JP2002261780A - Node protection system and node protection apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent difficulties in operation by surely protecting the control of a load and communication according to switch operation, even if power supply to a node is interrupted. SOLUTION: When the interruption of the supply of power at the side of a vehicle-mounted battery is confirmed by a power supply-monitoring section 102 of an ECU 20, a command for switching an H line 109 of a CAN bus 110 to a 5 V power line is transmitted from a transceiver 106 that is controlled by a CAN controller 105, using the power supply of an auxiliary battery 102a to either of other ECUs 10, 30, and 40. When a reply command to the transmitted command is received, the H line 109 of the CAN bus 110 is switched to a side that is connected to a power supply section 104 via a switch SW 103 by a control section 101, can be driven using a power supply that is supplied from the H line 109 of the CAN bus 110, and at the same time, communication when the supply of power from the side of the vehicle-mounted battery is interrupted is made by an L line 108 of the CAN bus 110.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to communication at the time of power-off of a node connected to a vehicle body network and controlling at least a load which may hinder driving according to operation of a switch. The present invention relates to a node protection system and a node protection device that protect control of a failure or a load.

[0002]

2. Description of the Related Art As the number of electric devices of a motor vehicle increases, a large number of operation switches for individually turning on / off the electric devices are provided in a driver's seat. In this case, in order to avoid an increase in the number of core wires of a harness wire, which is a wiring from the operation switch to the power relay of each electric device, for example, a driver seat and a power relay as disclosed in JP-A-64-06540 are disclosed. A technique has been proposed in which a device for performing multiplex transmission is provided.

According to this technique, operation information of a large number of operation switches provided in a driver's seat is taken into a first control unit provided in the vicinity of the driver's seat, and a power relay of each of the electric devices is connected to a different power supply relay from the driver's seat. The first control unit is mounted on a second control unit arranged in a space, and the first control unit and the second control unit are connected by a simple cable.

In order to reduce the number of cable cores, a multiplex communication device is provided between the first control unit and the second control unit, and a large number of control signals to be taken into the first control unit are multiplexed to reduce the number. To the second control unit, and the second control unit separates this into a number of control signals.

By the way, in such a technique, if any abnormality occurs in a communication cable or a circuit connected to the multiplex communication device, there is a possibility that a large number of electrical devices will not operate. Therefore, in the publicity of Japanese Patent Application Laid-Open No. 11-151999, when the communication cable is damaged or a failure occurs in the multiplex communication device, the multiplex communication device is backed up so that the minimum necessary for traveling of the vehicle is provided. A multiplex communication control device has been proposed in which only electrical equipment can be restored.

[0006]

However, in the above-mentioned prior art, when the power supply to the multiplex communication control device which is a node is cut off, the backup of the multiplex communication device does not operate, and the minimum required for the traveling of the vehicle. Since it is impossible to recover the electrical equipment, there is a possibility that the operation may be hindered.

[0007] The present invention has been made in view of such a situation, and even when power to a node for controlling at least a load that may hinder operation is cut off. To provide a node protection system and a node protection device that can perform safe driving without hindering driving by protecting communication failure and load control. It is.

[0008]

According to a first aspect of the present invention, there is provided a node protection system which is connected to a vehicle body network and controls each load according to a switch operation. A node protection system that protects at least a communication failure or a load control of a node that controls a load that may hinder operation, and a node that controls at least a load that may hinder operation. A node protection device that is built in and connected to the body network via a two-wire bus;
A node protection support device that is built in a node that controls loads that do not hinder driving and that is connected to the body network via a two-wire bus, and that the node protection device is mounted on a vehicle When it is confirmed that the power supply from the battery is cut off, the node protection support device is requested to change one of the two-wire buses to a line of a predetermined voltage by using the power of the auxiliary battery, and from one of the lines, The load is controlled using the supplied power, and communication is performed using the other line of the bus.
The node protection device includes a first power supply unit that uses a power supply from the vehicle-mounted battery as a driving power supply, a power supply monitoring unit that includes an auxiliary battery, and monitors a power supply state from the vehicle-mounted battery. When the power supply monitoring unit confirms that the supply of power from the vehicle-mounted battery is cut off, a communication for transmitting a command for switching one of the buses to the power supply line to the node protection support device using the power supply of the auxiliary battery. When receiving a reply command to the command from the control means and the node protection support apparatus, the first switch SW is switched to a side where one of the buses is connected to the first power supply unit using the power supply of the auxiliary battery. Control means,
The node protection support device includes a second power supply unit that uses a power supply from the vehicle-mounted battery as a driving power source, transmits a reply command to the node protection device, and sets one of the buses to the second switch SW to the second power supply. Second to switch to the side connected to the power supply
Control means. Also,
The node protection device includes a first power supply unit that uses a power supply from a vehicle-mounted battery as a driving power supply, and an auxiliary battery.
The power supply monitoring means for monitoring the power supply state from the vehicle-mounted battery side, and when the power supply monitoring means confirms that the power supply from the vehicle-mounted battery side has been cut off, the auxiliary battery power supply is used to support node protection. Communication control means for transmitting a command for switching one side of the bus to the recessive line to the device, and upon receiving a reply command for the command from the node protection support device side, drives the power supply booster circuit using the power supply of the auxiliary battery. And a first control means for increasing the recessive voltage supplied from one of the buses to a predetermined value. The node protection support device transmits a reply command to the node protection device side and controls one of the buses. A second control means for switching to the sensitive line may be provided. The node protection system according to claim 4 may be connected to a vehicle body network and control at least one of the plurality of nodes in accordance with an operation of a switch. A node protection system that protects communication failures and load control of a node that controls a certain load, and is built in at least a node that controls a load that may hinder operation, and is connected to a body network. A node protection device connected via a one-wire bus;
A node protection support device that is built in a node that controls loads that do not hinder driving and that is connected to the body network via a one-wire bus, and that the node protection device is mounted on a vehicle When it is confirmed that the power supply from the battery is cut off, the power supply of the auxiliary battery is used to request the node protection support device to change the communication pulse of the one-wire bus, and the changed communication pulse is used as a power source to load the load. In addition to controlling, communication is performed using communication pulses. The first control means requests the node protection support device to increase the traffic of the one-wire bus to the maximum when it is confirmed that the power supply from the vehicle-mounted battery is cut off. And a sub-power supply circuit that generates a sub-power supply using a communication pulse whose traffic is increased to the maximum when a response to the request is received, and the node protection support device responds to the request and receives the request. And second control means for maximizing the traffic of the one-wire bus. In addition, the node protection device, when it is confirmed that the power supply from the vehicle-mounted battery is cut off,
First control means for requesting the node protection support device to increase the voltage of the communication pulse of the one-wire bus, and, when there is a response to the request, generating a sub power supply using the communication pulse whose voltage has been increased. And a second power supply circuit that responds to the request and, when receiving the request, increases the voltage of the communication pulse of the one-wire bus. . Also,
The node protection device and the node protection support device are connected to the main control device via the body network, and the main control device monitors the power supply of the node protection device. It is possible to notify the node protection support device of a request to change the communication pulse, and notify the node protection device of a response from the node protection support device. Further, when receiving the request for changing the communication pulse from the node protection device, the main control device can change the communication pulse by itself and notify the node protection device of a response to the request. The node protection device according to claim 9, which is connected to a vehicle body network and protects a communication failure of a node for controlling a load and load control, and is connected to the body network. A power supply monitoring unit for monitoring a power supply state from the vehicle-mounted battery side, including a two-wire bus, a power supply unit using a power supply from the vehicle-mounted battery as a driving power source, an auxiliary battery, and a power supply When it is confirmed by the monitoring means that the supply of power from the vehicle-mounted battery is interrupted, one of the two-wire buses is changed to a line of a predetermined voltage for another node using the power of the auxiliary battery. A communication control means for transmitting a command for requesting, and a power supply supplied from one line is used to control a load, and the other line of the bus is used for the communication control means. Characterized in that it comprises a control means for causing the communication Te. The communication control unit transmits a command for switching one of the buses to the power supply line, and the control unit
When a reply command to the command is received from another node, the switch SW can be switched to the side where one of the buses is connected to the first power supply unit using the power supply of the auxiliary battery. Further, the communication control means transmits a command for switching one of the buses to the recessive line, and the control means, upon receiving a reply command to the command from another node, uses the power supply of the auxiliary battery to activate the power supply booster circuit. It can be driven to boost the recessive voltage supplied from one of the buses to a predetermined value. A node protection device according to claim 12, which is connected to a body network of a vehicle and protects a communication failure of a node for controlling a load and control of a load, wherein the node protection device is connected to the body network. A first power supply unit having a one-wire bus, an auxiliary battery, and a power supply from the vehicle-mounted battery side as a driving power supply, and interruption of power supply from the vehicle-mounted battery side is confirmed. Communication control means for requesting another node to change the communication pulse of the one-wire bus using the power supply of the auxiliary battery, and, when there is a response to the request, controlling the load using the changed communication pulse as a power supply. And control means for performing communication using the communication pulse. The communication control unit requests that the traffic of the one-wire bus be increased to the maximum, and when there is a response to the request, the control unit drives the sub-power supply circuit using the power source of the auxiliary battery, and sets the communication pulse. To generate a sub power supply. Further, the communication control means includes:
The control means requests to increase the voltage of the communication pulse of the linear bus, and the control means drives the sub-power supply circuit using the power supply of the auxiliary battery, and generates the sub-power supply using the communication pulse with the increased voltage. can do. In the node protection system and the node protection device according to the present invention, at least a node that controls a load that may hinder operation includes a node protection device, and the load control that does not hinder operation. When the node protection device confirms that the supply of power from the vehicle-mounted battery is cut off, the power supply of the auxiliary battery is used to supply power to the node protection support device. The control and communication of the load are performed by using the requested and supplied power.

[0009]

Embodiments of the present invention will be described below.

(First Embodiment) FIG. 1 is a diagram showing a first embodiment of a node protection system according to the present invention, and FIG.
5 is a flowchart for explaining a node protection method in the node protection system of FIG.

The node protection system shown in FIG. 1 includes a node protection device 100 and a node protection support device 100a. The node protection device 100 is built in, for example, an ECU (Electronic Control Unit) 20, which is a node for controlling at least a load that may hinder operation when the power is cut off. The details will be described later.

The node protection support device 100a is a node for controlling a load which does not hinder the operation even if the power is cut off, for example, the ECUs 10, 30, and 4
0, which will be described later in detail.
1 shows a case where the node protection support device 100a of FIG. 1 is incorporated in the ECU 10 for convenience of explanation.
Each of the ECUs 10 to 40 has a two-wire CAN (described later).
It is connected to the body system network 1 via the bus 110 and can communicate with each other.

[0013] The ECU 10 is provided in a driver seat.
The operation of the W (switch) 11 controls on / off of a load, for example, SW12. The ECU 20 uses the SW
The operation of 21 controls the on / off of a load, for example, the light 22. The ECU 30 controls on / off of a load, for example, an A / C (air conditioner) 32 by operating the SW 31. The ECU 40 determines that S
The operation of W41 controls on / off of a load, for example, the meter 42.

Here, the above-described SW 12, light 22,
Of the A / C 32 and the meter 42, for example, the light 22
Is a load that may hinder nighttime driving if on / off control becomes impossible. In contrast,
The SW 12, the A / C 32, and the meter 42 are loads that do not hinder operation even if on / off control becomes impossible. Therefore, as described above, the ECU 20 that controls the turning on / off of the light 22 has the node protection device 1
The ECU 10, 30, and 40 that control ON / OFF of the SW 12, the A / C 32, and the meter 42 include a node protection support device 100a.

The node protection device 100 incorporated in the ECU 20 includes a control unit 101, a power supply monitoring unit 102,
W103, power supply unit 104, CAN controller 105,
Transceiver 106, connector 107, CAN bus 11
0 is provided.

The control unit 101 as the first control means includes:
When the CAN controller 105 controls the predetermined operation of the load 22 and the like according to the operation state of the SW 21 and receives a confirmation result indicating that the supply of the 12 V power from the power monitoring unit 102 has been interrupted, the CAN controller 105 On the other hand, it issues a command transmission instruction to switch, for example, the H line 109 of the CAN bus 110 described later to a 5V power supply line.

Power supply monitoring unit 102 as power supply monitoring means
Has an auxiliary battery 102a, monitors the supply state of 12V power from the vehicle-mounted battery (not shown), and controls the line switching of the CAN bus 110 by switching the switch SW103 according to the supply state. . In other words, when the power of 12 V is normally supplied, the switch SW 103 is switched to the terminal a to
When the power supply of the auxiliary battery 102a is cut off for some reason, the switching SW 103 is set to the terminal b using the power supply of the auxiliary battery 102a.
Side. Incidentally, the auxiliary battery 102a of the power monitoring unit 102 is set to have a capacity that allows several times of communication.

As a result, even when the 12V power supply to the ECU 20 is cut off, the auxiliary battery 102a
Are used, the ECU 20 and the ECUs 10, 3
0 and 40 are maintained, and 5 through a H bus 109 of a CAN bus 110 to be described later.
V is supplied from any of the other ECUs 10, 30, and 40, so that the control unit 101 and the CAN controller 10
5. Driving of the transceiver 106 and the like becomes possible, and the on / off control of the light 22 and the like as the load described above is also maintained.

Switch SW103 as first switch SW
The power supply unit 1 is a 12V power supply from the vehicle battery side.
04, the terminal is switched to the terminal a side and 1
When the 2V power supply is cut off, the terminal is switched to the terminal b side. The power supply unit 104 as a first power supply unit converts 12V power from the vehicle-mounted battery to 5V.

The CAN controller 105 controls a transceiver 106 that communicates via a CAN bus 110. The transceiver 106 sends and receives information via the CAN bus 110. Here, the CAN controller 105
And the transceiver 106 constitute a communication control unit.

The connector 107 is connected to the body network 1 via a CAN bus 110. CAN
The bus 110 is a two-wire system having an L line 108 and an H line 109. Here, in such a two-wire system, communication is possible by using one of the L line 108 and the H line 109, and when the power supply of 12V from the vehicle-mounted battery is cut off, for example, the H line 109 is used for a 5V power supply line.

On the other hand, the node protection support device 100a built in the ECUs 10, 30, 40
a, switch SW 103a, power supply unit 104a, CAN controller 105a, transceiver 106a, connector 10
7a, a CAN bus 110 is provided.

Control unit 101a as second control means
Controls the predetermined operations of the load SW 12, A / C 32, meter 42, and the like according to the operation status of the above-described SW 11, 31, and 41, and sets the H line 109 of the CAN bus 110 to 5 V from the ECU 20 side. When a command for switching to the power supply line is received, the switch SW103
Is switched from the terminal a to the terminal b.

Switch SW 103a as second switch SW
Switches between the terminals a and b under the control of the control unit 101a. Power supply unit 104a as second power supply unit
Converts the 12V power supply from the vehicle-mounted battery side to 5V.

The CAN controller 105a controls a transceiver 106a that communicates via the CAN bus 110. The transceiver 106a transmits and receives information via the CAN bus 110. The connector 107a is a CAN
It is connected to the body network 1 via a bus 110. The CAN bus 110 is a two-wire system having an L line 108 and an H line 109.

Next, a node protection method in the node protection system having such a configuration will be described.

First, as shown in FIG. 2, the power supply monitoring unit 10 of the node protection device 100 built in each ECU 20.
2, 12V from the vehicle battery (not shown)
Is monitored (step 201). 1
When the power supply of 2V is normal (step 20)
2), the switching SW 103 is switched to the terminal a side.
At this time, the 12 V power supply from the vehicle-mounted battery is converted to 5 V by the power supply unit 104 and the control unit 101
Since the signals are supplied to the N controller 105, the transceiver 106, and the like, the communication control by the control unit 101 using the L line 108 and the H line 109 of the CAN bus 110 is normally performed, and the ON / OFF of the light 22 or the like as the load is performed. The off control is also performed normally (step 203).

On the other hand, in step (202), one of the signals from the vehicle battery (not shown)
When the supply of the 2V power is cut off, the cutoff is confirmed by the power supply monitoring unit 102 of the node protection device 100 of the ECU 20, and the confirmation result is notified to the control unit 101 (step 204). At this time, monitoring by the power supply monitoring unit 102 is performed using the power supply of the auxiliary battery 102a. At this time, the control unit 101, the CAN controller 105, and the transceiver 1 are powered by the auxiliary battery 102a.
06 or the like.

When the control unit 101 receives the confirmation result indicating that the supply of the 12V power from the power supply monitoring unit 102 has been cut off, the control unit 101 sends another EC to the CAN controller 105.
H line 1 of CAN bus 110 on U10,30,40 side
An instruction to transmit a command for switching 09 to a 5V power supply line is issued (step 205). When the CAN controller 105 receives the transmission instruction, the transceiver 106
To any of the other ECUs 10, 30, 40 via the CAN
A command for switching the H line 109 of the bus 110 to a 5V power supply line is transmitted (step 206).

Here, the H line 10 of the CAN bus 110
The transmission destination of the command for switching 9 to the 5V power supply line may be all of the ECUs 10, 30, and 40.
According to a predetermined algorithm, the data may be sequentially sent to any of the ECUs 10, 30, and 40.

Here, it is assumed that, for example, ECU 10 receives the command. EC that received the command
The node protection support device 100a of U10
A reply command is transmitted to the ECU 20, which acknowledges that the 10 H line 109 is to be switched to the 5V power line (step 207).

At this time, on the node protection support device 100a side of the ECU 10, the switching unit SW1 is controlled by the control unit 101a.
03a is switched from the terminal a to the terminal b. As a result, 5V from the power supply unit 104a on the node protection support device 100a side can be supplied to the ECU 20 via the H line 109 of the CAN bus 110.

The control unit 101 of the ECU 20 waits for reception of the reply command.
W103 is switched to the terminal b side (step 209). Thus, the ECU 20 sets the H line 1 of the CAN bus 110
Driving is maintained (step 210) because a 5V power supply supplied via the power supply 09 can be used. Also,
Communication when the supply of the 12V power is cut off is performed using the L line 108 of the CAN bus 110 (step 211).

As described above, in the first embodiment, for example, the power supply monitoring unit 1 of the node protection device 100 of the ECU 20
02, it is confirmed that the supply of power from the vehicle-mounted battery has been interrupted.
controlling the CAN controller 105 using the power supply of
From the transceiver 106 to another node protection support device 100
a to any of the ECUs 10, 30, and 40 incorporating
When a command for switching, for example, the H line 109 of the AN bus 110 to a 5V power supply line is transmitted and a reply command to the transmitted command is received, the switching SW 103 is switched to the H line 109 of the CAN bus 110 using the power supply of the auxiliary battery 102a. Switching to the side connected to the power supply unit 104 is made. As a result, communication when the supply of power from the vehicle-mounted battery is cut off is performed using the power supply of the auxiliary battery 102a, and thereafter, driving is performed using the power supply supplied from the H line 109 of the CAN bus 110. For example, even when the power supply to the ECU 20 that controls the load that may hinder the operation is cut off at least by shutting down the power supply, the operation according to the operation of the SW 21 is performed. Since the control of the load of the light 22 and the like is reliably protected, there is no hindrance to driving, and safe driving can be performed.

In the first embodiment, the case where the 5V power supply line is switched to the H line 109 has been described, but it is needless to say that the 5V power supply line may be switched to the L line 108.

(Second Embodiment) FIG. 3 is a diagram showing a second embodiment in which the configuration of the node protection system in FIG. 1 is changed, and FIG. 4 is a node in the node protection system in FIG. It is a flowchart for explaining a protection method. In the drawings described below, the same parts as those in FIG. 1 are denoted by the same reference numerals, and redundant description will be omitted.

In the node protection system shown in FIG. 3, the switching SW 103 of the node protection device 100 shown in FIG. 1 is replaced with a power supply boosting circuit 103A. The power supply boosting circuit 103A boosts a recessive voltage of, for example, 2.5V supplied through the H line 109 of the CAN bus 110 to, for example, 5V. Further, in the node protection support device 100b of FIG. 3, the switching SW 103a of the node protection support device 100a of FIG. 1 is omitted. That is, in the node protection support apparatus 100b of FIG.
As will be described later, when a command for switching the H line 109 of the CAN bus 110 to the 2.5V recessive line is received from the ECU 20 side, the control unit 101 a
By controlling the controller 105a,
The line 109 is switched to a recessive line.

Next, a node protection method in the node protection system having such a configuration will be described.

First, as shown in FIG. 4, the power supply monitoring unit 10 of the node protection device 100A built in the ECU 20.
2, 12V from the vehicle battery (not shown)
The power supply state of the power supply is monitored, and when the power supply state is normal, the communication control by the control unit 101 is performed normally as described above (steps 401 to 403).

On the other hand, in (Step 402), when the supply of 12V power from the vehicle-mounted battery (not shown) is interrupted by the ECU 20 for some reason, the control unit 101 monitors the power supply as described above. Upon receiving the confirmation result indicating that the supply of the 12 V power from the unit 102 has been interrupted, the transmission instruction of the command for switching the H line 109 of the CAN bus 110 to the 2.5 V recessive line is instructed to the CAN controller 105. (Steps 404 and 405). When the CAN controller 105 receives the transmission instruction, the transceiver 106
To any of the other ECUs 10, 30, 40 via the CAN
A command for switching the H line 109 of the bus 110 to the recessive line of 2.5 V is transmitted (step 4).
06).

Here, the H line 10 of the CAN bus 110
As described above, the transmission destination of the command for switching 9 to the recessive line of 2.5V is ECU 10, 30,.
40, or may be sent to one of the ECUs 10, 30, 40 in order according to a predetermined algorithm.

Any one of the ECUs 1 receiving the command
0, 30, and 40 node protection support devices 100b
When the ECU acknowledges that the H line 109 of the N bus 110 has been switched to the recessive line of 2.5 V,
20 (step 407).

At this time, the control unit 101a of the node protection support apparatus 100b controls the CAN controller 105a to switch the H line 109 of the CAN bus 110 to a recessive line. Thereby, the node protection support device 10
2.5V from 0b side is H line 1 of CAN bus 110
09 can be supplied to the ECU 20 side.

The control unit 101 of the node protection device 100A of the ECU 20 waits for reception of the reply command. When the control unit 101 receives the reply command, the control unit 101 sends the H line 109 of the CAN bus 110 to the power supply boosting circuit 103A via the power supply monitoring unit 102. Boost 2.5V to 5V (Step 40)
8,409). Thus, the ECU 20 can use the 5V power supply boosted by the power supply boosting circuit 103A, so that the driving is maintained (step 410). The communication when the supply of the 12V power is cut off is performed by using the L line 108 of the CAN bus 110 as described above (step 411).

As described above, in the second embodiment, for example, the power supply monitoring unit 1 of the node protection device 100 of the ECU 20
02, it is confirmed that the supply of power from the vehicle-mounted battery has been interrupted.
controlling the CAN controller 105 using the power supply of
From the transceiver 106 to another node protection support device 100
b to any of the ECUs 10, 30, and 40 incorporating
When a command for switching, for example, the H line 109 of the AN bus 110 to a 2.5 V recessive line is transmitted, and a reply command to the transmitted command is received, the power supply boosting circuit 103A is driven and the CAN bus 11
Since the 2.5 V of the 0 H line 109 is boosted to 5 V, the drive and communication are maintained as described above, and at least the control of the load which may hinder the operation is surely protected. In addition, safe driving can be performed without hindrance to driving.

(Third Embodiment) FIG. 5 is a diagram showing a third embodiment in which the configuration of the node protection system of FIG. 1 is changed, and FIG. 6 is a diagram showing a node in the node protection system of FIG. It is a flowchart for explaining a protection method.

The node protection system shown in FIG.
A node protection device 100B built in the ECU 20 and a node protection support device 100c built in the ECUs 10, 30, and 40 are connected to the body network 1 via a one-wire communication line 109a.

In FIG. 5A, the node protection device 100B includes a power supply unit 104 having an auxiliary battery 102a, a control unit 101, and a transceiver 106b having a sub power supply circuit 106d. The node protection support device 100c includes a power supply unit 104a and a control unit 101.
a and a transceiver 106c.

The normal communication traffic in each of the ECUs 10 to 40 is as shown in FIG.
On the other hand, for example, when the supply of 12 V power from the vehicle-mounted battery (not shown) is interrupted by the ECU 20 for some reason, the control unit 101 of the node protection device 100B uses the power supply of the auxiliary battery 102a of the power supply unit 104, Another ECU via the transceiver 106b
10, 30, and 40 are requested to increase the communication traffic to the maximum as shown in FIG. Then, upon receiving a notification that the traffic has been increased from the other ECUs 10, 30, and 40, the sub power supply circuit 106d is driven, and the sub power supply generated by the sub power supply circuit 106d is used.

Next, a node protection method in the node protection system having such a configuration will be described.

First, as shown in FIG.
The power supply monitoring function of the control unit 101 of the node protection device 100B incorporated in the power supply 20 monitors the supply state of the 12V power supply from the vehicle-mounted battery (not shown). Is normally performed (steps 601 to 603).

On the other hand, in (Step 602), when the supply of 12V power from the vehicle-mounted battery (not shown) is interrupted by the ECU 20 for some reason, for example, the control unit 101 causes the power supply monitoring function to control the power supply. It is confirmed that the supply is interrupted (step 604).

At this time, the control unit 101
For example, the power supply is notified to the ECU 10 via 06b (step 605). in this case,
The control unit 101 and the transceiver 106b are driven by the auxiliary battery 102a of the power supply unit 104.

In the node protection support device 100c of the ECU 10 receiving the notification, the control unit 101a controls the transceiver 106c to increase the traffic to the maximum as shown in FIG. Notify that traffic has been raised (step 60)
6).

The ECU 20 waits to receive the notification. When the notification is received (step 607), the control unit 101 causes the sub power supply circuit 10
6d is driven (step 608), and a sub power supply is generated using the voltage shown in FIG. 5C (step 60).
9). Here, the hatched portion in FIG. 5C can be easily grasped by the interval of each pulse.

Thus, the ECU 20 operates the sub power supply circuit 1
Driving is maintained because the sub-power supply generated by 06d can be used (step 610). Also,
The communication when the supply of the 12V power on the ECU 20 is cut off is performed without any trouble by increasing the traffic to the maximum on the ECU 10 side as shown in FIG. 5C (step 611).

As described above, in the third embodiment, for example, when the supply of 12 V power from the vehicle-mounted battery (not shown) is cut off by the ECU 20 for some reason, the supply of power to the ECU 10 is cut off, for example. As shown in FIG. 5C, the ECU 10 receiving the notification notifies the ECU 20 that the traffic is increased to the maximum, and the ECU 20 generates a sub power supply by driving the sub power supply circuit 106d. By doing so, as above,
Driving and communication are maintained, and load control is reliably protected, so that driving is not hindered and safe driving can be performed.

(Fourth Embodiment) FIG. 7 is a diagram showing a fourth embodiment in which the configuration of the node protection system of FIG. 5 is changed. In the drawings described below, the same parts as those in FIG. 5 are denoted by the same reference numerals, and redundant description will be omitted.

In the fourth embodiment, as shown in FIG. 7A, each of the ECUs 10 to 40 is connected to a main ECU 50 as a main control device via a body network 1 and a power supply line 2. . In addition, the node protection device 100B of the ECU 20 and each of the ECUs 10, 30, 40
The configuration of the node protection support device 100c is the same as that of FIG.

In the node protection system having such a configuration, communication using traffic shown in FIG. 7B is normally performed. The main ECU 50 monitors the power supplies of the node protection device 100B of the ECU 20 and the node protection support devices 100c of the ECUs 10, 30, and 40.
When detecting that the supply of power to the node protection device 100B of the CU 20 has been cut off, for example, it instructs the ECU 10 to increase the traffic to the maximum. When the main ECU 50 receives the notification that the traffic has been increased from the ECU 10, the main ECU 50 notifies the ECU 20 that the traffic has been increased.

As a result, the sub power supply generated by the sub power supply circuit 106d can be used on the ECU 20 side as described above, so that driving and traffic are maximized as shown in FIG. 7 (c). Communication in the state is maintained.

As described above, in the fourth embodiment, each E
Since communication between the CUs 10 to 40 is managed by the main ECU 50, in addition to the effects described above, each ECU 10
４０40 can be intensively managed.

In the fourth embodiment, the main EC
When U50 detects, for example, the interruption of the power supply of node protection device 100B of ECU 20 described above, a case where U50 instructs ECU 10 to increase the traffic to the maximum has been described.
A similar instruction can be given to 40.

Further, the case where the main ECU 50 detects, for example, the interruption of the power supply of the node protection device 100B of the ECU 20 described above and instructs the ECU 10 to increase the traffic to the maximum, for example, has been described. Alternatively, the main ECU 50 itself may increase the traffic to the maximum as shown in FIG. 7C and notify the ECU 20 to that effect.

(Fifth Embodiment) FIG. 8 is a diagram showing a fifth embodiment in which the configuration of the node protection system of FIG. 5 is changed, and FIG. 9 is a node in the node protection system of FIG. It is a flowchart for explaining a protection method. In the drawings described below, the same parts as those in FIG. 5 are denoted by the same reference numerals, and redundant description will be omitted.

The node protection system shown in FIG.
The node protection device 100B built in the ECU 20 and the node protection support device 100c built in the ECUs 10, 30, and 40 are configured to be connected to the body network 1 via a one-wire communication line 109a. I have.

In FIG. 8 (a), the transceivers 106e and 106g of the node protection device 100C and the node protection support device 100d have power supply switching circuits 106f and 106f.
106h has been added. In other configurations,
This is substantially the same as FIG.

FIG. 8B shows the traffic of normal communication in each of the ECUs 10 to 40.
On the other hand, when the supply of 12V power from the vehicle-mounted battery (not shown) is interrupted by the ECU 20 for some reason, communication with the other ECUs 10, 30, and 40 in which the supply of 12V power is normally performed is performed. Fig. 8 (c)
As shown in the figure, the operation is performed in a state where the voltage is raised to, for example, 24V to 42V.

Next, a node protection method in the node protection system having such a configuration will be described.

First, as shown in FIG.
The power supply monitoring function of the control unit 101 of the node protection device 100C built in the power supply 20 monitors the supply state of the 12V power supply from the vehicle-mounted battery (not shown). Is normally performed (steps 901 to 903).

On the other hand, in (Step 902), when the supply of 12V power from the vehicle-mounted battery (not shown) is cut off by the ECU 20 for some reason, for example, the control unit 101 causes the power supply monitoring function to turn off the power supply. It is confirmed that the supply is cut off (step 904).

At this time, the control unit 101
For example, the power supply is notified to the ECU 10 via 06e (step 905). in this case,
The control unit 101 and the transceiver 106e are driven by the auxiliary battery 102a of the power supply unit 104.

The ECU 1 that has received the notification from the ECU 20
On the 0 side, the power supply switching circuit 106h is driven to attempt communication with the ECU 20 at, for example, 24 V (step 906). At this time, the ECU 20 waits for a response from the ECU 20 to the ECU 10, and if there is a response (step 907), the EC
The U10 determines that communication is possible. At this time, on the ECU 20 side, the sub power supply circuit 106d is driven by the control unit 101, and a sub power supply is generated using the voltage of 24V (steps 912 and 913).

Thus, the ECU 20 operates the sub power supply circuit 1
Driving is maintained because the sub-power supply generated by 06d can be used (step 914). Also,
Communication when the supply of 12V power is cut off on the ECU 20 side is performed without any trouble by using the 24V sub power supply by the sub power supply circuit 106d (step 915).

On the other hand, in (Step 907) the EC
If there is no response from U20 to ECU 10, power supply switching circuit 106h on ECU 10 side is driven and again, for example, at 36V
Communication with the ECU 20 is attempted (step 90).
8). At this time, if there is a response from the ECU 20 to the ECU 10 (step 909), as described above, the ECU 20
The sub-power supply circuit 106d is driven to generate a sub-power supply using the 36V voltage, so that the communication when the supply of the 12V power supply is interrupted on the ECU 20 side is not hindered by the 36V sub-power supply. (Steps 912-
915).

On the other hand, in (Step 909) the EC
If there is no response from U20 to ECU 10, power supply switching circuit 106h on ECU 10 side is driven, and again, for example, 42V
Communication with the ECU 20 is attempted (step 91).
0). At this time, the ECU 20 waits for a response from the ECU 20 to the ECU 10. If there is a response, as described above, the ECU 20
The sub power supply circuit 106d is driven to generate the sub power using the voltage of 42V, so that the communication when the supply of the 12V power is cut off on the ECU 20 side is not hindered by the 42V sub power. (Steps 912-
915).

As described above, in the fifth embodiment, for example, when the ECU 10 is notified from the ECU 20 that the supply of 12 V power from the vehicle-mounted battery is cut off, the power supply switching circuit 106h of the ECU 10 is driven. And
For example, communication with the ECU 20 at 24 V, 36 V, and 42 V is attempted, and the sub power supply circuit 106 d
The sub power supply is generated by any voltage of 24 V, 36 V, and 42 V that can communicate by driving the power supply, so that the drive and communication are maintained and the load control is reliably protected in the same manner as described above. , And safe driving is possible.

In the fifth embodiment, the ECU 10
The voltage by the power supply switching circuit 106h on the
V and 42V, but the present invention is not limited to this example.
A finer voltage may be set between 4V and 42V.

(Sixth Embodiment) FIG. 10 is a diagram showing a sixth embodiment in which the configuration of the node protection system of FIG. 8 is changed. Note that, in the drawings described below,
Parts common to those in FIG. 8 are denoted by the same reference numerals, and redundant description will be omitted.

In the sixth embodiment, as shown in FIG. 10A, each of the ECUs 10 to 40 and the main ECU 50 are connected via the body system network 1 and the power supply line 2. Further, the node protection device 100 of the ECU 20
C and the configuration of the node protection support device 100d of each of the ECUs 10, 30, and 40 are the same as those in FIG.

In the node protection system having such a configuration, communication using traffic shown in FIG. 10B is normally performed. Further, the main ECU 50 includes a node protection device 100C of the ECU 20 and each of the ECUs 10, 30, 40.
Monitoring the power supply of the node protection support device 100d of
For example, the node protection device 100C of the ECU 20 described above
When the interruption of the power supply to the ECU 10 is detected, for example, the ECU 10
Is instructed to increase to, for example, 24V to 42V. When the main ECU 50 receives the notification that the voltage has been increased from the ECU 10, it notifies the ECU 20 that the voltage has been increased.

As a result, the sub power supply generated by the sub power supply circuit 106d can be used on the ECU 20 side, as described above, so that the drive and the voltage from 24V to 42V as shown in FIG. The communication in the raised state is maintained.

As described above, in the sixth embodiment, each E
Since communication between the CUs 10 to 40 is managed by the main ECU 50, in addition to the effects described above, each ECU 10
４０40 can be intensively managed.

In the sixth embodiment, the main EC
When U50 detects, for example, the interruption of the power supply of node protection device 100C of ECU 20 described above, U50 instructs, for example, ECU 10 to increase the voltage to, for example, 24V to 42V.
Similar instructions can be given to the CUs 30, 40.

Further, the case where the main ECU 50 detects, for example, the interruption of the power supply of the node protection device 100C of the ECU 20 described above, for example, instructs the ECU 10 to increase the voltage, but is not limited to this example. Alternatively, the main ECU 50 itself may raise the voltage to, for example, 24 V to 42 V, and notify the ECU 20 of that, as shown in FIG.

In each of the above-described embodiments, the light 22 is exemplified as a load that may hinder operation at least when the power supply is cut off, and protection of the ECU 20 that controls the light will be described. However, the present invention is not limited to this, and it is needless to say that other ECUs that control loads such as wipers and turns that may interfere with driving can be protected.

In each of the above embodiments, the protection of the control of the ECU 20 when the supply of power from the vehicle-mounted battery is cut off by the above-described node protection system has been described. However, the control of the ECU 20 is protected. By turning on a warning light provided on the driver's seat side in conjunction with the operation, it is also possible to notify the driver of the interruption of power supply from the vehicle-mounted battery side. It is also possible to notify by voice in conjunction with the operation of turning on the warning light.

In any case, the above-described node protection system protects the control of the ECU 20 when the power supply from the vehicle-mounted battery is cut off, so that at least a place where maintenance and inspection can be performed is provided. Safe driving will be guaranteed.

[0089]

As described above, according to the node protection system and the node protection device according to the present invention, the node protection device is built in at least the node for controlling the load that may hinder the operation, and the operation is hindered. A node that performs load control that does not cause
When the node protection device confirms that the supply of power from the vehicle-mounted battery has been interrupted, it requests that power be supplied to the node protection support device using the power from the auxiliary battery, and controls the load using the supplied power. Communication is performed, so that communication failure and load control are protected even when power to a node for controlling at least a load that may hinder operation is cut off. Accordingly, safe driving can be performed without hindering driving.

[Brief description of the drawings]

FIG. 1 is a diagram showing a first embodiment of a node protection system according to the present invention.

FIG. 2 is a flowchart illustrating a node protection method in the node protection system of FIG. 1;

FIG. 3 is a diagram showing a second embodiment in which the configuration of the node protection system in FIG. 1 is changed.

FIG. 4 is a flowchart illustrating a node protection method in the node protection system of FIG. 3;

FIG. 5 is a diagram showing a third embodiment in which the configuration of the node protection system of FIG. 1 is changed.

FIG. 6 is a flowchart illustrating a node protection method in the node protection system of FIG. 5;

FIG. 7 is a diagram showing a fourth embodiment in which the configuration of the node protection system in FIG. 5 is changed.

FIG. 8 is a diagram showing a fifth embodiment in which the configuration of the node protection system in FIG. 5 is changed.

FIG. 9 is a flowchart illustrating a node protection method in the node protection system of FIG. 8;

FIG. 10 is a diagram illustrating a sixth embodiment in which the configuration of the node protection system in FIG. 8 is changed.

[Explanation of symbols]

Reference Signs List 1 body system network 2 power supply line 10 to 40 ECU 11, 12, 21, 31, 41 SW 22 light 32 A / C 42 meter 50 main ECU 100, 100A to 100C node protection device 100a to 100d node protection support device 101, 101a Control unit 102 Power supply monitoring unit 102a Auxiliary battery 103, 103a Switching SW 103A Power supply booster circuit 104, 104a Power supply unit 105, 105a CAN controller 106, 106a, 106b, 106c, 106e, 1
06g Transceiver 106d Sub power supply circuit 106f, 106h Power supply switching circuit 107, 107a Connector 108 L line 109 H line 109a Communication line 110 CAN bus

Claims (14)

[Claims] At least one of a plurality of nodes that are connected to a vehicle body network and control each load in accordance with an operation of a switch, the load having a possibility of hindering driving is controlled. A node protection system for protecting a communication failure of the node and a control of the load, wherein the node protection system is built in a node that controls at least a load that may hinder operation, and a two-wire system is connected to the body network. A node protection device connected via a bus of a type, and connected to the body network via a two-wire bus while being built in the node for controlling a load without impeding operation. A node protection support device, and when the node protection device confirms that the supply of power from the vehicle-mounted battery is cut off, the power of the auxiliary battery is Requesting the node protection support device to change one of the two-wire buses to a line of a predetermined voltage using a power source, and controlling the load using power supplied from the one line. A node protection system for performing communication using the other line of the bus. 2. The node protection device includes: a first power supply unit that uses a power supply from the vehicle-mounted battery as a driving power supply; and the auxiliary battery, and controls a power supply state from the vehicle-mounted battery. Power supply monitoring means for monitoring, and when it is confirmed by the power supply monitoring means that the supply of power from the vehicle-mounted battery is interrupted, one of the buses is provided to the node protection support device using the power supply of the auxiliary battery. Communication control means for transmitting a command for switching the power supply line to a power supply line; and receiving a reply command for the command from the node protection support device side, using the power source of the auxiliary battery to switch the first switching SW to one of the buses. And a first control unit for switching to a side connected to the first power supply unit, wherein the node protection support device is connected to the vehicle-mounted battery. A second power supply unit using the power supply as a driving power source, and transmitting the reply command to the node protection device side, and connecting a second switch SW to one of the buses to the second power supply unit. 2. The node protection system according to claim 1, further comprising second control means for switching to a side. 3. The node protection device includes: a first power supply unit that uses a power supply from the vehicle-mounted battery side as a driving power supply; and the auxiliary battery, and controls a power supply state from the vehicle-mounted battery side. Power supply monitoring means for monitoring, and when it is confirmed by the power supply monitoring means that the supply of power from the vehicle-mounted battery is interrupted, one of the buses is provided to the node protection support device using the power supply of the auxiliary battery. Communication control means for transmitting a command for switching to the recessive line, and upon receiving a reply command to the command from the node protection support device side, drives a power booster circuit using the power supply of the auxiliary battery, and And a first control means for increasing a recessive voltage supplied from one of the nodes to a predetermined value. It transmits the reply command to the serial node protector side, node protection system according to claim 1, characterized in that it comprises a second control means for switching one of said bus Les tweezers brine. 4. A plurality of nodes that are connected to a vehicle body network and control each load in accordance with an operation of a switch, at least controlling a load that may hinder driving. A node protection system that protects a communication failure of the node and a control of the load, wherein the node protection system is built in a node that controls at least a load that may hinder operation, and one line is connected to the body network. A node protection device connected via a bus of a type, and a node protection device built in the node for controlling a load which does not hinder operation, and connected to the body network via a one-wire bus. When the node protection device confirms that the supply of power from the vehicle-mounted battery is cut off, the power of the auxiliary battery is Requesting the node protection support device to change the communication pulse of the one-wire bus using a power source, controlling the load using the changed communication pulse as a power source, and performing communication using the communication pulse. A node protection system characterized by performing. 5. The node protection device, when it is confirmed that the power supply from the vehicle-mounted battery is cut off, increases the traffic of the one-wire bus to the node protection support device to the maximum. Request first
And a sub power supply circuit that generates a sub power supply using the communication pulse whose traffic has been increased to the maximum when there is a response to the request. 5. The node protection system according to claim 4, further comprising a second control unit that responds to the request and, when receiving the request, increases traffic of the one-wire bus to a maximum. 6. The node protection device increases the voltage of the communication pulse of the one-wire bus to the node protection support device when it is confirmed that the power supply from the vehicle-mounted battery is cut off. First control means for requesting, and a sub-power supply circuit for generating a sub-power supply using the communication pulse whose voltage has been increased when there is a response to the request; 5. The node protection system according to claim 4, further comprising a second control unit configured to increase a voltage of the communication pulse of the one-wire bus when the request is received and the request is received. 7. The node protection device and the node protection support device are connected to a main control device via the body network, wherein the main control device monitors a power supply of the node protection device, and Upon detecting a power cut-off of the protection device, a request to change the communication pulse is sent to the node protection support device, and a response from the node protection support device is sent to the node protection device. Item 7. The node protection system according to any one of Items 4 to 6. 8. When receiving a request for changing the communication pulse from the node protection device, the main control device changes the communication pulse by itself and notifies the node protection device of a response to the request. The node protection system according to claim 7, wherein 9. A node protection device that is connected to a vehicle body network and protects a communication failure of a node for controlling load and protects the load control, wherein the two lines are connected to the body network. A power supply unit that uses a power supply from a vehicle-mounted battery side as a driving power supply; a power supply monitoring unit that has an auxiliary battery and monitors a power supply state from the vehicle-mounted battery side; When it is confirmed that the supply of power from the vehicle-mounted battery is interrupted, one of the two-wire buses is changed to a line of a predetermined voltage for the other nodes using the power of the auxiliary battery. Communication control means for transmitting a command for requesting the communication control means to control the load using power supplied from the one line; Node protector, characterized in that it comprises a control means for causing the communications using the other lines of the bus. 10. The communication control means transmits a command for switching one of the buses to a power supply line, and the control means, when receiving a reply command to the command from the other node, sets the auxiliary battery. 10. The switch SW is switched to a side where one of the buses is connected to the first power supply unit using a power supply.
3. The node protection device according to item 1. 11. The communication control means transmits a command for switching one of the buses to a recessive line, and the control means, upon receiving a reply command to the command from the other node, sets the auxiliary battery. 10. The node protection device according to claim 9, wherein the power supply boosting circuit is driven by using the power supply, and the recessive voltage supplied from one of the buses is boosted to a predetermined value. 12. A node protection device that is connected to a vehicle body network and protects a communication failure of a node for controlling a load and protects the load control, wherein the one line is connected to the body network. A first power supply unit having an auxiliary bus and an auxiliary battery, and using a power supply from the vehicle-mounted battery side as a driving power supply; Communication control means for requesting another node to change the communication pulse of the one-wire bus using a power supply of a battery; and when there is a response to the request, the load is changed using the changed communication pulse as a power supply. Control means for controlling and performing communication using the communication pulse. 13. The communication control unit requests that the traffic of the one-wire bus be increased to a maximum, and the control unit uses a power source of the auxiliary battery when receiving a response to the request. The node protection device according to claim 12, wherein a power supply circuit is driven to generate a sub power supply using the communication pulse. 14. The communication control means requests that the voltage of the communication pulse of the one-wire bus be increased, and the control means drives a sub power supply circuit by using a power supply of the auxiliary battery, and the voltage becomes low. 13. The node protection device according to claim 12, wherein a sub power source using the raised communication pulse is generated.