Dual-Bus Vehicle Control Switching for Main Bus Failure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing automated driving control systems face challenges in maintaining reliability due to potential network failures, where the sub ECU's operation can occupy the network, rendering it unusable for the main ECU, and high safety standards require complex and costly design processes.

Innovation Solution

A vehicle control device is designed with a main processing unit, a sub processing unit, separate main and sub buses, and control execution units that switch from main to sub manipulated variables based on preset conditions, allowing for continued automated driving control even if the main bus fails.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the sub ECU and main ECU share the same network, then network resource utilization is improved, but the sub ECU's operation can occupy the network and render it unusable for the main ECU

Engineering Contradiction:
Improvenetwork resource utilizationVSAvoidnetwork availability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent divides the network into two separate physical networks: a main network connecting the main ECU and actuator ECUs, and a sub network connecting the sub ECU and actuator ECUs. This segmentation prevents the sub ECU from occupying the main network while still allowing both ECUs to communicate with the same actuators, thus resolving the contradiction between network resource utilization and network availability.

Inventive Principle:
Principle #1Segmentation

2Reliability

If high safety standards are implemented in the sub ECU design, then system reliability is improved, but the design process becomes complex and costly

Engineering Contradiction:
Improvesystem reliabilityVSAvoiddesign complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies different safety standards to different parts of the system: the main ECU operates with high safety standards on the main network, while the sub ECU operates with lower safety standards on the isolated sub network. Since the sub network is physically separated and cannot interfere with the main network, the system maintains overall reliability without requiring the sub ECU to meet the same high safety standards, thus reducing design complexity and cost.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS12330665B2Vehicle control device
Publication Date: 2025.06.17 DENSO CORP
  • US12330665B2 patent drawing
  • US12330665B2 patent drawing
  • US12330665B2 patent drawing

AI summary

A control execution unit is connected both a main bus and a sub bus, and includes an execution unit and a selection unit. The execution unit performs vehicle control according to a selected manipulated variable being either a main manipulated variable from a main processing unit connected to the main bus or a sub manipulated variable from a sub processing unit connected to the sub bus. The selected manipulated variable is set to the main manipulated variable in an initial state, and the selection unit switches over the selected manipulated variable from the main manipulated variable to the sub manipulated variable when communication performed via the main bus satisfies a preset switchover condition.