Method and device for determining reference time in vehicle by using plurality of time sources

Abstract

The present disclosure relates to a method and a device for determining a reference time in a vehicle by using a plurality of time sources. The device according to an embodiment of the present disclosure receives time data from a plurality of time sources, verifies consistency and reliability of the received time data, and determines a reference time according to the result of the verification. The determined reference time is transmitted to each ECU in the vehicle and utilized for time synchronization, timestamp assignment, or clock correction, so that the reliability and accuracy of functions or services of the vehicle system can be improved.

Description

Method and device for determining a reference time within a vehicle using multiple time sources

[0001] The present disclosure relates to a method and device for determining a reference time within a vehicle using multiple time sources. More specifically, the present disclosure relates to a technique for determining a reliable reference time within a vehicle by verifying time data received from multiple time sources.

[0002] The content described below merely provides background information related to the present embodiment and does not constitute prior art.

[0003] Recent vehicles are equipped with advanced electronic control units (ECUs) and various communication functions, providing various smart services such as driving and parking assistance, remote diagnosis and control, in-vehicle software wireless updates (OTA, Over-The-Air), feature subscription services (FoD, Feature on Demand), and security management.

[0004] To ensure the reliability and safety of these services, in-vehicle systems must operate based on reliable time information.

[0005] In existing vehicle systems, it was common to perform time synchronization between ECUs by referencing a single time source such as a GNSS (Global Navigation Satellite System) or NTP (Network Time Protocol) server.

[0006] However, because this method relies on a single time source, it can present security vulnerabilities. For example, if an attacker manipulates or blocks this time source, inaccurate time information can be transmitted to the vehicle, potentially leading to service errors, data inconsistencies, and system malfunctions. For example, if a specific FoD service has a limited use period and legitimate use is determined based on vehicle time, inaccurate or manipulated vehicle time could lead to illegal use of the service.

[0007] Additionally, if each ECU or device independently maintains time or individually references an external time source, there is a problem that time errors can gradually accumulate due to effects such as clock drift and communication delays.

[0008] The present disclosure aims to provide a method for determining and utilizing a reliable reference time within a vehicle by verifying time data received from multiple time sources.

[0009] The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the description below.

[0010] According to one aspect of the present disclosure, there is provided an apparatus for determining a reference time, comprising one or more processors and a memory operably coupled to the one or more processors, the memory storing instructions executable by the one or more processors, the instructions configured to cause the one or more processors to perform operations, the operations including: receiving time data from a plurality of time sources respectively; determining whether each of the received time data is reliable; determining a reference time based on the time data determined to be reliable; and transmitting the reference time to one or more electronic control devices in a vehicle.

[0011] According to another aspect of the present disclosure, there is provided an apparatus for determining a reference time, the apparatus comprising: one or more processors and a memory operably coupled to the one or more processors, the memory storing instructions executable by the one or more processors, the instructions configured to cause the one or more processors to perform operations, the operations including: receiving time data from a plurality of time sources respectively; setting a verification range according to a preset range reference value centered on a median value of the plurality of received time data; calculating the number of time data included in the verification range; determining a reference time based on the median value when the calculated number exceeds a preset threshold value; and transmitting the reference time to one or more electronic control devices in a vehicle.

[0012] According to embodiments of the present disclosure, security is improved by increasing resistance to errors or malicious attacks compared to methods that rely on a single time source.

[0013] Additionally, by performing a verification process on the received time data, more reliable time information can be provided.

[0014] Compared to a method of receiving encrypted time data from a single time source, the present invention has the effect of reducing required computational resources and shortening delay time.

[0015] Furthermore, the present invention provides multiple algorithms with different reliability and performance characteristics, allowing users to select and apply the appropriate algorithm based on the vehicle's system performance or service requirements. This configuration enables flexible and resilient operation depending on system resource constraints or application scenarios.

[0016] The effects of the present disclosure are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the description below.

[0017] Figure 1 conceptually illustrates a vehicle connecting to a server via a network.

[0018] Figure 2 is a block diagram showing the configuration of a vehicle connected to an external network.

[0019] Figure 3 is a functional block diagram illustrating the configuration of a gateway (110).

[0020] FIG. 4 is a conceptual diagram illustrating in-vehicle reference time determination using multiple time sources according to one embodiment of the present invention.

[0021] FIG. 5 is a block diagram of a reference time determination device according to one embodiment of the present disclosure.

[0022] FIG. 6 is a flowchart of a method for determining a reference time according to one embodiment of the present disclosure.

[0023] FIG. 7 is a flowchart of a reference time determination method according to another embodiment of the present disclosure.

[0024] FIG. 8 is a block diagram schematically illustrating an exemplary computing device that may be used to implement a method or device according to the present disclosure.

[0025] Hereinafter, some embodiments of the present disclosure will be described in detail using exemplary drawings. When designating components in each drawing, it should be noted that, where possible, identical components are given the same reference numerals, even if they appear in different drawings. Furthermore, when describing the present disclosure, detailed descriptions of related known structures or functions will be omitted if they are deemed to obscure the gist of the present disclosure.

[0026] In describing components of embodiments according to the present disclosure, symbols such as first, second, i), ii), a), b) may be used. These symbols are only for distinguishing the components from other components, and the nature, order, or sequence of the components are not limited by the symbols. When a part in the specification is said to "include" or "have" a component, this does not mean that other components are excluded, but rather that other components may be included, unless explicitly stated otherwise.

[0027] The detailed description set forth below, together with the accompanying drawings, is intended to explain exemplary embodiments of the present disclosure and is not intended to represent the only embodiments in which the present disclosure may be practiced.

[0028] Figure 1 conceptually illustrates a vehicle connecting to a server via a network.

[0029] Referring to FIG. 1, a vehicle (100) can be connected to a server (200) that provides vehicle-related functions or services through a mobile or wireless network (300) such as LTE, 5G, or Wi-Fi.

[0030] Figure 2 is a block diagram showing the configuration of a vehicle connected to an external network.

[0031] Referring to FIG. 2, the vehicle (100) includes a gateway (110) connected to an external network and an internal network, and subsystems connected to the internal network.

[0032] The gateway (110) relays communication between multiple electronic control units (ECUs) within a vehicle (100) and safely transmits data through linkage with an external network. Furthermore, it is configured to maintain data security and reliability during the communication process.

[0033] The subsystems may include, for example, a powertrain subsystem (120), a body subsystem (130), a chassis subsystem (140), an infotainment subsystem (150), etc.

[0034] Each subsystem (120, 130, 140, 150) includes one or more electrical components with similar functions connected by the same type of internal bus, and each electrical component can be controlled and driven by a corresponding ECU.

[0035] The powertrain subsystem (120) is a collection of components that generate the driving force of a vehicle, and may include components such as an engine, motor, transmission, battery, generator, etc., and an ECU (121, 122, 123) for controlling each component.

[0036] The body subsystem (130) is a collection of components for enhancing the convenience and safety of passengers, and may include components such as seats, heating / ventilation / air conditioning (HVAC), lighting, doors, and windows, and an ECU (131, 132, 133) for controlling each component.

[0037] The chassis subsystem (140) is a set of parts required for driving a vehicle excluding the body, and may include parts related to steering, brakes, suspension, tire pressure measurement, etc., and an ECU (141, 142, 143) for controlling each part.

[0038] The infotainment subsystem (150) is a collection of components related to driving guidance or multimedia, and may include components such as a navigation system, a multimedia system, a head-up display, and an ECU (151, 152, 153) for controlling each component.

[0039] The internal network connecting the components constituting the gateway (110) and subsystems can use communication protocols such as LIN (Local Interconnect Network), CAN (Control Area Network), CAN-FD, FlexRay, MOST (Media Oriented Systems Transport), and Ethernet.

[0040] The electrical components of each subsystem using different communication protocols can perform data communication with each other through the gateway (110).

[0041] Figure 3 is a functional block diagram illustrating the configuration of a gateway (110).

[0042] Referring to FIG. 3, the gateway (110) may include a central control unit (CCU, 111), a storage unit (113), an external communication unit (115), and an internal communication unit (117).

[0043] The CCU (111) controls the overall operation of the gateway and may include functions for processing, verifying, storing and distributing received time data.

[0044] The storage unit (113) may be configured as a memory or storage device for storing information related to received time data, verification results, reference time, etc.

[0045] The external communication unit (115) performs data transmission and reception with an external time source such as GNSS, NTP server, FoD server, OTA server, or cellular network.

[0046] The internal communication unit (117) is connected to various ECUs in the vehicle and performs communication for time synchronization or reference time distribution.

[0047] Meanwhile, the CCU (111) can control the overall operation of the vehicle (100) by controlling the ECU of at least one electric component included in at least one subsystem (120, 130, 140, 150) according to the request of the passenger, the need due to the driving situation, etc.

[0048] The functions performed by the CCU (111) may include driving / parking management, remote diagnosis / control, FoD service management, software update, security management, etc.

[0049] The driving / parking management function comprehensively controls the vehicle's speed, steering, and braking when driving and parking, thereby improving safety and convenience.

[0050] The remote diagnosis / control function transmits status information collected while the vehicle is in operation to the server (200) for real-time diagnosis, and changes the control conditions of the vehicle or supports remote control in an emergency based on the diagnosis results received from the server (200).

[0051] The FoD service management function manages a type of subscription service, such as downloading and activating new features from the server (200) or activating deactivated features. The CCU (111) performs the user's subscription service setup or cancellation, and verifies whether the requested activation feature is actually selected by the user or whether the feature has been activated through fraudulent means. Based on the verification result, the CCU (111) can activate or restrict the activation of the feature.

[0052] The software update function is a service that the CCU (111) performs on its own when software update conditions are met in a vehicle to which OTA is applied. Software update may include updating the software that manages the overall operation of the vehicle as well as the firmware installed in the ECU of each component.

[0053] Security management functions may include functions or services related to vehicle security or the authentication of external devices accessing the in-vehicle network. Security threats related to vehicles may include firmware tampering, remote control hacking, CAN tampering, vehicle tampering, and denial of service. Security threats related to external network communications may also include eavesdropping and message tampering.

[0054] Security management functions may include functions to detect and respond to intrusions into the vehicle's internal network through external networks (IDS, Intrusion Detection System), and services to record data related to accident events such as collisions (EDR, Event Data Recorder).

[0055] In order to ensure the reliability and safety of the various functions and services described above, the in-vehicle gateway (110) and multiple electronic control units (ECUs) must operate based on reliable time information.

[0056] FIG. 4 is a conceptual diagram illustrating in-vehicle reference time determination using multiple time sources according to one embodiment of the present invention.

[0057] Referring to FIG. 4, a reference time determination device (420) receives time data from multiple time sources (410). The reference time determination device (420) performs a verification process on multiple time data, such as selecting valid time data by considering the reliability, error range, reception delay, etc. of each received time data. Thereafter, reliable time information is determined as the reference time according to certain criteria.

[0058] A time source refers to an external or internal time data provider that various devices or systems within a vehicle reference to set a reference time or synchronize time information.

[0059] Time sources may include, for example, devices or systems such as: an external server such as a Network Time Protocol (NTP) server, a Precision Time Protocol (PTP) server, an OTA server, a base station of a cellular network, an external device connected via a Bluetooth or USB interface, a real-time clock (RTC) of the vehicle itself, or a time receiver based on a Global Navigation Satellite System (GNSS). These are just examples, and time sources may include various devices in an online or offline environment.

[0060] There may be a time difference between the time data received from each time source. For example, even if time data is received simultaneously from multiple time sources (410), the received time data may have different values.

[0061] Additionally, each time source can provide time data in different formats, including, for example, Coordinated Universal Time (UTC), Unix time, etc.

[0062] Reference time refers to reference or shared time information to ensure time consistency or security between various devices or systems within a vehicle.

[0063] The reference time is a common time standard utilized by multiple electronic control units (ECUs, 430), sensors, communication modules, and data storage devices within a vehicle. It plays a crucial role in functions such as timestamp generation, event alignment, diagnostic data synchronization, software update management, and log tracking. For example, even if multiple ECUs independently generate data, assigning timestamps based on the same reference time can enhance the system's overall time alignment and the possibility of root cause analysis.

[0064] The reference time can be determined after verifying the reliability of time data received from multiple external and internal time sources, and the determined reference time is distributed to each device through a gateway or central control unit (CCU) within the vehicle, so that the entire vehicle system maintains a consistent time reference.

[0065] The determined reference time is transmitted to the ECUs (430) within the vehicle, and each ECU can synchronize or correct its internal clock by referring to the received reference time. Accordingly, time consistency can be maintained among various ECUs within the vehicle, and the reliability and accuracy of time-based functions such as data timestamps and event logs are improved.

[0066] By integrating and verifying multiple time sources rather than relying on a single time source, the accuracy and reliability of the reference time can be improved.

[0067] The process of determining an in-vehicle reference time using multiple time sources according to embodiments of the present disclosure may be performed at various times, such as when the vehicle system is initialized, periodically, upon the occurrence of a specific event, or upon receipt of an external command (e.g., an over-the-air update, remote control, etc.). Furthermore, users, drivers, or administrators can design a reference time determination strategy that can be flexibly applied depending on the situation, taking into account communication load and computational resource constraints.

[0068] A reference time determination device according to an embodiment of the present disclosure verifies the reliability of time data received from multiple time sources and determines a reference time based on the verification result.

[0069] FIG. 5 is a block diagram of a reference time determination device according to one embodiment of the present disclosure.

[0070] The reference time determination device (420) may be implemented integrated into an in-vehicle gateway (110). In this implementation, the function of processing and verifying time data received from multiple time sources to determine a reliable reference time may be included as a single module or subsystem within the CCU (111). Since the CCU (111) is connected to various ECUs, sensors, communication modules, etc. within the vehicle, it also has the structural advantage of being able to centrally manage the reference time.

[0071] Additionally, according to various embodiments of the present disclosure, the reference time determination device (420) may be implemented as a separate, independent device.

[0072] Referring to FIG. 5, the reference time determination device (420) includes all or part of a receiving unit (421), a verification and determination unit (423), and a transmitting unit (425).

[0073] The receiver (421) receives time data from multiple time sources.

[0074] The multiple time sources may include, for example, GNSS, cellular networks, server-based sources, etc., and it is preferred to receive time data from at least three different time sources.

[0075] Meanwhile, each time source may use different time formats or units. For example, some time sources may provide time data in the ISO 8601 standard time format of Coordinated Universal Time (UTC), while others may provide an epoch-based integer timestamp, such as Unix time. Furthermore, some time sources may include time information in microseconds or milliseconds, while others may provide time data in a text-based or binary packet structure.

[0076] To comprehensively process differences in the format of time data by time source, the receiver (401) can convert the received time data into a preset standard format, such as Unix time. This enables consistent comparison and judgment between received time data and accurate and reliable determination of the standard time.

[0077] The verification and decision unit (423) verifies the reliability of the received time data and determines a reference time based on the verification result. When time data is received from a certain number of time sources (e.g., three), the verification and decision unit (423) can perform reliability verification and reference time determination on the received time data.

[0078] Additionally, the verification and decision unit (423) may operate based on any one of a plurality of algorithms having different reliability and performance characteristics, depending on the settings of a user (e.g., driver, administrator) or system settings. The plurality of algorithms may include a first algorithm and a second algorithm.

[0079] The first algorithm consists of the following steps:

[0080] First, a verification range corresponding to each of multiple time sources is set according to a preset range reference value.

[0081] For example, if the range reference value is 0.1 and time data of 5.5 seconds, 5.6 seconds, and 5.7 seconds are received from the server, cellular, and GNSS, respectively, the validation range set for each time source is "Server: 5.4 seconds to 5.6 seconds", "Cellular: 5.5 seconds to 5.7 seconds", and "GNSS: 5.6 seconds to 5.8 seconds".

[0082] Afterwards, the number of time sources or time data included in each verification range is calculated.

[0083] For example, the verification range corresponding to the server (5.4 seconds to 5.6 seconds) includes a total of two time data: time data received from the server (5.5 seconds) and time data received from the cellular (5.6 seconds).

[0084] The verification range corresponding to cellular (5.5 seconds to 5.7 seconds) includes a total of three time data: time data received from the server (5.5 seconds), time data received from cellular (5.6 seconds), and time data received from GNSS (5.7 seconds).

[0085] The verification range corresponding to GNSS (5.6 seconds to 5.8 seconds) includes two sets of time data: time data received from cellular (5.6 seconds) and time data received from GNSS (5.7 seconds).

[0086] Next, the time data received from the time source corresponding to the verification range containing the most time data is judged to be reliable and determined as the reference time.

[0087] In the above example, since the verification range corresponding to cellular (5.5 seconds to 5.7 seconds) includes three time data, the time data (5.6 seconds) received from cellular can be judged as reliable time data and determined as the reference time.

[0088] Meanwhile, if there is no time data that is determined to be reliable as a result of performing the first algorithm, one or more of the following processes may be optionally performed, and then the first algorithm may be repeatedly performed to determine reliable time data.

[0089] ① Process of re-receiving time data from multiple identical time sources

[0090] ② A process of additionally receiving time data from at least one new time source.

[0091] ③ A process of excluding one or more outliers (e.g., maximum value, minimum value, lower 25% or higher than upper 75%) from among the received multiple time data.

[0092] ④ Process of increasing the range reference value

[0093] At this time, all of the above processes ① to ④ may be performed, or only one of them may be performed.

[0094] Finally, if there is no time data determined to be reliable even after performing the first algorithm more than a preset number of repetitions, one of the arithmetic mean, median, or mode of the received multiple time data can be determined as reliable time data and used as the reference time.

[0095] The second algorithm consists of the following steps:

[0096] First, the median of the received multiple time data is calculated, and the verification range is set based on the preset range reference value and the median.

[0097] For example, if the preset range threshold is 0.1 and time data of 5.5 seconds, 5.7 seconds, 4.9 seconds, 5.6 seconds, and 5.9 seconds are received from the server, cellular, vehicle itself, USB, and Bluetooth, respectively, the median is calculated as 5.6 seconds, and the verification range is set to "5.5 seconds to 5.7 seconds."

[0098] Afterwards, the number of time sources or time data included within the verification range is calculated.

[0099] For example, the verification range (5.5 seconds to 5.7 seconds) includes a total of three time data: time data received from the server (5.5 seconds), time data received from cellular (5.7 seconds), and time data received from USB (5.6 seconds).

[0100] Next, if the output exceeds a preset threshold (T), the median is considered a reliable value and is set as the reference time. Here, the threshold (T) is a value that indicates how many time data received from different time sources must fall within the verification range before the corresponding median is considered a reliable value.

[0101] For example, if the preset threshold is 2, the calculated number is 3, so the median value (5.6 seconds) can be judged as reliable time data and determined as the reference time.

[0102] Meanwhile, if there is no time data that is determined to be reliable as a result of the execution of the second algorithm, one or more of the following processes may be optionally performed, and then the second algorithm may be repeatedly performed to determine reliable time data.

[0103] ① Process of re-receiving time data from multiple identical time sources

[0104] ② A process of additionally receiving time data from at least one new time source.

[0105] ③ A process of excluding one or more outliers (e.g., maximum value, minimum value, lower 25% or higher than upper 75%) from among the received multiple time data.

[0106] ④ Process of increasing the range reference value

[0107] ⑤ Process of reducing the threshold value (T)

[0108] At this time, all of the above processes ① to ⑤ may be performed, or only one of them may be performed.

[0109] Meanwhile, when applying the first or second algorithm described above, a weight pre-assigned to each time source can be additionally utilized.

[0110] For example, if the server has a preset weight of 3, cellular of 2, and GNSS of 1, when calculating the number of time sources or time data included in the verification range in the first algorithm or the second algorithm, the weight corresponding to each time source can be reflected in the calculation.

[0111] By considering weights in this way, time data received from time sources evaluated as having relatively high reliability can be configured to have a greater influence in the reference time determination process.

[0112] The transmitter (425) transmits the determined reference time to the ECU in the vehicle.

[0113] A reference time determination device (420) according to another embodiment of the present disclosure can verify time data received from multiple time sources and correct reference time information within a vehicle by utilizing time information transmitted through a 5 MHz shortwave called RTIM (Real Time Information Module).

[0114] FIG. 6 is a flowchart of a method for determining a reference time according to one embodiment of the present disclosure.

[0115] Referring to FIG. 6, the method receives time data from multiple time sources (S610). The method can convert the received time data into a preset standard format, such as Unix time.

[0116] The method sets a verification range corresponding to each of multiple time sources (S620).

[0117] The method calculates the number of time data included in each verification range and determines whether each received time data is reliable (S630).

[0118] The method determines whether reliable time data exists (S640).

[0119] The method determines that reliable time data exists and determines the time data as a reference time (S670).

[0120] The method determines whether the reliability re-determination process has been performed more than a preset number of repetitions in response to determining that reliable time data does not exist (S650).

[0121] The method re-evaluates the reliability of time data by changing at least one of the judgment target, range, or condition in response to determining that the reliability re-evaluation process has been performed less than a preset number of repetitions (S660). Specifically, time data may be received again from each of a plurality of time sources, and whether each of the received time data is reliable may be re-evaluated. Alternatively, time data may be additionally received from at least one new time source, and whether each of the received time data is reliable may be re-evaluated. Alternatively, one or more outliers may be excluded from the plurality of received time data, and whether each of the time data from which the outliers have been excluded may be re-evaluated. Alternatively, after adjusting the range reference value, the verification range corresponding to each of the plurality of time sources may be re-established, and whether each of the received time data is reliable may be re-evaluated.

[0122] The method determines that the reliability re-evaluation process has been performed more than a preset number of repetitions, and determines the arithmetic mean, median, or mode of the received multiple time data as the reference time (S680).

[0123] The method transmits the reference time determined in the S670 or S680 process to the ECU in the vehicle (S690).

[0124] Each ECU can synchronize or correct its internal clock based on the received reference time. This can improve the reliability and accuracy of various functions and services within the vehicle system.

[0125] FIG. 7 is a flowchart of a reference time determination method according to another embodiment of the present disclosure.

[0126] Referring to FIG. 7, the method receives time data from multiple time sources (S710). The method can convert the received time data into a preset standard format, such as Unix time.

[0127] The method calculates the median of multiple received time data, sets a verification range based on the median and a preset range reference value, and calculates the number of time data included in the verification range (S720).

[0128] The method determines whether the produced number exceeds a preset threshold value (S730).

[0129] The method determines the median value as the reference time in response to determining that the produced number exceeds a preset threshold value (S760).

[0130] The method determines whether the reliability re-verification of time data and the reference time re-determination process have been performed more than the preset number of repetitions in response to determining that the produced number does not exceed the preset threshold value (S740).

[0131] The method performs reliability reverification of time data and reference time re-determination by changing at least one of the judgment target, range, or condition in response to determining that the re-verification and re-determination process has been performed less than a preset number of repetitions (S750). Specifically, time data is received again from each of the plurality of time sources, or additional time data is received from at least one new time source, or one or more outliers are excluded from the plurality of received time data, or a range reference value is adjusted, or a threshold value is adjusted, and then the process is performed again from step S720.

[0132] The method transmits the reference time determined in the S760 process to the ECU in the vehicle (S770).

[0133] FIG. 8 is a block diagram schematically illustrating an exemplary computing device that may be used to implement a method or device according to the present disclosure.

[0134] Referring to FIG. 8, the computing device (8) may include some or all of a memory (800), a processor (820), storage (840), an input / output interface (860), and a communication interface (880). The computing device (8) may be a stationary computing device such as a desktop computer, a server, etc., as well as a mobile computing device such as a laptop computer, a smartphone, an automotive electronics unit, etc. The computing device (8) may be implemented with any specialized hardware accelerator capable of efficiently processing operations for an artificial intelligence model. For example, the computing device (8) may include a graphic processing unit (GPU), a tensor processing unit (TPU), or a neural processing unit (NPU).

[0135] The memory (800) may store a program that causes the processor (820) to perform a method or operation according to various embodiments of the present disclosure. For example, the program may include a plurality of instructions executable by the processor (820), and the methods illustrated in FIGS. 6 and 7 may be performed by executing the plurality of instructions by the processor (820). The memory (800) may be a single memory or a plurality of memories. In this case, information required to perform the method or operation according to various embodiments of the present disclosure may be stored in a single memory or may be divided and stored in the plurality of memories. When the memory (800) is composed of a plurality of memories, the plurality of memories may be physically separated. The memory (800) may include at least one of a volatile memory and a nonvolatile memory. The volatile memory includes a static random access memory (SRAM) or a dynamic random access memory (DRAM), and the nonvolatile memory includes a flash memory.

[0136] The processor (820) may include at least one core capable of executing at least one instruction. The processor (820) may execute instructions stored in the memory (800). The processor (820) may be a single processor or multiple processors.

[0137] Storage (840) maintains stored data even when power supplied to the computing device (8) is cut off. For example, storage (840) may include non-volatile memory, or may include storage media such as magnetic tape, optical disk, or magnetic disk. A program stored in storage (840) may be loaded into memory (800) before being executed by processor (820). Storage (840) may store a file written in a programming language, and a program generated from the file by a compiler or the like may be loaded into memory (800). Storage (840) may store data to be processed by processor (820) and / or data processed by processor (820).

[0138] The input / output interface (860) may include input devices such as a keyboard, mouse, touch display, microphone, etc., and may include output devices such as a display, speaker, etc. A user may trigger execution of a program by the processor (820) and / or check the processing results of the processor (820) through the input / output interface (860).

[0139] The communication interface (880) can provide access to internal and external networks. The computing device (8) can communicate with other devices via the communication interface (880).

[0140] Although the present disclosure has been described with a focus on examples applied to vehicles, this is only one embodiment, and can be applied to various fields such as mobile devices such as drones, robots, unmanned vehicles, and industrial equipment that require reliable time information, as well as communication equipment and IoT devices.

[0141] The method and device for determining a reference time according to embodiments of the present disclosure are not limited to vehicle systems, and can be applied to all devices or systems requiring time consistency and security.

[0142] Each component of the device or method according to the present invention may be implemented in hardware, software, or a combination of hardware and software. Furthermore, the functions of each component may be implemented in software, with a microprocessor executing the software functions corresponding to each component.

[0143] Various implementations of the systems and techniques described herein may be implemented as digital electronic circuits, integrated circuits, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), computer hardware, firmware, software, and / or combinations thereof. These various implementations may include implementations of one or more computer programs executable on a programmable system. The programmable system includes at least one programmable processor (which may be a special purpose processor or a general purpose processor) coupled to receive data and instructions from and transmit data and instructions to a storage system, at least one input device, and at least one output device. Computer programs (also known as programs, software, software applications, or code) include instructions for the programmable processor and are stored on a "computer-readable recording medium."

[0144] A computer-readable recording medium includes any type of recording device that stores data that can be read by a computer system. Such a computer-readable recording medium may be a non-volatile or non-transitory medium such as a ROM, CD-ROM, magnetic tape, floppy disk, memory card, hard disk, magneto-optical disk, storage device, and may further include a transitory medium such as a data transmission medium. Furthermore, the computer-readable recording medium may be distributed across network-connected computer systems, so that computer-readable code can be stored and executed in a distributed manner.

[0145] Although the flowchart / timing diagram of this specification describes each process as being executed sequentially, this is merely an illustrative description of the technical idea of ​​one embodiment of the present disclosure. In other words, a person of ordinary skill in the art to which one embodiment of the present disclosure belongs may modify and apply various modifications and variations by changing the order described in the flowchart / timing diagram without departing from the essential characteristics of one embodiment of the present disclosure, or by executing one or more of the processes in parallel. Therefore, the flowchart / timing diagram is not limited to a chronological order.

[0146] The above description is merely an example of the technical idea of ​​the present embodiment, and those skilled in the art to which the present embodiment pertains may make various modifications and variations without departing from the essential characteristics of the present embodiment. Therefore, the present embodiments are not intended to limit the technical idea of ​​the present embodiment, but to explain it, and the scope of the technical idea of ​​the present embodiment is not limited by these embodiments. The protection scope of the present embodiment should be interpreted by the following claims, and all technical ideas within a scope equivalent thereto should be interpreted as being included in the scope of rights of the present embodiment.

[0147] CROSS-REFERENCE TO RELATED APPLICATION

[0148] This patent application claims priority to Korean patent application No. 10-2024-0050888, filed in Korea on April 16, 2024, and Korean patent application No. 10-2024-0201125, filed in Korea on December 30, 2024, the entire contents of which are incorporated herein by reference.

Claims

1. Comprising one or more processors and a memory operably coupled to the one or more processors, The memory stores instructions executable by the one or more processors, and the instructions are configured to cause the one or more processors to perform operations. The above actions are, A process of receiving time data from multiple time sources; The process of determining whether each piece of received time data is reliable; A process of determining a reference time based on time data judged to be reliable; and A process of transmitting the above reference time to one or more electronic control devices in the vehicle. A device for determining a reference time, including:

2. In paragraph 1, The above judgment process is, A process of setting a verification range corresponding to each of the above multiple time sources; The process of calculating the number of time data included in each verification range; and Including a process of determining that time data received from a time source corresponding to a verification range containing the most time data is reliable, A device characterized in that the above verification range is a section set according to a preset range reference value centered on time data received from a corresponding time source.

3. In paragraph 2, If no time data is deemed reliable, A device characterized in that it repeatedly performs a process of receiving time data again from each of the plurality of time sources and determining whether each of the received time data is reliable.

4. In paragraph 2, If no time data is deemed reliable, A device characterized by repeatedly receiving additional time data from at least one new time source and determining whether each received time data is reliable.

5. In paragraph 2, If no time data is deemed reliable, A device characterized in that it repeats a process of excluding one or more outliers corresponding to the maximum or minimum values ​​among a plurality of received time data and determining whether each of the time data from which the outliers have been excluded is reliable.

6. In paragraph 2, If no time data is deemed reliable, A device characterized in that after adjusting the above range reference value, a verification range corresponding to each of the plurality of time sources is re-established, and a process of determining whether each received time data is reliable is repeated.

7. In paragraph 2, The process of determining the above reference time is: If the above judgment process is repeated more than a preset number of times and no time data is judged to be reliable, A device characterized by including a process for determining an arithmetic mean, median, or mode for a plurality of received time data as a reference time.

8. In paragraph 2, The process of calculating the number of time data included in each of the above verification ranges is as follows: A process of calculating the sum of weights corresponding to each time data included in the verification range by using preset weights for each time source that provided the above time data, A device characterized in that the above reference time is determined based on time data received from a time source corresponding to a verification range in which the sum of the calculated weights has the largest value.

9. A method performed by a device for determining a reference time, A process of receiving time data from multiple time sources; The process of determining whether each piece of received time data is reliable; A process of determining a reference time based on time data judged to be reliable; and A process of transmitting the above reference time to one or more electronic control devices in the vehicle. A method comprising:

10. In paragraph 9, The above judgment process is, A process of setting a verification range corresponding to each of the above multiple time sources; The process of calculating the number of time data included in each verification range; and Including a process of determining that time data received from a time source corresponding to a verification range in which the number of included time data exceeds a preset threshold is reliable; A method characterized in that the above verification range is an interval set according to a preset range reference value centered on time data received from a corresponding time source.

11. Comprising one or more processors and a memory operably coupled to the one or more processors, The memory stores instructions executable by the one or more processors, and the instructions are configured to cause the one or more processors to perform operations. The above actions are, A process of receiving time data from multiple time sources; A process of setting a verification range based on a preset range reference value centered on the median value of multiple received time data; A process for calculating the number of time data included in the above verification range; A process for determining a reference time based on the median value when the produced number exceeds a preset threshold value; and A process of transmitting the above reference time to one or more electronic control devices in the vehicle. A device for determining a reference time, including:

12. In paragraph 11, If the number produced is below a preset threshold, A device characterized in that it repeatedly performs the steps of receiving time data again from each of the plurality of time sources, setting the verification range, calculating the number, and determining the reference time.

13. In paragraph 11, If the number produced is below a preset threshold, A device characterized in that it repeatedly performs the steps of additionally receiving time data from at least one new time source, setting the verification range, calculating the number, and determining the reference time.

14. In paragraph 11, If the number produced is below a preset threshold, A device characterized in that it repeats the process of setting the verification range, the process of calculating the number, and the process of determining the reference time, excluding one or more outliers corresponding to the maximum or minimum value among the received multiple time data.

15. In paragraph 11, If the number produced is below a preset threshold, A device characterized in that after adjusting the above range reference value, the process of setting the verification range, the process of calculating the number, and the process of determining the reference time are repeatedly performed.

16. In paragraph 11, The process of calculating the number of time data included in the above verification range is: A process of calculating the sum of weights corresponding to each time data included in the verification range by using preset weights for each time source that provided the above time data, A device characterized in that the above reference time is determined when the sum of the calculated weights exceeds a preset threshold value.

17. A method performed by a device for determining a reference time, A process of receiving time data from multiple time sources; A process of setting a verification range based on a preset range reference value centered on the median value of multiple received time data; A process for calculating the number of time data included in the above verification range; A process for determining a reference time based on the median value when the produced number exceeds a preset threshold value; and A process of transmitting the above reference time to one or more electronic control devices in the vehicle. A method comprising:

Images