Fault detection and mitigation for in-vehicle LAN network management

• US 8,665,700 B2
• Filed: 02/06/2012
• Issued: 03/04/2014
• Est. Priority Date: 02/06/2012
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Jiang, Shengbing, Schultz, Katrina M., Orlando, Kenneth P
• Primary Examiner(s): Masur, Paul H
• Assistant Examiner(s): PHILLIPS, MICHAEL K
• Application Number:
  US13/366,453
• Publication Number:
  US 20130201817A1
• Time in Patent Office: 757 Days
• Field of Search: 370/216, 370/217, 370/218, 370/250, 370/221, 370/222, 370/223, 370/224, 370/253, 701/1, 701/36, 701/32.7, 701/31.7, 701/29.1
• US Class Current: 370/216
• CPC Class Codes: H04L 12/40039 Details regarding the setting of the power status of a node according to activity on the bus
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/0659 by isolating or reconfiguring faulty entities
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities

Abstract

A method of detecting and mitigating an unintended active state of an in-vehicle communication network. The in-vehicle communication network includes a plurality of electronic control units (ECUs) communicating over a controller area network bus system. Each ECU includes both transmitting and receiving capabilities, and is configured with a communication protocol that provides guidelines for exchanging messages with other ECUs within the communication system. Each ECU enters a communication kernel active state for communicating on the bus. Virtual networks within the communication system are identified. Each virtual network includes a collection of signals involving respective ECUs whose transmission and reception are started and stopped collectively as a unit. Each respective virtual network that is active by fault is detected. Each faulty active virtual network is deactivated.

Claims

1. A method of detecting and mitigating an unintended active state of an in-vehicle communication network, the in-vehicle communication network including a plurality of electronic control units (ECUs) communicating over a controller area network bus system, each ECU includes both transmitting and receiving capabilities, and is configured with a communication protocol that provides guidelines for exchanging messages with other ECUs within the communication system, each ECU entering a communication kernel active state for communicating on the bus, the method comprising the steps of:

(a) identifying virtual networks within the communication system, each virtual network including a collection of signals involving respective ECUs whose transmission and reception are started and stopped collectively as a unit;

(b) detecting an active virtual network;

(c) determining that the virtual network is not a network-activated virtual network;

(d) determining that the active virtual network is not activated by a local ECU;

(e) determining that the active virtual network is not activated by a local application;

(f) identifying that the active virtual network is active by fault in response to each of the determinations in steps (c), (d), and (e); and

(g) deactivating the faulty active virtual network.

2. The method of claim 1 wherein detecting the unintended active virtual network further comprises the step of:

determining that the virtual network is not a shared input activated virtual network.

3. The method of claim 2 wherein detecting the unintended active virtual network further comprises the step of:

determining that a virtual network management frame message is not received for the virtual network during a predetermined period of time.

4. The method of claim 3 wherein the predetermined period of time is measured using a timer, wherein the predetermined period of time is based on a number of times the timer times out.

5. The method of claim 4 wherein the timer is set to 8 seconds.

6. The method of claim 4 wherein the number of time the timer times out is 3.

7. The method of claim 3 wherein in response to determining an intended virtual network, at least two bits are set within the network management module for identifying the activated virtual network, wherein setting at least two bits avoids a false report of virtual network activation due to a single bit flip condition.

8. The method of claim 1 further comprising the step of reporting the faulty active virtual network to an application associated with the active virtual network.

9. A method of detecting and mitigating an unintended active state of an in-vehicle communication network, the in-vehicle communication network including a plurality of electronic control units (ECUs) communicating over a controller area network bus system, each ECU includes both transmitting and receiving capabilities, and is configured with a communication protocol that provides guidelines for exchanging messages with other ECUs within the communication system, each ECU entering a communication kernel active state for communicating on the bus, the method comprising the steps of:

identifying virtual networks within the communication system, each virtual network including a collection of signals involving respective ECUs whose transmission and reception are started and stopped collectively as a unit;

detecting no active virtual networks within the communication network;

detecting an active communication kernel within the communication network; and

deactivating the active communication kernel within the communication network in response to detecting an active communication kernel and detecting no active virtual networks.

10. The method of claim 9 wherein deactivating the active communication kernel is further a function of determining that no virtual network is active within a predetermined period of time while the communication kernel is active.

11. The method of claim 10 wherein the predetermined period of time is measured using a timer, wherein the predetermined period of time is based on a number of times the timer times out.

12. The method of claim 11 wherein the timer function is set to 8 seconds.

13. The method of claim 11 wherein the number of times the timer times out is 6.

14. The method of claim 11 wherein a communication kernel being active while no virtual networks are active is a result of a faulty primary shutdown path, wherein deactivating the active communication kernel is performed utilizing an alternative shutdown path.

15. The method of claim 14 further comprising the step of:

determining whether the application associated with the active communication kernel confirmed shutdown, and wherein an application fault is detected in response to the determining that the alternative shutdown path failed to deactivate the active communication kernel within a second predetermined period of time.

16. The method of claim 15 wherein the second predetermined period of time is based on a number of times that the application associated with the active communication kernel fails to confirm shutdown.

17. The method of claim 16 wherein the active communication kernel is deactivated by the application associated with the active communication kernel in response to no confirmation of a shutdown by the application within the second predetermined period of time, and further in response to a communication system configuration requiring that shutdown is a responsibility of the application.

18. The method of claim 17 wherein the active communication kernel is deactivated by the alternative shutdown path in response to the active communication kernel remaining active after the second predetermined period of time is expired, and in response to a communication system configuration requiring shutdown through the alternative shutdown path.

19. The method of claim 18 wherein a report relating to no confirmed shutdown by the application is provided to the application in response to the system configuration requiring the report be provided to the application.