Abstract: An update detail verification system has: an update information input unit to which update information of a control system is inputted; an update information analysis unit that analyzes the update information; a verification information storage unit in which verification information concerning verification to be performed on detail of update is stored; an update and verification detail setting unit that sets detail of update to be executed on the control system and detail of verification to be executed on the update, among the result of analysis and the verification information; an update and verification execution time estimation unit that estimates an execution time required for executing the update and verification; and an execution feasibility determination unit that, by making a comparison between the estimated execution time and a predetermined limited time, determines whether or not the execution of update and verification can be completed within the limited time.

Abstract: Conventional security measures are generally intended for an IT system, and it has been difficult to satisfy a real-time property and availability requested to a control system. Furthermore, since a time-division type time slot communication method is not taken into consideration, such time slot communication has problems in efficient utilization of computer resources and decrease in availability. In order to solve the above-described problems, the present invention specifies a time slot from characteristics of a communication packet received by a reception unit 133 by using a time slot characteristic storage unit 130, and selects, in accordance with the specified time slot, an inspection pattern stored in an inspection pattern storage unit 136 by using an inspection pattern selection unit 131.

Abstract: A safety management system for recognizing surrounding conditions and transmitting first surrounding condition data, and for respectively indicating safety actions to a first autonomous traveling machine that autonomously travels on a given first travel route on the basis of the first surrounding condition data and to a second autonomous traveling machine that autonomously travels on a given second travel route. An extraction unit sets, on the second travel route, a verification point where the second autonomous traveling machine can be recognized by the first autonomous traveling machine, and extracts an operation state of the second autonomous traveling machine at the verification point from the first surrounding condition data. A verification unit compares an operation state transmitted from the second autonomous traveling machine at the verification point and the operation state extracted by the extraction unit to verify the soundness of control in the second autonomous traveling machine.

Abstract: Conventional security measures are generally intended for an IT system, and it has been difficult to satisfy a real-time property and availability requested to a control system. Furthermore, since a time-division type time slot communication method is not taken into consideration, such time slot communication has problems in efficient utilization of computer resources and decrease in availability. In order to solve the above-described problems, the present invention specifies a time slot from characteristics of a communication packet received by a reception unit 133 by using a time slot characteristic storage unit 130, and selects, in accordance with the specified time slot, an inspection pattern stored in an inspection pattern storage unit 136 by using an inspection pattern selection unit 131.

Abstract: There is provided a technology capable of synchronizing a plurality of timers with a simple circuit configuration in an electronic control unit that controls a vehicle. An electronic control unit according to the present invention concatenates a second timer value as the most significant bit of a first timer value reset by a synchronization signal, and counts up the second timer value by the synchronization signal.

Abstract: The present invention provides an electronic controller and the like capable of identifying the order of communication apparatuses connected to a bus while minimizing manufacturing cost. In the present invention, bus wiring 2 has one end connected to a port 111 and the other end connected to a port 112. A plurality of lower ECUs 301 to 304 are connected to the bus wiring 2. A current sensor CS measures current Is1 flowing through the port 111 and current Is2 flowing through the port 112 by applying current to the bus wiring 2 from each of the plurality of lower ECUs 301 to 304. The higher controller 12 identifies the order of the plurality of lower ECUs 301 to 304 on the bus wiring 2 on the basis of the current Is1 and the current Is2 which are measured for each of the plurality of lower ECUs 301 to 304.

Abstract: There is provided a technology capable of synchronizing a plurality of timers with a simple circuit configuration in an electronic control unit that controls a vehicle. An electronic control unit according to the present invention concatenates a second timer value as the most significant bit of a first timer value reset by a synchronization signal, and counts up the second timer value by the synchronization signal.

Abstract: Provided is a method of detecting and preventing soft errors without performing multiplexing. As a result, it is possible to improve reliability of a device while suppressing an increase in mounting cost and reduction in operation speed accompanied with it. A diagnosis system includes an initial parameter generation unit which generates a plurality of initial parameters predicted on the basis of an external input; an operation unit which has a plurality of operators operating optimal solutions to the initial parameters by using an evaluation function describing a control object; and a diagnosis unit which diagnoses the operation unit on the basis of an output of the operation unit. When an optimal solution candidate giving an evaluation value deviating from a value taken by each evaluation value by a constant threshold or more among evaluation values corresponding to the optimal solutions to the initial parameters is found, the diagnosis unit diagnoses an error of the operation unit.

Abstract: The present invention provides an electronic controller and the like capable of identifying the order of communication apparatuses connected to a bus while minimizing manufacturing cost. In the present invention, bus wiring 2 has one end connected to a port 111 and the other end connected to a port 112. A plurality of lower ECUs 301 to 304 are connected to the bus wiring 2. A current sensor CS measures current Is1 flowing through the port 111 and current Is2 flowing through the port 112 by applying current to the bus wiring 2 from each of the plurality of lower ECUs 301 to 304. The higher controller 12 identifies the order of the plurality of lower ECUs 301 to 304 on the bus wiring 2 on the basis of the current Is1 and the current Is2 which are measured for each of the plurality of lower ECUs 301 to 304.

Abstract: Provided is a method of detecting and preventing soft errors without performing multiplexing. As a result, it is possible to improve reliability of a device while suppressing an increase in mounting cost and reduction in operation speed accompanied with it. A diagnosis system includes an initial parameter generation unit which generates a plurality of initial parameters predicted on the basis of an external input; an operation unit which has a plurality of operators operating optimal solutions to the initial parameters by using an evaluation function describing a control object; and a diagnosis unit which diagnoses the operation unit on the basis of an output of the operation unit. When an optimal solution candidate giving an evaluation value deviating from a value taken by each evaluation value by a constant threshold or more among evaluation values corresponding to the optimal solutions to the initial parameters is found, the diagnosis unit diagnoses an error of the operation unit.

Abstract: Even with a large ripple voltage superposed on a voltage of a battery cell, the voltage of the battery cell can be measured accurately. In a battery monitoring device, a supply circuit, based on a reference voltage inputted from an assembled battery, generates a driving voltage for driving each of switching elements, of a selection circuit and supplies the driving voltage to the selection circuit. The reference voltage is inputted from the assembled battery to the supply circuit via a detecting filter circuit. As a result, a time constant of a route through which the reference voltage is inputted from the assembled battery to the supply circuit is approximately equal to time constants of detecting filter circuits.

Abstract: A power supply startup system activates a power supply of a device provided with a battery or the like at high speed by a wireless signal while suppressing current consumption on standby. The power supply startup system includes a battery, a device supplied with a power from the battery, and a controller which performs wireless communication with the device. The device includes a power supply section which generates a power supply from the battery, a startup section which receives a wireless startup signal transmitted by the controller and outputs a startup signal to the power supply section, a control section which controls the power supply section and the startup section, and a wireless communication section which performs wireless communication with the controller. The wireless startup signal includes at least two signal regions of a first stage and a second stage.

Abstract: The purpose of the present invention is to provide an electronic control device including an integratable protection circuit that is capable of protecting an internal circuit, a sensor, etc., against both of surge voltage application and battery connection abnormality. The electronic control device includes an input terminal connectable to an external sensor and switch, and a power supply wiring and a GND wiring that are utilized to supply power to the internal circuit, wherein protection elements each including a PN junction are connected between the input terminal and the power supply wiring or the GND wiring, and protection resistor are further connected in series between the protection elements and the power supply wiring or the GND wiring.

Abstract: The objective of the present invention is to increase reliability in an electronic control device when speculative execution is performed, by reducing the risk of erroneous control by the electronic control device, said erroneous control being due to speculative execution failures (such as failures to predict a future state or failure to complete a control calculation due to the execution of an advanced control calculation) which are generated when speculative execution is performed using limited hardware resources in an electronic control device having a control period restriction. Therefore, this electronic control device, which performs a calculation in accordance with one or more external inputs, and outputs a calculation result by a prescribed time, has one or more first calculation units that perform a calculation using a current input, and one or more second calculation units that perform a calculation using a prior input that been input at a point in time prior to the current input.

Abstract: In a magnetic-field angle detection device and a rotation angle detection device in which the accuracy of the measured angle is not degraded even if the MR ratio of the tunneling magnetoresistance element is increased. In a magnetic-field-angle measurement apparatus including a magnetic-field-angle detection circuit and a magnetic sensor having a tunneling magnetoresistance element with a pinned magnetic layer, the magnetic-field-angle detection circuit has a power-supply unit that outputs a constant voltage as a bias voltage to the tunneling magnetoresistance element of the magnetic sensor and a current-detection unit that detects an output current of the tunneling magnetoresistance element.

Abstract: Communication distance can be extended in a battery system that transmits states of the battery cells by wireless communication. Each of cell controllers wirelessly transmits measurement result of states of battery cells in cell groups to a battery controller, by using an electric power supplied from the battery cells in the cell groups. The battery controller continuously transmits unmodulated carrier wave to each of the cell controllers. Each of the cell controllers changes an impedance for the unmodulated carrier wave transmitted from the battery controller at a predetermined timing in dependence on the measurement result of the states of the battery cells in the cell groups. Due to this, the measurement result of the states of the battery cells in the cell groups is wirelessly transmitted to the battery controller.

Abstract: An electronic control device having an input processing circuit capable of arbitrarily connecting one or both of a pull-up resistor and a pull-down resistor to an input signal from outside and capable of arbitrarily setting a resistance value of the pull-up resistor and/or the pull-down resistor connected, to diagnose whether the resistance value of the pull-up/pull-down resistor is a designed value. The input processing circuit has a unit that diagnoses whether the resistance value of the pull-up resistor and/or the pull-down resistor is within an expected range. The pull-down resistor is connected to the pull-up resistor when the resistance value of the pull-up resistor is to be diagnosed, the pull-up resistor is connected to the pull-down resistor when the resistance value of the pull-down resistor is to be diagnosed, and the resistance value is diagnosed based on the voltage divided by both the pull-up resistor and the pull-down resistor.

Abstract: Even with a large ripple voltage superposed on a voltage of a battery cell, the voltage of the battery cell can be measured accurately. In a battery monitoring device, a supply circuit, based on a reference voltage inputted from an assembled battery, generates a driving voltage for driving each of switching elements, of a selection circuit and supplies the driving voltage to the selection circuit. The reference voltage is inputted from the assembled battery to the supply circuit via a detecting filter circuit. As a result, a time constant of a route through which the reference voltage is inputted from the assembled battery to the supply circuit is approximately equal to time constants of detecting filter circuits.

Abstract: A battery pack includes a plurality of battery units mutually connected in parallel, each including a cell group in which one or two or more secondary cells are connected in series, and a first current control element that is connected in series with this cell group, a first control means that controls the charging/discharging current for each battery unit by controlling the operation of the first current control element included in each of the battery unit; a voltage measurement means that measures the voltage of the cell group or cells included in each of the battery unit, and a diagnosis means that diagnoses a deterioration level or a fault of each battery unit on the basis of the voltage of the cell group or cells measured by the voltage measurement means.

Abstract: A power supply startup system activates a power supply of a device provided with a battery or the like at high speed by a wireless signal while suppressing current consumption on standby. The power supply startup system includes a battery, a device supplied with a power from the battery, and a controller which performs wireless communication with the device. The device includes a power supply section which generates a power supply from the battery, a startup section which receives a wireless startup signal transmitted by the controller and outputs a startup signal to the power supply section, a control section which controls the power supply section and the startup section, and a wireless communication section which performs wireless communication with the controller. The wireless startup signal includes at least two signal regions of a first stage and a second stage.