Abstract: A vehicle includes a controller area network (CAN) and a plurality of a controllers in communication with each other via the CAN, wherein each controller of the plurality of controllers is configured to time-stamp messages transmitted via the CAN using a vehicle-wide synchronized clock, determine a worst-case transmission delay via the CAN based on the time-stamps for messages received from other controllers of the plurality of controllers, and based on the worse-case transmission delay, set a dynamic recovery timer for a malfunctioning controller of the plurality of controllers to recover after its malfunction, wherein the dynamic recovery timer prevents a particular controller that was malfunctioning but has since recovered from being incorrectly designated as a malfunctioning controller in need of service.

Abstract: A vehicle includes a controller area network (CAN) and a plurality of a controllers in communication with each other via the CAN, wherein each controller of the plurality of controllers is configured to time-stamp messages transmitted via the CAN using a vehicle-wide synchronized clock, determine a worst-case transmission delay via the CAN based on the time-stamps for messages received from other controllers of the plurality of controllers, and based on the worse-case transmission delay, set a dynamic recovery timer for a malfunctioning controller of the plurality of controllers to recover after its malfunction, wherein the dynamic recovery timer prevents a particular controller that was malfunctioning but has since recovered from being incorrectly designated as a malfunctioning controller in need of service.