In-Vehicle Network Synchronization Node Selection for Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In electric vehicle control networks using FlexRay, if a synchronization execution node breaks down, communication of time synchronous information becomes impossible, leading to a state where ECUs cannot perform time synchronization, resulting in communication failure and potential unsafe operation of the vehicle.
Innovation Solution
Selecting an electronic control unit (ECU) that performs critical control functions, such as the inverter control ECU or steering control ECU, as the synchronization execution node to ensure that if it breaks down, the vehicle cannot run, thereby preventing unsafe operation and maintaining communication within the in-vehicle network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If any ECU is selected as the synchronization execution node, then time synchronous communication can be established among ECUs, but if the selected ECU breaks down, the vehicle may continue running in an unsafe state
Solution Approach 1:
The patent applies preliminary action by pre-selecting only ECUs that perform critical control functions as synchronization execution nodes. This preliminary selection ensures that only ECUs whose failure would prevent vehicle operation can serve as synchronization nodes, thereby preventing the harmful state where the vehicle continues running unsafely after a synchronization node failure.
Solution Approach 2:
The patent changes the selection parameter from any arbitrary ECU to specifically those ECUs performing critical control functions. This parameter change ensures that the synchronization execution node's failure mode aligns with vehicle safety requirements - the vehicle cannot run if the synchronization node fails, preventing unsafe operation states.
2Reliability
If a ECU performing critical control functions is selected as the synchronization execution node, then vehicle safety is improved, but the system complexity increases due to stricter selection criteria
Solution Approach 1:
The patent simplifies the selection complexity by changing the selection parameter to a clear, objective criterion: ECUs performing critical control functions. This parameter change provides a straightforward selection rule that reduces decision complexity while ensuring safety, as critical control ECUs are easily identifiable by their function.
Solution Approach 2:
The system uses the ECU's own functional characteristics (whether it performs critical control functions) as the selection criterion. This self-service approach allows the ECU to qualify for synchronization node status based on its inherent functionality rather than requiring external assignment, simplifying the selection process.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In order to prevent an automobile from keeping running in an unsafe state when communication via an in-vehicle network becomes impossible, the present invention provides an in-vehicle network in which a synchronization execution node is selected from electronic control units which perform electronic control on the running or power of the automobile, among respective electronic control units.