On-board system

Abstract

Provided is a technology by which it is possible to determine, for an ECU which switches between on and off states in response to the switching of a relay, an abnormality in which the switching between the on and off states has failed. An on-board system (1) comprises: ECUs (12) that are mounted on a vehicle; and an on-board control device (16) that communicates with the ECUs (12). The on-board control device (16) is configured to control a relay (13) that switches the state of power supply from a power supply unit (10) to the ECUs (12), and the on-board control device determines that the ECUs (12) are malfunctioning on the basis of the control state of the relay (13) and the communication states of the ECUs (12).

Description

In-vehicle systems

[0001] The present disclosure relates to in-vehicle systems.

[0002] The power supply control device disclosed in Patent Document 1 includes a microcomputer and a switch connected to the microcomputer. The switch is connected to an ECU to be power-controlled using a semiconductor fuse. The switch controls the on / off of the connected ECU based on a control signal input from the microcomputer.

[0003] JP 2013-192108 A

[0004] According to the configuration of Patent Document 1, the microcomputer controls the switch, thereby controlling the on / off of the ECU. In such a configuration, an on-failure or off-failure of the switch can cause an abnormality in which the ECU does not switch over normally, so it is preferable that such an abnormality can be determined.

[0005] The present disclosure aims to provide a technology capable of determining an abnormality in which an ECU, whose on / off state is switched in response to switching of a relay, does not switch on / off.

[0006] The vehicle system of the present disclosure comprises an ECU mounted on a vehicle and an on-board control device that communicates with the ECU, wherein the on-board control device is configured to control a relay that switches the power supply state from a power supply unit to the ECU, and determines whether the ECU is abnormal based on the control state of the relay and the communication state of the ECU.

[0007] According to the technology of the present disclosure, it is possible to determine an abnormality in which an ECU, which switches between on and off states in response to relay switching, does not switch between on and off states.

[0008] Fig. 1 is a schematic diagram showing the configuration of an in-vehicle system according to a first embodiment. Fig. 2 is a first half of a flowchart showing a process that starts when the in-vehicle control device according to the first embodiment controls a relay to an off state. Fig. 3 is a second half of a flowchart showing a process that starts when the in-vehicle control device according to the first embodiment controls a relay to an off state. Fig. 4 is a flowchart showing a process that starts when the in-vehicle control device according to the first embodiment controls a relay to an on state. Fig. 5 is a flowchart showing a process performed by an ECU according to the first embodiment.

[0009] [Description of Embodiments of the Present Disclosure] First, embodiments of the present disclosure will be listed and described.

[0010] [1] An in-vehicle system comprising: an ECU mounted on a vehicle; and an in-vehicle control device that communicates with the ECU, wherein the in-vehicle control device is configured to control a relay that switches the power supply state from a power supply unit to the ECU, and determines whether the ECU is abnormal based on the control state of the relay and the communication state of the ECU.

[0011] The in-vehicle control device can determine that an ECU is abnormal by checking the communication state that does not match the control state of the relay. That is, the in-vehicle control device can determine that an ECU that switches between on and off states in response to relay switching does not switch between on and off states.

[0012] [2] The vehicle control device determines that the ECU is abnormal based on a target value which is at least one of the current flowing through the conductive path between the relay and the ECU and the voltage of the conductive path, the control state of the relay, and the communication state of the ECU. [1] The vehicle system described in [1].

[0013] When the relay is switched between on and off, a change should occur in the target value. The vehicle control device can determine whether the ECU is abnormal by taking the target value into consideration.

[0014] [3] The ECU switches to an ON state when it receives power supply from the power supply unit and transmits a startup completion notification, and the vehicle control device determines that the ECU is abnormal if it receives the startup completion notification before the target value exceeds a threshold value after switching the relay to the ON state. [2] The vehicle system described in [2].

[0015] When the relay is switched to the on state, the ECU should transmit a start-up completion notification after the target value exceeds a certain value. After the relay is switched to the on state, if the ECU receives the start-up completion notification before the target value exceeds a first threshold value, the in-vehicle control device can determine that the ECU is abnormal.

[0016] [4] The in-vehicle control device switches the relay to an off state, and determines that the ECU is abnormal if the ECU is communicating after the target value becomes equal to or less than a threshold value. [2] The in-vehicle system described in [3] or [4].

[0017] When the relay is switched to the OFF state and the target value becomes equal to or less than the second threshold, the ECU communication should stop. After the relay is switched to the OFF state, the in-vehicle control device can determine that the ECU is abnormal if the ECU is communicating.

[0018] [5] The in-vehicle system according to any one of [2] to [4], wherein the in-vehicle control device determines that the ECU is abnormal when the target value is greater than a threshold value while controlling the relay to be in an off state.

[0019] When the relay is in the OFF state, the target value should be equal to or less than a certain value. When the target value is greater than a first threshold value while the relay is in the OFF state, the vehicle control device can determine that the ECU is abnormal.

[0020] [6] The ECU switches to an ON state when it receives power supply from the power supply unit and transmits a startup completion notification, and the vehicle control device determines that the ECU is abnormal when it receives the startup completion notification while controlling the relay to an OFF state. An in-vehicle system described in any one of [1] to [5].

[0021] When the relay is in the OFF state, the startup completion notification should not be transmitted. The in-vehicle control device can determine that the ECU is abnormal if it receives the startup completion notification while controlling the relay to be OFF.

[0022] [7] The vehicle control device determines that the ECU is abnormal if, after switching the relay to the on state, an on determination period has elapsed without the target value exceeding the threshold value. The vehicle system described in any one of [2] to [5].

[0023] When the relay is switched to the on state, the target value should exceed the first threshold value within a certain time. After the relay is switched to the on state, if the on determination period has elapsed without the target value exceeding the first threshold value, the in-vehicle control device can determine that the ECU is abnormal.

[0024] [8] The ECU switches to an ON state when it receives power supply from the power supply unit and transmits a startup completion notification, and the vehicle control device determines that the ECU is abnormal if an ON determination period has elapsed after switching the relay to the ON state without receiving the startup completion notification. An in-vehicle system described in any of [1] to [7].

[0025] When the relay is switched to the ON state, a startup completion notification should be transmitted within a certain time. After the relay is switched to the ON state, if the ON determination period has elapsed without receiving the startup completion notification, the in-vehicle control device can determine that the ECU is abnormal.

[0026] [9] The vehicle control device determines that the ECU is abnormal if, after switching the relay to the off state, an off determination period has elapsed without the target value becoming equal to or less than a threshold value. The vehicle system described in any one of [2] to [5] and [7].

[0027] When the relay is switched to the off state, the target value should become equal to or less than the second threshold within a certain time. After the relay is switched to the off state, if the off determination period has elapsed without the target value becoming equal to or less than the second threshold, the in-vehicle control device can determine that the ECU is abnormal.

[0028]

[10] The in-vehicle system according to any one of [1] to [9], further comprising another ECU different from the ECU, wherein the in-vehicle control device notifies the other ECU that the ECU is abnormal when it determines that the ECU is abnormal.

[0029] The vehicle-mounted control device can notify other ECUs that an ECU is abnormal.

[0030]

[11] The ECU switches to an ON state when it receives power supply from the power supply unit and transmits a startup completion notification; the vehicle control device, after switching the relay to an ON state, determines that a target value, which is at least one of the current flowing through the conduction path between the relay and the ECU and the voltage of the conduction path, has become greater than a threshold value, and then, when it determines that it has received the startup completion notification, determines that the ECU has switched to an ON state; and further comprises another ECU different from the ECU; and when the vehicle control device determines that the ECU has switched to an ON state, it notifies the other ECU that the ECU has switched to an ON state. An in-vehicle system described in any of [1] to

[10] .

[0031] The vehicle control device can notify other ECUs that the ECU has switched on.

[0032]

[12] The vehicle control device determines that the ECU has switched to the off state when, after switching the relay to the off state, it determines that a target value, which is at least one of the current flowing through the conduction path between the relay and the ECU and the voltage of the conduction path, is below a threshold value, and further includes another ECU different from the ECU, and when the vehicle control device determines that the ECU has switched to the off state, it notifies the other ECU that the ECU has switched to the off state. An in-vehicle system described in any of [1] to

[11] .

[0033] The vehicle control device can notify other ECUs that the ECU has been switched off.

[0034] [Details of the embodiments of the present disclosure] 1. First embodiment 1-1. Configuration of in-vehicle system 1 As shown in FIG. 1 , the in-vehicle system 1 of the first embodiment includes a power supply unit 10, a power line 11, an ECU 12, a relay 13, a detection unit 14, a bus 15, and an in-vehicle control device 16.

[0035] The power supply unit 10 includes, for example, a battery. The power supply unit 10 may include, for example, a low-voltage battery, or may include a high-voltage battery and a DC-DC converter that steps down the output voltage of the high-voltage battery.

[0036] The power path 11 is an electrical path that supplies power from the power supply unit 10 to the ECU 12. The power path 11 has a common path 11X electrically connected to the power supply unit 10 and a plurality of branch paths 11A, 11B, and 11C branching from the common path 11X. The ECU 12 is electrically connected to each of the branch paths 11A, 11B, and 11C.

[0037] The ECU 12 is mounted on the vehicle. The ECU 12 is an electronic control unit (ECU). The ECU 12 is maintained in an off state when power is not supplied from the power supply unit 10, and switches to an on state (specifically, an activated state) when power is supplied. When in the on state, the ECU 12 may transition to a sleep state that consumes less power than the activated state. The ECU 12 includes ECUs 12A, 12B, and 12C. The ECU 12A is electrically connected to the branch path 11A. The ECU 12B is electrically connected to the branch path 11B. The ECU 12C is electrically connected to the branch path 11C.

[0038] The relay 13 switches the state of power supply from the power supply unit 10 to the ECU 12 by switching between an on and off state. The relay 13 is configured by, for example, a semiconductor switch such as a MOSFET or a mechanical switch. When the relay 13 is in the on state, it allows power to be supplied from the power supply unit 10 to the ECU 12, and when the relay 13 is in the off state, it cuts off the power supply from the power supply unit 10 to the ECU 12. The relay 13 includes relays 13A, 13B, and 13C that switch the state of power supply from the power supply unit 10 to the ECU 12 in each of the branch paths 11A, 11B, and 11C.

[0039] The detection unit 14 includes, for example, a known current sensor and detects the current flowing through the conductive path 20 between the relay 13 and the ECU 12. The detection unit 14 includes, for example, a known voltage detection circuit and detects the voltage of the conductive path 20. Information indicating the detection results of the detection unit 14 is input to the on-board control device 16. The detection unit 14 includes detection units 14A, 14B, and 14C that detect the current and voltage of the conductive paths 20A, 20B, and 20C in the branch paths 11A, 11B, and 11C, respectively.

[0040] The bus 15 is a communication line used for communication between the ECU 12 and the vehicle control device 16 .

[0041] The vehicle control device 16 can communicate with each ECU 12. The vehicle control device 16 includes, for example, a microcomputer. The vehicle control device 16 controls a relay 13 that switches the state of power supply from the power supply unit 10 to the ECU 12. The vehicle control device 16 controls the relay 13 to switch the on / off state of the ECU 12.

[0042] 2 and 3 for the ECUs 12 whose corresponding relays 13 are controlled to be in the OFF state. In step S11, the vehicle control device 16 determines whether the ON condition for the ECUs 12 is satisfied.

[0043] The on-board control device 16 determines, for example, based on the vehicle state, whether or not an ON condition is established for each ECU 12. For example, the on-board control device 16 stores correspondence information in advance that indicates the correspondence between the vehicle state and the ON / OFF state of each ECU 12, identifies an ECU 12 that should be turned ON based on the correspondence information and the vehicle state, and determines that the ON condition is established for that ECU 12.

[0044] The vehicle state is determined by, for example, a combination of a basic vehicle state and a service state. The basic vehicle state is a state that transitions at least between a vehicle running state and a vehicle parked state. The service state is a state determined by the enablement / disablement of service functions provided by the vehicle. Service functions include, for example, a perimeter monitoring service that monitors the perimeter of the vehicle, and an air conditioning management service that manages the air conditioning inside the vehicle when there is no one inside.

[0045] If the on-board control device 16 determines that the on-condition is not satisfied, the on-board control device 16 determines in step S12 whether the target value is greater than a predetermined threshold value. The target value is at least one of the current flowing through the conductive path 20 and the voltage of the conductive path 20. That is, the on-board control device 16 determines at least one of whether the current flowing through the conductive path 20 is greater than a threshold current and whether the voltage of the conductive path 20 is greater than a threshold voltage.

[0046] If the on-board control device 16 determines that the target value is not greater than the threshold value, then in step S13, it determines whether or not a startup completion notification has been received from the ECU 12. If the on-board control device 16 determines that a startup completion notification has not been received, the process returns to step S11. That is, the on-board control device 16 repeats the processes of steps S11, S12, and S13 until a Yes determination is made in any of steps S11, S12, and S13.

[0047] If the on-board control device 16 determines in step S12 that the target value is greater than the threshold value even though the relay 13 corresponding to the ECU 12 is controlled to be in the off state, the on-board control device 16 determines in step S14 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S13 that a startup completion notification has been received even though the relay 13 corresponding to the ECU 12 is controlled to be in the off state, the on-board control device 16 determines in step S14 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S14 that the ECU 12 is abnormal, the on-board control device 16 notifies the other ECUs 12 of this fact in step S29. For example, if the ECU 12 determined to be abnormal is ECU 12A, the on-board control device 16 notifies ECUs 12B and 12C that ECU 12A is abnormal. If the on-board control device 16 determines in step S11 that the on-condition is satisfied, the on-board control device 16 switches the relay 13 corresponding to the ECU 12 for which the on-condition is satisfied to the on state in step S15.

[0048] After controlling the relay 13 to the ON state, the on-board control device 16 determines whether the target value is greater than the threshold value in step S21 of FIG. 3. If the on-board control device 16 determines that the target value is not greater than the threshold value, the on-board control device 16 determines whether a startup completion notification has been received from the ECU 12 in step S22. If the on-board control device 16 determines that a startup completion notification has not been received, the on-board control device 16 determines whether the time elapsed since the relay 13 was switched to the ON state has exceeded the ON determination period in step S23. If the on-board control device 16 determines that the ON determination period has not passed, the process returns to step S21. That is, the on-board control device 16 repeats the processes of steps S21, S22, and S23 until a Yes determination is made in any of steps S21, S22, and S23.

[0049] If the in-vehicle control device 16 determines in step S22 that it has received the startup completion notification even though the target value has not exceeded the threshold, it determines in step S24 that the ECU 12 is abnormal. If the in-vehicle control device 16 determines in step S24 that the ECU 12 is abnormal, it notifies the other ECUs 12 of this in step S29. If the in-vehicle control device 16 determines in step S23 that the on-determination period has elapsed without the target value exceeding the threshold, it determines in step S24 that the ECU 12 is abnormal.

[0050] If the in-vehicle control device 16 determines that the target value is greater than the threshold value, it determines in step S25 whether a startup completion notification has been received. If the in-vehicle control device 16 determines that a startup completion notification has not been received, it determines in step S26 whether the time elapsed since the relay 13 was switched to the on state has exceeded the on-determination period. If the in-vehicle control device 16 determines that the on-determination period has not passed, it returns to step S25. That is, the in-vehicle control device 16 repeats the processing of steps S25 and S26 until it determines Yes in either step S25 or S26.

[0051] If the on-board control device 16 determines in step S26 that the on-determination period has elapsed even though the startup completion notification has not been received, the on-board control device 16 determines in step S27 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S27 that the ECU 12 is abnormal, the on-board control device 16 notifies the other ECUs 12 of that fact in step S29.

[0052] If the in-vehicle control device 16 determines in step S25 that it has received the startup completion notification, it determines in step S28 that the ECU 12 has switched to the ON state. If the in-vehicle control device 16 determines in step S28 that the ECU 12 has switched to the ON state, it notifies the other ECUs 12 of this in step S29. For example, if the ECU 12 determined to have switched to the ON state is ECU 12A, the in-vehicle control device 16 notifies ECUs 12B and 12C that ECU 12A has switched to the ON state.

[0053] 4 for the ECU 12 whose corresponding relay 13 is controlled to be in the on state. In step S31, the on-board control device 16 determines whether the off condition is met for the ECU 12. For example, similar to the determination of whether the on condition is met described above, the on-board control device 16 identifies the ECU 12 that should be in the off state based on the correspondence information and the vehicle state, and determines that the off condition is met for that ECU 12.

[0054] If the on-board control device 16 determines that the off condition is not satisfied, then in step S32, the on-board control device 16 determines whether the target value is equal to or less than a predetermined threshold. Specifically, the on-board control device 16 determines at least one of whether the current flowing through the conductive path 20 is equal to or less than a threshold current and whether the voltage of the conductive path 20 is equal to or less than a threshold voltage. If the on-board control device 16 determines that the target value is not equal to or less than the threshold, the on-board control device 16 returns to step S31. That is, the on-board control device 16 repeats the processing of steps S31 and S32 until it determines Yes in either step S31 or S32.

[0055] If the on-board control device 16 determines in step S32 that the target value is equal to or less than the threshold value despite controlling the relay 13 to be in the on state, the on-board control device 16 determines in step S33 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S33 that the ECU 12 is abnormal, the on-board control device 16 notifies the other ECUs 12 of this fact in step S39. If the on-board control device 16 determines in step S31 that the off condition is met, the on-board control device 16 switches the relay 13 corresponding to the ECU 12 for which the off condition is met to the off state in step S34.

[0056] After switching the relay 13 to the OFF state, the in-vehicle control device 16 determines in step S35 whether the target value is equal to or less than the threshold value. If the in-vehicle control device 16 determines that the target value is not equal to or less than the threshold value, the in-vehicle control device 16 determines in step S36 whether the time elapsed since switching the relay 13 to the OFF state has exceeded the OFF determination period. If the in-vehicle control device 16 determines that the OFF determination period has not passed, the process returns to step S35. That is, the in-vehicle control device 16 repeats the processes of steps S35 and S36 until it determines Yes in either step S35 or S36.

[0057] If the on-board control device 16 determines in step S36 that the OFF determination period has elapsed without the target value becoming equal to or less than the threshold, it determines in step S37 that the ECU 12 is abnormal. If the on-board control device 16 determines in step S35 that the target value is equal to or less than the threshold, it determines in step S38 that the ECU 12 has switched to the OFF state. If the on-board control device 16 determines in step S37 that the ECU 12 is abnormal, it notifies the other ECUs 12 of that fact in step S39.

[0058] When the in-vehicle control device 16 determines in step S38 that the ECU 12 has been switched to the OFF state, the in-vehicle control device 16 notifies the other ECUs 12 of this in step S39. For example, if the ECU 12 determined to have been switched to the OFF state is ECU 12A, the in-vehicle control device 16 notifies ECUs 12B and 12C that ECU 12A has been switched to the OFF state.

[0059] 1-3. Operation of ECU 12 The ECU 12 starts the process shown in Fig. 5 when the relay 13 corresponding to the ECU 12 is switched to the ON state and power is supplied from the power supply unit 10. The ECU 12 switches to the ON state in step S41. After switching to the ON state, the ECU 12 transmits a startup completion notification to the on-board control device 16 in step S42. The ECU 12 switches to the OFF state when the relay 13 corresponding to the ECU 12 is switched to the OFF state and the power supply from the power supply unit 10 is interrupted.

[0060] 1-4. Functions and Effects of the In-Vehicle System 1 The in-vehicle control device 16 is capable of communicating with the ECU 12. The in-vehicle control device 16 is configured to control the relay 13, which switches the state of power supply from the power supply unit 10 to the ECU 12. The in-vehicle control device 16 determines an abnormality based on the control state of the relay 13 and the communication state of the ECU 12. With this configuration, the in-vehicle control device 16 can determine that the ECU 12 is abnormal by checking the communication state that does not match the control state of the relay 13. In other words, the in-vehicle control device 16 can determine an abnormality in which the on / off state of the ECU 12, which is switched on / off in response to switching of the relay 13, does not switch.

[0061] The on-board control device 16 determines whether an abnormality has occurred based on a target value, which is at least one of the current flowing through the conductive path 20 between the relay 13 and the ECU 12 and the voltage of the conductive path 20, the control state of the relay 13, and the communication state of the ECU 12. When the on / off state of the relay 13 is switched, a change should occur in the target value. The on-board control device 16 can determine whether an abnormality has occurred in the ECU 12 by taking the target value into consideration.

[0062] The ECU 12 switches to the ON state when it receives power supply from the power supply unit 10 and transmits a startup completion notification. The on-board control device 16 determines that the ECU 12 is abnormal if it receives the startup completion notification before the target value exceeds the threshold value after switching the relay 13 to the ON state. When the relay 13 switches to the ON state, the ECU 12 should transmit the startup completion notification after the target value exceeds a certain value. The on-board control device 16 can determine that the ECU 12 is abnormal if it receives the startup completion notification before the target value exceeds the threshold value after switching the relay 13 to the ON state.

[0063] The on-board control device 16 switches the relay 13 to the off state, and if the ECU 12 is communicating after the target value becomes equal to or less than the threshold value, the on-board control device 16 determines that the ECU 12 is abnormal. If the relay 13 is switched to the off state and the target value becomes equal to or less than the threshold value, the communication of the ECU 12 should stop. The on-board control device 16 can determine that the ECU 12 is abnormal if the ECU 12 is communicating after the relay 13 is switched to the off state.

[0064] The on-board control device 16 determines that the ECU 12 is abnormal when the target value is greater than the threshold value while the relay 13 is controlled to be in the off state. When the relay 13 is in the off state, the target value should be equal to or less than a certain value. The on-board control device 16 can determine that the ECU 12 is abnormal when the target value is greater than the threshold value while the relay 13 is controlled to be in the off state.

[0065] The ECU 12 switches to the ON state when power is supplied from the power supply unit 10 and transmits a startup completion notification. The on-board control device 16 determines that the ECU 12 is abnormal when it receives the startup completion notification while controlling the relay 13 to the OFF state. When the relay 13 is in the OFF state, the startup completion notification should not be transmitted. The on-board control device 16 can determine that the ECU 12 is abnormal when it receives the startup completion notification while controlling the relay 13 to the OFF state.

[0066] The on-board control device 16 determines that the ECU 12 is abnormal if the on-determination period has elapsed without the target value exceeding the threshold value after switching the relay 13 to the on state. When the relay 13 is switched to the on state, the target value should exceed the threshold value within a certain time. The on-board control device 16 can determine that the ECU 12 is abnormal if the on-determination period has elapsed without the target value exceeding the threshold value after switching the relay 13 to the on state.

[0067] The ECU 12 switches to the ON state when it receives power supply from the power supply unit 10 and transmits a startup completion notification. After switching the relay 13 to the ON state, the vehicle control device 16 determines that the ECU 12 is abnormal if an ON determination period has elapsed without receiving a startup completion notification. When the relay 13 switches to the ON state, the startup completion notification should be transmitted within a certain time. The vehicle control device 16 can determine that the ECU 12 is abnormal if an ON determination period has elapsed without receiving a startup completion notification after switching the relay 13 to the ON state.

[0068] The on-board control device 16 determines that the ECU 12 is abnormal if the off determination period has elapsed without the target value becoming equal to or less than the threshold value after switching the relay 13 to the off state. When the relay 13 is switched to the off state, the target value should become equal to or less than the threshold value within a certain time. The on-board control device 16 can determine that the ECU 12 is abnormal if the off determination period has elapsed without the target value becoming equal to or less than the threshold value after switching the relay 13 to the off state.

[0069] The vehicle control device 16 can notify the other ECUs 12 that the ECU 12 is abnormal. The vehicle control device 16 can notify the other ECUs 12 that the ECU 12 has switched to the ON state. The vehicle control device 16 can notify the other ECUs 12 that the ECU 12 has switched to the OFF state.

[0070] <Other Embodiments> The present disclosure is not limited to the embodiments described above and in the drawings. For example, any combination of features of the above-described or below-described embodiments is possible within a range that does not contradict. Furthermore, any feature of the above-described or below-described embodiments may be omitted unless explicitly stated as essential. Furthermore, the above-described embodiments may be modified as follows.

[0071] In the first embodiment, the ECUs 12 are connected to the same bus 15 . However, the ECUs 12 may be connected to different buses 15 .

[0072] The embodiments disclosed herein should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is not limited to the embodiments disclosed herein, but is defined by the claims, and is intended to include all modifications within the meaning and scope of the claims.

[0073] REFERENCE SIGNS LIST 1...In-vehicle system 10...Power supply unit 11...Power path 11A...Branch path 11B...Branch path 11C...Branch path 11X...Common path 12...ECU 12A...ECU 12B...ECU 12C...ECU 13...Relay 13A...Relay 13B...Relay 13C...Relay 14...Detection unit 14A...Detection unit 14B...Detection unit 14C...Detection unit 15...Bus 16...In-vehicle control device 20...Conductive path 20A...Conductive path 20B...Conductive path 20C...Conductive path

Claims

1. An in-vehicle system comprising: an ECU mounted on a vehicle; and an in-vehicle control device that communicates with the ECU, wherein the in-vehicle control device is configured to control a relay that switches the power supply state from a power supply unit to the ECU, and determines whether the ECU is abnormal based on the control state of the relay and the communication state of the ECU.

2. The in-vehicle system according to claim 1, wherein the in-vehicle control device determines that the ECU is abnormal based on a target value which is at least one of the current flowing through the conductive path between the relay and the ECU and the voltage of the conductive path, the control state of the relay, and the communication state of the ECU.

3. The vehicle system of claim 2, wherein the ECU switches to an ON state when power is supplied from the power supply unit and transmits a startup completion notification, and the vehicle control device determines that the ECU is abnormal if it receives the startup completion notification before the target value exceeds a threshold value after switching the relay to an ON state.

4. The in-vehicle system according to claim 2, wherein the in-vehicle control device switches the relay to an off state and determines that the ECU is abnormal if the ECU is communicating after the target value becomes equal to or less than a threshold value.

5. An in-vehicle system according to any one of claims 2 to 4, wherein the in-vehicle control device determines that the ECU is abnormal when the target value is greater than a threshold value while controlling the relay to be in an off state.

6. An in-vehicle system according to any one of claims 1 to 4, wherein the ECU switches to an ON state when power is supplied from the power supply unit and transmits a startup completion notification, and the in-vehicle control device determines that the ECU is abnormal when it receives the startup completion notification while controlling the relay to an OFF state.

7. An in-vehicle system according to any one of claims 2 to 4, wherein the in-vehicle control device determines that the ECU is abnormal if, after switching the relay to the on state, an on determination period has elapsed without the target value exceeding the threshold value.

8. An in-vehicle system according to any one of claims 1 to 4, wherein the ECU switches to an on state when power is supplied from the power supply unit and transmits a startup completion notification, and the in-vehicle control device determines that the ECU is abnormal if an on determination period has elapsed after switching the relay to the on state without receiving the startup completion notification.

9. An in-vehicle system according to any one of claims 2 to 4, wherein the in-vehicle control device determines that the ECU is abnormal if, after switching the relay to the off state, an off determination period has elapsed without the target value becoming equal to or less than the threshold value.

10. An in-vehicle system according to any one of claims 1 to 4, further comprising another ECU different from the ECU, wherein the in-vehicle control device notifies the other ECU that the ECU is abnormal when it determines that the ECU is abnormal.

11. The ECU switches to an ON state when it receives power from the power supply unit and transmits a startup completion notification, and the vehicle control device, after switching the relay to an ON state, determines that a target value, which is at least one of the current flowing through the conduction path between the relay and the ECU and the voltage of the conduction path, has become greater than a threshold value, and then, when it determines that it has received the startup completion notification, determines that the ECU has switched to an ON state, and further comprises another ECU different from the ECU, and when it determines that the ECU has switched to an ON state, the vehicle control device notifies the other ECU that the ECU has switched to an ON state. An in-vehicle system as described in any one of claims 1 to 4.

12. An in-vehicle system according to any one of claims 1 to 4, wherein the in-vehicle control device determines that the ECU has switched to the off state when it determines that a target value, which is at least one of the current flowing through the conduction path between the relay and the ECU and the voltage of the conduction path, is below a threshold value after switching the relay to the off state, and further comprises another ECU different from the ECU, and when it determines that the ECU has switched to the off state, the in-vehicle control device notifies the other ECU that the ECU has switched to the off state.

Images