JP2002016614A - On-vehicle gateway - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an on-vehicle gateway capable of eliminating transfer of unwanted data. SOLUTION: A gateway 100b is connected between a bus 103 closed to a user and a bus 105 opened to the user and has a function for converting a protocol or the like. When required data or regular data are sent to the gateway 100b, these data are transferred to another bus. When incomplete data or illegal data are sent to the gateway 100b, these data are not transferred through the gateway 100b.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an in-vehicle gateway, and more particularly to an in-vehicle gateway located between at least two types of buses and performing data transfer and protocol conversion.

[0002]

2. Description of the Related Art Japanese Patent Laid-Open Publication No.
No. 7 discloses a multiplex transfer method using a relay terminal located between a high-speed bus line and a low-speed bus line and having a protocol conversion function. In this technique, control data of a door power window motor or the like input to a local terminal on a low-speed bus line is transferred onto the low-speed bus line, protocol conversion is performed at a relay terminal, and flows through the high-speed bus line. The data is subjected to protocol conversion at another relay terminal, transferred on a low-speed bus line, and sent to another local terminal there to operate a power window motor or the like.

[0003] Further, Japanese Patent No. 2906039 discloses an engine control circuit (so-called traveling bus) using a gateway.
Discloses an electronic control unit for a vehicle that transfers data between the electronic control unit and a convenience control circuit (so-called information bus).

[0004]

As described above, in the conventional vehicle gateway, data protocol conversion and data transfer can be performed.
There has been a problem that unnecessary data that is not desirable in terms of safety or security may be transferred. Transferring unnecessary data that is not desirable for safety or security may affect the traveling system depending on the situation of the vehicle.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problem, and has as its object to provide an in-vehicle gateway that can eliminate unnecessary data transfer.

[0006]

According to one aspect of the present invention to achieve the above object, an on-vehicle gateway comprises:
An in-vehicle gateway for connecting at least two types of buses and performing data transfer and protocol conversion, confirms the contents of data packets from one of the at least two types of buses, and converts the data packet to the other according to the contents. It is characterized in that it is determined whether or not to transfer to a bus.

Preferably, the on-vehicle gateway further comprises a monitor for monitoring the condition of the vehicle, and restricts data to be passed or changes a band based on a result of monitoring by the monitor.

Preferably, the monitoring means monitors at least one of a power supply state of the vehicle, an engine state, a brake state, a running state, a failure state of mounted equipment, and a driver's riding state.

The in-vehicle gateway configured as described above confirms the content of the data packet and determines whether to transfer the data packet to the other bus according to the content. Can be eliminated.

[0010]

FIG. 1 shows a first embodiment of the present invention.
FIG. 2 is a diagram showing a configuration of an in-vehicle system in one embodiment. Referring to the drawing, the on-vehicle system includes three buses: an OEM bus 103, an ITS data bus 105, and a control system bus 107. The control system bus 107 and the OEM bus 103 are connected by the gateway 100a. The OEM bus 103 and the ITS data bus 105 are connected by a gateway 100b.

A carry-on device such as a mobile phone 306 or a personal computer 308 using a wireless LAN,
The connection to the TS data bus 105 is established by the gateway 100c.

The OEM bus 103 has a transmitting / receiving device 203
, Center cluster 205, and navigation device 2
07 is connected. An antenna 201 is connected to the transmitting / receiving device 203. Via the antenna 201,
Broadcast reception is performed with the broadcast station 304. In addition, the Internet 30 is provided by the on-board mobile phone 302.
A connection to 0 is also possible.

The OEM bus 103 is a bus that is closed to the user, and the ITS data bus 105 is a bus that is open to the user. The OEM bus 103 is a bus that can be set freely by a vehicle manufacturer and cannot be changed freely by a user. The ITS data bus 105 is a bus that allows the user to freely change settings such as adding / removing devices. is there.

FIG. 2 is a diagram for explaining the function of the gateway 100b. Referring to the figure, gateway 1
00b is the OEM bus 103 and the ITS data bus 105
It has a function of converting a protocol between the server and the server. The gateway 100b checks the content of the data packet sent to the OEM bus 103 and the ITS data bus 105, and determines whether to transfer the data packet to another bus according to the content.

That is, control (data filtering) is performed so that only necessary data and regular data pass through the gateway 100b, and incomplete data and illegal data do not pass through the gateway 100b. Thus, traffic can be secured without flowing unnecessary data, and unauthorized access can be prevented.

Although the buses 103 and 105 are closed buses and open buses for the user, respectively, a low-speed bus and a high-speed bus, a control bus and an information bus, or an external bus (a network constituted by a cellular phone or the like) )
The present invention can also be applied to a configuration in which an in-vehicle bus is connected by a gateway.

The following method can be considered as a data filtering method of the gateway.

(1) IEEE used for information systems, for example
The contents of the data packet from the high-speed bus such as 1394 are checked, the CRC included in the data is checked, and the data is checked for errors. If there is a data error, the data is rejected.

(2) Check the contents of the data packet,
For example, the transmitting node ID, the receiving node ID, the operation code, and the operand are checked. If data for stopping the engine of the control system, for example, is transmitted from the information system bus, the data is recognized as invalid data, filtered, and not transferred to the control system. .

FIG. 3 is a flowchart showing processing performed by the gateway according to the present embodiment.

Referring to the figure, it is determined in step S101 whether there is an error in the data of the transmitted data packet. If YES, the data packet is not transferred and the process ends. On the other hand, if there is no error in the data, the data is transferred to the other bus in step S103.

[Modification] Note that the state of the vehicle is monitored at the gateway, the attribute of data that can pass through the gateway is restricted based on the state of the vehicle, and the band (data amount per unit time) is changed. It may be. As a result, frequent traffic adjustment can be performed, and communication response can be improved.

For example, the following can be considered as the state of the vehicle to be monitored. (1) A power supply state such as OFF, ACC, IG ON obtained by sensing the voltage of the power supply line of ACC or IG.

(2) The operating or stopped state of the engine obtained by the signal from the engine control ECU or the ALT-L signal.

(3) The operating or non-operating state of the brake obtained by sensing the voltage applied to the stop lamp.

(4) Running or stopped state obtained by monitoring the vehicle speed pulse of the meter.

(5) A failure state of the mounted device obtained by monitoring a failure code or a diagnosis signal from each electronic device.

(6) The occupant riding state obtained by monitoring the signal of the occupant detection sensor provided inside the seat.

The following can be considered as control of the gateway based on the state of the vehicle. (Example 1) When there is a gateway connecting the control bus to which the engine control device is connected and the information bus, and a gateway connecting the information bus and the outside, the engine is controlled during traveling. It does not transfer data, but transfers data that controls the engine when the vehicle is stopped.

Thus, the engine can be started in advance during parking (stopping) to perform warm-up operation, or the air conditioner can be operated in advance to provide a comfortable in-vehicle environment. On the other hand, the engine is not suddenly stopped during traveling.

FIG. 4 is a flowchart showing a control method of the gateway in this example. Referring to the figure, it is determined whether the data input to the gateway in step S201 is data for controlling the engine. YES
If so, it is determined in step S203 whether the vehicle is running. If “YES” in the step S203, the data is not transferred to another bus in a step S205.

On the other hand, if NO in either step S201 or S203, data transfer is performed in step S207.

(Example 2) In the configuration of the bus and the gateway shown in the above Example 1, while the gateway connecting the control system bus and the information system bus is running, the diagnostic data for failure detection is not transferred. Diagnostic data is transferred only when the vehicle is stopped. As a result, the data transfer amount of the information bus can be reduced, and the response of devices connected to the bus can be improved. The same effect can be obtained by passing the diagnostic data only when a failure has occurred in the mounted device. Can be done.

FIG. 5 is a flowchart showing a gateway control method in the second embodiment. Referring to the figure, it is determined in step S301 whether or not the vehicle is running,
If YES, it is determined in step S303 whether the data input to the gateway is diagnostic data.
If YES in step S303, step S305
Does not transfer data.

On the other hand, if NO in either step S301 or S303, data transfer is performed in step S307.

(Example 3) In the configuration of the bus and the gateway shown in the above Example 1, the filtering policy is changed according to the power supply state. That is, the devices that operate depend on the power state. For example, devices related to traveling (ABS, engine control, transmission control)
Does not operate unless the IG (ignition) power supply is ON. On the other hand, the power status of devices such as audio is ACC.
It also operates when (accessory power is ON). For this reason, data packets directed to devices that are not operating due to the state of the power supply are cut by the gateway, so that the amount of data transferred on the bus can be reduced. Also,
By changing the operation of the gateway according to the power state, the battery can be saved. By detecting whether the vehicle is in operation according to the power state and changing the data filtering policy, the transfer effect can be improved, and reliability can be improved when necessary. Can be increased.

(Example 4) In a gateway connecting the inside and outside of the vehicle, the amount of data transferred from outside the vehicle is adjusted depending on the presence or absence of an occupant (driver or the like). For example, when downloading map data for navigation from outside the vehicle, when there is no occupant, the amount of data passing through the gateway per unit time is increased, and when the occupant is on board, the amount of data flowing through the bus is reduced, and the traffic volume Reduce. The communication response between the in-vehicle devices can be increased by the reduced traffic amount.

In this example, when there is no occupant, it is considered that the car is not running, and in this case, even if the data is erroneously transferred, the effect is considered to be relatively small. For this reason, it is possible to reduce the authentication and filtering processes at the gateway and increase the transfer efficiency.

On the other hand, if there is a passenger, the influence of erroneous transfer is large, so that the reliability can be improved by taking care of the authentication and filtering processing more than the transfer efficiency at the gateway.

When no occupant is present, it is considered that the control system equipment which requires real-time response among the on-vehicle equipment is not operating. At this time, relatively large data such as map data can be transferred via the gateway. However, when there is a passenger, it is conceivable that the control system device is operating, and relatively large data transfer such as map data can be cut by the gateway to reduce the amount of data on the bus.

As described above, according to this system, by controlling data at the gateway, it is possible to prevent intrusion of an illegal data packet or the like. Also, unnecessary data packets are not sent to the bus, so that the traffic volume can be reduced and the response can be improved.

Further, by monitoring the condition of the vehicle and finely adjusting the data passing through the gateway according to the condition, the intrusion of an unauthorized data packet can be more finely prevented, and the reliability can be improved. Can be further,
Bus traffic can also be reduced.

How to consider the vehicle state and the data filtering policy of the gateway depends on the concept of the system configuration. In any case, the function of changing the data filtering policy according to the vehicle state is used.
The transfer effect can be enhanced while ensuring the reliability when necessary.

The embodiments disclosed this time are to be considered in all respects as illustrative and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an in-vehicle system according to one embodiment of the present invention.

FIG. 2 is a diagram for explaining a function of a gateway 100b in FIG. 1;

FIG. 3 is a flowchart showing processing of the gateway in FIG. 2;

FIG. 4 is a diagram showing another process of the gateway.

FIG. 5 is a diagram showing another process of the gateway.

[Explanation of symbols]

100a-100c gateway, 103 OEM bus, 105 ITS data bus, 107 control system bus,
201 antenna, 203 reception control device, 205 center cluster, 207 navigation device, 209
Entertainment equipment.

Claims (3)

[Claims] 1. An in-vehicle gateway for connecting at least two types of buses and performing data transfer and protocol conversion, wherein the content of a data packet from one of the at least two types of buses is confirmed, and according to the content. An in-vehicle gateway for determining whether to transfer the data packet to the other bus. 2. The apparatus according to claim 1, further comprising a monitor for monitoring a state of the vehicle, wherein data to be passed is restricted or a band is changed based on a result of monitoring by the monitor. In-vehicle gateway as described. 3. The monitoring means monitors at least one of a power supply state, an engine state, a brake state, a running state, a failure state of mounted equipment and a driver's riding state of the vehicle. 2. The in-vehicle gateway according to 2.