JP2020159344A - Control device and control method - Google Patents

Abstract

To provide a control device and a control method capable of imposing access limitations between processes while performing the plurality of processes.SOLUTION: A control device according to this embodiment includes a storage section and a control section. The storage section stores control data on a control process of a power device. The control section performs the control process while switching a mode between a secure mode that does not impose access limitations on the storage section and a non-secure mode that imposes the limitations. The control device executes an operation synchronous process that is a control process in which a process is generated in synchronization with an operating status of the power device and a time synchronous process that is a control process related to an operating device in which a process is generated in synchronization with a predetermined time in the non-secure mode, and executes a first other process that is a control process of another device different from the power device in the secure mode.SELECTED DRAWING: Figure 1

Description

The present invention relates to a control device and a control method.

In recent years, for example, AI (Artificial Intelligence) technology is being utilized in vehicle control. In the prior art, in a control device that controls an internal combustion engine of a vehicle, allocation of rotation synchronization processing synchronized with the rotation of the internal combustion engine and time synchronization processing synchronized with time to the core is dynamically performed according to a calculation load situation. There is something to do (see, for example, Patent Document 1).

Japanese Unexamined Patent Publication No. 2013-130104

By the way, when controlling an operating device such as an internal combustion engine or a motor as in the prior art, the control device operates in synchronization with an operating state such as a rotating state of the operating device as the integration of the control device progresses. In addition to the synchronous processing and the time synchronous processing that occurs in synchronization with the time, it is necessary to perform processing. Then, when each process shares one memory, it becomes necessary to set an access restriction as necessary between each process in preparation for unauthorized access.

The present invention has been made in view of the above, and an object of the present invention is to provide a control device and a control method capable of restricting access between processes while performing a plurality of processes.

In order to solve the above-mentioned problems and achieve the object, the control device according to the present invention includes a storage unit and a control unit. The storage unit stores control data related to the control process of the power unit. The control unit performs the control process while switching between a first mode in which access to the storage unit is not restricted and a second mode in which the storage unit is restricted. Further, when the control unit is in the first mode, the operation synchronization process, which is the control process in which the process is generated in synchronization with the operation status of the power unit, and the process related to the operation device are performed at a predetermined time. The time synchronization process, which is the control process in which the process occurs in synchronization, is executed, and when in the second mode, the first other process, which is the control process of another device which is a device different from the power unit, is executed. To do.

According to the present invention, it is possible to restrict access between processes while performing a plurality of processes.

FIG. 1 is a diagram showing an outline of a control method according to an embodiment. FIG. 2 is a diagram for explaining the processing of the control unit. FIG. 3 is a flowchart showing a processing procedure of processing executed by the control device according to the embodiment. FIG. 4 is a diagram for explaining a control unit according to a modified example. FIG. 5 is a diagram for explaining a control unit according to a modified example.

Hereinafter, embodiments of the control device and control method disclosed in the present application will be described in detail with reference to the accompanying drawings. The present invention is not limited to the embodiments shown below.

First, the outline of the control method according to the embodiment will be described with reference to FIG. FIG. 1 is a diagram showing an outline of a control method according to an embodiment. Note that FIG. 1 shows a block diagram of the configuration of the control device 1 that executes the control method according to the embodiment.

As shown in FIG. 1, the control device 1 according to the embodiment includes a control unit 2 and a storage unit 3. The control device 1 according to the embodiment is a control device mounted on a vehicle, and executes, for example, a control process of an internal combustion engine (an example of a power device). Specifically, as the control processing of the internal combustion engine, there are rotation synchronization processing (operation synchronization processing) and time synchronization processing.

The rotation synchronization process is a control process executed in synchronization with the rotation, which is the operating state of the internal combustion engine. The rotation synchronization process includes control processes related to the combustion process of the internal combustion engine such as fuel injection amount and valve timing.

The time synchronization process is a control process executed in a predetermined time cycle. The time synchronization process includes control processes related to air control of the internal combustion engine such as throttle opening. In other words, the time synchronization process is a control process that is not synchronized with the rotation among the control processes of the internal combustion engine.

The control target of the control device 1 is not limited to the internal combustion engine, but may be another power device such as a motor. In such a case, the control device 1 executes an operation synchronization process and a time synchronization process, which are control processes synchronized with the rotation, which is the operation of the motor.

Further, the control device 1 according to the embodiment executes the first other process which is the control process of another device which is a device different from the power device, in addition to the control process of the power device. The other device is an in-vehicle device other than a power device such as a navigation device.

Here, the control device 1 includes, for example, a computer having a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and various circuits.

The CPU of a computer functions as a control unit 2 by reading and executing data stored in a ROM or RAM or various programs, for example.

It should be noted that some or all of the functions of the control unit 2 can be configured by hardware such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

Further, the storage unit 3 corresponds to, for example, a ROM or a RAM. The ROM or RAM can store rotation synchronization processing data, time synchronization processing data, other processing data, information on various programs (not shown), and the like executed by the control unit 2.

The data for rotation synchronization processing, the data for time synchronization processing, and the data for other processing include a code for executing each control processing, data generated by each control processing, and the like. The rotation synchronization processing data and the time synchronization processing data are examples of control data related to the control processing of the power unit.

Here, the virtualization support function is implemented in the control unit 2. The virtualization support function is to logically divide one CPU (or core) into two or more by hardware virtualization technology, and from the user, it is as if two CPUs (cores) are operating. It's a feature that looks like it's there. As a result, the control unit 2 composed of one CPU can execute control processing of the power device and other devices while switching between a plurality of modes having different operation modes.

In the example shown in FIG. 1, the control unit 2 switches between a secure mode (corresponding to the first mode) and a non-secure mode in which the contents of access restrictions to the storage unit 3 are different as the operation mode to perform processing. The secure mode is a mode in which access to the storage unit 3 is not restricted. The non-secure mode is a mode in which access to the storage unit 3 is restricted.

As shown in FIG. 1, the control unit 2 executes rotation synchronization processing and time synchronization processing in the secure mode, and executes other processes A, B, and C in the non-secure mode. Although FIG. 1 shows a case where three other processes A, B, and C are executed, the number of other processes may be two or less or four or more.

Further, in the secure mode, the control unit 2 executes rotation synchronization processing and time synchronization processing by the OS (Operating System) for the power train. Further, in the non-secure mode, the control unit 2 executes the other processes A, B, and C by the other processing OS different from each of the other processes A, B, and C.

The OS for other processing A, the OS for other processing B, and the OS for other processing C are each executed by the hypervisor, and this point will be described later.

Then, the control unit 2 limits access to the rotation synchronization processing data and the time synchronization processing data in the non-secure mode. Specifically, the control unit 2 prohibits access to the rotation synchronization processing data and the time synchronization processing data in the non-secure mode.

Therefore, according to the control method according to the embodiment, it is possible to prevent unauthorized access to the rotation synchronization processing data and the time synchronization processing data, which are control data, while executing other processing in the non-secure mode.

That is, the control unit 2 according to the embodiment prohibits access to the control data stored in the storage area for the first mode in the storage unit 3 in the non-secure mode, so that the control data from other processes can be accessed. Unauthorized access can be reliably prevented.

The control unit 2 executes the rotation synchronization process and the time synchronization process on separate cores. This point will be described with reference to FIG.

FIG. 2 is a diagram for explaining the processing of the control unit 2. As shown in FIG. 2, the control unit 2 has three cores. The first core (core 1) executes rotation synchronization processing. The second core (core 2) executes time synchronization processing and other processing A. The third core (core 3) executes the other process B and the other process C.

That is, the control unit 2 executes the rotation synchronization process and the time synchronization process on separate cores. As a result, it is possible to prevent a processing delay from occurring even when the processing timings of the rotation synchronization processing and the time synchronization processing overlap.

Further, since the rotation synchronization process has a shorter processing cycle than the time synchronization process, that is, the processing load is large, a dedicated core is assigned. As a result, it is possible to prevent a processing delay in the rotation synchronization process.

Further, in the time synchronization process, the core is used in combination with the other process A in which the process does not break down. Specifically, the control unit 2 executes the time synchronization process in the secure mode and executes the other process A in the non-secure mode. As a result, it is possible to prevent the number of cores of the control unit 2 from increasing, so that cost reduction can be realized.

Further, the third core executes other processes B and C different from the other processes A assigned to the second core. That is, the third core operates as a core dedicated to other processes B and C. As a result, the control unit 2 can execute other processing regardless of the processing timing of the time synchronization processing, so that the versatility as a core to which the other processing is assigned can be enhanced.

Further, the control unit 2 executes the other processes A assigned to the second core and the other processes B and C assigned to the third core by the hypervisor. Specifically, the control unit 2 operates the OS for other processing A, the OS for other processing B, and the OS for other processing C by the hypervisor software which is a program of the hypervisor, and the other processing A, the other processing B, and the other processing B are operated. Other process C is executed.

That is, the hypervisor software is a virtualization OS that operates the OS for other processing A, the OS for other processing B, and the OS for other processing C.

As described above, by using the hypervisor which is a virtualized OS, the control unit 2 can execute a plurality of other processes having different OSs by one CPU (or core), so that cost reduction can be realized.

Next, the processing procedure of the processing executed by the control device 1 according to the embodiment will be described with reference to FIG. FIG. 3 is a flowchart showing a processing procedure of processing executed by the control device 1 according to the embodiment.

As shown in FIG. 3, first, the control unit 2 of the control device 1 determines whether or not the control process to be executed is the control process of the power device (S101).

Subsequently, the control unit 2 switches to the secure mode (S102) when it is the control process of the power unit (S101: Yes).

Subsequently, the control unit 2 executes the rotation synchronization process (S103).

Further, the control unit 2 executes the time synchronization process (S104) and ends the process. Although FIG. 3 shows a case where both the rotation synchronization process and the time synchronization process are executed, only one of the control processes is executed depending on the cycle timing of the rotation synchronization process and the time synchronization process. There is.

In step S101, the control unit 2 switches to the non-secure mode when it is not the control process of the power unit, that is, when it is the other process which is the control process of the other device (S101: No) (S105).

Subsequently, the control unit 2 executes another process (S106) and ends the process.

As described above, the control device 1 according to the embodiment includes a storage unit 3 and a control unit 2. The storage unit 3 stores control data related to the control process of the power unit. The control unit 2 performs control processing while switching between a secure mode (first mode) in which access to the storage unit 3 is not restricted and a non-secure mode (second mode) in which access is restricted. Further, the control unit 2 executes an operation synchronization process, which is a control process synchronized with the operation of the power unit, and a time synchronization process, which is a control process synchronized with a predetermined time, in the non-secure mode. Executes other processing that is the control processing of the device. As a result, access is restricted between processes while performing a plurality of processes.

The allocation of each control process to the plurality of cores shown in FIG. 2 is an example, and an arbitrary number of cores and an allocation method can be adopted. This point will be described with reference to FIGS. 4 and 5.

4 and 5 are diagrams for explaining the control unit 2 according to the modified example.

In the modified example shown in FIG. 4, the control unit 2 has two cores. The first core (core 1) executes rotation synchronization processing and time synchronization processing. The second core (core 2) executes other processes A, B, and C.

That is, in the modification shown in FIG. 4, one core executes the rotation synchronization process and the time synchronization process, and the other core executes all the other processes A, B, and C. This is suitable when each core has high performance (processing speed is equal to or higher than a predetermined speed), or when rotation synchronization processing and time synchronization processing do not fail.

As a result, it is possible to prevent the number of cores of the control unit 2 from increasing, so that cost reduction can be realized.

Although FIG. 4 shows a case where each control process is assigned to two cores, all control processes may be executed by one core. That is, one core of the control unit 2 may execute the rotation synchronization process and the time synchronization process in the secure mode, and execute the other processes A, B, and C in the non-secure mode.

Alternatively, as shown in FIG. 5, one control process may be assigned to one core. Specifically, as shown in FIG. 5, the control unit 2 has five cores.

The first core (core 1) executes rotation synchronization processing, the second core (core 2) executes time synchronization processing, and the third core (core 3) executes other processing A. , The fourth core (core 4) executes the other process B, and the fifth core (core 5) executes the other process C.

As a result, it is possible to prevent a processing delay from occurring due to competition between the control processes.

Further effects and variations can be easily derived by those skilled in the art. For this reason, the broader aspects of the invention are not limited to the particular details and representative embodiments expressed and described as described above. Therefore, various modifications can be made without departing from the spirit or scope of the general concept of the invention as defined by the appended claims and their equivalents.

1 Control device 2 Control unit 3 Storage unit

Claims (7)

A storage unit that stores control data related to the control processing of the power unit,
A control unit that performs the control process while switching between a first mode having no restriction on access to the storage unit and a second mode having the restriction is provided.
The control unit
When in the first mode, the operation synchronization process, which is the control process in which the process occurs in synchronization with the operation status of the power unit, and the process related to the power device generate the process in synchronization with a predetermined time. The time synchronization process, which is the control process, is executed.
A control device characterized by executing a first other process which is a control process of another device which is a device different from the power device when in the second mode. The control unit
Has multiple cores
The first core is
Execute the operation synchronization process
The second core is
The control device according to claim 1, wherein the time synchronization process and the first other process are executed. The second core is
When in the first mode, the time synchronization process is executed.
The control device according to claim 2, wherein the first and other processes are executed while in the second mode. The control unit
Further having a third core,
The third core is
The control device according to claim 3, wherein a second other process different from the first other process assigned to the second core is executed. The control unit
When in the first mode, the operation synchronization process and the time synchronization process are executed via the operating system.
When in the second mode, the first other processing assigned to the second core and the second other processing assigned to the third core are executed via a hypervisor. The control device according to claim 4. The control unit
The control device according to any one of claims 1 to 5, wherein in the second mode, access to the data stored in the storage area for the first mode in the storage unit is prohibited. A storage process that stores control data related to the control processing of the power unit in the storage unit,
A control step of performing the control process while switching between a first mode in which access to the storage unit is not restricted and a second mode in which the storage unit is restricted is included.
The control step is
When in the first mode, the operation synchronization process, which is the control process in which the process occurs in synchronization with the operation status of the power unit, and the process related to the power device generate the process in synchronization with a predetermined time. The time synchronization process, which is the control process, is executed.
A control method comprising executing a first other process, which is a control process of another device, which is a device different from the power device, while in the second mode.

Images