Vehicle control device

Patent metadata

Field	Value
Publication number	US-2016304040-A1
Application number	US-201414913631-A
Country	US
Kind code	A1
Filing date	Jun 16, 2014
Priority date	Aug 22, 2013
Publication date	Oct 20, 2016
Grant date	—

Abstract

The purpose is to suppress priority degree reversal by executing control software with an appropriate execution priority in accordance with a safety standard in a vehicle control device that executes a plurality of control software having different safety standards. A vehicle control device according to the present invention is provided with an execution waiting job list retaining a list of jobs waiting for execution by a processor. A request for calling higher safety software from lower safety software is inserted at a position in the execution waiting job list in accordance with the execution priority of the lower safety software.

First claim

1 . A vehicle control device comprising:
a storage unit that stores a first program describing an operation for controlling a vehicle, and that stores a second program describing an operation for controlling the vehicle with a safety level lower than that of the operation described in the first program; a processor that executes the first program and the second program; a priority controller that controls a priority when the processor executes the first program and a priority when the processor executes the second program; and an execution waiting job list that describes a list of jobs waiting for being executed by the processor, wherein the processor is configured to perform, when executing a process described in the first program, an interruption process that moves into an operational mode with a priority higher than that of when executing a process described in the second program, wherein the execution waiting job list describes the list of jobs in descending order of priority at which the processor executes the job, wherein the priority controller receives, from the second program, a request to call the first program, wherein the priority controller inserts a job to call the first program at a position in the execution waiting job list corresponding to a priority designated by the second program when the second program calls the first program, and wherein the processor executes a job included in the list of jobs in order of the priority described in the execution waiting job list.

2 . The vehicle control device according to claim 1 ,
wherein the vehicle control device further comprises: a validity checker that checks whether a request from the second program to call the first program is valid; and an authentication code table that holds an authentication code that is to be designated when the second program calls the first program, wherein the second program is configured to designate the authentication code when calling the first program, wherein the validity checker checks whether a request from the second program to call the first program is valid by comparing an authentication code designated by the second program when calling the first program with an authentication code stored in the authentication code table, and wherein the validity checker allows the call if the request is valid and denies the call if the request is not valid.

3 . The vehicle control device according to claim 2 ,
wherein the vehicle control device further comprises: an interruption controller that performs an interruption control for jobs executed by the processor; and an interruption register that stores an identifier of job that is to be executed by the processor by interruption according to an instruction from the interruption controller, wherein the priority controller stores an identifier of job included in the list of jobs into the interruption register according to order of the priority described in the execution waiting job list, wherein if the job stored in the interruption register is a job to execute the first program, the interruption controller outputs an interruption instruction to the processor to execute a job corresponding to the identifier of job, and wherein the processor executes a job according to the interruption instruction outputted by the interruption controller, thereby executing a job included in the list of jobs according to order of the priority described in the execution waiting job list.

4 . The vehicle control device according to claim 2 ,
wherein the vehicle control device further comprises an interruption controller that performs an interruption control for jobs executed by the processor, wherein if a job described in the execution waiting job list is a job to execute the first program, the priority controller requests the interruption controller to launch a job included in the list of jobs by interruption according to order of the priority described in the execution waiting job list, wherein the interruption controller outputs an interruption instruction to the processor to execute a job corresponding to the identifier of job designated by the priority controller, and wherein the processor executes a job according to the interruption instruction outputted by the interruption controller, thereby executing a job included in the list of jobs according to order of the priority described in the execution waiting job list.

5 . The vehicle control device according to claim 2 ,
wherein the vehicle control device further comprises a result holder that holds a check result by the validity checker, and wherein the result holder holds, along with the check result, information indicating a time sequence of the check result.

6 . The vehicle control device according to claim 1 ,
wherein the vehicle control device further comprises a memory protector that detects a situation where the second program calls the first program without passing through the priority controller, and that saves a log describing a content of the request.

Assignees

• Hitachi Automotive Systems Ltd

Inventors

• Narisawa Fumio
• TSUKIDATE Tsunamichi

Classifications

• G06F9/4881 Primary

  Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues · CPC title

• B60R16/0231 Primary

  Circuits relating to the driving or the functioning of the vehicle (monitoring tyres B60C23/00; indicating overspeed B60K31/00; for dash boards B60K37/00, B60Q3/10; for indicating emergencies B60Q1/52; brake control systems B60T; registering or indicating the working of vehicles G07C5/00; measuring distance G01C, e.g. combinations of speed and distance G01C23/00; engine indicators G01L; measuring speed or acceleration G01P) · CPC title

• G05B15/02

  electric · CPC title

• G06F9/4831

  with variable priority · CPC title

• G06F9/524

  Deadlock detection or avoidance · CPC title