Denso Corporation

Masakazu Doi

Mitsuhiro Tokimasa

Takumi Nagaya

Tomohisa Kishigami

Yuzo Harata

Mitsuyoshi Natsume

Sho Nakamura

Naoji Kaneko

Hajime Kikkawa

A relay device is provided. The relay device includes: an acquisition unit acquiring data necessary for an upgrade processing from an upgrading tool, which performs the upgrading processing to an ECU connected to a vehicle-mounted network; a relay unit providing the data, via the vehicle-mounted network, to a target ECU which is subject to the upgrade processing; a suspend instructing unit transmitting, via the vehicle-mounted network, a suspend command which instructs the non-target ECU to shift to a suspend state in which a transmission of other data to the non-target ECU via the vehicle-mounted network is suspended in response to a start of the upgrade processing; and a cancel instructing unit instructing, via the vehicle-mounted network, the non-target ECU to cancel the suspend state when the upgrade processing is completed.

Relay device, electronic control unit, and vehicle-mounted system

A vehicle control device is provided that performs control to suppress a dangerous situation for a vehicle without causing a driver to experience discomfort when an accelerator is erroneously operated, by setting an abnormality judgment threshold for the accelerator operation to a value based on a degree of risk to the vehicle. An accelerator position judgment threshold is set to be lower when risk in the periphery of the vehicle is higher, intermediate when the risk is intermediate, and higher when the risk is lower. When the risk is higher, an abnormality judgment is made upon the accelerator being lightly stepped on, and control is performed to suppress a dangerous situation. As the risk changes to intermediate and lower, the abnormality judgment is made at a greater accelerator position.

Vehicle control device

A safeguard system for a vehicle is provided which works as an unintended operation control system. The safeguard system works to calculate an accelerator-manipulated variable representing a degree to which an accelerator of the vehicle is manipulated. When it is found that the accelerator-manipulated variable has dropped at a given rate and then risen within a preselected rise time period, the safeguard system determines that such an operation is an unintended action and controls an operation of the vehicle such as acceleration or speed of the vehicle to minimize the probability of encountering a hazard to the vehicle.

Safeguard system for vehicle

Code verification is executed with a surveillance target such as an engine ECU or an immobility ECU installed in a vehicle. Failure of the verification indicates that the corresponding ECU may have been replaced. No reply to the verification indicates that the corresponding ECU may have been removed. The failure or no reply causes bus interference through a bus interference generator. Specifically, the bus interference generator generates to circulate, over the bus, a signal interfering with a signal from the ECUs connected with a local area network to disable a plurality of driver/receiver ICs. This interference with the ECUs results in ceasing normal operations and reducing product value of the vehicle.

Growing community of inventors

Obu, Japan

Masakazu Doi