Control device and control method

Patent metadata

Field	Value
Publication number	US-2024106677-A1
Application number	US-202318461583-A
Country	US
Kind code	A1
Filing date	Sep 6, 2023
Priority date	Sep 26, 2022
Publication date	Mar 28, 2024
Grant date	—

Abstract

A control device includes a first circuitry that executes a process for communicating with another device, and a second circuitry that executes a reset of the first circuitry. The first circuitry executes an initial diagnosis which is a self-diagnosis immediately after activation of the first circuitry, and outputs a predetermined signal to the second circuitry when the first circuitry is determined to be normal in the initial diagnosis. The second circuitry prohibits a communication output caused by an operation of the first circuitry to the other device in at least a time period from a start of the reset of the first circuitry to a timing at which the predetermined signal is output from the first circuitry for the first time after the start of the reset. The second circuitry permits the communication output when confirming that the predetermined signal is output.

First claim

What is claimed is:

1 . A control device comprising:
a first circuitry configured to execute a process for communicating with at least another device; and a second circuitry configured to execute a reset of the first circuitry when a predetermined reset condition relating to the first circuitry is satisfied, wherein the first circuitry is further configured to
execute an initial diagnosis, which is a self-diagnosis immediately after activation of the first circuitry, after the reset of the first circuitry by the second circuitry is released, and
output a predetermined signal indicating a normal operation of the first circuitry to the second circuitry when the first circuitry is determined to be normal in the initial diagnosis, and
the second circuitry is further configured to
prohibit a communication output caused by an operation of the first circuitry to the other device in at least a time period from a start of the reset of the first circuitry to a timing at which the predetermined signal is output from the first circuitry for the first time after the start of the reset, and
permit the communication output when confirming that the predetermined signal is output.

2 . The control device according to claim 1 , wherein:
the first circuitry is further configured to
execute periodically an operation diagnosis, which is a self-diagnosis during an operation of the first circuitry, after the first circuitry is determined to be normal in the initial diagnosis, and
output an abnormality notification signal to the second circuitry when the first circuitry is determined to be abnormal in the operation diagnosis, and
the second circuitry is further configured to
monitor whether the abnormality notification signal is output from the first circuitry after permitting the communication output, and
determine that the reset condition is satisfied when the abnormality notification signal is output.

3 . The control device according to claim 1 , wherein:
the first circuitry is further configured not to output the predetermined signal when the first circuitry is detected to be abnormal in the initial diagnosis, and the second circuitry is further configured to reset the first circuitry when the predetermined signal is not output from the first circuitry until a specified time elapses after the release of the reset of the first circuitry.

4 . A method for prohibiting a communication output in a control device including a first circuitry and a second circuitry, the method comprising:
executing an initial diagnosis of the first circuitry which is a self-diagnosis immediately after activation of the first circuitry, outputting a predetermined signal (WD) indicating a normal operation of the first circuitry to the second circuitry when the first circuitry is determined to be normal in the initial diagnosis, prohibiting a communication output caused by an operation of the first circuitry to another device in at least a time period from a start of a reset of the first circuitry to a timing at which the predetermined signal is output from the first circuitry to the second circuitry for the first time after the start of the reset, and permitting the communication output when confirming that the predetermined signal is output.

Assignees

• Denso Corp

Inventors

• Hirano Takahiro

Classifications

• H04L12/40 Primary

  Bus networks · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title

• H04L12/40026 Primary

  Details regarding a bus guardian · CPC title

• H04L2012/40273

  the transportation system being a vehicle · CPC title