DE102018216812A1 - Electronic control unit - Google Patents

Abstract

An electronic control unit (2) comprises: a memory (2a, 2b) adapted to accumulate a program or data exchanged with an external device (9 to 11) or in a vehicle network (7); a write section (14b) adapted to write a program or data; a management data storage section (14c) configured to store storage management data indicating a usage state of writing a program or data in the memory; a management data updating section (14d) adapted to update the storage management data each time a program or data is written in the memory; a state confirmation request receiving section (14e) configured to receive a storage state confirmation request from a storage management unit (1); and a management data sending section (14g) configured to send the storage management data to the storage management unit when the storage state confirmation request is received from the storage management unit.

Description

FIELD OF THE INVENTION

The present invention relates to an electronic control unit.

PREVIOUS STATE OF THE ART

A configuration of an electronic control unit connected to a vehicle network and writing and accumulating a program or data exchanged with an external device or within a vehicle network is known (for example, see Patent Document 1).

Patent Document 1: JP 2017-11374 A

BRIEF SUMMARY OF THE INVENTION

The above configuration involves a risk that the writing of a program or data focuses on a particular memory. Such a particular memory on which the writing concentrates undergoes a material deterioration earlier than other memories. This includes a data corruption or deletion of data in the written program or the written data depending on the written capacity even if a vehicle warranty time has not yet expired; there is a possibility that the written program or the written data can not be guaranteed. Moreover, if the writing concentrates on a particular memory at a high utilization of the internal processing, the execution of the internal processing may be delayed; there may be a risk that this prolongs internal processing. Consequently, in view of the problem described above, there is a need for a countermeasure that avoids a risk that the writing of a program or data is concentrated on a particular memory.

The present invention has been made in view of the above circumstances. It is an object of the present invention to provide an electronic control unit that can avoid a risk that the writing of a program or data is concentrated on a particular memory.

According to an example of the present invention, there is provided an electronic control unit which is connected to a vehicle network and has a memory, a writing section, a management data storage section, a management data update section, a state confirmation request receiving section, and a management data sending section. The memory is adapted to accumulate a program or data exchanged (i.e., transmitted and received) with an external device or in the vehicle network. The writing section is configured to write a program or data to the memory. The management data storage section is configured to store storage management data indicating a usage state of writing a program or data in the memory. The management data updating section is configured to update the storage management data each time a program or data is written in the memory. The state confirmation request receiving section is configured to receive a storage state confirmation request from a storage management unit. The management data transmission section is configured to send the storage management data to the storage management unit when the storage state confirmation request is received from the storage management unit.

With such a configuration, each time the writing of a program or data to a memory is performed, the electronic control unit updates memory management data indicating a state of use of writing the program or data in the memory. When a memory state confirmation request is received from the memory management unit, the electronic control unit sends the memory management data to the memory management unit. The storage management unit may analyze the storage management data received from the electronic control unit so as to be able to make overall management of the usage state of writing a program or data into a memory or memories connected to the vehicle network.

This configuration enables proper control of an accumulation target accumulating a program or data to balance the writing of the program or the data while avoiding a situation where the writing of a program or data is concentrated on a particular memory. This can avoid a situation in which material deterioration of the particular memory progresses faster than other memories, while it can be guaranteed that a program or data will be written appropriately. In addition, a situation can be avoided in which writing a program or data at a high workload internal processing, while avoiding a situation where the processing time of internal processing increases.

list of figures

• 1 FIG. 11 is a diagram illustrating configurations of an electronic control unit and peripherals according to an embodiment; FIG.
• 2 shows a functional block diagram;
• 3 shows an illustration illustrating a memory structure of a master node;
• 4 Fig. 11 is a diagram illustrating memory management data of a master node;
• 5 Fig. 10 is a diagram illustrating a memory structure of a slave node;
• 6 Fig. 12 is a diagram illustrating memory management data of a slave node;
• 7 Fig. 10 is a flowchart for illustrating a writing process;
• 8th FIG. 12 is a flow chart illustrating a transmission process of a memory state confirmation request; FIG.
• 9 FIG. 12 is a flow chart illustrating a transmission process of an accumulation destination change request; FIG.
• 10 FIG. 12 is a flow chart illustrating a receiving state of a storage state confirmation request; FIG. and
• 11 FIG. 12 is a flowchart showing a reception process of an accumulation destination change request. FIG.

DETAILED DESCRIPTION

Hereinafter, an embodiment of the present invention will be described with reference to drawings. As in 1 shown are several electronic control units 1 to 5 (also as ECUs 1 to 5 and an in-vehicle communication unit 6 mounted in a vehicle. In the vehicle serve the electronic control units 1 to 5 each as a node and indicate the electronic control units 1 to 5 each a memory that stores a program or data. The electronic control unit 1 has a memory 1a on. The electronic control unit 2 has a memory 2a and a memory 2 B on. The electronic control unit 3 has a memory 3a and a memory 3b on. The electronic control unit 4 has a memory 4a on. The electronic control unit 5 has a memory 5a on. The number of memories stored in each of the electronic control units 1 to 5 is provided, or the capacity of each memory in each of the electronic control units 1 to 5 can be changed as needed.

The electronic control unit 1 is via a communication bus 7 (synonymous with a vehicle network) with the electronic control units 2 and 3 connected and via a communication bus 8th (synonymous with a vehicle network) with the electronic control units 4 and 5 connected. The electronic control unit 1 , which may be a gateway ECU, has a forwarding function, which is a program or data between the electronic control units 2 to 5 forwards. The electronic control unit 1 serves as a master node (synonymous with a memory management unit) that provides overall management of the usage state of writing programs or data to a memory or memory associated with the communication buses 7 and 8th connected performs.

The electronic control units 2 to 5 each serve as a slave node whose state of use of writing of programs or data in the memory or in the memory by the electronic control unit 1 is managed, which serves as a master node. Each of the electronic control units 2 to 5 may be an engine ECU that controls an internal combustion engine; a brake ECU that controls a brake; a steering wheel ECU that controls steering; a transmission ECU that controls an automatic transmission; a navigation ECU that controls a navigation device; an ETC-ECU controlling communication with an Electronic Toll Collecting (ETC) system; a door ECU that controls the locking / unlocking of doors; a meter ECU that controls the display of a meter; an air conditioning ECU that controls an air conditioner; or a window ECU that controls the opening or closing of windows.

Each of the communication buses 7 and 8th may be a communication bus of a multimedia system; be a communication bus of a powertrain system; or a communication bus of a body system. Each of the communication buses 7 and 8th can act as a CAN (Controller Area Network, registered trademark); a LIN (Local Interconnect Network); a CXPI (Clock Extension Peripheral Interface, registered trademark); a FlexRay (registered trademark); or a MOST (Media Oriented Systems Transport, registered trademark). The communication buses 7 and 8th have the respective communication protocols, transmission speeds or signal formats that may be the same or different from each other. Moreover, the number of electronic control units or the number of communication buses is not limited to the example configurations.

The electronic control unit 1 exchanges (ie transmits and receives) a program or data with a vehicle diagnostic device 9 (equivalent to an external device) when a wired connection to the vehicle diagnostic device 9 via a distribution cable connected to a connector of the vehicle body. The vehicle diagnostic device 9 is a device operated by an operator to diagnose the vehicle.

Furthermore, the electronic control unit exchanges 1 a program or data with the in-vehicle communication unit 6 out. The in-vehicle communication unit 6 Exchange a program or data with a cloud 10 (synonymous with an external device) when a wireless connection to the cloud 10 is produced via a wide area network. The cloud 10 has a central terminal (terminal) or a server. The in-vehicle communication unit 6 exchanges a program or data with a vehicle connection terminal 11 (equivalent to an external device) when a wireless connection to the vehicle connection terminal 11 via a wireless local area communication network. The vehicle connection terminal 11 includes a smartphone or tablet that a user can carry with them. Below is the vehicle diagnostic device 9 , the cloud 10 or the vehicle connection terminal 11 collectively as an external device 9 to 11 designated.

Below are configurations of the electronic control units 1 to 5 described. The electronic control units 2 to 5 , which serve as slave nodes, essentially each have an identical configuration; consequently, the electronic control unit becomes 2 used for the description. That is, the electronic control unit 1 and the electronic control unit 2 are described as an example of a relationship between a master node and a slave node. Such a relationship is equally on the relationship between the electronic control unit 1 and each of the electronic control units 3 to 5 applied. In addition, the description of the memory 2a the electronic control unit 2 in the same way to the memory 2 B applied.

As in 2 shown, the electronic control unit 1 serving as a master node, a microcomputer 12 on. The microcomputer 12 which has a CPU, a RAM, a ROM and an I / O port has internal functions obtained by software programs such as a transmitting and receiving section 12a , a writing section 12b , a management data storage section 12c , a management data updating section 12d , a state confirmation request transmission section 12e , a management data receiving section 12f an accumulation destination changing section 12g and an accumulation destination change request transmission section 12h ,

As in 3 shown points the memory 1a the electronic control unit 4 on: a control usage memory area 13a storing control programs, control data or rewrite programs; an area 13b which is dedicated to accumulation (hereinafter referred to as Accumulation Area) and stores (ie accumulates) programs or data; a storage area 13c storing first storage management data; a storage area 13d storing second memory management data; and a storage area 13e which stores the flag information (also referred to as a flag state).

The first memory management data stored in the memory area 13c and the second memory management data stored in the memory area 13d are data indicating the state of use of writing programs or data with respect to all the memories of the electronic control units 1 to 5 of all the nodes, each with the communication buses 7 and 8th are connected. As in 4 1, the first memory management data and the second memory management data are data including: (i) total accumulative usage capacity, which is a total capacity usable for accumulating programs or data, and (ii) total written capacity representing a total capacity of programs or data Is data that has been written up to the current time (ie in the past). The accumulative usage total capacity is a capacity displayed with a value obtained by a capacity of the accumulation area 13b is multiplied by the number of times of a rewrite that is possible throughout the lifetime. That is, if the total written capacity is relatively small compared with the total accumulative usage capacity, and the frequency of use in the memories is thus relatively small, the written program or the written data can be guaranteed. In contrast, when the total written capacity is relatively high, compared to the total accumulative utilization capacity, and the frequency of use in the memories is thus relatively high, the written program or the written data is not guaranteed. The numerical values of total accumulative use capacity and written total capacity, which are given in the 4 are shown merely serve as examples.

The transmitting and receiving section 12a sends and receives a program or data over the communication buses 7 and 8th so as to obtain the data about a vehicle state or a control history from the vehicle to the external devices 9 to 11 to send and the program or the data about a vehicle control from the external devices 9 to 11 to receive the vehicle.

The writing section 12b writes and accumulates programs or data through the send and receive section 12a sent or received in the accumulation area 13b of the memory 1a , Such a program or such data is also referred to as a writing destination. In this case, the writing section accumulates and accumulates 12b Programs or data in respective blocks of memory 1a To prevent the writing and accumulating of programs or data on a particular block of blocks of memory 1a concentrated.

The administrative data storage section 12c is designed to the storage areas 13c . 13d . 13e of the memory 1a and stores the first memory management data and the second memory management data together with the flag information. That is, the administrative data storage section 12c stores the memory management data in dual areas consisting of a first area 13c and a second area 13d ,

Every time a program or data in the accumulation area 13b of the memory 1a are written, the management data updating section updates 12d the memory contents of the memory 1a in the memory management data stored in the memory areas 13c and 13d are stored in accordance with the flag information stored in the memory area 13e is stored. The management data updating section 12d determines the older timestamp or the newer timestamp of the update with respect to the memory management data based on the flag information. The management data updating section 12d updates the memory management data with the older timestamp in accordance with the capacity of the written program or the written data in the accumulation area 13b of the memory 1a ,

The state confirmation request transmission section 12e sends a memory state confirmation request to the electronic control units 2 to 5 , which are slave nodes, via the communication buses 7 and 8th , As a transmission destination of the memory state confirmation request, the state confirmation request transmission section may 12e all of the electronic control units 2 to 5 that with the communication buses 7 and 8th connected, or only a predetermined limited or some of the electronic control units 2 to 5 that with the communication buses 7 and 8th are connected.

The management data receiving section 12f receives the memory management data from the electronic control units 2 to 5 be sent. If the memory management data provided by the electronic control units 2 to 5 are sent, the management data update section updates 12d the memory contents of the memory of the transmission source among the memory management data stored in the memory areas 13c and 13d are stored in accordance with the flag information stored in the memory area 13e is stored. For example, if the memory management data related to the memory 2a to be received by the electronic control unit 2 are sent, the management data updating section updates 12d the memory contents of the memory 2a among the memory management data stored in the memory areas 13c and 13d are stored in accordance with the flag information stored in the memory area 13e is stored. In this case, the management data updating section determines 12d likewise, the older timestamp or the newer timestamp of the update regarding the memory management data based on the flag information. The management data updating section 12d updates the memory management data of the older timestamp in accordance with the capacity of the written program or the written data in the accumulation area 13b of the memory 1a ,

When the storage management data is updated, the accumulation destination changing section determines 12g whether it is necessary to change a memory which is considered as an accumulation destination of a program or data in accordance with the memory management data after the update (ie, the updated memory management data). That is, the accumulation destination changing section 12g calculates a difference between the accumulated usage total capacity and the latest total written capacity; the difference is a writable capacity, which is a capacity to write from the current point in time. Of the Akkumulierungszieländerungsabschnitt 12g calculates a ratio of the writable capacity to the accumulation usage total capacity, determines or judges the distribution in ratios for all of the memories that communicate with the communication buses 7 and 8th and determines whether it is necessary to change a memory serving as an accumulation destination of a program or data. This memory serving as an accumulation destination of a program or data is also referred to as an accumulation destination memory of a program or data.

When the distribution is within a predetermined range, the accumulation destination changing section determines 12g in that it is not necessary to change the memory of the accumulation destination of a program or of data. On the other hand, the accumulation destination changing section determines 12g if the distribution is not within the predetermined range, it is necessary to change the memory of the accumulation destination of a program or data. When it is determined that it is necessary to change the memory of the accumulation destination of a program or data, the accumulation destination changing section changes 12g the accumulation destination memory to approximate the distribution within a predetermined range. That is, the accumulation destination changing section 12g changes the memory of the accumulation target to approximate the distribution within a predetermined range so as to avoid a situation where the writing of programs or data concentrates on a particular memory. In this case, the accumulation destination changing section changes 12g Preferably, the memory of the accumulation destination (ie, the accumulation destination memory) by selecting, as a new accumulation destination memory, a new memory containing a program or data having a data length equal to or equal to a multiple of a data length of a writing destination (ie, a program or data with the external devices 9 to 11 can be exchanged). Further, the accumulation destination changing section may 12g other than calculating the ratio of the writable capacity to the total accumulative usage capacity, determine whether it is necessary to change the memory of the accumulation destination of a program or data.

When the memory of the accumulation destination of a program or data is changed, the accumulation destination change request transmission section transmits 12h an accumulation destination change request via the communication buses 7 and 8th to one of the electronic control units 2 to 5 the slave node, whichever is determined to be the change of the storage of the accumulation destination.

The electronic control unit 2 a slave node has a microcomputer 14 which has a CPU, a RAM, a ROM and an I / O port. The electronic control unit 2 achieves the functions with software programs, such as a send and receive section 14a , a writing section 14b , a management data storage section 14c , a management data updating section 14d a state confirmation request receiving section 14e a memory resource determination section 14f , a management data transmission section 14g , an accumulation destination change request receiving section 14h and an accumulation destination changing section 14i ,

As in 5 shown points the memory 2a the electronic control unit 2 equal to the memory 1a the electronic control unit 1 , to: a control usage memory area 15a storing control programs, control data or rewrite programs; an accumulation area 15b saving programs or data; a storage area 15c storing first storage management data; a storage area 15d storing second memory management data; and a storage area 15e storing the flag information.

As in 6 are the first memory management data that are in the memory area 15c and the second memory management data stored in the memory area 15d the data indicating a state of use of writing of programs or data with respect to all of the memories of the electronic control unit 2 Show. Likewise, in this case, the first memory management data and the second memory management data are data including: (i) a total accumulative usage capacity that is a total capacity that can be used to accumulate programs or data, and (ii) a total written capacity , which is a total capacity of programs or data written up to the current time (ie in the past). The accumulative usage total capacity is a capacity displayed with a value obtained by adding a capacity of the accumulation area 15b is multiplied by the number of times of rewriting possible throughout an entire lifetime. That is, if the total written capacity is relatively small compared to the total accumulative usage capacity, and the frequency of use in the memories is thus relatively low, the written program or programs can be used be guaranteed written data. On the other hand, when the total written capacity is relatively high compared with the total accumulative usage capacity, and the frequency of use in the memories is relatively high, the written program or the written data can not be guaranteed. The numerical values of total accumulative use capacity and written total capacity, which are given in the 6 are shown merely serve as examples.

The transmitting and receiving section 14a exchanges (ie sends and receives) a program or data over the communication bus 7 to execute the program or the data about a vehicle state or a control history from the vehicle to the external device 9 to 11 to transmit and the program or data via a vehicle control from the external device 9 to 11 to receive the vehicle.

The writing section 14b writes and accumulates a program or data through the send and receive section 14a sent or received in the accumulation area 15b of the memory 2a , In this case, the writing section accumulates and accumulates 14b Programs or data in respective blocks / blocks of memory 2a To prevent writing and accumulating the programs or data to a specific block from the blocks of memory 2a concentrated.

The administrative data storage section 14c is designed to the storage areas 15c to 15e of the memory 2a and stores the first memory management data, the second memory management data, and the flag information. That is, the administrative data storage section 14c stores the memory management data in dual areas consisting of a first area 15c and a second area 15d ,

Every time a program or data in the accumulation area 15b of the memory 2a are written, the management data updating section updates 14d the memory contents of the memory 2a within the storage management data stored in the storage areas 15c and 15d are stored in accordance with the flag information stored in the memory area 15e is stored. The management data updating section 14d determines the older timestamp or the newer timestamp of the update with respect to the memory management data based on the flag information. The management data updating section 14d updates the memory management data with the older timestamp in accordance with the capacity of the written program or the written data in the accumulation area 15b of the memory 2a ,

The state confirmation request receiving section 14e receives the memory state confirmation request via the communication bus 7 from the electronic control unit 1 of the master node. When the memory state confirmation request from the electronic control unit 1 is received, the storage resource determination section determines 14f Whether there is a storage resource that is under the ones with the communication buses 7 and 8th shared storage is shared. That is, when an unused storage capacity has an additional margin to the storage capacity that is for the main controller of the electronic control unit 2 is used, the storage resource determination section determines 14f in that a shareable storage resource exists. On the other hand, the storage resource determination section determines 14f if an unused storage capacity has no additional margin that there is no sharable storage resource.

When it is determined that a sharable storage resource exists, the management data sending section sends 14g the memory management data together with a positive acknowledgment to the electronic control unit 1 , On the other hand, the management data transmission section transmits 14g if it is determined that there is no sharable storage resource, a negative acknowledgment to the electronic control unit 1 ,

The accumulation destination change request receiving section 14h receives the accumulation destination change request from the electronic control unit 1 of the master node via the communication bus 7 , When the accumulation destination change request from the electronic control unit 1 is received, the accumulation destination changing section changes 14i the memory of the accumulation destination of a program or data in accordance with the accumulation destination change request.

The following are operations in the above configuration with reference to FIGS 7 to 11 described. The description is made in the event that the electronic control unit 1 a memory state confirmation request to the electronic control unit 2 sends and the electronic control unit 2 Memory management data to the electronic control unit 1 sends. More specifically, the description is made successively for (i) a writing process executed both by the microcomputer 12 the electronic control unit 1 as well as the microcomputer 14 the electronic control unit 2 (ii) a transmission process of a memory state confirmation request made by the microcomputer 12 (iii) a send process of an accumulation destination change request issued by the microcomputer 12 (iv) a memory state confirmation request receiving process executed by the microcomputer 14 and (v) a receiving target change request request process executed by the microcomputer 14 is performed.

writing process

As in 7 shown when a writing process is started, in the electronic control unit 1 a master node and the electronic control unit 2 a slave node, the microcomputer 12 and 14 whether the reception of a program or of data has started as a writing destination ( S1 ). When it is determined that reception of a program or data of a writing destination has started ( S1 : YES), the microcomputers start 12 and 14 writing a program or data of a writing destination into a respective memory ( S2 ) and monitor the microcomputers 12 and 14 the completion of the reception of the program or the data of the writing destination ( S3 ). When the completion of the reception of the program or the data of the writing destination is determined ( S3 : YES), the microcomputers finish 12 and 14 the writing of the program or the data of the writing destination into the respective memory ( S4 ).

After the writing of the program or the data has been finished, the microcomputers calculate 12 and 14 the written capacity or write volume as a written capacity ( S5 ) and determine the microcomputer 12 and 14 the flag information at this time ( S6 ). The microcomputers update based on the determined flag information 12 and 14 the memory management data of the older time stamp among the first memory management data and the second memory management data in accordance with the written capacity of the written program or the written data ( S7 ). That is, the microcomputer 12 and 14 add the writing capacity due to the writing process at this time to the total written capacity at that time to update the memory management data. Subsequently, the microcomputers update 12 and 14 the flag information ( S8 ) and stop the microcomputers 12 and 14 the writing process.

Sending process of memory state confirmation request

As in 8th shown in the electronic control unit 1 of a master node, with the start of the transmission process of a memory state confirmation request, the microcomputer 12 a memory state confirmation request to the electronic control unit 2 a slave node ( S11 ) and monitors the microcomputer 12 the receipt of a positive acknowledgment or a negative acknowledgment from the electronic control unit 2 ( S12 . S13 ). When it is determined that the memory management data together with the positive confirmation from the electronic control unit 2 to be received ( S12 : YES), the microcomputer updates 12 the internally stored storage management data in accordance with the received storage management data ( S14 ) and the microcomputer stops 12 the sending process of the storage state confirmation request. In contrast, the microcomputer stops 12 if it is determined that the negative acknowledgment from the electronic control unit 2 Will be received ( S13 : YES), the transmission state of the memory state confirmation request without updating the memory management data.

Sending process of accumulation target change request

As in 9 shown, determined, in the electronic control unit 1 of a master node, with the start of the transmission process of an accumulation destination change request, the microcomputer 12 whether the requirement to change the accumulation target results from the update of the storage management data ( S21 ). If it is determined that the requirement to change the accumulation target arises ( S21 : YES), the microcomputer sends 12 an accumulation destination change request to a respective electronic control unit among the electronic control units 2 to 5 the slave node ( S22 ) and the microcomputer stops 12 the transmission process of the accumulation destination change request. If it is determined that the requirement to change the accumulation target does not arise ( S21 : NO), the microcomputer finishes 12 the sending process of the accumulation destination change request without sending the accumulation destination change request.

Receive process of memory state confirmation request

As in 10 shown, determined, in the electronic control unit 2 of a slave node, with the start of the reception process of a memory state confirmation request, the microcomputer 14 Whether the memory state confirmation request from the electronic control unit 1 receive a master node ( S31 ). When it is determined that the storage state confirmation request from the electronic control unit 1 Will be received ( S31 : YES), the microcomputer determines 14 Whether or not there is a storage resource that is in between storage that communicates with the communication buses 7 and 8th are shared, can be shared ( S32 ). If it is determined that a shareable storage resource exists ( S32 : YES), the microcomputer sends 14 the memory management data together with a positive acknowledgment to the electronic control unit 1 ( S33 ) and the microcomputer stops 14 the reception process of the memory state confirmation request. If it determines that there is no sharable storage resource ( S32 : NO), the microcomputer sends 14 the negative confirmation to the electronic control unit 1 ( S34 ) and the microcomputer stops 14 the receiving state of the storage state confirmation request without sending the storage management data.

Reception process of accumulation destination change request

As in 11 shown, determined, in the electronic control unit 2 of a slave node, with the start of the reception process of an accumulation destination change request, the microcomputer 14 Whether the memory state confirmation request from the electronic control unit 1 receive a master node ( S41 ). When it is determined that the accumulation target change request from the electronic control unit 1 Will be received ( S41 : YES), the microcomputer changes 14 the memory of the accumulation destination of a program or of data in accordance with the received accumulation destination change request ( S42 ) and the microcomputer stops 14 the receiving process of the accumulation destination change request.

The above is the electronic control unit 2 of a slave node as an example. The description of the electronic control units 3 to 5 is the same as the description above. That is, like sending a memory state confirmation request to the electronic control unit 2 and receiving memory management data from the electronic control unit 2 As described above, the electronic control unit transmits 1 a master node, a memory state confirmation request to each of the electronic control units 3 to 5 and receives the electronic control unit 1 Memory management data from each of the electronic control units 3 to 5 Thus, an overall management of the write-using state of all of the memories associated with the communication buses 7 and 8th are connected to execute. The electronic control unit 1 may at any time be a memory state confirmation request to the electronic control units 2 to 5 send. The electronic control unit 1 may issue a memory state confirmation request to all of the electronic control units 2 to 5 send at once when the bus load of the communication buses 7 and 8th is comparatively low. Alternatively, the electronic control unit 1 the memory state confirmation requests successively to the respective electronic control units 2 to 5 send when the bus load of the communication buses 7 and 8th is comparatively high.

The present embodiment can achieve the following advantageous effects as described above. In each of the electronic control units 2 to 5 of a slave node are updated each time a program or data is written to a memory, memory management data indicating the usage state of writing a program or data in the memory. When a memory state confirmation request from the electronic control unit 1 of a master node, memory management data is sent to the electronic control unit 1 Posted. In the electronic control unit 1 The memory management data provided by each of the electronic control units 2 to 5 to be received, analyzed; In this way, an overall management of the usage state of the writing of programs or data into the memory, which takes place with the communication buses 7 and 8th are connected.

This configuration allows appropriate control of an accumulation target to balance the writing of programs or data while avoiding a situation where the writing of programs or data is concentrated on a particular memory. This can avoid a situation in which material deterioration of the particular memory proceeds faster than other memories, while the program or data being written can be appropriately guaranteed. In addition, a situation where writing of programs or data concentrates at a high utilization of the internal processing can be avoided, while a situation in which the processing time of the internal processing increases can be avoided.

In each of the electronic control units 1 to 5 the storage management data is stored in dual areas consisting of a first area and a second area, and the storage management data, whichever is older, is updated in accordance with the flag information when the storage management data is updated. Even if the electric Power source is blocked during the writing of a program or data, the storage management data is trusted.

In each of the electronic control units 1 to 5 The data is about a vehicle state or a control history that is from the vehicle to the external devices 9 to 11 are sent, written to a memory and accumulated. With reference to the data about a vehicle condition or a control history that is from the vehicle to the external devices 9 to 11 are sent, an overall management of the state of use of writing programs or data in the memory that communicates with the communication buses 7 and 8th are connected.

Furthermore, in each of the electronic control units 1 to 5 , a program or data about the vehicle control coming from the external device 9 to 11 sent to the vehicle, written to a memory and accumulated. With reference to the program or data about a vehicle control from the external device 9 to 11 to the vehicle is an overall management of the usage state of the writing of the program or the data in the memory, with the communication buses 7 and 8th are connected.

Further, in each of the electronic control units 2 to 5 when a memory state confirmation request from the electronic control unit 1 is received, determines if there is a storage resource under the storage that is connected to the communication buses 7 and 8th are connected, can be shared. If it is determined that a sharable storage resource exists, storage management data is sent along with a positive acknowledgment. If it is determined that there is no sharable storage resource, a negative acknowledgment is sent. Shareable storage resources are provided by both sides; The memory resources are among the memories that communicate with the communication buses 7 and 8th connected, used effectively.

Further, in each of the electronic control units 2 to 5 when an accumulation destination change request from the electronic control unit 1 the memory of the accumulation destination of a program or data is changed in accordance with the received accumulation destination change request. Changing the memory of the accumulation destination of a program or data may allow for a flexible response.

Further, in each of the electronic control units 2 to 5 a memory which can accumulate the data having a data length equal to or equal to a multiple of a data length of the data associated with the external device 9 to 11 exchanged as a memory of a new accumulation destination; the memory of the accumulation destination of a program or data is changed. The consideration of units of data that can be handled in a memory results in an effective use of a storage capacity.

Furthermore, in each of the electronic control units 1 to 5 Stored memory management data that includes: (i) a total accumulative usage capacity that is a total capacity usable for accumulating programs or data, and (ii) a total written capacity that is a total capacity that is effective up to the current time (ie Past) was written. The accumulative usage total capacity is a capacity indicated by a value obtained by multiplying a capacity of the accumulation area by the possible number of times of rewriting in an entire lifetime. A comparison of the total accumulative usage capacity with the total written capacity allows easy confirmation and management of the progress of the frequency of use of the memory.

Furthermore, in each of the electronic control units 1 to 5 , Programs or data are written and accumulated in respective blocks / blocks of the memory to prevent the writing and accumulation of programs or data from focusing on a particular block of the blocks. Writing the programs or data sequentially to different addresses within the memory allows "smoothing" or equalizing the writing frequency or writing frequency and increasing the memory life.

Further, in the electronic control unit 1 when a memory state confirmation request to each of the electronic control units 2 to 4 is sent and memory management data from each of the electronic control units 2 to 4 which updates memory management data according to the transmission source of the memory management data. The accumulation destination may be successively controlled to balance the writing of a program or data.

Further, in the electronic control unit 1 When memory management data is updated, the storage destination of the accumulation destination is one Program or data in accordance with the memory management data after the update (ie the updated memory management data) changed. Changing the memory of the accumulation destination of a program or data may allow for a flexible response.

Further, even in the electronic control unit 1 a memory which can accumulate the data having a data length equal to or equal to a multiple of a data length of the data associated with the external device 9 to 11 exchanged as a memory of a new accumulation destination; the memory of the accumulation destination of a program or data is changed in this way. The consideration of units of data that can be handled in the memory leads to an effective use of the storage capacity.

Although the present invention is described above in connection with its embodiments, it should be understood that it is not limited to the embodiments and constructions. The present invention should be understood to include various modifications and equivalent arrangements. Further, while the various combinations and configurations are shown, other combinations and configurations having more, less or only a single element are also to be understood as included within the scope of the present invention.

Although a configuration in which a master node is only a single electronic control unit 1 As an example, another configuration may be provided in which a master node has a plurality of electronic control units that share and manage memory management data.

Although a configuration in which the electronic control unit 1 a master node has a memory 1a As an example, another configuration may be provided in which the electronic control unit 1 of a master node no memory 1a having. That is, the electronic control unit 1 of a master node may indicate the state of use of writing programs or data to these memories with respect to the memories of the electronic controllers 2 to 5 , with the exception of the electronic control unit 1 self, manage.

Although a configuration where the state of use of writing programs or data in all of the memory that communicates with the communication buses 7 and 8th As an example, another configuration may be provided wherein the usage state of writing programs or data to a selected portion of all of the memory associated with the communication buses 7 and 8th are managed. In addition, a memory can be any memory within the electronic control units 1 to 5 his and is not limited to the microcomputer.

Although the configuration in which the program or the data associated with the external device 9 to 11 can be exchanged to serve as a writing destination, as an example is described, another configuration may be provided in which a program or data in the vehicle network is transmitted and received, that is, exchanged. That is, a program or data that is handled only within the vehicle may serve as a writing destination, and overall management may be for the state of use of writing programs or data in the memories.

Above, an electronic control unit is described.

An electronic control unit 2 indicates: a memory 2a . 2 B which is designed to accumulate a program or data with an external device 9 to 11 or in a vehicle network 7 be replaced; a writing section 14b which is designed to write a program or data; a management data storage section 14c adapted to store storage management data indicative of a usage condition of writing a program or data to the storage; a management data updating section 14d which is adapted to update the memory management data each time a program or data is written to the memory; a state confirmation request receiving section 14e which is adapted to a memory state confirmation request from a memory management unit 1 to recieve; and a management data transmission section 14g which is adapted to send the storage management data to the storage management unit when the storage state confirmation request is received from the storage management unit.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• JP 2017011374 A [0003]

Claims (8)

An electronic control unit connected to a vehicle network (7, 8), comprising: a memory (1a, 2a, 2b, 3a, 3b, 4a, 5a) adapted to accumulate a program or data exchanged with an external device (9 to 11) or in the vehicle network; a writing section (12b, 14b) adapted to write a program or data to the memory; a management data storage section (12c, 14c) configured to store storage management data indicating a usage state of writing a program or data to the memory; a management data updating section (12d, 14d) adapted to update the storage management data each time a program or data is written in the memory; a state confirmation request receiving section (14e) configured to receive a storage state confirmation request from a storage management unit (1); and - a management data transmission section (14g) configured to send the storage management data to the storage management unit when the storage state confirmation request is received from the storage management unit. Electronic control unit after Claim 1 characterized in that - the management data storage section stores the storage management data in dual areas consisting of a first area and a second area, and flag information indicating whether the storage management data stored in the first area or the storage management data stored in the first area second area are stored, are valid; and - when the storage management data is updated, the management data updating section (i) updates the storage management data stored in the first area or (ii) the storage management data stored in the second area in accordance with the flag information, whichever is older. Electronic control unit after Claim 1 or 2 characterized by further comprising: a memory resource determination section (14f) adapted to determine whether a sharable storage resource is present among memories connected to the vehicle network when the storage state confirmation request is received from the storage management unit, wherein, when it is determined that a sharable storage resource exists, the management data sending section sends the storage management data together with a positive acknowledgment to the storage management unit; and - if it is determined that there is no sharable storage resource, the management data sending section sends a negative acknowledgment to the storage management unit. Electronic control unit according to one of Claims 1 to 3 characterized in that it further comprises: an accumulation destination change request receiving section (14h) adapted to receive an accumulation destination change request from the storage management unit; and an accumulation destination changing section (14i) configured to change a memory serving as an accumulation destination accumulating a program or data in accordance with the accumulation destination change request when the accumulation destination change request is received from the storage management unit. Electronic control unit after Claim 4 characterized in that the program or data exchanged with the external device or in the vehicle network serves as a write destination having a first data length to be accumulated in a first memory serving as a first accumulation destination the write target accumulates; the accumulation destination changing section newly selects a second memory having a second data length which is identical to or a multiple of the first data length as a second accumulating destination; and the accumulation destination changing section changes an accumulation destination for the writing destination from the first memory as the first accumulating destination to the second memory as the second accumulating destination. Electronic control unit according to one of Claims 1 to 5 characterized in that: - the management data storage section, as the storage management data, stores data including a total accumulated usage capacity and a total written capacity; - the accumulation usage total capacity is a total capacity usable to accumulate a program or data; and - the total written capacity is a total capacity with which a write has been done in the past. Electronic control unit according to one of Claims 1 to 6 characterized in that the writing section is adapted to write and accumulate programs or data in respective blocks of the memory to prevent the writing and accumulation of the programs or of the data to a particular block among the ones Concentrated blocks. Electronic control unit according to one of Claims 1 to 7 characterized in that it further comprises: a memory state confirmation request transmission section (12e) adapted to send a memory state confirmation request to a transmission destination of the memory state confirmation request; and a management data receiving section (12f) configured to receive storage management data from the transmission destination of the storage state confirmation request.

Images