Electronic Control Unit Abnormality Detection via Dual-Network State Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network configurations in ring-type topologies, such as Ethernet communication networks, face challenges in accurately determining network abnormalities due to potential misinterpretation of reception interruptions, which can lead to erroneous conclusions about network disconnections, especially when switches are unable to transmit frames due to operational states like resetting or non-activation.
Innovation Solution
The implementation of an electronic control unit with a relay device connected via two networks, where an interruption determination module assesses reception interruptions and an abnormality determination module considers both the presence and content of state data from a secondary network to accurately diagnose network abnormalities, thereby improving detection accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a ring-type topology is used for Ethernet communication, then communication path redundancy is improved, but abnormality detection accuracy deteriorates due to false positives from reception interruptions
Solution Approach 1:
The patent introduces a second network as an intermediary communication channel between ECUs. When a reception interruption occurs on the first network (ring-type Ethernet), the system uses the second network to verify whether the ECU is actually abnormal or merely experiencing transmission issues. This intermediary channel resolves the contradiction by providing a backup verification path that prevents false abnormality detection while maintaining the ring topology's redundancy benefits.
Solution Approach 2:
The system implements feedback mechanisms where ECUs periodically report their operational status through state data on the second network. When a reception interruption is detected on the first network, this feedback information from the second network helps determine whether the interruption was due to actual ECU abnormalities or temporary communication issues, thereby improving abnormality detection accuracy without compromising communication path redundancy.
2Measurement precision
If state data checking is added to verify ECU operational status, then abnormality detection accuracy is improved, but system complexity increases
Solution Approach 1:
The second network serves multiple functions: it acts as a verification channel for abnormality detection, a backup communication path, and a status monitoring channel through state data exchange. By making the second network multi-functional, the patent improves abnormality detection accuracy without proportionally increasing system complexity, as the same infrastructure supports multiple diagnostic and communication needs.
Solution Approach 2:
ECUs automatically generate and transmit state data representing their operational status through the second network without requiring external monitoring systems. This self-service mechanism allows the system to verify ECU status and improve abnormality detection accuracy using the ECUs' own resources and information, minimizing the need for additional complex monitoring infrastructure.
3Difficulty of detecting and measuring
If reception interruption detection is implemented, then network abnormality detection capability is improved, but false positive rate increases when ECUs are resetting or non-active
Solution Approach 1:
The system performs preliminary checks using the second network before concluding that a reception interruption on the first network indicates a true abnormality. By预先 verifying ECU operational status through state data on the second network, the system can distinguish between genuine network abnormalities and temporary issues during ECU resetting or non-active states, thereby reducing false positives while maintaining detection capability.
Solution Approach 2:
The second network acts as a cushioning verification layer that prevents false abnormality detections. When reception interruptions occur on the first network, the state data mechanism on the second network provides a buffer that absorbs false positives by confirming whether the ECU is actually operational, thus cushioning against erroneous abnormality conclusions while preserving the ability to detect true network issues.
Data Source
AI summary
An electronic control unit includes a relay device that is connected via a first network with a different relay device included in a different electronic control unit to relay a frame via the first network. It is determined whether a reception interruption has occurred. The reception interruption signifies that at least one predetermined frame scheduled to be transmitted from the different relay device is not received within a predetermined time via the first network. In response to the reception interruption being determined to have occurred, it is determined whether an abnormality has occurred in the first network based on at least one of (i) a presence or absence of reception of a state data representing a state of the different electronic control unit from the different electronic control unit via a second network within a fixed time, and (ii) a content of the state data.