Control system

Patent metadata

Field	Value
Publication number	US-11932269-B2
Application number	US-202017919935-A
Country	US
Kind code	B2
Filing date	May 28, 2020
Priority date	May 28, 2020
Publication date	Mar 19, 2024
Grant date	Mar 19, 2024

Abstract

In a control process of a control device of a vehicle, normal-case information and execution-case information are compared, and if at least either compared execution orders of a calculation process or compared output values in steps of the calculation process are different from each other, it is judged that abnormality has occurred, thus providing a control system that enables normal traveling by detecting abnormality in the vehicle even if an unknown cyberattack is performed during traveling.

First claim

The invention claimed is:

1. A control system comprising:
at least one processor that
executes a control process of a control device;
calculates a control value for the control process through a plurality of steps of a calculation process;

a storage in which normal-case information about an execution order of the calculation process and output values in the steps of the calculation process are stored in advance;
wherein the at least one processor
acquires execution-case information about the execution order of the executed calculation process and output values in the steps of the executed calculation process;
compares the normal-case information and the execution-case information; and
judges that abnormality has occurred, if at least either the compared execution orders of the calculation process or the compared output values in the steps of the calculation process are different from each other.

2. The control system according to claim 1 , wherein
every time when each of the plurality of steps of the calculation process is finished, the at least one processor compares the execution orders of the calculation process and the output values for each of the steps of the calculation process, and if at least either the compared execution orders or the compared output values are different from each other, the at least one processor judges that abnormality has occurred in the at least one processor.

3. The control system according to claim 2 , wherein:
the at least one processor comprises a first processor that performs the control process, and a second processor that is separate from the first processor and is capable of performing the same control as the first processor; and
the control system further comprises a switch which switches the control process of the first processor to the control process of the second processor if the judgment circuitry judges that abnormality has occurred.

4. The control system according to claim 3 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

5. The control system according to claim 2 , wherein
the at least one processor comprises a plurality of processors,
the control system sets priorities for the plurality of processor, and
acquires the execution order of the plurality of steps of the calculation process for calculating the control value for the control process of a processor having a highest priority among the plurality of processors, and the output values in these steps of the calculation process.

6. The control system according to claim 5 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

7. The control system according to claim 2 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

8. The control system according to claim 1 , wherein:
the at least one processor comprises a first processor that performs the control process, and a second processor that is separate from the first processor and is capable of performing the same control as the first processor; and
the control system further comprises a switch which switches the control process of the first processor to the control process of the second processor if the judgment circuitry judges that abnormality has occurred.

9. The control system according to claim 8 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

10. The control system according to claim 1 , wherein
the at least one processor comprises a plurality of processors,
the control system sets priorities for the plurality of processors, and
acquires the execution order of the plurality of steps of the calculation process for calculating the control value for the control process of a processor having a highest priority among the plurality of processors, and the output values in these steps of the calculation process.

11. The control system according to claim 10 , wherein
the control device is provided in a vehicle, and
the control system sets the priorities for the plurality of processors based on an operation state of the vehicle.

12. The control system according to claim 11 , wherein
the control device is provided in the vehicle, and
the control system sets the priorities for the plurality of processors based on an operation state of the vehicle.

13. The control system according to claim 12 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

14. The control system according to claim 11 , wherein, when abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

15. The control system according to claim 10 , wherein
the control device is provided in a vehicle, and
the control system sets the priorities for the plurality of processors based on a surrounding situation of the vehicle.

16. The control system according to claim 15 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

17. The control system according to claim 10 , wherein, when the abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

18. The control system according to claim 1 , wherein:
when abnormality has occurred, the at least one processor specifies an abnormality range of the execution order of the calculation process stored in the storage.

19. The control system according to claim 18 , wherein
the storage stores the execution-case information, and
the at least one processor detects a part including difference between the execution-case information and the normal-case information, in the abnormality range.

20. The control system according to claim 19 , wherein:
the at least one processor comprises a first processor that performs the control process, and a second processor that is separate from the first processor and capable of performing the same control as the first processor;
the control system further comprises a switch which switches the control process of the first processor to the control process of the second processor if the judgment circuitry judges that abnormality has occurred; and
the part including the difference is rewritten into the normal-case information, after the switch switches the control process of the first processor to the control process of the second processor.

21. The control system according to claim 20 , further comprising a display screen which display information about the abnormality and a result of rewriting the part including the difference into the normal-case information.

Assignees

• Mitsubishi Electric Corp

Inventors

• Ikegashira Toshiki

Classifications

• B60W50/035 Primary

  Bringing the control units into a predefined state, e.g. giving priority to particular actuators · CPC title

• B60W50/045

  Monitoring control system parameters · CPC title

• G06F21/552 Primary

  involving long-term monitoring or reporting · CPC title

• G06F21/554

  involving event detection and direct action · CPC title