The present invention is based upon and claims the benefit of the priority of Japanese patent application No. 2019-002832, filed on Jan. 10, 2019, the disclosure of which is incorporated herein in its entirety by reference thereto.
The present invention relates to an in-vehicle control apparatus, an in-vehicle network design apparatus, a communication method, and a program.
In recent years, along with the advancement in self-driving technology and increase in vehicle services, there has been an increasing demand for adding/updating a function of a vehicle in operation after the purchase of the vehicle. This addition/updating of a function can be realized by adding/switching an in-vehicle module or updating vehicle control software. However, since adding/updating a function changes the flow, the bandwidth, the priority level, or the like of a communication performed on an in-vehicle network, there is a demand for a technique for flexibly changing the network when a function is added/updated.
In addition, for example, when OTA (Over The Air) is performed to update vehicle control software, update data is first stored in a certain node in the vehicle and is next distributed to an update target node on an in-vehicle network from the certain node. However, it is not preferable in terms of security that the node distributing the update data and the update target node are able to communicate with each other in a state other than the OTA state. These nodes need to be separated so that these node cannot communicate with each other.
As described above, when a state of a vehicle is changed or a function of the vehicle is updated, a flow, a bandwidth, a priority level, or the like on a vehicle network is changed. Thus, a function of flexibly changing a configuration, a function, a specification, etc. of the network is needed. In response to the above demand, there has been proposed a method in which an SDN (Software Defined Network) is applied to a vehicle.
In an SDN, an SDN controller monitors communications on a network, and when a new communication occurs, a repeater (an SDN switch) on the network queries the SDN controller about a communication processing method. Based on the content of the query, the SDN controller calculates a processing method by performing path calculation or the like and sets the processing method (control information, packet handling rule) in the above repeater. Since the SDN controller comprehensively performs the monitoring, the path calculation, and the setting of the processing contents on the whole network, the SDN flexibly changes the network.
Patent Literature (PTL) 1 discusses checking of the validity of a path setting in a network system, in which the path setting is performed dynamically, within a short time. PTL 1 discloses that the validity of a path setting is checked by simulating an operation of a switch or an operation of a control apparatus.
PTL 2 discusses provision of a network visualization system in which a user can comprehensively grasp a configuration and an operation of a network.
PTL 1: International Publication No. WO2014/174720A
PTL 2: Japanese Patent No. 5769208
The disclosure of each literature in the above citation list is incorporated herein by reference thereto. The following analysis has been made by the present inventors.
As described above, there is an SDN as one network technique. In addition, discussion is under way on applying an SDN to an in-vehicle network.
However, if an SDN controller receives many queries and performs a path calculation each time, the required processing load of the SDN controller will be increased. Thus, this approach has a problem in that an in-vehicle microcomputer cannot sufficiently perform its required processing. PTLs 1 and 2 have no relation to a vehicle network, and the techniques disclosed by these literatures cannot solve the above problem.
A main object of the present invention is to provide an in-vehicle control apparatus, an in-vehicle network design apparatus, a communication method, and a program that contributes to flexibly changing a configuration of a vehicle network.
According to the present invention or a first disclosed aspect, there is provided an in-vehicle control apparatus, controlling a plurality of repeaters included in an in-vehicle network assembled in a vehicle, based on a control scenario(s) associated with states of the vehicle and control contents, each of which is set in a corresponding one of the plurality of repeaters.
According to the present invention or a second disclosed aspect, there is provided a vehicle network design apparatus, connectable to the above in-vehicle control apparatus and generating the control scenario(s).
According to the present invention or a third disclosed aspect, there is provided a communication method for an in-vehicle control apparatus for a vehicle in which a vehicle network including a plurality of repeaters is assembled, the communication method comprising steps of: referring to a control scenario(s) associated with states of an in-vehicle and control contents, each of which is set in a corresponding one of the plurality of repeaters; and controlling the plurality of repeaters based on the control scenario(s).
According to the present invention or a fourth disclosed aspect, there is provided a program, causing a computer for a vehicle in which a vehicle network including a plurality of repeaters is assembled to perform processing for: referring to a control scenario(s) associated with states of a vehicle and control contents, each of which is set in a corresponding one of the plurality of repeaters; and controlling the plurality of repeaters based on the control scenario(s).
This program can be recorded in a computer-readable storage medium. The storage medium may be a non-transient storage medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. The present invention may be embodied as a computer program product.
According to the present invention and the individual disclosed aspects, there are provided an in-vehicle control apparatus, an in-vehicle network design apparatus, a communication method, and a program that contributes to flexibly changing a configuration of a vehicle network.
First, an outline of an example embodiment will be described. In the following outline, various components are denoted by reference characters for the sake of convenience. Namely, the following reference characters are merely used as examples to facilitate understanding of the present invention. Thus, the description of the outline is not meant to place any limitations on the present invention. An individual connection line between blocks in an individual drawing signifies both one-way and two-way directions. An arrow schematically illustrates a principal signal (data) flow and does not exclude bidirectionality. While not explicitly illustrated in the circuit diagrams, the block diagrams, the internal configuration diagrams, the connection diagrams, etc. in the disclosure of the present application, an input port and an output port exist at an input end and an output end of an individual connection line. The same holds true for the input-output interfaces.
An in-vehicle control apparatus 100 according to an example embodiment controls a plurality of repeaters included in an in-vehicle network assembled in a vehicle, based on a control scenario associated with states of the vehicle and control contents, each of which is set in a corresponding one of the plurality of repeaters (see
More specifically, the in-vehicle control apparatus 100 holds and manages control contents that need to be performed on combinations of a plurality of vehicle states and scenarios describing which control contents need to be referred to when a state of the vehicle is changed. The vehicle includes vehicle state detection means, and if a detection result of the vehicle state detection means indicates change of a vehicle state, the in-vehicle control apparatus 100 refers to a corresponding one of the above scenarios and controls the repeaters (switches included in the in-vehicle network) in accordance with the corresponding contents. As a result, the vehicle network is changed. Since the in-vehicle control apparatus 100 appropriately generates an individual scenario defining the control contents corresponding to vehicle states, the network can be controlled based on the vehicle states. That is, the configuration of the vehicle network can flexibly be changed. That is, it is possible to easily realize a network that is based on a flow, a bandwidth, a priority level, etc. on the vehicle network that changes when a vehicle state is changed or when a function of the vehicle is updated.
If a network in a vehicle malfunctions, an accident fatal to human lives could occur. Thus, the highest priority is given to the safety of the vehicle, and the functions of the vehicle are strictly evaluated in advance. However, since an SDN dynamically changes a network, it is difficult to presume what network is to be configured. That is, this approach has a problem in that the network cannot be evaluated in advance. In the case of the in-vehicle control apparatus 100, since the scenarios are sufficiently evaluated before the vehicle is operated (sold), the above problem can be solved. That is, by previously evaluating the network that has been changed in accordance with an individual scenario, a vehicle network achieving a high level of safety can be assembled. In addition, since the in-vehicle control apparatus 100 controls the in-vehicle network in accordance with the individual scenarios, the in-vehicle control apparatus 100 has less processing load than that of a common SDN controller.
Hereinafter, specific example embodiments will be described in more detail with reference to drawings. In the example embodiments, like components will be denoted by like reference characters, and description thereof will be omitted.
A first example embodiment will be described in more detail with reference to drawings.
The NW control apparatus 20 is an apparatus that controls an in-vehicle network based on the detection results (vehicle states) obtained by vehicle state detection means (for example, NW nodes 31, which will be described below). As illustrated in
The NW control apparatus 20 includes an NW control part 201, a state management part 202, a control content storage part 203, an update management part 204, and a communication part 205.
The NW part 30 includes the NW nodes 31 that communicate with each other and NW repeaters 32 that relay communications. That is, an in-vehicle network including the plurality of NW repeaters 32 is assembled inside the vehicle 10.
While
When a packet (data) is transmitted from an NW node 31 to a different NW node 31, an NW repeater 32 forwards this packet so that this packet will arrive at the target NW node 31 (the different NW node 31).
Examples of the individual NW node 31 include a vehicle-mounted camera, a proximity sensor, a brake operation quantity sensor, a steering wheel operation quantity sensor, a vehicle-mounted monitor, a collision warning device, a self-driving assisting module, and an engine control ECU (Electronic Control Unit).
The individual NW repeater 32 is, for example, a device that performs communications (packet forwarding) based on Ethernet (registered trademark, the same applies hereinafter) standards. In addition to the packet forwarding function, the individual NW repeater 32 sets/controls disconnection, duplication, bandwidth limitation, and priority level on packet communications inputted thereto and rewriting of packet information, for example. The control on the rewriting of the packet information includes changing source/destination MAC (Media Access Control) addresses, IP (Internet Protocol) addresses, and TCP/UDP (Transmission Control Protocol/User Datagram Protocol) ports and adding and removing VLAN (Virtual Local Area Network) tags, for example.
For example, the NW control part 201 in the NW control apparatus 20 performs FlowMod on FlowTable in accordance with OpenFlow standards to set NW control contents in the NW repeaters 32. By setting FlowTable in an individual NW repeater 32, the NW control part 201 controls the operation of the individual NW repeater 32.
As described above, the NW control apparatus 20 and the NW repeaters 32 may be configured as an OpenFlow controller and OpenFlow switches, respectively, based on the OpenFlow standards. However, the communication standards between the NW control apparatus 20 and the NW repeaters 32 are not limited to the OpenFlow standards.
The state management part 202 is means for monitoring (detecting) presence or absence of various states of the vehicle 10 on which the NW control apparatus 20 is mounted. Examples of the “states” monitored by the state management part 202 include the engine state (inactive, active), the speed state (a low speed, a medium speed, a high speed), the lamp lighting state based on an operation on a direction indicator (a left-turn lamp is on, a right-turn lamp is on, no lamp is on), and the driving state (manual driving, self-driving). Other examples of the above states include determination of a dangerous state based on a collision avoidance sensor, the general road running state/highway running state based on navigation, and the OTA state. That is, the vehicle states represent matters or events that occur due to vehicle-specific actions or operations.
The state management part 202 may directly acquire sensor values from various sensors, which are the vehicle state detection means, and determine the vehicle states. Alternatively, the state management part 202 may acquire data (packets) flowing through the NW part 30 and determine the vehicle states. For example, the state management part 202 acquires the engine state (active, inactive) from the engine control ECU, for example, and uses the engine state to determine the vehicle states.
The NW control part 201 acquires the current vehicle states via the state management part 202. The NW control part 201 refers to an NW control scenario based on the acquired current vehicle states and controls the network in the vehicle 10 in accordance with the corresponding scenario (changes the settings of the NW repeaters 32).
The NW control part 201 sets, on the plurality of NW repeaters 32 in the NW part 30 connected to the NW control part 201, forwarding, disconnection, duplication, bandwidth limitation, priority levels, etc. of communications from the NW nodes 31. That is, the NW control part 201 controls the NW part 30 so that the NW repeaters 32 will perform, for example, a packet forwarding path control operation, a bandwidth control operation, and a priority level control operation.
The control content storage part 203 holds an NW control scenario table and an NW control content table.
The NW control scenario table is information (table information) in which combinations of states of the vehicle 10 and control operations of the NW repeaters 32 corresponding to the combinations are associated with each other (see
Since there are a plurality of combinations of states of the vehicle 10, there are a plurality of NW control scenarios. For example, various combinations of the engine state, the running state, etc. are comprehensively covered, and a scenario (NW control scenario) is assigned to each combination. In addition, a NW control number is assigned to each scenario.
As described above, since the in-vehicle network is controlled differently depending on the vehicle states, the control content storage part 203 manages and holds a different NW control method per state set, as the NW control scenario table. As illustrated in
By referring to the NW control scenario table S100 as illustrated in
There are a plurality of combinations of states, and these combinations are managed as scenarios S110 to S11n. In addition, an NW control number T11z (z is any number) may be specified for different scenarios S11x and S11y (x and y are any numbers).
The in-vehicle network control operation corresponding to an NW control scenario may be realized by setting a different NW control content (control information) on each of the plurality of NW repeaters 32. For example, the contents that are set in the plurality of NW repeaters 32 when the network control operation (the NW control number T110) corresponding to the scenario S110 illustrated in
Thus, the control content storage part 203 manages an individual in-vehicle network control operation (an individual NW control number) and the NW control contents (control information) that are set in the NW repeaters 32 when this NW control number is determined in association with each other. The table used for this management is the NW control content table (see
As illustrated in
As described above, the NW control content table T100 illustrated in
For example, in the case of the NW control number T110, the NW control contents T130 to T13x, which are set in the NW repeaters 32 corresponding to the NW repeater numbers T120 to T12x, are written. For example, the NW repeater 32, on which a control content corresponding to the NW control content T130 needs to be set, is specified (determined) as the NW repeater number T120.
In
As described above, an individual control scenario, in which vehicle states and control contents that are set in the plurality of NW repeaters 32 are associated with each other, is managed by using the NW control scenario table and the NW control content table.
Referring back to
The update management part 204 not only manages new writing on the NW control scenario table and the NW control content table but also manages write permission and updating of the contents of these tables, for example. Functions of the update management part 204 are constituted by an OTA software update technique or the like. If updating of contents can be managed, the updating may be realized by a function other than OTA.
The communication part 205 is means for communicating with apparatuses outside the vehicle. Any method may be adopted as the communication means. Examples of the communication means include Ethernet, a wireless LAN (Local Area Network), and a carrier communication, and OBDII (On-Board Diagnostics second generation).
Next, an operation of the vehicle 10 according to the first example embodiment will be described with reference to drawings. The following description assumes an in-vehicle network control operation performed when the vehicle 10 is driving straight and an in-vehicle network control operation performed when the vehicle 10 is making a left turn, as illustrated in
While
For example, the vehicle 10 acquires the NW control scenario table and the NW control content table from an external apparatus, and the control content storage part 203 holds these items of information (steps F101 and F102 in
As described above, the vehicle 10-1 is driving straight, and the vehicle 10-2 is starting a left turn.
First, an NW control operation performed when the vehicle 10-1 is driving straight will be described with reference to
By using a function of the state management part 202, the NW control apparatus 20 monitors the vehicle states (S120 to S12n) such as the engine state, the medium-speed running state, and the operation state of the left-turn indicator (step F103 in
If there is a change in the contents of the vehicle states (S120 to S12n) (for example, if a light is switched from ON to OFF), the state management part 202 notifies the NW control part 201 of the contents (statuses) of the states (S120 to S12n) (Yes branch in step F104 in
If there is no change, the state management part 202 continues to monitor the vehicle states (No branch in step F104 in
The control content storage part 203 refers to the NW control scenario table S100 stored and managed therein and searches for a scenario S11x that matches the contents (a combination of the contents of the states) for which checking is requested by the NW control part 201 (step F105 in
Next, by using the NW control number (table No.1=T110) specified by the scenario S110 corresponding to driving straight, the control content storage part 203 determines NW control contents T130 to T133 set in the NW repeaters 32 (repeater numbers T120 to T123) from the NW control content table T100.
In step F106 in
The NW control part 201 sets the control contents of the NW control contents T130 to T133 in the NW repeaters 32 corresponding to the NW repeater numbers T120 to T123 (step F107).
As illustrated in
The collision warning device 34 analyzes the monitoring data. When an object comes within a certain distance from the vehicle 10, the collision warning device 34 outputs a warning. In
While driving straight, the vehicle 10-1 gives a priority to avoidance of a head-on collision. Thus, the NW control part 201 controls the individual NW repeaters 32 so that the data from the proximity sensor 33-1 and the proximity sensor 33-2 monitoring the front side of the vehicle and the proximity sensor 33-3 and the proximity sensor 33-8 will preferentially reach the collision warning device 34.
As illustrated in
The NW control part 201 acquires the above four NW control contents from the NW control content table T100 and controls the NW part 30 based on the acquired NW control contents. For example, the NW control part 201 controls the NW repeater 32 (sets the control information) so that the data from the above four proximity sensors 33 will reach the collision warning device 34 preferentially to the data from the other sensors. More specifically, the NW control part 201 sets a packet handling rule, which maximizes the IP (Internet Protocol) precedence value in the ToS field written in a packet header of an individual packet transmitted from the above four proximity sensors 33, in the individual NW repeaters 32.
Next, a vehicle network control operation performed when the vehicle 10 starts a left turn will be described with reference to
Since the vehicle 10-2 gives a priority to avoidance of a collision on the left side of the vehicle at the start of a left turn, the NW control part 201 controls the individual NW repeaters 32 so that the data from the proximity sensor 33-1 monitoring the front side of the vehicle, the proximity sensor 33-3, the proximity sensor 33-4, and the proximity sensor 33-5 will preferentially reach the collision warning device 34.
As illustrated in
As described above, the vehicle 10 according to the first example embodiment includes the NW control apparatus 20 connected to the vehicle state detection means. In addition, in the vehicle 10, a plurality of combinations of prepared vehicle states are defined as scenarios, and the NW control contents used in these scenarios are prepared. In addition, when any one of the vehicle states is changed and when the resultant vehicle states match any one of the scenarios prepared in the vehicle 10, the NW control contents determined by this scenario are set in the NW repeaters 32 constituting the in-vehicle network. As a result, the in-vehicle network can be changed in accordance with a change in the vehicle states. That is, when a state of the vehicle 10 is changed, since the NW control apparatus 20 mounted in the vehicle 10 refers to the control scenarios and controls the in-vehicle network (the plurality of NW repeaters 32), a flexible network control operation can be realized.
In addition, according to the first example embodiment, the NW control scenarios and the NW control contents are prepared, and by referring to the scenarios and the NW control contents, the vehicle 10 controls its in-vehicle network. In this way, even when the network is changed, path calculation does not need to be performed. As a result, while operated, the vehicle 10 undergoes less control processing load needed for change of the network when a vehicle state is changed.
In addition, the vehicle 10 includes the communication part 205 and the control content storage part 203, and the scenarios and the NW control contents stored in the control content storage part 203 can be changed from the outside of the vehicle. As a result, the scenarios and the NW control contents can be rewritten entirely or partially while the vehicle 10 is being operated after the scenarios and the NW control contents are set.
In addition, since the same scenarios and the same NW control contents can be used for the same kind of vehicles (vehicles 10 having the same network configuration including the NW part 30), the same scenarios and the same NW control contents can be applied to many vehicles 10.
Next, a second example embodiment will be described in detail with reference to drawings.
A second example embodiment includes an NW design apparatus 40 installed outside a vehicle 10. The NW design apparatus 40 is configured to be connectable to an NW control apparatus 20. The NW design apparatus 40 is an apparatus that generates an NW control scenario table S100 and an NW control content table T100. That is, the NW design apparatus 40 is an apparatus that generates control scenarios. The vehicle 10 controls its in-vehicle network by using the NW control scenario table S100 and the NW control content table T100 generated by the NW design apparatus 40.
The design information reception part 301 receives physical network information, logical network information, NW control scenario generation information that constitute an NW part 30 in the vehicle 10 from the outside (an NW designer, for example).
The physical network information is information about network-related performance and communication requirements such as about the components (kinds of NW nodes 31), the topology information, the MAC (Media Access Control) addresses, and the upper limit bandwidth quantity. The logical network information is information about the flow, the communication period, the required bandwidth quantity, the path redundancy requirements, the priority levels, etc. The NW control scenario generation information includes state names, combinations of states, and NW control numbers, etc.
The NW control content management part 303 includes a virtual network (virtual NW) management section 311 and a path calculation section 312.
The virtual NW management section 311 uses the physical network information to internally generate a virtual network of the NW part 30 in the vehicle 10. That is, the virtual NW management section 311 virtually constitutes a network that emulates the configuration and operation of the NW part 30 in the vehicle 10. The virtual network generated by the virtual NW management section 311 is a network that simulates the internal network (the in-vehicle network) of the vehicle 10 to be designed.
The virtual NW management section 311 sets the logical network information in the above generated virtual network. By setting the logical network information, communications performed in the actual vehicle 10 are simulated in the virtual network (communications are performed in accordance with communication requests from the NW nodes 31, etc.).
When an NW repeater 32a simulated in the virtual network receives a communication packet, an individual NW repeater 32a queries the path calculation section 312 about the control content of the communication packet.
The logical network information is generated on a per-flow basis, and there are cases where a plurality of items of logical network information exist for a single item of physical network information. In addition, the virtual NW management section 311 can automatically generate path disconnection patterns from a topology established based on certain physical network information, for all path combinations.
Based on the content of the query from the individual NW repeater 32a in the virtual network, the path calculation section 312 performs path calculation by using its internal path calculation algorithm. The calculation result is set in the individual NW repeater 32a as a communication packet control content (packet forwarding, packet removal, packet rewriting, Queue specification rule, etc.). All control contents for all communication packets of the individual NW repeaters 32a are generated as the NW control contents. In this way, the NW control content management part 303 generates control scenarios for controlling the NW repeaters 32a by using the virtual network.
For example, functions of the path calculation section 312 can be realized by using path calculation functions of an OpenFlow controller. More specifically, the path calculation section 312 refers to policies, etc. used when path calculation is performed, calculates packet forwarding paths among the NW nodes 31, and calculates packet handling rules (control contents) that are set in the individual NW repeaters 32a.
The NW control content management part 303 adds an NW control number to an NW control content generated each time the physical network information and the logical network information are changed and formulates the resultant information as the NW control content table T100.
The NW control scenario management part 304 generates a scenario by specifying inputted state names (state kinds), a combination of states, and an NW control number and formulates the scenario as the NW control scenario table S100.
The communication part 305 has a function of communicating with nodes outside the NW design apparatus 40. The communication by the communication means is not limited to any particular communication. Examples of the communication include Ethernet, a wireless LAN, a carrier communication, and OBDII.
Next, an operation according to the second example embodiment will be described.
First, the NW control content management part 303 generates the NW control content table T100.
Next, the design information reception part 301 sets the physical network information and the logical network information about the NW part 30 in the vehicle 10 in the design information storage part 302 (steps F211 and F212 in
The virtual NW management section 311 extracts the physical network information and the logical network information from the design information storage part 302 and generates a virtual network about the NW part 30 (step F213 in
Communications are performed in the virtual network, and in response to queries about communication packet control contents from the virtual NW management section 311, the path calculation section 312 performs path calculation. The result of the path calculation is set in the virtual NW management section 311.
Upon completion of the settings on all the communication packets, NW control contents are generated (step F214 in
An NW control number is added to an individual one of the NW control contents generated, and the NW control contents are stored in the design information storage part 302 (step F215 in
The virtual NW management section 311 completes the generation of all the patterns of NW control contents used in the NW part 30 and the addition of the NW control numbers while changing the physical network information and the logical network information (Yes branch in step F216 in
The NW control content management part 303 formulates all the generated combinations of NW control contents and NW control numbers as the NW control content table T100 and stores the NW control content table T100 in the design information storage part 302 (step F217 in
The NW control scenario management part 304 generates the NW control scenario table S100.
The NW control scenario management part 304 sets vehicle state names based on information from the design information reception part 301 (step F221 in
The NW control scenario management part 304 specifies a combination of contents of vehicle state names (for example, ON/OFF of a light, etc.) and sets a scenario (step F222 in
The NW control scenario management part 304 reads an NW control number from the design information storage part 302 and specifies an NW control number used for the scenario (step F223 in
The NW control scenario management part 304 repeats the above steps as many times as the number of scenarios that are performed on the vehicle 10 (Yes in step F224 in
As described above, according to the second example embodiment, the NW design apparatus 40 generates the NW control scenario table and the NW control content table (steps F210 and F220 in
The NW design apparatus 40 and the vehicle 10 illustrated in FIG. 15 may be connected to each other on a one-on-one basis. Alternatively, the NW design apparatus 40 may be connected to a plurality of vehicles 10 on a one-to-many basis, in which case, each vehicle 10 has the same configuration, and the NW control scenario table S100 and the NW control content table T100 duplicated by the NW design apparatus 40 can be set in each vehicle 10.
As described above, according to the second example embodiment, the NW design apparatus 40, which is network design means, is used outside the vehicle 10. This network design means receives network configuration information (a topology) about the vehicle 10 and generates a virtual network of the vehicle 10. In addition, the network design means generates NW control contents based on the generated virtual network. Next, a plurality of combinations of vehicle states are defined as scenarios, and the individual scenarios can be associated with NW control contents. By performing this association when the network of the vehicle 10 is designed, the network design of the vehicle can be performed before the vehicle 10 is operated.
In addition, the same contents of the logical network data (data about the virtual network), which is design asset data, may be used for different kinds of vehicles. Thus, logical NW data does not need to be designed again for these different kinds of vehicles. That is, since design asset data can be used when a network is designed for certain kinds of vehicles, the network design period can be shortened for different kinds of vehicles.
Next, a third example embodiment will be described in detail with reference to drawings.
The NW evaluation part 306 performs evaluation (network evaluation) of an NW part 30 in the vehicle 10 by using a virtual network, an NW control scenario table S100, and an NW control content table T100. For example, in the evaluation of the network, communication characteristics (for example, the communication bandwidth, the communication delay, etc.) among NW nodes 31 are evaluated. More specifically, the NW evaluation part 306 performs threshold processing on the above communication characteristics and evaluates the network based on the result of the threshold processing. For example, if the communication delay is larger than a threshold, the evaluation result of the network is determined to be “poor”.
The evaluation result is fed back to an NW designer. If the evaluation result is poor, the input information is changed, and the generation and evaluation is performed again. In addition, limited network evaluation may be performed by using a part of the NW control contents.
The above contents will be summarized as a flowchart in
As in the second example embodiment, the NW design apparatus 40 generates the NW control content table and the NW control scenario table (steps F210 and F220 in
Next, the NW evaluation part 306 performs a simulation of network evaluation of the NW part 30 in the vehicle 10 by using the information constituting the virtual network, the NW control scenario table S100, and the NW control content table T100 acquired from a design information storage part 302 (step F310 in
If the evaluation result is not satisfactory (if the evaluation result does not meet a criterion), the NW evaluation part 306 notifies the NW control content management part 303 to that effect. The NW control content management part 303 changes part of the physical network information or the logical network information and generates the NW control content table T100 again (NO branch in step F320 in
If the evaluation result is satisfactory (YES branch in step F320 in
As described above, according to the third example embodiment, the scenarios, the NW control contents used with the scenarios, and the information constituting the NW in the vehicle 10 are recorded in the network design means, and a simulation (evaluation) about the network in the vehicle 10 is performed before the vehicle 10 is operated. By previously performing this simulation, evaluation of the network in each vehicle state set can be performed before the vehicle 10 is operated.
Next, a fourth example embodiment will be described in detail with reference to drawings.
As illustrated in
A control content storage part 203 notifies the NW visualization part 206 in the NW control apparatus 20 of the scenario used by the current vehicle 10 and the NW control contents specified by this scenario (steps F401 and 402 in
Based on the contents of which the NW visualization part 206 has been notified, the NW visualization part 206 visualizes the status of the current NW part 30 (the status of the in-vehicle network) (step F403 in
The control content storage part 203 notifies the NW design apparatus 40 of the scenario used by the current vehicle 10 and the NW control contents specified by this scenario via a communication part 305 and a communication part 205 (steps F501 and 502 in
The NW visualization part 307 acquires the control contents specified by the reported current scenario (step F503 in
In addition, the current network status may be visualized in either the vehicle 10 or the NW design apparatus 40. Alternatively, this visualization may be performed in both the vehicle 10 and the NW design apparatus 40. The NW design apparatus 40 may be connected to the vehicle 10 on a one-to-one basis. Alternatively, The NW design apparatus 40 may be connected to a plurality of vehicles 10 on a one-to-many basis.
According to the fourth example embodiment, an in-vehicle network is visualized as described above. Since the in-vehicle network has already been evaluated at the start of the operation of the vehicle, the network state corresponding to the state of this vehicle is determined in advance. As a result, by displaying the above network evaluation result of the vehicle 10 being operated, the network configuration of this vehicle in the current vehicle state can be visualized instantly.
Next, a fifth example embodiment will be described in detail with reference to drawings.
The NW control apparatus 20 according to the fifth example embodiment further includes an NW monitoring part 207. In addition, the NW design apparatus 40 further includes a warning part 308.
As illustrated in
The NW monitoring part 207 receives this notification and causes warning means in a vehicle 10 to notify (warn) a person in the vehicle 10 that a communication not designed in the vehicle 10 has occurred (step F602 in
In addition, the NW monitoring part 207 notifies the NW design apparatus 40 of the above warning via a communication part 205 (step F603 in
The warning part 308 of the NW design apparatus 40 notifies an NW designer of the same warning (step F604 in
Examples of the above warning means include a warning sound, blinking of a lamp, and a message on a display.
An unknown communication could occur when an NW node 31 not designed in the design stage is added to an NW part 30, when an NW node 31 malfunctions, or when the NW part 30 is attacked from the outside thereof.
As described above, the NW monitoring part 207 monitors the presence or absence of a query about a setting of a control content from an individual NW repeater 32 constituting the in-vehicle network. If the warning part 308 in the NW design apparatus 40 is notified that there is a query about a setting of a control content from the NW control apparatus 20, the warning part 308 outputs a warning.
The NW design apparatus 40 may be connected to the vehicle 10 on a one-to-one basis. Alternatively, the NW design apparatus 40 may be connected to a plurality of vehicles 10 on a one-to-many basis. The warning may be performed in both the vehicle 10 and the NW design apparatus 40. Alternatively, the warning may be performed in either the vehicle 10 or the NW design apparatus 40. Alternatively, the vehicle 10 and the NW design apparatus 40 may not be connected to each other, and the warning may be performed in the vehicle 10 alone.
As described above, according to the fifth example embodiment, if a communication not designed by the designer occurs, the warning part 308 can output a report or a warning. If the designer is notified of the warning, the designer can design a new control content scenario, for example. In this way, a safer in-vehicle network can be prepared.
The following description summarizes the contents described in the above first to fifth example embodiments.
The NW control apparatus 20 is in-vehicle network control means including vehicle state detection means. There are prepared NW control contents per scenario determined by a combination of a plurality of vehicle states. In this way, even when a flow, a bandwidth, a priority level, or the like on an in-vehicle network changes with change of a vehicle state, a control operation is flexibly performed.
The NW design apparatus 40 is NW design means for generating a virtual network that simulates the in-vehicle network. By using the design means, it is possible to prepare NW control contents that match the flow, the bandwidth, the priority, etc. on the in-vehicle network in an individual vehicle state set before the operation of the vehicle is started (before the vehicle is sold).
By using the NW design apparatus 40, NW control contents can be set in the virtual network that simulates the in-vehicle network, and the network evaluation can be performed before the operation of the vehicle is started.
The NW control apparatus 20 and the NW design apparatus 40 can acquire the current vehicle states of the vehicle and visualize the network state of the current vehicle by referring to the vehicle states and the NW control contents corresponding thereto.
For a virtual network generated by the NW design apparatus 40 serving as NW design means, NW control contents are prepared by using path calculation means of the NW design means. By causing the vehicle to refer to the NW control contents, the vehicle does not need to have path calculation means for change of a flow, a bandwidth, a priority level, etc. on the in-vehicle network that occurs when a vehicle state is changed.
Since the NW design means previously duplicates the NW control contents of the vehicle, the same NW control contents duplicated can be applied to other vehicles having the same configuration as that of the vehicle.
By defining change of vehicle control software and change of in-vehicle components as vehicle states, the NW design means can prepare NW control contents for change of a flow, a bandwidth, a priority level, etc. on the NW of a vehicle having different software and hardware.
Next, a hardware configuration of the NW control apparatus 20 will be described.
The memory 22 is a RAM (Random Access Memory), a ROM (Read Only Memory), an HDD (Hard Disk Drive), or the like.
The NIC 23 is, for example, an interface card that complies with Ethernet (registered trademark). Alternatively, if the in-vehicle network is configured by CAN, an interface card that complies with CAN is used as the NIC 23.
An individual processing module of the above NW control apparatus 20 is realized by causing the CPU 21 to execute a program stored in the memory 22, for example. This program may be updated by downloading an update program via a network or by using a storage medium in which an update program is stored. The processing modules may be realized by semiconductor chips. That is, it is possible to use any means that perform the functions of the above processing modules by using some hardware and/or software.
Since the hardware configurations of the NW design apparatus 40, the NW repeaters 32, and the NW nodes 31 are obvious to those skilled in the art, description thereof will be omitted.
While the above description has clarified the industrial applicability of the present invention, the present invention is suitably applicable to the mobility control field (automobiles, aircraft, boats and ships, robots), for example. That is, the present invention is suitably applicable to fields in which many apparatuses are manufactured/operated. The individual one of the apparatuses moves/operates while carrying a single network, and a flow, a bandwidth, a priority level, etc. of a communication in the network changes with change of the movement/operation.
The above example embodiments may partially or entirely be described, but not limited to, as the following notes.
See the in-vehicle control apparatus according to the above first aspect.
The in-vehicle control apparatus preferably according to note 1, referring to the control scenario(s) when a state(s) of the vehicle is changed and controlling the plurality of repeaters.
The in-vehicle control apparatus preferably according to note 1 or 2, visualizing a status of the vehicle network.
The in-vehicle control apparatus preferably according to any one of notes 1 to 3, monitoring presence or absence of a query(ies) about a setting(s) of a control content(s) from a repeater(s) included in the vehicle network.
The in-vehicle control apparatus preferably according to any one of notes 1 to 4; wherein the controlling on the plurality of repeaters includes at least one of path control, bandwidth control, priority level control for packet forwarding and control for rewriting packet information.
See the in-vehicle network design apparatus according to the above second aspect.
The in-vehicle network design apparatus preferably according to note 6, generating the control scenario(s) by using a virtual network that simulates the in-vehicle network.
The in-vehicle network design apparatus preferably according to note 7, evaluating the in-vehicle network by using the virtual network.
The in-vehicle network design apparatus preferably according to note 7 or 8, visualizing a status of the virtual network.
An in-vehicle network design apparatus, outputting a warning(s) when notified of a query(ies) about a setting(s) of the control content(s) by the in-vehicle control apparatus preferably according to note 4.
The in-vehicle network design apparatus preferably according to any one of notes 7 to 10; wherein the control scenario(s) is applicable to a plurality of vehicles having the same configuration as that of the in-vehicle network.
The in-vehicle control apparatus preferably according to any one of notes 1 to 5; wherein the control scenario(s) is internally and rewritably stored, and an in-vehicle network internally assembled in the vehicle being operated is updatable by changing the rewritably stored control scenario(s) from an outside of the vehicle.
The in-vehicle control apparatus according to any one of notes 1 to 5; wherein a state(s) of the vehicle is a matter(s) or an event(s) that occurs due to a vehicle-specific action(s) or operation(s).
See the communication method according to the above third aspect.
See the program according to the above fourth aspect.
The disclosure of each of the above PTLs, etc. is incorporated herein by reference thereto. Modifications and adjustments of the example embodiments and examples are possible within the scope of the overall disclosure (including the claims) of the present invention and based on the basic technical concept of the present invention. Various combinations and selections (including partial deletion) of various disclosed elements (including the elements in each of the claims, example embodiments, examples, drawings, etc.) are possible within the scope of the overall disclosure of the present invention. Namely, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the overall disclosure including the claims and the technical concept. The description discloses numerical value ranges. However, even if the description does not particularly disclose arbitrary numerical values or small ranges included in the ranges, these values and ranges should be deemed to have been specifically disclosed. In addition, as needed and based on the gist of the present invention, partial or entire use of the individual disclosed matters in the above literatures that have been referred to in combination with what is disclosed in the present application should be deemed to be included in what is disclosed in the present application, as a part of the disclosure of the present invention.
10, 10-1, 10-2 vehicle
20 NW (network) control apparatus
21 CPU (Central Processing Unit)
22 memory
23 NIC (Network Interface Card)
30 NW part
31 NW node
32, 32a, 32-1 to 32-4 NW repeater
33, 33-1 to 33-8 proximity sensor
34 collision warning device
40 NW design apparatus
100 in-vehicle control apparatus
201 NW control part
202 state management part
203 control content storage part
204 update management part
205, 305 communication part
206 NW visualization part
207 NW monitoring part
301 design information reception part
302 design information storage part
303 NW control content management part
304 NW control scenario management part
306 NW evaluation part
307 NW visualization part
308 warning part
311 virtual NW management section
312 path calculation section
Number | Date | Country | Kind |
---|---|---|---|
2019-002832 | Jan 2019 | JP | national |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/JP2020/000409 | 1/9/2020 | WO | 00 |