JP5899882B2 - Fault diagnosis system and fault diagnosis method - Google Patents

Description

  The present invention relates to a failure diagnosis system that includes a terminal device mounted in a diagnosis target system and a center device connected to the terminal device via a network, and diagnoses a failure of the diagnosis target system.

  In recent years, in a system in which a plurality of modules operate cooperatively, failure diagnosis has become difficult as the system becomes larger. As an example of the cooperative operation system, there is an in-vehicle system mounted on a vehicle. In an in-vehicle system, a plurality of ECUs (Electronic Control Units) transmit and receive data to and from each other via a network such as a CAN (Controller Area Network) and operate in cooperation. For this reason, when a certain ECU fails, an abnormality is propagated to other ECUs, and it is difficult to diagnose the failure. In particular, with respect to in-vehicle systems, the complexity and scale of electronic control has become more prominent with the advent of hybrid vehicles and electric vehicles and the development of connected technologies (technology such as infrastructure coordination and platooning).

  Therefore, development of a system that supports fault diagnosis is desired. In particular, a system that supports diagnosis of a failure that occurs only when specific rare conditions are met is desired. This is because a failure that occurs under certain rare conditions is generally difficult to reproduce the failure phenomenon that has occurred.

  Patent Document 1 discloses a failure diagnosis device that can specify a failure occurrence condition as a solution for a failure that occurs only when specific rare conditions are met. The failure diagnosis apparatus described in Patent Document 1 narrows down candidates for failure occurrence conditions by utilizing normal vehicle operation data without relying on prior knowledge about individual failure causes and models to be diagnosed. That is, by extracting a pattern that is not included in the normal vehicle operation data, combinations of signal values that can be a failure occurrence condition are narrowed down. Then, in an actual vehicle, the phenomenon is reproduced by aligning combinations of signal values that can be a failure occurrence condition.

JP 2010-218492 A

  By the way, in the technique described in Patent Document 1, it is assumed that normal data is collected during a test run before entering the market. However, it is difficult to comprehensively collect normal data during a test run. In particular, since the estimation accuracy of the process for narrowing down the failure condition candidates depends on the coverage of normal data, if the normal data cannot be collected comprehensively, the estimation accuracy deteriorates.

  The present invention has been made in view of the above-described problems, and its purpose is to make it possible to use a variety of normal data and to diagnose failure occurrence condition candidates with high accuracy. Is to provide.

In order to achieve the above-described object, the first invention comprises a terminal device mounted on a diagnosis target system and a center device connected to the terminal device via a network, and diagnoses a failure of the diagnosis target system. A failure diagnosis system, wherein the terminal device stores storage means for storing normal time data that is normal operation data of the diagnosis target system, and operation data of the diagnosis target system before and after the detection of the failure. by sending to said center apparatus as disaster data, the diagnosis request and diagnosis request means for performing the normal state data stored in the storage means, and before Symbol failure time data received from the center apparatus Based on the candidate condition list, the candidate condition that can be the failure occurrence condition is derived, and the derived result is used as a candidate condition list. Transmitting by sending to said center device, anda diagnostic cooperation means for performing cooperation with diagnosis request of the disorder, the center device, the disaster data received from said terminal device to said plurality of terminal devices Cooperation request means for requesting cooperation for the diagnosis request, and integration means for integrating the plurality of candidate condition lists into a single integrated list when receiving the plurality of candidate condition lists from the plurality of terminal devices. And a fault diagnosis system. According to the first invention, various normal data can be used, and the failure condition candidates can be narrowed down with high accuracy. In particular, according to the first invention, even when the diagnosis target system is used for each individual like an in-vehicle system or the like, the privacy of the individual can be protected. Moreover, according to 1st invention, the installation expense of the whole system can be held down.

  The integration means in the first invention specifies one processing target list from the candidate condition list received from a plurality of the terminal devices, and further sets the processing target condition from one of the candidate conditions included in the processing target list. When a subset of the processing target conditions exists in all of the candidate condition lists other than the processing target list, the processing target conditions are added to the integrated list. It is desirable to perform the processing on all the candidate conditions included in all the candidate condition lists. As a result, the integrated list finally obtained is close to the candidate condition list derived when the normal data of all the diagnosis target systems are collected. That is, there is no difference in estimation accuracy compared to the centralized processing by the center device. As a result, while maintaining the estimation accuracy, it is possible to protect the privacy of the individual and to reduce the equipment cost of the entire system.

Further, the terminal device in the first invention, be provided with detection means to detect the fault in the diagnosis target system itself is mounted, the more desirable. As a result, a diagnosis can be requested by detecting a failure in real time.

According to a second aspect of the present invention, there is provided a failure diagnosis method in a failure diagnosis system comprising a terminal device mounted on a diagnosis target system and a center device connected to the terminal device via a network and diagnosing a failure of the diagnosis target system. A storage step in which the terminal device stores normal data, which is normal operation data of the diagnosis target system, and the terminal device operates data of the diagnosis target system before and after a failure is detected. and by sending to said center apparatus as disaster data, and the diagnosis request step of performing diagnosis request, the center apparatus transmits the pre-Symbol failure time data received from the terminal device to a plurality of said terminal devices A cooperation request step for requesting cooperation for the diagnosis request, and a plurality of the terminal devices, Based on the normal time data stored in the step and the failure time data received from the center device, candidate conditions that can be the failure occurrence conditions are derived, and the derived results are used as a candidate condition list, and the candidate A diagnosis cooperation step for cooperating with the failure diagnosis request by transmitting a condition list to the center device; and when the center device receives a plurality of candidate condition lists from the plurality of terminal devices, And an integration step of integrating the candidate condition list into a single integrated list. According to the second invention, various normal data can be used, and the failure condition candidates can be narrowed down with high accuracy. In particular, according to the second invention, even when the diagnosis target system is used for each individual like an in-vehicle system or the like, the privacy of the individual can be protected. Moreover, according to 2nd invention, the installation expense of the whole system can be held down.

  In the integration step according to the second aspect of the invention, one processing target list is specified from the candidate condition list received from a plurality of the terminal devices, and the processing target condition is set to one from the candidate conditions included in the processing target list. When a subset of the processing target conditions exists in all of the candidate condition lists other than the processing target list, the processing target conditions are added to the integrated list. The process is performed for all the candidate conditions included in all the candidate condition lists. As a result, the integrated list finally obtained is close to the candidate condition list derived when the normal data of all the diagnosis target systems are collected. That is, there is no difference in estimation accuracy compared to the centralized processing by the center device. As a result, while maintaining the estimation accuracy, it is possible to protect the privacy of the individual and to reduce the equipment cost of the entire system.

The second invention is the terminal apparatus, detection steps to detect the failure in the diagnosis target system itself is mounted, further desirably includes. As a result, a diagnosis can be requested by detecting a failure in real time.

  According to the present invention, it is possible to provide a failure diagnosis system and the like that can use various normal data and can narrow down the failure condition candidates with high accuracy.

Diagram showing an overview of the fault diagnosis system Hardware configuration of terminal device Hardware configuration of center unit Software configuration diagram of terminal device Software diagram of center unit Diagram showing an example of normal data Diagram showing an example of failure data The figure which shows an example of a difference signal set and candidate conditions Flow chart showing the flow of fault diagnosis processing Diagram explaining the integration process Diagram showing an application example of integration processing

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. First, the configuration of a fault diagnosis system according to an embodiment of the present invention will be described with reference to FIGS.

  FIG. 1 is a diagram showing an overview of a fault diagnosis system. As shown in FIG. 1, the fault diagnosis system 1 includes a plurality of terminal devices 4 a to 4 c and a center connected to the terminal devices 4 a to 4 c via a network 6 respectively mounted on the plurality of diagnosis target systems 2 a to 2 c. The system is configured by the device 5 and diagnoses a failure of the diagnosis target systems 2a to 2c. The center device 5 is installed, for example, in the diagnosis center 3 that centrally manages fault diagnosis work. The network 6 is, for example, a wireless communication network.

  The diagnosis target systems 2a to 2c are, for example, in-vehicle systems mounted on vehicles. The terminal devices 4a to 4c are, for example, ECUs (Electric Control Units) having functions necessary for failure diagnosis processing.

  Terminal apparatuses 4a to 4c, other ECUs, various sensors, and the like are connected to the diagnosis target systems 2a to 2c via a vehicle-mounted network such as a CAN (Controller Area Network). The terminal devices 4a to 4c acquire the values of a plurality of signals flowing through the in-vehicle network as operation data. The operation data of the diagnosis target systems 2a to 2c at the normal time (hereinafter referred to as “normal data”) are stored in the installed terminal devices 4a to 4c. The operation data of the diagnosis target systems 2a to 2c at the time of failure (hereinafter referred to as “data at the time of failure”) may be transmitted to the remote center device 5 via the network 6 (wireless communication network) or the vehicle. May be transmitted to the center device 5 via a wired cable or the like. The operation data is an input / output signal of each ECU flowing through the in-vehicle network, a state value of each device, and the like.

  When the terminal devices 4a to 4c detect a failure in the diagnosis target systems 2a to 2c, the terminal devices 4a to 4c transmit failure data to the center device 5 to request a failure diagnosis. On the other hand, the center apparatus 5 requests cooperation for a diagnosis request by transmitting failure data to the plurality of terminal apparatuses 4a to 4c.

  When the terminal devices 4a to 4c receive the failure data from the center device 5, the terminal devices 4a to 4c derive candidate conditions that can be the failure occurrence conditions based on the normal data stored in the diagnosis target systems 2a to 2c. The derived result is used as a candidate condition list, and the candidate condition list is transmitted to the center device 5 to cooperate with a diagnosis request for a failure occurring in itself or in the other diagnosis target systems 2a to 2c. When the center device 5 receives a plurality of candidate condition lists from the plurality of terminal devices 4a to 4c, the center device 5 integrates the plurality of candidate condition lists into a single integrated list.

  In the fault diagnosis system 1 according to the embodiment of the present invention, after entering the market, normal time data of a diagnosis target system used by an individual is collected, and fault diagnosis is performed using the normal time data. Therefore, it is possible to narrow down candidate conditions that can be a failure occurrence condition with high accuracy by using various normal data.

  Note that the numbers of the diagnosis target systems 2a to 2c (in-vehicle system) and the terminal devices 4a to 4c are not particularly limited. For example, the center device 5 manages information on the diagnosis target systems 2a to 2c (on-vehicle system) for each same category (same vehicle type). Hereinafter, the diagnosis target systems 2a to 2c are collectively referred to as “diagnosis target system 2”. The terminal devices 4a to 4c are collectively referred to as “terminal device 4”. Hereinafter, an in-vehicle system will be described as an example of the diagnosis target system 2.

  FIG. 2 is a hardware configuration diagram of the terminal device. Note that the hardware configuration in FIG. 2 is an example, and various configurations can be adopted depending on the application and purpose.

  As illustrated in FIG. 2, the terminal device 4 includes a control unit 11, a storage unit 12, an interface unit 13, a communication control unit 14, and the like connected via a bus 15.

  The control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. The CPU calls and executes a program stored in the storage unit 12, ROM, recording medium, or the like to a work memory area on the RAM, drives and controls each device connected via the bus 15, and is performed by the center device 5. The processing described later is realized. The ROM is a non-volatile memory and permanently holds a computer boot program, a program such as BIOS, data, and the like. The RAM is a volatile memory, and temporarily stores programs, data, and the like loaded from the storage unit 12, ROM, recording medium, and the like, and includes a work area used by the control unit 11 for performing various processes.

  The storage unit 12 is an HDD (hard disk drive), and stores a program executed by the control unit 11, data necessary for program execution, an OS (operating system), and the like. With respect to the program, a control program corresponding to an OS (operating system) and an application program for causing a computer to execute processing described later are stored. Each of these program codes is read by the control unit 11 as necessary, transferred to the RAM, read by the CPU, and executed as various means. The storage unit 12 includes a terminal DB (database) 7. The terminal DB 7 stores data necessary for failure diagnosis processing.

  The interface unit 13 is an interface with the in-vehicle network of the diagnosis target system 2, and performs data transmission / reception with other devices mounted in the diagnosis target system 2. The communication control unit 14 includes a communication control device, an antenna, and the like, is a communication interface that mediates communication between the terminal device 4 and the network 6, and performs communication control with the center device 5 through the network 6. The bus 15 is a path that mediates transmission / reception of control signals, data signals, and the like between the devices.

  FIG. 3 is a hardware configuration diagram of the center device. Note that the hardware configuration of FIG. 3 is an example, and various configurations can be adopted depending on the application and purpose.

  As shown in FIG. 3, the center device 5 includes a control unit 21, a storage unit 22, a media input / output unit 23, a communication control unit 24, an input unit 25, a display unit 26, a peripheral device I / F unit 27, and the like. 28 is connected.

  The control unit 21 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like.

  The CPU calls a program stored in the storage unit 22, ROM, recording medium or the like to a work memory area on the RAM and executes it, and drives and controls each device connected via the bus 28, and is performed by the center device 5. The processing described later is realized. The ROM is a non-volatile memory and permanently holds a computer boot program, a program such as BIOS, data, and the like. The RAM is a volatile memory, and temporarily stores a program, data, and the like loaded from the storage unit 22, ROM, recording medium, and the like, and includes a work area used by the control unit 21 for performing various processes.

  The storage unit 22 is an HDD (hard disk drive), and stores a program executed by the control unit 21, data necessary for program execution, an OS (operating system), and the like. With respect to the program, a control program corresponding to an OS (operating system) and an application program for causing a computer to execute processing described later are stored. Each of these program codes is read by the control unit 21 as necessary, transferred to the RAM, read by the CPU, and executed as various means. The storage unit 22 has a center DB (database) 8. The center DB 8 stores data necessary for failure diagnosis processing. Note that the center DB 8 is not limited to the storage unit 22 of the center device 5 and may be included in a storage unit such as another computer.

  The media input / output unit 23 (drive device) inputs / outputs data, for example, media such as a CD drive (-ROM, -R, -RW, etc.), DVD drive (-ROM, -R, -RW, etc.) Has input / output devices. The communication control unit 24 includes a communication control device, a communication port, and the like, and is a communication interface that mediates communication between the computer and the network 6, and controls communication with other computers via the network 6. The network 6 may be wired or wireless.

  The input unit 25 inputs data and includes, for example, a keyboard, a pointing device such as a mouse, and an input device such as a numeric keypad. An operation instruction, an operation instruction, data input, and the like can be performed on the computer via the input unit 25. The display unit 26 includes a display device such as a liquid crystal panel, and a logic circuit or the like (video adapter or the like) for realizing a video function of the computer in cooperation with the display device.

  The peripheral device I / F (interface) unit 27 is a port for connecting a peripheral device to the computer, and the computer transmits and receives data to and from the peripheral device via the peripheral device I / F unit 27. The peripheral device I / F unit 27 is configured by USB, IEEE 1394, RS-232C, or the like, and usually includes a plurality of peripheral devices I / F. The connection form with the peripheral device may be wired or wireless. The bus 28 is a path that mediates transmission / reception of control signals, data signals, and the like between the devices.

  FIG. 4 is a software configuration diagram of the terminal device. Various means included in the terminal device 4 is realized by cooperation of software having the functions shown in FIG. 4 and hardware shown in FIG.

  As shown in FIG. 4, the software for configuring the terminal device 4 includes a normal data storage function 31, a failure detection function 32, a diagnosis request function 33, a diagnosis cooperation function 34, and the like.

  The normal data storage function 31 stores normal data of the diagnosis target system 2 in which the terminal device 4 is mounted. The normal data storage function 31 stores both normal data during test running before market entry and normal data during personal use after market entry. The normal data storage function 31 stores operation data as normal data while the failure detection function 32 does not detect a failure during personal use.

  The fault detection function 32 is used when a DTC (diagnostic trouble code) signal is received from another ECU or sensor, or by an instrument panel (instrument panel: instrument panel provided in the driver's seat) by the driver. It detects that the installed failure detection button has been pressed, and detects a failure in its own diagnosis target system 2.

  The diagnosis request function 33 makes a diagnosis request by transmitting the operation data of the diagnosis target system 2 before and after the failure detection time by the failure detection function 32 to the center device 5 as data at the time of failure. The data transmission method may be via the network 6 such as a wireless network, or via a wired cable.

  The diagnosis cooperation function 34 is a candidate that can be a failure occurrence condition based on normal time data stored in the terminal DB 7 and failure time data that is operation data of the diagnosis target system 2 at the time of failure received from the center device 5. A condition is derived, and the derived result is used as a candidate condition list, and the candidate condition list is transmitted to the center device 5 to cooperate with a fault diagnosis request.

  Here, the “failure occurrence condition” is a combination of an input / output signal of the ECU and a state value of each device when the failure occurs. For example, for an abnormal phenomenon that has occurred, a signal indicating the vehicle speed is Akm / h, and an ACC (inter-vehicle distance control) system is operating is a failure occurrence condition. Further, the “candidate condition” is a combination candidate such as an input / output signal of the ECU and a state value of each device that can be taken when a failure occurs.

  In the present invention, for example, although the ACC (Auto Cruise Control: inter-vehicle distance control) system is being activated, it does not follow the preceding vehicle or the acceleration becomes unstable. Although it is detection, a fault diagnosis relating to an “unknown fault” in which the driver detects the fault is performed. Further, in the present invention, the terminal devices 4 installed in many diagnosis target systems 2 including the diagnosis target system 2 in which the “unknown failure” has occurred cooperate with each other in response to a diagnosis request for the failure.

  FIG. 5 is a software configuration diagram of the center apparatus. As shown in FIG. 5, the software for configuring the center device 5 includes a cooperation request function 41, an integration function 42, an integration result output function 43, and the like. Various means provided in the center device 5 are realized by cooperation of software having the functions shown in FIG. 5 and hardware shown in FIG.

  The cooperation request function 41 requests cooperation for a diagnosis request by transmitting failure data to the plurality of terminal devices 4. As a method for specifying the cooperation request destination terminal device 4, for example, the cooperation request function 41 extracts the diagnosis target system 2 having the same or similar information such as the category (vehicle type) and the usage environment such as the usage area. The terminal device 4 mounted on the extracted diagnosis target system 2 is specified as a cooperation request destination.

  When the integration function 42 receives a plurality of candidate condition lists from the plurality of terminal devices 4, the integration function 42 integrates the plurality of candidate condition lists into a single integrated list. The candidate conditions included in the integrated list are “failure occurrence conditions” candidates narrowed down by the failure diagnosis system 1. The integration function 42 makes it possible to use a variety of normal data and to narrow down failure condition candidates with high accuracy.

  Since the integrated function 42 does not receive normal data of each diagnosis target system 2, it can protect the privacy of the system user (driver). Further, not receiving normal data of each diagnosis target system 2 means that normal data is not stored in the center DB 8, so that it is not necessary to introduce a large-scale database system, and the equipment cost of the entire system Can be suppressed.

  The integration result output function 43 outputs the integration list integrated by the integration function 42. The integration result output function 43 may output an integration list to a storage medium via the media input / output unit 23, for example. Further, the integration result output function 43 may output the integration list to another device via the communication control unit 24, for example. Further, the integration result output function 43 may output an integration list to the display unit 26, for example. Further, the integration result output function 43 may output an integration list to a printer or the like via the peripheral device I / F unit 27, for example.

  When the terminal device 4 mounted on the diagnosis target system 2 in which the failure has occurred is operating normally, the integration result output function 43 transmits the integrated list to the terminal device 4 via the communication control unit 24. You may do it. The terminal device 4 that has received the integrated list monitors whether or not the candidate conditions included in the integrated list occur during the operation of the diagnosis target system 2. You may make it notify that. Thus, the system user (driver) can take measures such as safely stopping the diagnosis target system 2.

  Next, a specific example of a method for deriving candidate conditions by the diagnosis cooperation function 34 will be described with reference to FIGS. Hereinafter, as a specific example, a mechanism described in JP 2010-218492 A will be described, but the present invention is not particularly limited.

  FIG. 6 is a diagram illustrating an example of normal data. In the in-vehicle system operation data, regarding the input / output signals of each ECU, the range in which the processing result of each ECU does not change (for example, the range in which the same movement is performed in a conditional branch or jump part in the program) is regarded as the same value and is regarded as the same value Data is divided for each range, converted into discrete code values, and collected at the same time. In addition, regarding the operation data of the in-vehicle system, regarding the state value of each device, the range in which the state of each device does not change (for example, the range in which the vehicle operation does not change) is considered as the same value, and the data is divided for each range considered as the same value Are converted into discrete code values and collected at the same time.

  For example, in the case of a signal indicating the vehicle speed, 0 km / h is converted to 0, 0 km / h to 5 km / h is converted to 1, 5 km / h to 20 km / h is converted to 2, and so on. . As shown in FIG. The normal data of “X1” is “0” for signal 1, “1” for signal 2, “0” for signal 3, “1” for signal 4, and “0” for signal 5.

  FIG. 7 is a diagram illustrating an example of failure data. The data shown in FIG. 7 is obtained by dividing and converting data values into a range regarded as the same value and collecting them at the same time as in the normal time data shown in FIG. For the data at the time of failure, only the time when the combination of data changes may be extracted in order to compress the data capacity.

  FIG. 8 is a diagram illustrating an example of a different signal set and candidate conditions. The difference signal set is a set indicating signal groups having different values when the failure data and the normal data are compared. The difference signal set shown in FIG. Shows a result of comparing the failure time data of “Y2” with all the normal time data shown in FIG. 6.

  No. shown in FIG. In the failure data of “Y2”, the signal 1 is “0”, the signal 2 is “3”, the signal 3 is “1”, the signal 4 is “0”, and the signal 5 is “0”. On the other hand, as shown in FIG. The normal data of “X1” is “0” for signal 1, “1” for signal 2, “0” for signal 3, “1” for signal 4, and “0” for signal 5. When these are compared, the three of signal 2, signal 3, and signal 4 are different. Therefore, No. 1 shown in FIG. The difference signal set with “D1” is {S (2), S (3), S (4)}. Here, “S (2)” means the signal value of the signal 2 related to the failure data. That is, {S (2), S (3), S (4)} means operation data of {signal 2 = 3, signal 3 = 1, signal 4 = 0}.

  In addition, as shown in FIG. The data at the time of failure of “Y1” is “1” for signal 1, “3” for signal 2, “1” for signal 3, “0” for signal 4, and “1” for signal 5. This is because No. 1 shown in FIG. Is the same as the normal data of “X6”. That is, No. 1 shown in FIG. The data at the time of failure with “Y1” can be regarded as normal.

  In the example of FIG. Is operating normally until the time “Y1”. Indicates that there is a possibility of an abnormal operation at the time “Y2”.

  Further, the candidate conditions shown in FIG. 8B are the results calculated by the terminal device 4 using the mechanism described in Japanese Patent Application Laid-Open No. 2010-218492 for the difference signal set shown in FIG. Is shown. The terminal device 4 has the restriction condition that all different signal sets are satisfied, and the maximum weight can be satisfied by setting the same weight to a logical expression that denies that the value of each signal is a component of the failure occurrence condition. Formulate in the form of the problem. Next, the terminal device 4 calculates a minimum solution of the maximum satisfiability problem, and sequentially adds a logical expression that negates the calculated solution as a constraint condition to calculate the solution again, so that no solution exists. Is repeated until the candidate condition that can be the failure occurrence condition is calculated. The minimum solution is a solution that does not become satisfiable if even one piece of data is deleted.

  For the difference signal set shown in FIG. 8A, {S (1), S (2)} and {S (2), S (5)} and {S (1), S are used as minimum solutions. Three of (4) and S (5)} are obtained. Therefore, as shown in FIG. 8B, the terminal device 4 has {S (1), S (2)} (data No. is “C1”), {S (2), S (5)} ( Data No. is “C2”), {S (1), S (4), S (5)} (data No. is “C3”).

  Then, the terminal device 4 uses the three candidate conditions shown in FIG. 8B as a candidate condition list, and transmits the candidate condition list to the center device 5.

  Next, processing of the fault diagnosis system in the embodiment of the present invention will be described with reference to FIGS.

  FIG. 9 is a flowchart showing the flow of the fault diagnosis process. In FIG. 9, a failure is detected in the diagnosis target system 2a on which the terminal device 4a is mounted, and a diagnosis request for failure diagnosis is made to the diagnosis target systems 2b to 2c on which the terminal devices 4b to 4c are mounted. It will be explained as a thing.

  As shown in FIG. 9, when detecting a failure (step S1), the terminal device 4a transmits operation data of the diagnosis target system 2a before and after the failure detection time to the center device 5 as failure data (step S2). ).

  Next, the center device 5 identifies the cooperation request destination terminal device 4 (step S3), and transmits failure data to the cooperation request destination terminal device 4 (step S4). In the example shown in FIG. 9, the center device 5 transmits failure data to the terminal devices 4a, 4b, and 4c, respectively.

  Next, the terminal device 4 (4a, 4b, 4c) derives a candidate condition that can be a failure occurrence condition (step S5), and transmits a candidate condition list to the center device 5 (step S6).

  Next, the center apparatus 5 integrates a plurality of candidate condition lists into a single integrated list (step S7), and outputs the integrated list (step S8). In the example illustrated in FIG. 9, the center device 5 receives candidate condition lists from the terminal devices 4a, 4b, and 4c, respectively.

  FIG. 10 is a diagram illustrating the integration process. The processing shown in FIG. 10 is executed by the control unit 21 (integrated function 42) of the center device 5.

  The control unit 21 of the center device 5 specifies one processing target list from a set of a plurality of candidate condition lists (step S11). Further, the control unit 21 specifies one processing target condition from a set of a plurality of candidate conditions included in the processing target list (step S12).

  Next, the control unit 21 determines whether or not a subset of the processing target conditions (excluding the φ set) exists in all the candidate condition lists other than the processing target list (step) S13). When the determination result of step S13 is Yes, the control unit 21 proceeds to step S14. When the determination result of step S13 is No, the control unit 21 proceeds to step S16.

  In step S14, the control unit 21 determines whether or not the processing target condition has been registered in the integrated list. When the determination result of step S14 is Yes, the control unit 21 proceeds to step S16. When the determination result of step S14 is No, the control unit 21 adds the processing target condition to the integrated list (step S15), and proceeds to step S16.

  In step S16, the control unit 21 determines whether or not the processing has been completed for all candidate conditions. When the determination result of step S16 is Yes, the control unit 21 proceeds to step S17. When the determination result of step S16 is No, the control unit 21 repeats the process from step S12. In the second and subsequent steps S12, the control unit 21 specifies one processing target condition from the set of candidate conditions excluding the candidate conditions that have already been specified as the processing target conditions.

  In step S17, the control unit 21 determines whether or not the processing has been completed for all candidate condition lists. If the determination result of step S17 is Yes, the control unit 21 ends the process. When the determination result of step S17 is No, the control unit 21 repeats the process from step S11. In the second and subsequent steps S11, the control unit 21 specifies one processing target condition from the set of candidate condition lists excluding the candidate condition list already specified as the processing target list.

  Here, the significance of the determination condition in step S13 will be described. Hereinafter, the method described in JP 2010-218492 A is applied as a method for deriving candidate conditions.

  As a premise for explanation, it is desirable that the finally obtained integrated list is close to the candidate condition list derived when the normal time data of all the diagnosis target systems 2 are collected. In the case of such an integrated list, there is a difference in estimation accuracy compared to a candidate condition list derived by central processing by the center device 5 (hereinafter referred to as “candidate condition list by central processing”). Because there is no. As a result, while maintaining the estimation accuracy, it is possible to protect the privacy of the individual and to reduce the equipment cost of the entire system.

  A set of normal data stored in a certain terminal device 4 is U, and a candidate condition list derived by the terminal device 4 is L.

  First, if “a subset of processing target conditions does not exist in the candidate condition list L” (Proposition 1) holds, “the data having the same combination of values as the data at the time of failure is a set U of normal data. Exists in (Proposition 2). This is because the method for deriving candidate conditions is the mechanism described in Japanese Patent Application Laid-Open No. 2010-218492.

  Next, if the proposition 2 holds, it is clear that “data having the same combination of values as the data at the time of failure exists in a set of normal data stored in all the terminal devices 4” (proposition 3) holds.

  If the proposition 3 holds, “the candidate condition list derived using the set of normal data stored in all the terminal devices 4 does not include the processing target condition” (proposition 4 ) Holds.

  Here, in order to make the integrated list close to the candidate condition list by the centralized processing, it is desirable not to include the processing target condition that satisfies the proposition 4 in the integrated list. That is, retrospectively, if Proposition 1 is satisfied in any candidate condition list L, it is desirable not to include the processing target condition in the integrated list.

  As described above, the processing target condition is added to the integrated list only when the determination condition “a subset of processing target conditions exists in all other candidate condition lists except the processing target list” in step 13 is satisfied. Is desirable.

  FIG. 11 is a diagram illustrating an application example of the integration process. In the example shown in FIG. 11, it is assumed that a failure has occurred in the diagnosis target system 2a. Further, it is assumed that the terminal devices 4a, 4b, and 4c cooperate with the failure diagnosis and transmit the candidate condition list to the center device 5. Then, it is assumed that the center device 5 has integrated the three candidate condition lists into one integrated list.

  First, paying attention to the first candidate condition {S (21)} in the candidate condition list of the terminal device 4a, the process of step S13 will be described. In step S13, the center device 5 determines whether or not a subset of {S (21)} exists in the candidate condition list of the terminal device 4b and the candidate condition list of the terminal device 4c. {S (21)} exists in the first item in the candidate condition list of the terminal device 4c. On the other hand, the subset of {S (21)} does not exist in the candidate condition list of the terminal device 4b. Therefore, the center apparatus 5 sets the determination result in step S13 to No, and does not add {S (21)} to the integrated list.

  Next, paying attention to the fifth candidate condition {S (33), S (41)} in the candidate condition list of the terminal device 4a, the process of step S13 will be described. In step S13, the center device 5 determines whether or not a subset of {S (33), S (41)} exists in the candidate condition list of the terminal device 4b and the candidate condition list of the terminal device 4c. To do. {S (33)} which is a subset of {S (33), S (41)} exists in the third case in the candidate condition list of the terminal device 4c. On the other hand, the subset of {S (33), S (41)} does not exist in the candidate condition list of the terminal device 4b. Therefore, the center apparatus 5 sets the determination result in step S13 to No, and does not add {S (33), S (41)} to the integrated list.

  Next, focusing on the second candidate condition {S (2), S (21)} in the candidate condition list of the terminal device 4b, the process of step S13 will be described. In step S13, the center device 5 determines whether or not a subset of {S (2), S (21)} exists in the candidate condition list of the terminal device 4a and the candidate condition list of the terminal device 4c. To do. {S (21)} which is a subset of {S (2), S (21)} exists in the first case of the candidate condition list of the terminal device 4a. Also, {S (21)}, which is a subset of {S (2), S (21)}, also exists in the first case of the candidate condition list of the terminal device 4c. Therefore, the center device 5 sets the determination result in step S13 to Yes, and adds {S (2), S (21)} to the integrated list.

  Next, paying attention to the fourth candidate condition {S (23), S (35), S (41)} in the candidate condition list of the terminal device 4c, the process of step S13 will be described. In step S13, the center device 5 has a subset of {S (23), S (35), S (41)} in the candidate condition list of the terminal device 4a and the candidate condition list of the terminal device 4b. Judge whether to do. {S (35)} and {S (23)}, which are subsets of {S (23), S (35), S (41)}, exist in the third case in the candidate condition list of the terminal device 4a. To do. Also, {S (35), S (41)} which is a subset of {S (23), S (35), S (41)} exists in the sixth case of the candidate condition list of the terminal device 4c. To do. Therefore, the center device 5 sets the determination result in step S13 to Yes, and adds {S (23), S (35), S (41)} to the integrated list.

  In this way, the center device 5 specifies one processing target list from the candidate condition list received from the plurality of terminal devices 4, and further specifies one processing target condition from the candidate conditions included in the processing target list, When a subset of processing target conditions exists in all the other candidate condition lists except the processing target list, a series of processing of adding the processing target conditions to the integrated list is performed on all candidate condition lists. For all candidate conditions included.

  In the example shown in FIG. 11, the integrated list includes only two items {S (2), S (21)} and {S (23), S (35), S (41)}. . If the normal data is the result of collection of only one in-vehicle system, that is, only one terminal device 4a, the candidate condition list of the terminal device 4a shown in FIG. become. In addition, as in the prior art, even when the normal time data is a collection result at the time of the test run before being put on the market, it can be easily estimated that the narrowing down result is larger than the integrated list shown in FIG. As described above, according to the integration process shown in FIG. 10, the failure occurrence conditions can be narrowed down more accurately than when only normal data is used or when normal data is used during a test run before entering the market. Can be done well.

  As described above, the fault diagnosis system according to the embodiment of the present invention does not collect the normal data in one place to obtain a candidate for the fault occurrence condition, but stores the terminal device of each diagnosis target system by itself. Candidate conditions are derived using normal data, and the derived results are integrated as an integrated list. Therefore, according to the embodiment of the present invention, various normal data can be used, and an efficient fault diagnosis system can be realized with higher accuracy than in the past.

  In addition, since the failure diagnosis system in the embodiment of the present invention does not receive normal data of each diagnosis target system, it is possible to protect the privacy of the system user. In addition, not receiving normal data of each diagnosis target system means that normal data is not stored in the diagnostic center, so there is no need to introduce a large-scale database system, and the equipment cost of the entire system is reduced. Can be suppressed.

  The preferred embodiments of the fault diagnosis system and the like according to the present invention have been described above with reference to the accompanying drawings, but the present invention is not limited to such examples. It will be apparent to those skilled in the art that various changes or modifications can be conceived within the scope of the technical idea disclosed in the present application, and these naturally belong to the technical scope of the present invention. Understood.

DESCRIPTION OF SYMBOLS 1 ......... Fault diagnosis system 2 (2a, 2b, 2c) ......... Diagnosis object system 3 ......... Diagnostic center 4 (4a, 4b, 4c) ......... Terminal device 5 ......... Center device 6 ......... Network 7 ... Terminal DB (database)
8: Center DB (database)

Claims (6)

A failure diagnosis system that is configured by a terminal device mounted in a diagnosis target system and a center device connected to the terminal device via a network, and that diagnoses a failure of the diagnosis target system,
The terminal device
Storage means for storing normal time data which is operation data of the diagnosis target system at normal time;
Diagnosis request means for requesting diagnosis by transmitting operation data of the diagnosis target system before and after the detection of the failure to the center device as data at the time of failure;
Wherein the normal state data stored in the storage means, and based on the previous SL failure time data received from the center apparatus, and derives a generation condition capable of becoming candidate condition of the disorder, the derived result candidate condition list And diagnostic cooperation means for cooperating with the failure diagnosis request by transmitting the candidate condition list to the center device,
Comprising
The center device is
Cooperation request means for requesting cooperation for the diagnosis request by transmitting the failure data received from the terminal device to a plurality of the terminal devices;
When receiving a plurality of candidate condition lists from a plurality of terminal devices, an integration unit that integrates a plurality of candidate condition lists into a single integrated list;
A fault diagnosis system comprising:   The integration unit specifies one processing target list from the candidate condition list received from a plurality of the terminal devices, further specifies one processing target condition from the candidate conditions included in the processing target list, and When a subset of the processing target conditions exists in all of the candidate condition lists other than the processing target list, a series of processes of adding the processing target conditions to the integrated list The fault diagnosis system according to claim 1, wherein the fault diagnosis system is performed for all the candidate conditions included in the candidate condition list. The terminal device
Detection means to detect the fault in the diagnosis target system itself is mounted,
Further fault diagnosis system according to claim 1 or claim 2 comprising a. A failure diagnosis method in a failure diagnosis system comprising a terminal device mounted in a diagnosis target system and a center device connected to the terminal device via a network, and diagnosing a failure of the diagnosis target system,
A storage step in which the terminal device stores normal time data which is operation data of the diagnosis target system at normal time;
A diagnosis requesting step in which the terminal device makes a diagnosis request by transmitting operation data of the diagnosis target system before and after a failure detection time point to the center device as failure data;
By the center apparatus transmits the pre-Symbol failure time data received from the terminal device to a plurality of said terminal devices, and cooperation request step of requesting cooperation with respect to the diagnosis request,
A plurality of the terminal devices derive and derive candidate conditions that can be the failure occurrence conditions based on the normal time data stored in the storage step and the failure time data received from the center device. A diagnosis cooperation step of cooperating with a diagnosis request for the failure by transmitting the candidate condition list to the center device as a result as a candidate condition list;
When the center device receives a plurality of candidate condition lists from a plurality of terminal devices, an integration step of integrating the plurality of candidate condition lists into a single integrated list;
Fault diagnosis method including   The integration step specifies one processing target list from the candidate condition list received from a plurality of the terminal devices, further specifies one processing target condition from the candidate conditions included in the processing target list, When a subset of the processing target conditions exists in all of the candidate condition lists other than the processing target list, a series of processes of adding the processing target conditions to the integrated list The failure diagnosis method according to claim 4, which is performed for all the candidate conditions included in the candidate condition list. The terminal device, the detection steps for detecting the failure in the diagnosis target system itself is mounted,
Further fault diagnosis method according to claim 4 or claim 5 comprising a.

Images