Systems and methods for ECU task reconfiguration

• US 8,452,465 B1
• Filed: 05/09/2012
• Issued: 05/28/2013
• Est. Priority Date: 03/30/2012
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Sinha, Purnendu, Fuhrman, Thomas E.
• Primary Examiner(s): Marc, McDieunel
• Application Number:
  US13/467,613
• Time in Patent Office: 384 Days
• Field of Search: 701/2, 701/31.4, 365/63, 365/189.08, 365/203, 365/230.05, 365/233.17, 375/222, 713/2, 713/100, 714/3, 714/10, 370/465, 700/300, 700/277, 702/119, 703/27, 439/188
• US Class Current: 701/2
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G06F 11/0796 Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
• CPC Class Codes: G06F 11/143 with loss of software functionality
• CPC Class Codes: G06F 11/203 using migration
• CPC Class Codes: G06F 11/2035 without idle spare hardware

Abstract

Systems and methods for reconfiguring ECU tasks for ensuring that a vehicle is operational upon failure of a task or an ECU. A first on-board reconfiguration strategy is generated and executed by an on-board unit of the vehicle to bring the vehicle to a safe state and a second off-line reconfiguration strategy is generated by a remote center unit and then executed by the on-board unit.

Claims

1. A method, for reconfiguring a task initially assigned to a first electronic control unit (ECU) of a vehicle, comprising:

at an on-board unit on the vehicle in communication with the ECU;

detecting failure of the task;

generating a first reconfiguration strategy in response to detecting the failure, the first reconfiguration strategy including a reassignment of the task to a second ECU of the vehicle;

executing, by a processor, the first reconfiguration strategy;

gathering health data associated with at least the first ECU;

sending the health data to a remote unit that is separate from the vehicle;

receiving a second reconfiguration strategy from the remote unit, the second reconfiguration strategy being generated as a function of the health data, fault models, and system models; and

executing, by the processor, the second reconfiguration strategy.

2. The method of claim 1, wherein generating the first reconfiguration strategy includes selecting from a set of predetermined task reconfiguration strategies.

3. The method of claim 2, wherein detecting failure of the task is accomplished by detecting failure of the first ECU and selecting from the set of predetermined task reconfiguration strategies is performed as a function of the first ECU.

4. The method of claim 1, wherein the first reconfiguration strategy is generated as a function of (i) utilization data, concerning at least one of the first ECU and the second ECU, and (ii) utilization data concerning the failed task.

5. The method of claim 1, wherein detecting failure of the task is accomplished by detecting failure of the first ECU.

6. The method of claim 1, wherein the second reconfiguration strategy includes reconfiguration options that are ordered by at least one of reliability and availability.

7. An on-board unit of a reconfiguration system, the on-board unit being configured for use on a vehicle, the on-board unit comprising:

a processor; and

a computer-readable medium, in communication with the processor, comprising applications that, when executed by the processor, cause the processor to perform acts including;

detecting failure of a task initially assigned to a first electronic control unit (ECU) of the vehicle;

generating a first reconfiguration strategy in response to detecting the failure, the first reconfiguration strategy including a reassignment of the task to a second ECU of the vehicle;

executing the first reconfiguration strategy;

gathering health data associated with at least the first ECU;

sending the health data to a remote unit that is separate from the vehicle;

receiving a second reconfiguration strategy from the remote unit, the second reconfiguration strategy being generated as a function of the health data, fault models, and system models; and

executing the second reconfiguration strategy.

8. The on-board unit of claim 7, wherein generating the first reconfiguration strategy includes selecting from a set of predetermined task reconfiguration strategies.

9. The on-board unit of claim 8, wherein detecting failure of the task is accomplished by detecting failure of the first ECU and selecting from the set of predetermined task reconfiguration strategies is performed as a function of the first ECU.

10. The on-board unit of claim 9, wherein a primary copy of a task is configured to be executed on the first ECU during normal operation and a secondary copy of the task is mapped to be on standby on the second ECU.

11. The on-board unit of claim 10, wherein selection of a reconfiguration strategy invokes the secondary copy of the task on the second ECU.

12. The on-board unit of claim 7, wherein the first reconfiguration strategy is generated as a function of (i) utilization data, concerning at least one of the first ECU and the second ECU, and (ii) utilization data concerning the failed task.

13. The on-board unit of claim 7, wherein detecting failure of the task is accomplished by detecting failure of the first ECU.

14. The on-board unit of claim 7, wherein the second reconfiguration strategy includes reconfiguration options that are ordered by at least one of reliability and availability.

15. A reconfiguration system, comprising:

an on-board unit configured for use on a vehicle, comprising;

a processor; and

a computer-readable medium comprising applications that, when executed by the processor, cause the processor to perform acts including;

detecting failure of a task initially assigned to a first electronic control unit (ECU) of the vehicle;

generating a first reconfiguration strategy in response to detecting the failure, the first reconfiguration strategy including a reassignment of the task to a second ECU of the vehicle;

executing the first reconfiguration strategy;

gathering health data associated with at least the first ECU;

sending the health data to a remote unit;

receiving a second reconfiguration strategy from the remote unit; and

executing the second reconfiguration strategy; and

a remote unit that is configured to be separate from the vehicle, comprising;

a processor; and

a computer-readable medium comprising applications that, when executed by the processor, cause the processor to perform acts including;

generating the second reconfiguration strategy as a function of the health data, fault models, and system models.

16. The reconfiguration system of claim 15, wherein generating the first reconfiguration strategy includes selecting from a set of predetermined task reconfiguration strategies.

17. The reconfiguration system of claim 16, wherein detecting failure of the task is accomplished by detecting failure of the first ECU and selecting from the set of predetermined task reconfiguration strategies is performed as a function of the first ECU.

18. The reconfiguration system of claim 15, wherein the first reconfiguration strategy is generated as a function of (i) utilization data, concerning at least one of the first ECU and the second ECU, and (ii) utilization data concerning the failed task.

19. The reconfiguration system of claim 15, wherein the second reconfiguration strategy includes reconfiguration options that are ordered by at least one of reliability and availability.

20. The reconfiguration system of claim 15, wherein generating the second reconfiguration strategy includes:

determining a root cause of failure as a function of the health data and the fault models; and

generating the second reconfiguration strategy as a function of the system models and the root cause of failure.