Vehicle control device

Abstract

The present invention provides a vehicle control device with which, even when an abnormality is detected in a core in a multi-core processor, it is possible to reduce the time needed until the core in which the abnormality is detected restarts and re-executes application software. The present invention is characterized by being provided with: a diagnostic means for carrying out a diagnostic process when starting a processor core, the diagnostic process including hardware diagnosis performed by hardware and software diagnosis performed using software after the hardware diagnosis; and a diagnostic process information change processing means for changing the method for executing the diagnostic process when all of the processor cores are started and when one of the processor cores is restarted.

Claims

1. A vehicle control device comprising: a plurality of processing cores that include a first processing core and a second processing core, wherein each processing core is assigned one or more in in-vehicle functions so that the first processing core is assigned a first in-vehicle function and the second processing core is assigned a second in-vehicle function; and a storage area that is communicatively coupled to the plurality of processing cores, wherein the storage area includes a plurality of portions that are each assigned to a respective processing core; wherein each respective processing core from the plurality of processing cores is configured to: detect a fault by performing a hardware diagnosis by the respective processing core when the respective processing core is started, and perform a software diagnosis on the portion of the storage area assigned to the respective processing core after the hardware diagnosis is completed; and wherein, on a condition that the fault is detected in the first processing core, the vehicle control device is configured to: reassign the first in-vehicle function from the first processing core to the second processing core, wherein the second processing core executes both the first in-vehicle function and the second in-vehicle function, perform the software diagnosis on the portion of the storage area assigned to the first processing core using a third processing core, and restart the first processing core.

2. The vehicle control device according to claim 1, wherein an access right to the portion of the storage area that is allocated to the first processing core is changed in performing the software diagnostic of the storage area.

3. The vehicle control device according to claim 1, further comprising: a dedicated processor core configured to detect faults in the plurality of processing cores.

4. The vehicle control device according to claim 1, wherein a diagnostic result of the software diagnosis is output as a log.

Description

BRIEF DESCRIPTION OF DRAWINGS

(1) FIG. 1 is a block diagram of a system configuration of a vehicle control device according to one embodiment of the present invention.

(2) FIG. 2 is a block diagram of specific exemplary parallel processing of functions with a multi-core microcomputer.

(3) FIGS. 3(a) to 3(c) are block diagrams illustrating a flow of specific processing until a core restarts since an abnormality has been detected in the multi-core microcomputer in a case where a conventional technique has been used.

(4) FIG. 4 is a flow chart of a typical example until application software is executed since a start of the microcomputer.

(5) FIG. 5 is a flow chart of a specific example until the application is executed since a start of processor cores, in a proposed technique.

(6) FIG. 6 is a block diagram of a specific example of software diagnosis when a partial core restarts, in the proposed technique.

(7) FIG. 7 is a block diagram of a specific example of software diagnosis progress in a storage area in the proposed technique.

(8) FIG. 8 is a block diagram of a specific example of software diagnosis progress in a storage area when a plurality of cores cooperates with each other in the proposed technique.

DESCRIPTION OF EMBODIMENTS

(9) One embodiment of the present invention will be described below with reference to the drawings.

(10) FIG. 1 is a block diagram of a system configuration of a vehicle control device according to the one embodiment of the present invention. The vehicle control device 1 includes a diagnostic technique 101, a diagnostic process method change unit 102, a power source IC 103, a multi-core processor 104, a storage area 105, and a diagnostic process log 106.

(11) Here, the multi-core processor 104 includes a plurality of cores 10401, 10402, and 10403.

(12) Here, the diagnostic technique 101 includes an all-core-start diagnostic technique 10101 being a diagnostic technique used in starting all the cores and a partial-core-restart diagnostic technique 10102 being a diagnostic technique used in restarting a partial core. In starting the processor cores, the diagnostic process method change unit 102 selects the all-core-start diagnostic technique 10101 when all the cores start and selects the partial-core-restart diagnostic technique 10102 when the partial core restarts. Accordingly, time necessary until application software is executed since the restart of the partial core, shortens.

(13) FIG. 4 is a flow chart of a typical example until the application is executed since a start of the microcomputer. Processing starts at step S1020101. The microcomputer starts at step S1020102. A built-in self-test (BIST) is performed at step S1020103. Diagnosis with software is performed at step S1020104. The application is executed at step S1020105 and then the processing finishes at step S1020106.

(14) As illustrated in FIG. 4, typically when the microcomputer starts, the BIST built in a circuit (hardware) is performed and then the diagnosis with the software is performed.

(15) Here, the software diagnosis described at step S1020104 corresponds to, for example, RAM diagnosis on the storage area 105 using the software. More specifically, the diagnosis writes a fixed value into the storage area 105, and determines whether a result read after the writing is equivalent to the initial fixed value. Accordingly, the diagnosis of whether the storage area 105 normally operates, can be performed. In addition, examples of the software diagnosis include ROM diagnosis using a checksum and diagnosis on an error check and correct (ECC) function by fault injection.

(16) FIG. 5 is a flow chart of a specific example until the application is executed since a start of the processor cores in the proposed technique, and processing starts at step S1020201. The core starts at step S1020202. It is determined whether only a partial processor core has started, at step S1020203. When Yes is acquired, namely, only the partial processor core has started, the processing proceeds to step S1020204 and then the partial-core-restart diagnostic technique 10101 is performed. A partial-core-start BIST is performed at step S1020204. Partial-core-restart software diagnosis is performed at step S1020205. The application software is executed at step S1020206 and the processing finishes at step S1020207. Meanwhile, when No is acquired at step S1020203, namely, all the processor cores have started, the processing proceeds to step S1020208 and the all-core-start diagnostic technique 10102 is performed. An all-core-start BIST is performed at step S1020208. All-core-start software diagnosis is performed at step S1020209. The application software is executed at step S1020206, and the processing finishes at step S1020207.

(17) FIG. 6 illustrates a specific example of the software diagnosis in restarting the partial core when the proposed technique has been used. FIG. 6 illustrates a state where an abnormality has been detected in the core 1 and the partial-core-restart diagnostic technique 10101 has been performed. In the proposed technique, the core n previously performs the software diagnosis and a core 1 storage area being a range to be diagnosed is diagnosed during the core 1 including the abnormality detected, being performed with the BIST, so that time until the core 1 executes the application software can shorten.

(18) FIG. 7 illustrates progress management when the software diagnosis is performed to a storage area 10502. As illustrated in FIG. 7, as a method of managing the progress of the software diagnosis, storing and managing an address value in a range including the diagnosis finished, can resume the software diagnosis from the initial position even when work is changed during the diagnosis.

(19) FIG. 8 illustrates software diagnosis progress of a storage area 10503 when the plurality of cores cooperates with each other. As illustrated in FIG. 8, when diagnosis is performed with two cores, one core starts the diagnosis from a lower address value and the other core starts the diagnosis from a higher address value so that time necessary for the diagnosis can further shorten.

REFERENCE SIGNS LIST

(20) 1 vehicle control device 101 diagnostic means 10101 all-core-start diagnostic means 10102 partial-core-restart diagnostic means 102 diagnostic process method change unit 103 power source IC 104 multi-core processor 10401, 10402, 10403 processor core 105, 10501, 10502, 10503 storage area 106 diagnostic process log