Method for monitoring an apparatus connected to a communication channel

• US 9,817,741 B2
• Filed: 08/28/2013
• Issued: 11/14/2017
• Est. Priority Date: 09/01/2012
• Status: Active Grant

• Current Assignee: Volkswagen AG
• Original Assignee: Volkswagen AG
• Inventors: Mcke, Maurice
• Primary Examiner(s): Park, Ilwoo
• Application Number:
  US14/424,784
• Publication Number:
  US 20150220414A1
• Time in Patent Office: 1,539 Days
• Field of Search: None
• CPC Class Codes: G06F 11/0739 in a data processing system embedded in automotive or aircraft systems
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/0766 Error or fault reporting or storing
• CPC Class Codes: G06F 11/3065 Monitoring arrangements determined by the means or processing involved in reporting the monitored data error or fault reporting or logging G06F11/0766
• CPC Class Codes: H04L 12/40006 Architecture of a communication node current supply arrangements H04L12/10; intermediate storage or scheduling H04L49/90
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route

Abstract

Method for monitoring an apparatus connected to a communication channel wherein the method is connected to a communication channel in a vehicle. When an interval of time between two messages that are output by the apparatus is shorter than or the same as a determined period, the method determines is the apparatus is in a correct state. The apparatus can output a monitoring sign-out message to the communication channel. When a message recently output by the apparatus includes the monitoring sign-out message, it is determined that the apparatus is in a correct state.

Claims

1. A method for monitoring operation of an apparatus connected to a vehicle communication channel in a vehicle for failure of the apparatus, the method comprising:

determining, by a monitoring apparatus, that the apparatus is in an operating state based on determining an interval of time between two messages output by the apparatus to the vehicle communication channel is shorter than or the same as a particular time period;

receiving, at the monitoring apparatus, a monitoring logoff message output by, the apparatus onto the vehicle communication channel;

determining, by the monitoring apparatus, that the apparatus is in an operating state in response to receipt of the monitoring logoff message as a most recently received message output by the apparatus onto the vehicle communication channel;

excluding, by the monitoring apparatus, the apparatus that output the monitoring logoff message from monitoring until the apparatus outputs a further message onto the vehicle communication channel to reduce a volume of communication on the vehicle communication channel; and

determining, by the monitoring apparatus, that the apparatus is in a failed state in response to the message most recently output by the apparatus not comprising the monitoring logoff message and more time than the particular time period having elapsed since the output of the message most recently output by the apparatus onto the vehicle communication channel,

wherein the determination of the state of the apparatus is based on the message most recently output by the apparatus onto the vehicle communication channel and also absence of messages received from the apparatus via the vehicle communication channel during the particular time period.

2. The method of claim 1, wherein the particular time period has a value in the range from 20 ms to 2 s.

3. The method of claim 1, wherein the interval of time between two messages output by the apparatus is shorter than the particular time period.

4. The method of claim 1, further comprising transferring the apparatus to a sleep mode subsequently to the step of output of a monitoring logoff message by the apparatus onto the communication channel.

5. The method of claim 1, wherein the communication channel comprises a vehicle data bus.

6. The method of claim 1, wherein the determination of the failed state of the apparatus is based in part on detection of the monitoring log off message as the last message from the apparatus to the communication channel.

7. The vehicle of claim 1, wherein determination of the failed state of the apparatus is based in part on detection of the monitoring log off message as the last message from the apparatus to the communication channel.

8. An apparatus for a vehicle, the apparatus comprising:

an interface for connecting the apparatus to a vehicle communication channel of the vehicle for monitoring for failure of the apparatus; and

a processing unit that outputs a monitoring logoff message onto the vehicle communication channel via the interface to indicate that the apparatus is subsequently intended to be excluded from monitoring until the apparatus outputs a further message onto the vehicle communication channel to reduce a volume of communication on the vehicle communication channel,

wherein the processing unit is further configured to determine that the apparatus is in an operating state based on a determination that an interval of time between two messages output by the apparatus to the vehicle communication channel is shorter than or the same as a particular period,

wherein there is a determination that the apparatus is in a failed state in response to the message most recently output by the apparatus not comprising the monitoring logoff message and more time than the particular time period having elapsed since the output of the message most recently output by the apparatus onto the vehicle communication channel, and

wherein the determination of the state of the apparatus is based on the message most recently output by the apparatus onto the vehicle communication channel and also absence of messages received from the apparatus via the vehicle communication channel during the particular time period.

9. The apparatus of claim 8, wherein the apparatus comprises a comfort controller of the vehicle.

10. The apparatus of claim 8 further comprising a sleep mode, wherein the apparatus is transferred to the sleep mode following output of the monitoring logoff message by the processing unit.

11. The apparatus of claim 8, wherein the determination of the failed state of the apparatus is based in part on detection of the monitoring log off message as the last message from the apparatus to the communication channel.

12. A monitoring apparatus for monitoring for failure of an apparatus connected to a vehicle communication channel in a vehicle, the monitoring apparatus comprising:

an interface for connecting the monitoring apparatus to the communication channel; and

a processing unit which determines that the apparatus is in an operating state based on a determination that an interval of time between two messages output by the apparatus to the vehicle communication channel is shorter than or the same as a particular time period, and that the apparatus is in an operating state when a message most recently output by the apparatus comprises a monitoring logoff message,

wherein the processing unit excludes the apparatus that has output the monitoring logoff message from the monitoring until the apparatus outputs a further message onto the communication channel to reduce a volume of communication on the vehicle communication channel,

wherein there is a determination that the apparatus is in a failed state in response to the message most recently output by the apparatus not comprising the monitoring logoff message and more time than the particular period having elapsed since the output of the message most recently output by the apparatus onto the vehicle communication channel, and

wherein the determination of the state of the apparatus is based on the message most recently output by the apparatus onto the vehicle communication channel and also absence of messages received from the apparatus via the vehicle communication channel during the particular time period.

13. The monitoring apparatus of claim 12, wherein the processing unit determines that the apparatus is in a failed state when the message most recently output by the apparatus does not comprise the monitoring logoff message and more time than the particular period has elapsed since the output of the message most recently output by the apparatus.

14. The monitoring apparatus of claim 12, wherein determination of the failed state of the apparatus is based in part on detection of the monitoring log off message as the last message from the apparatus to the communication channel.

15. A vehicle, comprising:

a vehicle communication channel for connecting apparatuses in the vehicle;

at least one apparatus comprising;

a first interface for connecting the apparatus to the vehicle communication channel of the vehicle; and

a first processing unit that outputs a monitoring logoff message onto the vehicle communication channel via the first interface to indicate that the apparatus is subsequently intended to be excluded from monitoring until the apparatus outputs a further message onto the vehicle communication channel to reduce a volume of communication on the vehicle communication channel; and

a monitoring apparatus for monitoring the at least one apparatus connected to the vehicle communication channel in the vehicle for failure of the at least one apparatus, the monitoring apparatus comprising;

a second interface for connecting the monitoring apparatus to the vehicle communication channel; and

a second processing unit which determines that the at least one apparatus is in an operating state based on a determination that an interval of time between two messages output by the at least one apparatus to the vehicle communication channel is shorter than or the same as a particular time period, and that the at least one apparatus is in the operating state when a message most recently output by the apparatus comprises a monitoring logoff message,

wherein there is a determination that the apparatus is in a failed state in response to the message most recently output by the apparatus not comprising the monitoring logoff message and more time than the particular time period having elapsed since the output of the message most recently output by the apparatus onto the vehicle communication channel, and

wherein the determination of the state of the apparatus is based on the message most recently output by the apparatus onto the vehicle communication channel and also absence of messages received from the apparatus via the vehicle communication channel during the particular time period.