Abstract: A test case generation apparatus (10) analyzes test target software that is software to execute the process of one step for each input of a value, thereby generating, as a test case, a sequence of values that are input for a test of the software. In that case, an equivalent step checking unit (19) determines that when the value of a state variable after execution of one of a plurality of steps that share the state variable and the value of the state variable after execution of a different step are equal with respect to the state variable, those two steps are equivalent steps. A test case generation unit (20) analyzes the test target software, excluding one of the two steps determined to be the equivalent step by the equivalent step checking unit (19), thereby generating the value to be included in the test case.

Abstract: In a transfer control apparatus (100), each function unit (110) specifies a transfer time and a device ID, and makes a transfer request of device data. A first control unit (111), in response to the transfer request from a request source being any of a plurality of function units (110), transfers the device data between a first area (121) corresponding to the request source, and a second area (122) corresponding to a combination of the transfer time and the device ID specified by the request source. A second control unit (112) transfers, when a second area (122) corresponding to a transfer time being same as a time notified by a timer (113) exists, the device data between that second area (122), and a third area (123) corresponding to the same device ID as that second area (122).

Abstract: If an (i?1)-th test case which is a test case for step 1 to step (i?1) is stored, a generation control unit (130) selects a first generation scheme (M1) which uses the (i?1)-th test case to generate an i-th test case which is a test case for step 1 to step i. A test generation unit (170) generates a test case for executing an i-th step in a state where an internal state at an end of the (i?1) steps caused by execution for the (i?1)-th test case is retained, in accordance with the first generation scheme (M1). The test generation unit (170) generates the i-th test case by joining the (i?1)-th test case and the test case for the i-th step.

Abstract: An equivalence verification unit (130) judges through equivalence verification, for each of corresponding combinations which are each a combination of a function included in pre-change source code and a function included in post-change source code, whether the functions included in the corresponding combination are equivalent to each other. A partial verification judgment unit (150) judges, for each of inequivalent ones of the corresponding combinations, whether the corresponding combination is a partial verification combination including a function where an inequivalent path, in which an inequivalent function is called, and a non-inequivalent path, in which a non-inequivalent function is called, are both included. A partial verification unit (160) judges, for each of the partial verification combinations, whether the functions included in the partial verification combination are partially equivalent to each other by excluding the inequivalent path and performing the equivalence verification.

Abstract: A test case generation apparatus (10) analyzes test target software that is software to execute the process of one step for each input of a value, thereby generating, as a test case, a sequence of values that are input for a test of the software. In that case, an equivalent step checking unit (19) determines that when the value of a state variable after execution of one of a plurality of steps that share the state variable and the value of the state variable after execution of a different step are equal with respect to the state variable, those two steps are equivalent steps. A test case generation unit (20) analyzes the test target software, excluding one of the two steps determined to be the equivalent step by the equivalent step checking unit (19), thereby generating the value to be included in the test case.

Abstract: When data output is requested by an application whose default output setting is set ineffective among a plurality of applications, an output setting updating part (120) updates an output setting of the requesting application from ineffective to effective and updates an output setting of another application which outputs data to the same output destination as the output destination of the requesting application and whose default output setting is set effective, from effective to ineffective. An output control part (160) outputs data of an application whose output setting is effective.

Abstract: A non-equivalence set extraction unit (120) extracts, from a target set list, a non-equivalence set being a target set that does not satisfy a condition that an output of an after-change target function is coincident with an output of a before-change target function when a same input is provided to both of the before-change target function and the after-change target function. A test case selection unit (140) selects, from a plurality of test cases, a test case wherein the before-change target function included in the non-equivalence set is called, as an important test case.

Abstract: An equivalence verification unit (130) judges through equivalence verification, for each of corresponding combinations which are each a combination of a function included in pre-change source code and a function included in post-change source code, whether the functions included in the corresponding combination are equivalent to each other. A partial verification judgment unit (150) judges, for each of inequivalent ones of the corresponding combinations, whether the corresponding combination is a partial verification combination including a function where an inequivalent path, in which an inequivalent function is called, and a non-inequivalent path, in which a non-inequivalent function is called, are both included. A partial verification unit (160) judges, for each of the partial verification combinations, whether the functions included in the partial verification combination are partially equivalent to each other by excluding the inequivalent path and performing the equivalence verification.

Abstract: In a test device, a communication unit sequentially receives messages partially including a test target signal of a plurality of bits transmitted from an ECU. A judgment unit checks the value of the test target signal included in a message received by the communication unit in a first duration against a first expected value, checks the value of the test target signal included in a message received by the communication unit in a second duration different from the first duration against a second expected value acquired by inverting each bit of the first expected value, and judges a test on the ECU as pass or fail based on both of the check results.

Abstract: A communication unit receives, from a terminal device, installed application information indicating an input/output schedule of input of input information to be used for computation by an installed application program installed in the terminal device and output of a result of computation by the installed application program. A determination unit analyzes the input/output schedule of the installed application program indicated by the installed application information and an input/output schedule of input of input information to be used for computation by a non-installed application program not yet installed in the terminal device and output of a result of computation by the non-installed application program, and determines whether or not the installed application program and the non-installed application program can be executed by the terminal device.

Abstract: A communication unit receives, from a terminal device, installed application information indicating an input/output schedule of input of input information to be used for computation by an installed application program installed in the terminal device and output of a result of computation by the installed application program. A determination unit analyzes the input/output schedule of the installed application program indicated by the installed application information and an input/output schedule of input of input information to be used for computation by a non-installed application program not yet installed in the terminal device and output of a result of computation by the non-installed application program, and determines whether or not the installed application program and the non-installed application program can be executed by the terminal device.

Abstract: When data output is requested by an application whose default output setting is set ineffective among a plurality of applications, an output setting updating part (120) updates an output setting of the requesting application from ineffective to effective and updates an output setting of another application which outputs data to the same output destination as the output destination of the requesting application and whose default output setting is set effective, from effective to ineffective. An output control part (160) outputs data of an application whose output setting is effective.

Abstract: In a transfer control apparatus (100), each function unit (110) specifies a transfer time and a device ID, and makes a transfer request of device data. A first control unit (111), in response to the transfer request from a request source being any of a plurality of function units (110), transfers the device data between a first area (121) corresponding to the request source, and a second area (122) corresponding to a combination of the transfer time and the device ID specified by the request source. A second control unit (112) transfers, when a second area (122) corresponding to a transfer time being same as a time notified by a timer (113) exists, the device data between that second area (122), and a third area (123) corresponding to the same device ID as that second area (122).

Abstract: Before a communication control device ECU falls into a sleep state or a power-off state, a substitution request is transmitted to an ECU, among substitute candidate devices ECU to ECU, that is determined by a substitute transmission acceptability determining unit as being capable of taking over the communication control device. A substitution-capable processing load quantity, a substitution-capable process importance level, or a failure determination result of each of the ECUs is used as determination criteria when the substitute transmission acceptability determining unit of the ECU determines a substitute device, and the determination is carried out in an order that takes into consideration the process importance level of each of the ECUs during travelling or at a standstill, to prevent failures in a network or abnormal behaviors of a vehicle.

Abstract: Before a communication control device ECU falls into a sleep state or a power-off state, a substitution request is transmitted to an ECU, among substitute candidate devices ECU to ECU, that is determined by a substitute transmission acceptability determining unit as being capable of taking over the communication control device. A substitution-capable processing load quantity, a substitution-capable process importance level, or a failure determination result of each of the ECUs is used as determination criteria when the substitute transmission acceptability determining unit of the ECU determines a substitute device, and the determination is carried out in an order that takes into consideration the process importance level of each of the ECUs during travelling or at a standstill, to prevent failures in a network or abnormal behaviors of a vehicle.

Abstract: Provided is a control system capable of reducing cost while securing reliability of original processing of a microcomputer. An engine control device and a meter control device each store a control amount calculating procedure for calculating a control amount regarding a significant control to be performed on the control target of the engine control device. The engine control device compares a control amount regarding the significant control calculated by the engine control device, and a control amount regarding the significant control calculated by the meter control device, to thereby control the control target of the engine control device based on a result of the comparison.

Abstract: In the control system having plural control devices that are connected to a network, and control objects different from each other, an engine control device, a meter control device, and an AT control device, which are second control devices store a control volume computation procedure for computing the control volume of a pre-determined control among controls made by the engine control device which is a first control device, therein. The engine control device compares the control volume related to the pre-determined control computed by the engine control device with the control volume related to the pre-determined control computed by the meter control device. If a comparison result is different, the engine control device again compares the control volume with the control volume related to the pre-determined control computed by the AT control device, and controls an object to be controlled by the engine control device according to the comparison result.

Abstract: Provided is a control system capable of reducing cost while securing reliability of original processing of a microcomputer. An engine control device and a meter control device each store a control amount calculating procedure for calculating a control amount regarding a significant control to be performed on the control target of the engine control device. The engine control device compares a control amount regarding the significant control calculated by the engine control device, and a control amount regarding the significant control calculated by the meter control device, to thereby control the control target of the engine control device based on a result of the comparison.

Abstract: In the control system having plural control devices that are connected to a network, and control objects different from each other, an engine control device, a meter control device, and an AT control device, which are second control devices store a control volume computation procedure for computing the control volume of a pre-determined control among controls made by the engine control device which is a first control device, therein. The engine control device compares the control volume related to the pre-determined control computed by the engine control device with the control volume related to the pre-determined control computed by the meter control device. If a comparison result is different, the engine control device again compares the control volume with the control volume related to the pre-determined control computed by the AT control device, and controls an object to be controlled by the engine control device according to the comparison result.

Abstract: A transmitter node includes a first data transmission portion that transmits data in a first transmission time slot on a first transmission channel and a second data transmission portion that transmits the same transmission data from the first data transmission portion in a second transmission time slot on a second transmission channel that does not superimpose in time on the first transmission time slot. A receiver node includes a first data reception portion that receives data transmitted from the transmitter node in a first reception time slot superimposing in time on the first transmission time slot on the first transmission channel and a second data reception portion that receives transmission data transmitted from the second data transmission portion in a second reception time slot on the second transmission channel superimposing in time on the second transmission time slot. Data transmission and reception can be thus ensured even at a trouble.