Half-Duplex Bus Control for Selective Fail-Safe Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication control systems fail to differentiate between control devices requiring fail-safe and non-fail-safe operations when an abnormality occurs, causing vehicles to uniformly enter fail-safe mode, which is not appropriate for all devices.

Innovation Solution

A control device and method that allows for half-duplex communication between devices on a shared bus, enabling devices requiring fail-safe operation to isolate and control the system to ensure safe operation while allowing others to continue normal operation when an abnormality is detected.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the vehicle uniformly enters fail-safe mode when an abnormality occurs in any control device, then the safety of critical systems (engine, brake, steering) is ensured, but the operation of non-critical systems (navigation, multimedia, solar charging) is unnecessarily restricted

Engineering Contradiction:
Improvesafety of critical systemsVSAvoidoperation of non-critical systems
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The control devices are segmented into two distinct categories: first classification (non-critical systems like navigation, multimedia, solar charging) and second classification (critical systems like engine, brake, steering control). This segmentation allows the fail-safe mechanism to be applied selectively only to critical systems when abnormalities occur, preventing unnecessary restrictions on non-critical systems while ensuring safety where required.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The fail-safe operation requirement is applied locally to specific control devices based on their classification. Critical control devices (second classification) are assigned the property of requiring fail-safe operation, while non-critical devices (first classification) are assigned the property of not requiring fail-safe operation. This local quality assignment enables differentiated response to abnormalities based on the specific device affected.

Inventive Principle:
Principle #3Local quality

2Device complexity

If all control devices are connected to the same bus using half-duplex communication, then device complexity and wiring are reduced, but communication reliability deteriorates when one device experiences an abnormality

Engineering Contradiction:
Improvewiring and communication structureVSAvoidcommunication reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The control device according to the invention acts as an intermediary that monitors the communication bus for abnormalities and selectively isolates faulty devices. When an abnormality is detected in a first classification control device, the system uses the half-duplex communication protocol to coordinate with other devices, allowing them to continue normal operation while the faulty device is effectively isolated from causing system-wide disruptions.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If the system maintains normal operation of non-critical systems during abnormalities in first classification devices, then operational continuity is improved, but the risk of propagating abnormalities increases

Engineering Contradiction:
Improveoperational continuityVSAvoidrisk of abnormality propagation
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system implements a feedback mechanism where control devices continuously monitor communication status and abnormality conditions on the bus. When an abnormality is detected in a first classification device, the feedback loop enables other devices to recognize the abnormal condition and adjust their operation accordingly, maintaining normal function while preventing abnormality propagation through coordinated communication control.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12476841B2Control device, communication control method, and storage medium
Publication Date: 2025.11.18 TOYOTA JIDOSHA KK
  • US12476841B2 patent drawing
  • US12476841B2 patent drawing
  • US12476841B2 patent drawing

AI summary

The control device is the first classification of control device in a communication control system including a first classification of control device and one or more second classifications of control devices connected to the same bus as the first classification of control device. The control device includes a transmission and reception unit that transmits or receives a signal via the bus by a half-duplex communication method, and a control unit that prohibits driving of the transmission and reception unit when the occurrence of an abnormality in the own device is detected.