KR101774961B1 - Apparatus and method for controlling can communition - Google Patents
Apparatus and method for controlling can communition Download PDFInfo
- Publication number
- KR101774961B1 KR101774961B1 KR1020150092168A KR20150092168A KR101774961B1 KR 101774961 B1 KR101774961 B1 KR 101774961B1 KR 1020150092168 A KR1020150092168 A KR 1020150092168A KR 20150092168 A KR20150092168 A KR 20150092168A KR 101774961 B1 KR101774961 B1 KR 101774961B1
- Authority
- KR
- South Korea
- Prior art keywords
- control unit
- communication
- safety
- canvas
- related control
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/40—Bus networks
- H04L12/40169—Flexible bus arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/40—Bus networks
- H04L2012/40208—Bus networks characterized by the use of a particular bus standard
- H04L2012/40215—Controller Area Network CAN
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/40—Bus networks
- H04L2012/40267—Bus for use in transportation systems
- H04L2012/40273—Bus for use in transportation systems the transportation system being a vehicle
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Small-Scale Networks (AREA)
Abstract
The present invention discloses an apparatus and method for can communication control. Can communication control apparatus includes at least one control unit that communicates using can communication, a classification unit that classifies the at least one control unit based on the functional safety relevance, and a canvas based on the classified result, and controls can communication of at least one control unit And a management unit.
Description
The present invention relates to an apparatus and method for can communication control, and more particularly, to an apparatus and method for controlling can communication based on functional safety relevance of in-vehicle control units.
The technology of the background of the present invention is described in the Published Patent Publication No. 10-2010-0033722 (Mar. 31, 2010) and the Published Japanese Patent Application No. 10-2011-0107724 (Oct. 04, 2011).
In-vehicle control units (such as ECU, TCU, air conditioner controller, airbag controller, ABS controller, air conditioner controller, audio controller and multimedia controller) that are normally operated using CAN communication technology are connected via a CAN bus Can communication.
If the number of control units connected to the canvas increases, a large amount of information can be shared through the can communication, but the communication quality may be reduced.
Accordingly, some control units of the control units may separately include a monitoring unit to monitor the current state of the can communication.
However, as the number of control devices connected to the canvas increases, an unintended communication error occurs in the canvas, or the current state of the can communication can not be properly managed, thereby increasing the number of failures.
In other words, if the functional safety state between the control devices connected to the canvas at the time of can communication is not synchronized and uncorrelated, each of the control units can guarantee their defined state, but within the allowed time, Which can lead to serious danger situations in the vehicle.
SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an apparatus and method for controlling can communication based on functional safety relevance of in-vehicle control units.
In order to achieve the above object, according to a first aspect of the present invention, there is provided a can communication control apparatus comprising: a classifying unit for classifying at least one control unit communicating using can communication on the basis of a function safety relevance; And a management unit that controls can communication of the at least one control unit by assigning different canvases based on the classified result.
And the classifying unit classifies the safety related control unit and the non-safety related control unit according to a result of determining whether the function of the at least one control unit is related to safety.
The managing unit allocates a first canvas for can communication of the safety related control unit and allocates a second canvas for can communication of the non-safety related control unit; A monitoring unit monitoring can communication of each of the safety-related control unit and the non-safety-related control unit; And a control unit for shutting off the first canvas and the second canvas such that all can communication is not performed when a safety fault with high risk is detected as a result of the monitoring.
And the control unit interrupts the second canvas when the can communication of the non-safety-related control unit interferes with the can communication of the safety-related control unit.
According to a second aspect of the present invention, there is provided a can communication control method comprising the steps of: classifying at least one control unit communicating using can communication on the basis of a function safety relevance; And controlling the can communication of the at least one control unit by allocating different canvases based on the classified result.
Wherein said classifying comprises: determining whether the function of said at least one control unit is associated with safety; And classifying the safety related control unit and the non-safety related control unit according to the determined result.
Wherein the controlling step comprises: allocating a first canvas for can communication of the safety related control unit, and assigning a second canvas for can communication of the non-safety related control unit; Monitoring can communication of the safety related control unit and the non-safety related control unit; And blocking the first canvas and the second canvas such that all can communication is not performed when a high-safety fault occurs as a result of the monitoring.
The blocking step may further include blocking the second canvas when the can communication of the non-safety-related control unit interferes with the can communication of the safety-related control unit.
Accordingly, according to the present invention, the canvases are classified and allocated based on the result of classifying the in-vehicle control units on the basis of the functional safety relevance, and the can communication for the safety related function and the non-safety related function is separated through the separately allocated canvas It is possible to solve the CAN communication disturbance problem by the non-safety-related control unit, thereby protecting the CAN communication of the safety-related control unit.
In addition, according to the present invention, since canvases for safety-related functions are monitored to monitor high-risk safety faults, it is possible to quickly and accurately monitor high-risk safety faults rather than monitor safety faults by monitoring all conventional canvases. It is possible to contribute to the improvement of safety.
In addition, according to the present invention, since the control unit is integrally managed through the CAN communication message, all can communication can be collectively controlled from the viewpoint of function safety when a safety fault occurs.
1 is a diagram schematically showing a can communication environment equipped with a can communication control apparatus according to an embodiment of the present invention.
Fig. 2 is a block diagram showing a functional part of the can communication control device shown in Fig. 1. Fig.
3 is a block diagram showing an example of a can communication environment including a can communication control apparatus according to an embodiment of the present invention.
4 is a diagram showing another example of a block diagram showing a can communication environment including a can communication control apparatus according to an embodiment of the present invention.
5 is a flowchart illustrating an operation for controlling can communication based on the functional safety relevance according to the embodiment of the present invention.
It is noted that the technical terms used herein are used only to describe specific embodiments and are not intended to limit the invention. It is also to be understood that the technical terms used herein are to be interpreted in a sense generally understood by a person skilled in the art to which the present invention belongs, Should not be construed to mean, or be interpreted in an excessively reduced sense. Further, when a technical term used herein is an erroneous technical term that does not accurately express the spirit of the present invention, it should be understood that technical terms that can be understood by a person skilled in the art are replaced. In addition, the general terms used in the present invention should be interpreted according to a predefined or prior context, and should not be construed as being excessively reduced.
Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, wherein like reference numerals refer to like or similar elements throughout the several views, and redundant description thereof will be omitted. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.
1 is a diagram schematically showing a can communication environment equipped with a can communication control apparatus according to an embodiment of the present invention. Fig. 2 is a block diagram showing a functional part of the can communication control device shown in Fig. 1. Fig.
1, the can
At this time, the
1 and 2, the can
The classifying
Here, the function safety relevance may be a criterion for judging whether or not the function according to the operation of the
That is, the classifying
For example, when the function of the
On the other hand, when the functions of the control unit are related to convenience functions not related to the safety of the vehicle such as an air conditioner controller, an air bag controller, an air conditioner controller, an audio controller and a multimedia controller, And then classified into the
Then, the classifying
The
The assigning
That is, the assigning
Accordingly, the safety-
The assigning
The
More specifically, the
If it is confirmed that the can communication of the non-safety
Here, the disturbance generated by the can communication of the non-safety-
The
That is, if the notification message transmitted from the
Then, the
That is, the error notification packet is included in the CAN communication message and transmitted to the safety related
Accordingly, it is possible to manage the
If the notification message transmitted from the
Then, the
That is, the disturbance announcement packet is included in the can communication message and is transmitted to the non-safety related
Therefore, it is possible to reduce the probability of occurrence of CAN communication error of the safety-related
On the other hand, when the
Then, the
3 and 4, a block diagram illustrating a can communication environment including a can communication control apparatus according to an embodiment of the present invention will be described in more detail.
3 is a block diagram showing an example of a can communication environment including a can communication control apparatus according to an embodiment of the present invention. 4 is a diagram showing another example of a block diagram showing a can communication environment including a can communication control apparatus according to an embodiment of the present invention.
3, the classifying
The assigning
That is, the assigning
The first canvas allocated in the foregoing manner is connected to one end N1 of the
One end N1 of the CAN
Similarly, the other end N2 of the CAN
The assigning
The
That is, the
Accordingly, the
More specifically, if the notification message transmitted from the
Accordingly, the
Then, the
If the notification message transmitted from the
Accordingly, the
Then, the
As described above, the can communication control apparatus according to the embodiment of the present invention can be provided separately from the
In this case, the configuration and the function of the can communication control device mounted in the safety-related control unit are the same as those described above, so duplicate descriptions will be omitted.
Hereinafter, with reference to FIG. 5, an operation flow for controlling can communication based on the functional safety relevance performed in the can communication control apparatus according to the embodiment of the present invention will be described in detail. Hereinafter, for the sake of convenience of description, reference will be made to the reference numerals mentioned in FIGS. 1 to 4 described above.
5, the classifying
Here, the function safety relevance may be a criterion for judging whether or not the function according to the operation of the
That is, the classifying
Then, the
The managing
That is, the
Accordingly, the safety-related
Then, the
More specifically, the
As a result of the determination in step S130, if it is determined that a message transmitted / received through the first canvas during monitoring of the can communication state is related to a high-risk safety fault (e.g., a sudden bullet), the
Then, the
Then, the
That is, the error notification packet is included in the CAN communication message and transmitted to the safety related
Accordingly, it is possible to manage the
On the other hand, if it is determined in step S130 that no safety error has occurred, the
If it is determined in step S160 that the can communication of the safety-related
Then, the
Thereafter, the
That is, the disturbance announcement packet is included in the can communication message and is transmitted to the non-safety related
Therefore, it is possible to reduce the probability of occurrence of CAN communication error of the safety-related
As described above, according to the present invention, the canvases are classified and assigned based on the result of classifying the in-vehicle control units on the basis of the functional safety relevance, so that can communication for the safety related function and the non- It is possible to solve the CAN communication disturbance problem caused by the non-safety-related control unit, thereby protecting the CAN communication of the safety-related control unit.
In addition, according to the present invention, since canvases for safety-related functions are monitored to monitor high-risk safety faults, it is possible to quickly and accurately monitor high-risk safety faults rather than monitor safety faults by monitoring all conventional canvases. It is possible to contribute to the improvement of safety.
In addition, according to the present invention, since the control unit is integrally managed through the CAN communication message, all can communication can be collectively controlled from the viewpoint of function safety when a safety fault occurs.
As noted above, the functional operations and subject matter implementations described herein may be implemented in digital electronic circuitry, or may be implemented in computer software, firmware, or hardware, including the structures disclosed herein and structural equivalents thereof, And combinations of one or more of these. Implementations of the subject matter described herein may be implemented as one or more computer program products, i. E. One or more modules relating to computer program instructions encoded on a type of program storage medium for execution by, or control of, the operation of the processing system Can be implemented.
The computer-readable medium can be a machine-readable storage device, a machine-readable storage substrate, or a memory device.
As used herein, the term " system "or" device "encompasses any apparatus, apparatus, and machine for processing data, including, for example, a programmable processor, a computer or a multiprocessor or computer. The processing system may, in addition to the hardware, comprise code that forms an execution environment for a computer program upon request, such as, for example, code comprising a processor firmware, a protocol stack, a database management system, an operating system, .
A computer program (also known as a program, software, software application, script or code) may be written in any form of programming language, including compiled or interpreted language, a priori or procedural language, Components, subroutines, or other units suitable for use in a computer environment. A computer program does not necessarily correspond to a file in the file system. The program may be stored in a single file provided to the requested program, or in multiple interactive files (e.g., a file storing one or more modules, subprograms, or portions of code) (E.g., one or more scripts stored in a markup language document). A computer program may be deployed to run on multiple computers or on one computer, located on a single site or distributed across multiple sites and interconnected by a communications network.
On the other hand, computer readable media suitable for storing computer program instructions and data include semiconductor memory devices such as, for example, EPROM, EEPROM and flash memory devices, for example magnetic disks such as internal hard disks or external disks, Non-volatile memory, media and memory devices, including ROM and DVD-ROM disks. The processor and memory may be supplemented by, or incorporated in, special purpose logic circuits.
Implementations of the subject matter described herein may include, for example, a back-end component such as a data server, or may include a middleware component, such as an application server, or may be a web browser or a graphical user, for example a user, who may interact with an implementation of the subject- Front-end components such as client computers with interfaces, or any combination of one or more of such back-end, middleware, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication, such as, for example, a communications network.
While the specification contains a number of specific implementation details, it should be understood that they are not to be construed as limitations on the scope of any invention or claim, but rather on the description of features that may be specific to a particular embodiment of a particular invention Should be understood. Likewise, the specific features described herein in the context of separate embodiments may be implemented in combination in a single embodiment. Conversely, various features described in the context of a single embodiment may also be implemented in multiple embodiments, either individually or in any suitable subcombination. Further, although the features may operate in a particular combination and may be initially described as so claimed, one or more features from the claimed combination may in some cases be excluded from the combination, Or a variant of a subcombination.
It is also to be understood that although the present invention is described herein with particular sequence of operations in the drawings, it is to be understood that it is to be understood that it is to be understood that all such illustrated acts have to be performed or that such acts must be performed in their particular order or sequential order, Can not be done. In certain cases, multitasking and parallel processing may be advantageous. Also, the separation of the various system components of the above-described embodiments should not be understood as requiring such separation in all embodiments, and the described program components and systems will generally be integrated together into a single software product or packaged into multiple software products It should be understood that
As such, the present specification is not intended to limit the invention to the specific terminology presented. Thus, while the present invention has been described in detail with reference to the above examples, those skilled in the art will be able to make adaptations, modifications, and variations on these examples without departing from the scope of the present invention. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.
100: CAN communication control device 110:
120: Management unit 121: Assignment unit
122: monitoring unit 123:
200: control unit
Claims (9)
And a management unit that controls can communication of the at least one control unit by assigning different canvases based on the classified result,
The classifying section classifies the at least one control unit into a function safety related control unit and a non-function safety related control unit according to a result of determining whether or not the function of the at least one control unit is related to safety,
Wherein,
An assignment unit assigning a first canvas for can communication of the function safety related control unit and assigning a second canvas for can communication of the non-function safety related control unit;
A monitoring unit for monitoring can communication of each of the functional safety related control unit and the non-functional safety related control unit; And
And a control unit for blocking the first canvas and the second canvas such that all can communication is not performed when a safety error is generated as a result of the monitoring,
Wherein,
And cancels the second canvas when the can communication of the non-functional safety related control unit interferes with the can communication of the functional safety related control unit.
And controlling can communication of the at least one control unit by allocating different canvases based on the classified result,
Wherein said classifying comprises: determining whether the function of said at least one control unit is associated with safety; And classifying the functional safety related control unit and the non-functional safety related control unit according to the determined result,
Wherein the controlling comprises:
Assigning a first canvas for can communication of the functional safety related control unit and assigning a second canvas for can communication of the non-functional safety related control unit;
Monitoring can communication of the functional safety related control unit and the non-functional safety related control unit; And
And blocking the first canvas and the second canvas such that all can communication is not performed if a safety fault occurs as a result of the monitoring,
Wherein the blocking step comprises:
And disconnecting the second canvas when the can communication of the non-functional safety related control unit interferes with the can communication of the functional safety related control unit.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| KR1020150092168A KR101774961B1 (en) | 2015-06-29 | 2015-06-29 | Apparatus and method for controlling can communition |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| KR1020150092168A KR101774961B1 (en) | 2015-06-29 | 2015-06-29 | Apparatus and method for controlling can communition |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| KR20170002136A KR20170002136A (en) | 2017-01-06 |
| KR101774961B1 true KR101774961B1 (en) | 2017-09-05 |
Family
ID=57832236
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| KR1020150092168A KR101774961B1 (en) | 2015-06-29 | 2015-06-29 | Apparatus and method for controlling can communition |
Country Status (1)
| Country | Link |
|---|---|
| KR (1) | KR101774961B1 (en) |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP4319547B2 (en) * | 2001-12-11 | 2009-08-26 | コンティネンタル・テーベス・アクチエンゲゼルシヤフト・ウント・コンパニー・オッフェネ・ハンデルスゲゼルシヤフト | Multicore redundant control computer system, computer network for safety critical applications in automobiles and use thereof |
| JP2010098626A (en) * | 2008-10-20 | 2010-04-30 | Hitachi Automotive Systems Ltd | Routing method in in-vehicle gateway device |
| KR101403303B1 (en) * | 2012-06-05 | 2014-06-05 | 한국전자통신연구원 | CAN BUS separating apparatus and CAN communication security method using the same |
-
2015
- 2015-06-29 KR KR1020150092168A patent/KR101774961B1/en active IP Right Grant
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP4319547B2 (en) * | 2001-12-11 | 2009-08-26 | コンティネンタル・テーベス・アクチエンゲゼルシヤフト・ウント・コンパニー・オッフェネ・ハンデルスゲゼルシヤフト | Multicore redundant control computer system, computer network for safety critical applications in automobiles and use thereof |
| JP2010098626A (en) * | 2008-10-20 | 2010-04-30 | Hitachi Automotive Systems Ltd | Routing method in in-vehicle gateway device |
| KR101403303B1 (en) * | 2012-06-05 | 2014-06-05 | 한국전자통신연구원 | CAN BUS separating apparatus and CAN communication security method using the same |
Also Published As
| Publication number | Publication date |
|---|---|
| KR20170002136A (en) | 2017-01-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103116570B (en) | Dynamic restructuring distributed computing architecture and reconstructing method thereof | |
| US9843523B2 (en) | Communication management apparatus and communication management method for vehicle network | |
| EP3253028B1 (en) | Method for managing instance node and management device | |
| CN103580902B (en) | Computer information system and dynamic disaster recovery method thereof | |
| WO2021114794A1 (en) | Automatic driving control system, control method and device | |
| WO2015169199A1 (en) | Anomaly recovery method for virtual machine in distributed environment | |
| WO2018207551A1 (en) | Information processing device and anomaly response method | |
| US9734006B2 (en) | System and method for error detection in a critical system | |
| KR101912393B1 (en) | Network device and interrupt management method of the network device | |
| EP2680476B1 (en) | Communications apparatus, system and method with error mitigation | |
| CN110865900A (en) | Method for enhancing robustness of embedded system | |
| KR101774961B1 (en) | Apparatus and method for controlling can communition | |
| JP7392586B2 (en) | Log sending control device | |
| CN105515838A (en) | Service configuration method and HA (High Available) cluster system | |
| JP2009026182A (en) | Program execution system and execution device | |
| US20220055637A1 (en) | Electronic control unit and computer readable medium | |
| CN114348027B (en) | Vehicle control method, device, platform and storage medium | |
| US11947970B2 (en) | Information processing device, moving object, and information processing method | |
| JP5223512B2 (en) | Vehicle abnormality analysis system, vehicle abnormality analysis method, and vehicle failure analysis device | |
| JP2009110218A (en) | Virtualization switch and computer system using the same | |
| CN110321261B (en) | Monitoring system and monitoring method | |
| US20190243738A1 (en) | Fault Monitoring for a Complex Computing Unit | |
| JP6365320B2 (en) | Information processing system | |
| JP7426640B1 (en) | Monitoring device and method | |
| US9471251B2 (en) | Storage system, storage control apparatus, information processing apparatus, storage control program and storage control method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| AMND | Amendment | ||
| AMND | Amendment | ||
| E902 | Notification of reason for refusal | ||
| AMND | Amendment | ||
| X701 | Decision to grant (after re-examination) |