In-Vehicle ECU Failure Determination During Partial Network Standby
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In in-vehicle network systems, ECUs without partial network function switch to active state upon receiving a partial network message, leading to erroneous failure determinations when other ECUs with similar functions remain in standby state, causing misinterpretation of system status.
Innovation Solution
An electronic controller with network management function periodically transmits activation notifications, switches to active state upon receiving such notifications, and continues to receive them, while also executing failure determinations on connected ECUs, and stops these determinations when necessary to prevent erroneous switching.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If an ECU without partial network function switches to active state upon receiving a partial network message, then the ECU can communicate with other ECUs, but erroneous failure determinations occur when other ECUs with similar functions remain in standby state
Solution Approach 1:
The ECU performs failure determination based on periodic messages from other ECUs, and when an abnormal state is detected, it switches to standby state and notifies other ECUs. This feedback mechanism ensures that failure determinations are only performed when the ECU is in active state and communication is properly functioning, preventing erroneous determinations when other ECUs are in standby state.
Solution Approach 2:
The ECU dynamically switches between active and standby states based on communication status and failure determination results. When in standby state, the ECU stops performing failure determinations and notifies other ECUs of its state, making the failure determination process adaptive to the current operational state of the ECU and preventing erroneous determinations.
2Reliability
If an ECU continuously performs failure determination on connected ECUs, then system reliability is monitored, but power consumption increases due to unnecessary active state transitions
Solution Approach 1:
The ECU performs failure determination periodically based on receiving periodic messages from other ECUs, rather than continuously. When in standby state, the ECU stops performing failure determinations and only resumes when it receives an activation notification and switches to active state, reducing power consumption while maintaining system monitoring capability.
Solution Approach 2:
The ECU dynamically adjusts its operational state between active and standby based on communication status and failure determination needs. When in standby state, the ECU stops failure determination operations to reduce power consumption, and only performs these operations when in active state, making the power consumption adaptive to the actual monitoring requirements.
3Use of energy by moving object
If an ECU switches to standby state to reduce power consumption, then energy usage decreases, but communication with other ECUs is stopped
Solution Approach 1:
The ECU dynamically switches between active and standby states based on communication status and failure determination results. When an abnormal state is detected or failure determination indicates a problem, the ECU switches to standby state and sends a notification to other ECUs, ensuring that communication is stopped only when necessary for power saving or when system abnormalities are detected.
Solution Approach 2:
The ECU uses feedback from periodic messages and failure determination results to decide when to switch between active and standby states. When communication is normal and no failures are detected, the ECU remains in active state to maintain communication capability. When power saving is needed or abnormalities are detected, it switches to standby state and notifies other ECUs, balancing power consumption and communication capability.
Data Source
AI summary
An electronic controller serves as a second device in an in-vehicle network system. The in-vehicle network system includes a first device, the second device, and a third device each as an electronic controller having a network management function. The first device transmits a periodic message. The second device performs a failure determination based on the periodic message from the first device. The third device has a partial network function. The in-vehicle network system includes a first communication bus connected to the first device, a second communication bus connected to the second device and the third device, and a relay device that relays a message among the communication buses. The second device stops the failure determination when stopping transmission of an NM message, or an activation notification.