JP6532545B2 - Data transmission processing apparatus and data transmission processing method - Google Patents

Description

The present invention relates to a data transmission processor and a data transmission processing method comprising a sensor equipment in the vehicle.

  Vehicle-mounted devices are connected via a bus, and conventionally, a bus with a relatively low transmission speed is used for this bus. Further, it has been proposed to realize functional safety of a vehicle, that is, to suppress an adverse effect due to an abnormality of the vehicle (including an abnormality of the on-vehicle device) using the on-vehicle device and the bus.

  In order to realize the functional safety of the vehicle, it is necessary to detect the state or operation of the vehicle or the on-vehicle device and transmit a large amount of information to the control device or the like by the bus. However, when attempting to transmit a large amount of information through a conventional low-speed bus, the information to be transmitted exceeds the transmission capacity of the bus, and there is a problem that the bus can not operate normally.

  In order to solve such a problem, there has been proposed a configuration in which a low speed bus is changed to a high speed bus, or a configuration in which data reduced in each on-vehicle device is supplied to a CPU or the like by the bus (for example, Patent Document 1).

JP 2007-320359 A

  However, in order to change the low-speed bus to a high-speed bus, it is necessary to change not only the in-vehicle device that detects and transmits data related to functional safety but also the other in-vehicle devices to an interface for the high-speed bus There is a problem that it costs money.

  On the other hand, in the configuration in which the data after reduction is sent to the bus, data required to accurately indicate the state or operation of the vehicle or in-vehicle device is insufficient, so that analysis and determination regarding the functional safety of the vehicle can be accurately performed. There is a problem that it can not do.

  Then, this invention is made in view of the above problems, and it aims at providing the technique which can transmit the data of sufficient information content.

A data transmission processing apparatus according to the present invention includes a sensor device mountable to a vehicle, the sensor device being mounted on the vehicle, a first interface connectable to a first bus mounted on the vehicle, and the first bus And a second interface connectable to a second bus having a high transmission speed . The first interface is generated based on first detection data which is detected for a vehicle and is data for functional safety capable of judging abnormality of the vehicle, and the first data having a smaller amount of information than the first detection data It can be output to the first bus. The second interface is generated based on the first detection data, and is one of data having a smaller amount of information than the first detection data and a larger amount of information than the first data, or the first detection data itself The second data can be output to the second bus. The second interface can output the first data to the second bus in addition to the second data, and the data transmission processing device is mounted on the vehicle, and the second bus connected to the second interface of the sensor device, An upper data processing unit mounted on the vehicle and not connected to the first bus and further connected to the second bus, the upper data processing unit receiving the second data from the sensor device via the second bus The data processing performed by the upper data processing unit, which performs predetermined data processing, includes processing to determine whether the vehicle has an abnormality based on the second data received from the sensor device, and the upper data processing When it is determined by the unit that there is an abnormality in the vehicle, a predetermined process is performed on the abnormality. The data transmission processing device is mounted on a vehicle and mounted on the first bus connected to the first interface of the sensor device and the sensor device mounted on the vehicle and not connected to the second bus and connected to the first bus The system further includes another sensor device, and the other sensor device outputs third data, which is generated based on the second detection data detected regarding the vehicle and has a smaller amount of information than the second detection data, to the first bus. .

  According to the present invention, the sensor device (the second sensor device) is able to generate the first data, which is generated based on the first detection data and has a smaller amount of information than the first detection data, to the first bus. Further, the sensor device (second sensor device) is generated based on the first detection data, data having a smaller amount of information than the first detection data and a larger amount of information than the first data, and the first detection data itself The second data, which is either one of the above, can be output to the second bus. Therefore, data of a sufficient amount of information can be transmitted to the second bus.

  The objects, features, aspects and advantages of the present invention will become more apparent from the following detailed description and the accompanying drawings.

FIG. 1 is a block diagram showing a configuration of a data transmission processing device according to Embodiment 1. It is a block diagram which shows the structure of the data transmission processing apparatus which concerns on a modification. FIG. 7 is a block diagram showing a configuration of a data transmission processing device according to Embodiment 2. FIG. 7 is a block diagram showing a configuration of a data transmission processing device according to Embodiment 2. It is a figure which shows an example of the raw data of a vehicle speed pulse. 7 is a flowchart showing an operation of the data transmission processing device according to the second embodiment. FIG. 13 is a block diagram showing a configuration of a data transmission processing device according to a third embodiment. 15 is a flowchart showing an operation of the data transmission processing device according to the third embodiment. It is a figure which shows the determination result of the conventional data transmission processing apparatus. FIG. 18 is a diagram showing the determination result of the data transmission processing device according to the fourth embodiment. FIG. 18 is a diagram showing a display example of the data transmission processing device according to the fourth embodiment. FIG. 16 is a flowchart showing the operation of the data transmission processing device according to the fourth embodiment. FIG. 18 is a block diagram showing a configuration of a data transmission processing device according to a fifth embodiment. FIG. 18 is a diagram showing an operation of the data transmission processing device according to the fifth embodiment. FIG. 16 is a flowchart showing the operation of the data transmission processing device according to the fifth embodiment. It is a block diagram which shows the structure of the data transmission processing apparatus which concerns on a modification. FIG. 18 is a block diagram showing a configuration of a data transmission processing device according to a sixth embodiment. FIG. 16 is a flowchart showing the operation of the data transmission processing apparatus according to the sixth embodiment. FIG. 21 is a block diagram showing a configuration of a data transmission processing device according to a seventh embodiment. FIG. 18 is a flowchart showing the operation of the data transmission processing device according to the seventh embodiment. FIG. 21 is a block diagram showing a configuration of a data transmission processing device according to an eighth embodiment. FIG. 20 is a flowchart showing the operation of the data transmission processing apparatus according to the eighth embodiment. FIG. 21 is a block diagram showing a configuration of a data transmission processing device according to a ninth embodiment. FIG. 20 is a flowchart showing the operation of the data transmission processing apparatus according to the ninth embodiment.

Embodiment 1
FIG. 1 is a block diagram showing the configuration of the data transmission processing apparatus according to the first embodiment. The data transmission processing device 1 of FIG. 1 includes a general-purpose bus (first bus) 11, a dedicated bus (second bus) 12, other sensor devices (first sensor device) 21 other than functional safety sensor devices, and a vehicle And a functional safety sensor device (sensor device, second sensor device) 31 that can be mounted on the device. The general-purpose bus 11, the dedicated bus 12, the other sensor device 21, and the functional safety sensor device 31 are mounted on a vehicle. Hereinafter, a vehicle on which these constituent elements are mounted and which is a target of attention will be described as “own vehicle”.

  In addition, although each number of the other sensor apparatus 21 and the sensor apparatus 31 for functional safety is set to one in FIG. 1, it is not limited to this. For example, at least one of the other sensor device 21 and the functional safety sensor device 31 may be plural.

  The general-purpose bus 11 and the dedicated bus 12 are buses such as CAN (Controller Area Network).

  The other sensor device 21 is connected to the general-purpose bus 11. The other sensor device 21 is provided with a sensor 22 other than the functional safety sensor, a data processing unit 23, and an interface (hereinafter referred to as "I / F") 24.

  The other sensor 22 detects other application data (second detection data) other than the functional safety data with respect to the host vehicle. In addition, functional safety detects whether or not the own vehicle (including the in-vehicle device of the own vehicle) is abnormal, and notifies the user of the abnormality based on the detection result. To reduce the risk of injury to drivers, passengers, pedestrians, etc. due to abnormalities, such as degeneracy to stop some functions of a) and to stop all functions of in-vehicle equipment etc. Including. Functional safety is defined, for example, in "Functional Safety" of Part 1 of the international standard ISO26262. The above-mentioned functional safety data is data used directly for functional safety.

  The data processing unit 23 generates, on the basis of the separate application data detected by the other sensor 22, separate application processing data (third data) having a smaller amount of information than the separate application data. For example, the data processing unit 23 generates other-purpose processing data (general-purpose data) by appropriately reducing other-purpose data, analyzes the other-purpose data, and indicates other-purpose processing data (general-purpose data) indicating the analysis result. Generate.

  The I / F 24 is connected to the data processing unit 23 and the general-purpose bus 11. For this reason, the I / F 24 and hence the other sensor device 21 can output the other-purpose processing data generated by the data processing unit 23 to the general-purpose bus 11.

  The functional safety sensor device 31 is connected to the general-purpose bus 11 and the dedicated bus 12. The functional safety sensor device 31 includes a functional safety sensor 32, a data processing unit 33, an I / F (first interface) 34, and an I / F (second interface) 35.

  The functional safety sensor 32 detects functional safety data (first detection data) used directly for functional safety with respect to the host vehicle.

  The data processing unit 33 generates functional safety process data (first data) having a smaller amount of information than the functional safety data, based on the functional safety data detected by the functional safety sensor 32. For example, the data processing unit 33 generates functional safety processing data by performing the same data processing as the data processing unit 23 described above on the functional safety data.

  The I / F 34 is connected to the data processing unit 33, and is configured to be connectable to the general-purpose bus 11. In the first embodiment, since the I / F 34 is connected to the general-purpose bus 11, the I / F 34 and hence the sensor device 31 for functional safety uses the functional safety processing data generated by the data processing unit 33 as the general-purpose bus Output to 11 is possible.

  The I / F 35 is connected to the functional safety sensor 32 and configured to be connectable to the dedicated bus 12. In the first embodiment, since the I / F 35 is connected to the dedicated bus 12, the I / F 35 and hence the functional safety sensor device 31 are raw data detected by the functional safety sensor 32. The data itself (second data) can be output to the dedicated bus 12.

  In the following description, the I / Fs 24, 34, 35 are described as terminals, but the present invention is not limited to this, and the buffer circuit, the power conversion circuit, Bluetooth (registered trademark), Wi- A wireless communication circuit capable of wireless connection such as Fi (registered trademark) and a wireless LAN (Local Area Network) may be included as appropriate.

<Summary of Embodiment 1>
According to the first embodiment, it is possible to transmit functional safety data (second data) which is raw data detected by the functional safety sensor 32 using the dedicated bus 12. Therefore, functional safety data with a sufficient amount of information can be transmitted to the dedicated bus 12 without adversely affecting the general-purpose bus 11. Therefore, for example, a control device such as an upper monitoring unit described later connected to the dedicated bus 12 can accurately perform analysis and determination on the functional safety of the host vehicle. In order to enhance this effect, a high-speed bus having a transmission speed higher than that of the general-purpose bus 11 may be applied to the dedicated bus 12. Further, according to the first embodiment, since it is not necessary to provide the other sensor device 21 with an interface for connecting to the dedicated bus 12, costs can be suppressed.

  In addition, according to the first embodiment, the conventional operation using the general-purpose bus 11 can be performed without the dedicated bus 12. In other words, only by providing the dedicated bus 12 or the like, it is possible to construct a functional safety system capable of accurate analysis and determination while maintaining the existing system consisting of the general-purpose bus 11. Thus, the dedicated bus 12 can be attached or detached according to, for example, the type and price of the host vehicle, so that attachment of the dedicated bus 12 and construction of a functional safety system can be used as an option.

<Modification>
In the first embodiment, the I / F 35 and hence the functional safety sensor device 31 are configured to output the functional safety data, which is raw data, to the dedicated bus 12, but the present invention is not limited to this.

  For example, as shown in FIG. 2, based on the functional safety data detected by the functional safety sensor 32, the functional safety sensor device 31 has a smaller amount of information than the functional safety data and is for functional safety. It may further include a data processing unit 36 that generates multi-information amount functional safety process data (second data) having an information amount larger than that of the process data. Then, the I / F 35 and, consequently, the functional safety sensor device 31 transmit the processing data for functional safety of a large amount of information generated by the data processing unit 36 to the dedicated bus 12 instead of the data for functional safety which is raw data. It may be configured to output.

  Note that, for example, data obtained by performing reduction processing that does not reduce functional safety data than the data processing unit 33, or an analysis result with a relatively large amount of information, is used as processing data for functional safety of a large amount of information. Data shown is assumed.

  Even with the above-described configuration, the same effects as those described above can be obtained to some extent.

  By the way, in the first embodiment, the first detection data is described as the data for functional safety. However, the present invention is not limited to this, and the first detection data includes other data (for example, data used for a navigation function, an audio function, an infotainment system, etc.) regarding the vehicle which is desirably raw data. It should be applied.

  The configuration described in the present modification can be similarly applied to the configuration of the second and subsequent embodiments.

Second Embodiment
FIG. 3 is a block diagram showing a configuration of a data transmission processing apparatus according to Embodiment 2 of the present invention. Hereinafter, in the data transmission processing apparatus 1 according to the second embodiment, the same or similar components as or to those in the first embodiment are given the same reference numerals, and different components will be mainly described.

  The data transmission processing device 1 of FIG. 3 includes an upper monitoring unit 16 which is an upper data processing unit in addition to the configuration of FIG. 1. The upper level monitoring unit 16 is mounted on the host vehicle in the same manner as the dedicated bus 12.

  The upper monitoring unit 16 is connected to the dedicated bus 12. Then, the upper layer monitoring unit 16 receives the functional safety data from the functional safety sensor device 31 via the dedicated bus 12 and performs predetermined data processing. In the second embodiment, the data processing performed by the upper level monitoring unit 16 has an abnormality in the own vehicle (including the on-vehicle equipment of the own vehicle) based on the functional safety data received from the functional safety sensor device 31. Including the process of determining the

  Then, when it is determined that the host vehicle is not abnormal, the upper rank monitoring unit 16 performs predetermined processing (hereinafter referred to as “normal processing”) with respect to normality. On the other hand, when it is determined that the host vehicle has an abnormality, the upper level monitoring unit 16 performs a predetermined process (hereinafter, referred to as “error process”) on the abnormality.

  The normal process includes, for example, notifying the user of the normal as needed. In the abnormal state processing, for example, notifying the user of the abnormality, performing degeneration to stop a part of functions of the own vehicle (including the in-vehicle apparatus of the own vehicle), and stopping all functions of the in-vehicle apparatus Such as, to suppress the adverse effect of the anomaly is included.

  The function of the upper monitoring unit 16 in the data transmission processing device 1 is realized by the processing circuit of FIG. That is, the data transmission processing device 1 includes a processing circuit for receiving the functional safety data, determining an abnormality of the host vehicle, and performing a predetermined process on the abnormality. The processing circuit is a processor 41 (also referred to as a central processing unit, processing unit, arithmetic unit, microprocessor, microcomputer, DSP (Digital Signal Processor)) that executes a program stored in the memory 42.

  The function of the upper level monitoring unit 16 in the data transmission processing device 1 is realized by software, firmware, or a combination of software and firmware. The software or firmware is described as a program and stored in the memory 42. The processing circuit implements the functions of the respective units by reading and executing the program stored in the memory 42. That is, the step of receiving data for functional safety, the step of determining an abnormality of the own vehicle, and the step of performing a predetermined process for the abnormality will be executed as a result. A memory 42 for storing a program is provided. Also, it can be said that these programs cause a computer to execute the procedure or method of the upper monitoring unit 16. Here, the memory means, for example, nonvolatile or volatile such as random access memory (RAM), read only memory (ROM), flash memory, erasable programmable read only memory (EPROM), electrically erasable programmable read only memory (EEPROM), etc. Semiconductor memory, magnetic disk, flexible disk, optical disk, compact disk, mini disk, DVD (Digital Versatile Disk), and the like.

  Next, several examples of functional safety data which are raw data will be described.

First Example
In the first example, the functional safety sensor 32 of FIG. 3 is a sensor of a vehicle speed pulse, and the functional safety data is raw data of the vehicle speed pulse detected by the sensor. FIG. 5 is a view showing an example of raw data of a vehicle speed pulse. As shown in FIG. 5, if the vehicle-mounted device related to the vehicle speed pulse is in a normal state (normal signal in FIG. 5), the peak (pulse) interval of the waveform becomes almost constant. In the state (abnormal signal in FIG. 5), the intervals of the peaks will vary.

  By the way, in the conventional data transmission processing apparatus, a monitoring unit (not shown) connected to a general purpose bus receives data of a vehicle speed pulse whose data has been reduced from the general purpose bus, and based on the interval of peaks of the vehicle speed pulse. It is configured to determine whether or not there is an abnormality in the host vehicle. According to such a configuration, it is possible to determine the abnormality of the host vehicle to some extent even from the data of the vehicle speed pulse whose data is reduced. However, in the conventional data transmission processing device, the interval between peaks in the abnormal state (transition signal in FIG. 5) does not vary more than the interval between peaks in the abnormal state (error signal in FIG. 5). It is not possible to detect an abnormal condition.

  On the other hand, the upper level monitoring unit 16 according to the first example of the second embodiment receives the data for functional safety, that is, the data of the vehicle speed pulse whose data is not substantially reduced, and is determined in advance. Perform data processing. Thereby, the upper level monitoring unit 16 can determine the abnormality of the host vehicle based on, for example, the disturbance of the waveform of the vehicle speed pulse (the disturbance different from the disturbance of the peak interval). As a result, it is possible to detect an abnormal condition.

Second Example
In the second example, the functional safety sensor 32 in FIG. 3 is an on-vehicle camera, and the functional safety data is data of a camera image captured by the on-vehicle camera. Note that the data transmission processing device performs A / D conversion of a video signal and inputs it to an algorithm, integrates an on-vehicle camera and a processing unit so as not to use a transmission path (cable), compresses and digitally transmits it. Shall be configured to

  In recent years, camera images have been used for detection and recognition (for example, white line detection, signal recognition, pedestrian detection, signboard recognition, sign recognition, distance measurement, etc.) or for complementing other sensors (for example, steering angle, speed, etc.) It is proposed to use. Also, it has been proposed to use camera images in a plurality of directions, such as, for example, around view. In order to perform detection, recognition and complementation accurately, it is necessary to transmit a high resolution camera image at a high transmission rate, and to use camera images in multiple directions, a high transmission rate of a camera image having a large amount of information It is necessary to transmit in

  For example, in the case of transmitting a color camera image having a pixel of 720 dots × 480 dots and a frame rate of 30 fps, a transmission rate of about 166 Mbps (= 720 × 480 × Y / C (8 bits each) × 30) is required. .

  Here, even if the camera video data can be compressed to 1/40 and the camera video can be transmitted at a transmission speed of about 4 Mbps, the transmission speed of a bus such as CAN is at most about 1 Mbps. As a result, it is impossible to transmit camera images without degrading the quality. There is also a bus with a transmission speed higher than that of the bus (for example, FlexRay (registered trademark), MOST (registered trademark), and IDB-1394), but other function safety processing data and other application processing data etc. It is conceivable that transmission can not be performed.

  Moreover, in order to further enhance functional safety, the number of in-vehicle cameras per vehicle tends to increase. Furthermore, it is also assumed that transmission at Gbps level will be required if the resolution is increased to perform mobile recognition in real time.

  For example, when transmitting a color camera image having 1920 dots × 1080 dots and a frame rate of 60 fps so that the resolution is 2.5 times VGA (640 dots × 480 dots), about 3 Gbps (= 1920) A transmission speed of × 1080 × RGB (each 8 bits) × 60 is required.

  Note that the minimum moving distance m (horizontal resolution) that can be measured when the moving object moves horizontally at a distance b by a camera with H horizontal pixels and a horizontal angle of view of θ is m = It can be expressed as (b × tan θ) / (H / 2). As the specifications of the on-vehicle camera, it is assumed that the number of pixels is 1920 × 1080, the horizontal angle of view 60 °, and no distortion of the lens. In the above example, since H = 1080 and θ = 60 °, the minimum movement distance m (resolution in the horizontal direction) in the case of b = 100 is 0.109 m (= (100 × tan 60 °) / 540) Become. This value means that the resolution of the above example corresponds to 2.5 times the resolution of VGA (pixel: 640 dots × 480 dots).

  In response to the above-mentioned problems, the upper layer monitoring unit 16 according to the second example of the second embodiment receives functional safety data, that is, camera image data whose data is not substantially reduced, Perform predetermined data processing. Thus, the upper monitoring unit 16 can use a camera image with a large amount of information, so that detection and recognition can be performed accurately.

Third Example
In the third example, the functional safety sensor device 31 of FIG. 3 is an acceleration sensor of the host vehicle, and the functional safety data is data of an acceleration detected by the acceleration sensor. The acceleration sensor outputs an acceleration value at a set resolution and data rate by converting a voltage indicating the acceleration.

  Now, in the conventional data transmission processing device, the data processing unit compares the acceleration detected by the acceleration sensor with a preset threshold, and only when the acceleration exceeds the threshold, the I / F to acceleration is It is configured to output data to a general purpose bus. Then, the monitoring unit (not shown) connected to the general-purpose bus can determine the abnormality of the own vehicle (the on-vehicle equipment of the own vehicle) even from such partially reduced acceleration data. It has become. However, from the data of the partially reduced acceleration, whether the cause of the increase in acceleration is due to the sudden operation of the vehicle's brakes or steering wheel (missing of the vehicle) or the condition of the road surface It is not possible to identify whether it is due to the slope of the road surface or due to a collision of the own vehicle, and it is also possible to identify the type of collision (a collision, a side collision, etc.) Can not.

  On the other hand, the upper layer monitoring unit 16 according to the third example of the second embodiment receives the functional safety data, that is, the data of acceleration of three axes whose data is not substantially reduced, and is determined in advance. Perform data processing. As a result, the upper layer monitoring unit 16 can identify the cause of the increase in acceleration and the like based on the data of the acceleration received continuously.

  FIG. 6 is a flowchart showing the operation of the data transmission processing device 1 (upper level monitoring unit 16) according to the second embodiment. Here, the first example described above, that is, the operation when the functional safety data is raw data of the vehicle speed pulse will be described.

  In step S1, the upper level monitoring unit 16 receives functional safety data (raw data of vehicle speed pulses) from the functional safety sensor device 31 via the dedicated bus 12.

  In step S2, the upper level monitoring unit 16 performs analysis to determine whether or not there is an abnormality in the host vehicle based on the interval of the peaks of the vehicle speed pulse indicated by the received raw data.

  If it is determined in step S3 that the determination result in step S2 is "no abnormality", the process proceeds to step S4, and if it is "an abnormality", the process proceeds to step S7.

  In step S4, the upper level monitoring unit 16 determines whether or not there is an abnormality in the host vehicle based on the disturbance of the waveform of the vehicle speed pulse (the disturbance different from the disturbance of the peak interval) indicated by the raw data described above. Perform analysis. That is, analysis is performed to determine whether or not the state is about to become abnormal.

  If it is determined in step S5 that the determination result in step S4 is "no abnormality", the process proceeds to step S6. If the determination result is "abnormal", the process proceeds to step S7.

  In step S6, the upper layer monitoring unit 16 performs the above-described normal process. Thereafter, the operation of FIG. 6 is ended.

  In step S7, the upper layer monitoring unit 16 performs the above-described abnormality processing. Thereafter, the operation of FIG. 6 is ended.

<Summary of Embodiment 2>
According to the second embodiment, the upper level monitoring unit 16 receives the functional safety data from the functional safety sensor device 31 via the dedicated bus 12 and performs data processing, so that the analysis regarding the functional safety of the own vehicle and The determination can be made accurately.

  In the second embodiment, the functional safety data used by the higher-level monitoring unit 16 in the determination may be the latest functional safety data, or may be the past functional safety data stored. Or both. In the third and subsequent embodiments described below, the upper layer monitoring unit 16 may use data other than the functional safety data. Similar to the functional safety data, this data may be the latest data, the accumulated past data, or both of them.

Embodiment 3
FIG. 7 is a block diagram showing a configuration of a data transmission processing apparatus according to Embodiment 3 of the present invention. Hereinafter, in the data transmission processing apparatus 1 according to the third embodiment, the same or similar components as or to those of the second embodiment are given the same reference numerals, and different components will be mainly described.

  In the third embodiment, the data processing unit 33 of the functional safety sensor device 31 performs part of the data processing performed by the upper monitoring unit 16. As an example, in the following, the data processing unit 33 performs an analysis to determine whether there is an abnormality in the own vehicle based on the functional safety data detected by the functional safety sensor 32, and the functional safety including the analysis result It will be described as generating processing data for processing.

  Further, in the third embodiment, the I / F 35 is connected to the data processing unit 33. Therefore, in addition to the functional safety data, the I / F 35 and thus the functional safety sensor device 31 can also output the functional safety process data generated by the data processing unit 33 to the dedicated bus 12.

  Furthermore, in the third embodiment, in addition to receiving functional safety data from the functional safety sensor device 31 via the dedicated bus 12, the upper level monitoring unit 16 also receives functional safety processing data, and is determined in advance. Perform data processing. In the third embodiment, the data processing performed by the upper level monitoring unit 16 includes performing normal processing or abnormal processing based on the functional safety processing data (analysis result of the data processing unit 33).

  FIG. 8 is a flowchart showing the operation of the data transmission processing device 1 (upper level monitoring unit 16) according to the third embodiment. Here, as in FIG. 6 described in the second embodiment, an operation in the case where the functional safety data is raw data of a vehicle speed pulse will be described.

  As a premise, it is assumed that the analysis of steps S1 and S4 of FIG. 6 described in the second embodiment has already been performed in the data processing unit 33 of the functional safety sensor device 31.

  In step S11 of FIG. 8, the upper level monitoring unit 16 receives functional safety data (raw data of vehicle speed pulse) and functional safety processing data (step S1 of FIG. 6) from the functional safety sensor device 31 via the dedicated bus 12. And data including the analysis result of S4.

  In step S12, if the analysis result (decision result) included in the received functional safety process data is "no abnormality", the process proceeds to step S13, and if "an abnormality", the process proceeds to step S14. move on.

  In step S13, the upper monitoring unit 16 performs normal processing. Thereafter, the operation of FIG. 8 is ended.

  In step S14, the upper layer monitoring unit 16 performs an abnormality processing. Thereafter, the operation of FIG. 8 is ended.

<Summary of Embodiment 3>
According to the third embodiment, the upper layer monitoring unit 16 also receives function safety process data from the function safety sensor device 31 via the dedicated bus 12 and performs data processing. As a result, the upper layer monitoring unit 16 can use the result of the data processing by the functional safety sensor device 31, so that the processing load on the upper layer monitoring unit 16 can be reduced.

Fourth Preferred Embodiment
The block diagram showing the configuration of the data transmission processing apparatus according to the fourth embodiment of the present invention is the same as that of the second embodiment, so the illustration thereof is omitted, and the components different from those of the second embodiment are mainly described. Do.

  In the fourth embodiment, the data processing performed by the upper data processing unit determines an abnormality of a specific type of functional safety data among a plurality of types of functional safety data based on a plurality of types of functional safety data. Includes processing

  FIG. 9 is a diagram showing the determination result of the conventional data transmission processing apparatus, and FIG. 10 is a diagram showing the determination result of the upper monitoring unit 16 provided in the data transmission processing apparatus 1 according to the fourth embodiment. Here, a in A means that the ABS (Antilock Brake System) function is in a normal state, and a 'in A means that the ABS function is in an abnormal state. The b in B means that the indicator display function is in a normal state, and the b 'in B means that the indicator display function is in an abnormal state. OK means that the ABS function is finally determined to be in the normal state, and NG means that the ABS function is finally determined to be in the abnormal state.

  The conventional data transmission processing apparatus is configured to finally determine the state of the ABS function in conjunction with the state of the indicator display function indicating the state of the ABS function in order to reduce the information amount of data to be transmitted. It is done. That is, in the conventional data transmission processing apparatus, the state of the ABS function is finally determined based on only the state of the indicator display function.

  On the other hand, the high-level monitoring unit 16 according to the fourth embodiment relates to the abnormality of the functional safety data relating to the ABS function, a plurality of types of functional safety data (functional safety data relating to the ABS function, and the indicator function). It is comprised so that it may determine based on (function safety data). That is, the upper level monitoring unit 16 is configured to finally determine the state of the ABS function by comprehensively considering the state of the indicator display function and the state of the ABS function.

  Here, when the indicator display function is in an abnormal state (b 'in FIG. 9 and b' in FIG. 10), the operation of the conventional data transmission processing apparatus and the data transmission processing apparatus according to the fourth embodiment Compare with operation 1

  In the conventional data transmission processing apparatus, even when the ABS function is in the normal state (a in FIG. 9), the ABS function is finally abnormal in conjunction with the abnormal state (b 'in FIG. 9) of the indicator display function. If it is determined that there is an error (NG in (a, b ′) of FIG. 9), the ABS function is stopped.

  On the other hand, in the upper layer monitoring unit 16 according to the fourth embodiment, even if the indicator display function is in the abnormal state (b 'in FIG. 10), if the ABS function is in the normal state (a in FIG. 10). Finally, it is determined that the ABS function is normal (OK in (a, b ′) of FIG. 10). In this case, as shown in FIG. 11, the upper layer monitoring unit 16 causes the liquid crystal display (not shown) to display that the indicator display function has failed, and maintains the ABS function. According to the fourth embodiment configured as described above, various functions of the host vehicle (vehicle-mounted device) can be appropriately controlled.

  In the above description, it is determined whether or not the ABS function (data for functional safety related to the ABS function) is abnormal, but the present invention is not limited to this, and another function (functional safety data for another function) It may be determined whether or not there is an abnormality.

  Also, plural types of functional safety data may be divided into several groups, and abnormality determination of functional safety data related to the ABS function may be performed based on the functional safety data of each group. Then, the number of groups determined to be normal and the number of groups determined to be abnormal are compared, and the state (normal or abnormal) of the large number of groups is adopted as the final determination result of the ABS function. May be

  Alternatively, in the same manner as described above, after performing the process of determining abnormality of the functional safety data related to the ABS function based on the functional safety data of each group, the score (weighting) corresponding to the functional safety data of each group May be added as the score of the normal state or the abnormal state. For example, if the result of abnormality determination of functional safety data related to the ABS function based on the functional safety data of a certain group is “normal”, the score corresponding to the functional safety data of the group is Add to the normal condition score. The same determination and addition as above are performed for the other groups and thereafter, the score of the normal state is compared with the score of the abnormal state, and the state with many scores (normal or abnormal) is finally determined as the ABS function It may be adopted as a result.

  Alternatively, in the same manner as described above, after the process of performing abnormality determination of functional safety data related to the ABS function based on the functional safety data of each group, if the determination result of each group is the same, the on-vehicle device All functions in the group are collectively determined to be normal or abnormal, and when the determination result of each group is different, either the ABS function or another function other than that based on the number of groups or the score described above It may be determined that one is abnormal. The operation of this determination will be described next using a flowchart.

  FIG. 12 is a flow chart showing an example of the operation of the data transmission processing device 1 (upper level monitoring unit 16) according to the fourth embodiment.

  In step S <b> 21, the upper level monitoring unit 16 receives a plurality of types of functional safety data from the functional safety sensor device 31 via the dedicated bus 12. The upper layer monitoring unit 16 may receive multiple types of functional safety data from one functional safety sensor device 31 capable of detecting and transmitting multiple types of functional safety data. Alternatively, the upper layer monitoring unit 16 may receive multiple types of functional safety data from multiple functional safety sensor devices 31 capable of detecting and transmitting each type of functional safety data.

  In step S22, the upper level monitoring unit 16 determines whether or not the specific type of functional safety data is abnormal based on the functional safety data of each group. Then, the upper layer monitoring unit 16 takes an exclusive OR on the determination results of each group, and determines whether the determination results of all the groups are the same. If it is determined that all the determination results are the same, the process proceeds to step S23. If not, the process proceeds to step S26.

  In step S23, the upper layer monitoring unit 16 determines whether or not there is an abnormality in the functional safety sensor 32 that has detected the functional safety data based on the functional safety data of any one group. If it is determined that "there is no abnormality", the process proceeds to step S24, and if it is determined that it is "abnormal", the process proceeds to step S25.

  In step S24, the upper layer monitoring unit 16 determines that all the functions of the in-vehicle device are normal, and performs normal processing. Thereafter, the operation of FIG. 12 is ended.

  In step S25, the upper layer monitoring unit 16 determines that all functions of the in-vehicle apparatus are abnormal, and performs processing to stop all functions of the in-vehicle apparatus. Thereafter, the operation of FIG. 12 is ended.

  When the process proceeds from step S22 to step S26, the upper monitoring unit 16 determines that either one of the functional safety data of the specific type and the functional safety data other than that is abnormal based on the number of groups or the score described above. Determine that there is. Then, the upper layer monitoring unit 16 performs degeneration to stop one of the functions determined to be abnormal. Thereafter, the operation of FIG. 12 is ended.

<Summary of Embodiment 4>
According to the fourth embodiment, an abnormality of a specific type of functional safety data among a plurality of types of functional safety data is determined based on a plurality of types of functional safety data. Thus, various functions of the host vehicle (vehicle-mounted device) can be appropriately controlled.

The Fifth Preferred Embodiment
FIG. 13 is a block diagram showing the configuration of a data transmission processing apparatus according to the fifth embodiment of the present invention, and FIG. 14 is a diagram showing the flow of data in the data transmission processing apparatus. Hereinafter, in the data transmission processing apparatus 1 according to the fifth embodiment, the same or similar components as or to those of the second embodiment are denoted by the same reference numerals, and different components will be mainly described.

  In the fifth embodiment, the other sensor device 21 (I / F 24) is connected to the dedicated bus 12 in addition to the general-purpose bus 11. That is, the dedicated bus 12 is connected to the other sensor devices 21 in addition to the functional safety sensor device 31. Then, the other sensor device 21 (I / F 24) can output the data for another-purpose processing generated by the data processing unit 23 to the general-purpose bus 11 and the dedicated bus 12.

  As shown in FIG. 14, the upper level monitoring unit 16 receives functional safety data from the functional safety sensor device 31 (corresponding to the sensor and data processing unit on the lower side in FIG. 14) via the dedicated bus 12. Other-purpose processing data is received from the other sensor device 21 (corresponding to the sensor and data processing unit in the upper side of FIG. 14) via the dedicated bus 12, and predetermined data processing is performed. In the fifth embodiment, the data processing performed by the higher-level monitoring unit 16 is performed based on the functional safety data received from the functional safety sensor device 31 and the separate application processing data received from the other sensor device 21. It includes a process of determining whether or not there is an abnormality in the vehicle. When the host monitoring unit 16 determines that the host vehicle is not abnormal, the host monitoring unit 16 performs normal processing. When the host monitoring unit 16 determines that the host vehicle is abnormal, the host monitoring unit 16 performs an abnormal processing.

  Here, on the premise that the functional safety data is acceleration data, it is assumed that the upper monitoring unit 16 uses the speed. In this case, the upper level monitoring unit 16 can calculate the velocity by integrating the acceleration indicated by the data of the acceleration, but the calculated velocity is easily affected by the initial value and the error of the data. For this reason, the upper monitoring unit 16 may not be able to use an accurate speed even when receiving only acceleration data, that is, data for functional safety. On the other hand, in the fifth embodiment, if the other-purpose processing data includes data of the speed of the host vehicle, the upper level monitoring unit 16 can use an accurate speed.

  Next, on the premise that the functional safety data is acceleration data, it is assumed that the upper monitoring unit 16 detects a near incident of the vehicle. In this case, the upper level monitoring unit 16 can detect a near incident of the host vehicle to a certain extent based on the magnitude of the acceleration indicated by the data of the acceleration. However, even if the data of the acceleration when the host vehicle is located at the intersection and the data of the acceleration when the host vehicle is located on the expressway, in fact, near-miss occurs in one of the cases, In the other case, there may be no occurrence of hiyari-hat. For this reason, the higher-level monitoring unit 16 may not be able to accurately detect a near incident even when receiving only acceleration data, that is, data for functional safety.

  On the other hand, if the separate application processing data is configured to include the data of the position of the own vehicle in the fifth embodiment, the upper layer monitoring unit 16 determines whether the own vehicle is located at an intersection or an expressway. As it can be taken into consideration, it is possible to accurately detect a near incident. Further, if the other-purpose processing data is configured to include brake depression information in addition to the position data of the host vehicle, the higher-level monitoring unit 16 can determine the operation intended by the driver, It is possible to improve the detection accuracy of near miss.

  FIG. 15 is a flowchart showing the operation of the data transmission processing device 1 (upper level monitoring unit 16) according to the fifth embodiment. Here, the operation when the functional safety data is acceleration data will be described.

  In step S31, the upper layer monitoring unit 16 receives functional safety data from the functional safety sensor device 31 via the dedicated bus 12, and receives other-purpose processing data from the other sensor devices 21 via the dedicated bus 12 Do.

  In step S32, the upper monitoring unit 16 determines whether or not there is an abnormality in the own vehicle based on the functional safety data received from the functional safety sensor device 31 and the different application processing data received from the other sensor device 21. Perform analysis to determine

  If it is determined in step S33 that the determination result in step S32 is "no abnormality", the process proceeds to step S34, and if it is "abnormal", the process proceeds to step S35.

  In step S34, the upper layer monitoring unit 16 performs normal processing. Thereafter, the operation of FIG. 15 is ended.

  In step S35, the upper layer monitoring unit 16 performs an abnormality processing (for example, including the execution of the brake assist). Thereafter, the operation of FIG. 15 is ended.

<Summary of Embodiment 5>
According to the fifth embodiment, the upper level monitoring unit 16 receives the functional safety data from the functional safety sensor device 31 and receives the separate application processing data from the other sensor device 21 to perform data processing. As a result, the upper level monitoring unit 16 can accurately perform analysis and determination regarding the functional safety of the host vehicle.

<Modification>
FIG. 16 is a block diagram showing a configuration of a data transmission processing device according to the present modification. Hereinafter, in the data transmission processing device 1 according to the present modification, the same or similar components as or to those of the second embodiment are given the same reference numerals, and different components will be mainly described.

  In the fifth embodiment described above, the other sensor device 21 (I / F 24) is connected to the dedicated bus 12 in addition to the general-purpose bus 11. On the other hand, in the present modification, the upper level monitoring unit 16 is connected to the dedicated bus 12 in addition to the general-purpose bus 11. That is, the general-purpose bus 11 is connected to the upper monitoring unit 16 in addition to the other sensor devices 21. The upper layer monitoring unit 16 receives functional safety data from the functional safety sensor device 31 via the dedicated bus 12, and receives other-use processing data from the other sensor devices 21 via the general-purpose bus 11, Perform predetermined data processing. The other configuration of the upper layer monitoring unit 16 is the same as that of the fifth embodiment.

  According to the present modification, as in the fifth embodiment, the upper layer monitoring unit 16 receives the functional safety data from the functional safety sensor device 31, and the other-purpose processing data from the other sensor devices 21. Receive and process data. As a result, the upper level monitoring unit 16 can accurately perform analysis and determination regarding the functional safety of the host vehicle.

  The configuration described in the sixth and subsequent embodiments is a modification of the configuration of the fifth embodiment, but the same modification may be made to the configuration according to the present modification.

Embodiment 6
FIG. 17 is a block diagram showing a configuration of a data transmission processing apparatus according to Embodiment 6 of the present invention. Hereinafter, in the data transmission processing apparatus 1 according to the sixth embodiment, the same or similar components as or to those of the fifth embodiment are given the same reference numerals, and different components will be mainly described.

  In the sixth embodiment, the upper layer monitoring unit 16 is configured to make a request to output functional safety data to the functional safety sensor device 31 and a request to output other application processing data to the other sensor device 21. ing. This request may be made automatically at any time or periodically, or may be made in response to an operation from the user.

  FIG. 18 is a flowchart showing the operation of the data transmission processing device 1 according to the sixth embodiment.

  In step S 41, the upper layer monitoring unit 16 makes a request to output functional safety data to the functional safety sensor device 31 and a request to output another application processing data to the other sensor device 21.

  In step S42, when receiving the request for outputting the functional safety data, the functional safety sensor device 31 outputs the functional safety data to the upper monitoring unit 16. Similarly, when the other sensor device 21 receives the request to output the separate application processing data, the other sensor device 21 outputs the separate application processing data to the upper monitoring unit 16.

  In step S 43, the upper level monitoring unit 16 receives the functional safety data from the functional safety sensor device 31, and receives another-purpose processing data from the other sensor device 21.

  In step S44, the upper monitoring unit 16 determines whether or not there is an abnormality in the host vehicle based on the functional safety data received from the functional safety sensor device 31 and the different application processing data received from the other sensor device 21. Perform analysis to determine

  If it is determined in step S45 that the determination result in step S44 is "no abnormality", the process proceeds to step S46. If it is "abnormal", the process proceeds to step S47.

  In step S46, the upper layer monitoring unit 16 performs normal processing. Thereafter, the operation of FIG. 18 is ended.

  In step S47, the upper layer monitoring unit 16 performs an abnormality processing. Thereafter, the operation of FIG. 18 is ended.

<Summary of Embodiment 6>
In the conventional data transmission processing apparatus, the sensor device is configured to output data to the bus without controlling the output timing. For this reason, a time difference may occur between the timing at which the monitoring unit (not shown) uses the data and the output timing, and the monitoring unit could not use the data of the sensor device in real time. . In addition, a time difference may occur between the timing at which the user (person who can perform fault diagnosis) checks the data and the output timing, and the user could not check the data of the sensor device in real time. . Furthermore, since the output timing of each sensor device varies, it was not possible to confirm the output data of each sensor device at the same time.

  On the other hand, in the sixth embodiment, the upper layer monitoring unit 16 performs a request to output functional safety data to the functional safety sensor device 31 and a request to output other application processing data to another sensor device 21. . As a result, the upper monitoring unit 16 can use data in real time, and the user can check data in real time. In addition, it becomes possible to check the output data (data for functional safety, processing data for another application) of each sensor device (sensor device 31 for functional safety, other sensor device 21) at the same time. Furthermore, since the upper level monitoring unit 16 can output output data from each sensor device as needed, output data can be suppressed from being output from each sensor device more than necessary. As a result, it is possible to suppress the amount of information transmitted by the dedicated bus 12 or the like, to suppress the processing amount of the upper monitoring unit 16, and to shorten the determination time of the upper monitoring unit 16.

Seventh Embodiment
FIG. 19 is a block diagram showing a configuration of a data transmission processing apparatus according to Embodiment 7 of the present invention. Hereinafter, in the data transmission processing device 1 according to the seventh embodiment, the same or similar components as or to those of the fifth embodiment are given the same reference numerals, and different components will be mainly described.

  The data transmission processing device 1 according to the seventh embodiment includes a server 18 provided outside the host vehicle in addition to the components of the fifth embodiment. As described above, the concept of the data transmission processing device 1 according to the seventh embodiment includes the data broadcasting system.

  The host monitoring unit 16 transmits the functional safety data received from the functional safety sensor device 31 to the outside of the host vehicle.

  The server 18 receives the functional safety data transmitted by the upper level monitoring unit 16 of the host vehicle. Communication between the upper monitoring unit 16 and the server 18 may be of any type, for example, wireless communication or wired communication such as PLC (Power Line Communication). It is also good.

  Hereinafter, the upper level monitoring unit 16 transmits the other-purpose processing data received from the other sensor device 21 to the outside of the own vehicle as well as the functional safety data, and the server 18 transmits the higher order monitoring unit 16 of the own vehicle Although described as receiving other-purpose processed data, this is not essential.

  FIG. 20 is a flowchart showing the operation of the data transmission processing apparatus 1 according to the seventh embodiment.

  In step S51, the upper layer monitoring unit 16 performs a request to output functional safety data to the functional safety sensor device 31 and a request to output another application processing data to the other sensor device 21. When the upper monitoring unit 16 receives a request to transmit data from the server 18, the upper monitoring unit 16 may make these requests.

  In step S52, when the functional safety sensor device 31 receives the request to output functional safety data, the functional safety sensor device 31 outputs functional safety data to the upper monitoring unit 16. Similarly, when the other sensor device 21 receives the request to output the separate application processing data, the other sensor device 21 outputs the separate application processing data to the upper monitoring unit 16.

  In step S53, the upper level monitoring unit 16 receives the functional safety data from the functional safety sensor device 31 and receives the different-purpose processing data from the other sensor device 21.

  In step S54, the upper layer monitoring unit 16 transmits the received functional safety data and the separate application processing data to the outside.

  In step S55, the server 18 receives the functional safety data and the separate application processing data transmitted by the upper monitoring unit 16. Thereafter, the operation of FIG. 20 is ended.

  In the above description, when the upper monitoring unit 16 receives a request to transmit data from the server 18, the upper monitoring unit 16 transmits both the functional safety data and the separate application processing data. However, the present invention is not limited to this, and the upper monitoring unit 16 may be configured to transmit, to the server 18, data selected by the server 18 out of the functional safety data and the separate application processing data.

<Summary of Embodiment 7>
In the conventional data transmission processing apparatus, in order for a user (person who can perform failure diagnosis) to confirm data of the sensor device, the failure diagnosis device (tool) is connected to the failure diagnosis port of the sensor device to confirm the log. I needed it. For this reason, the user had to perform confirmation work near the vehicle.

  On the other hand, in the seventh embodiment, the upper level monitoring unit 16 transmits the functional safety data received from the functional safety sensor device 31 to the outside of the host vehicle. Thus, even if the user is not near the host vehicle, the user can check the functional safety data by accessing the server 18 or the like that manages the functional safety data transmitted by the upper level monitoring unit 16.

Embodiment 8
FIG. 21 is a block diagram showing a configuration of a data transmission processing apparatus according to Embodiment 8 of the present invention. Hereinafter, in the data transmission processing apparatus 1 according to the eighth embodiment, the same or similar components as or to those of the seventh embodiment are given the same reference numerals, and different components will be mainly described.

  In the eighth embodiment, the server 18 determines whether or not there is an abnormality in the host vehicle based on the data for functional safety of the host vehicle. When the server 18 determines that the host vehicle is not abnormal, the server 18 causes the host vehicle to perform normal processing, and when the server 18 determines that the host vehicle has abnormality, the host vehicle performs abnormal processing. That is, the server 18 according to the eighth embodiment performs the determination of the abnormality of the host vehicle performed by the higher-level monitoring unit 16 in the second embodiment and the like, and the execution control of the abnormality processing.

  FIG. 22 is a flowchart showing the operation of the data transmission processing apparatus 1 according to the eighth embodiment. Note that steps S51 to S55 in FIG. 22 are the same as steps S51 to S55 in FIG.

  After step S55, in step S61, the server 18 performs an analysis to determine whether or not there is an abnormality in the host vehicle based on the functional safety data received from the functional safety sensor device 31. In addition, when another purpose processing data is also received from the upper monitoring unit 16, the server 18 analyzes to determine whether or not the own vehicle has an abnormality based on the function safety data and the other purpose processing data. You may

  If it is determined in step S62 that the determination result in step S61 is "no abnormality", the process proceeds to step S63. If the determination result is "abnormal", the process proceeds to step S64.

  In step S63, the server 18 transmits to the upper monitoring unit 16 that the normal process is to be performed, and the upper monitoring unit 16 having received the notification performs the normal process. Thereafter, the operation of FIG. 22 is ended.

  In step S64, the server 18 transmits, to the upper-level monitoring unit 16, an indication that the abnormal-time process is to be performed, and the upper-level monitoring unit 16 that has received that effect performs the abnormal-time process. Thereafter, the operation of FIG. 22 is ended.

Summary of Eighth Embodiment
According to the eighth embodiment, the server 18 determines whether or not there is an abnormality in the host vehicle based on the data for functional safety of the host vehicle. As a result, the processing load on the upper monitoring unit 16 can be reduced.

  Further, according to the eighth embodiment, when it is determined that the own vehicle has an abnormality, the server 18 causes the own vehicle to perform an abnormality processing. In this way, it is possible to cause the host vehicle to perform abnormal processing by remote control.

<Embodiment 9>
FIG. 23 is a block diagram showing a part of the configuration of a data transmission processing apparatus according to a ninth embodiment of the present invention. Hereinafter, in the data transmission processing apparatus 1 according to the ninth embodiment, the same or similar components as or to those of the seventh embodiment are given the same reference numerals, and different components will be mainly described.

  The server 18 according to the ninth embodiment is provided outside the plurality of vehicles. Each of the plurality of vehicles corresponds to the own vehicle. That is, the upper level monitoring unit 16 and the like are mounted on each of the plurality of vehicles.

  The server 18 receives the functional safety data transmitted by the upper level monitoring unit 16 of the plurality of vehicles, and determines whether or not there is an abnormality in the plurality of vehicles based on the functional safety data of the plurality of vehicles. When the server 18 determines that there is no abnormality in the plurality of vehicles, the server 18 causes the plurality of vehicles to perform normal processing, and when it is determined that any of the plurality of vehicles has abnormality, the abnormality processing is performed. , Have the vehicle determined to have an abnormality.

  FIG. 24 is a flowchart showing the operation of the data transmission processing device 1 according to the ninth embodiment. In steps S71 to S75 in FIG. 24, the same processes as steps S51 to S55 in FIG. 20 are only performed on a plurality of vehicles instead of the host vehicle, and therefore the description thereof is omitted.

  After step S75, in step S76, the server 18 determines whether or not there is an abnormality in any of the plurality of vehicles based on the functional safety data received from the functional safety sensor devices 31 of the plurality of vehicles. Perform the analysis. In addition, when another purpose processing data is also received from the upper level monitoring unit 16 of a plurality of vehicles, the server 18 determines whether the plurality of vehicles have an abnormality based on the functional safety data and the other purpose processing data. An analysis may be performed to determine whether the

  If it is determined in step S77 that the determination result in step S76 is "no abnormality", the process proceeds to step S78, and if it is "abnormal", the process proceeds to step S79.

  In step S78, the server 18 transmits the effect of performing the normal process to the upper level monitoring units 16 of the plurality of vehicles, and the upper level monitoring units 16 of the plurality of vehicles that have received the notification perform the normal time process. Thereafter, the operation of FIG. 24 is ended.

  In step S79, the server 18 transmits, to the upper-level monitoring unit 16 of the vehicle determined to have an abnormality, the effect that the abnormal-time process is to be performed, and the upper-level monitoring unit 16 having received that effect performs the abnormal time process. The server 18 transmits to the upper level monitoring unit 16 of the vehicle that has not been determined to be abnormal as in step S78 that the normal state process is to be performed, and the upper level monitoring unit 16 that has received that effect is normal. Perform time processing. Thereafter, the operation of FIG. 24 is ended.

<Summary of Embodiment 9>
According to the ninth embodiment, the server 18 determines whether or not there is an abnormality in a plurality of vehicles based on the functional safety data of the plurality of vehicles. As a result, the processing load on the upper monitoring unit 16 can be reduced. In addition, when an abnormality occurs in the host vehicle, similar survey analysis can be performed to check whether similar abnormality occurs in other vehicles. By conducting such survey analysis, it becomes possible to grasp the sensor to be surveyed.

  Furthermore, according to the ninth embodiment, when it is determined that the plurality of vehicles have an abnormality, the server 18 causes the vehicle determined to have the abnormality processing to perform the abnormality processing. As a result, it is possible to cause the vehicle determined to have an abnormality to perform abnormality processing by remote control.

  In the present invention, within the scope of the invention, each embodiment and each modification can be freely combined, or each embodiment and each modification can be suitably modified or omitted.

  Although the present invention has been described in detail, the above description is an exemplification in all aspects, and the present invention is not limited thereto. It is understood that countless variations not illustrated are conceivable without departing from the scope of the present invention.

  1 data transmission processing device, 11 general-purpose bus, 12 dedicated bus, 16 high-order monitoring units, 18 servers, 21 other sensor devices, 31 sensor devices for functional safety, 34, 35 I / F, 41 processors, 42 memories.

Claims (9)

A data transmission processor,
Equipped with sensor equipment installed in the vehicle,
The sensor device is
A first interface connectable to a first bus mounted on the vehicle;
And a second interface connectable to a second bus mounted on the vehicle and having a transmission speed higher than that of the first bus ,
The first interface is
The first data is generated based on first detection data which is detected for the vehicle and is data for functional safety capable of judging abnormality of the vehicle, and the first data having a smaller amount of information than the first detection data is said first data. It can be output to the bus,
The second interface is
A second data that is generated based on the first detection data, and is any one of data having a smaller amount of information than the first detection data and a larger amount of information than the first data, or the first detection data itself Data can be output to the second bus,
The second interface is
In addition to the second data, the first data can also be output to the second bus,
The data transmission processing device
The second bus mounted on the vehicle and connected to the second interface of the sensor device;
An upper data processing unit mounted on the vehicle and not connected to the first bus but connected to the second bus;
The upper data processing unit is
Receiving the second data from the sensor device via the second bus and performing predetermined data processing;
The data processing performed by the upper data processing unit is
Including processing for determining whether the vehicle has an abnormality based on the second data received from the sensor device,
If there is an abnormality in the vehicle by the upper data processing unit, have rows predetermined processing on the abnormal,
The first bus mounted on the vehicle and connected to the first interface of the sensor device;
Other sensor devices other than the sensor device mounted on the vehicle and connected to the first bus without being connected to the second bus
And further
The other sensor device is
The data transmission processing device which is generated based on the 2nd detection data detected about the vehicles, and outputs the 3rd data whose information content is smaller than the 2nd detection data concerned to the 1st bus . The data transmission processing device according to claim 1, wherein
The second interface of the sensor device is
In addition to the second data, the first data is also output to the second bus,
The upper data processing unit is
A data transmission processing device that receives the first data from the sensor device via the second bus and performs predetermined data processing. The data transmission processing device according to claim 1, wherein
The data processing performed by the upper data processing unit is
A data transmission processing device including a process of determining an abnormality of a specific type of second data among a plurality of types of second data based on the plurality of types of second data. The data transmission processing device according to claim 1, wherein
The upper data processing unit is
A data transmission processing device, which transmits the second data received from the sensor device to the outside of the vehicle. The data transmission processing device according to claim 4 , wherein
The vehicle further includes a server provided outside the vehicle and receiving the second data transmitted by the upper data processing unit of the vehicle.
The server is
A data transmission processing device that determines whether or not there is an abnormality in the vehicle based on the second data of the vehicle. The data transmission processing device according to claim 5 , wherein
A data transmission processing device that causes the vehicle to perform predetermined processing for the abnormality when it is determined by the server that the vehicle has an abnormality. The data transmission processing device according to claim 1, wherein
The data transmission processing device, wherein the data for functional safety includes video data. The data transmission processing device according to claim 1, wherein
The data transmission processing device according to claim 1, wherein the one second bus is directly connected to the second interface of the sensor device and is directly connected to the upper data processing unit. Connecting a first sensor device mounted on the vehicle and a second sensor device mounted on the vehicle to a first bus mounted on the vehicle;
The second sensor device is connected to the second bus mounted on the vehicle and having a transmission speed higher than that of the first bus without connecting the first sensor device ;
The first data generated on the basis of the first detection data which is detected for the vehicle and is data for functional safety capable of judging the abnormality of the vehicle, the first data having a smaller amount of information than the first detection data, 2 output from the sensor device to the first bus and the second bus,
A second data that is generated based on the first detection data, and is any one of data having a smaller amount of information than the first detection data and a larger amount of information than the first data, or the first detection data itself Outputting data from the second sensor device to the second bus,
Third data, which is generated based on second detection data detected for the vehicle and has a smaller amount of information than the second detection data, is output from the first sensor device to the first bus,
The upper data processing unit mounted on the vehicle and connected to the second bus without being connected to the first bus ,
Receiving the second data from the second sensor device via the second bus and performing predetermined data processing;
The data processing performed by the upper data processing unit is
Determining whether the vehicle has an abnormality based on the second data received from the second sensor device;
A data transmission processing method, wherein when the upper level data processing unit determines that the vehicle has an abnormality, a predetermined process is performed on the abnormality.

Images