (3000), the manufacturer's public key, and a record of ownership transfer (e.g., a record in which the owner at each stage, starting from the manufacturer and through the supply chain to the final owner, signed the next owner's public key with their own private key).

[0141] Subsequently, the sub-controller (2000) signs (S18) the verification result for step S17 with its own verification key stored therein, and transmits (S19) the signed verification result to the edge module (3000). When the edge module (3000) receives the signed verification result, the edge module (3000) and the sub-controller (2000) can prove to each other that they are the legitimate device and owner, and an end-to-end secure communication tunnel is created between the edge module (3000) and the sub-controller (2000). The technical feature of the secure communication tunnel is that only mutually verified sub-controller (2000) and edge module (3000) can communicate. Meanwhile, the edge module connection step described above may be implemented as a Persistent Fixed Connection method, in which mutual authentication is performed once as described above, and a fixed secure communication channel is subsequently established, as an embodiment of the present invention.

[0143] FIG. 9 schematically illustrates the process of determining a sub-controller (2000) connected to an edge module (3000) when a plurality of sub-controllers (2000) receive a search signal of an edge module (3000) according to an embodiment of the present invention.

[0145] In summary, FIG. 9(a) illustrates a situation in which a plurality of sub-controllers (2000) receive a search signal broadcast from the edge module (3000), FIG. 9(b) illustrates a situation in which a specific sub-controller (2000) (sub-controller #1 (2000.1)) is connected before another sub-controller (2000) (sub-controller #2 (2000.2)), and FIG. 9(c) illustrates a process in which a sub-controller (2000) connected to the edge module (3000) is reset by the central control unit (1000).

[0147] Specifically, as illustrated in FIG. 9(a), a situation in which a plurality of sub-controllers (2000) receive a search signal broadcast by the edge module (3000) occurs frequently. Each of the plurality of sub-controllers (2000) can derive the magnitude of the RSSI (Received Signal Strength Indicator) of the search signal received through step S12, and as illustrated in FIG. 9(b), each RSSI derived from each sub-controller (2000) is transmitted to the central control unit (1000). At this time, due to the influence of the time difference in which the search signal is received or the external environment, a specific sub-controller (2000) (sub-controller #1 (2000.1) in FIG. 9) may be connected to the edge module (3000) before another sub-controller (2000) (sub-controller #2 (2000.2) in FIG. 9) that received the search signal.

[0148] Here, the central control unit (1000) compares (S21) the RSSI received from each sub-controller (2000), and based on the comparison result, can generate and transmit a connection command and a connection disconnection command as shown in (c) of FIG. 9. More specifically, the central control unit (1000) can identify the sub-controller (2000) that transmitted a larger RSSI through step S21, and if the sub-controller (2000) that transmitted a smaller RSSI is connected to the edge module (3000), the central control unit (1000) transmits a connection disconnection command to the corresponding sub-controller (2000) and transmits a connection command to the sub-controller (2000) that transmitted the larger RSSI. The sub-controller (2000) that receives the above connection disconnection command disconnects the connection with the corresponding edge terminal, and the sub-controller (2000) that receives the above connection command performs the edge module connection step with the edge module (3000).

[0149] Meanwhile, as an embodiment of the present invention, the process described in the description of FIG. 9 can be repeated at predetermined intervals, thereby allowing the edge module (3000) to be connected to the sub-controller (2000) capable of the smoothest communication. At this time, the reason the edge module (3000) can be freely connected to other sub-controllers (2000) is that the vehicle Ethernet system of the present invention is not structured by domain and each sub-controller (2000) can perform many functions simultaneously in a complex manner, so it can achieve the effect of being connected to any sub-controller (2000) regardless of the type of edge module (3000).

[0151] FIGS. 10 and 11 schematically illustrate the process of performing a collision prevention step according to an embodiment of the present invention.

[0153] As illustrated in FIGS. 10 and 11, when the sub-controller (2000) performs communication with a plurality of edge modules (3000), it performs a collision prevention step to prevent communication data between each of the edge modules (3000), wherein the collision prevention step includes: a step of assigning unique identification information to each of the plurality of edge modules (3000) at the sub-controller (2000); a step of transmitting a beacon signal signifying the start of a communication cycle to each of the plurality of edge modules (3000) at the sub-controller (2000); a step of receiving the beacon signal at each of the plurality of edge modules (3000) and synchronizing an internal clock; and a step of the sub-controller (2000) performing communication with each of the plurality of edge modules (3000) sequentially for a preset communication time.

[0155] In summary, as described above, the sub-controller (2000) of the present invention is characterized by performing wireless communication with various and different edge modules (3000). In this case, the sub-controller (2000) can solve the problem of communication reliability associated with wireless connections by performing a collision prevention step to prevent data transmitted by each edge module (3000) from colliding.

[0157] Specifically, the sub-controller (2000) transmits unique identification information to each of the plurality of edge modules (3000) connected to it, as illustrated in FIG. 10 (a). At this time, the transmitted identification information must all be distinguishable. Subsequently, the sub-controller (2000) broadcasts a beacon signal, as illustrated in FIG. 10 (b), and the plurality of edge modules (3000) connected to it receive the beacon signal. At this time, as an embodiment of the present invention, only the edge module (3000) that received the identification information can receive the beacon signal broadcast by the sub-controller (2000) through the data provided when the sub-controller (2000) transmits the identification information. The plurality of edge modules (3000) that received the beacon signal can synchronize their internal clocks based on the beacon signal.

[0158] When a plurality of edge modules (3000) that have received the above beacon signal are all synchronized in time, the sub-controller (2000) performs communication with each of the plurality of edge modules (3000) sequentially. At this time, communication is performed with each edge module (3000) for a pre-set communication time (e.g., 200ms in FIG. 11), and the communication time corresponds to a configuration that can be changed at any time according to the inventor's intention. That is, as shown in FIG. 11, the sub-controller (2000) performs communication with edge module #1 (3000.1) in the first turn (turn #1), and after the communication time has passed in the first turn, the next turn moves to edge module #2 (3000.2), and the sub-controller (2000) performs communication with edge module #2 (3000.2) for the communication time. As one embodiment of the present invention, by increasing the computing power of the sub-controller (2000), the communication cycle can be shortened, allowing communication with many edge modules (3000) to be performed within a limited time, thereby enabling real-time communication with all edge modules (3000). Meanwhile, as another embodiment of the present invention, the sub-controller (2000) can operate the aforementioned collision prevention step more efficiently by operating multiple channels with different frequencies.

[0160] FIG. 12 schematically illustrates the process of transferring communication authority from an edge module (3000) to another edge module (3000) in order to increase the efficiency of a wireless communication channel according to one embodiment of the present invention.

[0162] As illustrated in FIG. 12, the collision prevention step further includes: determining whether there is data to transmit when a turn to communicate with the sub-controller (2000) returns for each of the plurality of edge modules (3000); and if there is no data to transmit, transferring the authority to communicate to another edge module (3000) before the communication time allocated to it expires.

[0164] Specifically, as described above, if the computing power of the sub-controller (2000) is improved, real-time communication with multiple edge modules (3000) can be performed; however, in the case of some edge modules (3000), such as a rear camera in a forward situation, there is no data to transmit to the sub-controller (2000) unless the gear is changed to reverse or the driver performs a separate input operation. If a communication turn is allocated to such edge modules (3000) during the aforementioned communication possible time, the entire communication resource may be operated inefficiently. The collision prevention step of the present invention performs a process as illustrated in FIG. 12 in order to operate communication resources more efficiently.

[0165] When communication between the sub-controller (2000) and edge module #1 (3000.1) (turn #1 in FIG. 11) ends (S30), the sub-controller (2000) starts communication with edge module #2 (3000.2) (turn #2 in FIG. 11) (S31). At this time, the edge module #2 (3000.2) performs a process of determining (S32) whether there is data to communicate with the sub-controller (2000), and if the determination result indicates that there is data to communicate, it performs communication with the sub-controller (2000) during the communication possible time (S33). However, if it is determined that there is no communicated data as a result of performing step S34 above, the edge module #2 (3000.2) transfers the authority to communicate with the sub-controller (2000) to the edge module #3 (3000.3) before the communication time expires (S34), and the edge module #3 (3000.3) starts communication (turn #3) with the sub-controller (2000) (S35).

[0166] In this way, some edge modules (3000) that do not require real-time communication transfer communication authority to the next edge module (3000) on their own, thereby enabling efficient operation of communication resources at the sub-controller (2000) level.

[0168] FIG. 13 schematically illustrates the process of monitoring the communication status of each edge module (3000) using an artificial intelligence-based model according to one embodiment of the present invention.

[0170] In summary, a sub-controller (2000) that communicates with a plurality of edge modules (3000) can monitor the communication status of each of the plurality of edge modules (3000) connected to it and generate a notification thereon.

[0172] Specifically, the sub-communication module (2300) communicates with each of the plurality of edge modules (3000) and, referring to FIG. 13 (a), transmits the RSSI for each edge module (3000) to the communication status monitoring unit at preset intervals. The communication status monitoring unit may be included in the sub-control unit (2400). The communication status monitoring unit can monitor the communication status of each edge module (3000) based on the RSSI for each edge module (3000) that is periodically received from the sub-communication module (2300). FIG. 13 (b) and FIG. 13 (c) illustrate an example of a graph of the RSSI for each edge module (3000) over time in the communication status monitoring unit.

[0173] As illustrated in FIG. 13(b), the RSSI in a specific edge module (3000) may decrease over time due to reasons such as the aging of the edge module (3000). At this time, if the RSSI in the edge module (3000) is below a preset threshold size, the communication status monitoring unit may generate a warning notification and transmit it to the central control unit (1000) or directly to the user.

[0174] Additionally, as illustrated in Fig. 13 (c), the RSSI at a specific edge module (3000) may decrease rapidly due to a failure of the edge module (3000), changes in the external environment, or an accident. When the RSSI decreases rapidly due to a slope greater than a preset slope, the communication status monitoring unit may generate a warning notification and transmit it to the central control unit (1000) or directly to the user.

[0175] Meanwhile, as an embodiment of the present invention, the communication status monitoring unit may use a deep learning-based AI model to learn the RSSI pattern of a specific edge module (3000) and, if a difference of more than a preset standard (e.g., 30%) occurs between the pattern and the communication status monitoring unit, generate a warning notification. The AI ​​model is preferably a CNN-based deep learning model, but is not limited thereto. When a specific edge module (3000) is added to the sub-controller (2000) through the aforementioned edge module connection step, the AI ​​model may learn the RSSI pattern of the edge module (3000) for a predetermined period, and if a standardized RSSI pattern is derived for the edge module (3000), it may be transmitted to the communication status monitoring unit. As an embodiment of the present invention, the AI ​​model may be included in the sub-control unit (2400), or as another embodiment of the present invention, the AI ​​model may be included in the central control unit (1000).

[0177] According to one embodiment of the present invention, a new wireless edge module can be flexibly added to a wired Ethernet network without physical wiring work, thereby significantly improving the scalability of the in-vehicle network system.

[0178] According to one embodiment of the present invention, by replacing a part of the complex wiring harness inside a vehicle with wireless communication, it is possible to achieve the effect of reducing the overall weight and manufacturing cost of the vehicle.

[0179] According to one embodiment of the present invention, since data payloads between Ethernet protocols and wireless protocols are mutually converted without loss through the protocol conversion function of the sub-controller, the effect of smoothly integrating and operating heterogeneous communication networks can be achieved.

[0180] According to one embodiment of the present invention, when a single sub-controller communicates with a plurality of edge modules, a unique communication time is sequentially allocated to each edge module to prevent data collisions, thereby enabling the establishment of a stable and highly reliable wireless communication environment.

[0181] According to one embodiment of the present invention, when a specific edge module has no data to transmit, it transfers its communication authority to another edge module, thereby maximizing the usage efficiency of the wireless communication channel and improving the responsiveness of the entire system.

[0182] According to one embodiment of the present invention, edge modules can be easily added or replaced without wiring work even in areas with a lot of movement, such as doors, trunks, and side mirrors, or areas where physical wiring connection is difficult, such as bumpers and roofs, thereby increasing the design freedom of the vehicle and significantly improving maintenance convenience.

[0183] According to one embodiment of the present invention, by not dividing the sub-controllers by domain and including a high-performance processor to control physically separated sections in the vehicle, it is possible to reduce the length and weight of the wiring harness required in the past and facilitate vehicle updates and maintenance.

[0185] Although the embodiments have been described above with reference to limited examples and drawings, those skilled in the art can make various modifications and variations from the description above. For example, suitable results can be achieved even if the described techniques are performed in a different order than described, and / or the components of the described system, structure, device, circuit, etc. are combined or assembled in a form different from described, or replaced or substituted by other components or equivalents.

[0186] Therefore, other implementations, other embodiments, and equivalents to the claims also fall within the scope of the claims set forth below.

Claims

Claim 1 A vehicle Ethernet system that supports flexible access, provided within a vehicle and capable of flexibly adding wirelessly-communicating edge modules, comprising: a sub-controller that performs Ethernet communication with a central control unit via an Ethernet network and is responsible for a physically assigned section within the vehicle; and an edge module capable of wireless communication with said sub-controller; wherein the sub-controller comprises: an Ethernet communication module for connection with said Ethernet network; a sub-communication module that supports wireless communication with one or more edge modules connectable to said sub-controller; and a protocol conversion module that performs mutual conversion between an Ethernet protocol used for Ethernet communication and a wireless protocol used for wireless communication with said edge module. A vehicle Ethernet system comprising: a sub-control unit connected to the Ethernet communication module, the sub-communication module, and the protocol conversion module, and controlling the communication and protocol conversion process with the central control unit and the edge module; wherein the sub-communication module and the edge module have a radio frequency (RF) output of 0 dBm and a reception sensitivity of -90 dBm, and the wireless connection between the sub-controller and the edge module establishes a fixed secure communication channel through mutual authentication once before vehicle shipment. Claim 2 The Ethernet system for a vehicle according to claim 1, wherein the edge module comprises: a first edge communication unit that supports wireless communication with a sub-controller to be connected to itself; a second edge communication unit that supports wireless communication with the outside of the vehicle; and an edge control unit that controls the operation and communication of the edge module; wherein the first edge communication unit performs wireless communication with the sub-controller to be connected to itself through a communication method including at least one of Bluetooth, UWB, Wi-Fi, and Zigbee, and the second edge communication unit performs wireless communication with the outside of the vehicle through a wide-area communication method including at least one of LTE or 5G. Claim 3 A vehicle Ethernet system that supports flexible access, provided within a vehicle and capable of flexibly adding wirelessly-communicating edge modules, comprising: a sub-controller that performs Ethernet communication with a central control unit via an Ethernet network and is responsible for a physically assigned section within the vehicle; and an edge module capable of wireless communication with said sub-controller; wherein the sub-controller comprises: an Ethernet communication module for connection with said Ethernet network; a sub-communication module that supports wireless communication with one or more edge modules connectable to said sub-controller; and a protocol conversion module that performs mutual conversion between an Ethernet protocol used for Ethernet communication and a wireless protocol used for wireless communication with said edge module. A vehicle Ethernet system comprising: a sub-control unit connected to the Ethernet communication module, the sub-communication module, and the protocol conversion module, and controlling the communication and protocol conversion process with the central control unit and the edge module; wherein the vehicle Ethernet system further comprises a central control unit comprising one or more memories and one or more processors; wherein the Ethernet network has a structure in which a plurality of the sub-controllers are connected in parallel to a bus line connected to the central control unit; wherein the central control unit comprises: a central control unit comprising one or more memories and one or more processors; a data transmission / reception unit that performs data communication with a plurality of sub-controllers through the Ethernet network; a security module that performs operations related to the security of the Ethernet system; and a central communication module that performs communication with the outside of the vehicle. Claim 4 A vehicle Ethernet system according to claim 1, wherein the protocol conversion module performs: an encapsulation step of encapsulating an Ethernet frame used for Ethernet communication in the Ethernet network into a wireless frame having the wireless protocol; and a decapsulation step of decapsulating a wireless frame used for wireless communication between the edge module and the sub-controller into an Ethernet frame having the Ethernet protocol; wherein, during the execution of the encapsulation step or the decapsulation step, data of the payload included in the Ethernet frame before conversion or the wireless frame before conversion is preserved. Claim 5 A vehicle Ethernet system that supports flexible access, provided within a vehicle and capable of flexibly adding wirelessly-communicating edge modules, comprising: a sub-controller that performs Ethernet communication with a central control unit via an Ethernet network and is responsible for a physically assigned section within the vehicle; and an edge module capable of wireless communication with said sub-controller; wherein the sub-controller comprises: an Ethernet communication module for connection with said Ethernet network; a sub-communication module that supports wireless communication with one or more edge modules connectable to said sub-controller; and a protocol conversion module that performs mutual conversion between an Ethernet protocol used for Ethernet communication and a wireless protocol used for wireless communication with said edge module. The vehicle Ethernet system includes a sub-control unit connected to the Ethernet communication module, the sub-communication module, and the protocol conversion module, which controls the communication and protocol conversion process between the central control unit and the edge module; wherein, when a new edge module is added, the vehicle Ethernet system performs an edge module connection step of connecting the edge module to a sub-controller near the added edge module; the edge module connection step comprises: a step of broadcasting a search signal to search for a sub-controller when power is applied at the edge module; a step of determining at the sub-controller whether the strength of the received search signal is greater than or equal to a preset strength, and if it is greater than or equal to the preset strength, establishing a wireless communication channel with the edge module; a step of requesting a signature from the edge module through the wireless communication channel at the sub-controller; a step of performing the signature using its own private key stored in the edge module and transmitting its signature and its own public key certificate stored in the edge module together to the sub-controller; A step in which, in a sub-controller, the signature and certificate of the edge module are verified based on a previously stored ownership voucher, and the verification result is signed with one's own previously stored verification key and transmitted to the edge module;A vehicle Ethernet system comprising, when the edge module receives a verification result signed by the sub-controller, an end-to-end secure communication tunnel is created between the sub-controller and the edge module, and only mutually verified sub-controllers and edge modules can communicate in the secure communication tunnel. Claim 6 A vehicle Ethernet system that supports flexible access, provided within a vehicle and capable of flexibly adding wirelessly-communicating edge modules, comprising: a sub-controller that performs Ethernet communication with a central control unit via an Ethernet network and is responsible for a physically assigned section within the vehicle; and an edge module capable of wireless communication with said sub-controller; wherein the sub-controller comprises: an Ethernet communication module for connection with said Ethernet network; a sub-communication module that supports wireless communication with one or more edge modules connectable to said sub-controller; and a protocol conversion module that performs mutual conversion between an Ethernet protocol used for Ethernet communication and a wireless protocol used for wireless communication with said edge module. A vehicle Ethernet system comprising: a sub-control unit connected to the Ethernet communication module, the sub-communication module, and the protocol conversion module, and controlling the communication and protocol conversion process with the central control unit and the edge module; wherein the sub-controller performs a collision prevention step to prevent communication data between each edge module from colliding when communicating with a plurality of edge modules, and the collision prevention step comprises: a step of assigning unique identification information to each of the plurality of edge modules in the sub-controller; a step of transmitting a beacon signal signifying the start of a communication cycle to each of the plurality of edge modules in the sub-controller; a step of receiving the beacon signal and synchronizing an internal clock in each of the plurality of edge modules; and a step of the sub-controller performing communication with each of the plurality of edge modules sequentially for a preset communication time. Claim 7 The vehicle Ethernet system according to claim 6, wherein the collision prevention step further comprises: determining whether there is data to transmit at each of the plurality of edge modules when a turn to communicate with the sub-controller returns, and if there is no data to transmit, transferring the authority to communicate to another edge module before the communication time allocated to it expires. Claim 8 A vehicle Ethernet system according to claim 1, wherein wireless communication between the sub-communication module and the edge module is implemented using a wireless communication method applying Phase-Shift Keying (PSK) in a frequency band of 700 MHz to 900 MHz, and the wireless protocol applies a frequency-division or time-division-based data division method to the wireless frame. Claim 9 A vehicle Ethernet system according to claim 8, wherein the frequency-division divides the wireless frame into channels of 100KHz or 200KHz, and the time-division divides it into time units of less than 100 milliseconds (ms). Claim 10 delete

Images