Automotive control unit and automotive control system

Abstract

The present invention provides an automotive control unit and an automotive control system. An object of the present invention is to enhance the accuracy and the level of detail of an abnormality diagnosis by checking a transmitting-end application or controller for an abnormality by using abnormality diagnosis results concerning a plurality of communication messages. The automotive control unit has a plurality of applications for controlling a vehicle-mounted device and a common execution environment section for permitting the applications to exchange data with each other. The automotive control unit includes a communication protection section that, when the applications exchange data with the common execution environment section, checks the data for an abnormality, and a system abnormality check section that determines in accordance with an abnormality check result produced by the communication protection section whether the system is abnormal.

Description

technical field [0001] The present invention relates to a vehicle control device for controlling in-vehicle equipment. Background technique [0002] Conventionally, in an in-vehicle control device provided with a communication network, an abnormality determination is performed on a communication message received from the outside, and processing corresponding to the determination result is performed. For example, Patent Document 1 discloses a function of performing abnormality determination on all communication messages in the control logic unit of the communication processing unit represented by the communication control circuit, and stopping communication when there is an abnormality in the communication message. [0003] In addition, one of the software configurations of the in-vehicle control device includes: an application program that componentizes the calculation unit that realizes the independent function of controlling the in-vehicle device; and an application progra...

AI Technical Summary

Problems solved by technology

However, in the software structure having a general-purpose execution environment as described in Non-Patent Document 1, no special consideration is given to the protection of communication data between application programs.

Furthermore, even if the abnormality determination of each communication message as described in Patent Document 1 is simply distributed and deployed in each application program on the general execution environment, the system-by-control device-by-control system using the results of abnormality determination for a plurality of communication messages Abnormal judgment cannot be performed

[0013] In addition, even if the abnormal judgment of each communication message is configured according to the application program, the processing of the abnormal judgment will affect the operation status of the application program, and the abnormal judgment of the sending source may sometimes be wrong

Images