The invention relates to an arrangement and a method performing data exchange between various integrated circuits, IC, (3,4,5,6,7) in an automotive control system wherein the data are exchanged by a bus and has the object to enable ASIL C/D system coverage and to tie various ICs (clocks, regulators, memory interfaces, sensor signal conditioners, power management ICs etc.) This is solved the data are exchanged by a bus being ASIL C/D compliant and forming a common protocol to exchange information among the integrated circuits (3,4,5,6,7). The method is solved by functions implemented within the bus as setting the frequency of operation; arbitrating roles of the integrated circuits as master or slave device; checking integrity of exchanged data; frame repetition; detecting bus stuck-at failure modes; filtering or denouncing failures and warnings from peripheral devices; detecting remote out of specification local clock; and monitoring and predicting system reliability and profiling maintenance events.

One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.

In an anomaly detection by an electronic control unit connected to an other electronic control unit via a communication network, a data frame is received from the other electronic control unit, and a reception interval is calculated between a first data frame and a second data frame received immediately before the first data frame. A determination value for determining whether the data frame is anomalous is updated by adding a predetermined value to the determination value when the reception interval is equal to or less than a threshold value, and the data frame is determined to be anomalous when the determination value exceeds a limit value.

The present disclosure discloses a train network node and a CANopen-based train network node monitoring method. The method includes: obtaining, by a train network node, an offline duration and a heartbeat packet transmission period based on a pre-configured network node list, where the offline duration is set on an offline timer corresponding to each node related to the network node, and the heartbeat packet transmission period is set on a heartbeat timer; and comparing the offline duration that is set on the offline timer corresponding to each node with the heartbeat packet transmission period that is set on the heartbeat timer, and determining an offline monitoring mechanism of each node based on a comparison result.

In an embodiment, a computing node includes a computing circuit, a comparing circuit, and an indicator circuit. The computing circuit is configured to receive each of at least one input-data message. The comparing circuit is configured to compare each of the at least one received input-data message to a list of input-data-message identifiers. And the indicator circuit is configured, for each of the at least one input-data message that corresponds to a respective input-data-message identifier, to generate a respective portion of a first status message, the respective portion indicating that the input-data message was received. For example, such computing node can determine the congruency of a received input-data message between coupled redundancy circuits with reduced processing overhead, reduced message delay, and reduced message latency as compared to existing computer nodes.

The present disclosure discloses a train network node and a CANopen-based train network node monitoring method. The method includes: obtaining, by a train network node, an offline duration and a heartbeat packet transmission period based on a pre-configured network node list, where the offline duration is set on an offline timer corresponding to each node related to the network node, and the heartbeat packet transmission period is set on a heartbeat timer; and comparing the offline duration that is set on the offline timer corresponding to each node with the heartbeat packet transmission period that is set on the heartbeat timer, and determining an offline monitoring mechanism of each node based on a comparison result.

In an embodiment, a computing node includes a computing circuit, a comparing circuit, and an indicator circuit. The computing circuit is configured to generate a first redundant message that corresponds to, and that is independent of, a source message propagating over a network during at least one time period. The comparing circuit is configured to compare information content of one or more corresponding portions of the source message and the first redundant message during each of the at least one time period to generate a comparison result. And the indicator circuit is configured to indicate whether the source message is valid or invalid in response to the comparison result. For example, such computing node can determine the validity of a redundant result with reduced processing overhead, reduced message delay, and reduced message latency as compared to existing computer nodes.

In an electronic control unit, it is determine whether a data frame received from a different electronic control unit via a communication network is abnormal. A prediction data, which is predicted to be a normal data supposed to be included in the data frame determined to be abnormal, is generated by using a past data that is a data included in stored data frames, based on a stored prediction generation method. A prediction data frame including the prediction data is transmitted via the communication network.

In particular embodiments, a computing system may receive, by a processor in communication with an actuator of a vehicle, an instruction associated with an environment external to the vehicle and configured for controlling the actuator of the vehicle. The system may receive, by the processor, sensor data associated with the environment and generated by one or more sensors associated with the vehicle. The system may determine, by the processor, a state associated with an operation mode of the vehicle based on the received sensor data. The system may evaluate, by the processor, whether the instruction is invalid based on the state associated with the operating mode of the vehicle. The system may, subsequent to determining that the instruction is invalid, based on the evaluation, prevent transmission of the instruction to the actuator of the vehicle.

An in-vehicle control device includes a vehicle-side communication unit installed on a vehicle and communicating with at least an information processing device external to the vehicle, and a first processor. The first processor is configured to: receive an installation request for an application program from the information processing device; in a case in which the installation request has been received, notify the information processing device of a rule defining whether or not a communication frame received at the vehicle-side communication unit is unauthorized and of equipment information related to optional equipment of the vehicle; acquire the application program and a rule that has been updated based on the notified rule and the equipment information from the information processing device; and, in a case in which the updated rule has been acquired, update the rule to the updated rule.