Mitsubishi Electric Corporation

Mitsubishi Denki Kabushiki Kaisha

Toshinori Matsui

Takashi Maeda

Takanori Matsunaga

Hiroshi Fujioka

Hideyuki Tanaka

Masahiko Kurishige

Madoka Baba

Toru Morita

Hiroshi Okuyama

Kiyohiro Morita

Koji Shimamura

Hiroyuki Saito

Kentaro Ishihara

Hiroyuki Kozuki

Masayuki Maruyama

Takashi Kaneyama

Kazunori Washio

Mikiya Yoshida

Toshiki Ikegashira

Hiroshi Hujioka

An intrusion detection system comprises: a monitor listing for setting a rule(s) on which determination is performed whether communications data is normal or abnormal in every one of respective states; an intrusion detection unit for acquiring communications data flowing through a communications line(s), and for performing, by comparing the communications data with the monitor listing, determination on the presence or absence of abnormality in the communications data; a state management unit for acquiring a state of a host motor vehicle and/or that of a control device, and for changing over the monitor listing for use in the intrusion detection unit; and a processing time management unit for giving rise to increasing a processing time(s) of the intrusion detection unit in accordance with processing content of the intrusion detection unit.

Intrusion detection system

Provided are a functional element holder to hold a plurality of functional elements for executing the control and also backup functional elements, an abnormality detector to detect an abnormality caused by a security attack via the communication network, a processing target identifying circuitry to identify, as processing targets, a functional element in which the abnormality is detected and a related functional element related to the abnormality among the plurality of functional elements, and a functional element switcher to switch control functions of the functional elements identified as the processing targets to corresponding respective backup functional elements to cause an execution. The processing target identifying circuitry is configured to extract, as the related functional element, a functional element that is determined to have an operating status having a similarity to that of the functional element in which the abnormality is detected.

Control device and control method

A first processing environment includes: a control processing unit configured to execute control processing on a control subject; a first storage area for storing data for controlling the control subject; and a verification determination unit. A second processing environment includes: a second storage area for storing an expected value; a verification value generation unit; and a verification execution unit. The verification value generation unit generates the verification value before the control processing is stopped. The verification execution unit executes comparison processing of comparing the expected value and the verification value before the control processing is activated. When the comparison result indicates a verification success, the verification determination unit executes determination processing of determining that the control processing is to be activated, and executes determination processing of determining that activation of the control processing is to be stopped when the comparison result indicates a verification failure.

A master control device connected to a plurality of slave control devices via a network is configured to include an own local time counted by a counter unit, in a message and transmit the message to the slave control devices by the timing synchronization unit, calculate a difference between a reception time of a message transmitted from the slave control device, which has received the message, at a timing corrected in accordance with the local time and a pre-calculated message reception predicted time by a timing synchronization determination unit, calculate a correction amount for timing of the slave control devices using the difference by a timing synchronization correction unit, add the correction amount to the local time, include the local time in a message, and transmit the message to the slave control devices.

Master control device and synchronous communication system using same

A first control device includes a data processing controller that generates and transfers information indicating a current operating condition of the first control device and information indicating a current operating condition of a vehicle, and transfers a most recent version of a security program, to which the program is to be updated, to a second control device, while the second control device, having received the most recent version of the security program from the first control device, specifies the current operating condition of the vehicle on the basis of the information obtained from the first control device, and when the specified current operating condition matches a vehicle operating condition in which processing for updating the program to the most recent version of the security program is possible, executes processing for updating the program to the most recent version of the security program.

Program update control system and program update control method

Each of a plurality of type 2 nodes stores one of divisional programs, which are created as parts of a rewriting program for rewriting a program for determining the operation of a type 1 node, by dividing the rewriting program in a manner that allows a partial overlap in data between a divisional program stored in the type 2 node and a divisional program stored in another type 2 node. When divisional programs to the type 1 node are transmittable, each type 2 node transmits the divisional program stored in its own node to the type 1 node via a first network. The type 1 node rewrites a part that corresponds to the received divisional program, and uses the overlapping data to verify whether or not the divisional programs rewritten are the same.

Program rewriting system and program rewriting method

Before a communication control device ECU falls into a sleep state or a power-off state, a substitution request is transmitted to an ECU, among substitute candidate devices ECU to ECU, that is determined by a substitute transmission acceptability determining unit as being capable of taking over the communication control device. A substitution-capable processing load quantity, a substitution-capable process importance level, or a failure determination result of each of the ECUs is used as determination criteria when the substitute transmission acceptability determining unit of the ECU determines a substitute device, and the determination is carried out in an order that takes into consideration the process importance level of each of the ECUs during travelling or at a standstill, to prevent failures in a network or abnormal behaviors of a vehicle.

Control device switching system

Provided is a cell capacity adjusting device for reducing fluctuations in state of charge (SOC) among cells of a battery pack, which is formed by connecting a plurality of cells-in series, during suspension of operation of electrically-powered equipment whose main power source is the battery pack. From among the plurality of cells-, one or a plurality of cells having a voltage value equal to or higher than a cell capacity adjustment target voltage are selected. By the selected cells, an intermittent operation unit, which operates even during the suspension of operation of the electrically-powered equipment, is caused to perform an intermittent operation. Through repetition of the intermittent operation, voltage values of the selected cells are decreased. Thus, fluctuations in state of charge (SOC) among cells are reduced without unnecessarily discharging battery stored energy of the battery pack

Cell capacity adjusting device

There are included an opposite-side transmitter unit for transmitting the same messages to plural communication paths, respectively; and a host-side receiver unit for receiving the messages flowing through the plural communication paths, respectively; wherein, the receiver unit, compares the plural received messages to perform verification using error-detection code on any one of the messages when they are identical, or on all of the messages when there is a mismatch; and when detected error of message due to error inclusion or reception failure, discards all of the messages received at that time, and calculates an accumulated number of error detections for each of the communication paths through which the messages has been transmitted, so as to stop receiving the control-related message, when the number of error detections has reached a given number, from the communication path where the number of error detections has reached the given number.

Communication device using plurality of communication paths

Provided is a control system capable of reducing cost while securing reliability of original processing of a microcomputer. An engine control device and a meter control device each store a control amount calculating procedure for calculating a control amount regarding a significant control to be performed on the control target of the engine control device. The engine control device compares a control amount regarding the significant control calculated by the engine control device, and a control amount regarding the significant control calculated by the meter control device, to thereby control the control target of the engine control device based on a result of the comparison.

Distributed control system for monitoring a significant control

In the control system having plural control devices that are connected to a network, and control objects different from each other, an engine control device, a meter control device, and an AT control device, which are second control devices store a control volume computation procedure for computing the control volume of a pre-determined control among controls made by the engine control device which is a first control device, therein. The engine control device compares the control volume related to the pre-determined control computed by the engine control device with the control volume related to the pre-determined control computed by the meter control device. If a comparison result is different, the engine control device again compares the control volume with the control volume related to the pre-determined control computed by the AT control device, and controls an object to be controlled by the engine control device according to the comparison result.

Control system

Distributed significant control monitoring system and device with transmission synchronization

A transmitter node includes a first data transmission portion that transmits data in a first transmission time slot on a first transmission channel and a second data transmission portion that transmits the same transmission data from the first data transmission portion in a second transmission time slot on a second transmission channel that does not superimpose in time on the first transmission time slot. A receiver node includes a first data reception portion that receives data transmitted from the transmitter node in a first reception time slot superimposing in time on the first transmission time slot on the first transmission channel and a second data reception portion that receives transmission data transmitted from the second data transmission portion in a second reception time slot on the second transmission channel superimposing in time on the second transmission time slot. Data transmission and reception can be thus ensured even at a trouble.

Time division multiple access communication network system

System for detecting stability/instability of behavior of a motor vehicle upon occurrence of tire slip or lock. State of the motor vehicle is determined on the basis of an alignment torque (Ta) applied from a road and a side slip angle (&#x3b2;). By taking advantage of such torque/slip-angle characteristic that although the alignment torque is proportional to a side slip angle when the latter is small, the alignment torque becomes smaller as the side slip angle increases, a normal value is determined from a straight line slope and the side slip angle in a region where the latter is small. Unstable behavior of the motor vehicle is determined when deviation of actual measured value from the normal value increases. Further, unstable state is determined when the slope of the alignment torque for the slip angle departs significantly from that of approximate straight line slope.

Growing community of inventors

Tokyo, Japan

Toshinori Matsui