Vehicle Control System Network Fault Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing vehicle control system for hybrid vehicles has a low utilization rate of communication capacity and increased energy consumption due to redundant data transmission over two CAN networks, with limited ability to handle faults effectively, leading to potential unsafe vehicle operation when the first communications network fails.

Innovation Solution

The system includes a management controller and a motor drive controller that detect faults in the first communications network, causing the motor drive controller to stop the drive motor and transmit fault information via the second network, allowing the management controller to switch all communication to the second network, ensuring safe operation by using the internal combustion engine alone when a fault occurs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the same data is transmitted over both the first communications network and the second communications network to ensure real-time information is available, then the reliability of travel control is improved, but the utilization rate of communication capacity deteriorates and energy consumption increases

Engineering Contradiction:
Improvereliability of travel controlVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent segments the communication data into two categories: travel control data transmitted only over the first communications network, and comfort improvement data transmitted over both networks. This segmentation allows critical control data to be transmitted efficiently without redundancy, while non-critical data can be redundantly transmitted for reliability, thereby reducing overall energy consumption while maintaining system reliability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different transmission strategies to different types of data based on their quality requirements. Travel control data receives high-priority single-network transmission for efficiency, while comfort improvement data receives redundant dual-network transmission for reliability. This local quality differentiation optimizes the balance between energy consumption and system reliability

Inventive Principle:
Principle #3Local quality

2Reliability

If the same data is transmitted over both the first communications network and the second communications network, then the reliability of travel control is improved, but the utilization rate of communication capacity deteriorates

Engineering Contradiction:
Improvereliability of travel controlVSAvoidutilization rate of communication capacity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent divides communication data into essential travel control data and optional comfort improvement data, transmitting the former only over the first network and the latter over both networks. This segmentation maximizes the utilization rate of the first communications network by eliminating redundant transmissions of critical data, while maintaining reliability through selective redundancy

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system dynamically adjusts data transmission strategies based on network conditions and data priority. When the first communications network is available, travel control data is transmitted exclusively over it for optimal utilization, while comfort data may be transmitted over both networks, thereby adaptively optimizing communication capacity utilization

Inventive Principle:
Principle #15Dynamics

3Productivity

If the motor drive controller continues to operate the drive motor when the first communications network becomes faulty, then the productivity is maintained, but the reliability deteriorates due to potential unsafe operation

Engineering Contradiction:
ImproveproductivityVSAvoidreliability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements preliminary anti-action by having the motor drive controller detect faults in the first communications network and proactively stop the drive motor before unsafe operation can occur. This preventive approach prioritizes reliability by eliminating the risk of unsafe operation, while the system can later resume productivity through the internal combustion engine

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The system employs feedback mechanisms where the motor drive controller continuously monitors the status of the first communications network and adjusts drive motor operation accordingly. When a fault is detected, the controller receives feedback and stops the drive motor, ensuring reliability while maintaining the ability to resume operation when conditions improve

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10177966B2Vehicle control system, motor drive controller, and management controller
Publication Date: 2019.01.08 HONDA MOTOR CO LTD
  • US10177966B2 patent drawing
  • US10177966B2 patent drawing
  • US10177966B2 patent drawing

AI summary

A vehicle control system includes electronic controllers and first and second communications networks. The electronic controllers control a vehicle including an internal combustion engine and a drive motor. The electronic controllers include a management controller to manage travel control of the vehicle and a motor drive controller to control the drive motor. The first and second communications networks connect the electronic controllers together. The electronic controllers communicate via the first and second communications networks. The motor drive controller is configured to stop the drive motor when it is determined that a fault has occurred in the first communications network and configured to transmit information indicating that the fault has occurred in the first communications network to the management controller via the second communications network. The management controller is configured to control the electronic controllers not to communicate via the first communications network in response to the information.