In-vehicle management system and management method

Abstract

This in-vehicle management system manages an operation mode of each of a plurality of in-vehicle devices that operate using power supplied by a first power supply or a second power supply and comprises: an acquisition unit that acquires power supply information indicating a state of the first power supply; and a transition processing unit that, when the state indicated by the power supply information acquired by the acquisition unit indicates an abnormality of the first power supply, performs transition processing that is processing for causing one or a plurality of first in-vehicle devices, which are the in-vehicle devices, to transition to an evacuation traveling mode for causing a vehicle on which the in-vehicle management system is mounted to perform evacuation traveling and is processing for causing one or a plurality of second in-vehicle devices, which are other in-vehicle devices different from the first in-vehicle devices, to transition to a power saving mode for executing power saving operation of the second in-vehicle devices.

Description

In-vehicle management system and management method

[0001] This application claims priority from Japanese Patent Application No. 2024-120893, filed on July 26, 2024, the disclosure of which is incorporated herein by reference in its entirety.

[0002] Patent Document 1 (JP 2023-72940 A) discloses the following technology: That is, a power supply device includes a first system that supplies power from a first power source to a first load, a second system that supplies power from a second power source to a plurality of second loads, a connection unit that can connect and disconnect the first system and the second system, a load switch that can connect and disconnect the second load and the second system, and a control unit that, when a failure of the first power source is detected, disconnects the connection unit and supplies power from the second power source to the second load to perform fail-safe control, and during the fail-safe control, the control unit preferentially shuts off the load switch corresponding to a second load that has a long duration from when the power supply is stopped until it stops operating, among the plurality of second loads, over the load switches corresponding to the other second loads.

[0003] JP 2023-72940 A

[0004] The vehicle management system disclosed herein is an in-vehicle management system that manages the operating modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, and is provided with a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices, each corresponding to one of the plurality of in-vehicle devices, and is equipped with an acquisition unit that acquires power source information indicating the state of the first power source, and a transition processing unit that performs transition processing, which, when the state indicated by the power source information acquired by the acquisition unit indicates an abnormality related to the first power source, transitions one or more first in-vehicle devices that are the in-vehicle devices to an evacuation driving mode for driving a vehicle in which the in-vehicle management system is installed to an evacuation driving mode, and transitions one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

[0005] One aspect of the present disclosure can be realized not only as an in-vehicle management system equipped with such a characteristic processing unit, but also as a program for causing a computer to execute such characteristic processing steps, or as a semiconductor integrated circuit that realizes part or all of the in-vehicle management system.

[0006] FIG. 1 is a diagram illustrating an example of the configuration of an in-vehicle communication system according to an embodiment of the present disclosure. FIG. 2 is a diagram illustrating an example of the configuration of an in-vehicle relay device according to an embodiment of the present disclosure. FIG. 3 is a diagram illustrating power supply switching control by an in-vehicle relay device according to an embodiment of the present disclosure. FIG. 4 is a diagram illustrating an example of a correspondence table stored by an in-vehicle relay device according to an embodiment of the present disclosure. FIG. 5 is a diagram illustrating transition processing by an in-vehicle relay device according to an embodiment of the present disclosure. FIG. 6 is a flowchart defining the operation procedure when an in-vehicle relay device according to an embodiment of the present disclosure performs transition processing. FIG. 7 is a flowchart defining the operation procedure when an in-vehicle relay device according to an embodiment of the present disclosure performs transition processing. FIG. 8 is a flowchart defining the operation procedure when an in-vehicle relay device according to an embodiment of the present disclosure performs transition processing. FIG. 9 is a diagram illustrating an example of a processing sequence of an in-vehicle relay device, evacuation-related equipment, and other equipment in an in-vehicle communication system according to an embodiment of the present disclosure.

[0007] Conventionally, in an in-vehicle system equipped with multiple in-vehicle devices, when an abnormality is detected in a power supply supplying power to each in-vehicle device, a technology has been developed to operate each in-vehicle device using power supplied from a power source other than the power source in question.

[0008] [Problem to be Solved by the Present Disclosure] For example, in an in-vehicle system, if an abnormality in a certain power supply is detected, the vehicle may be driven to an evacuation route using another power supply instead. In this case, if an abnormality occurs in the other power supply, the evacuation route may fail.

[0009] The present disclosure has been made to solve the above-mentioned problems, and its purpose is to provide an in-vehicle management system and management method that can more reliably cause a vehicle to evacuate.

[0010] [Effects of the Present Disclosure] According to the present disclosure, it is possible to more reliably cause a vehicle to run for evacuation.

[0011] [Description of an embodiment of the present disclosure] First, the contents of an embodiment of the present disclosure will be described below. (1) An in-vehicle management system according to an embodiment of the present disclosure is an in-vehicle management system that manages the operation modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, and includes a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices, respectively, provided corresponding to the plurality of in-vehicle devices, an acquisition unit that acquires power source information indicating a state of the first power source, and a transition processing unit that performs transition processing, when the state indicated by the power source information acquired by the acquisition unit indicates an abnormality related to the first power source, to transition one or more first in-vehicle devices that are the in-vehicle devices to an evacuation running mode for causing a vehicle in which the in-vehicle management system is installed to perform an evacuation running, and to transition one or more second in-vehicle devices that are other in-vehicle devices than the first in-vehicle devices to a power saving mode for executing a power saving operation of the second in-vehicle devices.

[0012] In this way, when an abnormality in the first power source is detected, the first in-vehicle device used for the vehicle's evacuation drive is transitioned to the evacuation drive mode, and the second in-vehicle device different from the first in-vehicle device is transitioned to the power saving mode. This configuration makes it possible to suppress a decrease in the remaining capacity of the second power source that replaces the first power source. This reduces the possibility that the vehicle's evacuation drive will fail midway. Therefore, the vehicle can be more reliably driven to evacuation.

[0013] (2) In the above (1), the power saving mode may include a stop mode in which the power supply to the second in-vehicle device is stopped because the switching unit corresponding to the second in-vehicle device is turned off.

[0014] With this configuration, it is possible to further suppress a decrease in the remaining charge of the second power source while the vehicle is running to evacuate, and therefore the vehicle can be run to evacuate more reliably.

[0015] (3) In the above (2), the vehicle management system may further include a measurement unit that measures the second power source, and the transition processing unit may determine whether or not to transition the second vehicle equipment to the stop mode based on the measurement results of the measurement unit during the transition processing.

[0016] With this configuration, it is possible to more appropriately determine whether the second in-vehicle device should transition to the stop mode depending on the remaining amount of the second power source.

[0017] (4) In any of (1) to (3) above, the vehicle management system may further include a status notification unit that transmits information indicating the status of each of the first vehicle-mounted device and the second vehicle-mounted device to the multiple vehicle-mounted devices after the transition processing by the transition processing unit.

[0018] This configuration can prevent inconsistencies in the recognition of the status of each on-board device after the transition process by the on-board management system between the on-board devices, thereby enabling, for example, a certain on-board device to transition from its own operation mode to an appropriate operation mode according to the status of the on-board device of the communication partner.

[0019] (5) In any one of (1) to (4) above, the first power source may include a power conversion device, and the second power source may not include the power conversion device.

[0020] For example, hybrid vehicles and the like may be equipped with a main power supply including a power conversion device connected to a high-voltage battery and a backup power supply that does not include a power conversion device. With the above-described configuration, when a vehicle such as a hybrid vehicle equipped with a main power supply and a backup power supply is running to evacuate, it is possible to suppress a decrease in the remaining power of the backup power supply, thereby enabling the vehicle to run to evacuate reliably.

[0021] (6) In any of (1) to (5) above, the transition processing unit may determine the operating mode of each of the first in-vehicle device and the second in-vehicle device in the transition processing using correspondence information indicating the correspondence between the in-vehicle device and the operating mode of the in-vehicle device when the abnormality occurs.

[0022] With this configuration, when an abnormality occurs in the first power supply, the operation modes to which the first in-vehicle device and the second in-vehicle device should each transition can be easily identified using the correspondence information.

[0023] (7) A management method according to an embodiment of the present disclosure is a management method in an in-vehicle management system that manages the operating modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, and includes a step of acquiring power source information indicating the state of the first power source when a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices are provided corresponding to the plurality of in-vehicle devices, and a step of performing transition processing, which is processing for transitioning one or more first in-vehicle devices that are the in-vehicle devices to an evacuation driving mode for driving a vehicle in which the in-vehicle management system is installed to an evacuation driving mode when the state indicated by the acquired power source information indicates an abnormality related to the first power source, and transition processing for transitioning one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

[0024] In this way, when an abnormality in the first power source is detected, the first in-vehicle device used for the vehicle's evacuation drive is transitioned to the evacuation drive mode, and the second in-vehicle device different from the first in-vehicle device is transitioned to the power saving mode. This method can prevent a decrease in the remaining capacity of the second power source that replaces the first power source. This reduces the possibility that the vehicle's evacuation drive will fail midway. Therefore, the vehicle can be more reliably driven to evacuation.

[0025] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In the drawings, identical or corresponding parts are designated by the same reference numerals, and their description will not be repeated. Furthermore, at least some of the embodiments described below may be combined in any manner.

[0026] [In-Vehicle Communication System] Fig. 1 is a diagram illustrating an example of the configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Referring to Fig. 1, the in-vehicle communication system 301 includes an in-vehicle relay device 101, an in-vehicle device group including a plurality of in-vehicle devices 201, a power supply unit 51, a plurality of power supply relays 81, and a plurality of control relays 91. The in-vehicle communication system 301 is mounted on a vehicle 1. The vehicle 1 may be a hybrid vehicle, an electric vehicle, or the like. The in-vehicle communication system 301 is an example of an in-vehicle management system. The control relay 91 is an example of a switching unit.

[0027] The in-vehicle devices 201 include an in-vehicle ECU (Electronic Control Unit), an OTA (Over The Air) master, sensors, actuators, motors, a navigation device, a human-machine interface, and a camera. The in-vehicle ECUs include an autonomous driving ECU, an engine ECU, a headlamp ECU, a steering ECU, a brake ECU, and a TCU (Telematics Communication Unit).

[0028] The in-vehicle relay device 101 and the plurality of in-vehicle devices 201 constitute an in-vehicle network 401. The plurality of in-vehicle devices 201 are connected to the in-vehicle relay device 101 via a CAN bus 2 that conforms to the CAN (Controller Area Network) standard, for example.

[0029] 1, the in-vehicle communication system 301 includes in-vehicle devices 201A, 201B, 201C, 201D, 201E, 201F, 201G, and 201H that are in-vehicle devices 201. Also, in the example shown in FIG. 1, CAN buses 2A, 2B, 2C, and 2D are provided as the CAN bus 2.

[0030] In-vehicle devices 201A and 201B are connected to in-vehicle relay device 101 via CAN bus 2A. In-vehicle devices 201C and 201D are connected to in-vehicle relay device 101 via CAN bus 2B. In-vehicle devices 201E and 201F are connected to in-vehicle relay device 101 via CAN bus 2C. In-vehicle devices 201G and 201H are connected to in-vehicle relay device 101 via CAN bus 2D.

[0031] The in-vehicle relay device 101 performs a relay process for relaying frames transmitted and received between the in-vehicle devices 201 .

[0032] For example, each in-vehicle device 201 transmits a CAN frame including various information (described later) such as information for assisting the autonomous driving performed by the vehicle 1 and information used for entertainment, and a CAN-ID (Identifier) ​​indicating the type of data, to another in-vehicle device 201 or the in-vehicle relay device 101. The in-vehicle relay device 101 relays a CAN frame received from one in-vehicle device 201 to another in-vehicle device 201. The in-vehicle relay device 101 also creates a CAN frame including the various information and the CAN-ID, and transmits the created CAN frame to the destination in-vehicle device 201.

[0033] Note that the in-vehicle communication system 301 is not limited to a configuration in which four CAN buses 2 are provided, and may be a configuration in which one, two, three, or five or more CAN buses 2 are provided.

[0034] Furthermore, the on-board relay device 101 and the on-board device 201 may be configured to communicate in accordance with a communication protocol such as CAN FD (CAN with Flexible Data Rate), Ethernet (registered trademark), FlexRay (registered trademark), MOST (Media Oriented System Transport) (registered trademark), LIN (Local Interconnect Network), and CXPI (Clock Extension Peripheral Interface) (registered trademark), instead of or in addition to communication in accordance with the CAN standard.

[0035] The vehicle relay device 101 and each vehicle device 201 communicate with each other to provide various services in the vehicle 1 .

[0036] Specifically, the in-vehicle network 401 executes a service for performing evacuation driving of the vehicle 1 (hereinafter also referred to as the "evacuation driving service"), a service for updating various software used in the in-vehicle network 401 via OTA, a service for contactlessly charging the battery installed in the vehicle 1, a service for detecting malfunctions in the vehicle 1, and a service for remotely operating the vehicle 1.

[0037] 1 , the in-vehicle devices 201E and 201F are in-vehicle devices 201 that perform an evacuation travel service (hereinafter also referred to as "evacuation-related devices"). The evacuation-related devices include an autonomous driving ECU, a headlamp ECU, a steering ECU, a brake ECU, a motor that drives an EPS (electric power steering), and a brake actuator. The evacuation-related devices are an example of a first in-vehicle device.

[0038] The on-vehicle devices 201A, 201B, 201C, 201D, 201G, and 201H are other on-vehicle devices 201 (hereinafter also referred to as "other devices") that are different from the evacuation-related devices.

[0039] Hereinafter, the in-vehicle devices 201G and 201H, which are other devices connected to a control relay 91 described later, will also be referred to as "other device E1," and the in-vehicle devices 201A, 201B, 201C, and 201D, which are other devices not connected to the control relay 91, will also be referred to as "other device E2." In this embodiment, the activation method of the other device E1 and the activation method of the other device E2 are different from each other. The other device E1 is an example of a second in-vehicle device.

[0040] (Power supply unit) The power supply unit 51 supplies power in the vehicle 1. The power supply unit 51 includes a first power supply 61 and a second power supply 62. Under normal circumstances, the first power supply 61 supplies power to each device in the in-vehicle communication system 301. When an abnormality occurs in the first power supply 61, the second power supply 62 supplies power to each device in the in-vehicle communication system 301. That is, when an abnormality in the first power supply 61 is detected in the in-vehicle communication system 301, the power supply source for each device is switched from the first power supply 61 to the second power supply 62. In this embodiment, a power supply management unit 22 in the in-vehicle relay device 101, which will be described later, controls the switching of the power supply source.

[0041] The first power source 61 is connected to the on-board relay device 101 via a power line 3. The second power source 62 is connected to the on-board relay device 101 via a power line 4. Each on-board device 201 is connected to the on-board relay device 101 via a power line 5. The power line 3 and the power line 5 are connected within the on-board relay device 101. The power line 4 and the power line 5 are connected within the on-board relay device 101.

[0042] 1, power lines 5A, 5B, 5C, and 5D are provided as the power line 5. The on-board devices 201A and 201B are connected to the on-board relay device 101 via the power line 5A. The on-board devices 201C and 201D are connected to the on-board relay device 101 via the power line 5B. The on-board devices 201E and 201F are connected to the on-board relay device 101 via the power line 5C. The on-board devices 201G and 201H are connected to the on-board relay device 101 via the power line 5D.

[0043] For example, the first power supply 61 includes a battery 71 and a DC / DC converter 72. The battery 71 is a high-voltage battery such as a lithium-ion battery. The DC / DC converter 72, for example, steps down a DC voltage Vb of the battery 71 to generate a DC voltage Vc. The DC / DC converter 72 then outputs the DC voltage Vc to the power supply line 3. The DC / DC converter 72 is an example of a power conversion device.

[0044] The second power supply 62 includes, for example, a low-voltage battery having a lower voltage than the battery 71 of the first power supply 61. For example, the second power supply 62 does not include a power conversion device.

[0045] (Power Supply Relay) For example, the power supply relay 81 switches the power supply source for each device in the in-vehicle communication system 301 between the first power supply 61 and the second power supply 62 .

[0046] In the example shown in FIG. 1, the in-vehicle communication system 301 includes power supply relays 81A and 81B, which are the power supply relay 81.

[0047] The power supply relay 81A is connected between the first power supply 61 and the in-vehicle repeater 101. The power supply relay 81B is connected between the second power supply 62 and the in-vehicle repeater 101.

[0048] Normally, the power supply relay 81A is in an ON state, and the power supply relay 81B is in an OFF state.

[0049] (Control Relay) The control relay 91 switches whether to supply power from the first power source 61 or the second power source 62 to the in-vehicle device 201. For example, the control relay 91 switches between an on state and an off state under the control of a switching control unit 25 in the in-vehicle repeater 101, which will be described later. When the control relay 91 switches from an on state to an off state, the power supply to the in-vehicle device 201 is stopped.

[0050] 1, the in-vehicle communication system 301 includes control relays 91A, 91B, 91C, and 91D that are the control relay 91. The control relay 91A, the control relay 91B, the control relay 91C, and the control relay 91D are provided corresponding to the in-vehicle device 201E, the in-vehicle device 201F, the in-vehicle device 201G, and the in-vehicle device 201H, respectively.

[0051] Specifically, for example, the control relay 91A is connected between the in-vehicle device 201E and the in-vehicle relay device 101. The control relay 91B is connected between the in-vehicle device 201F and the in-vehicle relay device 101. The control relay 91C is connected between the in-vehicle device 201G and the in-vehicle relay device 101. The control relay 91D is connected between the in-vehicle device 201H and the in-vehicle relay device 101. The state of each control relay 91 is, for example, off when the ignition power of the vehicle 1 is off.

[0052] The other device transitions from normal mode to power saving mode and from power saving mode to normal mode. In normal mode, the other device communicates with other devices in the in-vehicle communication system 301, and in power saving mode, the other device stops communication with other devices in the in-vehicle communication system 301. The power saving mode is a mode in which power consumption is lower than in normal mode.

[0053] Specifically, for example, the power-saving modes of the other device E1 include a stop mode and a sleep mode. The stop mode is a mode in which the control relay 91 corresponding to the other device E1 is turned off, thereby stopping the power supply to the other device E1. The sleep mode is a mode in which power consumption is greater than that of the stop mode and less than that of the normal mode. Specifically, for example, the sleep mode is a mode in which some functions of the other device E1 are stopped and a mode in which the clock frequency of the other device E1 is reduced.

[0054] The power saving mode of the other device E2 to which the control relay 91 is not connected is a mode in which some functions of the other device E2 are stopped, a mode in which the clock frequency of the other device E2 is reduced, or the like.

[0055] [On-Vehicle Relay Device] Fig. 2 is a diagram illustrating an example of the configuration of an on-vehicle relay device according to an embodiment of the present disclosure. Referring to Fig. 2, the on-vehicle relay device 101 includes a relay unit 11, a processing unit 12, and a storage unit 13. The processing unit 12 includes a detection unit 21, a power management unit 22, a measurement unit 23, a transition processing unit 24, a switching control unit 25, a state notification unit 26, and a device control unit 27. One or both of the relay unit 11 and the processing unit 12 are realized, for example, by a processing circuit including one or more processors. The storage unit 13 is, for example, a non-volatile memory included in the processing circuit. The power management unit 22 is an example of an acquisition unit.

[0056] (Relay Unit) The relay unit 11 receives a CAN frame transmitted from a certain in-vehicle device 201. Then, the relay unit 11 checks whether the received CAN frame is a CAN frame that should be received by its own in-vehicle relay device 101.

[0057] The storage unit 13 stores, for example, a reception list indicating the CAN-IDs included in the CAN frames that should be received by the vehicle-mounted relay device 101. The reception list is registered in the storage unit 13 by the manufacturer of the vehicle 1, for example, when the vehicle 1 is shipped.

[0058] When the relay unit 11 receives a CAN frame, it refers to the reception list in the storage unit 13 to check whether the CAN-ID included in the CAN frame is registered in the reception list.

[0059] For example, if the CAN-ID included in a received CAN frame is not registered in the reception list, the relay unit 11 discards the CAN frame.

[0060] On the other hand, relay unit 11 performs relay processing, for example, when the CAN-ID included in the received CAN frame is registered in the reception list and the destination of the CAN frame is in-vehicle device 201. Furthermore, relay unit 11 outputs the CAN frame to processing unit 12, for example, when the CAN-ID included in the received CAN frame is registered in the reception list and the destination of the CAN frame is its own in-vehicle relay device 101.

[0061] Specifically, for example, storage unit 13 stores a routing table indicating the correspondence between CAN-IDs, destination devices of CAN frames, and CAN buses 2 to which the destination devices are connected (hereinafter also referred to as "destination buses"). The routing table is registered in storage unit 13 by the manufacturer of vehicle 1, for example, when vehicle 1 is shipped.

[0062] For example, if the CAN-ID contained in the CAN frame received from the in-vehicle device 201 is registered in the reception list, the relay unit 11 checks the destination device corresponding to the CAN-ID by referring to the routing table in the memory unit 13.

[0063] When the relay unit 11 confirms that the destination device of the received CAN frame is the in-vehicle device 201, the relay unit 11 refers to the routing table to identify the destination bus corresponding to the destination device, and then outputs the received CAN frame to the identified destination bus.

[0064] On the other hand, when the relay unit 11 confirms that the destination device of the received CAN frame is its own in-vehicle relay device 101 , it outputs the CAN frame to the processing unit 12 .

[0065] For example, the switching control unit 25 performs operation control to switch the control relays 91 connected to the evacuation-related devices and the other devices E1 from an off state to an on state, whereby the evacuation-related devices and the other devices E1 are supplied with power from the power supply unit 51 and start operating.

[0066] More specifically, for example, when the switching control unit 25 detects that the ignition power of the vehicle 1 has been switched from an off state to an on state, the switching control unit 25 performs operation control.

[0067] Specifically, for example, the switching control unit 25 detects the on / off switching of the ignition power supply by measuring the output voltage of the ignition power supply. If the measured voltage value is equal to or greater than a predetermined threshold value Th5, the switching control unit 25 determines that the ignition power supply is in the on state, and if the measured voltage value is less than the threshold value Th5, the switching control unit 25 determines that the ignition power supply is in the off state.

[0068] When the switching control unit 25 determines that the ignition power of the vehicle 1 has been switched from an off state to an on state, it performs operation control to start up the evacuation-related devices and other devices E1.

[0069] (Detection Unit) For example, the detection unit 21 detects an abnormality related to the first power supply 61. For example, the detection unit 21 detects a state in which the output voltage of the first power supply 61 is reduced due to a failure of the DC / DC converter 72 or the like shown in FIG.

[0070] More specifically, the detection unit 21 performs a measurement process of measuring the output voltage of the first power supply 61, for example, periodically or irregularly.

[0071] For example, if the measured voltage value Va is equal to or greater than a predetermined threshold value Th1, the detection unit 21 determines that no abnormality has occurred in the first power supply 61. On the other hand, if the measured voltage value Va is less than the threshold value Th1, the detection unit 21 determines that an abnormality has occurred in the first power supply 61. Then, the detection unit 21 outputs abnormality detection information indicating that an abnormality has occurred in the first power supply 61 to the power supply management unit 22.

[0072] The configuration is not limited to the in-vehicle relay device 101 including the detection unit 21, and a certain in-vehicle device 201 may include the detection unit 21. In this case, when the detection unit 21 in the in-vehicle device 201 determines that an abnormality has occurred in the first power supply 61, it transmits abnormality detection information to the in-vehicle relay device 101.

[0073] [Description of the Problem] In the in-vehicle communication system 301, for example, when the in-vehicle relay device 101 detects an abnormality in the first power source 61, the vehicle 1 travels to an evacuation site using the second power source 62 instead. In this case, if an abnormality occurs in the second power source 62, such as a decrease in the remaining power, the evacuation site may fail.

[0074] Therefore, the in-vehicle communication system 301 according to the embodiment of the present disclosure solves the above problem by the following configuration and operation.

[0075] 2 , in the in-vehicle relay device 101, the power supply management unit 22 acquires power supply information indicating the state of the first power supply 61. Specifically, for example, the power supply management unit 22 acquires, as the power supply information, abnormality detection information received from the detection unit 21. Then, the power supply management unit 22 outputs the abnormality detection information to the transition processing unit 24 and the device control unit 27.

[0076] FIG. 3 is a diagram for explaining power supply switching control by the vehicle-mounted relay device according to the embodiment of the present disclosure.

[0077] Referring to Figure 3, for example, when the detection unit 21 detects an abnormality in the first power supply 61, the power supply management unit 22 performs power supply switching control to switch the power supply source of each device in the in-vehicle communication system 301 from the first power supply 61 to the second power supply 62.

[0078] Specifically, for example, when the power management unit 22 receives abnormality detection information from the detection unit 21, it switches the state of the power relay 81A from the on state to the off state, and switches the state of the power relay 81B from the off state to the on state.

[0079] 2 , for example, the measurement unit 23 measures the second power source 62. More specifically, for example, the measurement unit 23 performs a remaining amount monitoring process of monitoring the remaining amount of the second power source 62 when the power supply relay 81B is in the on state.

[0080] Specifically, for example, the measurement unit 23 measures the output current of the second power supply 62 at predetermined time intervals Sa. The measurement unit 23 also measures the elapsed time Sb from when the second power supply 62 is fully charged. The measurement unit 23 then multiplies the measured current value of the second power supply 62 by the elapsed time Sb to calculate the amount of power usage of the second power supply 62.

[0081] For example, the storage unit 13 stores the charge amount when the second power source 62 is fully charged. When the measurement unit 23 calculates the power usage amount of the second power source 62, the measurement unit 23 calculates the remaining power of the second power source 62 by subtracting the power usage amount from the charge amount when the second power source 62 is fully charged, which is stored in the storage unit 13.

[0082] Then, the measuring unit 23 outputs remaining amount information indicating the calculation result to the transition processing unit 24. The measuring unit 23 performs such remaining amount monitoring processing periodically or irregularly.

[0083] The measuring unit 23 is not limited to a configuration that calculates the remaining capacity of the second power source 62, and may be configured to measure the output voltage of the second power source 62 instead of or in addition to calculating the remaining capacity.

[0084] (Transition Processing Unit) The transition processing unit 24 performs transition processing when the state of the first power supply 61 indicated by the power supply information acquired by the power supply management unit 22 indicates an abnormality related to the first power supply 61. The transition processing is processing for transitioning the evacuation-related devices to an evacuation traveling mode for causing the vehicle 1 to travel for evacuation, and processing for transitioning the other devices E1 to a power saving mode for executing the power saving operation of the other devices E1.

[0085] For example, the evacuation traveling mode includes a guidance mode that guides the vehicle 1 to a safe place such as a road shoulder. Note that the evacuation traveling mode may include other modes in addition to or instead of the guidance mode, such as a mode that restricts the driving functions of the vehicle 1, such as the engine output value, a mode that notifies the driver of the vehicle 1 of the occurrence of an abnormality, and a mode that drives the vehicle 1 with the hazard lights turned on.

[0086] FIG. 4 is a diagram illustrating an example of a correspondence table stored in the vehicle-mounted relay device according to the embodiment of the present disclosure.

[0087] 4 , for example, storage unit 13 stores a correspondence table Tb indicating a correspondence relationship between on-vehicle device 201 and an operation mode of on-vehicle device 201 when an abnormality occurs in first power supply 61 (hereinafter also referred to as an "abnormal operation mode"). Correspondence table Tb is registered in storage unit 13 by the manufacturer of vehicle 1, for example, when vehicle 1 is shipped. Correspondence table Tb is an example of correspondence information.

[0088] 4, the abnormality operation mode corresponding to the in-vehicle devices 201E and 201F, which are the evacuation-related devices, is the "evacuation driving mode." The abnormality operation mode corresponding to the in-vehicle devices 201G and 201H, which are the other devices E1, is the "power saving mode."

[0089] For example, the transition processing unit 24 uses the correspondence table Tb in the storage unit 13 to determine the abnormality operation modes of each of the evacuation-related devices and the other device E1.

[0090] More specifically, for example, when the transition processing unit 24 receives abnormality detection information from the power management unit 22, it refers to the correspondence table Tb in the memory unit 13 to confirm that the abnormality operation mode of the evacuation-related equipment is the "evacuation driving mode" and that the abnormality operation mode of the other equipment E1 is the "power saving mode."

[0091] <Transition to evacuation driving mode> For example, as a process for transitioning an evacuation-related device to an evacuation driving mode in the transition process, the transition processing unit 24 performs a process of transmitting a CAN frame (hereinafter also referred to as a "transition request frame FA") to the evacuation-related device, the CAN frame including the CAN-ID of the evacuation-related device and request information R1 requesting a transition to the evacuation driving mode.

[0092] For example, the storage unit 13 stores an ID table showing the correspondence between the in-vehicle devices 201 and the CAN-IDs.

[0093] When the transition processing unit 24 confirms that the abnormality operation mode of the evacuation-related devices is the "evacuation travel mode," it confirms the CAN-ID of each evacuation-related device by referring to the ID table in the storage unit 13. Then, the transition processing unit 24 creates a transition request frame FA for each evacuation-related device and outputs the created transition request frame FA to the relay unit 11.

[0094] When the relay unit 11 receives the transition request frame FA from the transition processing unit 24, it transmits the transition request frame FA to the evacuation-related device using the routing table as described above. In addition, for example, the relay unit 11 outputs a request completion notification indicating that the transition request frame FA has been output to the status notification unit 26.

[0095] When the evacuation-related device receives the transition request frame FA from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the received transition request frame FA.

[0096] The evacuation-related device discards a transition request frame FA that does not include its own CAN-ID. On the other hand, when the evacuation-related device receives a transition request frame FA that includes its own CAN-ID, it transitions to the evacuation driving mode in accordance with the request information R1 included in the transition request frame FA. For example, an autonomous driving ECU, which is an example of the evacuation-related device, automatically guides its own vehicle 1 to the shoulder of the road in accordance with the request information R1.

[0097] Furthermore, for example, when the evacuation-related device receives a transition request frame FA including its own CAN-ID, it creates a CAN frame (hereinafter also referred to as a "response frame F1") that includes the CAN-ID of the in-vehicle relay device 101 and information indicating that the transition request frame FA has been received. Then, the evacuation-related device outputs the created response frame F1 to the CAN bus 2 to which the evacuation-related device is connected.

[0098] In the vehicle-mounted relay device 101, when the transition processing unit 24 receives the response frame F1 from the evacuation-related equipment via the relay unit 11, it determines that the transition request frame FA has reached the evacuation-related equipment.

[0099] <Transition from Normal Mode to Stop Mode> For example, in the transition process, the transition processing unit 24 determines whether or not to transition the other device E1 to the power saving mode based on the measurement result of the measurement unit 23. Here, an example will be described in which the transition processing unit 24 determines whether or not to transition the other device E1 to the stop mode based on the measurement result of the measurement unit 23.

[0100] More specifically, for example, when the transition processing unit 24 receives remaining capacity information from the measuring unit 23 and confirms by referring to the correspondence table Tb shown in Figure 4 that the abnormal operation mode of the other device E1 is the "power saving mode," it checks whether the remaining capacity of the second power source 62 indicated by the remaining capacity information is less than a predetermined threshold value Th2.

[0101] If the remaining power of the second power source 62 indicated by the remaining power information received from the measurement unit 23 is less than the threshold Th2, the transition processing unit 24 determines to transition each other device E1 to the stop mode.

[0102] For example, as a process for transitioning another device E1 to a stop mode during the transition process, the transition processing unit 24 performs a process of transmitting a CAN frame (hereinafter also referred to as a "transition request frame FB") to the other device E1, the CAN frame including the CAN-ID of the other device E1 and request information R2 requesting a transition to the stop mode.

[0103] Specifically, for example, when the transition processing unit 24 determines to transition each other device E1 to the stop mode, it checks the CAN-ID of each other device E1 by referring to the ID table in the storage unit 13. Then, the transition processing unit 24 creates a transition request frame FB for each other device E1 and outputs the created transition request frame FB to the relay unit 11.

[0104] When the relay unit 11 receives the transition request frame FB from the transition processing unit 24, it uses the routing table as described above to transmit the transition request frame FB to the other device E1.

[0105] When the other device E1 operating in the normal mode receives the transition request frame FB from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the received transition request frame FB.

[0106] The other device E1 discards the transition request frame FB that does not include its own CAN-ID. On the other hand, when the other device E1 receives the transition request frame FB that includes its own CAN-ID, it performs a predetermined shutdown operation and transitions to the stop mode.

[0107] For example, in the above-mentioned shutdown operation, the other device E1 creates a CAN frame (hereinafter also referred to as "response frame F2") that includes the CAN-ID of the vehicle relay device 101 and information indicating that the transition request frame FB has been received.

[0108] Then, the other device E1 outputs the created response frame F2 to the CAN bus 2 to which the other device E1 is connected.

[0109] In the in-vehicle relay device 101, when the transition processing unit 24 receives the response frame F2 from the other device E1 via the relay unit 11, it determines that the transition request frame FB has reached the other device E1. Then, the transition processing unit 24 outputs a switching request notification to the switching control unit 25, which requests that the control relay 91 connected to the other device E1 be switched from the on state to the off state.

[0110] FIG. 5 is a diagram for explaining transition processing by the vehicle-mounted relay device according to the embodiment of the present disclosure.

[0111] 2 and 5, when the switching control unit 25 receives a switching request notification from the transition processing unit 24, it switches the control relay 91 connected to the other device E1 from the on state to the off state. As a result, the other device E1 stops operating due to the power supply from the power supply unit 51 being cut off.

[0112] 5, the switching control unit 25 controls the control relay 91C connected to the in-vehicle device 201G to be switched from the on state to the off state, and the switching control unit 25 controls the control relay 91D connected to the in-vehicle device 201H to be switched from the on state to the off state.

[0113] <Transition from normal mode to sleep mode> Referring again to Figure 2, if the remaining power of the second power source 62 indicated by the remaining power information received from the measurement unit 23 is equal to or greater than the threshold value Th2, the transition processing unit 24 decides to transition the other device E1 to sleep mode.

[0114] The transition processing unit 24 then checks the CAN-ID of each of the other devices E1 by referring to the ID list in the storage unit 13. After checking the CAN-ID of each of the other devices E1, the transition processing unit 24 creates a transition request frame FC for each of the other devices E1, the transition request frame FC including the corresponding CAN-ID and request information R3 requesting a transition to the sleep mode, and outputs the created transition request frame FC to the relay unit 11.

[0115] When the relay unit 11 receives the transition request frame FC from the transition processing unit 24, it uses the routing table as described above to output the transition request frame FC to the destination bus.

[0116] When the other device E1 operating in the normal mode receives the transition request frame FC from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the received transition request frame FC.

[0117] The other device E1 discards the transition request frame FC that does not include its own CAN-ID. On the other hand, when the other device E1 receives the transition request frame FC that includes its own CAN-ID, it transitions to the sleep mode in accordance with the request information R3 included in the transition request frame FC.

[0118] Also, for example, when another device E1 receives a transition request frame FC including its own CAN-ID, it creates a CAN frame (hereinafter also referred to as a "response frame F3") that includes the CAN-ID of the vehicle relay device 101 and information indicating that the transition request frame FC has been received.

[0119] Then, the other device E1 outputs the created response frame F3 to the CAN bus 2 to which the other device E1 is connected.

[0120] In the vehicle-mounted relay device 101, when the transition processing unit 24 receives the response frame F3 from the other device E1 via the relay unit 11, it determines that the transition request frame FC has reached the other device E1.

[0121] <Transition from sleep mode to stop mode> For example, if the remaining power of the second power source 62 after receiving a response frame F3 from the other device E1 is less than the threshold value Th2, the transition processing unit 24 transitions the other device E1 from the sleep mode to the stop mode.

[0122] More specifically, for example, after receiving a response frame F3 from another device E1, the transition processing unit 24 receives remaining capacity information from the measurement unit 23 and then checks whether the remaining capacity of the second power source 62 indicated by the remaining capacity information is less than the threshold value Th2.

[0123] If the remaining power of the second power source 62 indicated by the remaining power information received from the measurement unit 23 is less than the threshold value Th2, the transition processing unit 24 determines to transition the other device E1 from the sleep mode to the stop mode.

[0124] Then, the transition processing unit 24 transmits the transition request frame FB requesting a transition to the stop mode to the other device E1 via the relay unit 11.

[0125] For example, when the other device E1 is in a sleep mode, it can receive a CAN frame. When the other device E1 operating in the sleep mode receives the transition request frame FB from the in-vehicle relay device 101, it outputs the response frame F2 to the CAN bus 2 to which the other device E1 is connected.

[0126] In the vehicle-mounted relay device 101 , when the transition processing unit 24 receives the response frame F2 from the other device E1 via the relay unit 11 , it outputs a switching request notification to the switching control unit 25 .

[0127] As described above, when the switching control unit 25 receives a switching request notification from the transition processing unit 24, it switches the control relay 91 connected to the other device E1 from the on state to the off state. As a result, the other device E1 operating in the sleep mode stops operating because the power supply from the power supply unit 51 is cut off.

[0128] (Status notification unit) For example, the status notification unit 26 performs notification processing N1 to transmit equipment status information P1 indicating the status of each of the evacuation-related equipment, other equipment E1, and other equipment E2 after the transition processing by the transition processing unit 24 to the group of in-vehicle equipment in the in-vehicle communication system 301.

[0129] 1 transmits a response frame F1, a response frame F2, or a response frame F3 to the in-vehicle relay device 101, and then transmits operation information M1 indicating its own operation mode to the in-vehicle relay device 101. Each in-vehicle device 201 transmits the operation information M1 to the in-vehicle relay device 101, for example, periodically or irregularly.

[0130] Specifically, each in-vehicle device 201 outputs response frame F1, response frame F2, or response frame F3 to the CAN bus 2 to which the in-vehicle device 201 is connected, and then, for example, periodically or irregularly, creates a CAN frame (hereinafter also referred to as a "status frame F11") that includes its own CAN-ID and operation information M1. Then, each in-vehicle device 201 outputs the created status frame F11 to the CAN bus 2 to which the in-vehicle device 201 is connected.

[0131] In the vehicle-mounted relay device 101 , when the relay unit 11 receives the status frame F11 from the vehicle-mounted device 201 , the relay unit 11 stores the received status frame F11 in the storage unit 13 .

[0132] For example, when a predetermined period H has elapsed since the state notification unit 26 received the request completion notification from the transition processing unit 24, the state notification unit 26 checks whether the state frame F11 is stored in the storage unit 13 or not.

[0133] When one or more status frames F11 are stored in the storage unit 13, the status notification unit 26 acquires the one or more status frames F11 from the storage unit 13. Below, a case where the status notification unit 26 acquires multiple status frames F11 from the storage unit 13 will be described.

[0134] When the status notification unit 26 acquires a plurality of status frames F11 from the storage unit 13, it identifies, for each acquired status frame F11, the in-vehicle device 201 corresponding to the CAN-ID included in the status frame F11 by referring to the ID table in the storage unit 13. That is, for each acquired status frame F11, the status notification unit 26 identifies the in-vehicle device 201 that is the transmission source of the status frame F11.

[0135] Then, the status notification unit 26 creates device status information P1 indicating a combination of the identified in-vehicle device 201 and the operation information M1 included in the status frame F11 corresponding to the in-vehicle device 201, and transmits the created device status information P1 to each in-vehicle device 201 via the relay unit 11. In addition, for example, the status notification unit 26 deletes from the storage unit 13 the multiple status frames F11 corresponding to the created device status information P1.

[0136] When the in-vehicle device 201 receives the device status information P1 from the in-vehicle relay device 101, it refers to the received device status information P1 to recognize the operation mode of another in-vehicle device 201, for example, the communication partner in-vehicle device 201. For example, when the in-vehicle device 201 operating in the normal mode recognizes that the operation mode of the other in-vehicle device E1, which is the communication partner in-vehicle device 201, is the sleep mode, it transitions to the sleep mode in the same way as the other in-vehicle device E1.

[0137] For example, when the in-vehicle equipment 201, which is a navigation device, recognizes that the operating mode of the evacuation-related equipment is evacuation driving mode by referring to the equipment status information P1 received from the in-vehicle relay device 101, it performs alarm processing such as displaying on its own display unit information indicating that the vehicle 1 is in evacuation driving or outputting a specified alarm sound.

[0138] In the vehicle-mounted relay device 101, for example, when a certain time has elapsed since the status notification unit 26 performed the notification process N1, the status notification unit 26 performs a new notification process N1 using the operation information M1 stored in the memory unit 13 by the relay unit 11 from the previous notification process N1 to the present.

[0139] The status notification unit 26 is not limited to a configuration in which it transmits device status information P1 indicating the respective states of the evacuation-related devices, other devices E1, and other devices E2 after the transition processing by the transition processing unit 24 to the group of in-vehicle devices in the in-vehicle communication system 301, but may also be configured to transmit device status information P2 indicating the respective states of the evacuation-related devices, other devices E1, and other devices E2 before the transition processing to the group of in-vehicle devices.

[0140] More specifically, during the period from startup to transmission of response frame F1, response frame F2, or response frame F3, each in-vehicle device 201 transmits operation information M2 indicating its own operation mode to the in-vehicle relay device 101, for example, periodically or irregularly.

[0141] Specifically, each in-vehicle device 201 creates a CAN frame (hereinafter also referred to as a "status frame F12") including its own CAN-ID and operation information M2. Then, each in-vehicle device 201 outputs the created status frame F12 to the CAN bus 2 to which the in-vehicle device 201 is connected.

[0142] In the vehicle-mounted relay device 101 , when the relay unit 11 receives the status frame F12 from the vehicle-mounted device 201 , the relay unit 11 stores the received status frame F12 in the storage unit 13 .

[0143] For example, when a certain time has elapsed since the in-vehicle relay device 101 has been started up, the status notification unit 26 checks whether the status frame F12 is stored in the storage unit 13 or not.

[0144] When one or more status frames F12 are stored in the storage unit 13, the status notification unit 26 acquires the one or more status frames F12 from the storage unit 13. Below, a case where the status notification unit 26 acquires multiple status frames F12 will be described.

[0145] When the status notification unit 26 acquires multiple status frames F12 from the memory unit 13, as described above, it identifies the in-vehicle device 201 that sent the status frame F12 for each acquired status frame F12 by referring to the ID table in the memory unit 13.

[0146] Then, the status notification unit 26 creates device status information P2 indicating a combination of the identified in-vehicle device 201 and the operation information M2 included in the status frame F12 corresponding to the in-vehicle device 201, and transmits the created device status information P2 to each in-vehicle device 201 via the relay unit 11. Also, for example, the status notification unit 26 deletes the multiple status frames F12 corresponding to the created device status information P2 from the storage unit 13. The status notification unit 26 performs such notification processing N2 periodically or irregularly.

[0147] When the on-board device 201 receives the device status information P2 from the on-board relay device 101, it refers to the received device status information P2 to recognize the operating mode of another on-board device 201, for example, the on-board device 201 of the communication partner.

[0148] (Device Control Unit) Next, a process performed by the device control unit 27 in the vehicle-mounted relay device 101 to transition the other device E2 from the normal mode to the power saving mode and from the power saving mode to the normal mode will be described.

[0149] 1 and 2 , for example, the device control unit 27 determines whether a condition G1 for the other device E2 to transition to the normal mode is satisfied and whether a condition G2 for the other device E2 to transition to the power saving mode is satisfied. The condition G1 is that the ignition power supply of the vehicle 1 transitions from an off state to an on state, and the vehicle 1 starts traveling, etc. The condition G2 is that an abnormality occurs in the first power supply 61, the ignition power supply of the vehicle 1 transitions from an on state to an off state, and the vehicle 1 is parked or stopped, etc.

[0150] More specifically, the device control unit 27 monitors the state of the vehicle 1 and performs a determination process to determine whether the condition G1 and the condition G2 are met based on the monitoring results. The device control unit 27 performs the determination process, for example, periodically.

[0151] <Transition to Normal Mode> When the device control unit 27 determines that the condition G1 is met, it transitions the other device E2 from the power saving mode to the normal mode.

[0152] More specifically, for example, when the device control unit 27 determines that condition G1 is met, it creates a CAN frame (hereinafter also referred to as a "transition request frame Fw") including request information Rw requesting a transition to normal mode.

[0153] When the device control unit 27 creates the transition request frame Fw, it checks the CAN-ID of the other device E2 that is to be transitioned to the normal mode by referring to the ID table in the storage unit 13. Then, the device control unit 27 includes the CAN-ID in the created transition request frame Fw and outputs it to the relay unit 11.

[0154] When the relay unit 11 receives the transition request frame Fw from the device control unit 27, it uses the routing table as described above to output the transition request frame Fw to the destination bus.

[0155] When the other device E2 receives the transition request frame Fw from the vehicle-mounted relay device 101, it transitions to the normal mode.

[0156] More specifically, for example, when another device E2 operating in power saving mode receives a transition request frame Fw from the vehicle-mounted relay device 101, it checks whether its own CAN-ID is included in the transition request frame Fw.

[0157] The other device E2 operating in the power saving mode discards the transition request frame Fw that does not include its own CAN-ID. On the other hand, when the other device E2 operating in the power saving mode receives the transition request frame Fw that includes its own CAN-ID, it activates a power supply IC (Integrated Circuitry) (not shown) provided in the other device E2 in accordance with the request information Rw included in the transition request frame Fw, and transitions to the normal mode. As a result, the other device E2 communicates with other devices in the in-vehicle communication system 301 using the output voltage of the power supply IC.

[0158] <Transition to power saving mode> When the device control unit 27 determines that the condition G2 is satisfied, the device control unit 27 transitions the other device E2 from the normal mode to the power saving mode. Below, we will explain the process that the device control unit 27 performs to transition the other device E2 from the normal mode to the power saving mode when an abnormality occurs in the first power supply 61, which is an example of the condition G2.

[0159] More specifically, for example, when the device control unit 27 receives abnormality detection information from the power management unit 22, it creates a CAN frame (hereinafter also referred to as a "transition request frame Fs") including request information Rs requesting a transition to a power saving mode.

[0160] When the device control unit 27 creates the transition request frame Fs, it checks the CAN-ID of the other device E2 to be transitioned to the power saving mode by referring to the ID table in the storage unit 13. Then, the device control unit 27 includes the CAN-ID in the created transition request frame Fs and outputs it to the relay unit 11.

[0161] When the relay unit 11 receives the transition request frame Fs from the device control unit 27, it uses the routing table as described above to output the transition request frame Fs to the destination bus.

[0162] When the other device E2 operating in the normal mode receives the transition request frame Fs from the vehicle-mounted relay device 101, it checks whether or not its own CAN-ID is included in the transition request frame Fs.

[0163] For example, another device E2 operating in normal mode discards a transition request frame Fs that does not include its own CAN-ID. On the other hand, when another device E2 operating in normal mode receives a transition request frame Fs that includes its own CAN-ID, it transitions to the power saving mode in accordance with the request information Rs included in the transition request frame Fs.

[0164] The operation mode of the other device E2 may be configured not to include the power saving mode. In this case, the device control unit 27 in the in-vehicle relay device 101 does not have a function to transition the other device E2 from the normal mode to the power saving mode, and maintains the operation mode of the other device E2 in the normal mode even if an abnormality occurs in the first power supply 61.

[0165] [Operation Flow] Next, the operation flow of each device in the in-vehicle communication system 301 according to the embodiment of the present disclosure will be described with reference to the drawings.

[0166] 6 to 8 are flowcharts illustrating an example of an operation procedure when the in-vehicle relay device 101 performs transition processing according to an embodiment of the present disclosure. Figures 6 to 8 show the operation when the in-vehicle relay device 101 transitions the evacuation-related devices to the evacuation driving mode and transitions the other device E1 to the power saving mode.

[0167] 6 to 8, first, the vehicle-mounted relay device 101 performs a measurement process to measure the output voltage of the first power source 61 (step S101).

[0168] Next, the vehicle relay device 101 checks whether the measured voltage value Va is less than the threshold value Th1 (step S102).

[0169] If the measured voltage value Va is equal to or greater than the threshold value Th1 (NO in step S102), the vehicle relay device 101 measures the output voltage of the first power source 61 at the timing of the next measurement process (step S101).

[0170] On the other hand, if the measured voltage value Va is less than the threshold value Th1 (YES in step S102), the vehicle relay device 101 determines that an abnormality has occurred in the first power supply 61 (step S103).

[0171] Next, the in-vehicle repeater 101 performs power supply switching control to switch the power supply source of each device in the in-vehicle communication system 301 from the first power supply 61 to the second power supply 62. For example, as described above, the in-vehicle repeater 101 switches the state of the power supply relay 81A from the on state to the off state, and switches the state of the power supply relay 81B from the off state to the on state (step S104).

[0172] Next, the in-vehicle relay device 101 transitions the evacuation-related device to the evacuation travel mode. For example, as described above, the in-vehicle relay device 101 creates a transition request frame FA including the CAN-ID of the evacuation-related device and request information R1 requesting transition to the evacuation travel mode, and outputs the transition request frame FA to the destination bus (step S105).

[0173] Next, the vehicle relay device 101 checks whether the remaining amount of the second power source 62 is less than the threshold value Th2 (step S106).

[0174] Then, if the remaining power of the second power source 62 is less than the threshold value Th2 (YES in step S106), the vehicle relay device 101 decides to transition the other device E1 to a stop mode in which power supply from the second power source 62 is stopped (step S107).

[0175] Next, the vehicle-mounted relay device 101 outputs a transition request frame FB including the CAN-ID of the other device E1 and request information R2 requesting transition to the stop mode to the destination bus (step S108).

[0176] Next, the vehicle-mounted relay device 101 waits for the arrival of a response frame F2 from the other device E1 (NO in step S109), and when it receives the response frame F2 (YES in step S109), it switches the control relay 91 connected to the other device E1 from the on state to the off state (step S110).

[0177] Next, the vehicle relay device 101 waits for the arrival of operation information M1 indicating the operation mode of each vehicle device 201 from the vehicle device 201 (NO in step S111), and upon receiving the operation information M1 (YES in step S111), stores the received operation information M1 in the memory unit 13 (step S112).

[0178] Next, the vehicle relay device 101 receives and stores the operation information M1 (steps S111 and S112) until a certain time, for example, a predetermined period H, has elapsed since outputting the transition request frame FA (NO in step S113).

[0179] Then, when a predetermined period H has elapsed since the vehicle relay device 101 output the transition request frame FA (YES in step S113), the vehicle relay device 101 creates equipment status information P1 indicating the status of each of the evacuation-related equipment and other equipment E1 based on the operation information M1 stored in the memory unit 13 (step S114).

[0180] Next, the vehicle relay device 101 performs notification processing N1 to transmit the created equipment status information P1 to the group of vehicle equipment in the vehicle communication system 301 (step S115), and receives new operation information M1 from each vehicle equipment 201 and stores the operation information M1 (steps S111 and S112) until a certain time has elapsed since the last notification processing N1 was performed (YES in step S113).

[0181] Then, after a certain time has elapsed since the previous notification process N1 was performed (YES in step S113), the vehicle-mounted relay device 101 creates new device status information P1 and performs the notification process N1 (steps S114 and S115).

[0182] On the other hand, if the remaining power of the second power source 62 is equal to or greater than the threshold value Th2 (NO in step S106), the vehicle relay device 101 determines to transition the other device E1 to the sleep mode (step S116).

[0183] Next, the in-vehicle relay device 101 outputs a transition request frame FC including the CAN-ID of the other device E1 and request information R3 requesting transition to the sleep mode to the destination bus (step S117).

[0184] Next, the vehicle-mounted relay device 101 waits for the arrival of a response frame F3 from another device E1 (NO in step S118), and upon receiving the response frame F3 (YES in step S118), waits for the arrival of operation information M1 from each vehicle-mounted device 201 (NO in step S119).

[0185] Then, when the in-vehicle relay device 101 receives the operation information M1 (YES in step S119), the in-vehicle relay device 101 stores the received operation information M1 in the storage unit 13 (step S120).

[0186] Next, the vehicle relay device 101 receives and stores the operation information M1 (steps S119 and S120) until a certain time, for example, a predetermined period H, has elapsed since outputting the transition request frame FA (NO in step S121).

[0187] Then, when a predetermined period H has elapsed since the vehicle relay device 101 output the transition request frame FA (YES in step S121), the vehicle relay device 101 creates equipment status information P1 based on the operation information M1 stored in the memory unit 13 (step S122).

[0188] Next, the in-vehicle relay device 101 performs a notification process N1 to transmit the created device status information P1 to the in-vehicle devices in the in-vehicle communication system 301 (step S123).

[0189] Next, the vehicle relay device 101 checks whether the remaining amount of the second power source 62 is less than the threshold value Th2 (step S124).

[0190] Then, if the remaining power of the second power source 62 is less than the threshold value Th2 (YES in step S124), the vehicle relay device 101 decides to transition the other device E1 to a stop mode in which power supply from the second power source 62 is stopped (step S107).

[0191] On the other hand, if the remaining power of the second power source 62 is equal to or greater than the threshold value Th2 (NO in step S124), the vehicle relay device 101 determines to maintain the operation mode of the other device E1 in sleep mode (step S125), and receives new operation information M1 from each vehicle device 201 and stores the operation information M1 (steps S119 and S120) until a certain time has elapsed since the last notification process N1 was performed (NO in step S121).

[0192] 9 is a diagram illustrating an example of a sequence of processes performed by the in-vehicle relay device 101, the evacuation-related device, and other devices in the in-vehicle communication system according to the embodiment of the present disclosure. FIG. 9 illustrates a process performed by the in-vehicle relay device 101 to transition the other device E1 to the stop mode.

[0193] 9, first, the vehicle relay device 101 measures the output voltage of the first power supply 61. Here, it is assumed that the measured voltage value Va is less than the threshold value Th1 (step S201).

[0194] Next, the vehicle relay device 101 determines that an abnormality has occurred in the first power supply 61 (step S202).

[0195] Next, the vehicle-mounted relay device 101 performs power supply switching control to switch the power supply source of each device in the vehicle-mounted communication system 301 from the first power supply 61 to the second power supply 62 (step S203).

[0196] Next, the vehicle relay device 101 transmits to the evacuation-related device a transition request frame FA including the CAN-ID of the evacuation-related device and request information R1 requesting transition to the evacuation travel mode (step S204).

[0197] Next, the evacuation-related device transitions to the evacuation travel mode in accordance with the request information R1 included in the transition request frame FA received from the vehicle-mounted relay device 101 (step S205).

[0198] Next, the evacuation-related device transmits a response frame F1 indicating that the transition request frame FA has been received to the vehicle-mounted relay device 101 (step S206).

[0199] Next, the vehicle-mounted relay device 101 calculates the remaining capacity of the second power source 62 and checks whether the calculated remaining capacity is less than the threshold value Th2. Here, it is assumed that the vehicle-mounted relay device 101 checks that the calculated remaining capacity is less than the threshold value Th2 (step S207).

[0200] Next, the vehicle-mounted relay device 101 determines to transition the other device E1 to the stop mode (step S208).

[0201] Next, the vehicle-mounted relay device 101 transmits to the other device E1 a transition request frame FB including the CAN-ID of the other device E1 and request information R2 requesting transition to the stop mode (step S209).

[0202] Next, the other device E1 performs a predetermined shutdown operation in accordance with the request information R2 included in the transition request frame FB received from the vehicle-mounted relay device 101, and transitions to the stop mode (step S210).

[0203] Next, the other device E1 transmits a response frame F2 indicating that it has received the transition request frame FB to the vehicle-mounted relay device 101. This operation is included in the shutdown operation (step S211).

[0204] Next, the vehicle relay device 101 switches the state of the control relay 91 connected to the other device E1 from the ON state to the OFF state (step S212). Note that the order of the processes from step S204 to step S206 and the processes from step S207 to step S212 is not limited to the above, and they may be executed in reverse order or in parallel.

[0205] Next, each of the evacuation-related devices and the other devices E1 transmits operation information M1 indicating its own operation mode to the vehicle-mounted relay device 101 (steps S213 and S214).

[0206] Next, the vehicle relay device 101 creates equipment status information P1 indicating the respective states of the evacuation-related equipment and the other equipment E1 after the transition processing based on the operation information M1 received from the evacuation-related equipment and the operation information M1 received from the other equipment E1 (step S215).

[0207] Next, the vehicle-mounted relay device 101 transmits the created device status information P1 to the evacuation-related devices and the other devices E1 (steps S216 and S217).

[0208] Next, the evacuation-related devices and other devices E1 refer to the device status information P1 received from the vehicle-mounted relay device 101 to recognize the status of the other vehicle-mounted devices 201 (steps S218 and S219).

[0209] In the in-vehicle relay device 101 according to the embodiment of the present disclosure, the processing unit 12 is configured to include multiple units, specifically, a detection unit 21, a power management unit 22, a measurement unit 23, a transition processing unit 24, a switching control unit 25, a state notification unit 26, and an equipment control unit 27, but this is not limited to this. The processing unit 12 may include some of the multiple units, and a device other than the in-vehicle relay device 101 in the in-vehicle network 401 may include the remaining units of the multiple units. Furthermore, a device other than the in-vehicle relay device 101 in the in-vehicle network 401 may be configured to include the multiple units.

[0210] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to transmit a transition request frame FA to the evacuation-related device as a process for transitioning the evacuation-related device to the evacuation driving mode during the transition process, but this is not limited to this. Instead of the transition request frame FA, the in-vehicle relay device 101 may be configured to transmit a CAN frame to the evacuation-related device indicating that the state of the first power supply 61 is abnormal and that transition to the evacuation driving mode is recommended. In this case, for example, upon receiving the CAN frame from the in-vehicle relay device 101, the evacuation-related device determines whether to transition to the evacuation driving mode.

[0211] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to transmit a transition request frame FB to the other device E1 as a process for transitioning the other device E1 to the stop mode in the transition process, but this is not limited to this. Instead of the transition request frame FB, the in-vehicle relay device 101 may be configured to transmit a CAN frame to the other device E1 indicating that the state of the first power supply 61 is abnormal and that transition to the stop mode is recommended. In this case, for example, upon receiving the CAN frame from the in-vehicle relay device 101, the other device E1 determines whether to transition to the stop mode.

[0212] In addition, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the power supply relay 81 and the control relay 91 are configured to be provided outside the in-vehicle relay device 101, but this is not limited to this. The in-vehicle relay device 101 may be configured to include one or both of the power supply relay 81 and the control relay 91.

[0213] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to measure the second power source 62 and, in the transition process, determine whether or not to transition the other device E1 to the stop mode based on the measurement results, but this is not limited to this. The in-vehicle relay device 101 may be configured to transition the other device E1 to the stop mode when it determines that an abnormality has occurred in the first power source 61 without measuring the second power source 62.

[0214] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the power saving mode of the other device E1 is configured to include a stop mode and a sleep mode, but this is not limited to this. The power saving mode of the other device E1 may be configured not to include the stop mode. In this case, for example, if the in-vehicle relay device 101 determines that an abnormality has occurred in the first power source 61, the in-vehicle relay device 101 transitions the other device E1 to the sleep mode regardless of the remaining charge of the second power source 62. Alternatively, the power saving mode of the other device E1 may be configured not to include the sleep mode. In this case, for example, if the in-vehicle relay device 101 determines that an abnormality has occurred in the first power source 61, the in-vehicle relay device 101 transitions the other device E1 to the stop mode regardless of the remaining charge of the second power source 62.

[0215] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to transmit device status information P1 indicating the respective states of the evacuation-related devices and other devices E1 after the transition process to the in-vehicle device group in the in-vehicle communication system 301, but this is not limited thereto. The in-vehicle relay device 101 may also be configured not to transmit the device status information P1 to the in-vehicle device group.

[0216] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the first power source 61 includes a DC / DC converter as a power conversion device, and the second power source 62 does not include a power conversion device, but this is not limited to this. Neither the first power source 61 nor the second power source 62 may be configured to include a power conversion device. Alternatively, both the first power source 61 and the second power source 62 may be configured to include a power conversion device.

[0217] Furthermore, in the in-vehicle communication system 301 according to the embodiment of the present disclosure, the in-vehicle relay device 101 is configured to determine the abnormality operation mode of each of the evacuation-related devices and the other devices E1 using a correspondence table Tb indicating the correspondence between the in-vehicle devices 201 and the abnormality operation mode during the transition process. However, this is not limited to this. The evacuation-related devices and the other devices E1 may be configured to store mode information in their own memory indicating the abnormality operation mode to which they should transition when an abnormality occurs in the first power source 61. In this case, for example, when the in-vehicle relay device 101 determines that an abnormality has occurred in the first power source 61, it transmits request information to the evacuation-related devices and the other devices E1 requesting a transition to the abnormality operation mode. Then, upon receiving the request information from the in-vehicle relay device 101, the evacuation-related devices and the other devices E1 transition to the abnormality operation mode indicated by the mode information in their own memory.

[0218] Furthermore, although the in-vehicle communication system 301 according to the embodiment of the present disclosure has been described as including a plurality of control relays 91 provided corresponding to the plurality of in-vehicle devices 201, the present disclosure is not limited to this. In the in-vehicle communication system 301, some or all of the plurality of control relays 91 may be replaced with semiconductor switches. In this case, when transitioning the other device E1 to the stop mode, the switching control unit 25 in the in-vehicle relay device 101 switches the semiconductor switch provided corresponding to the other device E1 from the on state to the off state.

[0219] The above-described embodiments should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is defined by the claims, not by the above description, and is intended to include all modifications within the meaning and scope of the claims.

[0220] Each process (each function) in the above-described embodiments is realized by a processing circuit including one or more processors. The processing circuit may be configured as an integrated circuit or the like that combines one or more memories, various analog circuits, and various digital circuits in addition to the one or more processors. The one or more memories store programs (instructions) that cause the one or more processors to execute each of the processes. The one or more processors may execute each of the processes according to the program read from the one or more memories, or may execute each of the processes according to a logic circuit designed in advance to execute each of the processes. The processor may be any of various processors suitable for computer control, such as a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), a DSP (Digital Signal Processor), an FPGA (Field Programmable Gate Array), and an ASIC (Application Specific Integrated Circuit). Note that the physically separated processors may cooperate with each other to execute the processes. For example, the processors installed in the physically separated computers may cooperate with each other via a network such as a LAN (Local Area Network), a WAN (Wide Area Network), or the Internet to execute the processes. The program may be installed into the memory from an external server device or the like via the network, or may be distributed in a state stored on a recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a semiconductor memory, and then installed into the memory from the recording medium.

[0221] The above description includes the following additional features: [Supplementary Note 1] A management program used in an in-vehicle management system that manages the operation modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, wherein a plurality of switching units that switch between power supply from the first power source and power supply from the second power source are provided corresponding to the plurality of in-vehicle devices, and the management program causes a computer to function as: an acquisition unit that acquires power source information indicating a state of the first power source; and a transition processing unit that, when the state indicated by the power source information acquired by the acquisition unit indicates an abnormality related to the first power source, performs transition processing to transition one or more first in-vehicle devices that are the in-vehicle devices to an evacuation running mode for causing a vehicle in which the in-vehicle management system is installed to evacuation running, and to transition one or more second in-vehicle devices that are other than the first in-vehicle devices to a power saving mode for executing a power saving operation of the second in-vehicle devices.

[0222] [Supplementary Note 2] An in-vehicle management system that manages the operating modes of each of a plurality of on-vehicle devices that operate using power supplied from a first power source or a second power source, wherein a plurality of switching units that switch whether to supply power to the on-vehicle devices are provided corresponding to each of the plurality of on-vehicle devices, the in-vehicle management system comprising: a processing circuit that acquires power source information indicating a state of the first power source, and when the state indicated by the acquired power source information indicates an abnormality related to the first power source, performs transition processing that transitions one or more first on-vehicle devices that are the on-vehicle devices to an evacuation running mode for causing a vehicle in which the in-vehicle management system is installed to perform an evacuation running, and that transitions one or more second on-vehicle devices that are other on-vehicle devices than the first on-vehicle devices to a power saving mode for executing power saving operation of the second on-vehicle devices.

[0223] REFERENCE SIGNS LIST 1 vehicle 2 CAN bus 3, 4, 5 power line 11 relay unit 12 processing unit 13 storage unit 21 detection unit 22 power supply management unit 23 measurement unit 24 transition processing unit 25 switching control unit 26 status notification unit 27 device control unit 51 power supply unit 61 first power supply 62 second power supply 71 battery 72 DC / DC converter 81 power supply relay 91 control relay 101 vehicle-mounted relay device 201 vehicle-mounted device 301 vehicle-mounted communication system 401 vehicle-mounted network Tb correspondence table

Claims

1. An in-vehicle management system that manages the operating modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, wherein a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices are provided corresponding to each of the plurality of in-vehicle devices, and the in-vehicle management system comprises: an acquisition unit that acquires power source information indicating the state of the first power source; and a transition processing unit that performs transition processing, when the state indicated by the power source information acquired by the acquisition unit indicates an abnormality related to the first power source, to transition one or more first in-vehicle devices that are the in-vehicle devices to an evacuation running mode for causing a vehicle in which the in-vehicle management system is installed to an evacuation running mode, and to transition one or more second in-vehicle devices that are other in-vehicle devices different from the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

2. The vehicle management system according to claim 1, wherein the power saving mode includes a stop mode in which the power supply to the second vehicle equipment is stopped by turning off the switching unit corresponding to the second vehicle equipment.

3. The vehicle management system according to claim 2, further comprising a measurement unit that measures the second power supply, and the transition processing unit determines whether or not to transition the second vehicle equipment to the stop mode based on the measurement results of the measurement unit during the transition processing.

4. The vehicle management system of any one of claims 1 to 3, further comprising a status notification unit that transmits information indicating the status of each of the first vehicle equipment and the second vehicle equipment after the transition processing by the transition processing unit to the multiple vehicle equipment.

5. An on-board management system according to any one of claims 1 to 4, wherein the first power source includes a power conversion device, and the second power source does not include the power conversion device.

6. An in-vehicle management system according to any one of claims 1 to 5, wherein the transition processing unit determines the operating mode of each of the first in-vehicle device and the second in-vehicle device using correspondence information indicating the correspondence between the in-vehicle device and the operating mode of the in-vehicle device when the abnormality occurs during the transition processing.

7. A management method in an in-vehicle management system that manages the operating modes of each of a plurality of in-vehicle devices that operate using power supplied from a first power source or a second power source, wherein a plurality of switching units that switch whether to supply power from the first power source or the second power source to the in-vehicle devices are provided corresponding to each of the plurality of in-vehicle devices, and the management method includes the steps of: acquiring power source information indicating the state of the first power source; and, when the state indicated by the acquired power source information indicates an abnormality related to the first power source, performing transition processing to transition one or more first in-vehicle devices that are the in-vehicle devices to an evacuation running mode for causing a vehicle in which the in-vehicle management system is installed to perform an evacuation running, and transitioning one or more second in-vehicle devices that are other in-vehicle devices than the first in-vehicle devices to a power saving mode for executing power saving operation of the second in-vehicle devices.

Images