Hitachi Automotive Systems, Ltd.

Hitachi Astemo Ltd.

Hitachi, Ltd.

Tasuku Ishigooka

Fumio Narisawa

Kazuyoshi Serizawa

Tomohito Ebina

Satoshi Otsuka

Tsunamichi Tsukidate

Kohei Sakurai

Tatsuya Horiguchi

Masashi Mizoguchi

Kenichi Osada

Nobuyasu Kanekawa

Takeshi Fukuda

Hideyuki Sakamoto

Yuki Tanaka

Taisetsu Tanimichi

Kazuyoshi Sasazawa

Yuki Horita

Wataru Nagaura

Kouhei Sakurai

Hiroaki Komatsu

Neeraj Suri

Habib Saissi

Thorsten Piper

Stefan Winter

Hidetoshi Ogura

Swarn Singh Rathour

Hiroyuki Nakamura

To appropriately execute a task by an electronic control device including a processor having a plurality of cores. An ECUincludes a multi-core CPU having a plurality of cores that execute a first task that has an execution time that varies depending on a processing amount every predetermined cycle and a second task that is higher in priority than the first task and is prohibited from being interrupted. The second task is set to be inexecutable simultaneously between the plurality of cores. A task allocation unitgenerates a first plan. A diagnosis task planning unitgenerates a second plan. Task processing unitsandexecute the first task based on the first plan. A diagnosis task correction unittimes a delay time of the first task executed by the task processing unitsand, and postpones the second task of the second plan to the subsequent executable timing in accordance with the timed delay time. A diagnosis unitexecutes the second task for each core based on the second plan corrected by the diagnosis task correction unit

Electronic control device

An object of the present invention is to provide a vehicle control device and a vehicle control system capable of further reducing system cost in failure mitigation. The vehicle control device includes a master ECU and one or more client ECUs. The master ECU generates a safety process list on a basis of a predetermined failure operation pattern and transmits the safety process list to each of the client ECUs when detecting a failure of any one of the client ECUs, the safety process list includes one or more safety processes and an execution start time limit corresponding to each of the safety processes, each of the client ECUs switches an operation mode from a normal mode to a failure operation mode in response to reception of the safety process list, and starts execution of each of the safety processes by a corresponding execution start time limit, the failure operation pattern is configured such that each of the safety processes is executed by a client ECU having a memory capacity capable of executing the safety process, and the failure operation pattern is configured such that the same safety process is not executed by a plurality of client ECUs.

Vehicle control device and vehicle control system

An object of the present invention is to provide a technology that enables second control software to continue processing using a peripheral circuit even in a situation where an abnormality related to first control software occurs. An electronic control device includes a memory () that stores the first control software and the second control software, a CPU () that executes the first control software and the second control software, and a peripheral circuit () used by the first control software and the second control software. The memory further includes a first buffer () and a second buffer (). The CPU interrupts at least one of the processing of storing first peripheral transmission information in the first buffer and the processing of transmitting the first peripheral transmission information to the peripheral in a specific situation in which the abnormality related to the first control software occurs.

Provided is a vehicle control device capable of executing control processing by utilizing a power saving execution determination unit that determines a shift to or a release from a normal mode to a power saving mode on the basis of a preset power saving condition, and a power saving execution unit that executes power saving control of the CPU by determining a shift to the power saving mode and stops the power saving control of the CPU by determining a release of the power saving mode. Then, the power saving execution determination unit has a plurality of power saving conditions, determines to shift to the power saving mode in a case where all of the plurality of power saving conditions are satisfied, and determines to release the power saving mode in the case of being changed to a state in which some of the power saving conditions are not satisfied.

Vehicle control device

The computing efficiency of an electronic computing device is improved. HPCstoinclude arithmetic processing units HAto HA, respectively. Each of the arithmetic processing units HAto HAexecutes arithmetic processing in parallel. LPCstoincludes management processing units LBto LB, respectively. Each of the management processing units LBto LBmanages execution of specific processing by an acceleratorwhen each of the arithmetic processing units HAto HAcauses the acceleratorto execute the specific processing, and performs a series of commands for causing the acceleratorto execute the specific processing on a DMA controllerand the accelerator

Electronic computing device having improved computing efficiency

The present disclosure improves usability and stability of a control system while suppressing resource consumption. A control controller according to the present disclosure divides, using partitioning, function groups for which control is ongoing and function groups to be updated, and updates, in accordance with conditions, only the function groups to be updated, thereby updating the required control functions while continuing appropriate control processes.

Vehicle control system for dynamically updating system components

In the present invention, when an abnormality occurs in a task, regardless of whether a critical section is being executed, timeout detection is realized by determining whether the critical section (CS) is necessary for the design in a preset task execution time and a certain period of time to distinguish between necessary interrupt disable and abnormal interrupt disable. A vehicle control device includes task execution means for causing a system to execute a task, and interrupt processing means for performing an interrupt process at the time of execution of the task. A maskable interrupt and a non-maskable interrupt that is commanded to execute after the maskable interrupt are included, the maskable interrupt is commanded to execute during an interrupt disable time, and then the non-maskable interrupt is executed.

This invention detects deviations from design without hindering the real-time nature of interrupt processing, and assists in analyzing the impact of faults caused by unintentional interrupt processing, with the goal of curbing erroneous detection. In order to resolve this problem, this vehicle control device comprises; a deviation determination unitwhich determines if execution timing of an execution body has deviated from design settings, and transitions to a monitoring state; and a run-time verification unitwhich verifies the impact of deviation at timing which differs from that of the interrupt processing.

Fail operational that can guarantee stability of control while suppressing cost increase is difficult. A control controller according to the present invention stores information necessary for recovery in a normal travel mode in time series in a backup, and thus control software can be recovered from the backup in real time if a failure occurs in the system.

Controller

The present invention provides technology for achieving both high responsiveness to an interrupt process and non-interference between control software. This vehicle control device comprises a storage device that stores various programs for controlling a vehicle, and a plurality of computation devices that include a first computation device and a second computation device, and that read a program from the storage device and execute the same. In addition, the storage device includes a first type of computation processing program executed not by time division and a second type of computation processing program executed by time division. The first computation device is configured to execute the first type of computation processing program, and the second computation device is configured to execute the second type of computation processing program.

Vehicle control device and vehicle system

The present invention provides a vehicle control device capable of realizing access authority definitions by the number equal to or greater than the number of access control registers provided in a memory protection device. In the vehicle control device according to the present invention, the whole or a part of a storage device that stores the access authority definitions used by the memory protection device to control the access authorities, is allocated fixedly to a memory area in advance and the rest is allocated dynamically.

The purpose of the present invention is to provide a system such that functions of a vehicle control system can be quickly reconfigured. The present invention is a processing device connected to at least one processing device, wherein during a period in which the one processing device executes a control operation on the basis of a control program installed in the one processing device, the processing device acquires a substitute program for the control program. In another aspect, the present invention is an on-board control system equipped with multiple processing devices, wherein during a period in which one processing device among the multiple processing devices executes a control operation on the basis of a control program installed in the one processing device, another processing device acquires a substitute program for the program in the one processing device.

Processing device and vehicle control system

The purpose of the present invention is to provide a vehicle control technique that enables the safety of function substitution to be increased. This vehicle control device determines whether a substitution was successful by monitoring the operations which follow initiation of the substitution.

The present invention provides a vehicle control apparatus in which a function stop caused by an access conflict when a high load is applied can be suppressed. The vehicle control apparatus according to the present invention determines the occurrence tendency of access conflicts by using a function expressed by the number of times of performing exclusive control on a shared storage area and by the number of the resultant access conflicts.

Vehicle control apparatus

In order to detect and prevent attacks in which the network is infested with unauthorized data to cause malfunction, the invention aims, on the basis of network cycle information, to detect errors and to prevent unauthorized data forwarding in a network system such as a vehicle-mounted network. This network device is provided with a communication unit which receives data, a time management unit which manages the reception time at which data is received, and a control unit which processes data. If, for received data used as a reference, first data is received having the same identifier and a reception interval shorter than a prescribed cycle, the control unit waits to receive data having the same identifier as the first data from the reception time of the received data used as a reference up until the prescribed cycle has elapsed, and if during this interval second data is received having the same identifier as the first data, the control unit determines that an error has occurred and performs cycle abnormality detection processing.

Growing community of inventors

Tokyo, Japan

Tasuku Ishigooka