JP5835074B2 - Determination apparatus and determination method - Google Patents

Determination apparatus and determination method Download PDF

Info

Publication number
JP5835074B2
JP5835074B2 JP2012091418A JP2012091418A JP5835074B2 JP 5835074 B2 JP5835074 B2 JP 5835074B2 JP 2012091418 A JP2012091418 A JP 2012091418A JP 2012091418 A JP2012091418 A JP 2012091418A JP 5835074 B2 JP5835074 B2 JP 5835074B2
Authority
JP
Japan
Prior art keywords
communication
unit
determination
controller
units
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
JP2012091418A
Other languages
Japanese (ja)
Other versions
JP2013222992A (en
Inventor
涼子 中村
涼子 中村
Original Assignee
株式会社ソシオネクスト
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社ソシオネクスト filed Critical 株式会社ソシオネクスト
Priority to JP2012091418A priority Critical patent/JP5835074B2/en
Publication of JP2013222992A publication Critical patent/JP2013222992A/en
Application granted granted Critical
Publication of JP5835074B2 publication Critical patent/JP5835074B2/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Description

  The present invention relates to a determination device and a determination method.

  2. Description of the Related Art Conventionally, a CAN (Controller Area Network) designed for enhancing noise resistance and used for data transfer between interconnected devices is known (see, for example, Patent Document 1 below). Each device has a communication device called a CAN controller, so that communication according to the CAN protocol can be performed.

  Further, in order to determine a failure of a communication device when there is only one communication device, the communication device monitors the state of the communication bus so that the communication device determines whether or not its own communication device has failed. Is known (for example, see Patent Document 2 below).

JP 2004-348274 A JP 2005-38026 A

  However, since it is impossible to discriminate between an abnormality caused by a failure of the own communication device and an abnormality caused by a failure of another communication device connected to the communication bus, the failure of the own communication device is accurately determined. There is a problem that cannot be done.

  An object of the present invention is to provide a determination device and a determination method capable of improving the accuracy of failure determination in order to eliminate the above-described problems caused by the prior art.

  In order to solve the above-described problems and achieve the object, according to one aspect of the present invention, one of the two communication units capable of performing a communication operation with a specific device. Performing the communication operation and the other communication unit not performing the communication operation, a determination unit that determines whether or not the frequency of occurrence of a failure state of the one communication unit exceeds a certain frequency, and the determination A setting unit configured to set a parameter relating to the communication operation set in the one communication unit to the other communication unit when the occurrence frequency is determined by the unit to exceed the predetermined frequency, and the setting unit After setting the parameter, an operation instruction unit that causes the two communication units to simultaneously perform the communication operation according to the parameter, and the two communication units simultaneously perform the communication operation by the operation instruction unit. A determination unit that determines whether there is a difference between the communication operations by the two communication units, and a determination unit that determines that there is a difference in the communication operations by the two communication units, A determination apparatus and a determination method including an output unit that outputs information indicating that the one communication unit is out of order are proposed.

  According to one aspect of the present invention, there is an effect that the accuracy of failure determination can be improved.

FIG. 1 is an explanatory diagram illustrating an example of a determination apparatus according to the present invention. FIG. 2 is an explanatory diagram showing three states according to TEC or REC. FIG. 3 is an explanatory diagram showing an example of a system having a plurality of ECUs. FIG. 4 is an explanatory diagram showing an example of an ECU having the determination device 100 according to the present embodiment. FIG. 5 is an explanatory diagram illustrating an example of the self-failure diagnosis unit 411. FIG. 6 is an explanatory diagram illustrating an example of the unit usage status detection unit 412. FIG. 7 is an explanatory diagram illustrating a detailed example 1 of the switching unit 413. FIG. 8 is an explanatory diagram illustrating a detailed example 2 of the switching unit 413. FIG. 9 is an explanatory diagram (part 1) illustrating the generation timing of the operation switching flag switch_flag. FIG. 10 is an explanatory diagram (part 2) of the generation timing of the operation switching flag switch_flag. FIG. 11 is an explanatory diagram illustrating an operation example when no failure has occurred. FIG. 12 is an explanatory diagram illustrating an operation example when a failure has occurred. FIG. 13 is a flowchart (part 1) illustrating an example of a determination processing procedure performed by the determination apparatus 100. FIG. 14 is a flowchart (part 2) illustrating an example of a determination processing procedure performed by the determination apparatus 100. FIG. 15 is a flowchart (part 3) illustrating an example of a determination processing procedure performed by the determination apparatus 100.

  Exemplary embodiments of a determination apparatus and a determination method according to the present invention will be described below in detail with reference to the accompanying drawings. Although a plurality of communication devices may be prepared as in the hot standby method, power consumption increases when the plurality of communication devices are always operating. Therefore, in the present embodiment, when there is a possibility of failure in a state where one of the two communication devices is operated, the two communication devices are operated simultaneously to determine a difference in communication operation. Thus, it is possible to improve the accuracy of failure determination while suppressing power consumption.

  FIG. 1 is an explanatory diagram illustrating an example of a determination apparatus according to the present invention. Here, either one of the first communication unit 101 and the second communication unit 102 capable of performing a communication operation with the specific device 121 performs a communication operation, and the other communication unit Communication operation is not performed. For example, the determination apparatus 100 can control whether to perform the communication operation by gating the clocks supplied to the first communication unit 101 and the second communication unit 102, respectively. Here, it is assumed that the first communication unit 101 performs a communication operation and the second communication unit 102 does not perform a communication operation.

  The determination apparatus 100 includes a determination unit 111, a setting unit 112, an operation instruction unit 113, a determination unit 114, and an output unit 115. The determination device 100 is formed of, for example, an AND circuit that is a logical product circuit, an INVERTER that is a negative logic circuit, an OR that is a logical sum circuit, or an FF (Flip Flop) that is a latch circuit.

  The determination unit 111 determines whether or not the occurrence frequency of a state (hereinafter referred to as “failure state”) that may occur at the time of an abnormality different from the failure or failure of the first communication unit 101 has exceeded a certain frequency. An abnormality that is different from a failure is an abnormality that occurs with the communication operation of the first communication unit 101. Here, the state that can occur at the time of failure or an abnormality different from the failure includes, for example, the case where the data stored for transmission does not match the data transmitted on the communication bus. In this case, since the first communication unit 101 is out of order, data may not be transmitted, but another device connected to the communication bus may occupy the communication bus.

  Alternatively, for example, the state may be a case where the response from the specific device 121 to the transmission data is NACK. In this case, since the NACK port of the first communication unit 101 is out of order, the first communication unit 101 may receive the NACK even if the specific device 121 returns an ACK. On the other hand, the specific device 121 may return NACK to the first communication unit 101 without receiving data.

  Alternatively, for example, the state may be a case where received data does not satisfy a prescribed format. In this case, since the first communication unit 101 is out of order, the first communication unit 101 may not receive data correctly. On the other hand, the data transmission source may have failed to transmit data.

  Alternatively, for example, the state includes a case where there is an error in the decoded received data when the received data is encoded by error detection / correction or the like. In this case, since the first communication unit 101 is out of order, the first communication unit 101 may not be able to receive data correctly, or decoding may not be performed correctly. On the other hand, the data transmission source may fail to transmit data, or the data transmission source may fail to encode.

  When the determination unit 111 determines that the occurrence frequency exceeds a certain frequency, the setting unit 112 sets a parameter related to the communication operation set in the first communication unit 101 to the other communication unit. The parameter is, for example, a value stored in a register included in each communication unit.

  The operation instruction unit 113 causes the first communication unit 101 and the second communication unit 102 to start communication operation using the parameters after the setting unit 112 sets the parameters.

  The determination unit 114 determines whether or not there is a difference in communication operations between the first communication unit 101 and the second communication unit 102 after the two instruction units start communication operations by the operation instruction unit 113. For example, the determination unit 114 may compare the occurrence frequencies. Alternatively, for example, the determination unit 114 may compare parameter matches. Alternatively, for example, in the case of a reception operation, the determination unit 114 may compare the received data, or may compare the decoded data after decoding the received data.

  The output unit 115 outputs information indicating that the first communication unit 101 is out of order when the determination unit 114 determines that there is a difference in communication operation between the first communication unit 101 and the second communication unit 102. .

  According to the determination apparatus 100 illustrated in FIG. 1, it is possible to improve the accuracy of failure determination while suppressing power consumption.

  In the present embodiment, a CAN controller is taken as an example of the communication unit. Here, the CAN controller and the CAN protocol will be briefly described. For example, a plurality of microcomputers (ECU (Electronic Control Unit)) are used for electronic control of an automobile. A CAN protocol has been developed and standardized to manage communication between multiple ECUs. Each ECU has a CAN controller in order to realize the CAN protocol. The CAN protocol has a mechanism for independently recovering from an error.

  The CAN controller counts the number of transmission errors (TEC) and the number of reception errors (REC).

  For example, transmission errors include a bit error and an acknowledge error. A bit error occurs when there is a difference between transmission data and sampling data. An acknowledge error occurs when no receiver in the CAN returns a dominant in the acknowledge slot. Specifically, an acknowledge error occurs when all ECUs receive an incorrect message or when no other ECU is connected to CAN. When either a bit error or an acknowledge error occurs, the CAN controller counts up the TEC. If a bit error and an acknowledge error have not occurred, the CAN controller determines that transmission was successful and counts down the TEC.

  For example, the reception error includes a CRC error, a stuff error, and a format error. A CRC error occurs when the received bit string does not match the value indicated by the CRC. For example, a stuff error occurs when a bit stuffing rule that does not allow the same level to continue for 5 bits or more is not observed. The format error occurs when a dominant bit is detected by a CRC dilimiter, an acknowledge dilimiter, or an EOF (End Of Frame). When any of a CRC error, a stuff error, and a format error occurs, the CAN controller counts up the REC. When none of the CRC error, the stuff error, and the format error has occurred, the CAN controller determines that the reception is successful and counts down the REC.

  In the present embodiment, TEC or REC is used as an index representing the occurrence frequency of a state that can occur when one communication unit fails and a state that is different from the failure state.

  In order to prevent the CAN bus (see FIG. 3) connecting the ECUs from being damaged, the communication state of each ECU transits to three states according to the respective values of TEC or REC.

  FIG. 2 is an explanatory diagram showing three states according to TEC or REC. The three states are “error active”, “error passive”, and “bus off”. “Error active” is a state in which the CAN bus 301 is not affected and is normal. “Error / passive” is a state in which the CAN bus 301 is greatly affected and is not normal. “Bus off” is a state where the bus is disconnected from the CAN bus 301 because the influence on the CAN bus 301 is too great.

  In “error passive”, if the REC value and the TEC value are 127 or less, the communication state of the ECU changes to “error active”. When the value of REC or the value of TEC becomes greater than 127 in “error active”, the communication state of the ECU changes to “error passive”. In “error / passive”, when the value of TEC exceeds 255, the communication state of the ECU becomes “bus off”. When the 11-bit consecutive recessive state occurs 128 times in “bus off”, the communication state of the ECU becomes “error active”. The CAN controller has a mechanism for error recovery so that the communication state of the ECU can be changed from “bus off” to “error active”, but one of the ECUs connected to the CAN network has failed. In this case, it affects other ECUs.

  FIG. 3 is an explanatory diagram showing an example of a system having a plurality of ECUs. For example, the ECU 0 has a failure that causes a dominant state. The dominant state is a state where the logic of the CAN bus 301 is fixed to “0”. The ECU 1 is in a sensitive state. The sensitive state is a state where the logic of the CAN bus 301 becomes “1”. Since CAN is a multi-bus master system, signal collision occurs. When the dominant state and the sensitive state collide, the CAN bus 301 enters the dominant state. Therefore, when a CAN controller of a specific ECU fails, it must be repaired and restored.

  FIG. 4 is an explanatory diagram showing an example of an ECU having the determination device 100 according to the present embodiment. The ECU 400 includes a CPU 401, a determination device 100, a first CAN controller 101 (first communication unit 101), a second CAN controller 102 (second communication unit 102), and a port switching unit 403. The CPU 401, the first CAN controller 101, and the second CAN controller 102 are connected by a CPU bus 402.

  The ECU 400 processes specific functions such as engine control, headlight control, and door control. Here, the CPU 401 executes a specific function. The CPU 401 performs read access / write access to the first CAN controller 101 and the second CAN controller 102 when performing read / write from another ECU 400.

  The first CAN controller 101 and the second CAN controller 102 can each perform a communication operation between the ECU 400 and the specific device 121 based on the CAN protocol. The first CAN controller 101 and the second CAN controller 102 have the same function relating to the communication operation.

  The first CAN controller 101 includes a SubModule 421, a driver I / F 422, and a receiver I / F 423. The SubModule 421 performs a communication operation based on the CAN protocol based on Read / Write access from the CPU 401. The driver I / F 422 sends transmission data from the SubModule 421 to the CAN bus 301. The receiver I / F 423 receives data from the specific device 121 and passes it to the SubModule 421.

  The second CAN controller 102 includes a SubModule 431, a driver I / F 432, and a receiver I / F 433. The SubModule 431 performs a communication operation based on the CAN protocol based on Read / Write access from the CPU 401. The driver I / F 432 sends the transmission data from the SubModule 431 to the CAN bus 301. The receiver I / F 433 receives data from the specific device 121 and passes it to the SubModule 431.

  The port switching unit 403 can determine which CAN controller is performing a communication operation based on the activation unit signals CAN1 and CAN2. For example, if the values of the activation unit signals CAN1 and CAN2 are 1, it indicates that the activation is in progress. In the present embodiment, when it is determined that there is a possibility of failure during operation of any one of the two CAN controllers, the two CAN controllers operate simultaneously. In this case, the port switching unit 403 sends only data from one of the driver I / Fs to the CAN bus 301. The port switching unit 403 can receive any receiver I / F.

  The determination apparatus 100 includes a self-fault diagnosis unit 411, a unit usage status detection unit 412, and a switching unit 413 included in the setting unit 112. As described above, the determination device 100 is formed of, for example, an AND circuit that is a logical product circuit, an INVERTER that is a negative logic circuit, an OR that is a logical sum circuit, and an FF that is a latch circuit.

  FIG. 5 is an explanatory diagram illustrating an example of the self-failure diagnosis unit 411. FIG. 6 is an explanatory diagram illustrating an example of the unit usage status detection unit 412. The self-failure diagnosis unit 411 includes a threshold value register, a determination unit 111, and a determination unit 114. The unit usage status detection unit 412 includes a setting unit 112 (control unit 601), a failure determination register, and an operation instruction unit 113.

  The threshold value register stores a threshold value for the determination unit 111 to determine whether or not there is a possibility that a failure has occurred. Specifically, the first threshold th1_TEC, the second threshold th2_TEC, the third threshold th3_TEC, the first threshold th1_REC, the second threshold th2_REC, and the third threshold th3_REC are stored in the threshold register. The first threshold th1_TEC, the second threshold th2_TEC, and the third threshold th3_TEC are thresholds for the error count TEC, and have a relation of “th1_TEC <th2_TEC <th3_TEC”.

  The first threshold th1_REC, the second threshold th2_REC, and the third threshold th3_REC are thresholds for the error count REC and have a relationship of “th1_REC <th2_REC <th3_REC”. The first threshold th1_TEC, the second threshold th2_TEC, and the third threshold th3_TEC may be the same as the first threshold th1_REC, the second threshold th2_REC, and the third threshold th3_REC, respectively. Each threshold value is set by the designer of the determination apparatus 100. Alternatively, each threshold value is set to an arbitrary value by Write access from the CPU 401. The third threshold th3_TEC is set to 255 or less so that the communication state of the ECU 400 does not become “bus off” described above.

  Here, one of the first CAN controller 101 and the second CAN controller 102 performs the communication operation, and the other CAN controller stops the communication operation.

  The determination unit 111 can determine which CAN controller is performing a communication operation based on the activation unit signals CAN1 and CAN2, and the number of errors TECi (i is 0 or 1) during the communication operation and RECi are It is determined whether or not each threshold is exceeded.

  When the error count TECi is equal to or greater than the first threshold th1_TEC, the determination unit 111 sets the error switching flag TERR_e1 to 1. When the error count TECi is not equal to or greater than the first threshold th1_TEC, the determination unit 111 sets the error switching flag TERR_e1 to 0. When the error count RECi is equal to or greater than the first threshold th1_REC, the determination unit 111 sets the error switching flag RERR_e1 to 1. If the error count RECi is not equal to or greater than the first threshold th1_REC, the determination unit 111 sets the error switching flag RERR_e1 to 0.

  When the error count TECi is equal to or greater than the second threshold th2_TEC, the determination unit 111 changes the error switching flag TERR_e2 from 0 to 1 and the switching factor flag trans_reg [i−1] from 0 to 1. When the error count RECi is equal to or greater than the second threshold th2_REC, the determination unit 111 changes the error switching flag RERR_e2 from 0 to 1 and the switching factor flag receive_reg [i−1] from 0 to 1.

  The switching factor flag trans_reg [1: 0] indicates that there is a possibility of failure due to the transmission error TECi, and the switching factor flag receive_reg [1: 0] indicates that there is a possibility of failure due to the reception error RECi.

  When the error count TECi is equal to or greater than the third threshold th3_TEC, the determination unit 111 changes the error switching flag TERR_e3 from 0 to 1. When the error count RECi is equal to or greater than the third threshold th3_REC, the determination unit 111 changes the error switching flag RERR_e3 from 0 to 1.

  The setting unit 112 includes a control unit 601 and a switching unit 413. When the error switching flag TERR_e2 changes from 0 to 1, the control unit 601 changes the switching operation flag switch_flag from 0 to 1. The control unit 601 sets the switching operation flag switch_flag to 1 and then returns to 0 during the period in which the switching unit 413 performs data transfer between the registers of the two CAN controllers. When the error switching flag TERR_e3 changes from 0 to 1, the control unit 601 changes the switching operation flag switch_flag from 0 to 1. The control unit 601 sets the switching operation flag switch_flag to 1 and then returns to 0 during the period in which the switching unit 413 performs data transfer between the registers of the two CAN controllers.

  Further, when the error switching flag RERR_e2 changes from 0 to 1, the control unit 601 changes the switching operation flag switch_flag from 0 to 1. The control unit 601 sets the switching operation flag switch_flag to 1 and returns it to 0 during the period in which the switching unit 413 performs data transfer between the registers of the two CAN controllers.

  Further, when the error switching flag RERR_e3 changes from 0 to 1, the control unit 601 changes the switching operation flag switch_flag from 0 to 1. The control unit 601 sets the switching operation flag switch_flag to 1 and then returns to 0 during the period in which the switching unit 413 performs data transfer between the registers of the two CAN controllers.

  FIG. 7 is an explanatory diagram illustrating a detailed example 1 of the switching unit 413. The switching unit 413 includes a first switching unit 701 and a second switching unit 702. The first switching unit 701 is provided for each register provided in the first CAN controller 101. The second switching unit 702 is provided for each register provided in the second CAN controller 102.

  When the switching operation flag switch_flag is 0, the first switching unit 701 inputs a parameter related to the communication operation by the first CAN controller 101 to the register. When the switching operation flag switch_flag is 1, the first switching unit 701 inputs parameters relating to the communication operation performed by the second CAN controller 102.

  When the switching operation flag switch_flag is 0, the second switching unit 702 inputs a parameter related to the communication operation by the second CAN controller 102 to the register. When the switching operation flag switch_flag is 1, the second switching unit 702 inputs parameters related to the communication operation performed by the first CAN controller 101.

  FIG. 8 is an explanatory diagram illustrating a detailed example 2 of the switching unit 413. If the register in the first CAN controller 101 and the register in the second CAN controller 102 are scan registers, the switching unit 413 may switch the scan chain. The first broken line is a shared path for data setting in the present embodiment. The second broken line is a shared path for data setting in the scan test and the present embodiment.

  Thus, the value of the register that stores the parameter related to the communication operation by the first CAN controller 101 can be stored in one register in the register that stores the parameter related to the communication operation by the second CAN controller 102. The value of the register that stores the parameter related to the communication operation by the second CAN controller 102 can be stored in one register in the register that stores the parameter related to the communication operation by the first CAN controller 101.

  After the switching operation flag switch_flag_TEC or switch_flag_REC changes from 0 to 1 and a predetermined time has elapsed, the operation instruction unit 113 sets the activation unit signal CAN1 to an inverted value and sets the activation unit signal CAN2 to an inverted value. As a result, the CAN controller that performs the communication operation is switched.

  The operation instructing unit 113 sets the activation unit signal CAN1 and the activation unit signal CAN2 to 1 simultaneously after a predetermined time has elapsed after the failure diagnosis flag comp is 1 and the switch_flag has changed from 1 to 0. Thereby, the 1st CAN controller 101 and the 2nd CAN controller 102 operate | move simultaneously. Further, when the failure diagnosing flag comp changes from 1 to 0, the operation instruction unit 113 sets the activation unit signal CAN1 and the activation unit signal CAN2 to the values before the failure diagnosing flag comp changes from 0 to 1, respectively. .

  When any bit of the switching factor flag trans_reg is 1, and the error switching flag TERR_e1 changes from 1 to 0, the determination unit 114 sets the failure diagnosis flag comp to 0 to 1. When any of the bits of the switching factor flag receive_reg is 1, and the error switching flag RERR_e1 changes from 1 to 0, the determination unit 114 sets the failure diagnosis flag comp to 0 to 1.

  The determination unit 114 determines whether or not there is a difference between the communication operations by the two CAN controllers after the two CAN controllers by the operation instruction unit 113 start the communication operation. Specifically, for example, the determination unit 114 waits for a transmission request signal when the bit of the switching factor flag trans_reg is set. When the transmission request signal is generated, the determination unit 114 determines whether the error counter value TEC1 and the error counter value TEC2 are the same value. When the values are the same, the determination unit 114 determines that there is no difference in the communication operation. When the values are not the same, the determination unit 114 determines that there is a difference in the communication operation. Alternatively, for example, when a transmission request signal is generated, the determination unit 114 may determine whether the parameters related to the transmission operation match.

  Specifically, for example, the determination unit 114 determines whether or not the error counter value REC1 and the error counter value REC2 are the same value. When the values are the same, the determination unit 114 determines that there is no difference in the communication operation. When the values are not the same, the determination unit 114 determines that there is a difference in the communication operation. Alternatively, for example, the determination unit 114 may determine whether the reception result of the first CAN controller 101 and the reception result of the second CAN controller 102 are the same.

  If the determination unit 114 determines that there is a difference in communication operation between the two CAN controllers, the determination unit 114 sets the diagnosis result comp_err to 1. If it determines that there is no difference in communication operation between the two CAN controllers, the determination unit 114 sets the diagnosis result comp_err to 0. To do. The determination unit 114 changes the failure diagnosis flag comp from 1 to 0 after determining the communication operation difference.

  The failure determination register RUE stores a value indicating whether or not the first CAN controller 101 has failed and a value indicating whether or not the second CAN controller 102 has failed. Specifically, the value of the failure determination register RUE [0] indicates whether or not the first CAN controller 101 has failed. For example, when the value of the failure determination register RUE [0] is 1, it indicates that the first CAN controller 101 is normal. When the value of the failure determination register RUE [0] is 0, the first CAN controller 101 is in failure. Indicates that there is. The value of the failure determination register RUE [1] indicates whether or not the second CAN controller 102 has failed. For example, when the value of the failure determination register RUE [1] is 1, it indicates that the second CAN controller 102 is normal. When the value of the failure determination register RUE [1] is 0, the second CAN controller 102 is in failure. Indicates that there is.

  9 and 10 are explanatory diagrams showing the generation timing of the operation switching flag switch_flag. The timing chart 900 shows an example in which the value set in the register in the first CAN controller 101 is set in the register in the second CAN controller 102.

  In the timing chart 900, the signal CK1 is a clock signal for the first CAN controller 101, the signal CK2 is a clock signal for the second CAN controller 102, and the signal CK3 is a clock signal for the CPU bus 402. The timing chart 900 shows signals input to the scan register terminal CK and the scan register terminal S in the first CAN controller 101 and the second CAN controller 102.

  The timing chart 1000 shows an example in which the operation switching flag switch_flag changes from 0 to 1 based on the error counter value TEC1 or the error count value TEC2.

  FIG. 11 is an explanatory diagram illustrating an operation example when no failure has occurred. In the timing chart 1100, the first CAN controller 101 performs a communication operation, and the second CAN controller 102 is stopped.

  In the portion 1101 of the timing chart 1100, since the second threshold TEC_E2 is 80 and the error counter value TEC1 is equal to or greater than the second threshold TEC_E2, the operation switching flag switch_flag changes from 0 to 1. Thereby, the value of the register in the first CAN controller 101 is set in the register in the second CAN controller 102.

  In a portion 1101 of the timing chart 1100, the value of the activation unit signal CAN1 is inverted, and the value of the activation unit signal CAN2 is inverted. Thereby, the operation of the first CAN controller 101 is stopped, and the operation of the second CAN controller 102 is started based on the setting result. When the second CAN controller 102 performs a communication operation, the error count values REC2 and TEC2 increase or decrease.

  In the portion 1102 of the timing chart 1100, the first threshold value TEC_E1 is assumed to be 60, and the error counter value TEC1 is equal to or less than the first threshold value TEC_E1, so that comp during failure diagnosis is changed from 0 to 1. That is, when the second CAN controller 102 performs a communication operation, the determination apparatus 100 determines that there is a high possibility that the first CAN controller 101 is out of order because the error count value TEC2 decreases. In a portion 1102 of the timing chart 1100, the register value in the second CAN controller 102 is set in the corresponding register in the first CAN controller 101. In a portion 1102 of the timing chart 1100, the first CAN controller 101 and the second CAN controller 102 are simultaneously communicated. Here, two CAN controllers simultaneously perform communication operations. In the transmission operation, as described above, the port switching unit 303 performs control so that either one of the transmission data is output to the CAN bus 301.

  In a portion 1103 of the timing chart 1100, when the first CAN controller 101 and the second CAN controller 102 are simultaneously operated for communication, it is determined whether there is a difference between the two communication operations.

  In a portion 1103 of the timing chart 1100, the determination apparatus 100 determines that the first CAN controller 101 has not failed because TEC1 and TEC2 have the same value. The determination apparatus 100 stops the operation of the first CAN controller 101.

  FIG. 12 is an explanatory diagram illustrating an operation example when a failure has occurred. Since the portions 1201 and 1202 of the timing chart 1200 are the same as the portions 1101 and 1102 of the timing chart 1100, detailed description thereof is omitted.

  In a portion 1203 of the timing chart 1200, it is determined whether or not there is a difference between the two communication operations when the first CAN controller 101 and the second CAN controller 102 are operated to communicate simultaneously.

  In a portion 1203 of the timing chart 1200, TEC1 and TEC2 are different values, and the switching factor flag trans_reg [0] is 1. Therefore, the determination apparatus 100 determines that the first CAN controller 101 has failed and sets the diagnosis result comp_err to 1. The determination apparatus 100 stops the operation of the first CAN controller 101.

(Judgment processing procedure)
13 to 15 are flowcharts illustrating an example of a determination processing procedure performed by the determination apparatus 100. Here, although the case where the 1st CAN controller 101 is communicating and the 2nd CAN controller 102 is not communicating is mentioned as an example, it does not specifically limit.

  First, the determination apparatus 100 starts a communication operation by the first CAN controller 101 (step S1301). The determination apparatus 100 detects increase / decrease in the error counter value (step S1302), and determines whether or not the error counter value ≧ the first threshold value (step S1303). If the error counter value is not greater than or equal to the first threshold value (step S1303: NO), the process returns to step S1302.

  When the error counter value ≧ first threshold value (step S1303: Yes), the determination apparatus 100 detects increase / decrease in the error counter value (step S1304), and the determination apparatus 100 satisfies error counter value ≧ second threshold value. It is determined whether or not (step S1305). If the error counter value is not greater than or equal to the second threshold value (step S1305: NO), the process returns to step S1304. When the error counter value ≧ the second threshold value (step S1305: Yes), the determination apparatus 100 sets a switching factor flag (step S1306). Specifically, the determination apparatus 100 sets the switching factor flag [0] to 1.

  The determination apparatus 100 sets parameters relating to the communication operation of the first CAN controller 101 in the second CAN controller 102 (step S1307). The determination apparatus 100 stops the communication operation by the first CAN controller 101 and starts the communication operation by the second CAN controller 102 (step S1308).

  The determination apparatus 100 detects increase / decrease in the error counter value (step S1309), and determines whether or not the error counter value <the first threshold value (step S1310). When the error counter value <the first threshold value (step S1310: Yes), the determination apparatus 100 sets a failure diagnosing flag (step S1311). The determination apparatus 100 sets parameters relating to the communication operation of the second CAN controller 102 in the first CAN controller 101 (step S1312).

  The determination apparatus 100 causes the first CAN controller 101 and the second CAN controller 102 to perform communication operations simultaneously (step S1313), and detects an increase or decrease in the error counter value (step S1314). The determination apparatus 100 determines whether or not the error counter value of the first CAN controller 101 ≠ the error counter value of the second CAN controller 102 (step S1315). If the error counter value of the first CAN controller 101 is not equal to the error counter value of the second CAN controller 102 (step S1315: Yes), the determination apparatus 100 determines the failure of the first CAN controller 101 (step S1316). The determination apparatus 100 stops the communication operation by the first CAN controller 101, continues the communication operation by the second CAN controller 102 (step S1317), and ends the series of processes.

  If the error counter value of the first CAN controller 101 is not equal to the error counter value of the second CAN controller 102 (step S1315: No), the determination apparatus 100 clears the switching factor flag (step S1318). The determination apparatus 100 stops the communication operation by the first CAN controller 101, continues the communication operation of the second CAN controller 102 (step S1319), and ends the series of processes.

  In step S1310, when the error counter value <the first threshold value is not satisfied (step S1310: No), the determination apparatus 100 determines whether or not the error counter value ≧ the third threshold value (step S1320). If the error counter value ≧ the third threshold value is not satisfied (step S1320: NO), the process returns to step S1309. When the error counter value ≧ the third threshold value (step S1320: Yes), the determination apparatus 100 clears the switching factor flag (step S1321). The determination apparatus 100 sets parameters relating to the communication operation of the second CAN controller 102 in the first CAN controller 101 (step S1322).

  The determination apparatus 100 stops the communication operation by the second CAN controller 102, starts the communication operation of the first CAN controller 101 (step S1323), and detects increase / decrease in the error counter value (step S1324). The determination apparatus 100 determines whether or not the error counter value <the first threshold value (step S1325). When the error counter value <the first threshold value is not satisfied (step S1325: NO), the process proceeds to step S1324. When the error counter value <the first threshold value (step S1325: Yes), the process proceeds to step S1302.

  As described above, according to the determination device and the determination method, when it is determined that there is a possibility of failure when one communication unit of the two communication devices performs only the communication operation, Two communication units are operated simultaneously, and a failure is determined based on a difference in communication operations. Whether or not there is a possibility of failure is determined by whether or not the occurrence frequency of a state that can occur at the time of an abnormality different from the failure or the failure exceeds a certain frequency. Thereby, according to the determination apparatus, the accuracy of failure determination can be improved. Only when there is a possibility of failure, it is possible to suppress an increase in power consumption by operating a plurality of communication devices simultaneously.

  In addition, when the occurrence frequency exceeds a certain frequency, the determination device stops the communication operation of one communication unit and starts the communication operation of the other communication unit, and then the occurrence frequency does not exceed the certain frequency. In this case, it is determined that there is a possibility of failure in one communication unit. As a result, only when the possibility of failure is high, the two communication units are operated simultaneously, so that an increase in power consumption can be suppressed.

  In addition, the determination device determines that the possibility of failure of one communication unit is high if the frequency of occurrence is significantly reduced by causing the other communication unit to perform a communication operation. As a result, only when the possibility of failure is high, the two communication units are operated simultaneously, so that an increase in power consumption can be suppressed.

  In addition, since the two communication units perform the same communication operation, the frequency of the two occurrences is the same unless one of them malfunctions. Therefore, the determination device determines whether one communication unit is out of order by determining whether the occurrence frequencies of the two communication units after the start of the communication operation match. Thereby, according to the determination apparatus, the accuracy of failure determination can be improved.

  In addition, when it is determined that one communication unit is out of order, the determination device stops the communication operation by one communication unit and continues the communication operation by the other communication unit. Thereby, the increase in power consumption can be suppressed.

  In addition, when it is determined that one of the communication units has not failed, the determination device stops the communication operation by any one of the two communication units. Thereby, except at the time of failure determination, since one communication unit performs communication operation, an increase in power consumption can be suppressed.

  In addition, the determination device switches between a case where a parameter set in one communication unit is input and a case where a parameter based on communication operation of the other communication unit is input to a register included in the other communication unit. . Thereby, data can be easily transferred from one communication unit to the other communication unit.

  In addition, the determination device switches between a case where a parameter set in the other communication unit is input and a case where a parameter based on the communication operation of the one communication unit is input to a register included in the one communication unit. . Thereby, data can be easily transferred from the other communication unit to the one communication unit.

  Further, the determination apparatus connects a scan register included in one communication unit and a scan register included in the other communication unit to form a scan chain. Thereby, data can be easily transferred from one communication unit to the other communication unit and from the other communication unit to one communication unit.

  The following additional notes are disclosed with respect to the embodiment described above.

(Appendix 1) Of the two communication units each capable of performing a communication operation with a specific device, one of the communication units performs the communication operation, and the other communication unit performs the communication operation. A determination unit that determines whether or not the frequency of occurrence of the failure state of the one communication unit exceeds a certain frequency, if not,
A setting unit that sets a parameter related to the communication operation set in the one communication unit to the other communication unit when the determination unit determines that the occurrence frequency exceeds the certain frequency;
After setting the parameter by the setting unit, an operation instruction unit that causes the two communication units to perform the communication operation using the parameter;
A determination unit that determines whether or not there is a difference in the communication operation by the two communication units when the two communication units are simultaneously performing the communication operation by the operation instruction unit;
An output unit that outputs information indicating that the one communication unit is faulty when the determination unit determines that the communication operation by the two communication units is different;
The determination apparatus characterized by having.

(Appendix 2) The setting unit
When the determination unit determines that the occurrence frequency exceeds the certain frequency, further sets the occurrence frequency in the other communication unit,
The operation instruction unit includes:
Starting the communication operation by the parameter set from the one communication unit to the other communication unit by the setting unit, and stopping the communication operation by the one communication unit,
The determination unit
After the one communication unit is stopped from the communication operation by the operation instruction unit and the other communication unit is started the communication operation, it may occur at the time of failure of the other communication unit or an abnormality different from the failure Determine whether the occurrence frequency of the condition exceeds the certain frequency,
The setting unit
When the determination unit determines that the occurrence frequency of the other communication unit does not exceed the certain frequency, the parameter related to the communication operation by the other communication unit is set in the one communication unit,
The operation instruction unit includes:
After the parameter is set from the other communication unit to the one communication unit by the setting unit, the communication operation by the parameter is started in the two communication units,
The determination unit
The supplementary note 1, wherein when the two communication units are simultaneously performing the communication operation by the operation instruction unit, it is determined whether or not there is a difference between the communication operations by the two communication units. Judgment device.

(Appendix 3) The determination unit
After the one communication unit stops the communication operation and the other communication unit starts the communication operation by the operation instruction unit, the occurrence frequency of the other communication unit is lower than the predetermined frequency. Determine whether the first frequency has been exceeded,
The setting unit
When the determination unit determines that the occurrence frequency of the other communication unit does not exceed the first frequency, the parameter related to the communication operation by the other communication unit is set in the one communication unit. The determination apparatus according to attachment 2, characterized by:

(Appendix 4) The determination unit
The operation instruction unit determines whether or not the occurrence frequencies of the two communication units after the two communication units start the communication operation are the same,
The output unit is
Additional information 1 to 3 characterized in that when the determination unit determines that the occurrence frequencies of the two communication units do not match, information indicating that the one communication unit is out of order is output. The determination apparatus as described in any one of.

(Supplementary Note 5) The operation instruction unit
When it is determined by the determination unit that there is a difference in the communication operation by the two communication units, the communication operation by the one communication unit is stopped and the communication operation by the other communication unit is continued. The determination apparatus according to any one of Supplementary notes 1 to 4, which is characterized.

(Appendix 6) The operation instruction unit
Supplementary note 1 wherein when the determination unit determines that there is no difference in the communication operations by the two communication units, the communication operation by any one of the two communication units is stopped. The determination apparatus as described in any one of -4.

(Appendix 7) The setting unit
A communication operation state in which a parameter relating to the communication operation by the other communication unit is input to a register provided in the other communication unit; and a setting state in which a parameter relating to the communication operation by the one communication unit is input. A switching unit for switching between,
When the determination unit determines that the occurrence frequency exceeds the predetermined frequency, the switch unit is set to the set state, and a parameter related to the communication operation by the other communication unit is set in a register provided in the other communication unit. Is set, the control unit to put the switching unit in the communication operation state,
The determination apparatus according to any one of supplementary notes 1 to 6, characterized by comprising:

(Appendix 8) The setting unit
A communication operation state in which a parameter relating to the communication operation by the one communication unit is input to a register provided in the one communication unit; and a setting state in which a parameter relating to the communication operation by the other communication unit is input. A switching unit for switching between,
A register provided in the one communication unit with the switching unit in the set state when the determination unit determines that the occurrence frequency of the communication operation by the other communication unit does not exceed the certain frequency A control unit that sets the switching unit to the communication operation state after the parameter related to the communication operation by the other communication unit is set,
The determination apparatus according to appendix 2 or 3, characterized by comprising:

(Supplementary note 9) A communication operation for inputting a parameter related to the communication operation by the other communication unit to a scan register provided in the one communication unit that performs scan input to a scan register provided in the other communication unit A switching unit for switching between a state and a setting state for inputting a parameter relating to the communication operation by the one communication unit;
When the determination unit determines that the occurrence frequency exceeds the predetermined frequency, the switch unit is set to the set state, and a parameter related to the communication operation by the other communication unit is set in a register provided in the other communication unit. Is set, the control unit to put the switching unit in the communication operation state,
The determination apparatus according to any one of supplementary notes 1 to 6, characterized by comprising:

(Appendix 10) Of the two communication units each capable of performing a communication operation with a specific device, one of the communication units performs the communication operation, and the other communication unit performs the communication operation. If not, determine whether the frequency of occurrence of the failure state of the one communication unit exceeds a certain frequency,
When it is determined that the occurrence frequency exceeds the certain frequency, the parameter related to the communication operation set in the one communication unit is set in the other communication unit,
After the setting of the parameter, the communication operation by the parameter is simultaneously performed by the two communication units,
When the two communication units are performing the communication operation at the same time, determine whether there is a difference in the communication operation by the two communication units,
When it is determined that there is a difference in the communication operation by the two communication units, information indicating that the one communication unit is out of order is output.
The determination method characterized by this.

DESCRIPTION OF SYMBOLS 100 Determination apparatus 101 1st communication part 102 2nd communication part 111 Judgment part 112 Setting part 113 Operation instruction part 114 Judgment part 115 Output part

Claims (6)

  1. Of the two communication units each capable of performing a communication operation with a specific device, when one of the communication units performs the communication operation and the other communication unit is not performing the communication operation, A determination unit that determines whether the frequency of occurrence of a failure state of the one communication unit exceeds a certain frequency;
    A setting unit that sets a parameter related to the communication operation set in the one communication unit to the other communication unit when the determination unit determines that the occurrence frequency exceeds the certain frequency;
    An operation instruction unit that causes the two communication units to simultaneously perform the communication operation using the parameters after the setting of the parameters by the setting unit;
    A determination unit that determines whether or not there is a difference in the communication operation by the two communication units when the two communication units are simultaneously performing the communication operation by the operation instruction unit;
    An output unit that outputs information indicating that the one communication unit is faulty when the determination unit determines that the communication operation by the two communication units is different;
    The determination apparatus characterized by having.
  2. The setting unit
    When the determination unit determines that the occurrence frequency exceeds the certain frequency, further sets the occurrence frequency in the other communication unit,
    The operation instruction unit includes:
    Starting the communication operation by the parameter set from the one communication unit to the other communication unit by the setting unit, and stopping the communication operation by the one communication unit,
    The determination unit
    After the one communication unit stops the communication operation by the operation instruction unit and the other communication unit starts the communication operation, the frequency of occurrence of a failure state of the other communication unit exceeds the certain frequency. Determine whether or not
    The setting unit
    When the determination unit determines that the occurrence frequency of the other communication unit does not exceed the certain frequency, the parameter related to the communication operation by the other communication unit is set in the one communication unit,
    The operation instruction unit includes:
    After the parameter is set from the other communication unit to the one communication unit by the setting unit, the communication operation by the parameter is started in the two communication units,
    The determination unit
    2. The method according to claim 1, wherein when the two communication units simultaneously perform the communication operation by the operation instruction unit, it is determined whether or not there is a difference between the communication operations by the two communication units. The determination apparatus described.
  3. The determination unit
    After the one communication unit stops the communication operation and the other communication unit starts the communication operation by the operation instruction unit, the occurrence frequency of the other communication unit is lower than the predetermined frequency. Determine whether the first frequency has been exceeded,
    The setting unit
    When the determination unit determines that the occurrence frequency of the other communication unit does not exceed the first frequency, the parameter related to the communication operation by the other communication unit is set in the one communication unit. The determination device according to claim 2.
  4. The determination unit
    The operation instruction unit determines whether or not the occurrence frequencies of the two communication units after the two communication units start the communication operation are the same,
    The output unit is
    The information indicating that the one communication unit is out of order is output when the determination unit determines that the occurrence frequencies of the two communication units do not match. 4. The determination device according to any one of 3.
  5. The operation instruction unit includes:
    When it is determined by the determination unit that there is a difference in the communication operation by the two communication units, the communication operation by the one communication unit is stopped and the communication operation by the other communication unit is continued. The determination apparatus according to claim 1, wherein the determination apparatus is characterized in that:
  6. Of the two communication units each capable of performing a communication operation with a specific device, when one of the communication units performs the communication operation and the other communication unit is not performing the communication operation, Determining whether the frequency of occurrence of the failure state of the one communication unit exceeds a certain frequency,
    When it is determined that the occurrence frequency exceeds the certain frequency, the parameter related to the communication operation set in the one communication unit is set in the other communication unit,
    After the setting of the parameter, the communication operation by the parameter is simultaneously performed by the two communication units,
    When the two communication units are performing the communication operation at the same time, determine whether there is a difference in the communication operation by the two communication units,
    When it is determined that there is a difference in the communication operation by the two communication units, information indicating that the one communication unit is out of order is output.
    The determination method characterized by this.
JP2012091418A 2012-04-12 2012-04-12 Determination apparatus and determination method Expired - Fee Related JP5835074B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
JP2012091418A JP5835074B2 (en) 2012-04-12 2012-04-12 Determination apparatus and determination method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
JP2012091418A JP5835074B2 (en) 2012-04-12 2012-04-12 Determination apparatus and determination method

Publications (2)

Publication Number Publication Date
JP2013222992A JP2013222992A (en) 2013-10-28
JP5835074B2 true JP5835074B2 (en) 2015-12-24

Family

ID=49593706

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2012091418A Expired - Fee Related JP5835074B2 (en) 2012-04-12 2012-04-12 Determination apparatus and determination method

Country Status (1)

Country Link
JP (1) JP5835074B2 (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR102111295B1 (en) * 2018-02-05 2020-05-15 주식회사 만도 Apparatus and method for controlling vehicle based on redundant architecture

Also Published As

Publication number Publication date
JP2013222992A (en) 2013-10-28

Similar Documents

Publication Publication Date Title
US9892086B2 (en) High performance interconnect physical layer
US10241953B2 (en) Dynamic data-link selection over common physical interface
US8924805B2 (en) Computer memory test structure
US10108578B2 (en) Single wire communications interface and protocol
KR20160096035A (en) Methods and apparatus for controlled recovery of error information between independently operable processors
EP1703401B1 (en) Information processing apparatus and control method therefor
US7107484B2 (en) Fault-tolerant computer system, re-synchronization method thereof and re-synchronization program thereof
US10326865B2 (en) Filter or bridge for communications between CAN and CAN-FD protocol modules
EP1598742B1 (en) Method and apparatuses for the physical layer initialization of a link-based system interconnect
JP4077812B2 (en) Integrated circuit routers that support individual transmission rates
US7536584B2 (en) Fault-isolating SAS expander
US20120275294A1 (en) Recovering from failures without impact on data traffic in a shared bus architecture
EP2961098B1 (en) Method, device and system for processing pcie link failure
US6625761B1 (en) Fault tolerant USB method and apparatus
JP3920280B2 (en) Data transmission method through I2C router
EP2052326B1 (en) Fault-isolating sas expander
JP3962956B2 (en) Information processing apparatus and information processing method
US8375201B2 (en) Ethernet PHY level security
US7757020B2 (en) Point-to-point link negotiation method and apparatus
US20050240829A1 (en) Lockstep error signaling
EP2013733B1 (en) Error filtering in fault tolerant computing systems
US9960981B2 (en) Communication device, communication method, program, and communication system
US7714619B2 (en) High-frequency clock detection circuit
US20060161714A1 (en) Method and apparatus for monitoring number of lanes between controller and PCI Express device
US20200319957A1 (en) Multichip package link error detection

Legal Events

Date Code Title Description
A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20141224

A711 Notification of change in applicant

Free format text: JAPANESE INTERMEDIATE CODE: A712

Effective date: 20150611

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20150925

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20151006

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20151019

R150 Certificate of patent or registration of utility model

Ref document number: 5835074

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150

LAPS Cancellation because of no payment of annual fees