JP2017091214A - Electronic controller - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic controller that can conduct a control with another electronic controller and a control independently from other electronic controllers, appropriately and efficiently.SOLUTION: When a master ECU40 receives a processing request from cooperation control applications 41a and 41b and from a single control application 41c at the same time, it determines which processing to prioritize based on the contents of the processing, and ensures the resources of a micro-controller 48 required for executing processing in the order of descending priorities, and allocates the resources to the corresponding processing.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an electronic control device that performs control in cooperation with another electronic control device and independent control independently of the other electronic control device.

  For example, Patent Document 1 discloses an in-vehicle information processing apparatus that can share information for function cooperation between a plurality of ECUs mounted on a vehicle in advance rather than being used by a vehicle control application of each ECU. Have been described.

  In this vehicle information processing apparatus, for example, a first ECU that executes an application program for navigation and a second ECU that executes an application program for transmission control are connected via an in-vehicle LAN.

  The first ECU executes a map search application that is a map search program, a drawing application that draws map data to be displayed in navigation using map information stored in a database, and the like. When the first ECU detects that there is a steep and winding slope in front of the vehicle when the map search application is executed, the transmission is automatically performed according to the road gradient and curve in order to improve fuel efficiency. It is effective to appropriately change the shift.

  For this reason, 2nd ECU shares data with 1st ECU200 for function cooperation. Specifically, before the second ECU executes transmission control, the first ECU transmits map data to the second ECU in advance. Thus, the second ECU can immediately refer to detailed map information when performing transmission control.

JP 2011-14033 A

  When performing control in which the first ECU and the second ECU cooperate with each other as in the example described above, for example, in the first ECU, a cooperation control application (for example, a map search application) for performing control in cooperation with the second ECU; In some cases, it is necessary to execute a single control application (for example, a drawing application) for performing single control at the same time.

  At this time, it is necessary for the first ECU to simply perform each process without considering whether the process is included in the cooperative control application or the process included in the single control application. If the processing is performed in order according to the time when it becomes, there is a possibility that the respective processing may not be appropriately processed or that efficient processing cannot be performed.

  The present invention has been made in view of the above-described points. When performing control in cooperation with another electronic control device and independent control independently of the other electronic control device, each control is performed. An object of the present invention is to provide an electronic control device that can perform processing appropriately and efficiently.

In order to achieve the above object, an electronic control device according to the present invention provides:
A storage unit (41) for storing application software;
The application software includes a cooperative control application (41a, 41b) for performing control in cooperation with another electronic control device, and a single control for performing control independently of the other electronic control device. Application (41c) is included,
A microcontroller (48) that executes processing included in the cooperative control application and processing included in the single control application, respectively, and includes, as resources, at least a microprocessing unit and a cache memory;
When it becomes necessary to execute the process included in the application for cooperative control and the process included in the single control application at the same time, the decision unit determines which should be prioritized based on the contents of each process (S120),
According to the priority determined by the determination unit, a resource allocation unit (S130) that secures resources necessary for execution of the process from a process with a higher priority and allocates it to the corresponding process.

  The cooperative control application and the single control application are not dependent on each other, and it is not necessary to start the other process after the end of one process. In other words, the processing of the cooperative control application and the processing of the single control application can be performed in parallel in the microcontroller. However, the processing of the cooperation control application and the processing of the single control application cannot always be performed in parallel due to restrictions on the processing capability of the microcontroller.

  Therefore, in the electronic control device of the present invention, the determination unit that determines which of the cooperative control application process and the single control application process should be prioritized is determined by the determination unit based on the processing contents. In accordance with the priority order, a resource allocation unit is provided that secures resources necessary for executing the process from the process with the highest priority order and allocates the resource to the corresponding process.

  Since it comprised in this way, if each load of the process performed simultaneously is small, a resource can be ensured and allocated with respect to each process, and each process can be processed in parallel. Accordingly, it is possible to efficiently execute the processing of the cooperation control application and the processing of the single control application. On the other hand, if the total processing load executed at the same time exceeds the processing capacity of the microcontroller and parallel processing cannot be performed, resources are allocated and allocated in order from the highest priority processing. Therefore, it is possible to surely execute the processing that is highly necessary to be processed earlier. As described above, in a situation where only one of the process of the cooperative control application and the process of the single control application can be executed, the processes can be executed in an appropriate order.

  The reference numerals in the parentheses merely show an example of a correspondence relationship with a specific configuration in an embodiment described later in order to facilitate understanding of the present invention, and are intended to limit the scope of the present invention. Not intended.

  Further, the technical features described in the claims of the claims other than the features described above will become apparent from the description of embodiments and the accompanying drawings described later.

It is a block diagram which shows the structure of the control system which concerns on 1st Embodiment. It is a figure which shows the software structure of master ECU and slave ECU, and the connection relation between master ECU and slave ECU. It is a figure for demonstrating the role of the domain abstraction layer in master ECU. It is a flowchart which shows the process performed in a domain abstraction layer. 5 is a flowchart showing in detail a priority order determination process in the flowchart of FIG. 4. It is a figure which shows the software structure of the electronic control apparatus which concerns on other embodiment.

  Hereinafter, an electronic control device according to an embodiment of the present invention will be described with reference to the drawings. Hereinafter, an example in which the electronic control device according to the present embodiment is applied to a vehicle control system will be described.

  For example, as shown in FIG. 1, the vehicle control system is applied to a hybrid vehicle having an engine and an electric motor (motor generator) as a travel drive source, and controls various in-vehicle devices mounted on the hybrid vehicle. Used to do. However, the control system is not limited to being applied to control of an in-vehicle device in a hybrid vehicle, but is applied to control of an in-vehicle device of an ordinary vehicle having only an engine or an electric vehicle having only an electric motor. Also good.

  FIG. 1 is a functional block diagram illustrating an example of various functions of the control system 1 in order to control a plurality of in-vehicle devices in the hybrid vehicle described above. However, FIG. 1 does not show all the functions of the control system 1. This is because, for convenience of explanation, FIG. 1 shows only an example of the configuration of the control system 1 according to the present embodiment.

  In FIG. 1, the control system 1 has a function for controlling a cooling mechanism 30, an engine 31, a transmission (TM) 32, a motor generator (MG) 33, a brake device 34, a steering device 35, and the like as in-vehicle devices. . However, as described above, the control system 1 may further have a function for controlling other in-vehicle devices such as a suspension, a high voltage battery, and an air conditioner.

  As shown in FIG. 1, in the control system 1, functions for controlling various on-vehicle devices 30 to 35 are divided into a plurality of logical blocks (functional blocks) 12 to 16 and 22 to 26 in advance, and the plurality of logics are controlled. It is configured by defining the connection relationship between the blocks 12-16 and 22-26. That is, the logical structure for controlling various vehicle-mounted devices 30 to 35 in the control system 1 is defined by the logical blocks 12 to 16 and 22 to 26 and the connection relationship between the logical blocks 12 to 16 and 22 to 26. ing. And the control system 1 controls the various vehicle-mounted apparatuses 30-35, when several logic blocks 12-16, 22-26 operate | move in cooperation according to the defined connection relation.

  Although not shown in FIG. 1, each of the logical blocks 12 to 16 and 22 to 26 has at least one, usually a large number of control blocks. Each logic block 12-16, 22-26 exhibits each function (role) by combining suitably the arithmetic processing in these many control blocks.

  For example, the engine control unit 24 as a logic block has a control block that inputs sensor signals from various sensors and converts them into signals that can be handled in the logic block in order to detect the operating state of the engine 31. . Further, the current generated torque is calculated from the operation state of the engine 31 grasped from the sensor signal, and when there is a difference from the command torque instructed from the upper logical block (powertrain coordinator (PTC) 22), A control block for calculating a target engine operating state for eliminating the difference is provided. Furthermore, a control block for calculating a throttle valve opening, a fuel injection amount and fuel injection timing, and an ignition timing for achieving the target engine operating state is provided. However, these are merely examples, and the engine control unit 24 may include a control block that performs other arithmetic processing necessary to exhibit the function. In addition, the control blocks in the engine control unit 24 including the exemplified control blocks can be appropriately integrated or, on the contrary, can be subdivided.

  The control system 1 is actually realized by distributing and mounting each of the logical blocks 12 to 16 and 22 to 26 as a control software such as a program or a database on a plurality of electronic control devices. In this case, the plurality of electronic control devices are connected via individual communication lines, or each electronic control device is connected to a common network so that the connection relationship of the logic blocks 12 to 16 and 22 to 26 can be maintained. The desired electronic control devices according to the connection relationship may be configured to communicate with each other. Note that it is not always necessary to mount each of the logic blocks 12 to 16 and 22 to 26 on separate electronic control devices, and some logic blocks may be mounted on a common electronic control device.

  The control system 1 according to the present embodiment is divided into a plurality of domains in advance according to the functions of the plurality of in-vehicle devices 30 to 35. In other words, the logical blocks 12 to 16 and 22 to 26 are divided into a plurality of domains 10 and 20 in advance according to a group of functions to be performed.

  The plurality of in-vehicle devices 30 to 35 are allocated to any one of the domains 10 and 20. Then, the domain control units 11 and 21 belonging to the allocated domains 10 and 20 calculate control target values of the in-vehicle devices 30 to 35 and directly output them to the in-vehicle devices 30 or control the in-vehicle devices 31 to 35. Output to the in-vehicle device control units 15, 16, 24 to 26. As shown in FIG. 1, each domain control unit 11, 21 is composed of at least one logical block.

  Specifically, in the example illustrated in FIG. 1, the control system 1 is divided into a motion domain 10 and an energy domain 20. The motion domain 10 is provided with a motion domain control unit 11 having a function of controlling the behavior of the vehicle in the front-rear direction and the lateral direction. The energy domain 20 is provided with an energy domain control unit 21 that has a function of controlling the power of the vehicle so as to accelerate or decelerate the vehicle or keep the speed constant.

  Further, in the control system 1 according to the present embodiment, as shown in FIG. 1, each vehicle-mounted vehicle is placed under each domain control unit 11, 21 according to a command (control target value) from the corresponding domain control unit 11, 21. Car-mounted device control units 15, 16, and 24 to 26 that control the operation states of the devices 31 to 35 are provided. These in-vehicle device control units 15, 16, 24 to 26 generate control signals for bringing the operation state of each of the in-vehicle devices 31 to 35 close to the control target value from the domain control units 11, 21. 35.

  Specifically, in the example illustrated in FIG. 1, a brake control unit 15 that controls the brake device 34 and a steering control unit 16 that controls the steering device 35 are provided below the motion domain control unit 11. Further, an engine control unit 24 that controls the engine 31, a transmission (TM) control unit 25 that controls the transmission 32, and an MG control unit 26 that controls the motor generator 33 are provided below the energy domain control unit 21. .

  The motor generator 33 generates regenerative energy when the vehicle is decelerated. A motor generator coordinator (MGC) 23 which is a logical block higher than the MG control unit 26 also manages the generation of the regenerative energy. This energy is DC converted by an inverter and stored in a high voltage battery (not shown).

  Here, various functions of the control system 1 exemplified as the logic blocks 12 to 16 and 22 to 26 in FIG. 1 will be described in detail.

  Various types of information necessary for the logical blocks 12 to 16 and 22 to 26 to perform their assigned functions are input to the control system 1. For example, various sensors (not shown) detect various operation parts (accelerator pedal, brake pedal, shift lever, steering wheel, etc.) operated by the driver for driving the hybrid vehicle, and the operation detection signal Is input to the control system 1. Further, the running state of the vehicle (for example, speed, acceleration, yaw rate, etc.) and the operating state of various on-vehicle devices 30 to 35 (for example, engine temperature, engine speed, transmission gear ratio, inverter temperature, motor speed, brake) An operation detection signal from a sensor that detects a hydraulic pressure, a steering angle, and the like is also input to the control system 1.

  The various signals described above are given to the domain controllers 11 and 21 and the in-vehicle device controllers 15, 16, and 24 to 26 of the control system 1.

For example, the motion domain control unit 11 receives an operation detection signal indicating operation of various operation units by the driver and an operation detection signal from a sensor that detects the running state of the vehicle. In principle, the motion domain control unit 11 calculates the control target values of the brake device 34 and the steering device 35 so that the vehicle behaves according to the operation of the operation unit by the driver.
More specifically, the vehicle behavior control unit 12 stabilizes the behavior of the vehicle and controls the vehicle behavior so as to respond to the driver's operation. (Target deceleration) is given, and a left-right target acceleration is given to the left-right behavior control unit 14. The front / rear behavior control unit 13 applies a target drive torque (acceleration torque or braking torque) to the power train coordinator (PTC) 22 of the energy domain control unit 21 in order to realize a given target acceleration (target deceleration) in the front / rear direction. ) And a target braking torque that is a control target value of the brake device 34 is output to the brake control unit 15. Further, the left / right behavior control unit 14 outputs a target assist torque, which is a control target value of the steering device 35, to the steering control unit 16 in order to realize the given target acceleration in the left / right direction.

  For example, the motion domain control unit 11 may be provided with information related to the external environment of the vehicle, such as recognition information of a white line that divides the traveling lane of the vehicle, information on a preceding vehicle, and an obstacle. Thereby, in the motion domain control unit 11, for example, it is possible to calculate the control target value so as to adjust the assist force of the steering device 35 (lane keep control) so as not to deviate from the traveling lane defined by the white line. It becomes. In addition, the motion domain control unit 11 can calculate the control target values of the brake device 34 and the steering device 35 so as to avoid a collision with a preceding vehicle or an obstacle, for example.

  In addition, for example, a sensor signal for detecting a voltage or current of a high voltage battery (not shown), a sensor signal indicating a running state of the vehicle, or the like is input to the energy domain control unit 21. The MGC 23 of the energy domain control unit 21 calculates the charged amount of the high voltage battery based on those sensor signals. Further, the MGC 23 calculates the maximum MG torque that can be generated by the motor generator 33 mainly based on the amount of charge stored in the high-voltage battery, and gives it to the PTC 22. The PTC 22 considers the maximum MG torque that can be generated by the motor generator 33 and the running state of the vehicle in order to achieve the target drive torque (acceleration torque) given from the motion domain control unit 11 most efficiently. A target engine torque to be generated by 31, a target gear ratio to be realized by the transmission 32, and a target MG torque to be generated by the motor generator 33 are calculated. The calculated target engine torque, target gear ratio, and target MG torque are respectively supplied to the engine control unit 24, the TM control unit 25, and the MGC 23 as control target values. The TM control unit 25 is also given control target values related to the operation of the clutch (clutch connection start timing, time until clutch connection completion, etc.).

  Further, the MGC 23 of the energy domain control unit 21 calculates the amount of regenerative power that can be generated by the motor generator 33 mainly based on the amount of power stored in the high-voltage battery when the vehicle is decelerated. Information on the regenerative braking torque corresponding to the regenerative electric energy is given from the MGC 23 to the front / rear behavior control unit 13 of the motion domain control unit 11 via the PTC 22.

  When the target deceleration is given from the vehicle behavior control unit 12, the front / rear behavior control unit 13 calculates a target braking torque for realizing the target deceleration. When the motor generator 33 can generate the regenerative braking torque, the target braking torque by the brake device 34 and the target regenerative braking torque by the regenerative braking are determined so as to utilize the regenerative braking torque as much as possible. This target regenerative braking torque is given to the MGC 23 of the energy domain control unit 21 via the PTC 22 as a control target value.

  In addition to the inter-domain linkage control coordinated with the front-rear behavior control unit 13 in the motion domain 10 and the intra-domain linkage control coordinated with the MGC 23, the engine control unit 24, and the TM control unit 25, the PTC 22 The temperature adjustment control using the cooling mechanism 30, which is independent control independent of the logic block (electronic control unit), is executed.

  In the hybrid vehicle, the cooling mechanism 30 is configured so that the cooling system of the engine 31 and the cooling system of the inverter of the MG 33 are shared, and the same cooling water is circulated through the engine 31 and the inverter of the MG 33. . The cooling mechanism 30 includes a radiator for cooling the heated cooling water by exchanging heat with air, a pump for circulating the cooling water, a water temperature sensor for detecting the temperature of the cooling water, and a circulation path for the cooling water. A flow path switching valve such as a three-way valve for switching is provided.

  For example, the coolant temperature, the engine temperature, and the inverter temperature are input to the PTC 22. Then, the PTC 22 calculates the control target values of the pump of the cooling mechanism 30 and the flow path switching valve based on the coolant temperature, the engine temperature, and the inverter temperature, and the pumps so that each operation state approaches the control target value. And controls the flow path switching valve. Specifically, the PTC 22 is a state in which none of the cooling water circulates, a state in which the cooling water circulates only in the engine 31, or the cooling water, depending on the necessity of temperature adjustment (cooling or the like) of the inverter of the engine 31 and the MG 33 Is switched to either the state in which only the inverter of MG33 is circulated, or the state in which cooling water circulates both the engine 31 and the inverter. Moreover, PTC22 controls the flow volume of a cooling water with the rotation speed of a pump based on a cooling water temperature, an engine temperature, and an inverter temperature. As a result, the PTC 22 can appropriately adjust the heat generation temperature of the engine 31 and / or the inverter.

  The brake control unit 15 controls the brake device 34 according to a target braking torque that is a control target value of the brake device 34 given from the front-rear behavior control unit 13. More specifically, the brake control unit 15 outputs a control signal for controlling the brake fluid pressure so that the brake device 34 generates the target braking torque. The steering control unit 16 also outputs a control signal so that the steering device 35 generates the target assist torque given from the left / right behavior control unit 14 to control the assist torque by the steering device 35.

  The engine control unit 24 outputs a control signal for realizing the target engine torque given from the PTC 22 to the engine 31. More specifically, the engine control unit 24 inputs sensor signals from various sensors (rotation speed, temperature, air flow rate, etc.) that detect the operating state of the engine 31. Then, the current generated torque is calculated from the engine operating state grasped from the sensor signal. The engine control unit 24 calculates an engine operating state for bringing the current generated torque close to the target engine torque, obtains a fuel injection amount, a fuel injection timing, and an ignition timing for achieving the calculated engine operating state, The injection control signal and the ignition control signal corresponding to these are output to the engine 31.

  The TM control unit 25 is also given a target gear ratio from the PTC 22 and outputs a control signal to the transmission 32 for realizing the given target gear ratio. Further, when changing the gear ratio in the transmission 32, the TM control unit 25 also outputs a control signal for controlling the operation of the clutch according to the control target value related to the operation of the clutch.

  When the target MG torque is given from the MGC 23, the MG control unit 26 outputs a control signal to the inverter of the motor generator 33 so as to generate the target MG torque. On the other hand, when the target regenerative braking torque is applied from the MGC 23, the MG control unit 26 controls the motor generator 33 so that the motor generator 33 applies a braking force corresponding to the target regenerative braking torque to the axle. A control signal is output to the inverter.

  Like the PTC 22 in the control system 1 described above, the electronic control device applied to the domain control units 11 and 21 of the control system 1 includes control linked with other electronic control devices (inter-domain linkage control, intra-domain linkage control). ) And a single control application for performing control (temperature adjustment control) independently from other electronic control devices. For this reason, depending on the situation, the electronic control device may need to execute the cooperative control application and the single control application at the same time in the microcontroller. The ECUs belonging to the domain control units 11 and 21 other than the PTC 22 can also generate the same situation when an in-vehicle device to be controlled independently is assigned without using the in-vehicle device control unit.

  At this time, it is necessary for the electronic control device to simply perform each process without considering whether the process is included in the cooperative control application or the process included in the single control application. If the processing is performed in order according to the time when it becomes, there may occur a situation where the respective processing cannot be appropriately performed, or the efficient processing cannot be performed. For example, a more important process is postponed, delaying the overall control related to the important process, or waiting for the other process until one process is completed. There is a possibility that problems such as inability to fully utilize the capability and inefficient execution of processing as a whole.

  Here, the cooperative control application and the single control application are not dependent on each other, and it is not necessary to start the other process after the end of one process. In other words, the process of the cooperative control application and the process of the single control application can be performed in parallel in the microcontroller of the electronic control device. However, the processing of the cooperation control application and the processing of the single control application cannot always be performed in parallel due to restrictions on the processing capability of the microcontroller.

  Therefore, in the electronic control device according to the present embodiment, based on each processing content, it is determined which of the cooperative control application process and the single control application process should be prioritized, and according to the determined priority order, From the processing with the highest priority, the microcontroller resources necessary for the execution of the processing are secured and assigned to the corresponding processing. Thereby, if the load of each process executed at the same time is small, the resources of the microcontroller can be secured and allocated to each process, and each process can be processed in parallel. Accordingly, it is possible to efficiently execute the processing of the cooperation control application and the processing of the single control application. On the other hand, if the total processing load executed at the same time exceeds the processing capacity of the microcontroller and parallel processing cannot be performed, resources are allocated and allocated in order from the highest priority processing. Therefore, it is possible to surely execute processing from a highly important process that should be processed earlier. As described above, in a situation where only one of the process of the cooperative control application and the process of the single control application can be executed, the processes can be executed in an appropriate order.

  Hereinafter, the electronic control device having such a function will be described in more detail with reference to FIGS. In the following description, the electronic control device that executes the cooperative control application and the single control application is referred to as a master ECU, and in the same domain, the electronic control that controls the in-vehicle device according to the control target value instructed from the master ECU. The device is called a slave ECU.

  FIG. 2 mainly shows the software structure of the master ECU 40 and the slave ECUs 50a and 50b and the connection between the master ECU 40 and the slave ECUs 50a and 50b, and omits other components such as the in-vehicle device to be controlled. Yes. Each of the master ECU 40 and the slave ECUs 50a and 50b has a memory, and software having a structure shown in FIG. 2 is stored in each memory.

  As shown in FIG. 2, the master ECU 40 and the slave ECUs 50 a and 50 b have a software structure that conforms to the so-called AUTOSAR (AUTomotive Open System Architecture). Hereinafter, the software structure will be described using the master ECU 40 as an example. The software structures of the master ECU 40 and the slave ECUs 50a and 50b are basically similar, but the domain abstraction layer 44 described later is provided only in the master ECU 40, and is provided in the slave ECUs 50a and 50b. There are no differences. In the slave ECUs 50a and 50b, the inter-domain cooperation control application 41a and the intra-domain cooperation control application 41b are not executed, and there is no need to mediate the processing of these applications 41a and 41b. It is because it is not possible.

  In the master ECU 40, as shown in FIG. 2, software is installed in a microcontroller 48 that is hardware, and the software is mainly composed of basic software 43 to 47, a runtime environment (RTE) 42, and It is divided into application software 41a to 41c included in the application layer 41. The microcontroller 48 includes at least one set of microprocessing units and a cache memory.

  The basic software 43 to 47 is hierarchized into a microcontroller abstraction layer 43, a domain abstraction layer 44, an ECU abstraction layer 45, and a service layer 46. The higher the hierarchy, the higher the degree of abstraction and the various hardware. It has become independent from the wear. The basic software 43 to 47 includes a composite driver 47.

  The microcontroller abstraction layer 43 is located in the lowest layer of the basic software 43 to 47, and includes a microcontroller driver, a memory driver, a communication driver, an I / O driver, and the like. The microcontroller abstraction layer 43 is a part that depends on the hardware configuration of the microcontroller 48. The microcontroller abstraction layer 43 abstracts the microcontroller 48 and its peripheral devices. The upper layer is independent of the microcontroller 48 and peripheral devices.

  The domain abstraction layer 44 is located above the microcontroller abstraction layer 43. The domain abstraction layer 44 receives the processing included in the cooperation control application (inter-domain cooperation control application 41a, intra-domain cooperation control application 41b) and the processing included in the single control application 41c, respectively. When these processes need to be executed at the same time, it has a function of determining which one should be given priority based on the contents of each process. Further, the domain abstraction layer 44 has a function of allocating resources necessary for executing the processes from the processes with higher priority according to the determined priorities and allocating them to the corresponding processes. The domain abstraction layer 44 will be described later in detail.

  The ECU abstraction layer 45 is located above the domain abstraction layer 44 and abstracts the basic components of the master ECU 40 to make the upper software layer independent of the hardware of the master ECU 40. . The ECU abstraction layer 45 includes onboard equipment abstraction, memory hardware abstraction, communication hardware abstraction, I / O hardware abstraction, and the like.

  A part of the service layer 46 is located above the ECU abstraction layer 45, and provides a basic service for an application. Specifically, the service layer 46 provides services such as OS, vehicle network communication and management, memory service, diagnostic service, and ECU state management. The service layer 46 is largely independent of hardware, but also has a part that depends on a microcontroller 48 such as an OS.

  The composite driver 47 is used when a complicated function that does not exist in other layers and satisfies a special function and timing requirements for operating a complicated sensor or actuator is required. The composite driver 47 is used, for example, when driving and controlling an injector that injects fuel.

  The RTE 42 is positioned above the basic software 43 to 47 including the above-described layers, so that the various applications 41 a to 41 c included in the application layer 41 do not depend on the master ECU 40. Therefore, the RTE 42 provides communication between the applications 41a to 41c and communication between the applications 41a to 41c and the basic software 43 to 47.

  In this way, by adopting the software structure conforming to AUTOSAR, the applications 41a to 41c do not depend on the hardware of the microcontroller 48 or the master ECU 40, so that the reusability of the applications 41a to 41c is improved. be able to.

  Next, the domain abstraction layer 44 will be described in detail. As shown in FIGS. 2 and 3, the domain abstraction layer 44 includes an inter-domain abstraction layer 44a and an intra-domain abstraction layer 44b. The inter-domain abstraction layer 44a receives a processing request from the inter-domain cooperation control application 41a. The intra-domain abstraction layer 44b accepts a processing request from the intra-domain cooperation control application 41b. On the other hand, the processing request from the single control application 41c is given to the domain abstraction layer 44 through the service layer 46 and the ECU abstraction layer 45 as usual.

  In this manner, the domain abstraction layer 44 receives processing requests from these applications 41a to 41c, and sends the resources of the microcontroller 48 (microprocessing unit, cache, etc.) to each processing to the microcontroller abstraction layer 43. Instructs the allocation of memory). Specifically, when a processing request is received only from a single application 41a to 41c, the domain abstraction layer 44 determines the ratio of resources necessary for executing the processing that has received the request, and the determined ratio The microcontroller abstraction layer 43 is instructed to allocate these resources to the corresponding processing. When processing requests are received from a plurality of types of applications 41a to 41c at the same time, the domain abstraction layer 44 first determines which one should be given priority based on the contents of each processing. Next, the domain abstraction layer 44 determines the ratio of resources necessary for executing the corresponding process in order from the process with the highest priority according to the determined priority, and assigns the resource of the determined ratio to the corresponding The microcontroller abstraction layer 43 is instructed to be assigned to the processing to be performed.

  At this time, when the domain abstraction layer 44 determines the ratio of the resources necessary for executing the processing having a relatively low priority, the resources necessary for executing the processing having the low priority are left. If it is determined that there is no resource, the microcontroller abstraction layer 43 is not instructed to allocate the resource until the resource becomes available. For this reason, many resources are required for a process with a relatively high priority, and as a result, when a resource shortage occurs for a process with a relatively low priority, a relative resource is available until the resource becomes available. The execution of a process with a lower priority is awaited. Alternatively, when a process with relatively low importance has already been started, the execution is temporarily suspended.

  Further, the domain abstraction layer 44 divides the low-priority process into sub-processes that can be processed with fewer resources when the resource shortage is found for the relatively low-priority process. Resources may be secured and allocated to the sub-processes performed.

  Here, resource allocation for each process by the domain abstraction layer 44 will be described. The domain abstraction layer 44 can determine, for example, the ratio of resources necessary to execute the corresponding process by the usage rate indicating the usage time of the microprocessing unit per unit time. In other words, since the usage capacity of the cache memory tends to correlate with the usage rate of the microprocessing unit, the resources including the microprocessing unit and the cache memory are determined based on the usage rate of the microprocessing unit. The ratio can be determined. Alternatively, the domain abstraction layer 44 may be defined separately for the microprocessing unit and the cache memory. In this case, for example, the resource ratio required to execute the corresponding processing can be determined by the expected usage rate for the microprocessing unit and can be determined by the expected usage capacity for the cache memory.

  Whether or not the resources necessary for executing the processing with a relatively low priority level are left, at least for the microprocessing unit, is relatively prioritized with the unused rate of the microprocessing unit per unit time. The determination can be made based on the expected usage rate of the microprocessing unit by the processing with the lower rank.

  Further, when the microcontroller 48 includes a plurality of microprocessing units, the domain abstraction layer 44 determines whether or not resources necessary for executing a process with a relatively low priority are left. You may make it judge based on whether the microprocessing unit to which processing is not allocated is left.

  Next, specific processing contents in the domain abstraction layer 44 will be described with reference to the flowcharts of FIGS. 4 and 5.

  First, in step S100 of the flowchart of FIG. 4, processing requests from various applications 41a to 41c are accepted. In a succeeding step S110, it is determined whether or not the received processing request is from a plurality of types of applications 41a to 41c. If it is determined in step S110 that a processing request has been received from a plurality of types of applications 41a to 41c, the process proceeds to step S120, and a processing request has been received from a single application 41a to 41c, or no processing request has been received. If it is determined that the process has been performed, the process proceeds to step S140.

  In step S120, the priority of each process is determined based on the contents of each process received from the multiple types of applications 41a to 41c. This priority determination method will be described later in detail based on the flowchart of FIG. In subsequent step S130, according to the determined priority order, resources necessary for execution of the corresponding process are allocated in order from the process having the highest priority order. After the execution, the process returns to step S100 again. Thereby, in the microcontroller 48, the corresponding process is executed using the allocated resource.

  In step S140, it is determined in step S100 whether a processing request from a single application 41a to 41c has been received or no processing request has been received. At this time, if it is determined that a processing request has been received from a single application 41a to 41c, the process proceeds to step S150, the ratio of resources necessary for executing the corresponding process is determined, and the determined ratio of resources is Assign to the appropriate process. Thereby, in the microcontroller 48, the corresponding process is executed using the allocated resource. On the other hand, if it is determined in step S140 that no processing request has been received, the process returns to step S100.

  Next, based on the flowchart of FIG. 5, a method for determining the priority of each process when a process request is received from a plurality of types of applications 41 a to 41 c at the same time will be described.

  First, in step S200, it is determined whether or not a processing request received from a plurality of types of applications 41a to 41c includes a processing request from the single control application 41c. In this determination process, when it is determined that the processing request from the single control application 41c is included, the process proceeds to step S240, and it is determined that the processing request from the single control application 41c is not included. In that case, the process proceeds to step S210.

  When the process proceeds to step S210, the plurality of processing requests include a processing request from the inter-domain cooperation control application 41a and a processing request from the intra-domain cooperation control application 41b. In step S210, it is determined whether or not the process requested from the intra-domain cooperation control application 41b is a process that needs to be executed immediately. For example, when the electronic control device according to the present embodiment is applied to the PTC 22 in FIG. 1, the PTC 22 instructs the control target value to the engine control unit 24 every time the engine 31 changes by a predetermined rotation angle. Intra-domain linkage processing may be performed. In such a case, the PTC 22 needs to output the control target value without delay in response to the change in the rotation angle of the engine. Therefore, the PTC needs to process the intra-domain cooperation processing with the highest priority. Further, for example, when the MG 33 generates torque correction for suppressing torque fluctuation according to the rotation angle of the engine 31, the PTC 22 instructs the MGC 23 on the torque correction amount without delay according to the engine rotation angle. It is necessary to implement intra-domain linkage processing. In step S210, it is determined whether the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately. If it is determined that the process needs to be executed immediately, the process proceeds to step S220. If it is determined that the process does not need to be executed immediately, the process proceeds to step S230.

  In step S220, the highest priority is assigned to the processing of the intra-domain cooperation control application 41b. Then, a lower priority than the intra-domain cooperation control application 41b is given to the processing of the inter-domain cooperation control application 41a. On the other hand, in step S230, the highest priority is assigned to the processing of the inter-domain cooperation control application 41a. Then, a lower priority than the inter-domain cooperation control application 41a is given to the processing of the intra-domain cooperation control application 41b.

  As described above, in principle, higher priority is given to the processing of the interdomain cooperation control application 41a with respect to the processing of the interdomain cooperation control application 41a and the processing of the intradomain cooperation control application 41b. To do. As described above, the control target values of the in-vehicle devices 31 to 35 assigned to the respective domains 10 and 20 are determined as a result of the processing of the inter-domain cooperation control application 41a. For this reason, in order to perform appropriate control according to the situation of the vehicle changing from moment to moment, the processing of the inter-domain linkage control application 41a should be prioritized over the processing of the intra-domain linkage control application 41b. That's why.

  However, as described above, the processing of the intra-domain cooperation control application 41b may include processing that needs to be executed immediately. As for the processing that needs to be executed immediately in this way, it is preferable to execute the processing in preference to the processing of the inter-domain linkage control application 41a. Therefore, in this embodiment, it is determined whether the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately. Only when it is determined that the processing needs to be executed immediately, the processing priority of the intra-domain cooperation control application 41b is set higher than the priority of the inter-domain cooperation control application 41a. .

  On the other hand, in step S240 executed when it is determined that the processing request received from the multiple types of applications 41a to 41c includes the processing request from the single control application 41c, the single control application 41c is requested. It is determined whether the process is an interrupt process that needs to be executed by an interrupt or a synchronous process that needs to be executed in synchronization with a certain event. For example, in the example shown in FIG. 1, as described above, the PTC 22 controls the pump and the flow path switching valve of the cooling mechanism 30 based on the cooling water temperature, the engine temperature, and the inverter temperature. In this case, for example, when it is detected that the engine temperature or the inverter temperature exceeds a predetermined upper limit temperature, the PTC 22 immediately targets a device that exceeds the upper limit temperature in order to prevent further temperature rise. The pump and the flow path switching valve are controlled to circulate the cooling water at the maximum flow rate. In addition, for example, when an abnormality is detected in the temperature sensor, the pump, or the flow path switching valve, the PTC 22 immediately notifies the driver of the occurrence of the abnormality and increases the temperature to other control units. In order to suppress this, instructing evacuation traveling, output restriction, etc. Since these processes are to be processed with the highest priority when an abnormality occurs, they are executed as an interrupt process or a synchronous process. If it is determined in step S240 that the process of the single control application 41c is an interrupt process or a synchronous process, the process proceeds to step S250. On the other hand, if it is determined that the process of the single control application 41c is not an interrupt process or a synchronous process, the process proceeds to step S270.

  In step S250, it is determined whether processing requests have been received from both the inter-domain cooperation control application 41a and the intra-domain cooperation control application 41b in addition to the single control application 41c. If it is determined in step S250 that a processing request has been received from both the inter-domain cooperation control application 41a and the intra-domain cooperation control application 41b, the process proceeds to step S290. On the other hand, if it is determined that the processing request has been received from only one of them, the process proceeds to step S260.

  In step S260, the highest priority is assigned to the processing of the single control application 41c. Further, a lower priority order is given to one process of the inter-domain cooperation control application 41a and the intra-domain cooperation control application 41b that has received the processing request. This is because, as described above, it is desirable that the process of the single control application 41c be executed with the highest priority, for example, as a process when an abnormality occurs.

  In step S290, similarly to the process in step S210, it is determined whether or not the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately. In this determination process, when it is determined that the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately, the process proceeds to step S300. On the other hand, if it is determined that the process is not required to be executed immediately, the process proceeds to step S310.

  In step S300, the highest priority is assigned to the processing of the single control application 41c. The next highest priority is given to the processing of the intra-domain cooperation control application 41b. Then, the lowest priority is assigned to the processing of the inter-domain cooperation control application 41a. On the other hand, in step S310, the highest priority is assigned to the processing of the single control application 41c. The next highest priority is given to the processing of the inter-domain linkage control application 41a. Then, the lowest priority is assigned to the processing of the intra-domain cooperation control application 41b.

  The reason for prioritizing steps S300 and S310 is as follows. First, the reason why the highest priority is given to the process of the single control application 41c is that the process of the single control application 41c is preferably executed with the highest priority as the process when an abnormality occurs. Further, when the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately, it is desirable to give priority to the process of the inter-domain cooperation control application 41a. Therefore, in step S300, the priority of processing of the intra-domain cooperation control application 41b is set higher than that of the inter-domain cooperation control application 41a. On the other hand, when the process of the intra-domain cooperation control application 41b is a process other than the process that needs to be executed immediately, the process of the inter-domain cooperation control application 41a is preferably prioritized. Therefore, in step S310, the processing priority of the inter-domain cooperation control application 41a is set higher than that of the intra-domain cooperation control application 41b.

  On the other hand, in step S270 executed when it is determined that the process of the single control application 41c is not an interrupt process or a synchronous process, in addition to the single control application 41c, the inter-domain linkage control It is determined whether processing requests have been received from both the application 41a and the intra-domain cooperation control application 41b. If it is determined in step S270 that processing requests have been received from both the inter-domain cooperation control application 41a and the intra-domain cooperation control application 41b, the process proceeds to step S320. On the other hand, if it is determined that the processing request has been received from only one of them, the process proceeds to step S280.

  In step S280, the highest priority is assigned to one of the inter-domain cooperation control application 41a and the intra-domain cooperation control application 41b that has received the processing request. Then, a lower priority is given to the processing of the single control application 41c.

  Also in step S320, as in the processes in steps S210 and S290, it is determined whether or not the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately. In this determination process, when it is determined that the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately, the process proceeds to step S330. On the other hand, if it is determined that the process is not required to be executed immediately, the process proceeds to step S340.

  In step S330, the highest priority is assigned to the processing of the intra-domain cooperation control application 41b. The next highest priority is given to the processing of the inter-domain linkage control application 41a. Then, the lowest priority is assigned to the processing of the single control application 41c. On the other hand, in step S340, the highest priority is assigned to the processing of the inter-domain cooperation control application 41a. The next highest priority is given to the processing of the intra-domain cooperation control application 41b. Then, the lowest priority is given to the processing of the single control application 41c.

  The reason for prioritizing steps S330 and S340 is as follows. First, when the process of the single control application 41c is a process other than an interrupt process or a synchronous process that is executed with the highest priority as a process when an abnormality occurs, normally, high responsiveness is not required for the execution. . Therefore, in steps S330 and S340, the lowest priority is assigned to the processing of the single control application 41c. Further, when the process of the intra-domain cooperation control application 41b is a process that needs to be executed immediately, it is desirable to give priority to the process of the inter-domain cooperation control application 41a. For this reason, in step S330, the processing priority of the intra-domain cooperation control application 41b is set to the highest. On the other hand, when the process of the intra-domain cooperation control application 41b is a process other than the process that needs to be executed immediately, the process of the inter-domain cooperation control application 41a is preferably prioritized. Therefore, in step S340, the priority of processing of the inter-domain linkage control application 41a is set to the highest.

  The preferred embodiments of the present invention have been described above. However, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention. .

  For example, in the above-described embodiment, when the domain abstraction layer 44 is provided in the master ECU 40 and processing requests are received from a plurality of types of applications 41 a to 41 c at the same time in the domain abstraction layer 44, Priorities were determined and the resources of the microcontroller 48 were allocated. However, as shown in FIG. 6, it is possible to determine the priority of each process and allocate resources of the microcontroller 48 using the operating system of the service layer 46 instead of the domain abstraction layer 44. .

  Hereinafter, an example in which priority is determined and resources are allocated by the operating system of the service layer 46 will be described with reference to FIG. As shown in FIG. 6, the service layer 46 is provided as an operating system for each microprocessing unit, and the individual operating systems 46c and 46e for scheduling the processing in each microprocessing unit, and the processing of the individual operating systems 46c and 46e. Has an integrated operating system 46a.

  In such a configuration, the integrated operating system 46a determines the priority of each process, and instructs each individual operating system to execute the process based on the determined priority of each process. The same operational effects as those of the embodiment described above can be obtained.

  In FIG. 6, the integrated state manager 46b controls the start and stop of the integrated operating system 46a, and the individual state managers 46d and 46f control the start and stop of the individual operating systems 46c and 46e.

  The operating system of the service layer 46 and the domain abstraction layer 44 can cooperate to determine the priority of each process and allocate resources. In this case, the functions shown in the flowcharts of FIGS. 4 and 5 may be appropriately allocated to the operating system and the domain abstraction layer 44. For example, the domain abstraction layer 44 calculates the unused rate of the microprocessing unit when resources are allocated to a process with a high priority. Then, the operating system determines whether it is possible to secure resources necessary for executing the process with the lower priority based on the unused ratio and the expected usage ratio of the process with the next lower priority. Anyway.

  To explain a more specific example, for example, when processing with high priority is distributed to a plurality of microprocessing units, the processing result in one microprocessing unit is used for processing in another microprocessing unit. It can happen. In this case, it is necessary to pass processing results between the microprocessing units, which may cause a waiting time in other microprocessing units. The domain abstraction layer 44 grasps the waiting time (unused rate) in such a microprocessing unit. The domain abstraction layer 44 can easily grasp the waiting time (unused rate) of the microprocessing unit. Then, the operating system determines whether or not a process with a low priority falls within the waiting time (unused rate) in the microprocessing unit. The operating system can easily perform such a determination process. In this way, it is possible to determine the priority of each process and allocate resources while utilizing the characteristics of the domain abstraction layer 44 and the operating system.

  Moreover, although embodiment mentioned above demonstrated the example in which the control system 1 was divided into the some domains 10 and 20, the control system 1 does not necessarily need to be divided into the some domains 10 and 20. . When there is only a single domain, the inter-domain linkage control application 41a is not provided, so the master ECU 40 prioritizes the processing of the intra-domain linkage control application 41b and the processing of the single control application 41c. And allocation of resources.

DESCRIPTION OF SYMBOLS 1 Control system, 11 Motion domain control part, 12 Vehicle behavior control part, 13 Front-rear behavior control part, 14 Left-right behavior control part, 15 Brake control part, 16 Steering control part, 21 Energy domain control part, 22 Powertrain coordinator, 23 Motor generator coordinator, 24 engine control unit, 25 TM control unit, 26 MG control unit, 30 cooling mechanism, 31 engine, 32 transmission, 33 motor generator, 34 brake device, 35 steering device

Claims (13)

A storage unit (41) for storing application software;
The application software includes a cooperative control application (41a, 41b) for performing control in cooperation with another electronic control device, and a single for performing control independently of the other electronic control device. Control application (41c) is included,
A microcontroller (48) including at least a microprocessing unit as a resource for executing the processing included in the cooperative control application and the processing included in the single control application,
When it becomes necessary to execute the process included in the cooperative control application and the process included in the single control application at the same time, it determines which one should be given priority based on the contents of each process. A determination unit (S120);
An electronic control device comprising: a resource allocation unit (S130) that secures the resources necessary for execution of a process from a higher priority process according to the priority determined by the determination unit and allocates the resource to the corresponding process .   Whether the resource allocation unit can secure the resources necessary for execution of the low priority processing based on the unused rate of the microprocessing unit per unit time and the expected usage rate of the low priority processing The electronic control device according to claim 1, which determines whether or not. The microcontroller includes a plurality of microprocessing units;
The resource allocation unit determines whether or not the resource necessary for execution of a process with a low priority can be secured based on whether or not there remains a microprocessing unit to which no process is allocated. The electronic control device described.   The electronic control device according to claim 2, wherein execution of the process in which the resource cannot be secured by the resource allocation unit is waited until the resource becomes available.   3. The resource allocation unit according to claim 2, wherein the resource allocation unit divides a process in which the resource cannot be secured into sub-processes that can be processed with fewer resources, and secures and allocates the resource to the divided sub-processes. Electronic control device. As software structure,
Basic software (43 to 47) for realizing the basic operation of the electronic control device, and a runtime environment (42) for providing communication between the basic software and the application software,
The basic software includes a microcontroller abstraction layer (43) that abstracts the microcontroller and an ECU abstraction layer that is positioned above the microcontroller abstraction layer and abstracts the basic components of the electronic control unit. (45) and a service layer (46) including an operating system,
The electronic control according to any one of claims 1 to 5, wherein a domain abstraction layer (44) functioning as the determination unit and the resource allocation unit is provided between the microcontroller abstraction layer and the ECU abstraction layer. apparatus.   The domain abstraction layer (44) functions as the determining unit and the resource allocating unit in cooperation with the operating system, and the domain abstraction layer performs processing with a high priority. When the resource is allocated, the unused rate of the microprocessing unit is calculated, and the operating system performs processing with the lower priority based on the unused rate and the expected usage rate of the process with lower priority. The electronic control device according to claim 6, wherein it is determined whether or not the resource necessary for execution of the resource can be secured. As software structure,
Basic software (43 to 47) for realizing the basic operation of the electronic control device, and a runtime environment (42) for providing communication between the basic software and the application software,
The basic software includes a microcontroller abstraction layer (43) that abstracts the microcontroller, an ECU abstraction layer (45) that abstracts basic components of the electronic control device, an operating system (46a, 46c, 46e) including a service layer (46),
The electronic control device according to claim 1, wherein an operating system of the service layer includes functions as the determination unit and the resource allocation unit. The operating system is provided for each microprocessing unit, and includes an individual operating system (46c, 46e) that schedules processing in each microprocessing unit, and an integrated operating system (46a) that supervises the processing of the individual operating system. Have
The electronic control device according to claim 8, wherein the integrated operating system instructs the individual operating system to execute a process based on the priority of each process. The electronic control device is applied to a control system (1) for controlling a plurality of in-vehicle devices (30 to 35) mounted on a vehicle,
The control system is divided into a plurality of domains (10, 20) in advance according to the functions of the plurality of in-vehicle devices, and slave ECUs (15, 16) for controlling the in-vehicle devices in the plurality of domains, respectively. 24 to 26) and a master ECU (13, 14, 22, 23) that supervises the slave ECU,
The electronic control device according to claim 1, wherein the electronic control device is used as a master ECU of each domain. The cooperative control application performs cooperative control between an intra-domain cooperative control application (41b) for creating and outputting a control command value to a slave ECU belonging to the same domain, and a master ECU belonging to a different domain. Application for inter-domain linkage control (41a) for performing
When the determination unit needs to execute the process included in the intra-domain cooperation control application and the process included in the inter-domain cooperation control application at the same time, in principle, the inter-domain cooperation control The electronic control device according to claim 10, wherein it is determined that the process included in the application for use should be prioritized.   The determination unit should give priority to the process included in the intra-domain cooperation control application when the process included in the intra-domain cooperation control application is a type of process that needs to be executed immediately. The electronic control device according to claim 11, which is determined as follows. The single control application includes at least one of interrupt processing and synchronization processing,
When the determination unit needs to execute the process included in the single control application and the process included in the cooperative control application at the same time, the process included in the single control application When it is an interrupt process or the synchronous process, it is determined that the process included in the single control application should be prioritized, and when it is a process other than the interrupt process or the synchronous process, the process included in the cooperative control application The electronic control device according to claim 1, wherein it is determined that priority should be given.

Images