Abstract: Image data captured from a traveling vehicle is considered, and it is not possible to reduce the transmission band of the image data. It is assumed that a radar 4 mounted in a traveling vehicle 10 detects a certain distant three-dimensional object at a time T in a direction of a distance d1 [m] and an angle ?1. Since the vehicle 10 travels at a vehicle speed Y [km/h], it is predicted that a camera 3 is capable of capturing the distant three-dimensional object at a time (T+?T) and an angle ?1 or at a distance d2 [m]. Therefore, if a control unit 2 outputs a request to the camera 3 in advance, so as to cut out an image of the angle ?1 or the distance d2 [m] at the time (T+?T), when the time (T+?T) comes, the camera 3 transfers a whole image and a high-resolution image being a cutout image of only a partial image, to the control unit 2.

Abstract: An object of the present invention is to provide a technology that enables second control software to continue processing using a peripheral circuit even in a situation where an abnormality related to first control software occurs. An electronic control device includes a memory (3) that stores the first control software and the second control software, a CPU (1) that executes the first control software and the second control software, and a peripheral circuit (200) used by the first control software and the second control software. The memory further includes a first buffer (313a) and a second buffer (323a). The CPU interrupts at least one of the processing of storing first peripheral transmission information in the first buffer and the processing of transmitting the first peripheral transmission information to the peripheral in a specific situation in which the abnormality related to the first control software occurs.

Abstract: Provided is a vehicle control device capable of executing control processing by utilizing a power saving execution determination unit that determines a shift to or a release from a normal mode to a power saving mode on the basis of a preset power saving condition, and a power saving execution unit that executes power saving control of the CPU by determining a shift to the power saving mode and stops the power saving control of the CPU by determining a release of the power saving mode. Then, the power saving execution determination unit has a plurality of power saving conditions, determines to shift to the power saving mode in a case where all of the plurality of power saving conditions are satisfied, and determines to release the power saving mode in the case of being changed to a state in which some of the power saving conditions are not satisfied.

Abstract: There are provided a vehicle control device and a control method thereof capable of improving safety and reliability with a simple configuration. A vehicle control device 1 that controls a vehicle includes an execution management unit P3 that manages execution of predetermined processing, an execution state recording unit P5 that records a history of execution states of the predetermined processing, and a setting information management unit P4 that manages setting information related to the execution of the predetermined processing. The setting information includes a jitter tolerance which is a tolerance of a jitter. The execution management unit P3 adjusts an execution timing of processing to be adjusted, which is included in the predetermined processing and in which the jitter is generated, based on the jitter tolerance of the processing to be adjusted.

Abstract: To be capable of concurrent execution of a function group not in data conflict by a plurality of cores and to execute a function pair in data conflict in a temporal separation manner. A process barrier 20 includes N?1 checker functions 22 and one limiter function 23, where the number of cores capable of concurrently executing the functions is N (N is an integer equal to or greater than 2), the checker functions 22 determine whether the head entry of a lock-free function queue LFQ1 is either the checker function 22 or the limiter function 23, and repeats reading of the head entry of the lock-free function queue LFQ1 if either, and ends processing if neither, and the limiter function 23 is an empty function ending without performing any processing.

Abstract: In the present invention, when an abnormality occurs in a task, regardless of whether a critical section is being executed, timeout detection is realized by determining whether the critical section (CS) is necessary for the design in a preset task execution time and a certain period of time to distinguish between necessary interrupt disable and abnormal interrupt disable. A vehicle control device includes task execution means for causing a system to execute a task, and interrupt processing means for performing an interrupt process at the time of execution of the task. A maskable interrupt and a non-maskable interrupt that is commanded to execute after the maskable interrupt are included, the maskable interrupt is commanded to execute during an interrupt disable time, and then the non-maskable interrupt is executed.

Abstract: A hypervisor of an embedded device switches CPU resources allocated to each virtual machine. CPU cores are allocated to the respective virtual machines so as to overlap each other by an adjustment margin between the guest OSs for which the number of CPU cores needs to be adjusted. For the CPU cores allocated in an overlapping manner, a CPU time is given to only one OS (the other OS is not operated). When the load between the guest OSs changes, the guest OS/virtual machine to which the CPU time is given is switched. Further, for example, control of allocating a dummy process is performed so that the guest OS to which it is not possible to allocate a CPU time due to switching does not allocate a real process.

Abstract: The present invention makes it possible to reduce the volume of communication data necessary for updating the configuration of a circuit unit of a reconfigurable circuit device. In an vehicle control system 10 including an FPGA 3, the FPGA 3 includes a circuit unit including a reconfigurable circuit and a circuit SRAM that stores configuration information of the circuit unit. A transfer check unit that acquires a difference command regarding a change part of a circuit element in the circuit unit, and a data conversion unit 4 that updates the configuration information based on the difference command are provided. Further, in the vehicle control system 10, a non-volatile memory 6 that stores the configuration information to be stored in the circuit SRAM is further provided. The data conversion unit 4 may update the configuration information stored in the non-volatile memory 6 based on the difference command acquired by the transfer check unit.

Abstract: Provided are a vehicle control device and a computer program capable of simplifying design of state transition. An intermediate layer constituting an ECU divides a state of a lower-layer state machine for each function of a vehicle system in association with the state of the lower-layer state machine, and outputs the state to an upper-layer state machine, a state transition table of the upper-layer state machine includes, as a condition of state transition of the upper-layer state machine, a current state of a lower-layer state machine or a state to transition, and the upper-layer state machine receives the state of the lower-layer state machine input from the intermediate layer, refers to the state transition table, and outputs a signal for controlling the vehicle system.

Abstract: This invention detects deviations from design without hindering the real-time nature of interrupt processing, and assists in analyzing the impact of faults caused by unintentional interrupt processing, with the goal of curbing erroneous detection. In order to resolve this problem, this vehicle control device comprises; a deviation determination unit 129 which determines if execution timing of an execution body has deviated from design settings, and transitions to a monitoring state; and a run-time verification unit 130 which verifies the impact of deviation at timing which differs from that of the interrupt processing.

Abstract: image data captured from a traveling vehicle is considered, and it is not possible to reduce the transmission band of the image data. It is assumed that a radar 4 mounted in a traveling vehicle 10 detects a certain distant three-dimensional object at a time T in a direction of a distance d1 [m] and an angle ?1 . Since the vehicle 10 travels at a vehicle speed Y [km/h], it is predicted that a camera 3 is capable of capturing the distant three-dimensional object at a time (T+?T) and an angle ?1 or at a distance d2 [m]. Therefore, if a control unit 2 outputs a request to the camera 3 in advance, so as to cut out an image of the angle ?1 or the distance d2 [m] at the time (T+?T), when the time (T+?T) comes, the camera 3 transfers a whole image and a high-resolution image being a cutout image of only a partial image, to the control unit 2.

Abstract: The present invention provides a vehicle control device capable of realizing access authority definitions by the number equal to or greater than the number of access control registers provided in a memory protection device. In the vehicle control device according to the present invention, the whole or a part of a storage device that stores the access authority definitions used by the memory protection device to control the access authorities, is allocated fixedly to a memory area in advance and the rest is allocated dynamically.

Abstract: An abnormality related to control of automatic driving of a vehicle can be easily and appropriately diagnosed. In a vehicle control system 1000, a plurality of risk information generation units (CPUs 10A and 10B that execute risk map creation program 112A and 112B) that generates risk map which is used for automatic driving control of a vehicle when the vehicle moves based on sensor information related to an object around the vehicle is provided. Diagnosis units (CPUs 10A and 10B that execute diagnosis (risk map comparison) programs 113A and 113B)) that diagnose whether or not an abnormality occurs in the generated risk information based on a plurality pieces of risk information generated by the plurality of risk information generation units is provided.

Abstract: There are provided a vehicle control device and a control method thereof capable of improving safety and reliability with a simple configuration. A vehicle control device 1 that controls a vehicle includes an execution management unit P3 that manages execution of predetermined processing, an execution state recording unit P5 that records a history of execution states of the predetermined processing, and a setting information management unit P4 that manages setting information related to the execution of the predetermined processing. The setting information includes a jitter tolerance which is a tolerance of a jitter. The execution management unit P3 adjusts an execution timing of processing to be adjusted, which is included in the predetermined processing and in which the jitter is generated, based on the jitter tolerance of the processing to be adjusted.

Abstract: To be capable of concurrent execution of a function group not in data conflict by a plurality of cores and to execute a function pair in data conflict in a temporal separation manner. A process barrier 20 includes N?1 checker functions 22 and one limiter function 23, where the number of cores capable of concurrently executing the functions is N (N is an integer equal to or greater than 2), the checker functions 22 determine whether the head entry of a lock-free function queue LFQ1 is either the checker function 22 or the limiter function 23, and repeats reading of the head entry of the lock-free function queue LFQ1 if either, and ends processing if neither, and the limiter function 23 is an empty function ending without performing any processing.

Abstract: Provided is a vehicle control device capable of reducing a control gap that occurs when a system is restored to a normal state after a malfunction is corrected, thereby achieving smooth driving performance for a user. A vehicle control device according to the present invention has a first travel control mode and a second travel control mode. When in a transitional state from the second travel control mode to the first travel control mode, the vehicle control device calculates and checks a first control parameter used in the first travel control mode, calculates a second control parameter used in the second travel control mode, and uses the second control parameter for traveling control.

Abstract: In the present invention, computational efficiency degradation is suppressed when diagnosing a shared storage area in a vehicle control device in which a plurality of computing units are employed. This vehicle control device suppresses computational efficiency degradation by changing an access destination in a storage device while diagnosing a shared storage area that the storage device has.

Abstract: In the present invention, when an abnormality occurs in a task, regardless of whether a critical section is being executed, timeout detection is realized by determining whether the critical section (CS) is necessary for the design in a preset task execution time and a certain period of time to distinguish between necessary interrupt disable and abnormal interrupt disable. A vehicle control device includes task execution means for causing a system to execute a task, and interrupt processing means for performing an interrupt process at the time of execution of the task. A maskable interrupt and a non-maskable interrupt that is commanded to execute after the maskable interrupt are included, the maskable interrupt is commanded to execute during an interrupt disable time, and then the non-maskable interrupt is executed.

Abstract: The present invention makes it possible to reduce the volume of communication data necessary for updating the configuration of a circuit unit of a reconfigurable circuit device. In an vehicle control system 10 including an FPGA 3, the FPGA 3 includes a circuit unit including a reconfigurable circuit and a circuit SRAM that stores configuration information of the circuit unit. A transfer check unit that acquires a difference command regarding a change part of a circuit element in the circuit unit, and a data conversion unit 4 that updates the configuration information based on the difference command are provided. Further, in the vehicle control system 10, a non-volatile memory 6 that stores the configuration information to be stored in the circuit SRAM is further provided. The data conversion unit 4 may update the configuration information stored in the non-volatile memory 6 based on the difference command acquired by the transfer check unit.

Abstract: Provided is a vehicle control apparatus with which it is possible to allocate programs to multiple cores so as to satisfy a deadline even when software programs having two or more control cycles are intermixed. The vehicle control apparatus pertaining to the present invention allocates tasks to processor cores in consideration of the execution order of the tasks, the execution cycles of the tasks, and the cost of communication between the processor cores.